a Commands – Part II
address-avp
address-avp
Syntax
[no] address-avp
Context
[Tree] (config>subscr-mgmt>diam-appl-plcy>gy>avp address-avp)
Full Context
configure subscriber-mgmt diameter-application-policy gy include-avp address-avp
Description
This command includes the following subscriber host/session address/prefix AVPs in all Diameter DCCA CCR messages:
-
[8] Framed-IP-Address
-
[97] Framed-IPv6-Prefix
-
[123] Delegated-IPv6-Prefix
-
[6527-99] Alc-IPv6-Address
Note: Only the address/prefix of the subscriber host that triggered the creation of the Diameter Gy session is included.
The no form of this command removes the address AVPs from the Diameter DCCA CCR messages.
Default
address-avp
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
address-map
address-map
Syntax
address-map start-inside-ip-address to end-inside-ip-address subscriber-type nat-sub-type nat-policy nat-policy-name [create]
no address-map start-inside-ip-address to end-inside-ip-address subscriber-type nat-sub-type nat-policy nat-policy-name
Context
[Tree] (config>service>vprn>nat>inside>deterministic address-map)
[Tree] (config>router>nat>inside>deterministic address-map)
Full Context
configure service vprn nat inside deterministic address-map
configure router nat inside deterministic address-map
Description
This command configures the mapping of the inside IP addresses of deterministic NAT44 subscribers to the outside IP addresses in a NAT pool. This mapping is applicable is applicable only to deterministic NAT44 with a single ESA-VM in a NAT-group. The number of subscribers per outside IP address is flexible and not restricted to a discrete range governed by the 2^n rule.
When configured, the classic-lsn-max-subscriber-limit command must be set to 1.
The no form of this command removes the configuration.
Parameters
- start-inside-ip-address
-
Specifies the first IP address in the inside IP address range.
- end-inside-ip-address
-
Specifies the last IP address in the inside IP address range.
- nat-sub-type
-
Specifies the NAT subscriber type.
- nat-policy-name
-
Specifies the NAT policy name, up to 32 characters, that is referencing a NAT pool.
- create
-
Keyword used to create the address mapping.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
address-pooling
address-pooling
Syntax
[no] address-pooling {paired | arbitrary}
Context
[Tree] (config>router>nat>outside>pool address-pooling)
Full Context
configure router nat outside pool address-pooling
Description
This command configures address pooling to allocate outside ports for a NAT subscriber in relation to the outside IP address.
The behavior in NAT, as defined in RFC 7857, §4, allows the subscriber to be mapped to a single outside IP address and allows for outside ports always to be allocated from that same outside IP address. If this outside IP address becomes exhausted of ports, no new ports for the subscriber can be allocated. This behavior is called paired address pooling.
The alternative behavior is arbitrary address pooling, where a NAT subscriber is mapped to an alternate IP address when the current outside IP address runs out of ports. This way, the subscriber becomes associated with multiple outside IP addresses. While this results in better resource utilization in NAT, it may negatively affect the behavior of some applications.
Default
address-pooling paired
Parameters
- paired
-
Specifies that the subscriber can allocate ports from a single outside IP address. When this IP address runs out of the ports, the subscriber is denied allocation of new ports.
- arbitrary
-
Specifies that the subscriber can allocate ports from multiple outside IP addresses.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
address-pref
address-pref
Syntax
address-pref {ipv4-only | ipv6-first}
no address-pref
Context
[Tree] (config>system>dns address-pref)
Full Context
configure system dns address-pref
Description
This command configures the DNS address resolving order preference. By default, DNS names are queried for A-records only (address-preference is IPv4-only).
If the address-preference is set to IPv6-first, the DNS server will be queried for AAAA-records (IPv6) first and if a successful replied is not received, then the DNS server is queried for A-records. IPv6 applies only to the 7750 SR and 7950 XRS.
Default
address-pref ipv4-only
Platforms
All
address-range
address-range
Syntax
no address-range start-ip-address end-ip-address [failover {local | remote | access-driven}]
no address-range start-ip-address end-ip-address
Context
[Tree] (config>router>dhcp>server>pool>subnet address-range)
Full Context
configure router dhcp local-dhcp-server pool subnet address-range
Description
This command configures a range of IP addresses to be served from the pool. All IP addresses between the start and end IP addresses are included (other than specific excluded addresses).
The no form of this command removes the address-range parameters from the configuration.
Parameters
- start-ip-address
-
Specifies the start address of this range to include. This address must be unique within the subnet and specified in dotted decimal notation. Allowed values are IP addresses in the range 1.0.0.0 – 223.255.255.255 (with support of /31 subnets).
- end-ip-address
-
Specifies the end address of this range to include. This address must be unique within the subnet and specified in dotted decimal notation. Allowed values are IP addresses in the range 1.0.0.0 – 223.255.255.255 (with support of /31 subnets).
- local
-
Specifies that the local DHCP server has the ownership of this dress range in a redundant setup under normal operation.
- remote
-
Specifies that the remote DHCP server has the ownership of this address range in a redundant setup under normal operation.
- access-driven
-
Specifies that the DHCP server failover system is in control by the access protection mechanisms (SRRP or MC-LAG).
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
address-range
Syntax
address-range start-ip-address end-ip-address [create]
no address-range start-ip-address end-ip-address
Context
[Tree] (config>router>nat>outside>pool address-range)
[Tree] (config>service>vprn>nat>outside>pool address-range)
Full Context
configure router nat outside pool address-range
configure service vprn nat outside pool address-range
Description
This command configures a NAT address range.
Parameters
- start-ip-address
-
Specifies the beginning IP address in a.b.c.d form.
- end-ip-address
-
Specifies the ending IP address in a.b.c.d. form.
- create
-
This parameter must be specified to create the address range instance
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
address-range
Syntax
address-range start ipv4-address end ipv4-address
no address-range
Context
[Tree] (config>li>x-interfaces>x3 address-range)
Full Context
configure li x-interfaces x3 address-range
Description
This command configures the range of IP addresses to use for the X3 interface. The number of addresses should correspond to the number of ISAs used for the x-interface application.
The no form of this command reverts to the default.
Parameters
- ipv4-address
-
Specifies an IPv4 address.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
address-source
address-source
Syntax
address-source router router-instance dhcp-server local-dhcp4-svr-name pool dhcp4-server-pool [secondary-pool secondary-pool-name]
address-source service-name service-name dhcp-server local-dhcp4-svr-name pool dhcp4-server-pool [secondary-pool secondary-pool-name]
address-source router router-instance dhcp-server local-dhcp6-svr-name pool dhcp6-server-pool
address-source service-name service-name dhcp-server local-dhcp6-svr-name pool dhcp6-server-pool
no address-source
Context
[Tree] (config>service>vprn>if>sap>ipsec-gw>lcl-addr-assign>ipv6 address-source)
[Tree] (config>service>vprn>if>sap>ipsec-gw>lcl-addr-assign>ipv4 address-source)
[Tree] (config>service>ies>if>sap>ipsec-gw>lcl-addr-assign>ipv4 address-source)
[Tree] (config>service>ies>if>sap>ipsec-gw>lcl-addr-assign>ipv6 address-source)
Full Context
configure service vprn interface sap ipsec-gw local-address-assignment ipv6 address-source
configure service vprn interface sap ipsec-gw local-address-assignment ipv4 address-source
configure service ies interface sap ipsec-gw local-address-assignment ipv4 address-source
configure service ies interface sap ipsec-gw local-address-assignment ipv6 address-source
Description
This command specifies the IPv4 or IPv6 source of the local address assignment for the IPsec gateway, which is a pool of a local DHCPv4 or DHCPv6 server. The system will assign an internal address to an IKEv2 remote-access client from the specified pool.
Beside the IP address, netmask and DNS server can also be returned. For IPv4, the netmask and DNS server address can be returned from the specified pool, as well as the IP address. The netmask returned to the IPsec client is derived from the subnet length from the subnet x.x.x.x/m create configuration, not the subnet-mask configuration in the subnet context. For IPv6, the DNS server address can be returned from the specified pool, as well as the IP address.
For IPv4, a secondary pool can be optionally specified. The secondary pool is used if the system is unable to assign addresses from the primary pool.
Default
no address-source
Parameters
- router-instance
-
Specifies the router instance ID where the local DHCPv4 or DHCPv6 server is defined, up to 32 characters.
This variant of this command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic). The address-source service-name service-name variant can be used in all configuration modes.
- service-name
-
Specifies the name of the service where the local DHCPv4 or DHCPv6 server is defined, up to 64 characters.
- local-dhcp4-svr-name
-
Specifies the name of the local DHCPv4 server, up to 32 characters.
- local-dhcp6-svr-name
-
Specifies the name of the local DHCv6 server, up to 32 characters.
- dhcp4-server-pool
-
The name of the pool defined in the specified DHCPv4 server, up to 32 characters.
- dhcp6-server-pool
-
The name of the pool defined in the specified DHCPv6 server, up to 32 characters.
- secondary-pool-name
-
The name of the secondary pool defined in the specified server, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
address-state
address-state
Syntax
[no] address-state
Context
[Tree] (config>aaa>isa-radius-plcy>acct-update-triggers address-state)
Full Context
configure aaa isa-radius-policy acct-update-triggers address-state
Description
If enabled, an interim-update will be sent for a DSM UE whenever a DHCP, SLAAC or DHCPv6 address gets allocated or freed.
Default
no address-state
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
address-type
address-type
Syntax
address-type {ipv4 | ipv6 | not-specified}
no address-type
Context
[Tree] (config>subscr-mgmt>wlan-gw>tunnel-query address-type)
Full Context
configure subscriber-mgmt wlan-gw tunnel-query address-type
Description
This command specifies the address type to match on tunnels.
The no form of this command reverts to the default.
Default
address-type not-specified
Parameters
- ipv4
-
Specifies the IPv4 address to match on tunnels.
- ipv6
-
Specifies the IPv6 address to match on tunnels.
- not-specified
-
Specifies that no address type matches on tunnels.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
address-type
Syntax
address-type {ipv4 | ipv6 | ipv4-only | ipv6-only | ipv4v6 | not-specified}
no address-type
Context
[Tree] (config>subscr-mgmt>wlan-gw>ue-query address-type)
Full Context
configure subscriber-mgmt wlan-gw ue-query address-type
Description
This command enables matching on UEs that have an address of the specified type.
The no form of this command reverts to the default.
Default
address-type not-specified
Parameters
- ipv4
-
Specifies matching on UEs that have an IPv4 stack active.
- ipv6
-
Specifies matching on UEs that have an IPv6 stack active.
- ipv4-only
-
Specifies matching on UEs that have only an IPv4 and no IPv6 stack active.
- ipv6-only
-
Specifies matching on UEs that have only an IPv6 and no IPv4 stack active.
- ipv4v6
-
Specifies matching on UEs that have both an IPv4 and IPv6 stack active.
- not-specified
-
Specifies that no address type matches on UEs.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
adi
adi
Syntax
adi [zone-channel-name]
no adi
Context
[Tree] (debug>service>id>video-interface adi)
Full Context
debug service id video-interface adi
Description
This command enables debugging for the ad insert server.
