policy-options commands

configure 
policy-options 
apply-groups reference
apply-groups-exclude reference
as-path named-item 
apply-groups reference
apply-groups-exclude reference
expression policy-as-path-regexp
as-path-group named-item 
apply-groups reference
apply-groups-exclude reference
entry number 
apply-groups reference
apply-groups-exclude reference
expression policy-as-path-regexp
community policy-community-name 
apply-groups reference
apply-groups-exclude reference
expression 
apply-groups reference
apply-groups-exclude reference
exact boolean
expr expression-community
member member-community 
damping named-item 
apply-groups reference
apply-groups-exclude reference
half-life number
max-suppress number
reuse number
suppress number
global-variables 
name policy-var-name 
address (ipv4-address-no-zone | ipv6-address-no-zone)
apply-groups reference
apply-groups-exclude reference
decimal decimal-number
number number
prefix (ipv4-prefix | ipv6-prefix)
value named-item
policy-statement named-item-64 
apply-groups reference
apply-groups-exclude reference
default-action 
action-type keyword
add-paths-send-limit (number | keyword)
admin-tag-policy (param-midstring-64 | string)
advertise-label keyword
aigp-metric 
add (number | string)
set (keyword | number | string)
apply-groups reference
apply-groups-exclude reference
as-path 
add (param-midstring | string)
replace (param-midstring | string)
as-path-prepend 
as-path (number | string | keyword)
repeat (number | string)
bgp-high-priority boolean
bgp-leak boolean
bgp-med 
adjust string
set (keyword | number | string)
bgp-tunnel-metric 
prefer-aigp boolean
prefer-med boolean
value (string | number)
community 
add (param-midstring-64 | string)
apply-groups reference
apply-groups-exclude reference
remove (param-midstring-64 | string)
replace (param-midstring-64 | string)
create-mpls-tunnel boolean
create-udp-tunnel boolean
damping (keyword | param-midstring | string)
dest-class number
egress-statistics boolean
flex-algo (string | number)
ingress-statistics boolean
install-backup-path boolean
local-preference (number | string)
metric 
add (number | string)
set (number | string)
subtract (number | string)
multicast-redirection 
fwd-service string
ip-int-name interface-name
nat-policy (param-midstring | string)
next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
origin (keyword | string)
origin-validation-state (keyword | string)
preference (number | string)
resolve-static boolean
route-table-install boolean
source-class number
sr-label-index 
prefer-igp boolean
value (string | number)
sr-maintenance-policy (param-midstring | string)
sr-return-path-bfd-label (policy-var-name | number)
srv6-locator (param-midstring-64 | string)
srv6-micro-segment-locator (param-midstring-64 | string)
srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
sticky-ecmp boolean
tag (number | string)
type (number | string)
description description
entry number 
action 
action-type keyword
add-paths-send-limit (number | keyword)
admin-tag-policy (param-midstring-64 | string)
advertise-label keyword
aigp-metric 
add (number | string)
set (keyword | number | string)
apply-groups reference
apply-groups-exclude reference
as-path 
add (param-midstring | string)
replace (param-midstring | string)
as-path-prepend 
as-path (number | string | keyword)
repeat (number | string)
bgp-high-priority boolean
bgp-leak boolean
bgp-med 
adjust string
set (keyword | number | string)
bgp-tunnel-metric 
prefer-aigp boolean
prefer-med boolean
value (string | number)
community 
add (param-midstring-64 | string)
apply-groups reference
apply-groups-exclude reference
remove (param-midstring-64 | string)
replace (param-midstring-64 | string)
create-mpls-tunnel boolean
create-udp-tunnel boolean
damping (keyword | param-midstring | string)
dest-class number
egress-statistics boolean
flex-algo (string | number)
forwarding-class 
fc keyword
priority keyword
ingress-statistics boolean
install-backup-path boolean
local-preference (number | string)
metric 
add (number | string)
set (number | string)
subtract (number | string)
multicast-redirection 
fwd-service string
ip-int-name interface-name
nat-policy (param-midstring | string)
next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
origin (keyword | string)
origin-validation-state (keyword | string)
preference (number | string)
resolve-static boolean
route-table-install boolean
source-class number
sr-label-index 
prefer-igp boolean
value (string | number)
sr-maintenance-policy (param-midstring | string)
sr-return-path-bfd-label (policy-var-name | number)
srv6-locator (param-midstring-64 | string)
srv6-micro-segment-locator (param-midstring-64 | string)
srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
sticky-ecmp boolean
tag (number | string)
type (number | string)
apply-groups reference
apply-groups-exclude reference
conditional-expression 
apply-groups reference
apply-groups-exclude reference
route-exists string
description description
from 
aggregate-contributor boolean
apply-groups reference
apply-groups-exclude reference
area ipv4-address
as-path 
group (param-midstring | string)
length 
qualifier keyword
unique boolean
value (number | string)
name (param-midstring | string)
cluster-id 
ip-address ipv4-prefix-with-host-bits
none-cluster-list boolean
color number
community 
count 
qualifier keyword
type keyword
value (number | string)
expression string
name (param-midstring-64 | string)
distinguisher number
endpoint (ipv4-address-no-zone | ipv6-address-no-zone)
evpn-type keyword
external boolean
family keyword
flowspec 
dest (param-midstring | string)
source (param-midstring | string)
group-address (param-midstring | string)
host-ip (param-midstring | string)
interface (named-item | interface-name | interface-name | interface-name)
interface-subnets 
ip-int-name interface-name
service string
level number
local-preference 
qualifier keyword
value (number | string)
metric 
qualifier keyword
value (number | string)
mvpn-type keyword
neighbor 
ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
prefix-list (param-midstring | string)
next-hop 
ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
prefix-list (param-midstring | string)
origin keyword
origin-validation-state keyword
ospf-type number
path-type keyword
policy (string | string)
policy-variables 
name policy-var-name 
address (ipv4-address-no-zone | ipv6-address-no-zone)
apply-groups reference
apply-groups-exclude reference
decimal decimal-number
number number
prefix (ipv4-prefix | ipv6-prefix)
value named-item
prefix-list (param-midstring-64 | string)
prefix-list-override string 
apply-groups reference
apply-groups-exclude reference
end-length number
start-length number
through-length number
type keyword
protocol 
instance (keyword | number)
name keyword
route-distinguisher-list (param-midstring-64 | string)
source-address 
ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
prefix-list (param-midstring | string)
srv6-sid-prefix (policy-var-name | ipv6-unicast-prefix)
srv6-tlv keyword
state keyword
tag (number | keyword)
to 
apply-groups reference
apply-groups-exclude reference
level number
neighbor 
ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
prefix-list (param-midstring | string)
prefix-list (param-midstring-64 | string)
protocol 
instance (keyword | number)
name keyword
entry-type keyword
named-entry named-item-255 
action 
action-type keyword
add-paths-send-limit (number | keyword)
admin-tag-policy (param-midstring-64 | string)
advertise-label keyword
aigp-metric 
add (number | string)
set (keyword | number | string)
apply-groups reference
apply-groups-exclude reference
as-path 
add (param-midstring | string)
replace (param-midstring | string)
as-path-prepend 
as-path (number | string | keyword)
repeat (number | string)
bgp-high-priority boolean
bgp-leak boolean
bgp-med 
adjust string
set (keyword | number | string)
bgp-tunnel-metric 
prefer-aigp boolean
prefer-med boolean
value (string | number)
community 
add (param-midstring-64 | string)
apply-groups reference
apply-groups-exclude reference
remove (param-midstring-64 | string)
replace (param-midstring-64 | string)
create-mpls-tunnel boolean
create-udp-tunnel boolean
damping (keyword | param-midstring | string)
dest-class number
egress-statistics boolean
flex-algo (string | number)
forwarding-class 
fc keyword
priority keyword
ingress-statistics boolean
install-backup-path boolean
local-preference (number | string)
metric 
add (number | string)
set (number | string)
subtract (number | string)
multicast-redirection 
fwd-service string
ip-int-name interface-name
nat-policy (param-midstring | string)
next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
origin (keyword | string)
origin-validation-state (keyword | string)
preference (number | string)
resolve-static boolean
route-table-install boolean
source-class number
sr-label-index 
prefer-igp boolean
value (string | number)
sr-maintenance-policy (param-midstring | string)
sr-return-path-bfd-label (policy-var-name | number)
srv6-locator (param-midstring-64 | string)
srv6-micro-segment-locator (param-midstring-64 | string)
srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
sticky-ecmp boolean
tag (number | string)
type (number | string)
apply-groups reference
apply-groups-exclude reference
conditional-expression 
apply-groups reference
apply-groups-exclude reference
route-exists string
description description
from 
aggregate-contributor boolean
apply-groups reference
apply-groups-exclude reference
area ipv4-address
as-path 
group (param-midstring | string)
length 
qualifier keyword
unique boolean
value (number | string)
name (param-midstring | string)
cluster-id 
ip-address ipv4-prefix-with-host-bits
none-cluster-list boolean
color number
community 
count 
qualifier keyword
type keyword
value (number | string)
expression string
name (param-midstring-64 | string)
distinguisher number
endpoint (ipv4-address-no-zone | ipv6-address-no-zone)
evpn-type keyword
external boolean
family keyword
flowspec 
dest (param-midstring | string)
source (param-midstring | string)
group-address (param-midstring | string)
host-ip (param-midstring | string)
interface (named-item | interface-name | interface-name | interface-name)
interface-subnets 
ip-int-name interface-name
service string
level number
local-preference 
qualifier keyword
value (number | string)
metric 
qualifier keyword
value (number | string)
mvpn-type keyword
neighbor 
ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
prefix-list (param-midstring | string)
next-hop 
ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
prefix-list (param-midstring | string)
origin keyword
origin-validation-state keyword
ospf-type number
path-type keyword
policy (string | string)
policy-variables 
name policy-var-name 
address (ipv4-address-no-zone | ipv6-address-no-zone)
apply-groups reference
apply-groups-exclude reference
decimal decimal-number
number number
prefix (ipv4-prefix | ipv6-prefix)
value named-item
prefix-list (param-midstring-64 | string)
prefix-list-override string 
apply-groups reference
apply-groups-exclude reference
end-length number
start-length number
through-length number
type keyword
protocol 
instance (keyword | number)
name keyword
route-distinguisher-list (param-midstring-64 | string)
source-address 
ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
prefix-list (param-midstring | string)
srv6-sid-prefix (policy-var-name | ipv6-unicast-prefix)
srv6-tlv keyword
state keyword
tag (number | keyword)
to 
apply-groups reference
apply-groups-exclude reference
level number
neighbor 
ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
prefix-list (param-midstring | string)
prefix-list (param-midstring-64 | string)
protocol 
instance (keyword | number)
name keyword
prefix-list named-item-64 
apply-groups reference
apply-groups-exclude reference
prefix (ipv4-prefix | ipv6-prefix) type keyword 
apply-groups reference
apply-groups-exclude reference
end-length number
mask-pattern (ipv4-address-no-zone | ipv6-address-no-zone) 
start-length number
through-length number
to-prefix (ipv4-prefix | ipv6-prefix) 
route-distinguisher-list named-item-64 
apply-groups reference
apply-groups-exclude reference
rd-entry string 

policy-options command descriptions

policy-options

Synopsis Enter the policy-options context
Contextconfigure policy-options
Treepolicy-options
Introduced16.0.R1

Platforms

All

as-path [name] named-item

Synopsis Enter the as-path list instance
Contextconfigure policy-options as-path named-item
Treeas-path
Introduced16.0.R1

Platforms

All

[name] named-item
Synopsis AS path name
Contextconfigure policy-options as-path named-item
Treeas-path
String length1 to 32

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

expression policy-as-path-regexp
Synopsis Regular expression string
Context configure policy-options as-path named-item expression policy-as-path-regexp
Treeexpression

Description

This command configures a route policy AS path regular expression statement to use in route policy entries.

An AS path in a BGP route matches an AS path regular expression, if the path matches the pattern of the regular expression. A regular expression incorporates terms and operators that use the terms. An individual AS number is an elementary term in the AS path regular expression. More complex terms can be built from elementary terms. The following are key operators supported by SR OS:

  • .

  • *

  • ?

  • {n}

  • {m,n}

  • {m, }

To reverse the match criteria when specifying a list of ranges or single values using square brackets, use the non-match operator (^) before the elements within the square brackets.

String length1 to 255
Introduced16.0.R1

Platforms

All

as-path-group [name] named-item

Synopsis Enter the as-path-group list instance
Contextconfigure policy-options as-path-group named-item
Treeas-path-group
Introduced16.0.R1

Platforms

All

[name] named-item
Synopsis AS path group name
Context configure policy-options as-path-group named-item
Treeas-path-group
String length1 to 32

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

entry [entry] number
Synopsis Enter the entry list instance
Context configure policy-options as-path-group named-item entry number
Treeentry
Introduced16.0.R1

Platforms

All

[entry] number
Synopsis AS path entry ID
Context configure policy-options as-path-group named-item entry number
Treeentry
Range1 to 128

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

expression policy-as-path-regexp
Synopsis Regular expression string
Context configure policy-options as-path-group named-item entry number expression policy-as-path-regexp
Treeexpression

Description

This command configures an AS path group regular expression.

An AS path in a BGP route matches an AS path group, if the pattern of the path matches the concatenation of all regular expressions in the group. A regular expression incorporates terms and operators that use the terms. An individual AS number is an elementary term in the AS path regular expression. More complex terms can be built from elementary terms. The following are key operators supported by SR OS:

  • .

  • *

  • ?

  • {n}

  • {m,n}

  • {m, }

To reverse the match criteria when specifying a list of ranges or single values using square brackets, use the non-match operator (^) before the elements within the square brackets.

String length1 to 255

Notes

This element is mandatory.

Introduced16.0.R1

Platforms

All

community [name] policy-community-name

Synopsis Enter the community list instance
Contextconfigure policy-options community policy-community-name
Treecommunity
Introduced16.0.R1

Platforms

All

[name] policy-community-name
Synopsis Community name
Contextconfigure policy-options community policy-community-name
Treecommunity

Description

This command configures a route policy community name.

String values must be composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

String length1 to 64

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

expression
Synopsis Enable the expression context
Context configure policy-options community policy-community-name expression
Treeexpression
Introduced16.0.R1

Platforms

All

expr expression-community
Synopsis Community expression value
Context configure policy-options community policy-community-name expression expr expression-community
Treeexpr
String length1 to 900

Notes

This element is mandatory.

Introduced16.0.R1

Platforms

All

member [member] member-community
Synopsis Add a list entry for member
Context configure policy-options community policy-community-name member member-community
Treemember
Introduced16.0.R1

Platforms

All

[member] member-community
Synopsis Community member value
Context configure policy-options community policy-community-name member member-community
Treemember

Description

This command configures a BGP community value.