Parameters
- zone-channel-name
-
Specifies the channel name up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-s
adj-set
adj-set
Syntax
[no] adj-set
Context
[Tree] (config>router>ospf>segm-rtng>egress-statistics adj-set)
[Tree] (config>router>isis>segm-rtng>egress-statistics adj-set)
[Tree] (config>router>ospf>segm-rtng>ingress-statistics adj-set)
[Tree] (config>router>isis>segm-rtng>ingress-statistics adj-set)
Full Context
configure router ospf segment-routing egress-statistics adj-set
configure router isis segment-routing egress-statistics adj-set
configure router ospf segment-routing ingress-statistics adj-set
configure router isis segment-routing ingress-statistics adj-set
Description
This command enables the allocation of statistic indices to each adjacency set. All adjacencies of a set share the same statistics index. If a statistics index is not available at allocation time, the allocation fails, then the system re-tries the allocation. The system generates a log on the first fail and a log on the final successful allocation.
The no form of this command disables the allocation of statistic indices to each adjacency set, releases the statistic indices, and clears the associated counters.
Default
no adj-set
Platforms
All
adj-sid
adj-sid
Syntax
[no] adj-sid
Context
[Tree] (config>router>ospf>segm-rtng>egress-statistics adj-sid)
[Tree] (config>router>ospf3>segm-rtng>ingress-statistics adj-sid)
[Tree] (config>router>ospf3>segm-rtng>egress-statistics adj-sid)
[Tree] (config>router>isis>segm-rtng>egress-statistics adj-sid)
[Tree] (config>router>isis>segm-rtng>ingress-statistics adj-sid)
[Tree] (config>router>ospf>segm-rtng>ingress-statistics adj-sid)
Full Context
configure router ospf segment-routing egress-statistics adj-sid
configure router ospf3 segment-routing ingress-statistics adj-sid
configure router ospf3 segment-routing egress-statistics adj-sid
configure router isis segment-routing egress-statistics adj-sid
configure router isis segment-routing ingress-statistics adj-sid
configure router ospf segment-routing ingress-statistics adj-sid
Description
This command enables the allocation of statistic indices to each programmed NHLFE corresponding to Adjacency SIDs (local and received by means of IGP advertisement). All NHLFEs associated to a given SID share the same index. If a statistics index is not available at allocation time, the allocation fails, then the system re-tries the allocation. The system generates a log on the first fail and a log on the final successful allocation.
The no form of this command disables the allocation of statistic indices to each adjacency SID, releases the statistic indices, and clears the associated counters.
Default
no adj-sid
Platforms
All
adj-sid-hold
adj-sid-hold
Syntax
adj-sid-hold seconds
no adj-sid-hold
Context
[Tree] (config>router>isis>segm-rtng adj-sid-hold)
Full Context
configure router isis segment-routing adj-sid-hold
Description
This command configures a timer to hold the ILM or LTN of an adjacency SID following a failure of the adjacency.
When an adjacency to a neighbor fails, the following procedures are followed for both the LFA protected SID and the LFA unprotected SID of this adjacency in SR-MPLS. An adjacency can have both types of SIDs assigned by configuration. An LFA protected adjacency SID is eligible for LFA protection, but the following procedures apply even if a LFA backup was not programmed at the time of the failure. An LFA unprotected adjacency SID is not eligible for LFA protection.
- IGP withdraws the advertisement of the link TLV as well as its adjacency SID sub-TLV.
- The adjacency SID hold timer starts.
- The LTN and ILM records of the adjacency are kept in the datapath for as long as the adjacency SID hold time is running. This allows packets to flow over the LFA backup path, when the adjacency is protected, and allows the ingress LER or PCE time to compute a new path of the SR-TE LSP after IGP converges.
- If the adjacency is restored while the adjacency SID hold timer is running, the timer is aborted, and the adjacency SID remains programmed in the datapath with the retained SID values. However, the backup NHLFE may change if a new LFA SPF runs while the adjacency SID hold timer running. An update to the backup NHLFE is performed immediately following the LFA SPF. In all cases, the adjacency keeps its assigned SID label value.
-
If the adjacency SID hold timer expires before the adjacency is restored, the SID is deprogrammed from the datapath and the label returned into the common pool where it was drawn from. Users of the adjacency (for example, SR policy and SR-TE LSP) are also informed.
When the adjacency is subsequently restored, it gets assigned its allocated static-label value or a new dynamic-label value.
- A new PG-ID is assigned each time an adjacency comes back up. This PG-ID is used by the ILM and LTN of the adjacency SID and of all downstream node SIDs that resolve to a next hop over this adjacency.
The no form of this command reverts to the default value.
Default
adj-sid-hold 15
Parameters
- seconds
-
Specifies the adjacency SID hold time, in seconds.
Platforms
All
adj-sid-hold
Syntax
adj-sid-hold seconds
no adj-sid-hold
Context
[Tree] (config>router>isis>srv6 adj-sid-hold)
Full Context
configure router isis segment-routing-v6 adj-sid-hold
Description
This command specifies the length of time the system holds the SRv6 adjacency route and tunnel entries programmed in datapath while the adjacency is down.
When an adjacency to a neighbor fails, the following procedures are followed for both the LFA protected SID and the LFA unprotected SID of this adjacency in SRv6. An adjacency can have both types of SIDs assigned by configuration. An LFA protected adjacency SID is eligible for LFA protection, but the following procedures apply even if a LFA backup was not programmed at the time of the failure. An LFA unprotected adjacency SID is not eligible for LFA protection.
- IGP withdraws the advertisement of the link TLV as well as its SRv6 End.X SID sub-TLV.
- The adjacency SID hold timer starts.
- The route table, FIB, and tunnel table entries are kept for as long as the adjacency SID hold timer is running. This allows packets to flow over the LFA backup path, when the adjacency is protected, and to allow the ingress LER or PCE time to compute a new path of a SRv6 policy after IGP converges.
- If the adjacency is restored while the adjacency SID hold timer is running, the timer is aborted, and the adjacency SID remains programmed in the datapath with the retained SID values. However, the backup NHLFE may change if a new LFA SPF runs while the adjacency SID hold timer is running. An update to the backup NHLFE is performed immediately following the LFA SPF. In all cases, the adjacency keeps its assigned SID value.
-
If the adjacency SID hold timer expires before the adjacency is restored, the SID is deprogrammed from the datapath and the SID value returned into the locator subnet where it was drawn from. Users of the adjacency (for example, SRv6 policy) are also informed.
When the adjacency is subsequently restored, it gets assigned its allocated static SID value or a new dynamic SID value.
- A new PG-ID is assigned each time an adjacency comes back up. This PG-ID is used by tunnel of the local adjacency SID and of all remote locator routes that resolve to a next hop over this adjacency.
configure router isis segment-routing
configure router isis segment-routing-v6
The no form of this command reverts to the default value.
Default
adj-sid-hold 15
Parameters
- seconds
-
Specifies the adjacency SID hold time, in seconds.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
adj-sid-hold
Syntax
adj-sid-hold seconds
no adj-sid-hold
Context
[Tree] (config>router>ospf>segm-rtng adj-sid-hold)
[Tree] (config>router>ospf3>segm-rtng adj-sid-hold)
Full Context
configure router ospf segment-routing adj-sid-hold
configure router ospf3 segment-routing adj-sid-hold
Description
This command configures a timer to hold the ILM or LTN of an adjacency SID following a failure of the adjacency.
When an adjacency to a neighbor fails, the following procedures are followed for both the LFA protected SID and the LFA unprotected SID of this adjacency in SR-MPLS. An adjacency can have both types of SIDs assigned by configuration. An LFA protected adjacency SID is eligible for LFA protection, but the following procedures apply even if a LFA backup was not programmed at the time of the failure. An LFA unprotected adjacency SID is not eligible for LFA protection.
- IGP withdraws the advertisement of the link TLV as well as its adjacency SID sub-TLV.
- The adjacency SID hold timer starts.
- The LTN and ILM records of the adjacency are kept in the datapath for as long as the adjacency SID hold time is running. This allows packets to flow over the LFA backup path, when the adjacency is protected, and allows the ingress LER or PCE time to compute a new path of the SR-TE LSP after IGP converges.
- If the adjacency is restored while the adjacency SID hold timer is running, the timer is aborted, and the adjacency SID remains programmed in the datapath with the retained SID values. However, the backup NHLFE may change when a new LFA SPF is run while the adjacency SID hold timer running. An update to the backup NHLFE is performed immediately following the LFA SPF. In all cases, the adjacency keeps its assigned SID label value.
-
If the adjacency SID hold timer expires before the adjacency is restored, the SID is deprogrammed from the datapath and the label returned into the common pool where it was drawn from. Users of the adjacency (for example, SR policy and SR-TE LSP) are also informed.
When the adjacency is subsequently restored, it gets assigned its allocated static label value or a new dynamic label value.
- A new PG-ID is assigned each time an adjacency comes back up. This PG-ID is used by the ILM and LTN of the adjacency SID and of all downstream node SIDs that resolve to a next hop over this adjacency.
The no form of this command reverts to the default value.
Default
adj-sid-hold 15
Parameters
- seconds
-
Specifies the adjacency SID hold time, in seconds.
Platforms
All
adjacency
adjacency
Syntax
[no] adjacency
Context
[Tree] (debug>service>id>pim-snooping adjacency)
Full Context
debug service id pim-snooping adjacency
Description
This command enables or disables debugging for PIM adjacencies.
Platforms
All
adjacency
Syntax
[no] adjacency
Context
[Tree] (debug>router>pim adjacency)
Full Context
debug router pim adjacency
Description
This command enables debugging for PIM adjacencies.
The no form of this command disables debugging for PIM adjacencies.
Platforms
All
adjacency
Syntax
[no] adjacency [ip-int-name | ip-address | nbr-system-id]
Context
[Tree] (debug>router>isis adjacency)
Full Context
debug router isis adjacency
Description
This command enables debugging for IS-IS adjacency.
The no form of the command disables debugging.
Parameters
- ip-address
-
When specified, only adjacencies with the specified interface address are debugged.
- ip-int-name
-
When specified, only adjacencies with the specified interface name are debugged.
- nbr-system-id
-
When specified, only the adjacency with the specified ID is debugged.
Platforms
All
adjacency-set
adjacency-set
Syntax
[no] adjacency-set id
Context
[Tree] (config>router>ospf>segm-rtng adjacency-set)
[Tree] (config>router>isis>segm-rtng adjacency-set)
Full Context
configure router ospf segment-routing adjacency-set
configure router isis segment-routing adjacency-set
Description
This command creates an adjacency set. An adjacency set consists of one or more adjacency SIDs originating on this node. The constituent adjacencies may terminate on different nodes.
The no form of this command removes the specified adjacency set.
Parameters
- id
-
Specifies an unsigned integer representing the identifier of the adjacency set.
Platforms
All
adjacency-set
Syntax
[no] adjacency-set id
Context
[Tree] (config>router>isis>interface adjacency-set)
[Tree] (config>router>ospf>area>interface adjacency-set)
Full Context
configure router isis interface adjacency-set
configure router ospf area interface adjacency-set
Description
This command associates an interface with an adjacency set. The adjacency set must have been defined under the IS-IS or OSPF segment-routing context.
The no form of this command removes the association.
Parameters
- id
-
Specifies an unsigned integer representing the identifier of the adjacency set.
Platforms
All
adjacency-sid
adjacency-sid
Syntax
adjacency-sid label value
no adjacency-sid
Context
[Tree] (config>router>ospf>area>interface adjacency-sid)
Full Context
configure router ospf area interface adjacency-sid
Description
This command allows a static value to be assigned to an adjacency SID in OSPF segment routing.
The label option specifies that the value is assigned to an MPLS label.
The no form of this command removes the adjacency SID.
Parameters
- label value
-
Specifies the value of adjacency SID label.
Platforms
All
adjacency-sid
Syntax
adjacency-sid
Context
[Tree] (config>router>ospf3>segm-rtng adjacency-sid)
[Tree] (config>router>ospf>segm-rtng adjacency-sid)
[Tree] (config>router>isis>segm-rtng adjacency-sid)
Full Context
configure router ospf3 segment-routing adjacency-sid
configure router ospf segment-routing adjacency-sid
configure router isis segment-routing adjacency-sid
Description
Commands in this context configure two SR-MPLS adjacency SIDs per interface.
Platforms
All
adjust-down
adjust-down
Syntax
adjust-down percent [bw bandwidth-in-mbps]
no adjust-down
Context
[Tree] (config>router>mpls>lsp-template>auto-bandwidth adjust-down)
[Tree] (config>router>mpls>lsp>auto-bandwidth adjust-down)
Full Context
configure router mpls lsp-template auto-bandwidth adjust-down
configure router mpls lsp auto-bandwidth adjust-down
Description
This command configures the minimum threshold for decreasing the bandwidth of an LSP based on active measurement of LSP bandwidth.
The no form of this command is equivalent to adjust-down 5.
Default
adjust-down 5 bw 0
Parameters
- percent
-
Specifies the minimum difference between the current bandwidth reservation of the LSP and the (measured) maximum average data rate, expressed as a percentage of the current bandwidth, for decreasing the bandwidth of the LSP.
- bandwidth-in-mbps
-
Specifies the minimum difference between the current bandwidth reservation of the LSP and the (measured) maximum average data rate, expressed as an absolute bandwidth (Mb/s), for decreasing the bandwidth of the LSP.
Platforms
All
adjust-up
adjust-up
Syntax
adjust-up percent [bw bandwidth-in-mbps]
no adjust-up
Context
[Tree] (config>router>mpls>lsp-template>auto-bandwidth adjust-up)
[Tree] (config>router>mpls>lsp>auto-bandwidth adjust-up)
Full Context
configure router mpls lsp-template auto-bandwidth adjust-up
configure router mpls lsp auto-bandwidth adjust-up
Description
This command configures the minimum threshold for increasing the bandwidth of an LSP based on active measurement of LSP bandwidth.
The no form of this command is equivalent to adjust-up 5.
Default
adjust-up 5 bw 0
Parameters
- percent
-
Specifies the minimum difference between the current bandwidth reservation of the LSP and the (measured) maximum average data rate, expressed as a percentage of the current bandwidth, for increasing the bandwidth of the LSP.
- bandwidth-in-mbps
-
Specifies the minimum difference between the current bandwidth reservation of the LSP and the (measured) maximum average data rate, expressed as an absolute bandwidth (Mb/s), for increasing the bandwidth of the LSP
Platforms
All
admin
admin
Syntax
admin
Context
[Tree] (admin)
Full Context
admin
Description
Commands in this context configure administrative system parameters. Only authorized users can execute the commands in the admin context.
Platforms
All
admin-bw
admin-bw
Syntax
admin-bw kbps
no admin-bw
Context
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle admin-bw)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel admin-bw)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>src-override admin-bw)
Full Context
configure mcast-management multicast-info-policy bundle admin-bw
configure mcast-management multicast-info-policy bundle channel admin-bw
configure mcast-management multicast-info-policy bundle channel source-override admin-bw
Description
This command specifies an administrative bandwidth for multicast channels. The specified bandwidth rate can be used by the multicast ingress path manger, multicast CAC manager or multicast ECMP manager.
The kbps value is closely tied to the bw-activity command. When the bw-activity command is set to use-admin-bw, the multicast ingress path manager uses the configured administrative bandwidth value as the managed ingress bandwidth. The admin-bw value must be defined for the bw-activity use-admin-bw command to succeed. Once the bw-activity command is set to use the admin-bw value, the value cannot be set to 0 and the no admin-bw command fails. Setting the bw-activity command to dynamic (the default setting), breaks the association between the commands.
The no form of this command restores the default value for admin-bw. If the command is executed in the channel context, the channels administrative bandwidth value is set to null. If the command is executed in the source-override context, the source override administrative bandwidth value is set to null.
Parameters
- kbps
-
Specifies the administrative bandwidth for multicast channels.
Platforms
All
admin-bw-threshold
admin-bw-threshold
Syntax
admin-bw-threshold kilo-bits-per-second
no admin-bw-threshold
Context
[Tree] (config>mcast-mgmt>bw-plcy admin-bw-threshold)
Full Context
configure mcast-management bandwidth-policy admin-bw-threshold
Description
This command defines at which bandwidth rate a multicast channel configured to use an administrative rate starts and stop using that rate as the in-use ingress bandwidth when managing ingress multicast paths. This parameter only applies to channels that are configured to use the admin-bw rate with the bw-activity use-admin-bw command (both are configured in the multicast-info-policy associated with the channel context).
To be effective, the admin-bw-threshold value must be less than the channels configured admin-bw. If the administrative bandwidth configured on the channel is less than the administrative bandwidth threshold defined in the bandwidth policy, the admin-bw value is ignored for ingress multicast path management and the system continually uses the dynamic ingress bandwidth associated with the channel. Since the value is defined in the bandwidth-policy and the channel admin-bw value is defined in the multicast-info-policy, it is not possible to pre-determine that a given administrative bandwidth value is less than an administrative bandwidth threshold. Since a typical administrative bandwidth threshold is set significantly lower than any administrative bandwidth values, this corner case is not expected to be prevalent. However, if the case does arise in a production environment, no ill behavior is expected as the threshold is simply a tuning parameter used to detect when the bandwidth associated with a channel has risen above any OAM or background type traffic.
While a channel that is configured to the use-admin-bw parameter (in the bw-activity command) current bandwidth is less than the admin-bw-threshold, the system treats the channel as a dynamic type channel. Once the threshold is crossed, the system immediately allocates the full admin-bw value to the channel and manages the ingress multicast path accordingly. If the bandwidth monitored on the channel rises above the admin-bw value, the system reverts to dynamic bandwidth management operation. If the bandwidth drops below the admin-bw value, but is above the admin-bw-threshold, the system uses the admin-bw value. If the bandwidth drops below the admin-bw-threshold, the system goes back to dynamic bandwidth management operation.
This command has no effect on multicast ECMP or egress CAC management operations.
The no form of this command reverts to the default, which is 10 kb/s.
Parameters
- kilobits-per-second
-
Specifies the defines the rate at which channels configured to use administrative bandwidths change from dynamic bandwidth management to using the channels configured administrative bandwidth. The parameter is expressed as an integer value and represents multiples of 1,000 bits per second. A value of 3000 indicates 3,000,000 bits per second.
Platforms
7450 ESS, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-7/12/12e, 7750 SR-s, 7950 XRS, VSR
admin-group
admin-group
Syntax
[no] admin-group group-name [group-name]
no admin-group
Context
[Tree] (config>service>vprn>if>if-attribute admin-group)
[Tree] (config>service>ies>if>if-attribute admin-group)
[Tree] (config>router>if>if-attribute admin-group)
[Tree] (config>router>mpls>interface admin-group)
Full Context
configure service vprn interface if-attribute admin-group
configure service ies interface if-attribute admin-group
configure router interface if-attribute admin-group
configure router mpls interface admin-group
Description
This command configures the admin group membership of an interface. The user can apply admin groups to an IES, VPRN, network IP, or MPLS interface.
Each single operation of the admin-group command allows a maximum of five (5) groups to be specified at a time. However, a maximum of 32 groups can be added to a given interface through multiple operations. Once an admin group is bound to one or more interface, its value cannot be changed until all bindings are removed.
The configured admin-group membership will be applied in all levels or areas the interface is participating in. The same interface cannot have different memberships in different levels or areas.
Only the admin groups bound to an MPLS interface are advertised in TE link TLVs and sub-TLVs when the traffic-engineering option is enabled in IS-IS or OSPF. IES and VPRN interfaces do not have their attributes advertised in TE TLVs.
The no form of this command deletes one or more of the admin-group memberships of an interface. The user can also delete all memberships of an interface by not specifying a group name.
Default
no admin-group
Parameters
- group-name
-
Specifies up to five groups, each up to 32 characters. The association of group name and value should be unique within an IP/MPLS domain. Each single operation of the admin-group command allows a maximum of 5 groups to be specified. However, a maximum of 32 groups can be added to a given interface through multiple operations.
Platforms
All
admin-group
Syntax
admin-group group-name value group-value
no admin-group group-name
Context
[Tree] (config>router>if-attribute admin-group)
Full Context
configure router if-attribute admin-group
Description
This command defines an Administrative Group (AG) that can be associated with an IP or MPLS interface.
AGs, also known as affinity, are used to tag IP and MPLS interfaces that share a specific characteristic with the same identifier. For example, an AG identifier can represent:
- all links that connect to core routers
- all links that have a bandwidth higher than 10 Gb
- all links that are dedicated to a specific service
First configure locally on each router the name and identifier of each AG. A maximum of 32 AGs can be configured per system.
After configuring the router name and identifier, configure the AG membership of an interface. You can apply AGs to a IES, VPRN, network IP, or MPLS interface.
When applied to MPLS interfaces, the interfaces can be included or excluded in the LSP path definition by inferring the AG name. CSPF computes a path that satisfies the AG include and exclude constraints.
When applied to IES, VPRN, or network IP interfaces, the interfaces can be included or excluded in the route next-hop selection by inferring the AG name in a route next-hop policy template applied to an interface or a set of prefixes.
The following provisioning rules apply to the AG configuration. The system rejects the creation of an AG:
- if the name of the AG is the same as that of an existing group, even if the new AG group value is different from the existing group value
- if the AG reuses the same group value but with a different name from an existing group
Only the AGs bound to an MPLS interface are advertised area wide in TE link TLVs and sub-TLVs when the traffic-engineering option is enabled in IS-IS or OSPF. IES and VPRN interfaces do not have their attributes advertised in TE TLVs.
Parameters
- group-name
-
Specifies the name of the group, up to 32 characters. The association of group name and value should be unique within an IP/MPLS domain
- group-value
-
Specifies the integer value associated with the group. The association of group name and value should be unique within an IP or MPLS domain.
Platforms
All
admin-group
Syntax
admin-group admin-group
no admin-group admin-group
Context
[Tree] (config>router>fad>flex-algo>exclude admin-group)
Full Context
configure router flexible-algorithm-definitions flex-algo exclude admin-group
Description
This command configures an administrative group link that will be excluded from the topology graph of the flexible algorithm. If multiple administrative groups are configured, they are all excluded from the topology graph.
Administrative groups are attributes associated with a link. Frequently these administrative groups are described as link colors.
The no form of this command removes the admin-group from being excluded from the topology graph.
Default
no admin-group
Parameters
- admin-group
-
Configures an administrative group link to exclude from the topology graph of the configured FAD.