Each member of a community list is a standard, extended, or large community value or a regular expression that potentially matches many community values. A regular expression incorporates terms and operators that use the terms. An individual numerical digit is an elementary term in the community regular expression. More complex terms can be built from elementary terms. The following are key operators supported by SR OS:

  • .

  • *

  • ?

  • {n}

  • {m,n}

  • {m, }

To reverse the match criteria when specifying a list of ranges or single values using square brackets, use the non-match operator (^) before the elements within the square brackets.

String length1 to 72

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

damping [name] named-item

Synopsis Enter the damping list instance
Contextconfigure policy-options damping named-item
Treedamping
Introduced16.0.R1

Platforms

All

[name] named-item
Synopsis Damping profile name
Context configure policy-options damping named-item
Treedamping
String length1 to 32

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

half-life number
Synopsis Time after the FOM value is halved
Context configure policy-options damping named-item half-life number
Treehalf-life
Range1 to 45
Unitsminutes
Introduced 16.0.R1

Platforms

All

reuse number
Synopsis Value below which a suppressed route can be used again
Contextconfigure policy-options damping named-item reuse number
Treereuse
Range1 to 20000
Introduced16.0.R1

Platforms

All

suppress number
Synopsis Value above which a route is suppressed
Contextconfigure policy-options damping named-item suppress number
Treesuppress
Range1 to 20000
Introduced16.0.R1

Platforms

All

global-variables

Synopsis Enter the global-variables context
Contextconfigure policy-options global-variables
Treeglobal-variables
Introduced16.0.R4

Platforms

All

name [variable-name] policy-var-name
Synopsis Enter the name list instance
Context configure policy-options global-variables name policy-var-name
Treename
Max. instances1000
Introduced16.0.R4

Platforms

All

[variable-name] policy-var-name
Synopsis Global variable name used to reference policy functions
Contextconfigure policy-options global-variables name policy-var-name
Treename
String length1 to 32

Notes

This element is part of a list key.

Introduced16.0.R4

Platforms

All

address (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis IP address of the policy variable
Context configure policy-options global-variables name policy-var-name address (ipv4-address-no-zone | ipv6-address-no-zone)
Treeaddress

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced16.0.R4

Platforms

All

decimal decimal-number
Synopsis Attribute decimal to which variable name is resolved
Contextconfigure policy-options global-variables name policy-var-name decimal decimal-number
Treedecimal
Range0.000 to 4294967295.000

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced19.7.R1

Platforms

All

number number
Synopsis Numerical value of the policy variable
Contextconfigure policy-options global-variables name policy-var-name number number
Treenumber
Range0 to 4294967295

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced16.0.R4

Platforms

All

prefix (ipv4-prefix | ipv6-prefix)
Synopsis Prefix value associated with the variable name
Contextconfigure policy-options global-variables name policy-var-name prefix (ipv4-prefix | ipv6-prefix)
Treeprefix

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

value named-item
Synopsis Policy variable value
Context configure policy-options global-variables name policy-var-name value named-item
Treevalue
String length1 to 32

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced16.0.R4

Platforms

All

policy-statement [name] named-item-64

Synopsis Enter the policy-statement list instance
Contextconfigure policy-options policy-statement named-item-64
Treepolicy-statement
Max. instances65535
Introduced16.0.R1

Platforms

All

[name] named-item-64
Synopsis Route policy statement name
Context configure policy-options policy-statement named-item-64
Treepolicy-statement
String length1 to 64

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

default-action
Synopsis Enable the default-action context
Contextconfigure policy-options policy-statement named-item-64 default-action
Treedefault-action
Introduced16.0.R1

Platforms

All

advertise-label keyword
Synopsis Label allocation for matched BGP routes
Contextconfigure policy-options policy-statement named-item-64 default-action advertise-label keyword
Treeadvertise-label

Description

This command configures the label allocation method for advertised routes. The effect of this command depends on the context where the associated policy is applied. 

Optionsper-prefix, pop, pop-and-forward
Introduced16.0.R1

Platforms

All

aigp-metric
Synopsis Enter the aigp-metric context
Context configure policy-options policy-statement named-item-64 default-action aigp-metric
Treeaigp-metric
Introduced16.0.R1

Platforms

All

add (number | string)
Synopsis AIGP metric to add
Context configure policy-options policy-statement named-item-64 default-action aigp-metric add (number | string)
Treeadd
String length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add or set.

Introduced16.0.R1

Platforms

All

set (keyword | number | string)
Synopsis AIGP metric
Contextconfigure policy-options policy-statement named-item-64 default-action aigp-metric set (keyword | number | string)
Treeset
String length1 to 32
Range0 to 4294967295
Optionsigp

Notes

The following elements are part of a choice: add or set.

Introduced16.0.R1

Platforms

All

as-path
Synopsis Enter the as-path context
Context configure policy-options policy-statement named-item-64 default-action as-path
Treeas-path
Introduced16.0.R1

Platforms

All

add (param-midstring | string)
Synopsis AS path to add
Contextconfigure policy-options policy-statement named-item-64 default-action as-path add (param-midstring | string)
Treeadd
String length1 to 32

Notes

The following elements are part of a choice: add or replace.

Introduced16.0.R1

Platforms

All

as-path-prepend
Synopsis Enter the as-path-prepend context
Contextconfigure policy-options policy-statement named-item-64 default-action as-path-prepend
Treeas-path-prepend
Introduced16.0.R1

Platforms

All

bgp-high-priority boolean
Synopsis Tag routes as high priority for fast table updates
Contextconfigure policy-options policy-statement named-item-64 default-action bgp-high-priority boolean
Treebgp-high-priority

Description

When configured to true, eligible BGP routes matched by the policy entry or policy default-action are tagged as needing faster route table updates.

This action applies only when the policy is applied as a BGP import policy to a base router BGP peer or VPRN BGP peer and applies only to the following route types:

  •    IPv4

  •    label-IPv4

  •    IPv6

  •    label-IPv6

This command is useful when the BGP RIB contains a large number of routes and quick routing table updates are needed for a small subset of these routes. The effectiveness of this command decreases as the subset becomes a larger proportion of the total RIB.

When configured to false, no routes are tagged for faster route table updates.

Defaultfalse
Introduced20.5.R1

Platforms

All

bgp-med
Synopsis Enter the bgp-med context
Context configure policy-options policy-statement named-item-64 default-action bgp-med
Treebgp-med
Introduced19.7.R1

Platforms

All

set (keyword | number | string)
Synopsis BGP-MED assignment
Context configure policy-options policy-statement named-item-64 default-action bgp-med set (keyword | number | string)
Treeset
String length1 to 32
Range0 to 4294967295
Optionsigp, min-igp

Notes

The following elements are part of a choice: adjust or set.

Introduced19.7.R1

Platforms

All

bgp-tunnel-metric
Synopsis Enter the bgp-tunnel-metric context
Contextconfigure policy-options policy-statement named-item-64 default-action bgp-tunnel-metric
Treebgp-tunnel-metric

Description

Commands in this context configure the tunnel-table metrics associated with BGP label unicast routes that pass through to the default action of the policy.

Introduced20.5.R1

Platforms

All

prefer-aigp boolean
Synopsis Use AIGP attribute as tunnel metric when present
Contextconfigure policy-options policy-statement named-item-64 default-action bgp-tunnel-metric prefer-aigp boolean
Treeprefer-aigp

Description

When configured to true, and a BGP-LU route is selected for installation in TTM and it is matched by this action in a BGP import policy. The TTM metric of the tunnel is set to the AIGP metric value of the BGP-LU route plus the IGP cost to reach the BGP next-hop if it has the AIGP path attribute, otherwise it is set to the value implied by the value leaf.

When configured to false, the AIGP attribute is removed from the advertised routes and is ignored if present in the received routes.

Defaultfalse
Introduced20.5.R1

Platforms

All

prefer-med boolean
Synopsis Use MED attribute as tunnel metric when present
Contextconfigure policy-options policy-statement named-item-64 default-action bgp-tunnel-metric prefer-med boolean
Treeprefer-med

Description

When configured to true, if a BGP-LU route is selected for installation in the TTM and is matched by this action in a BGP import policy, the TTM metric of the tunnel is set to the MED metric value of the BGP-LU route with the IGP cost to reach the BGP next hop added to it.

When configured to false, the BGP tunnel metric associated with the BGP-LU route accepted by this policy action is not determined using the MED attribute.

Defaultfalse
Introduced23.3.R1

Platforms

All

value (string | number)
Synopsis BGP tunnel table metric value
Context configure policy-options policy-statement named-item-64 default-action bgp-tunnel-metric value (string | number)
Treevalue

Description

This command configures a BGP tunnel metric is assigned to routes that do not match any entry.

If a BGP-LU route is selected for installation in TTM and it is matched by this action in a BGP import policy, the TTM metric of the associated tunnel is set to this value (or the value associated with the parameter name) if either:

  • the prefer-aigp option is set to false

  • the prefer-aigp option is set to true but the BGP-LU route does not have an AIGP attribute

String length1 to 32
Range0 to 4294967295
Introduced20.5.R1

Platforms

All

community
Synopsis Enter the community context
Context configure policy-options policy-statement named-item-64 default-action community
Treecommunity
Introduced16.0.R1

Platforms

All

add (param-midstring-64 | string)
Synopsis List of community names to add
Context configure policy-options policy-statement named-item-64 default-action community add (param-midstring-64 | string)
Treeadd
String length1 to 64
Max. instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 16.0.R1

Platforms

All

remove (param-midstring-64 | string)
Synopsis List of community names to remove
Context configure policy-options policy-statement named-item-64 default-action community remove (param-midstring-64 | string)
Treeremove
String length1 to 64
Max. instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 16.0.R1

Platforms

All

replace (param-midstring-64 | string)
Synopsis List of community names to replace
Context configure policy-options policy-statement named-item-64 default-action community replace (param-midstring-64 | string)
Treereplace
String length1 to 64
Max. instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 16.0.R1

Platforms

All

create-mpls-tunnel boolean
Synopsis Create an MPLS tunnel
Context configure policy-options policy-statement named-item-64 default-action create-mpls-tunnel boolean
Treecreate-mpls-tunnel

Description

When configured to true, the router creates an MPLS tunnel.

This command is supported for only the following address families:

  • evpn

  • ipv4

  • ipv6

  • label-ipv4

  • label-ipv6

  • vpn-ipv4

  • vpn-ipv6

Defaultfalse
Introduced 21.10.R1

Platforms

All

dest-class number
Synopsis Default destination class for the policy statement
Contextconfigure policy-options policy-statement named-item-64 default-action dest-class number
Treedest-class

Description

This command specifies the policy accounting destination class index to associate with matched routes.

Range1 to 255
Introduced16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

egress-statistics boolean
Synopsis Enable egress statistics for BGP-LU routes
Contextconfigure policy-options policy-statement named-item-64 default-action egress-statistics boolean
Treeegress-statistics

Description

When configured to true, this command enables the allocation of statistical indexes to BGP labeled unicast route entries that are programmed on egress data paths.

When configured to false, this command disables the allocation of statistical indexes to BGP-LU route entries.

Defaultfalse
Introduced20.10.R1

Platforms

All

flex-algo (string | number)
Synopsis Flexible algorithm for BGP next-hop autobind operation
Contextconfigure policy-options policy-statement named-item-64 default-action flex-algo (string | number)
Treeflex-algo

Description

This command configures the Flex-Algorithm for use in the BGP next-hop automatic bind operation in a BGP import policy. A Flex-Algorithm aware autobind of the BGP next-hop is enabled when the route is matched by the policy statement entry.

Flex-Algorithm aware next-hop lookup is supported for unicast BGP, VPRN, and BGP-LU.

This command is not supported for multicast address families.

String length1 to 32
Range128 to 255
Introduced20.10.R1

Platforms

All

ingress-statistics boolean
Synopsis Enable ingress statistics for BGP-LU routes
Contextconfigure policy-options policy-statement named-item-64 default-action ingress-statistics boolean
Treeingress-statistics

Description

When configured to true, this command enables the allocation of statistical indexes to BGP labeled unicast route entries that are programmed on ingress data paths. For effective operation, a prefix must be advertised with a label per prefix for ILM statistics.

When configured to false, this command disables the allocation of statistical indexes to BGP-LU route entries.

Defaultfalse
Introduced20.10.R1

Platforms

All

metric
Synopsis Enter the metric context
Context configure policy-options policy-statement named-item-64 default-action metric
Treemetric
Introduced16.0.R1

Platforms

All

add (number | string)
Synopsis Metric to add
Contextconfigure policy-options policy-statement named-item-64 default-action metric add (number | string)
Treeadd
String length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add, set, or subtract.

Introduced16.0.R1

Platforms

All

set (number | string)
Synopsis Metric to assign
Context configure policy-options policy-statement named-item-64 default-action metric set (number | string)
Treeset
String length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add, set, or subtract.

Introduced16.0.R1

Platforms

All

multicast-redirection
Synopsis Enter the multicast-redirection context
Contextconfigure policy-options policy-statement named-item-64 default-action multicast-redirection
Treemulticast-redirection
Introduced16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

nat-policy (param-midstring | string)
Synopsis BGP-VPN imported route and a NAT policy association
Contextconfigure policy-options policy-statement named-item-64 default-action nat-policy (param-midstring | string)
Treenat-policy

Description

This command assigns a NAT policy to the matched routes that do not have a more specific NAT policy configured under action.

A dynamic route obtained by BGP-VPN can be imported into an inside (private side) routing context in NAT environment. This route must be associated with a NAT policy that maps traffic into a NAT pool and outside routing context. If the NAT policy is not specified within the route policy entry, the imported NAT route is, by default, associated with the default NAT policy defined in the NAT inside routing context.

All BGP-VPN routes that are destined to be imported into the NAT inside routing context must have action-type accept regardless of whether the NAT policy is configured in the action. 

String length1 to 32
Introduced21.5.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
Synopsis Next-hop IP address applied to routes
Contextconfigure policy-options policy-statement named-item-64 default-action next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
Treenext-hop
String length1 to 32
Optionspeer-address, self
Introduced 16.0.R1

Platforms

All

source-class number
Synopsis Default source class for the policy statement
Contextconfigure policy-options policy-statement named-item-64 default-action source-class number
Treesource-class

Description

This command specifies the policy accounting source class index to associate with matched routes.

Range1 to 255
Introduced16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

sr-label-index
Synopsis Enter the sr-label-index context
Contextconfigure policy-options policy-statement named-item-64 default-action sr-label-index
Treesr-label-index

Description

Commands in this context configure the policy action to associate a BGP segment-routing label index value with all /32 BGP labeled IPv4 routes.

The use of this action in a policy entry that matches more than one /32 labeled IPv4 route may create SID conflicts.