Platforms
All
admin-group
Syntax
admin-group admin-group
no admin-group admin-group
Context
[Tree] (config>router>fad>flex-algo>include-all admin-group)
Full Context
configure router flexible-algorithm-definitions flex-algo include-all admin-group
Description
This command configures an administrative group link that will be included in the topology graph of the defined FAD. If multiple administrative groups are configured, groups must be present in a link before the link is included in the flexible algorithm topology graph.
The no form of this command removes the specified admin-group from being included in the topology graph.
Default
no admin-group
Parameters
- admin-group
-
Configures an administrative group to include in topology graph of the configured FAD.
Platforms
All
admin-group
Syntax
admin-group admin-group
no admin-group admin-group
Context
[Tree] (config>router>fad>flex-algo>include-any admin-group)
Full Context
configure router flexible-algorithm-definitions flex-algo include-any admin-group
Description
This command configures an administrative group link that will be included in the topology graph of the configured FAD. If multiple administrative groups are configured, at least one of the administrative groups must be present in a link before the link is included into the flexible algorithm topology graph.
The no form of this command removes the admin-group from being included in the topology graph.
Default
no admin-group
Parameters
- admin-group
-
Configures an administrative group to include in the topology graph of the configured FAD.
Platforms
All
admin-group-frr
admin-group-frr
Syntax
[no] admin-group-frr
Context
[Tree] (config>router>mpls admin-group-frr)
Full Context
configure router mpls admin-group-frr
Description
This command enables the use of the admin-group constraints in the association of a manual or dynamic bypass LSP with the primary LSP path at a Point-of-Local Repair (PLR) node.
When this command is enabled, each PLR node reads the admin-group constraints in the FAST_REROUTE object in the Path message of the LSP primary path. If the FAST_REROUTE object is not included in the Path message, then the PLR will read the admin-group constraints from the Session Attribute object in the Path message.
If the PLR is also the ingress LER for the LSP primary path, then it just uses the admin-group constraint from the LSP and/or path level configurations.
The PLR node then uses the admin-group constraints along with other constraints, such as hop-limit and SRLG, to select a manual or dynamic bypass among those that are already in use.
If none of the manual or dynamic bypass LSP satisfies the admin-group constraints, and/or the other constraints, the PLR node will request CSPF for a path that merges the closest to the protected link or node and that includes or excludes the specified admin-group IDs.
If the user changes the configuration of the above command, it will not have any effect on existing bypass associations. The change will only apply to new attempts to find a valid bypass.
The no form of this command disables the use of administrative group constraints on a FRR backup LSP at a PLR node.
Default
no frr-admin-group
Platforms
All
admin-password
admin-password
Syntax
admin-password password [hash | hash2]
no admin-password
Context
[Tree] (config>system>security>password admin-password)
Full Context
configure system security password admin-password
Description
This command allows a user (with admin permissions) to configure a password that enables a user to become an administrator.
This password is valid only for one session. When enabled, no authorization to TACACS+ or RADIUS is performed and the user is locally regarded as an admin user.
This functionality can be enabled in two contexts:
config>system>security>password>admin-password
<global> enable-admin
If the admin-password is configured in the config>system>security>password context, then any user can enter the special mode by entering the enable-admin command.
enable-admin is in the default profile. By default, all users are given access to this command.
After the enable-admin command is entered, the user is prompted for a password. If the password matches, user is given unrestricted access to all the commands.
The minimum length of the password is determined by the minimum-length command. The complexity requirements for the password are determined by the complexity command.
The password argument of this command is not sent to the servers. This is consistent with other commands that configure secrets.
The usernames and passwords in the FTP and TFTP URLs will not be sent to the authorization or accounting servers when the file>copy source-url dest-url command is executed.
For example:
file copy ftp://test:secret@10.20.31.79/test/srcfile cf1:\destfile
In this example, the username 'test' and password 'secret' will not be sent to the AAA servers (or to any logs). They will be replaced with ''****''.
The no form of this command removes the admin password from the configuration.
This command applies to a local user, in addition to users on RADIUS, TACACS, and LDAP.
Default
no admin-password
Parameters
- password
-
Configures the password that enables a user to become a system administrator. The maximum length can be up to 56 characters if unhashed, 60 characters if hashed with bcrypt, from 87 to 92 characters if hashed with sha2-pbkdf2, 32 characters if the hash keyword is specified, or 54 characters if the hash2 keyword is specified. The unhashed cleartext password form should meet all the requirements that are defined by the complexity command.
- hash
-
Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form or hashed with bcrypt or PBKDF2. For security, all keys are stored in the configuration file in hashed form (using bcrypt or PBKDF2, depending on the hashing configuration parameter) or, for backward compatibility, can be stored in encrypted form with the hash or hash2 parameter specified.
- hash2
-
Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form or hashed with bcrypt or PBKDF2. For security, all keys are stored in the configuration file in hashed form (using bcrypt or PBKDF2, depending on the hashing configuration parameter) or, for backward compatibility, can be stored in encrypted form with the hash or hash2 parameter specified.
Platforms
All
admin-state
admin-state
Syntax
admin-state {up | down}
no admin-state
Context
[Tree] (config>service>vprn>l2tp>group>tunnel>mlppp admin-state)
[Tree] (config>router>l2tp>group>tunnel>mlppp admin-state)
Full Context
configure service vprn l2tp group tunnel mlppp admin-state
configure router l2tp group tunnel mlppp admin-state
Description
This command enables MLPPP for this tunnel group and is applicable only to LNS.
The tunnel can be explicitly activated (if the parent group is in a no shutdown state) or deactivated by the up and down keywords.
If the admin state is not configured, the tunnel inherits its administrative state from its parent (group).
The no form of this command causes the tunnel administrative state to be inherited from the group.
Parameters
- up
-
Specifies that the tunnel is to be administratively up.
- down
-
Specifies that the tunnel is to be administratively down.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s
admin-state
Syntax
[no] admin-state
Context
[Tree] (config>system>management-interface>cli>md-cli>environment>info-output>always-display admin-state)
Full Context
configure system management-interface cli md-cli environment info-output always-display admin-state
Description
This command configures that the values of the admin-state elements in the info output (without the detail option) are always displayed, even if they are the default values.
The no form of this command excludes the values of the admin-state elements from the info output display.
Default
no admin-state
Platforms
All
admin-status
admin-status
Syntax
admin-status {rx | tx | tx-rx | disabled}
Context
[Tree] (config>port>ethernet>lldp>dstmac admin-status)
Full Context
configure port ethernet lldp dest-mac admin-status
Description
This command configures LLDP transmission/reception frame handling.
Default
admin-status disabled
Parameters
- rx
-
Specifies the LLDP agent will receive, but will not transmit LLDP frames on this port.
- tx
-
Specifies that the LLDP agent will transmit LLDP frames on this port and will not store any information about the remote systems connected.
- tx-rx
-
Specifies that the LLDP agent transmits and receives LLDP frames on this port.
- disabled
-
Specifies that the LLDP agent does not transmit or receive LLDP frames on this port. If there is remote systems information which is received on this port and stored in other tables, before the port's admin status becomes disabled, then the information will naturally age out.
Platforms
All
admin-status
Syntax
admin-status {rx | tx | tx-rx | disabled}
Context
[Tree] (config>lag>lldp-member-template>dstmac admin-status)
Full Context
configure lag lldp-member-template dest-mac admin-status
Description
This command configures the LLDP transmission and reception frame handling.
Default
admin-status disabled
Parameters
- rx
-
Keyword to specify that the LLDP agent receives, but does not transmit LLDP frames on this port.
- tx
-
Keyword to specify that the LLDP agent transmits LLDP frames on this port and does not store any information about the remote systems connected.
- tx-rx
-
Keyword to specify that the LLDP agent transmits and receives LLDP frames on this port.
- disabled
-
Keyword to specify that the LLDP agent does not transmit or receive LLDP frames on this port. If remote system information is received on this port and stored in other tables before the administrative status of the port becomes disabled, the information naturally ages out.
Platforms
All
admin-tag
admin-tag
Syntax
[no] admin-tag tag-value
Context
[Tree] (config>router>mpls>lsp-template admin-tag)
[Tree] (config>router>mpls>lsp admin-tag)
Full Context
configure router mpls lsp-template admin-tag
configure router mpls lsp admin-tag
Description
This assigns an administrative tag to an LSP. The administrative tag can be used to enable routes with certain administrative tags to resolve using LSPs of matching administrative tags.
Up to four tags can be assigned to an LSP.
The administrative tag must exist under config>router>admin-tags.
The no form of this command removes the administrative tag.
Parameters
- tag-value
-
The value of the admin-tag, up to 32 characters.
Platforms
All
admin-tag
Syntax
[no] admin-tag tag
Context
[Tree] (config>router>admin-tags admin-tag)
Full Context
configure router admin-tags admin-tag
Description
This command configures an admin tag value in the nodal LSP administrative tag database.
Up to 256 admin tags can be configured.
The no form of this command removes the admin tag.
Parameters
- tag
-
The value of the administrative tag, up to 32 characters.
Platforms
All
admin-tag-policy
admin-tag-policy
Syntax
admin-tag-policy policy-name
no admin-tag-policy
Context
[Tree] (config>router>policy-options>policy-statement>default-action admin-tag-policy)
[Tree] (config>router>policy-options>policy-statement>entry>action admin-tag-policy)
Full Context
configure router policy-options policy-statement default-action admin-tag-policy
configure router policy-options policy-statement entry action admin-tag-policy
Description
This command assigns a route admin tag policy as an action in a route policy.
The admin tag policy must exist under config>router>admin-tags.
The no form of this command removes the admin tag policy.
Parameters
- policy-name
-
Specifies the name of the admin tag policy, up to 64 characters.
Platforms
All
admin-tags
admin-tags
Syntax
admin-tags
Context
[Tree] (config>router admin-tags)
Full Context
configure router admin-tags
Description
Commands in this context configure admin tags and router admin tag policy templates used for route resolution to LSPs.
Platforms
All
adspec
adspec
Syntax
[no] adspec
Context
[Tree] (config>router>mpls>lsp adspec)
[Tree] (config>router>mpls>lsp-template adspec)
Full Context
configure router mpls lsp adspec
configure router mpls lsp-template adspec
Description
When enabled, the ADSPEC object will be included in RSVP messages for this LSP. The ADSPEC object is used by the ingress LER to discover the minimum value of the MTU for links in the path of the LSP. By default, the ingress LER derives the LSP MTU from that of the outgoing interface of the LSP path.
A bypass LSP always signals the ADSPEC object since it protects both primary paths which signal the ADSPEC object and primary paths which do not. This means that MTU of LSP at ingress LER may change to a different value from that derived from the outgoing interface even if the primary path has ADSPEC disabled.
Default
no adspec — No ADSPEC objects are included in RSVP messages.
Platforms
All
adv-adj-addr-only
adv-adj-addr-only
Syntax
[no] adv-adj-addr-only
Context
[Tree] (config>router>ldp>session-params>peer adv-adj-addr-only)
Full Context
configure router ldp session-parameters peer adv-adj-addr-only
Description
This command provides a means for an LDP router to advertise only the local IPv4 or IPv6 interfaces it uses to establish hello adjacencies with an LDP peer. By default, when a router establishes an LDP session with a peer, it advertises in an LDP Address message the addresses of all local interfaces to allow the peer to resolve LDP FECs distributed by this router. Similarly, a router sends a Withdraw Address message to of all its peers to withdraw a local address if the corresponding interface went down or was deleted.
This new option reduces CPU processing when a large number of LDP neighbors come up or go down. The new CLI option is strongly recommended in mobile backhaul networks where the number of LDP peers can be very large.
The no form of this command reverts LDP to the default behavior of advertising all local interfaces.
Platforms
All
adv-config-policy
adv-config-policy
Syntax
adv-config-policy policy-name [create]
no adv-config-policy policy-name
Context
[Tree] (config>qos adv-config-policy)
Full Context
configure qos adv-config-policy
Description
Commands in this context configure an advanced QoS policy. This command contains only queue and policer child control parameters within a child-control node.
The parameters within the child-control node are intended to allow more precise control of the method that hierarchical virtual scheduling employs to emulate the effect of a scheduling context upon a member child queue or policer.
When a policy is created, it may be applied to a queue or policer defined within a sap-egress or sap-ingress QoS policy. It may also be applied to a queue or policer defined within an ingress or egress queue-group template. When a policy is currently associated with a QoS policy or template, the policy may be modified but not deleted (even in the event that the QoS policy or template is not in use).
While the system maintains default values for the advanced configuration parameters, no default adv-config-policy exists.
The no form of this command removes the specified advanced policy.
Parameters
- policy-name
-
The name of the advanced QoS policy. A policy-name must be specified and conform to the policy naming guidelines. If the specified name does not exist, the optional create keyword requirements are met and the total number of policies per system will not be exceeded, an adv-config-policy of that name will be created. If the specified name does exist, the system will switch context to that adv-config-policy for the purpose of modification of the policy’s contents.
Platforms
All
adv-config-policy
Syntax
adv-config-policy policy-name
no adv-config-policy
Context
[Tree] (config>qos>sap-ingress>queue adv-config-policy)
[Tree] (config>qos>sap-egress>queue adv-config-policy)
[Tree] (config>qos>sap-ingress>policer adv-config-policy)
[Tree] (config>qos>sap-egress>policer adv-config-policy)
Full Context
configure qos sap-ingress queue adv-config-policy
configure qos sap-egress queue adv-config-policy
configure qos sap-ingress policer adv-config-policy
configure qos sap-egress policer adv-config-policy
Description
This command specifies the advanced QoS policy. The advanced QoS policy contains only queue and policer child control parameters within a child-control node.
When a policy is created, it may be applied to a queue or policer defined within a sap-egress or sap-ingress QoS policy. It may also be applied to a queue or policer defined within an ingress or egress queue-group template. When a policy is currently associated with a QoS policy or template, the policy may be modified but not deleted (even in the event that the QoS policy or template is not in use).
The no form of this command removes the specified advanced policy.
Default
no adv-config-policy
Parameters
- policy-name
-
The name of the advanced QoS policy.
Platforms
All
- configure qos sap-ingress queue adv-config-policy
- configure qos sap-egress queue adv-config-policy
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, 7950 XRS, VSR
- configure qos sap-egress policer adv-config-policy
- configure qos sap-ingress policer adv-config-policy
adv-config-policy
Syntax
adv-config-policy adv-config-policy-name
no adv-config-policy
Context
[Tree] (config>qos>qgrps>egr>qgrp>queue adv-config-policy)
[Tree] (config>qos>qgrps>ing>qgrp>policer adv-config-policy)
[Tree] (config>qos>qgrps>ing>qgrp>queue adv-config-policy)
[Tree] (config>qos>qgrps>egr>qgrp>policer adv-config-policy)
Full Context
configure qos queue-group-templates egress queue-group queue adv-config-policy
configure qos queue-group-templates ingress queue-group policer adv-config-policy
configure qos queue-group-templates ingress queue-group queue adv-config-policy
configure qos queue-group-templates egress queue-group policer adv-config-policy
Description
This command specifies the name of the advanced configuration policy to be applied with this policer.
Parameters
- adv-config-policy-name
-
Specifies an existing advanced configuration policy up to 32 characters.
Platforms
All
- configure qos queue-group-templates ingress queue-group queue adv-config-policy
- configure qos queue-group-templates egress queue-group queue adv-config-policy
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, 7950 XRS, VSR
- configure qos queue-group-templates egress queue-group policer adv-config-policy
- configure qos queue-group-templates ingress queue-group policer adv-config-policy
adv-config-policy
Syntax
adv-config-policy src-name dst-name [overwrite]
Context
[Tree] (config>qos>copy adv-config-policy)
Full Context
configure qos copy adv-config-policy
Description
This command copies existing QoS policy entries for a QoS policy-id to another QoS policy-id.
The copy command is a configuration-level maintenance tool used to create new policies using existing policies. It also allows bulk modifications to an existing policy with the use of the overwrite keyword.
Parameters
- adv-config-policy
-
Indicates that the source policy ID and the destination policy ID are advanced policy IDs. Specify the source advanced policy ID that the copy command will attempt to copy from and specify the destination advanced policy ID to which the command will copy a duplicate of the policy.
- overwrite
-
Specifies that this policy is to replace the existing destination advanced policy. Everything in the existing destination policy will be overwritten with the contents of the source advanced policy. If overwrite is not specified, an error will occur if the destination policy ID exists, as shown here:
- Example:
-
— ALA-7>config>qos# copy adv-config-policy default sp1
— MINOR: CLI Destination "sp1" exists - use {overwrite}
— ALA-7>config>qos#overwrite
Platforms
All
adv-local-lsr-id
adv-local-lsr-id
Syntax
[no] adv-local-lsr-id
Context
[Tree] (config>router>ldp>session-params>peer adv-local-lsr-id)
[Tree] (config>router>ldp>targeted-session>peer-template adv-local-lsr-id)
Full Context
configure router ldp session-parameters peer adv-local-lsr-id
configure router ldp targeted-session peer-template adv-local-lsr-id
Description
This command advertises a local LSR ID over a specified LDP session.
Advertisement of a local LSR ID over a given LDP session is configured using the adv-local-lsr-id command in the peer session-parameters. If a user disables the adv-local-lsr-id command, then the system will withdraw the FEC for the local LSR ID.
The SR OS router uses the following rules when advertising a local LSR ID:
-
If the session parameters have the default configuration and the targeted peer template has the default configuration, the local LSR ID is not advertised.
-
If the session parameters have the default configuration but the targeted peer template has an explicit configuration for advertisement of the local LSR ID, the targeted peer template configuration is used.
-
If the session parameters have an explicit configuration for advertisement of the local LSR ID but the targeted peer template has the default configuration, the session parameter configuration is used.
-
If both the session parameters and the targeted peer template have an explicit configuration for advertisement of the local LSR ID, then the session parameter configuration is used.
The no form of this command withdraws the FEC for the local LSR ID.
Default
no adv-local-lsr-id
Platforms
All
adv-mtu-override
adv-mtu-override
Syntax
[no] adv-mtu-override
Context
[Tree] (config>service>sdp adv-mtu-override)
Full Context
configure service sdp adv-mtu-override
Description
This command overrides the advertised VC-type MTU of all spoke-sdps of L2 services using this SDP-ID. When enabled, the router signals a VC MTU equal to the service MTU, which includes the Layer 2 header. It also allows this router to accept an MTU advertised by the far-end PE which value matches either its advertised MTU or its advertised MTU minus the L2 headers.
By default, the router advertises a VC-MTU equal to the L2 service MTU minus the Layer 2 header and always matches its advertised MTU to that signaled by the far-end PE router, otherwise the spoke-sdp goes operationally down.
When this command is enabled on the SDP, it has no effect on a spoke-sdp of an IES/VPRN spoke interface using this SDP-ID. The router continues to signal a VC MTU equal to the net IP interface MTU, which is min{ip-mtu, sdp operational path mtu - L2 headers}. The router also continues to make sure that the advertised MTU values of both PE routers match or the spoke-sdp goes operationally down.
The no form of the command disables the VC-type MTU override and returns to the default behavior.
Default
no adv-mtu-override
Platforms
All
adv-noaddrs-global
adv-noaddrs-global
Syntax
adv-noaddrs-global [esm-proxy] [esm-relay] [relay] [server]
no adv-noaddrs-global
Context
[Tree] (config>system>dhcp6 adv-noaddrs-global)
Full Context
configure system dhcp6 adv-noaddrs-global
Description
This command configures the different DHCPv6 applications to send the NoAddrsAvail Status-Code in DHCPv6 Advertise messages at the global DHCP message level.
By default, all applications send the NoAddrsAvail Status-Code in DHCPv6 Advertise messages at the IA_NA Option level.
Different applications for which NoAddrsAvail Status-Code in DHCPv6 Advertise messages can be configured at the global DHCP message level.
The only valid combination in current SR OS is adv-noaddrs-global esm-relay server.
The no form of this command reverts to the default.
Default
no adv-noaddrs-global. All applications send the NoAddrsAvail Status-Code in DHCPv6 Advertise messages at the IA_NA Option level.
Parameters
- esm-proxy
-
Specifies the DHCPv6 proxy server on subscriber group-interfaces. Not supported in current SR OS.
- esm-relay
-
Specifies the DHCPv6 relay on subscriber group-interfaces. Must be enabled together with the DHCPv6 server (server) application.
- relay
-
Specifies the DHCPv6 relay on regular IES or VPRN interfaces. Not supported in current SR OS.
- server
-
Specifies the DHCPv6 server. Must be enabled together with the DHCPv6 relay on subscriber interfaces (esm-relay) application.
Platforms
All
adv-service-mtu
adv-service-mtu
Syntax
adv-service-mtu octets
no adv-service-mtu
Context
[Tree] (config>service>epipe>spoke-sdp adv-service-mtu)
[Tree] (config>service>vpls>spoke-sdp adv-service-mtu)
Full Context
configure service epipe spoke-sdp adv-service-mtu
configure service vpls spoke-sdp adv-service-mtu
Description
This command configures the MTU value signaled in the targeted LDP for the spoke-SDP and is used to validate the value signaled by the far-end PE. If configured, this value is used instead of the service MTU. However, the configuration does not affect the locally enforced value, which is still based on the service MTU. This command cannot be configured on a spoke-SDP that is bound to an SDP with the adv-mtu-override command.
When configured, an adjusted service MTU is used. See the service-mtu command for more information.
The no form of this command removes the configuration.
Default
no adv-service-mtu
Parameters
- octets
-
The size of the MTU in octets, expressed as a decimal integer.
Platforms
All
adv-service-mtu
Syntax
adv-service-mtu number
no adv-service-mtu
Context
[Tree] (config>service>epipe>bgp adv-service-mtu)
[Tree] (config>service>vpls>bgp adv-service-mtu)
Full Context
configure service epipe bgp adv-service-mtu
configure service vpls bgp adv-service-mtu
Description
This command configures the Layer 2 MTU value (advertised for BGP signaling) or the MTU interface parameter (advertised for LDP signaling) for the service. The configured MTU information is used to validate the value signaled by the far-end PE. However, this configuration does not affect the locally enforced value, which is still based on the service MTU.
The no form of this command reverts to the default Layer 2 MTU value for BGP signaling or to the default MTU interface parameter for LDP signaling for the service, which uses an adjusted service-mtu value. See the service-mtu command for more information.
Default
no adv-service-mtu
Parameters
- number
-
Specifies the size, in octets, of the Layer 2 MTU value to advertise for BGP signaling for the service.