This action only takes effect in BGP peer import policies (and only on received /32 labeled IPv4 routes) and in route table import policies associated with the labeled IPv4 RIB.

When this action occurs in a policy applied as a peer import policy, a prefix SID attribute can be added to a received /32 labeled IPv4 route that was not sent with this attribute, or the received prefix SID attribute can be replaced with a new one.

Introduced19.10.R1

Platforms

All

prefer-igp boolean
Synopsis Use the SR label index from the IGP route when present
Contextconfigure policy-options policy-statement named-item-64 default-action sr-label-index prefer-igp boolean
Treeprefer-igp

Description

When configured to true, BGP obtains the SID index from the IGP route (if a SID index is present) and the configure router bgp segment-routing prefix-sid-range global command is set to true.

This command applies only to route table import policies.

When configured to false, or the SID index is not present in the IGP route, or the configure router bgp segment-routing prefix-sid-range global command is not set to true, BGP obtains the label index value from the value command.

Defaultfalse
Introduced19.10.R1

Platforms

All

value (string | number)
Synopsis BGP SR label index associated with routes
Contextconfigure policy-options policy-statement named-item-64 default-action sr-label-index value (string | number)
Treevalue

Description

This command specifies the BGP SR label index value to be associated with a route or routes.

If this command specifies an index value that causes a SID conflict with another BGP route, all conflicting BGP routes are re-advertised with label values based on dynamic allocation rather than SID-based allocation.

If this command specifies an index value that causes a SID conflict with an IGP route, the BGP route is re-advertised with a label value based on dynamic allocation rather than SID-based allocation.

String length1 to 32
Range0 to 1048575
Introduced19.10.R1

Platforms

All

sr-maintenance-policy (param-midstring | string)
Synopsis SR maintenance policy as an action
Context configure policy-options policy-statement named-item-64 default-action sr-maintenance-policy (param-midstring | string)
Treesr-maintenance-policy

Description

This command applies a named segment routing maintenance policy as an action for route policies. It is only used for SR policy routes.

String length1 to 32
Introduced20.10.R1

Platforms

All

sr-return-path-bfd-label (policy-var-name | number)
Synopsis S-BFD return path label
Context configure policy-options policy-statement named-item-64 default-action sr-return-path-bfd-label (policy-var-name | number)
Treesr-return-path-bfd-label

Description

This command configures an additional MPLS label to add to the bottom of the label stack for the S-BFD packet and sets the S-BFD session to echo mode.

This command applies to the initiator of the S-BFD sessions. The label value can either be a binding SID for an SR policy or another MPLS path configured on the reflector router. Instead of being routed through the IGP path, the S-BFD packet returns to the initiator through the MPLS return path. This value takes precedence over the return path label value in a maintenance policy (configured using the configure router segment-routing maintenance-policy return-path-label command) that is also applied as the policy-statement action. This command can only be configured if the sr-maintenance-policy is also configured.

If this command is unconfigured, and there is no return-path-label command configuration in the maintenance policy that is also applied as an action, and the policy statement is reevaluated, S-BFD returns to asynchronous mode and no return path label is pushed by the initiator node. S-BFD packets for this LSP or path received by the reflector are routed through the IGP path.

String length1 to 32
Range32 to 1048575
Introduced23.10.R1

Platforms

All

srv6-locator (param-midstring-64 | string)
Synopsis Locator for SRv6 TLV to use
Context configure policy-options policy-statement named-item-64 default-action srv6-locator (param-midstring-64 | string)
Treesrv6-locator

Description

This command configures either a string encoding a midstring parameter delimited by at signs (@), or a reference to a named locator for the SRv6 TLV to use.

For a VRF export policy, the referenced locator must already be configured using the commands in the configure service vprn segment-routing-v6 locator context.

For a BGP export policy, the referenced locator must already be configured using the commands in the configure router segment-routing segment-routing-v6 base-routing-instance locator context.

String length1 to 64
Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

srv6-micro-segment-locator (param-midstring-64 | string)
Synopsis Micro-segment locator for SRv6 TLV to use
Contextconfigure policy-options policy-statement named-item-64 default-action srv6-micro-segment-locator (param-midstring-64 | string)
Treesrv6-micro-segment-locator

Description

This command configures either a string encoding a midstring parameter delimited by at signs (@), or a reference to a named micro-segment locator for the SRv6 TLV to use.

For a VRF export policy, the referenced micro-segment locator must already be configured using the commands in the configure service vprn segment-routing-v6 micro-segment-locator context.

For a BGP export policy, the referenced micro-SID locator must already be configured using the commands in the configure router segment-routing segment-routing-v6 base-routing-instance micro-segment-locator context.

String length1 to 64
Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
Synopsis SRv6 return path BFD SID applied to SRv6 policy routes
Contextconfigure policy-options policy-statement named-item-64 default-action srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
Treesrv6-return-path-bfd-sid

Description

This command configures the S-BFD session to echo mode and pushes an additional SRv6 SID in the SRH only for S-BFD packets sent on the imported SRv6 policy.

String length1 to 32
Introduced23.3.R1

Platforms

All

tag (number | string)
Synopsis OSPF RIP or IS-IS tag applied to routes
Contextconfigure policy-options policy-statement named-item-64 default-action tag (number | string)
Treetag
String length1 to 32
Range1 to 4294967295
Introduced16.0.R1

Platforms

All

entry [entry-id] number
Synopsis Enter the entry list instance
Context configure policy-options policy-statement named-item-64 entry number
Treeentry
Introduced16.0.R1

Platforms

All

[entry-id] number
Synopsis Entry ID for a route policy entry
Context configure policy-options policy-statement named-item-64 entry number
Treeentry
Range1 to 4294967295

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

action
Synopsis Enable the action context
Context configure policy-options policy-statement named-item-64 entry number action
Treeaction
Introduced16.0.R1

Platforms

All

advertise-label keyword
Synopsis Label allocation for matched BGP routes
Contextconfigure policy-options policy-statement named-item-64 entry number action advertise-label keyword
Treeadvertise-label

Description

This command configures the label allocation method for advertised routes. The effect of this command depends on the context where the associated policy is applied. 

Optionsper-prefix, pop, pop-and-forward
Introduced16.0.R1

Platforms

All

aigp-metric
Synopsis Enter the aigp-metric context
Context configure policy-options policy-statement named-item-64 entry number action aigp-metric
Treeaigp-metric
Introduced16.0.R1

Platforms

All

add (number | string)
Synopsis AIGP metric to add
Context configure policy-options policy-statement named-item-64 entry number action aigp-metric add (number | string)
Treeadd
String length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add or set.

Introduced16.0.R1

Platforms

All

set (keyword | number | string)
Synopsis AIGP metric
Contextconfigure policy-options policy-statement named-item-64 entry number action aigp-metric set (keyword | number | string)
Treeset
String length1 to 32
Range0 to 4294967295
Optionsigp

Notes

The following elements are part of a choice: add or set.

Introduced16.0.R1

Platforms

All

as-path
Synopsis Enter the as-path context
Context configure policy-options policy-statement named-item-64 entry number action as-path
Treeas-path
Introduced16.0.R1

Platforms

All

add (param-midstring | string)
Synopsis AS path to add
Contextconfigure policy-options policy-statement named-item-64 entry number action as-path add (param-midstring | string)
Treeadd
String length1 to 32

Notes

The following elements are part of a choice: add or replace.

Introduced16.0.R1

Platforms

All

replace (param-midstring | string)
Synopsis AS path to replace
Context configure policy-options policy-statement named-item-64 entry number action as-path replace (param-midstring | string)
Treereplace
String length1 to 32

Notes

The following elements are part of a choice: add or replace.

Introduced16.0.R1

Platforms

All

as-path-prepend
Synopsis Enter the as-path-prepend context
Contextconfigure policy-options policy-statement named-item-64 entry number action as-path-prepend
Treeas-path-prepend
Introduced16.0.R1

Platforms

All

bgp-high-priority boolean
Synopsis Tag routes as high priority for fast table updates
Contextconfigure policy-options policy-statement named-item-64 entry number action bgp-high-priority boolean
Treebgp-high-priority

Description

When configured to true, eligible BGP routes matched by the policy entry or policy default-action are tagged as needing faster route table updates.

This action applies only when the policy is applied as a BGP import policy to a base router BGP peer or VPRN BGP peer and applies only to the following route types:

  •    IPv4

  •    label-IPv4

  •    IPv6

  •    label-IPv6

This command is useful when the BGP RIB contains a large number of routes and quick routing table updates are needed for a small subset of these routes. The effectiveness of this command decreases as the subset becomes a larger proportion of the total RIB.

When configured to false, no routes are tagged for faster route table updates.

Defaultfalse
Introduced20.5.R1

Platforms

All

bgp-med
Synopsis Enter the bgp-med context
Context configure policy-options policy-statement named-item-64 entry number action bgp-med
Treebgp-med
Introduced19.7.R1

Platforms

All

set (keyword | number | string)
Synopsis BGP-MED assignment
Context configure policy-options policy-statement named-item-64 entry number action bgp-med set (keyword | number | string)
Treeset
String length1 to 32
Range0 to 4294967295
Optionsigp, min-igp

Notes

The following elements are part of a choice: adjust or set.

Introduced19.7.R1

Platforms

All

bgp-tunnel-metric
Synopsis Enter the bgp-tunnel-metric context
Contextconfigure policy-options policy-statement named-item-64 entry number action bgp-tunnel-metric
Treebgp-tunnel-metric

Description

Commands in this context configure the tunnel-table metrics associated with BGP label unicast routes that pass through to the default action of the policy.

Introduced20.5.R1

Platforms

All

prefer-aigp boolean
Synopsis Use AIGP attribute as tunnel metric when present
Contextconfigure policy-options policy-statement named-item-64 entry number action bgp-tunnel-metric prefer-aigp boolean
Treeprefer-aigp

Description

When configured to true, and a BGP-LU route is selected for installation in TTM and it is matched by this action in a BGP import policy. The TTM metric of the tunnel is set to the AIGP metric value of the BGP-LU route plus the IGP cost to reach the BGP next-hop if it has the AIGP path attribute, otherwise it is set to the value implied by the value leaf.

When configured to false, the AIGP attribute is removed from the advertised routes and is ignored if present in the received routes.

Defaultfalse
Introduced20.5.R1

Platforms

All

prefer-med boolean
Synopsis Use MED attribute as tunnel metric when present
Contextconfigure policy-options policy-statement named-item-64 entry number action bgp-tunnel-metric prefer-med boolean
Treeprefer-med

Description

When configured to true, if a BGP-LU route is selected for installation in the TTM and is matched by this action in a BGP import policy, the TTM metric of the tunnel is set to the MED metric value of the BGP-LU route with the IGP cost to reach the BGP next hop added to it.

When configured to false, the BGP tunnel metric associated with the BGP-LU route accepted by this policy action is not determined using the MED attribute.

Defaultfalse
Introduced23.3.R1

Platforms

All

value (string | number)
Synopsis BGP tunnel table metric value
Context configure policy-options policy-statement named-item-64 entry number action bgp-tunnel-metric value (string | number)
Treevalue

Description

This command configures a BGP tunnel metric is assigned to routes that do not match any entry.

If a BGP-LU route is selected for installation in TTM and it is matched by this action in a BGP import policy, the TTM metric of the associated tunnel is set to this value (or the value associated with the parameter name) if either:

  • the prefer-aigp option is set to false

  • the prefer-aigp option is set to true but the BGP-LU route does not have an AIGP attribute

String length1 to 32
Range0 to 4294967295
Introduced20.5.R1

Platforms

All

community
Synopsis Enter the community context
Context configure policy-options policy-statement named-item-64 entry number action community
Treecommunity
Introduced16.0.R1

Platforms

All

add (param-midstring-64 | string)
Synopsis List of community names to add
Context configure policy-options policy-statement named-item-64 entry number action community add (param-midstring-64 | string)
Treeadd
String length1 to 64
Max. instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 16.0.R1

Platforms

All

remove (param-midstring-64 | string)
Synopsis List of community names to remove
Context configure policy-options policy-statement named-item-64 entry number action community remove (param-midstring-64 | string)
Treeremove
String length1 to 64
Max. instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 16.0.R1

Platforms

All

replace (param-midstring-64 | string)
Synopsis List of community names to replace
Context configure policy-options policy-statement named-item-64 entry number action community replace (param-midstring-64 | string)
Treereplace
String length1 to 64
Max. instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 16.0.R1

Platforms

All

create-mpls-tunnel boolean
Synopsis Create an MPLS tunnel
Context configure policy-options policy-statement named-item-64 entry number action create-mpls-tunnel boolean
Treecreate-mpls-tunnel

Description

When configured to true, the router creates an MPLS tunnel.

This command is supported for only the following address families:

  • evpn

  • ipv4

  • ipv6

  • label-ipv4

  • label-ipv6

  • vpn-ipv4

  • vpn-ipv6

Defaultfalse
Introduced 21.10.R1

Platforms

All

damping (keyword | param-midstring | string)
Synopsis Damping profile used for routes
Context configure policy-options policy-statement named-item-64 entry number action damping (keyword | param-midstring | string)
Treedamping
String length1 to 32
Optionsnone
Introduced16.0.R1

Platforms

All

dest-class number
Synopsis Default destination class for the policy statement
Contextconfigure policy-options policy-statement named-item-64 entry number action dest-class number
Treedest-class

Description

This command specifies the policy accounting destination class index to associate with matched routes.

Range1 to 255
Introduced16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

egress-statistics boolean
Synopsis Enable egress statistics for BGP-LU routes
Contextconfigure policy-options policy-statement named-item-64 entry number action egress-statistics boolean
Treeegress-statistics

Description

When configured to true, this command enables the allocation of statistical indexes to BGP labeled unicast route entries that are programmed on egress data paths.

When configured to false, this command disables the allocation of statistical indexes to BGP-LU route entries.

Defaultfalse
Introduced20.10.R1

Platforms

All

flex-algo (string | number)
Synopsis Flexible algorithm for BGP next-hop autobind operation
Contextconfigure policy-options policy-statement named-item-64 entry number action flex-algo (string | number)
Treeflex-algo

Description

This command configures the Flex-Algorithm for use in the BGP next-hop automatic bind operation in a BGP import policy. A Flex-Algorithm aware autobind of the BGP next-hop is enabled when the route is matched by the policy statement entry.

Flex-Algorithm aware next-hop lookup is supported for unicast BGP, VPRN, and BGP-LU.

This command is not supported for multicast address families.