Platforms
All
advertise
advertise
Syntax
advertise {static | dynamic} [route-tag [1..255]]
no advertise {static | dynamic}
Context
[Tree] (config>service>ies>if>vpls>evpn>nd advertise)
[Tree] (config>service>ies>if>vpls>evpn>arp advertise)
Full Context
configure service ies interface vpls evpn nd advertise
configure service ies interface vpls evpn arp advertise
Description
This command enables the advertisement of static and dynamic ARP and ND entries that are installed in the ARP and ND cache into EVPN MAC/IP routes. This command must be used along with no learn-dynamic.
Default
no advertise
Parameters
- static
-
Enables ARP/ND host routes to be created in the route table from EVPN ARP/ND entries
- dynamic
-
Enables ARP/ND host routes to be created in the route table out of dynamic ARP/ND entries (learned from ARP/ND messages received from the hosts).
- route-tag
-
Specifies the route tag that is added in the route table for ARP/ND host routes of type dynamic, or static. This tag can be matched on BGP VRF export and BGP peer export policies.
Platforms
All
advertise
Syntax
advertise {static | dynamic} [route-tag [1..255]] interface-less-routing [bgp-evpn-instance [1..1]]
advertise {static | dynamic} [route-tag [1..255]]
no advertise {static | dynamic}
Context
[Tree] (config>service>vprn>if>vpls>evpn>arp advertise)
[Tree] (config>service>vprn>if>vpls>evpn>nd advertise)
Full Context
configure service vprn interface vpls evpn arp advertise
configure service vprn interface vpls evpn nd advertise
Description
This command enables the advertisement of static and dynamic ARP and ND entries that are installed in the ARP and ND cache into EVPN MAC/IP routes. This command must be used along with the no learn-dynamic command.
Default
no advertise
Parameters
- static
-
Enables ARP or ND host routes to be created in the route table from EVPN ARP or ND entries
- dynamic
-
Enables ARP or ND host routes to be created in the route table out of dynamic ARP or ND entries (learned from ARP or ND messages received from the hosts).
- route-tag
-
Keyword to specify the route tag is added in the route table for ARP or ND host routes of type dynamic, or static. This tag can be matched on BGP VRF export and BGP peer export policies.
- interface-less-routing
-
Keyword to specify that the advertisement in EVPN MAC/IP advertisement routes include the label1 and route target of the R-VPLS EVPN service and the label2 value and route target of the EVPN interface-less instance in the linked VPRN.
- bgp-evpn-instance
-
Keyword to specify the EVPN interface-less BGP instance from which the label and route target are taken when advertising the ARP or ND entry in an EVPN MAC/IP advertisement route.
Platforms
All
advertise
Syntax
advertise fad-name
no advertise
Context
[Tree] (config>router>isis>flex-algos>flex-algo advertise)
[Tree] (config>router>ospf>flex-algos>flex-algo advertise)
Full Context
configure router isis flexible-algorithms flex-algo advertise
configure router ospf flexible-algorithms flex-algo advertise
Description
This command enables the advertisement of a locally configured Flexible Algorithm Definition (FAD).
A locally defined FAD is only advertised if it is administratively enabled. A router can advertise only a single locally defined FAD by using the fad-name as reference anchor.
The winning FAD used by a router must be consistent with the winning FAD on all other routers. This avoids routing loops and traffic blackholing. The winning FAD is selected using a tie-breaker algorithm that first selects the highest advertised FAD priority and next the highest system Id.
The no form of this command removes the advertisement of a flexible algorithm definition.
Default
no advertise
Parameters
- fad-name
-
Configures the FAD name, up to 32 characters. By default, no locally configured FAD is advertised.
Platforms
All
advertise
Syntax
advertise {mvpn-pim | mvpn-only| pim-only}
Context
[Tree] (config>service>vpls>bind>evpn-mcast-gateway advertise)
Full Context
configure service vpls allow-ip-int-bind evpn-mcast-gateway advertise
Description
This command signals the OISM gateway function type in the Inclusive Multicast Ethernet Tag (IMET) routes.
Default
advertise mvpn-pim
Parameters
- mvpn-pim
-
Specifies that the router signals the MVPN-to-OISM (MEG) and PIM-to-OISM (PEG) gateway capabilities.
- mvpn-only
-
Specifies that the router signals the MVPN-to-OISM (MEG) gateway capabilities.
- pim-only
-
Specifies that the router signals the PIM-to-OISM (PEG) gateway capabilities.
Platforms
All
advertise
Syntax
[no] advertise
advertise weight dynamic [max-dynamic-weight max-dynamic-weight]
advertise weight weight
Context
[Tree] (configure>service>vprn>bgp-evpn>srv6>evpn-link-bw advertise)
[Tree] (configure>service>vprn>bgp-evpn>mpls>evpn>evpn-link-bw advertise)
[Tree] (configure>service>vpls>bgp-evpn>ip-route-link-bw advertise)
[Tree] (configure>service>vprn>bgp-evpn>vxlan>evpn-link-bw advertise)
Full Context
configure service vprn bgp-evpn segment-routing-v6 evpn-link-bandwidth advertise
configure service vprn bgp-evpn mpls evpn-link-bandwidth advertise
configure service vpls bgp-evpn ip-route-link-bandwidth advertise
configure service vprn bgp-evpn vxlan evpn-link-bandwidth advertise
Description
This command enables the advertisement of the EVPN link bandwidth extended community along with the IP Prefix routes.
The no form of this command disables the advertisement of the EVPN link bandwidth extended community.
Default
no advertise
Parameters
- weight
-
Specifies the weight advertised in the EVPN link bandwidth extended community for the advertised EVPN IP prefix routes for the service.
- weight dynamic
-
Keyword to specify that the weight is dynamically set based on the number of BGP PE-CE paths for the IP-Prefix that is advertised in an EVPN IP-Prefix route.
- max-dynamic-weight
-
Specifies the maximum weight advertised in the EVPN link bandwidth extended community for the advertised EVPN IP-Prefix routes for the service. If weight dynamic is configured, the actual advertised weight is the minimum of the number of BGP PE-CE paths for the prefix and the configured maximum weight.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
- configure service vprn bgp-evpn segment-routing-v6 evpn-link-bandwidth advertise
All
- configure service vprn bgp-evpn mpls evpn-link-bandwidth advertise
- configure service vpls bgp-evpn ip-route-link-bandwidth advertise
7750 SR-1, 7750 SR-s
- configure service vprn bgp-evpn vxlan evpn-link-bandwidth advertise
advertise
Syntax
advertise [holdtime seconds]
no advertise
Context
[Tree] (configure>router>bgp>group>neighbor>bfd-strict-mode advertise)
[Tree] (configure>router>bgp>group>bfd-strict-mode advertise)
[Tree] (configure>router>bgp>bfd-strict-mode advertise)
[Tree] (configure>service>vprn>bgp>group>neighbor>bfd-strict-mode advertise)
[Tree] (configure>service>vprn>bgp>group>bfd-strict-mode advertise)
[Tree] (configure>service>vprn>bgp>bfd-strict-mode advertise)
Full Context
configure router bgp group neighbor bfd-strict-mode advertise
configure router bgp group bfd-strict-mode advertise
configure router bgp bfd-strict-mode advertise
configure service vprn bgp group neighbor bfd-strict-mode advertise
configure service vprn bgp group bfd-strict-mode advertise
configure service vprn bgp bfd-strict-mode advertise
Description
This command configures BGP to advertise the Strict-BFD capability to peers that are within scope of this command and meet the following requirements:
-
The bfd-enable command that applies to the peer is enabled (through either configuration or inheritance).
-
The interface associated with the peer has a valid BFD configuration.
When the preceding conditions are satisfied and two peers attempting to form a session both advertise the Strict-BFD capability, the BGP finite state machine in each router transitions the session state to established after the BFD session with the peer enters the up state.
The no form of this command prevents BGP from advertising the Strict-BFD capability to peers.
Default
no advertise
Parameters
- seconds
-
Specifies the maximum time (in seconds) BGP waits for the BFD session to come up, provided that the Strict-BFD procedures apply to a session, and the negotiated BGP hold time is zero (no keepalives). If the negotiated BGP hold time is greater than zero, the holdtime parameter is not considered.
Platforms
All
advertise-admin-group
advertise-admin-group
Syntax
advertise-admin-group {prefer-ag | eag-only | ag-eag}
no advertise-admin-group
Context
[Tree] (config>router>ospf>flex-algos advertise-admin-group)
[Tree] (config>router>isis>flex-algos advertise-admin-group)
Full Context
configure router ospf flexible-algorithms advertise-admin-group
configure router isis flexible-algorithms advertise-admin-group
Description
This command configures the type of Aministrative Group (AG) or Extended Administrative Group (EAG) TLVs the router advertises as the Interior Gateway Protocol (IGP) link attribute. This command is configured for this IGP instance.
The no form of this command removes the configuration.
Default
prefer-ag
Parameters
- prefer-ag
-
Keyword to specify that the router advertises the Administrative Group (AG) TLV as the IGP link attribute if the affinity bits in the configure router if-attribute admin-group value command are configured between 0 to 31. If no EAG (32 to 255) affinity bits are configured, only the AG TLV is advertised as the IGP link attribute.
If the affinity bits are configured in both the AG (0 to 31) and EAG (32 to 255) range, the router advertises both the AG and the EAG TLVs as the IGP link attributes.
- eag-only
-
Keyword to specify that the router advertises only the EAG TLV as the IGP link attribute. No AG TLV is advertised if this keyword is configured.
- ag-eag
-
Keyword to specify that the router can advertise both the AG and the EAG TLVs as the IGP link attributes, even without the affinity bit in the EAG range configured in the configure router if-attribute admin-group value command. If no affinity bit is configured in the AG range (0 to 31), the router prunes the AG TLV. Configuring this keyword allows for backward compatibility for vendor implementations that support only AG, while still supporting EAG.
Platforms
All
advertise-bgp
advertise-bgp
Syntax
advertise-bgp route-distinguisher rd [community community]
no advertise-bgp route-distinguisher rd
Context
[Tree] (config>service>pw-routing>local-prefix advertise-bgp)
Full Context
configure service pw-routing local-prefix advertise-bgp
Description
This command enables a given prefix to be advertised in MP-BGP for dynamic MS-PW routing.
The no form of this command will explicitly withdraw a route if it has been previously advertised.
Default
no advertise-bgp
Parameters
- rd
-
Specifies an 8-octet route distinguisher associated with the prefix. Up to 4 unique route distinguishers can be configured and advertised for a given prefix though multiple instances of the advertise-bgp command. This parameter is mandatory.
- community
-
An optional BGP communities attribute associated with the advertisement. To delete a previously advertised community, advertise-bgp route-distinguisher must be run again with the same value for the RD but excluding the community attribute.
Platforms
All
advertise-capabilities
advertise-capabilities
Syntax
advertise-capabilities
Context
[Tree] (config>port>ethernet>efm-oam>discovery advertise-capabilities)
Full Context
configure port ethernet efm-oam discovery advertise-capabilities
Description
This is the top level of the hierarchy which allows for the overriding of default advertising of capabilities to a remote peer.
Platforms
All
advertise-delay
advertise-delay
Syntax
[no] advertise-delay
Context
[Tree] (config>router>ospf>te-opts advertise-delay)
Full Context
configure router ospf traffic-engineering-options advertise-delay
Description
This command configures the advertisement of link delay in the IGP LSDB within the OSPF-TE TLV attribute or when the Application Specific Link Attribute (ASLA) is enabled within the SR-TE ASLA.