String length1 to 32
Range128 to 255
Introduced20.10.R1

Platforms

All

forwarding-class
Synopsis Enter the forwarding-class context
Contextconfigure policy-options policy-statement named-item-64 entry number action forwarding-class
Treeforwarding-class
Introduced16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

fc keyword
Synopsis Forwarding class associated with the route
Contextconfigure policy-options policy-statement named-item-64 entry number action forwarding-class fc keyword
Treefc
Optionsbe, l2, af, l1, h2, ef, h1, nc
Introduced 16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

ingress-statistics boolean
Synopsis Enable ingress statistics for BGP-LU routes
Contextconfigure policy-options policy-statement named-item-64 entry number action ingress-statistics boolean
Treeingress-statistics

Description

When configured to true, this command enables the allocation of statistical indexes to BGP labeled unicast route entries that are programmed on ingress data paths. For effective operation, a prefix must be advertised with a label per prefix for ILM statistics.

When configured to false, this command disables the allocation of statistical indexes to BGP-LU route entries.

Defaultfalse
Introduced20.10.R1

Platforms

All

metric
Synopsis Enter the metric context
Context configure policy-options policy-statement named-item-64 entry number action metric
Treemetric
Introduced16.0.R1

Platforms

All

add (number | string)
Synopsis Metric to add
Contextconfigure policy-options policy-statement named-item-64 entry number action metric add (number | string)
Treeadd
String length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add, set, or subtract.

Introduced16.0.R1

Platforms

All

set (number | string)
Synopsis Metric to assign
Context configure policy-options policy-statement named-item-64 entry number action metric set (number | string)
Treeset
String length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add, set, or subtract.

Introduced16.0.R1

Platforms

All

subtract (number | string)
Synopsis Metric to subtract
Context configure policy-options policy-statement named-item-64 entry number action metric subtract (number | string)
Treesubtract
String length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add, set, or subtract.

Introduced16.0.R1

Platforms

All

multicast-redirection
Synopsis Enter the multicast-redirection context
Contextconfigure policy-options policy-statement named-item-64 entry number action multicast-redirection
Treemulticast-redirection
Introduced16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

nat-policy (param-midstring | string)
Synopsis BGP-VPN imported route and a NAT policy association
Contextconfigure policy-options policy-statement named-item-64 entry number action nat-policy (param-midstring | string)
Treenat-policy

Description

This command assigns a NAT policy to the matched routes that do not have a more specific NAT policy configured under action.

A dynamic route obtained by BGP-VPN can be imported into an inside (private side) routing context in NAT environment. This route must be associated with a NAT policy that maps traffic into a NAT pool and outside routing context. If the NAT policy is not specified within the route policy entry, the imported NAT route is, by default, associated with the default NAT policy defined in the NAT inside routing context.

All BGP-VPN routes that are destined to be imported into the NAT inside routing context must have action-type accept regardless of whether the NAT policy is configured in the action. 

String length1 to 32
Introduced21.5.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
Synopsis Next-hop IP address applied to routes
Contextconfigure policy-options policy-statement named-item-64 entry number action next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
Treenext-hop
String length1 to 32
Optionspeer-address, self
Introduced 16.0.R1

Platforms

All

origin (keyword | string)
Synopsis BGP origin for routes that are exported into BGP
Contextconfigure policy-options policy-statement named-item-64 entry number action origin (keyword | string)
Treeorigin
String length1 to 32
Optionsigp, egp, incomplete
Introduced16.0.R1

Platforms

All

source-class number
Synopsis Default source class for the policy statement
Contextconfigure policy-options policy-statement named-item-64 entry number action source-class number
Treesource-class

Description

This command specifies the policy accounting source class index to associate with matched routes.

Range1 to 255
Introduced16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

sr-label-index
Synopsis Enter the sr-label-index context
Contextconfigure policy-options policy-statement named-item-64 entry number action sr-label-index
Treesr-label-index

Description

Commands in this context configure the policy action to associate a BGP segment-routing label index value with all /32 BGP labeled IPv4 routes.

The use of this action in a policy entry that matches more than one /32 labeled IPv4 route may create SID conflicts.

This action only takes effect in BGP peer import policies (and only on received /32 labeled IPv4 routes) and in route table import policies associated with the labeled IPv4 RIB.

When this action occurs in a policy applied as a peer import policy, a prefix SID attribute can be added to a received /32 labeled IPv4 route that was not sent with this attribute, or the received prefix SID attribute can be replaced with a new one.

Introduced19.10.R1

Platforms

All

prefer-igp boolean
Synopsis Use the SR label index from the IGP route when present
Contextconfigure policy-options policy-statement named-item-64 entry number action sr-label-index prefer-igp boolean
Treeprefer-igp

Description

When configured to true, BGP obtains the SID index from the IGP route (if a SID index is present) and the configure router bgp segment-routing prefix-sid-range global command is set to true.

This command applies only to route table import policies.

When configured to false, or the SID index is not present in the IGP route, or the configure router bgp segment-routing prefix-sid-range global command is not set to true, BGP obtains the label index value from the value command.

Defaultfalse
Introduced19.10.R1

Platforms

All

value (string | number)
Synopsis BGP SR label index associated with routes
Contextconfigure policy-options policy-statement named-item-64 entry number action sr-label-index value (string | number)
Treevalue

Description

This command specifies the BGP SR label index value to be associated with a route or routes.

If this command specifies an index value that causes a SID conflict with another BGP route, all conflicting BGP routes are re-advertised with label values based on dynamic allocation rather than SID-based allocation.

If this command specifies an index value that causes a SID conflict with an IGP route, the BGP route is re-advertised with a label value based on dynamic allocation rather than SID-based allocation.

String length1 to 32
Range0 to 1048575
Introduced19.10.R1

Platforms

All

sr-maintenance-policy (param-midstring | string)
Synopsis SR maintenance policy as an action
Context configure policy-options policy-statement named-item-64 entry number action sr-maintenance-policy (param-midstring | string)
Treesr-maintenance-policy

Description

This command applies a named segment routing maintenance policy as an action for route policies. It is only used for SR policy routes.

String length1 to 32
Introduced20.10.R1

Platforms

All

sr-return-path-bfd-label (policy-var-name | number)
Synopsis S-BFD return path label
Context configure policy-options policy-statement named-item-64 entry number action sr-return-path-bfd-label (policy-var-name | number)
Treesr-return-path-bfd-label

Description

This command configures an additional MPLS label to add to the bottom of the label stack for the S-BFD packet and sets the S-BFD session to echo mode.

This command applies to the initiator of the S-BFD sessions. The label value can either be a binding SID for an SR policy or another MPLS path configured on the reflector router. Instead of being routed through the IGP path, the S-BFD packet returns to the initiator through the MPLS return path. This value takes precedence over the return path label value in a maintenance policy (configured using the configure router segment-routing maintenance-policy return-path-label command) that is also applied as the policy-statement action. This command can only be configured if the sr-maintenance-policy is also configured.

If this command is unconfigured, and there is no return-path-label command configuration in the maintenance policy that is also applied as an action, and the policy statement is reevaluated, S-BFD returns to asynchronous mode and no return path label is pushed by the initiator node. S-BFD packets for this LSP or path received by the reflector are routed through the IGP path.

String length1 to 32
Range32 to 1048575
Introduced23.10.R1

Platforms

All

srv6-locator (param-midstring-64 | string)
Synopsis Locator for SRv6 TLV to use
Context configure policy-options policy-statement named-item-64 entry number action srv6-locator (param-midstring-64 | string)
Treesrv6-locator

Description

This command configures either a string encoding a midstring parameter delimited by at signs (@), or a reference to a named locator for the SRv6 TLV to use.

For a VRF export policy, the referenced locator must already be configured using the commands in the configure service vprn segment-routing-v6 locator context.

For a BGP export policy, the referenced locator must already be configured using the commands in the configure router segment-routing segment-routing-v6 base-routing-instance locator context.

String length1 to 64
Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

srv6-micro-segment-locator (param-midstring-64 | string)
Synopsis Micro-segment locator for SRv6 TLV to use
Contextconfigure policy-options policy-statement named-item-64 entry number action srv6-micro-segment-locator (param-midstring-64 | string)
Treesrv6-micro-segment-locator

Description

This command configures either a string encoding a midstring parameter delimited by at signs (@), or a reference to a named micro-segment locator for the SRv6 TLV to use.

For a VRF export policy, the referenced micro-segment locator must already be configured using the commands in the configure service vprn segment-routing-v6 micro-segment-locator context.

For a BGP export policy, the referenced micro-SID locator must already be configured using the commands in the configure router segment-routing segment-routing-v6 base-routing-instance micro-segment-locator context.

String length1 to 64
Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
Synopsis SRv6 return path BFD SID applied to SRv6 policy routes
Contextconfigure policy-options policy-statement named-item-64 entry number action srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
Treesrv6-return-path-bfd-sid

Description

This command configures the S-BFD session to echo mode and pushes an additional SRv6 SID in the SRH only for S-BFD packets sent on the imported SRv6 policy.

String length1 to 32
Introduced23.3.R1

Platforms

All

tag (number | string)
Synopsis OSPF RIP or IS-IS tag applied to routes
Contextconfigure policy-options policy-statement named-item-64 entry number action tag (number | string)
Treetag
String length1 to 32
Range1 to 4294967295
Introduced16.0.R1

Platforms

All

type (number | string)
Synopsis OSPF metric type applied to routes
Context configure policy-options policy-statement named-item-64 entry number action type (number | string)
Treetype
String length1 to 32
Range1 to 2
Introduced 16.0.R1

Platforms

All

from
Synopsis Enable the from context
Context configure policy-options policy-statement named-item-64 entry number from
Treefrom

Description

Commands in this context configure policy match criteria based on the route’s source or the protocol from which it is received. If conditions are not specified, all route sources are considered to match.

Introduced16.0.R1

Platforms

All

aggregate-contributor boolean
Synopsis Enable aggregate route match criterion
Contextconfigure policy-options policy-statement named-item-64 entry number from aggregate-contributor boolean
Treeaggregate-contributor

Description

When configured to true, matches all routes (BGP and non-BGP) that have contributed to an active aggregate route. If the prefix tree above a particular route includes no active aggregate routes or the most specific active aggregate route in the prefix tree above this route has a policy that rejects the route, then it is not considered as an aggregate-contributor.

This match condition is only supported when used in a BGP export policy. If it is used in an entry of a BGP import policy, vrf-export policy or vrf-import policy, no routes are matched by that entry.

When configured to false, no routes (BGP and non-BGP) that have contributed to an active aggregate route are matched.

Defaultfalse
Introduced20.10.R1

Platforms

All

as-path
Synopsis Enter the as-path context
Context configure policy-options policy-statement named-item-64 entry number from as-path
Treeas-path
Introduced16.0.R1

Platforms

All

group (param-midstring | string)
Synopsis AS path group as a match criterion
Context configure policy-options policy-statement named-item-64 entry number from as-path group (param-midstring | string)
Treegroup
String length1 to 32

Notes

The following elements are part of a choice: group or name.

Introduced16.0.R1

Platforms

All

length
Synopsis Enter the length context
Context configure policy-options policy-statement named-item-64 entry number from as-path length
Treelength
Introduced16.0.R1

Platforms

All

name (param-midstring | string)
Synopsis AS path name to match
Context configure policy-options policy-statement named-item-64 entry number from as-path name (param-midstring | string)
Treename

Description

This command specifies an AS path regular expression name for the route policy entry.

Policy parameters must be enclosed by at-signs (@) and may be midstring; for example, "@variable@," "start@variable@end", "@variable@end", or "start@variable@".

String length1 to 32

Notes

The following elements are part of a choice: group or name.

Introduced16.0.R1

Platforms

All

cluster-id
Synopsis Enter the cluster-id context
Context configure policy-options policy-statement named-item-64 entry number from cluster-id
Treecluster-id
Introduced16.0.R1

Platforms

All

ip-address ipv4-prefix-with-host-bits
Synopsis Cluster list attribute IP addresses for route matching
Contextconfigure policy-options policy-statement named-item-64 entry number from cluster-id ip-address ipv4-prefix-with-host-bits
Treeip-address
Max. instances5

Notes

The following elements are part of a choice: ip-address or none-cluster-list.

This element is ordered by the user.

Introduced 16.0.R1

Platforms

All

color number
Synopsis Color ID as a match criterion
Context configure policy-options policy-statement named-item-64 entry number from color number
Treecolor

Description

This command configures an SR Policy color ID as a route policy match criterion. This match criterion is only used in import policies.

Range0 to 4294967295
Introduced20.10.R1

Platforms

All

community
Synopsis Enter the community context
Context configure policy-options policy-statement named-item-64 entry number from community
Treecommunity
Introduced16.0.R1

Platforms

All

count
Synopsis Enter the count context
Context configure policy-options policy-statement named-item-64 entry number from community count
Treecount
Introduced16.0.R1

Platforms

All

expression string
Synopsis Community expression statement as a match criterion
Contextconfigure policy-options policy-statement named-item-64 entry number from community expression string
Treeexpression

Description

This command configures a community expression statement as a match criterion for the policy statement. This statement is a logical expression string composed of logical operators (keywords AND, OR, NOT), community names delimited by square brackets [], and parentheses ( ) to group subexpressions. If the expression contains special characters (for example, #, $, spaces), the entire string must be enclosed in double quotes.

The expression specified must already be defined using the configure policy-options community expression expr command.

The following are examples of valid logical expressions:

"[community_list_A] OR ([community_list_B] AND [community_list_C])"

"NOT [community_list_A]"

"[community_list_A] AND [community_list_B] OR [community_list_C]"

"NOT ([community_list_A] OR [community_list_B] OR [community_list_C])"

String length1 to 900

Notes

The following elements are part of a choice: expression or name.

Introduced16.0.R1

Platforms

All

name (param-midstring-64 | string)
Synopsis Community list name
Context configure policy-options policy-statement named-item-64 entry number from community name (param-midstring-64 | string)
Treename
String length1 to 64

Notes

The following elements are part of a choice: expression or name.

Introduced16.0.R1

Platforms

All

distinguisher number
Synopsis SR policy distinguisher as a match criterion
Contextconfigure policy-options policy-statement named-item-64 entry number from distinguisher number
Treedistinguisher

Description

This command configures an SR Policy distinguisher as a route policy match criterion. This match criterion is only used in import policies.

Range0 to 4294967295
Introduced20.10.R1

Platforms

All

endpoint (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis SR policy endpoint address as a match criterion
Contextconfigure policy-options policy-statement named-item-64 entry number from endpoint (ipv4-address-no-zone | ipv6-address-no-zone)
Treeendpoint

Description

This command configures an SR Policy endpoint address as a route policy match criterion. This match criterion is only used in import policies.

Introduced20.10.R1

Platforms

All

evpn-type keyword
Synopsis EVPN type as a match criterion for the entry
Contextconfigure policy-options policy-statement named-item-64 entry number from evpn-type keyword
Treeevpn-type
Optionsethernet-auto-discovery, mac-ip-advertisement, inclusive-multicast, ethernet-segment, ip-prefix, selective-multicast, multicast-join-sync, multicast-leave-sync, selective-pmsi-auto-discovery
Introduced16.0.R4

Platforms

All

family keyword
Synopsis Address family as the match condition
Contextconfigure policy-options policy-statement named-item-64 entry number from family keyword
Treefamily

Description

This command specifies address families as matching conditions.

Optionsipv4, vpn-ipv4, ipv6, mcast-ipv4, vpn-ipv6, l2-vpn, mvpn-ipv4, mdt-safi, ms-pw, flow-ipv4, route-target, mcast-vpn-ipv4, mvpn-ipv6, flow-ipv6, evpn, mcast-ipv6, label-ipv4, label-ipv6, bgp-ls, mcast-vpn-ipv6, sr-policy-ipv4, sr-policy-ipv6, flow-vpn-ipv4, flow-vpn-ipv6
Max. instances20
Introduced 16.0.R1

Platforms

All

flowspec
Synopsis Enter the flowspec context
Context configure policy-options policy-statement named-item-64 entry number from flowspec
Treeflowspec

Description

Commands in this context configure the route-matching rules for BGP FlowSpec routes.

Introduced16.0.R4

Platforms

All

dest (param-midstring | string)
Synopsis Destination IP prefix list to match BGP FlowSpec routes
Contextconfigure policy-options policy-statement named-item-64 entry number from flowspec dest (param-midstring | string)
Treedest

Description

This command specifies a prefix list used by the router to match BGP FlowSpec routes based on the destination IP prefix in the flow specification.

An IPv4 FlowSpec route is matched if its NLRI contains a type 1 subcomponent encoding a prefix and prefix length that is covered by an entry in the referenced prefix list. An IPv6 FlowSpec route is matched if its NLRI contains a type 1 component encoding prefix-offset = 0 and a prefix and prefix length that is covered by an entry in the referenced prefix list.

This command has no effect when the policy is not applied as a BGP import or export policy.

String length1 to 32
Introduced16.0.R4

Platforms

All

source (param-midstring | string)
Synopsis Source IP prefix list to match BGP FlowSpec routes
Contextconfigure policy-options policy-statement named-item-64 entry number from flowspec source (param-midstring | string)
Treesource

Description

This command specifies a prefix list used by the router to match BGP FlowSpec routes based on the source IP prefix in the flow specification.

An IPv4 FlowSpec route is matched if its NLRI contains a type 2 subcomponent encoding a prefix and prefix length that is covered by an entry in the referenced prefix list. An IPv6 FlowSpec route is matched if its NLRI contains a type 2 component encoding prefix-offset = 0 and a prefix and prefix length that is covered by an entry in the referenced prefix list.

This command has no effect when the policy is not applied as a BGP import or export policy.

String length1 to 32
Introduced16.0.R4

Platforms

All

host-ip (param-midstring | string)
Synopsis Prefix list of IGMP host IP addresses for matching
Contextconfigure policy-options policy-statement named-item-64 entry number from host-ip (param-midstring | string)
Treehost-ip
String length1 to 32
Introduced16.0.R1

Platforms

All

interface (named-item | interface-name | interface-name | interface-name)
Synopsis Interface name as match criterion
Context configure policy-options policy-statement named-item-64 entry number from interface (named-item | interface-name | interface-name | interface-name)
Treeinterface
String length1 to 32
Max. instances1

Notes

This element is ordered by the user.

Introduced16.0.R1

Platforms

All

interface-subnets
Synopsis Enter the interface-subnets context
Contextconfigure policy-options policy-statement named-item-64 entry number from interface-subnets
Treeinterface-subnets

Description

Commands in this context configure the applied router instance and interfaces that are used as the matching condition within each policy statement entry when exporting the IP address of the associated interface to a routing protocol.

The interface subnet policy statement match criterion is applied to the following unicast use case contexts:

  • export, when used with OSPFv2, OSPFv3, IS-IS, RIP, RIPng, and BGP

  • route-table-import, when used with BGP

  • vrf-export, when used with MP-BGP

Introduced21.2.R1

Platforms

All

ip-int-name interface-name
Synopsis Interface name as the match criterion
Contextconfigure policy-options policy-statement named-item-64 entry number from interface-subnets ip-int-name interface-name
Treeip-int-name

Description

This command specifies the interface name to match when exporting the IP address of the associated interface to a routing protocol.

String length1 to 32
Max. instances10

Notes

This element is ordered by the user.

Introduced21.2.R1

Platforms

All

local-preference
Synopsis Enter the local-preference context
Contextconfigure policy-options policy-statement named-item-64 entry number from local-preference
Treelocal-preference
Introduced16.0.R1

Platforms

All

metric
Synopsis Enter the metric context
Context configure policy-options policy-statement named-item-64 entry number from metric
Treemetric
Introduced16.0.R1

Platforms

All

mvpn-type keyword
Synopsis MVPN type as a match criterion for the entry
Contextconfigure policy-options policy-statement named-item-64 entry number from mvpn-type keyword
Treemvpn-type
Optionsintra-as-ipmsi-auto-discovery, inter-as-ipmsi-auto-discovery, s-pmsi-auto-discovery, intra-as-segment-leaf-auto-discovery, source-active-auto-discovery, shared-tree-join, source-tree-join
Introduced16.0.R1

Platforms

All

neighbor
Synopsis Enter the neighbor context
Context configure policy-options policy-statement named-item-64 entry number from neighbor
Treeneighbor
Introduced16.0.R1

Platforms

All

ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
Synopsis IP address to match the neighbor
Context configure policy-options policy-statement named-item-64 entry number from neighbor ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
Treeip-address

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced16.0.R1

Platforms

All

prefix-list (param-midstring | string)
Synopsis Name to match the neighbor prefix list
Contextconfigure policy-options policy-statement named-item-64 entry number from neighbor prefix-list (param-midstring | string)
Treeprefix-list
String length1 to 32

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced16.0.R1

Platforms

All

next-hop
Synopsis Enter the next-hop context
Context configure policy-options policy-statement named-item-64 entry number from next-hop
Treenext-hop
Introduced16.0.R1

Platforms

All

ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis IP address of the next hop to match
Context configure policy-options policy-statement named-item-64 entry number from next-hop ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
Treeip-address

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced16.0.R1

Platforms

All

prefix-list (param-midstring | string)
Synopsis Name of a next hop prefix list to match
Contextconfigure policy-options policy-statement named-item-64 entry number from next-hop prefix-list (param-midstring | string)
Treeprefix-list
String length1 to 32

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced16.0.R1

Platforms

All

origin keyword
Synopsis Route origin match criteria
Context configure policy-options policy-statement named-item-64 entry number from origin keyword
Treeorigin

Description

This command configures a match criteria for the origin attribute of the route. The origin attribute is applicable to BGP routes and to the following subscriber-management routes:

Host routes (for example, IPv4 /32 address, or IPv6 SLAAC prefix) carry the origin attribute with AAA, dynamic, or static values, depending on the address assignment method. For CUPS hosts, the origin attribute is always PFCP. Host routes can also be distinguished using the sub-mgmt option for the protocol command. 

Dynamically provisioned prefixes or loopback addresses use AAA or PFCP origin values, depending on the protocol that provides the prefix and address. Dynamic routes can also be distinguished using the direct option for the protocol command.

Statically configured prefixes under the subscriber interface do not have an origin attribute. These routes can be distinguished using the direct option for the protocol command.

Framed routes for non-CUPS hosts do not have an origin attribute. Framed routes for CUPS hosts use PFCP for the origin attribute. Alternatively, framed routes can be distinguished using the managed option for the protocol command.

The values that are specific to subscriber-management routes are never carried in BGP updates as part of the BGP origin attribute and are not visible within the BGP process.

Optionsigp, egp, incomplete, any, aaa, dynamic, static, bonding, pfcp
Introduced16.0.R1

Platforms

All

policy-variables
Synopsis Enter the policy-variables context
Contextconfigure policy-options policy-statement named-item-64 entry number from policy-variables
Treepolicy-variables
Introduced16.0.R1

Platforms

All

name [variable-name] policy-var-name
Synopsis Enter the name list instance
Context configure policy-options policy-statement named-item-64 entry number from policy-variables name policy-var-name
Treename
Max. instances10
Introduced16.0.R1

Platforms

All

[variable-name] policy-var-name
Synopsis Global variable name used to reference policy functions
Contextconfigure policy-options policy-statement named-item-64 entry number from policy-variables name policy-var-name
Treename
String length1 to 32

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

address (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis IP address of the policy variable
Context configure policy-options policy-statement named-item-64 entry number from policy-variables name policy-var-name address (ipv4-address-no-zone | ipv6-address-no-zone)
Treeaddress

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced16.0.R1

Platforms

All

decimal decimal-number
Synopsis Attribute decimal to which variable name is resolved
Contextconfigure policy-options policy-statement named-item-64 entry number from policy-variables name policy-var-name decimal decimal-number
Treedecimal
Range0.000 to 4294967295.000

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced19.7.R1

Platforms

All

number number
Synopsis Numerical value of the policy variable
Contextconfigure policy-options policy-statement named-item-64 entry number from policy-variables name policy-var-name number number
Treenumber
Range0 to 4294967295

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced16.0.R1

Platforms

All

prefix (ipv4-prefix | ipv6-prefix)
Synopsis Prefix value associated with the variable name
Contextconfigure policy-options policy-statement named-item-64 entry number from policy-variables name policy-var-name prefix (ipv4-prefix | ipv6-prefix)
Treeprefix

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

value named-item
Synopsis Policy variable value
Context configure policy-options policy-statement named-item-64 entry number from policy-variables name policy-var-name value named-item
Treevalue
String length1 to 32

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced16.0.R1

Platforms

All

prefix-list (param-midstring-64 | string)
Synopsis Prefix list as match criterion
Context configure policy-options policy-statement named-item-64 entry number from prefix-list (param-midstring-64 | string)
Treeprefix-list
String length1 to 64
Max. instances28

Notes

This element is ordered by the user.

Introduced16.0.R1

Platforms

All

prefix-list-override [prefix-list] string
Synopsis Enter the prefix-list-override list instance
Contextconfigure policy-options policy-statement named-item-64 entry number from prefix-list-override string
Treeprefix-list-override

Description

Commands in this context convert a prefix list to a specific match type. The routing policy uses the converted list as a match condition.

The prefix list to be converted can be specified by its name, as an expression containing the name of a global variable that holds the name of the prefix list, or as an expression containing the name of a subroutine variable that holds the name of the prefix list.

Max. instances1
Introduced23.10.R1

Platforms

All

protocol
Synopsis Enter the protocol context
Context configure policy-options policy-statement named-item-64 entry number from protocol
Treeprotocol

Description

Commands in this context configure the match criterion based on protocols for a route policy statement entry and may be used for both import and export policies.

Introduced16.0.R1

Platforms

All

instance (keyword | number)
Synopsis Instance for protocol IS-IS, OSPF, or OSPFv3 to match
Contextconfigure policy-options policy-statement named-item-64 entry number from protocol instance (keyword | number)
Treeinstance

Description

This command specifies the OSPF, OSPFv3, or IS-IS instance to be used as the match criterion.

When this command is explicitly configured, the name command must be configured to identify the protocol (OSPF, OSPFv3, or IS-IS).

Range0 to 127
Optionsall
Default0
Introduced 16.0.R1

Platforms

All

name keyword
Synopsis List of protocol names as the match criterion
Contextconfigure policy-options policy-statement named-item-64 entry number from protocol name keyword
Treename

Description

This command specifies a protocol list for the match criterion.  If multiple protocols are specified, the protocol names must belong to the following protocol set:

  • direct

  • static

  • isis

  • aggregate

  • bgp

  • bgp-label

  • direct-interface

If multiple protocols are specified, the instance command cannot be explicitly configured.

The protocol direct-interface route type matches the specific direct interface host IPv4 /32 and IPv6 /128 routes.

Optionsdirect, static, bgp, isis, ospf, rip, aggregate, bgp-vpn, igmp, pim, ospf3, ldp, sub-mgmt, mld, managed, vpn-leak, nat, periodic, ipsec, dhcpv6-pd, dhcpv6-na, dhcpv6-ta, dhcpv6-pd-excl, ripng, bgp-label, direct-interface, arp-nd, rib-api, dhcp-client, evpn-ifl, srv6, video, evpn-ifl-host
Max. instances5
Introduced16.0.R1

Platforms

All

route-distinguisher-list (param-midstring-64 | string)
Synopsis Route distinguisher list as a match criterion
Contextconfigure policy-options policy-statement named-item-64 entry number from route-distinguisher-list (param-midstring-64 | string)
Treeroute-distinguisher-list

Description

This command specifies the (possibly parameterized) name of a route distinguisher (RD) list.

This match condition is supported by policies applied as VRF-import or BGP peer import policies. A BGP route can match a policy entry with this match criterion if the NLRI field contains an RD that is matched by at least one of the entries in the RD list.

BGP routes belonging to address families other than VPN-IPv4, VPN-IPv6, MCAST-VPN-IPv4, MCAST-VPN-IPv6, EVPN, FlowSpec-VPN IPv4, FlowSpec-VPN IPv6, MVPN-IPv4, or MVPN-IPv6 route do not match policy entries with this match criterion.

String length1 to 64
Introduced23.3.R1

Platforms

All

source-address
Synopsis Enter the source-address context
Contextconfigure policy-options policy-statement named-item-64 entry number from source-address
Treesource-address
Introduced16.0.R1

Platforms

All

ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis Source IP address to match
Context configure policy-options policy-statement named-item-64 entry number from source-address ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
Treeip-address

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced16.0.R1

Platforms

All

srv6-sid-prefix (policy-var-name | ipv6-unicast-prefix)
Synopsis SRv6 SID or uSID as match criterion for the BGP route
Contextconfigure policy-options policy-statement named-item-64 entry number from srv6-sid-prefix (policy-var-name | ipv6-unicast-prefix)
Treesrv6-sid-prefix

Description

This command configures either the name of a prefix policy variable or an IPv6 prefix and prefix length, as a match criterion for a BGP route.

Note: If the name of a prefix policy variable is the match criterion, the name must start and end with an at sign (@).

A BGP route matches this condition if it has an SRv6 TLV, and the SID or micro-segment (uSID) value in that TLV is matched by the bits of the IPv6 prefix (up to the specified prefix length).

This match condition is supported in BGP import policies, BGP export policies, and VRF or VSI import policies.

String length1 to 32
Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

srv6-tlv keyword
Synopsis SRv6 TLV presence as match criterion for BGP route
Contextconfigure policy-options policy-statement named-item-64 entry number from srv6-tlv keyword
Treesrv6-tlv

Description

This command configures whether the entry matches a BGP route with a prefix SID attribute containing an SRv6 TLV.

If this command is not configured, a BGP route can match the entry, regardless of whether it has a prefix SID attribute or whether that prefix SID attribute has SRv6 TLVs.