When the router is configured with the configure router ospf traffic-engineering-options sr-te application-specific-link-attributes command to generate SR-TE ASLA attributes, link delay is advertised as a legacy RFC 3630 TE TLV when RSVP-TE is enabled and as an ASLA RFC 8920 TLV for SR-TE when MPLS is enabled for an interface.
SR OS accepts and handles both legacy RSVP-TE TLVs and ASLAs for the RSVP application. However, SR OS only advertises RFC 3630 legacy RSVP-TE TLVs (as recommended by RFC 8920) to avoid compatibility issues.
The no form of this command disables link delay advertisement.Default
no advertise-delay
Platforms
All
advertise-delay
Syntax
[no] advertise-delay
Context
[Tree] (config>router>isis>te advertise-delay)
Full Context
configure router isis traffic-engineering-options advertise-delay
Description
This command enables the advertisement of link delay in the IGP LSDB within legacy Traffic Engineering (TE) attributes in IS-IS or within the Application Specific Link Attribute (ASLA) when ASLA is enabled for SR-TE or RSVP-TE applications.
When application-link-attributes legacy command is configured for SR-TE or RSVP-TE, link delay is advertised as a legacy TE TLV with the ASLA legacy bit set.
The no form of this command disables link delay advertisement.
Default
no advertise-delay
Platforms
All
advertise-external
advertise-external
Syntax
[no] advertise-external [ipv4] [ipv6] [ label-ipv4] [label-ipv6]
Context
[Tree] (config>router>bgp advertise-external)
Full Context
configure router bgp advertise-external
Description
This command allows BGP to advertise its best external route to a destination even when its best overall route is an internal route. Entering the command (or its no form) with no address family parameters is equivalent to specifying all supported address families.
The no form of this command disables Advertise Best External for the BGP family.
Default
no advertise-external
Parameters
- ipv4
-
Enables the best-external advertisement for unlabeled unicast IPv4 routes.
- ipv6
-
Enables the best-external advertisement for unlabeled unicast IPv6 routes.
- label-ipv4
-
Enables the best-external advertisement for labeled-unicast IPv4 routes.
- label-ipv6
-
Enables the best-external advertisement for labeled-unicast IPv6 routes.
Platforms
All
advertise-inactive
advertise-inactive
Syntax
[no] advertise-inactive
Context
[Tree] (config>subscr-mgmt>bgp-prng-plcy advertise-inactive)
Full Context
configure subscriber-mgmt bgp-peering-policy advertise-inactive
Description
This command enables the advertising of inactive BGP routers to other BGP peers.
By default, BGP only advertises BGP routes to other BGP peers if a given BGP route is chosen by the route table manager as the most preferred route within the system and is active in the forwarding plane. This command allows system administrators to advertise a BGP route even though it is not the most preferred route within the system for a given destination.
The no form of this command disables the advertising.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
advertise-inactive
Syntax
[no] advertise-inactive
Context
[Tree] (config>service>vprn>bgp>group advertise-inactive)
[Tree] (config>service>vprn>bgp advertise-inactive)
[Tree] (config>service>vprn>bgp>group>neighbor advertise-inactive)
Full Context
configure service vprn bgp group advertise-inactive
configure service vprn bgp advertise-inactive
configure service vprn bgp group neighbor advertise-inactive
Description
This command enables or disables the advertising of inactive BGP routers to other BGP peers.
By default, BGP only advertises BGP routes to other BGP peers if a given BGP route is chosen by the route table manager as the most preferred route within the system and is active in the forwarding plane. This command allows system administrators to advertise a BGP route even though it is not the most preferred route within the system for a given destination.
When the BGP advertise-inactive command is configured so that it applies to a BGP session it has the following effect on the IPv4, IPv6, mcast-ipv4, mcast-ipv6, label-IPv4 and label-IPv6 routes advertised to that peer:
-
If the active route for the IP prefix is a BGP route then that route is advertised.
-
If the active route for the IP prefix is a non-BGP route and there is at least one valid but inactive BGP route for the same destination then the best of the inactive and valid BGP routes is advertised unless the non-BGP active route is matched and accepted by an export policy applied to the session.
-
If the active route for the IP prefix is a non-BGP route and there are no (valid) BGP routes for the same destination then no route is advertised for the prefix unless the non-BGP active route is matched and accepted by an export policy applied to the session.
Default
no advertise-inactive
Platforms
All
advertise-inactive
Syntax
[no] advertise-inactive
Context
[Tree] (config>router>bgp>group advertise-inactive)
[Tree] (config>router>bgp advertise-inactive)
[Tree] (config>router>bgp>group>neighbor advertise-inactive)
Full Context
configure router bgp group advertise-inactive
configure router bgp advertise-inactive
configure router bgp group neighbor advertise-inactive
Description
This command enables the advertising of inactive BGP routes to other BGP peers. By default, BGP only advertises BGP routes to other BGP peers if a given BGP route is chosen by the route table manager as the most preferred route within the system and is active in the forwarding plane. This command allows system administrators to advertise a BGP route even though it is not the used route within the system for a given destination.
The no form of this command disables the advertising of inactive BGP routers to other BGP peers.
Default
no advertise-inactive
Platforms
All
advertise-interval
advertise-interval
Syntax
advertise-interval advertise-interval
no advertise-interval
Context
[Tree] (config>port>aps advertise-interval)
Full Context
configure port aps advertise-interval
Description
This command specifies the time interval, in 100s of milliseconds, between 'I am operational' messages sent by both protect and working circuits to their neighbor for multi-chassis APS.
The advertise-interval value is valid only for a multi-chassis APS as indicated by the value of the neighbor command value if it is not set to 0.0.0.0.
Default
10
Parameters
- advertise-interval
-
Specifies the time interval, in 100s of milliseconds, between 'I am operational' messages sent by both protect and working circuits to their neighbor for multi-chassis APS.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
advertise-ipv6-next-hops
advertise-ipv6-next-hops
Syntax
advertise-ipv6-next-hops [ipv4]
no advertise-ipv6-next-hops
Context
[Tree] (config>service>vprn>bgp>group>neighbor advertise-ipv6-next-hops)
[Tree] (config>service>vprn>bgp advertise-ipv6-next-hops)
[Tree] (config>service>vprn>bgp>group advertise-ipv6-next-hops)
Full Context
configure service vprn bgp group neighbor advertise-ipv6-next-hops
configure service vprn bgp advertise-ipv6-next-hops
configure service vprn bgp group advertise-ipv6-next-hops
Description
When this command is configured, with the IPv4 option, so that it applies to a BGP session established on top of IPv6 transport, IPv4 BGP routes can be advertised with a true IPv6 address when originated or when next-hop-self (configured or automatic) is applied.
If an IPv4 route must originate or be advertised with a next-hop-self and the corresponding advertise-ipv6-next-hops command option does not apply to the session or if an appropriate extended-nh-encoding capability was not received from the remote peer, then the route is advertised with the IPv4 system address as the BGP next-hop.
If an IPv4 route is matched by a BGP export policy entry that tries to change the next hop to an IPv6 address and the corresponding advertise-ipv6-next-hops command option does not apply to the session or if an appropriate extended-nh-encoding capability was not received from the remote peer, then the route is handled as though it was rejected by the policy entry.
This command has no effect on sessions established over IPv4 transport.
The no form of this command reverts to the default.
Default
no advertise-ipv6-next-hops
Parameters
- ipv4
-
Allows IPv4 unicast routes to be advertised to IPv6-transport peers with an IPv6 address as the BGP next-hop in cases of route origination or next-hop-self (configured or automatic). It also allows export policies to change the BGP next-hop of an IPv4 route to an IPv6 address. All of these cases require the remote peer to advertise the necessary extended NH encoding capability. It may be necessary to configure the forward-ipv4-packets command under the appropriate interface>ipv6 contexts in order to enable datapath support for these control plane exchanges.
Platforms
All
advertise-ipv6-next-hops
Syntax
advertise-ipv6-next-hops [vpn-ipv6] [label-ipv6] [ evpn] [vpn-ipv4] [ label-ipv4] [ipv4]
no advertise-ipv6-next-hops
Context
[Tree] (config>router>bgp>group advertise-ipv6-next-hops)
[Tree] (config>router>bgp advertise-ipv6-next-hops)
[Tree] (config>router>bgp>group>neighbor advertise-ipv6-next-hops)
Full Context
configure router bgp group advertise-ipv6-next-hops
configure router bgp advertise-ipv6-next-hops
configure router bgp group neighbor advertise-ipv6-next-hops
Description
This command applies to a BGP session established on top of IPv6 transport; BGP routes belonging to the specified families can be advertised with a true IPv6 address when originated or when next-hop-self (configured or automatic) is applied.
This command has no effect on routes advertised to IPv4 peers.
When this command is not enabled, the following considerations apply:
-
If a VPN IPv6 or label IPv6 route needs to be originated or advertised with next-hop-self to an IPv6 transport peer the route is advertised with the IPv4 system address as BGP next-hop (encoded as an IPv4-mapped IPv6 address).
-
If a VPN-IPv4 or label IPv4 route needs to be originated or advertised with next-hop-self or if an appropriate extended-nh-encoding capability was not received from the remote peer, the route is advertised with the IPv4 system address as the BGP next-hop.
-
If a VPN IPv4 or label IPv4 route is matched by a BGP export policy entry that tries to change the next-hop to an IPv6 address and an appropriate extended-nh-encoding capability was not received from the remote peer, the route is handled as though it was rejected by the policy entry.
The no form of this command disables the setting of next hops to a global IPv6 address for the family.
Default
no advertise-ipv6-next-hops
Parameters
- vpn-ipv6
-
Allows VPN IPv6 routes to be advertised to IPv6 transport peers with an IPv6 address as the BGP next-hop in cases of route origination or next-hop-self (configured or automatic).
- label-ipv6
-
Allows label IPv6 routes to be advertised to IPv6 transport peers with an IPv6 address as the BGP next-hop in cases of route origination or next-hop-self (configured or automatic).
- vpn-ipv4
-
Allows VPN IPv4 routes to be advertised to IPv6 transport peers with an IPv6 address as the BGP next-hop in cases of route origination or next-hop-self (configured or automatic). It also allows export policies to change the BGP next-hop of a VPN IPv4 route to an IPv6 address. All of these cases require the remote peer to advertise the necessary extended NH encoding capability.
- label-ipv4
-
Allows label IPv4 routes to be advertised to IPv6 transport peers with an IPv6 address as the BGP next-hop in cases of route origination or next-hop-self (configured or automatic). It also allows export policies to change the BGP next-hop of a label IPv4 route to an IPv6 address. All of these cases require the remote peer to advertise the necessary extended NH encoding capability.
- ipv4
-
Instructs BGP to advertise an extended NH encoding capability for NLRI AFI=1, NLRI SAFI=1 and next-hop AFI=2.
- evpn
-
Allows EVPN routes to be advertised to IPv6 transport peers.
Platforms
All
advertise-label
advertise-label
Syntax
advertise-label {per-prefix | pop | pop-and-forward}
no advertise-label
Context
[Tree] (config>router>policy-options>policy-statement>default-action advertise-label)
[Tree] (config>router>policy-options>policy-statement>entry>action advertise-label)
Full Context
configure router policy-options policy-statement default-action advertise-label
configure router policy-options policy-statement entry action advertise-label
Description
This command configures the label allocation method for advertised routes. The effect of the advertise-label command depends on the context where the associated policy is applied.