This match condition is supported in BGP import policies, BGP export policies, and VRF or VSI import policies.

If the present option is configured, a BGP route only matches this entry if it has a prefix SID attribute containing an SRv6 TLV.

If the not-present option is configured, a BGP route only matches this entry if it does not have a prefix SID attribute containing an SRv6 TLV.

Optionspresent, not-present
Introduced 23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

state keyword
Synopsis State used as a match criterion
Context configure policy-options policy-statement named-item-64 entry number from state keyword
Treestate

Description

This command configures a criterion that identifies in resilient gateways which routes are associated with an active context and which routes are associated with a standby context.

Optionssrrp-master, srrp-non-master, ipsec-master-with-peer, ipsec-master-without-peer, ipsec-non-master, fsg-active, fsg-standby, fsg-active-path-restoration
Introduced16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

tag (number | keyword)
Synopsis Route tag used as a match criterion
Context configure policy-options policy-statement named-item-64 entry number from tag (number | keyword)
Treetag
Range1 to 4294967295
Optionsno-tag
Introduced16.0.R1

Platforms

All

to
Synopsis Enable the to context
Context configure policy-options policy-statement named-item-64 entry number to
Treeto
Introduced16.0.R1

Platforms

All

neighbor
Synopsis Enter the neighbor context
Context configure policy-options policy-statement named-item-64 entry number to neighbor
Treeneighbor
Introduced16.0.R1

Platforms

All

ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
Synopsis IP address to match the neighbor
Context configure policy-options policy-statement named-item-64 entry number to neighbor ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
Treeip-address

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced16.0.R1

Platforms

All

prefix-list (param-midstring | string)
Synopsis Name to match the neighbor prefix list
Contextconfigure policy-options policy-statement named-item-64 entry number to neighbor prefix-list (param-midstring | string)
Treeprefix-list
String length1 to 32

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced16.0.R1

Platforms

All

prefix-list (param-midstring-64 | string)
Synopsis Prefix list as match criterion
Context configure policy-options policy-statement named-item-64 entry number to prefix-list (param-midstring-64 | string)
Treeprefix-list
String length1 to 64
Max. instances28

Notes

This element is ordered by the user.

Introduced16.0.R1

Platforms

All

protocol
Synopsis Enter the protocol context
Context configure policy-options policy-statement named-item-64 entry number to protocol
Treeprotocol
Introduced16.0.R1

Platforms

All

name keyword
Synopsis Protocol name to match
Context configure policy-options policy-statement named-item-64 entry number to protocol name keyword
Treename
Optionsbgp, isis, ospf, rip, bgp-vpn, ospf3, ldp, vpn-leak, ripng, bgp-label, evpn-ifl
Max. instances2
Introduced16.0.R1

Platforms

All

named-entry [entry-name] named-item-255
Synopsis Enter the named-entry list instance
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255
Treenamed-entry
Max. instances16384

Notes

This element is ordered by the user.

Introduced19.10.R1

Platforms

All

[entry-name] named-item-255
Synopsis Route policy entry name
Context configure policy-options policy-statement named-item-64 named-entry named-item-255
Treenamed-entry
String length1 to 255

Notes

This element is part of a list key.

Introduced19.10.R1

Platforms

All

action
Synopsis Enable the action context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action
Treeaction
Introduced19.10.R1

Platforms

All

advertise-label keyword
Synopsis Label allocation for matched BGP routes
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action advertise-label keyword
Treeadvertise-label

Description

This command configures the label allocation method for advertised routes. The effect of this command depends on the context where the associated policy is applied. 

Optionsper-prefix, pop, pop-and-forward
Introduced19.10.R1

Platforms

All

aigp-metric
Synopsis Enter the aigp-metric context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action aigp-metric
Treeaigp-metric
Introduced19.10.R1

Platforms

All

add (number | string)
Synopsis AIGP metric to add
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action aigp-metric add (number | string)
Treeadd
String length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add or set.

Introduced19.10.R1

Platforms

All

set (keyword | number | string)
Synopsis AIGP metric
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action aigp-metric set (keyword | number | string)
Treeset
String length1 to 32
Range0 to 4294967295
Optionsigp

Notes

The following elements are part of a choice: add or set.

Introduced19.10.R1

Platforms

All

as-path
Synopsis Enter the as-path context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action as-path
Treeas-path
Introduced19.10.R1

Platforms

All

add (param-midstring | string)
Synopsis AS path to add
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action as-path add (param-midstring | string)
Treeadd
String length1 to 32

Notes

The following elements are part of a choice: add or replace.

Introduced19.10.R1

Platforms

All

as-path-prepend
Synopsis Enter the as-path-prepend context
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action as-path-prepend
Treeas-path-prepend
Introduced19.10.R1

Platforms

All

bgp-high-priority boolean
Synopsis Tag routes as high priority for fast table updates
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action bgp-high-priority boolean
Treebgp-high-priority

Description

When configured to true, eligible BGP routes matched by the policy entry or policy default-action are tagged as needing faster route table updates.

This action applies only when the policy is applied as a BGP import policy to a base router BGP peer or VPRN BGP peer and applies only to the following route types:

  •    IPv4

  •    label-IPv4

  •    IPv6

  •    label-IPv6

This command is useful when the BGP RIB contains a large number of routes and quick routing table updates are needed for a small subset of these routes. The effectiveness of this command decreases as the subset becomes a larger proportion of the total RIB.

When configured to false, no routes are tagged for faster route table updates.

Defaultfalse
Introduced20.5.R1

Platforms

All

bgp-med
Synopsis Enter the bgp-med context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action bgp-med
Treebgp-med
Introduced19.10.R1

Platforms

All

set (keyword | number | string)
Synopsis BGP-MED assignment
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action bgp-med set (keyword | number | string)
Treeset
String length1 to 32
Range0 to 4294967295
Optionsigp, min-igp

Notes

The following elements are part of a choice: adjust or set.

Introduced19.10.R1

Platforms

All

bgp-tunnel-metric
Synopsis Enter the bgp-tunnel-metric context
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action bgp-tunnel-metric
Treebgp-tunnel-metric

Description

Commands in this context configure the tunnel-table metrics associated with BGP label unicast routes that pass through to the default action of the policy.

Introduced20.5.R1

Platforms

All

prefer-aigp boolean
Synopsis Use AIGP attribute as tunnel metric when present
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action bgp-tunnel-metric prefer-aigp boolean
Treeprefer-aigp

Description

When configured to true, and a BGP-LU route is selected for installation in TTM and it is matched by this action in a BGP import policy. The TTM metric of the tunnel is set to the AIGP metric value of the BGP-LU route plus the IGP cost to reach the BGP next-hop if it has the AIGP path attribute, otherwise it is set to the value implied by the value leaf.

When configured to false, the AIGP attribute is removed from the advertised routes and is ignored if present in the received routes.

Defaultfalse
Introduced20.5.R1

Platforms

All

prefer-med boolean
Synopsis Use MED attribute as tunnel metric when present
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action bgp-tunnel-metric prefer-med boolean
Treeprefer-med

Description

When configured to true, if a BGP-LU route is selected for installation in the TTM and is matched by this action in a BGP import policy, the TTM metric of the tunnel is set to the MED metric value of the BGP-LU route with the IGP cost to reach the BGP next hop added to it.

When configured to false, the BGP tunnel metric associated with the BGP-LU route accepted by this policy action is not determined using the MED attribute.

Defaultfalse
Introduced23.3.R1

Platforms

All

value (string | number)
Synopsis BGP tunnel table metric value
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action bgp-tunnel-metric value (string | number)
Treevalue

Description

This command configures a BGP tunnel metric is assigned to routes that do not match any entry.

If a BGP-LU route is selected for installation in TTM and it is matched by this action in a BGP import policy, the TTM metric of the associated tunnel is set to this value (or the value associated with the parameter name) if either:

  • the prefer-aigp option is set to false

  • the prefer-aigp option is set to true but the BGP-LU route does not have an AIGP attribute

String length1 to 32
Range0 to 4294967295
Introduced20.5.R1

Platforms

All

community
Synopsis Enter the community context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action community
Treecommunity
Introduced19.10.R1

Platforms

All

add (param-midstring-64 | string)
Synopsis List of community names to add
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action community add (param-midstring-64 | string)
Treeadd
String length1 to 64
Max. instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 19.10.R1

Platforms

All

remove (param-midstring-64 | string)
Synopsis List of community names to remove
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action community remove (param-midstring-64 | string)
Treeremove
String length1 to 64
Max. instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 19.10.R1

Platforms

All

replace (param-midstring-64 | string)
Synopsis List of community names to replace
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action community replace (param-midstring-64 | string)
Treereplace
String length1 to 64
Max. instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 19.10.R1

Platforms

All

create-mpls-tunnel boolean
Synopsis Create an MPLS tunnel
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action create-mpls-tunnel boolean
Treecreate-mpls-tunnel

Description

When configured to true, the router creates an MPLS tunnel.

This command is supported for only the following address families:

  • evpn

  • ipv4

  • ipv6

  • label-ipv4

  • label-ipv6

  • vpn-ipv4

  • vpn-ipv6

Defaultfalse
Introduced 21.10.R1

Platforms

All

damping (keyword | param-midstring | string)
Synopsis Damping profile used for routes
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action damping (keyword | param-midstring | string)
Treedamping
String length1 to 32
Optionsnone
Introduced19.10.R1

Platforms

All

dest-class number
Synopsis Default destination class for the policy statement
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action dest-class number
Treedest-class

Description

This command specifies the policy accounting destination class index to associate with matched routes.

Range1 to 255
Introduced19.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

egress-statistics boolean
Synopsis Enable egress statistics for BGP-LU routes
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action egress-statistics boolean
Treeegress-statistics

Description

When configured to true, this command enables the allocation of statistical indexes to BGP labeled unicast route entries that are programmed on egress data paths.

When configured to false, this command disables the allocation of statistical indexes to BGP-LU route entries.

Defaultfalse
Introduced20.10.R1

Platforms

All

flex-algo (string | number)
Synopsis Flexible algorithm for BGP next-hop autobind operation
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action flex-algo (string | number)
Treeflex-algo

Description

This command configures the Flex-Algorithm for use in the BGP next-hop automatic bind operation in a BGP import policy. A Flex-Algorithm aware autobind of the BGP next-hop is enabled when the route is matched by the policy statement entry.

Flex-Algorithm aware next-hop lookup is supported for unicast BGP, VPRN, and BGP-LU.

This command is not supported for multicast address families.

String length1 to 32
Range128 to 255
Introduced20.10.R1

Platforms

All

forwarding-class
Synopsis Enter the forwarding-class context
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action forwarding-class
Treeforwarding-class
Introduced19.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

ingress-statistics boolean
Synopsis Enable ingress statistics for BGP-LU routes
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action ingress-statistics boolean
Treeingress-statistics

Description

When configured to true, this command enables the allocation of statistical indexes to BGP labeled unicast route entries that are programmed on ingress data paths. For effective operation, a prefix must be advertised with a label per prefix for ILM statistics.

When configured to false, this command disables the allocation of statistical indexes to BGP-LU route entries.

Defaultfalse
Introduced20.10.R1

Platforms

All

metric
Synopsis Enter the metric context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action metric
Treemetric
Introduced19.10.R1

Platforms

All

add (number | string)
Synopsis Metric to add
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action metric add (number | string)
Treeadd
String length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add, set, or subtract.

Introduced19.10.R1

Platforms

All

set (number | string)
Synopsis Metric to assign
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action metric set (number | string)
Treeset
String length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add, set, or subtract.

Introduced19.10.R1

Platforms

All

subtract (number | string)
Synopsis Metric to subtract
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action metric subtract (number | string)
Treesubtract
String length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add, set, or subtract.

Introduced19.10.R1

Platforms

All

multicast-redirection
Synopsis Enter the multicast-redirection context
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action multicast-redirection
Treemulticast-redirection
Introduced19.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

nat-policy (param-midstring | string)
Synopsis BGP-VPN imported route and a NAT policy association
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action nat-policy (param-midstring | string)
Treenat-policy

Description

This command assigns a NAT policy to the matched routes that do not have a more specific NAT policy configured under action.

A dynamic route obtained by BGP-VPN can be imported into an inside (private side) routing context in NAT environment. This route must be associated with a NAT policy that maps traffic into a NAT pool and outside routing context. If the NAT policy is not specified within the route policy entry, the imported NAT route is, by default, associated with the default NAT policy defined in the NAT inside routing context.

All BGP-VPN routes that are destined to be imported into the NAT inside routing context must have action-type accept regardless of whether the NAT policy is configured in the action. 

String length1 to 32
Introduced21.5.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
Synopsis Next-hop IP address applied to routes
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
Treenext-hop
String length1 to 32
Optionspeer-address, self
Introduced 19.10.R1

Platforms

All

origin (keyword | string)
Synopsis BGP origin for routes that are exported into BGP
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action origin (keyword | string)
Treeorigin
String length1 to 32
Optionsigp, egp, incomplete
Introduced19.10.R1

Platforms

All

source-class number
Synopsis Default source class for the policy statement
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action source-class number
Treesource-class

Description

This command specifies the policy accounting source class index to associate with matched routes.

Range1 to 255
Introduced19.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

sr-label-index
Synopsis Enter the sr-label-index context
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action sr-label-index
Treesr-label-index

Description

Commands in this context configure the policy action to associate a BGP segment-routing label index value with all /32 BGP labeled IPv4 routes.

The use of this action in a policy entry that matches more than one /32 labeled IPv4 route may create SID conflicts.

This action only takes effect in BGP peer import policies (and only on received /32 labeled IPv4 routes) and in route table import policies associated with the labeled IPv4 RIB.

When this action occurs in a policy applied as a peer import policy, a prefix SID attribute can be added to a received /32 labeled IPv4 route that was not sent with this attribute, or the received prefix SID attribute can be replaced with a new one.

Introduced19.10.R1

Platforms

All

prefer-igp boolean
Synopsis Use the SR label index from the IGP route when present
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action sr-label-index prefer-igp boolean
Treeprefer-igp

Description

When configured to true, BGP obtains the SID index from the IGP route (if a SID index is present) and the configure router bgp segment-routing prefix-sid-range global command is set to true.

This command applies only to route table import policies.

When configured to false, or the SID index is not present in the IGP route, or the configure router bgp segment-routing prefix-sid-range global command is not set to true, BGP obtains the label index value from the value command.

Defaultfalse
Introduced19.10.R1

Platforms

All

value (string | number)
Synopsis BGP SR label index associated with routes
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action sr-label-index value (string | number)
Treevalue

Description

This command specifies the BGP SR label index value to be associated with a route or routes.

If this command specifies an index value that causes a SID conflict with another BGP route, all conflicting BGP routes are re-advertised with label values based on dynamic allocation rather than SID-based allocation.

If this command specifies an index value that causes a SID conflict with an IGP route, the BGP route is re-advertised with a label value based on dynamic allocation rather than SID-based allocation.

String length1 to 32
Range0 to 1048575
Introduced19.10.R1

Platforms

All

sr-maintenance-policy (param-midstring | string)
Synopsis SR maintenance policy as an action
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action sr-maintenance-policy (param-midstring | string)
Treesr-maintenance-policy

Description

This command applies a named segment routing maintenance policy as an action for route policies. It is only used for SR policy routes.

String length1 to 32
Introduced20.10.R1

Platforms

All

sr-return-path-bfd-label (policy-var-name | number)
Synopsis S-BFD return path label
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action sr-return-path-bfd-label (policy-var-name | number)
Treesr-return-path-bfd-label

Description

This command configures an additional MPLS label to add to the bottom of the label stack for the S-BFD packet and sets the S-BFD session to echo mode.

This command applies to the initiator of the S-BFD sessions. The label value can either be a binding SID for an SR policy or another MPLS path configured on the reflector router. Instead of being routed through the IGP path, the S-BFD packet returns to the initiator through the MPLS return path. This value takes precedence over the return path label value in a maintenance policy (configured using the configure router segment-routing maintenance-policy return-path-label command) that is also applied as the policy-statement action. This command can only be configured if the sr-maintenance-policy is also configured.

If this command is unconfigured, and there is no return-path-label command configuration in the maintenance policy that is also applied as an action, and the policy statement is reevaluated, S-BFD returns to asynchronous mode and no return path label is pushed by the initiator node. S-BFD packets for this LSP or path received by the reflector are routed through the IGP path.

String length1 to 32
Range32 to 1048575
Introduced23.10.R1

Platforms

All

srv6-locator (param-midstring-64 | string)
Synopsis Locator for SRv6 TLV to use
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 action srv6-locator (param-midstring-64 | string)
Treesrv6-locator

Description

This command configures either a string encoding a midstring parameter delimited by at signs (@), or a reference to a named locator for the SRv6 TLV to use.

For a VRF export policy, the referenced locator must already be configured using the commands in the configure service vprn segment-routing-v6 locator context.

For a BGP export policy, the referenced locator must already be configured using the commands in the configure router segment-routing segment-routing-v6 base-routing-instance locator context.

String length1 to 64
Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

srv6-micro-segment-locator (param-midstring-64 | string)
Synopsis Micro-segment locator for SRv6 TLV to use
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action srv6-micro-segment-locator (param-midstring-64 | string)
Treesrv6-micro-segment-locator

Description

This command configures either a string encoding a midstring parameter delimited by at signs (@), or a reference to a named micro-segment locator for the SRv6 TLV to use.

For a VRF export policy, the referenced micro-segment locator must already be configured using the commands in the configure service vprn segment-routing-v6 micro-segment-locator context.

For a BGP export policy, the referenced micro-SID locator must already be configured using the commands in the configure router segment-routing segment-routing-v6 base-routing-instance micro-segment-locator context.

String length1 to 64
Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
Synopsis SRv6 return path BFD SID applied to SRv6 policy routes
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
Treesrv6-return-path-bfd-sid

Description

This command configures the S-BFD session to echo mode and pushes an additional SRv6 SID in the SRH only for S-BFD packets sent on the imported SRv6 policy.

String length1 to 32
Introduced23.3.R1

Platforms

All

tag (number | string)
Synopsis OSPF RIP or IS-IS tag applied to routes
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 action tag (number | string)
Treetag
String length1 to 32
Range1 to 4294967295
Introduced19.10.R1

Platforms

All

conditional-expression
Synopsis Enable the conditional-expression context
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 conditional-expression
Treeconditional-expression
Introduced19.10.R1

Platforms

All

from
Synopsis Enable the from context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from
Treefrom
Introduced19.10.R1

Platforms

All

aggregate-contributor boolean
Synopsis Enable aggregate route match criterion
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from aggregate-contributor boolean
Treeaggregate-contributor

Description

When configured to true, matches all routes (BGP and non-BGP) that have contributed to an active aggregate route. If the prefix tree above a particular route includes no active aggregate routes or the most specific active aggregate route in the prefix tree above this route has a policy that rejects the route, then it is not considered as an aggregate-contributor.

This match condition is only supported when used in a BGP export policy. If it is used in an entry of a BGP import policy, vrf-export policy or vrf-import policy, no routes are matched by that entry.

When configured to false, no routes (BGP and non-BGP) that have contributed to an active aggregate route are matched.

Defaultfalse
Introduced20.10.R1

Platforms

All

as-path
Synopsis Enter the as-path context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from as-path
Treeas-path
Introduced19.10.R1

Platforms

All

group (param-midstring | string)
Synopsis AS path group as a match criterion
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from as-path group (param-midstring | string)
Treegroup
String length1 to 32

Notes

The following elements are part of a choice: group or name.

Introduced19.10.R1

Platforms

All

length
Synopsis Enter the length context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from as-path length
Treelength
Introduced19.10.R1

Platforms

All

name (param-midstring | string)
Synopsis AS path name to match
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from as-path name (param-midstring | string)
Treename

Description

This command specifies an AS path regular expression name for the route policy entry.

Policy parameters must be enclosed by at-signs (@) and may be midstring; for example, "@variable@," "start@variable@end", "@variable@end", or "start@variable@".

String length1 to 32

Notes

The following elements are part of a choice: group or name.

Introduced19.10.R1

Platforms

All

cluster-id
Synopsis Enter the cluster-id context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from cluster-id
Treecluster-id
Introduced19.10.R1

Platforms

All

ip-address ipv4-prefix-with-host-bits
Synopsis Cluster list attribute IP addresses for route matching
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from cluster-id ip-address ipv4-prefix-with-host-bits
Treeip-address
Max. instances5

Notes

The following elements are part of a choice: ip-address or none-cluster-list.

This element is ordered by the user.

Introduced 19.10.R1

Platforms

All

color number
Synopsis Color ID as a match criterion
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from color number
Treecolor

Description

This command configures an SR Policy color ID as a route policy match criterion. This match criterion is only used in import policies.

Range0 to 4294967295
Introduced20.10.R1

Platforms

All

community
Synopsis Enter the community context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from community
Treecommunity
Introduced19.10.R1

Platforms

All

count
Synopsis Enter the count context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from community count
Treecount
Introduced19.10.R1

Platforms

All

expression string
Synopsis Community expression statement as a match criterion
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from community expression string
Treeexpression

Description

This command configures a community expression statement as a match criterion for the policy statement. This statement is a logical expression string composed of logical operators (keywords AND, OR, NOT), community names delimited by square brackets [], and parentheses ( ) to group subexpressions. If the expression contains special characters (for example, #, $, spaces), the entire string must be enclosed in double quotes.

The expression specified must already be defined using the configure policy-options community expression expr command.

The following are examples of valid logical expressions:

"[community_list_A] OR ([community_list_B] AND [community_list_C])"

"NOT [community_list_A]"

"[community_list_A] AND [community_list_B] OR [community_list_C]"

"NOT ([community_list_A] OR [community_list_B] OR [community_list_C])"

String length1 to 900

Notes

The following elements are part of a choice: expression or name.

Introduced19.10.R1

Platforms

All

name (param-midstring-64 | string)
Synopsis Community list name
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from community name (param-midstring-64 | string)
Treename
String length1 to 64

Notes

The following elements are part of a choice: expression or name.

Introduced19.10.R1

Platforms

All

distinguisher number
Synopsis SR policy distinguisher as a match criterion
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from distinguisher number
Treedistinguisher

Description

This command configures an SR Policy distinguisher as a route policy match criterion. This match criterion is only used in import policies.

Range0 to 4294967295
Introduced20.10.R1

Platforms

All

endpoint (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis SR policy endpoint address as a match criterion
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from endpoint (ipv4-address-no-zone | ipv6-address-no-zone)
Treeendpoint

Description

This command configures an SR Policy endpoint address as a route policy match criterion. This match criterion is only used in import policies.

Introduced20.10.R1

Platforms

All

evpn-type keyword
Synopsis EVPN type as a match criterion for the entry
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from evpn-type keyword
Treeevpn-type
Optionsethernet-auto-discovery, mac-ip-advertisement, inclusive-multicast, ethernet-segment, ip-prefix, selective-multicast, multicast-join-sync, multicast-leave-sync, selective-pmsi-auto-discovery
Introduced19.10.R1

Platforms

All

family keyword
Synopsis Address family as the match condition
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from family keyword
Treefamily

Description

This command specifies address families as matching conditions.

Optionsipv4, vpn-ipv4, ipv6, mcast-ipv4, vpn-ipv6, l2-vpn, mvpn-ipv4, mdt-safi, ms-pw, flow-ipv4, route-target, mcast-vpn-ipv4, mvpn-ipv6, flow-ipv6, evpn, mcast-ipv6, label-ipv4, label-ipv6, bgp-ls, mcast-vpn-ipv6, sr-policy-ipv4, sr-policy-ipv6, flow-vpn-ipv4, flow-vpn-ipv6
Max. instances20
Introduced 19.10.R1

Platforms

All

flowspec
Synopsis Enter the flowspec context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from flowspec
Treeflowspec

Description

Commands in this context configure the route-matching rules for BGP FlowSpec routes.

Introduced19.10.R1

Platforms

All

dest (param-midstring | string)
Synopsis Destination IP prefix list to match BGP FlowSpec routes
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from flowspec dest (param-midstring | string)
Treedest

Description

This command specifies a prefix list used by the router to match BGP FlowSpec routes based on the destination IP prefix in the flow specification.

An IPv4 FlowSpec route is matched if its NLRI contains a type 1 subcomponent encoding a prefix and prefix length that is covered by an entry in the referenced prefix list. An IPv6 FlowSpec route is matched if its NLRI contains a type 1 component encoding prefix-offset = 0 and a prefix and prefix length that is covered by an entry in the referenced prefix list.

This command has no effect when the policy is not applied as a BGP import or export policy.

String length1 to 32
Introduced19.10.R1

Platforms

All

source (param-midstring | string)
Synopsis Source IP prefix list to match BGP FlowSpec routes
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from flowspec source (param-midstring | string)
Treesource

Description

This command specifies a prefix list used by the router to match BGP FlowSpec routes based on the source IP prefix in the flow specification.

An IPv4 FlowSpec route is matched if its NLRI contains a type 2 subcomponent encoding a prefix and prefix length that is covered by an entry in the referenced prefix list. An IPv6 FlowSpec route is matched if its NLRI contains a type 2 component encoding prefix-offset = 0 and a prefix and prefix length that is covered by an entry in the referenced prefix list.

This command has no effect when the policy is not applied as a BGP import or export policy.

String length1 to 32
Introduced19.10.R1

Platforms

All

interface (named-item | interface-name | interface-name | interface-name)
Synopsis Interface name as match criterion
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from interface (named-item | interface-name | interface-name | interface-name)
Treeinterface
String length1 to 32
Max. instances1

Notes

This element is ordered by the user.

Introduced19.10.R1

Platforms

All

interface-subnets
Synopsis Enter the interface-subnets context
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from interface-subnets
Treeinterface-subnets

Description

Commands in this context configure the applied router instance and interfaces that are used as the matching condition within each policy statement entry when exporting the IP address of the associated interface to a routing protocol.

The interface subnet policy statement match criterion is applied to the following unicast use case contexts:

  • export, when used with OSPFv2, OSPFv3, IS-IS, RIP, RIPng, and BGP

  • route-table-import, when used with BGP

  • vrf-export, when used with MP-BGP

Introduced21.2.R1

Platforms

All

ip-int-name interface-name
Synopsis Interface name as the match criterion
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from interface-subnets ip-int-name interface-name
Treeip-int-name

Description

This command specifies the interface name to match when exporting the IP address of the associated interface to a routing protocol.

String length1 to 32
Max. instances10

Notes

This element is ordered by the user.

Introduced21.2.R1

Platforms

All

local-preference
Synopsis Enter the local-preference context
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from local-preference
Treelocal-preference
Introduced19.10.R1

Platforms

All

metric
Synopsis Enter the metric context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from metric
Treemetric
Introduced19.10.R1

Platforms

All

mvpn-type keyword
Synopsis MVPN type as a match criterion for the entry
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from mvpn-type keyword
Treemvpn-type
Optionsintra-as-ipmsi-auto-discovery, inter-as-ipmsi-auto-discovery, s-pmsi-auto-discovery, intra-as-segment-leaf-auto-discovery, source-active-auto-discovery, shared-tree-join, source-tree-join
Introduced19.10.R1

Platforms

All

neighbor
Synopsis Enter the neighbor context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from neighbor
Treeneighbor
Introduced19.10.R1

Platforms

All

ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
Synopsis IP address to match the neighbor
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from neighbor ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
Treeip-address

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced19.10.R1

Platforms

All

prefix-list (param-midstring | string)
Synopsis Name to match the neighbor prefix list
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from neighbor prefix-list (param-midstring | string)
Treeprefix-list
String length1 to 32

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced19.10.R1

Platforms

All

next-hop
Synopsis Enter the next-hop context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from next-hop
Treenext-hop
Introduced19.10.R1

Platforms

All

ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis IP address of the next hop to match
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from next-hop ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
Treeip-address

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced19.10.R1

Platforms

All

prefix-list (param-midstring | string)
Synopsis Name of a next hop prefix list to match
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from next-hop prefix-list (param-midstring | string)
Treeprefix-list
String length1 to 32

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced19.10.R1

Platforms

All

origin keyword
Synopsis Route origin match criteria
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from origin keyword
Treeorigin

Description

This command configures a match criteria for the origin attribute of the route. The origin attribute is applicable to BGP routes and to the following subscriber-management routes:

Host routes (for example, IPv4 /32 address, or IPv6 SLAAC prefix) carry the origin attribute with AAA, dynamic, or static values, depending on the address assignment method. For CUPS hosts, the origin attribute is always PFCP. Host routes can also be distinguished using the sub-mgmt option for the protocol command. 

Dynamically provisioned prefixes or loopback addresses use AAA or PFCP origin values, depending on the protocol that provides the prefix and address. Dynamic routes can also be distinguished using the direct option for the protocol command.

Statically configured prefixes under the subscriber interface do not have an origin attribute. These routes can be distinguished using the direct option for the protocol command.

Framed routes for non-CUPS hosts do not have an origin attribute. Framed routes for CUPS hosts use PFCP for the origin attribute. Alternatively, framed routes can be distinguished using the managed option for the protocol command.

The values that are specific to subscriber-management routes are never carried in BGP updates as part of the BGP origin attribute and are not visible within the BGP process.

Optionsigp, egp, incomplete, any, aaa, dynamic, static, bonding, pfcp
Introduced19.10.R1

Platforms

All

policy-variables
Synopsis Enter the policy-variables context
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from policy-variables
Treepolicy-variables
Introduced19.10.R1

Platforms

All

name [variable-name] policy-var-name
Synopsis Enter the name list instance
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from policy-variables name policy-var-name
Treename

Description

Commands in this context configure global variables for use across BGP peers of a common type (transit, peer, customer, and so on).

Max. instances10
Introduced19.10.R1

Platforms

All

address (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis IP address of the policy variable
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from policy-variables name policy-var-name address (ipv4-address-no-zone | ipv6-address-no-zone)
Treeaddress

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced19.10.R1

Platforms

All

decimal decimal-number
Synopsis Attribute decimal to which variable name is resolved
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from policy-variables name policy-var-name decimal decimal-number
Treedecimal
Range0.000 to 4294967295.000

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced19.10.R1

Platforms

All

prefix (ipv4-prefix | ipv6-prefix)
Synopsis Prefix value associated with the variable name
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from policy-variables name policy-var-name prefix (ipv4-prefix | ipv6-prefix)
Treeprefix

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

prefix-list (param-midstring-64 | string)
Synopsis Prefix list as match criterion
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from prefix-list (param-midstring-64 | string)
Treeprefix-list
String length1 to 64
Max. instances28

Notes

This element is ordered by the user.

Introduced19.10.R1

Platforms

All

prefix-list-override [prefix-list] string
Synopsis Enter the prefix-list-override list instance
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from prefix-list-override string
Treeprefix-list-override

Description

Commands in this context convert a prefix list to a specific match type. The routing policy uses the converted list as a match condition.

The prefix list to be converted can be specified by its name, as an expression containing the name of a global variable that holds the name of the prefix list, or as an expression containing the name of a subroutine variable that holds the name of the prefix list.

Max. instances1
Introduced23.10.R1

Platforms

All

protocol
Synopsis Enter the protocol context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from protocol
Treeprotocol

Description

Commands in this context configure the match criterion based on protocols for a route policy statement entry and may be used for both import and export policies.

Introduced19.10.R1

Platforms

All

instance (keyword | number)
Synopsis Instance for protocol IS-IS, OSPF, or OSPFv3 to match
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from protocol instance (keyword | number)
Treeinstance

Description

This command specifies the OSPF, OSPFv3, or IS-IS instance to be used as the match criterion.

When this command is explicitly configured, the name command must be configured to identify the protocol (OSPF, OSPFv3, or IS-IS).

Range0 to 127
Optionsall
Default0
Introduced 19.10.R1

Platforms

All

name keyword
Synopsis List of protocol names as the match criterion
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from protocol name keyword
Treename

Description

This command specifies a protocol list for the match criterion.  If multiple protocols are specified, the protocol names must belong to the following protocol set:

  • direct

  • static

  • isis

  • aggregate

  • bgp

  • bgp-label

  • direct-interface

If multiple protocols are specified, the instance command cannot be explicitly configured.

The protocol direct-interface route type matches the specific direct interface host IPv4 /32 and IPv6 /128 routes.

Optionsdirect, static, bgp, isis, ospf, rip, aggregate, bgp-vpn, igmp, pim, ospf3, ldp, sub-mgmt, mld, managed, vpn-leak, nat, periodic, ipsec, dhcpv6-pd, dhcpv6-na, dhcpv6-ta, dhcpv6-pd-excl, ripng, bgp-label, direct-interface, arp-nd, rib-api, dhcp-client, evpn-ifl, srv6, video, evpn-ifl-host
Max. instances5
Introduced19.10.R1

Platforms

All

route-distinguisher-list (param-midstring-64 | string)
Synopsis Route distinguisher list as a match criterion
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from route-distinguisher-list (param-midstring-64 | string)
Treeroute-distinguisher-list

Description

This command specifies the (possibly parameterized) name of a route distinguisher (RD) list.

This match condition is supported by policies applied as VRF-import or BGP peer import policies. A BGP route can match a policy entry with this match criterion if the NLRI field contains an RD that is matched by at least one of the entries in the RD list.

BGP routes belonging to address families other than VPN-IPv4, VPN-IPv6, MCAST-VPN-IPv4, MCAST-VPN-IPv6, EVPN, FlowSpec-VPN IPv4, FlowSpec-VPN IPv6, MVPN-IPv4, or MVPN-IPv6 route do not match policy entries with this match criterion.

String length1 to 64
Introduced23.3.R1

Platforms

All

source-address
Synopsis Enter the source-address context
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from source-address
Treesource-address
Introduced19.10.R1

Platforms

All

srv6-sid-prefix (policy-var-name | ipv6-unicast-prefix)
Synopsis SRv6 SID or uSID as match criterion for the BGP route
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from srv6-sid-prefix (policy-var-name | ipv6-unicast-prefix)
Treesrv6-sid-prefix

Description

This command configures either the name of a prefix policy variable or an IPv6 prefix and prefix length, as a match criterion for a BGP route.

Note: If the name of a prefix policy variable is the match criterion, the name must start and end with an at sign (@).

A BGP route matches this condition if it has an SRv6 TLV, and the SID or micro-segment (uSID) value in that TLV is matched by the bits of the IPv6 prefix (up to the specified prefix length).

This match condition is supported in BGP import policies, BGP export policies, and VRF or VSI import policies.

String length1 to 32
Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

srv6-tlv keyword
Synopsis SRv6 TLV presence as match criterion for BGP route
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 from srv6-tlv keyword
Treesrv6-tlv

Description

This command configures whether the entry matches a BGP route with a prefix SID attribute containing an SRv6 TLV.

If this command is not configured, a BGP route can match the entry, regardless of whether it has a prefix SID attribute or whether that prefix SID attribute has SRv6 TLVs.

This match condition is supported in BGP import policies, BGP export policies, and VRF or VSI import policies.

If the present option is configured, a BGP route only matches this entry if it has a prefix SID attribute containing an SRv6 TLV.

If the not-present option is configured, a BGP route only matches this entry if it does not have a prefix SID attribute containing an SRv6 TLV.

Optionspresent, not-present
Introduced 23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

state keyword
Synopsis State used as a match criterion
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from state keyword
Treestate

Description

This command configures a criterion that identifies in resilient gateways which routes are associated with an active context and which routes are associated with a standby context.

Optionssrrp-master, srrp-non-master, ipsec-master-with-peer, ipsec-master-without-peer, ipsec-non-master, fsg-active, fsg-standby, fsg-active-path-restoration
Introduced19.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

tag (number | keyword)
Synopsis Route tag used as a match criterion
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 from tag (number | keyword)
Treetag
Range1 to 4294967295
Optionsno-tag
Introduced19.10.R1

Platforms

All

to
Synopsis Enable the to context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 to
Treeto
Introduced19.10.R1

Platforms

All

neighbor
Synopsis Enter the neighbor context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 to neighbor
Treeneighbor
Introduced19.10.R1

Platforms

All

ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
Synopsis IP address to match the neighbor
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 to neighbor ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
Treeip-address

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced19.10.R1

Platforms

All

prefix-list (param-midstring | string)
Synopsis Name to match the neighbor prefix list
Contextconfigure policy-options policy-statement named-item-64 named-entry named-item-255 to neighbor prefix-list (param-midstring | string)
Treeprefix-list
String length1 to 32

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced19.10.R1

Platforms

All

prefix-list (param-midstring-64 | string)
Synopsis Prefix list as match criterion
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 to prefix-list (param-midstring-64 | string)
Treeprefix-list
String length1 to 64
Max. instances28

Notes

This element is ordered by the user.

Introduced19.10.R1

Platforms

All

protocol
Synopsis Enter the protocol context
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 to protocol
Treeprotocol
Introduced19.10.R1

Platforms

All

name keyword
Synopsis Protocol name to match
Context configure policy-options policy-statement named-item-64 named-entry named-item-255 to protocol name keyword
Treename
Optionsbgp, isis, ospf, rip, bgp-vpn, ospf3, ldp, vpn-leak, ripng, bgp-label, evpn-ifl
Max. instances2
Introduced19.10.R1

Platforms

All

prefix-list [name] named-item-64

Synopsis Enter the prefix-list list instance
Contextconfigure policy-options prefix-list named-item-64
Treeprefix-list
Introduced16.0.R1

Platforms

All

[name] named-item-64
Synopsis Prefix list name
Context configure policy-options prefix-list named-item-64
Treeprefix-list

Description

This command specifies the name for a prefix list.

Policy parameters must be enclosed by at-signs (@) and may be midstring; for example, "@variable@", "start@variable@end", "@variable@end", or "start@variable@".

String length1 to 64

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

prefix [ip-prefix] (ipv4-prefix | ipv6-prefix) type keyword
Synopsis Enter the prefix list instance
Contextconfigure policy-options prefix-list named-item-64 prefix (ipv4-prefix | ipv6-prefix) type keyword
Treeprefix
Introduced16.0.R1

Platforms

All

[ip-prefix] (ipv4-prefix | ipv6-prefix)
Synopsis IP prefix associated with the prefix length
Contextconfigure policy-options prefix-list named-item-64 prefix (ipv4-prefix | ipv6-prefix) type keyword
Treeprefix

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

type keyword
Synopsis Prefix list match type
Context configure policy-options prefix-list named-item-64 prefix (ipv4-prefix | ipv6-prefix) type keyword
Treeprefix
Optionsexact, longer, through, range, to, address-mask

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

end-length number
Synopsis Prefix range end length
Context configure policy-options prefix-list named-item-64 prefix (ipv4-prefix | ipv6-prefix) type keyword end-length number
Treeend-length
Range0 to 128

Notes

The following elements are part of a choice: mask-pattern, (end-length and start-length), through-length, or to-prefix.

Introduced16.0.R1

Platforms

All

mask-pattern [address] (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis Add a list entry for mask-pattern
Contextconfigure policy-options prefix-list named-item-64 prefix (ipv4-prefix | ipv6-prefix) type keyword mask-pattern (ipv4-address-no-zone | ipv6-address-no-zone)
Treemask-pattern

Notes

The following elements are part of a choice: mask-pattern, (end-length and start-length), through-length, or to-prefix.

Introduced20.7.R1

Platforms

All

[address] (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis Address mask for matching routes to the prefix entry
Contextconfigure policy-options prefix-list named-item-64 prefix (ipv4-prefix | ipv6-prefix) type keyword mask-pattern (ipv4-address-no-zone | ipv6-address-no-zone)
Treemask-pattern

Description

This command specifies the address mask to compare against the prefix entry to determine whether the route is considered a match.

A route matches the prefix entry if the following conditions are met.

  • The bitwise logical AND of the prefix address and its mask matches the bitwise logical AND of the route address and its mask.

  • The prefix length of the prefix entry matches the prefix length of the route.

For example, for a prefix entry of 17.1.0.0/32, routes with an address 17.1.x.0 (where x can be 0 through 255) and a prefix length of 32 match the entry.

Notes

This element is part of a list key.

Introduced20.7.R1

Platforms

All

start-length number
Synopsis Start in the prefix range length
Context configure policy-options prefix-list named-item-64 prefix (ipv4-prefix | ipv6-prefix) type keyword start-length number
Treestart-length
Range0 to 128

Notes

The following elements are part of a choice: mask-pattern, (end-length and start-length), through-length, or to-prefix.

Introduced16.0.R1

Platforms

All

through-length number
Synopsis Prefix through length
Context configure policy-options prefix-list named-item-64 prefix (ipv4-prefix | ipv6-prefix) type keyword through-length number
Treethrough-length
Range0 to 128

Notes

The following elements are part of a choice: mask-pattern, (end-length and start-length), through-length, or to-prefix.

Introduced16.0.R1

Platforms

All

to-prefix [ip-prefix] (ipv4-prefix | ipv6-prefix)
Synopsis Add a list entry for to-prefix
Contextconfigure policy-options prefix-list named-item-64 prefix (ipv4-prefix | ipv6-prefix) type keyword to-prefix (ipv4-prefix | ipv6-prefix)
Treeto-prefix

Notes

The following elements are part of a choice: mask-pattern, (end-length and start-length), through-length, or to-prefix.

Introduced20.7.R1

Platforms

All

[ip-prefix] (ipv4-prefix | ipv6-prefix)
Synopsis IP prefix for "to" match type
Context configure policy-options prefix-list named-item-64 prefix (ipv4-prefix | ipv6-prefix) type keyword to-prefix (ipv4-prefix | ipv6-prefix)
Treeto-prefix

Description

This command configures an IP prefix to use in a route policy prefix list for the to match type. If the prefix entry is in the format prefix1/length1, and this command is configured in the format prefix2/length2, a route matches the prefix entry if the following conditions are met.

  • The route shares the same most-significant bits (specified by length1) with the prefix entry

  • The route shares the same most-significant bits (specified by length2) with this IP prefix value

  • The prefix length of the route is in the range of length1 to length2 (inclusive)

For example, for a prefix entry of 10.0.0.8 with a to IP prefix value of 10.0.0.0/32, routes 10.0.0.0/8, 10.0.0.0/9, 10.0.0.0.0/10, and so on, to 10.0.0.0/32 are considered matches for the prefix entry.

Notes

This element is part of a list key.

Introduced20.7.R1

Platforms

All

route-distinguisher-list [name] named-item-64

Synopsis Enter the route-distinguisher-list list instance
Contextconfigure policy-options route-distinguisher-list named-item-64
Treeroute-distinguisher-list
Introduced23.3.R1

Platforms

All

[name] named-item-64
Synopsis Route distinguisher list name
Context configure policy-options route-distinguisher-list named-item-64
Treeroute-distinguisher-list

Description

This command creates a list of entries used to match the RD in BGP routes of specific address families.

String length1 to 64

Notes

This element is part of a list key.

Introduced23.3.R1

Platforms

All

rd-entry [rd] string
Synopsis Add a list entry for rd-entry
Context configure policy-options route-distinguisher-list named-item-64 rd-entry string
Treerd-entry
Max. instances128
Introduced23.3.R1

Platforms

All

[rd] string
Synopsis Route distinguisher
Context configure policy-options route-distinguisher-list named-item-64 rd-entry string
Treerd-entry

Description

This command creates an RD matching entry containing an IPv4 address or ASN and the assigned number. The following formats are supported:

  • a.b.c.d/m:* – RD in IPv4 format with a wildcard character (such as 10.0.0.0/16:*)

  • a.b.c.d/m:n – RD in IPv4 format with a specific number (such as 10.0.0.2/32:535)

  • asn:* – RD in ASN format with a wildcard character (such as 65000:*)

  • asn:n – RD in ASN format with a specific number (such as 65000:535)

See the "Route distinguishers" section of the 7450 ESS, 7750 SR, 7950 XRS, and VSR Layer 3 Services Guide: IES and VPRN for information about Type values.

String length3 to 28

Notes

This element is part of a list key.

Introduced23.3.R1

Platforms

All