Use the per-prefix option and configure the command in the default action or entry-specific action of a VRF export policy to advertise every qualifying matched route with a per-prefix label in the resulting VPN-IP routes. In this situation, non-qualifying routes include local interface routes and BGP-VPN routes. The command overrides, for specific routes, the configured label-mode of the exporting VPRN service.
Use the per-prefix option and configure the command in the default action or entry-specific action of a BGP import policy to assign a per-prefix label to qualifying label-IPv4 and label-IPv6 routes when:
-
these routes are the best path for their prefix in the respective RIB
-
there is a BGP next-hop change
A label-IPv4 or label-IPv6 route advertised with a pre-prefix label supports ECMP forwarding across multiple BGP next-hops.
The pop option is applicable in route-table-import policies. The advertised BGP label is programmed for a pop operation when:
-
a /32 IPv4 static, OSPF, or IS-IS route is matched and accepted by a label-IPv4 or label-IPv6 RIB route-table-import policy entry or default-action with this command
-
the route is a candidate to be advertised as a label-IPv4 or label-IPv6 route (due to a BGP export policy)
When the label-IPv4 RIB imports a /32 static, OSPF, or IS-IS route and then exports the route as a BGP route, the default behavior is to program a swap operation in the datapath, which swaps the BGP label with the tunnel label that takes traffic to the destination of the /32 route.
The pop-and-forward option is applicable in route-table-import policies, when these policies match an unlabeled BGP route and apply this policy action.
Use the pop-and-forward option to program the label that is advertised in the BGP-LU route to forward the packet according to the resolution of the unlabeled route that triggered the origination of the BGP-LU route. The forwarding is done without an IP FIB lookup, which can be useful in situations where the IP FIB at the exit of the MPLS tunnel is not synchronized with the FIB at the head-end of the MPLS tunnel. The advertisement of a pop-and-forward label overrides the configuration to advertise label-ipv6 routes with an explicit null label and the configuration to advertise BGP-LU with a prefix SID attribute. Those features are not available when using the pop-and-forward label.
Default
no advertise-label
Parameters
- per-prefix
-
Sets the per-prefix label allocation for matched routes. This takes effect only in VRF export policies and BGP import policies, and only for certain types of routes.
- pop
-
Sets the pop label allocation for matched routes. This takes effect only in label-IPv4 route-table-import policies and only applies to /32 IPv4 routes that were learned through static configuration, OSPF, or IS-IS.
- pop-and-forward
-
Sets the pop-and-forward label allocation for matched routes. This takes effect only when an unlabeled BGP IPv4 or IPv6 route is matched by a label-IPv4 or label-IPv6 route-table-import policy.
Platforms
All
advertise-ldp-prefix
advertise-ldp-prefix
Syntax
[no] advertise-ldp-prefix
Context
[Tree] (config>router>bgp>group>neighbor advertise-ldp-prefix)
Full Context
configure router bgp group neighbor advertise-ldp-prefix
Description
This command, when configured for a session that supports the IPv4 labeled-unicast address family, allows (subject to BGP export policies) active /32 LDP FEC prefixes to be advertised to the BGP peer with an RFC 8277 label, even though there may be BGP paths for the same prefix.
Default
no advertise-ldp-prefix
Platforms
All
advertise-local
advertise-local
Syntax
[no] advertise-local
Context
[Tree] (config>service>vpls>isid-policy>entry advertise-local)
Full Context
configure service vpls isid-policy entry advertise-local
Description
The no advertise-local option prevents the advertisement of any locally defined I-VPLS ISIDs or static-isids in the range in a B-VPLS. For I-VPLS services or static-isids that are primarily unicast traffic, the use-def-mcast and no advertise-local options allows the forwarding of ISID based multicast frames locally using the default multicast. The no advertise-local option also suppresses this range of ISIDs from being advertised in ISIS. When using the use-def-mcast and no advertise-local policies, the ISIDs configured under this static-isid declarations SPBM treats the ISIDs as belonging to the default tree.
Default
advertise-local
Platforms
All
advertise-ne-profile
advertise-ne-profile
Syntax
advertise-ne-profile name
no advertise-ne-profile
Context
[Tree] (config>service>vprn>ospf>area advertise-ne-profile)
Full Context
configure service vprn ospf area advertise-ne-profile
Description
This command enables advertising of a specific NE profile using OSPFv2 LSA type 10 opaque.
The no version of this command disables advertising of NE profiles.
Default
no advertise-ne-profile
Parameters
- name
-
Specifies the name of the NE profile to be advertised, up to 32 characters.
Platforms
All
advertise-passive-only
advertise-passive-only
Syntax
[no] advertise-passive-only
Context
[Tree] (config>service>vprn>isis advertise-passive-only)
Full Context
configure service vprn isis advertise-passive-only
Description
This command enables IS-IS for the VPRN instance to advertise only prefixes that belong to passive interfaces.
The no form of this command disables IS-IS for the VPRN instance from advertising only prefixes that belong to passive interfaces.
Platforms
All
advertise-passive-only
Syntax
[no] advertise-passive-only
Context
[Tree] (config>router>isis advertise-passive-only)
Full Context
configure router isis advertise-passive-only
Description
This command enables and disables IS-IS to advertise only prefixes that belong to passive interfaces.
Default
no advertise-passive-only
Platforms
All
advertise-router-capability
advertise-router-capability
Syntax
advertise-router-capability {area | as}
no advertise-router-capability
Context
[Tree] (config>service>vprn>isis advertise-router-capability)
[Tree] (config>service>vprn>isis>level advertise-router-capability)
Full Context
configure service vprn isis advertise-router-capability
configure service vprn isis level advertise-router-capability
Description
This command enables advertisement of a router's capabilities to its neighbors for informational and troubleshooting purposes. A new TLV as defined in RFC 4971 advertises the TE Node Capability Descriptor capability.
The parameters (area & as) control the scope of the capabilities advertisements.
The no form of this command disables this capability.
Default
no advertise-router-capability
Parameters
- area
-
Capabilities are only advertised within the area of origin.
- as
-
Capabilities are only advertised throughout the entire autonomous system.
Platforms
All
advertise-router-capability
Syntax
advertise-router-capability
advertise-router-capability {link | area | as}
no advertise-router-capability
Context
[Tree] (config>service>vprn>ospf3>area>if advertise-router-capability)
[Tree] (config>service>vprn>ospf advertise-router-capability)
[Tree] (config>service>vprn>ospf>area>if advertise-router-capability)
[Tree] (config>service>vprn>ospf>area advertise-router-capability)
[Tree] (config>service>vprn>ospf3 advertise-router-capability)
Full Context
configure service vprn ospf3 area interface advertise-router-capability
configure service vprn ospf advertise-router-capability
configure service vprn ospf area interface advertise-router-capability
configure service vprn ospf area advertise-router-capability
configure service vprn ospf3 advertise-router-capability
Description
This command enables advertisement of a router's capabilities to its neighbors for informational and troubleshooting purposes. A Router Information (RI) LSA as defined in RFC 4970 advertises the following capabilities:
-
OSPF graceful restart capable: no
-
OSPF graceful restart helper: yes, when enabled
-
OSPF Stub Router support: yes
-
OSPF Traffic Engineering support: yes, when enabled
-
OSPF point-to-point over LAN: yes
-
OSPF Experimental TE: no
The parameters (link, area and as) control the advertisement scope of the router capabilities.
The no form of this command disables this capability.
Default
no advertise-router-capability
Parameters
- link
-
Capabilities are only advertised over local link and not flooded beyond.
- area
-
Capabilities are only advertised within the area of origin.
- as
-
Capabilities are only advertised throughout the entire autonomous system.
Platforms
All
advertise-router-capability
Syntax
advertise-router-capability {area | as}
no advertise-router-capability
Context
[Tree] (config>router>isis advertise-router-capability)
Full Context
configure router isis advertise-router-capability
Description
This command enables advertisement of a router's capabilities to its neighbors for informational and troubleshooting purposes. A TLV as defined in RFC 4971 advertises the TE Node Capability Descriptor capability.
The parameters (area and as) control the scope of the capability advertisements.
The no form of this command disables this capability.
Parameters
- area
-
Specifies to only advertise within the area of origin.
- as
-
Specifies to advertise throughout the entire autonomous system.
Platforms
All
advertise-router-capability
Syntax
[no] advertise-router-capability
Context
[Tree] (config>router>isis>level advertise-router-capability)
Full Context
configure router isis level advertise-router-capability
Description
This command enables router advertisement capabilities.
The no form of this command disables router advertisement capabilities.
Default
advertise-router-capability
Platforms
All
advertise-router-capability
Syntax
advertise-router-capability {link | area | as}
no advertise-router-capability
Context
[Tree] (config>router>ospf advertise-router-capability)
[Tree] (config>router>ospf3 advertise-router-capability)
Full Context
configure router ospf advertise-router-capability
configure router ospf3 advertise-router-capability
Description
This command enables advertisement of a router's capabilities to its neighbors for informational and troubleshooting purposes. A Router Information (RI) LSA as defined in RFC 4970 advertises the following capabilities:
-
OSPF graceful restart capable: no
-
OSPF graceful restart helper: yes, when enabled
-
OSPF stub router support: yes
-
OSPF traffic engineering support: yes, when enabled
-
OSPF point-to-point over LAN: yes
-
OSPF experimental TE: no
The parameters (link, area and as) control the scope of the capability advertisements.
The no form of this command disables this capability.
Default
no advertise-router-capability
Parameters
- link
-
capabilities are only advertised over local links and not flooded beyond.
- area
-
capabilities are only advertised within the area of origin.
- as
-
capabilities are advertised throughout the entire autonomous system.
Platforms
All
advertise-router-capability
Syntax
[no] advertise-router-capability
Context
[Tree] (config>router>ospf3>area>interface advertise-router-capability)
[Tree] (config>router>ospf3>area advertise-router-capability)
[Tree] (config>router>ospf>area>interface advertise-router-capability)
[Tree] (config>router>ospf>area advertise-router-capability)
Full Context
configure router ospf3 area interface advertise-router-capability
configure router ospf3 area advertise-router-capability
configure router ospf area interface advertise-router-capability
configure router ospf area advertise-router-capability
Description
This command enables advertisement of a router’s capabilities to its neighbors for informational and troubleshooting purposes. A Router Information (RI) LSA as defined in RFC 4970 advertises the following capabilities:
-
OSPF graceful restart capable: no
-
OSPF graceful restart helper: yes, when enabled
-
OSPF stub router support: yes
-
OSPF traffic engineering support: yes, when enabled
-
OSPF point-to-point over LAN: yes
-
OSPF experimental TE: no
The no form of this command disables this capability.
Default
advertise-router-capability
Platforms
All
advertise-selection
advertise-selection
Syntax
advertise-selection
Context
[Tree] (config>service>ies>sub-if>grp-if>ipv6>dhcp6>relay advertise-selection)
[Tree] (config>service>vprn>sub-if>grp-if>ipv6>dhcp6>relay advertise-selection)
[Tree] (config>service>vprn>sub-if>ipv6>dhcp6>relay advertise-selection)
Full Context
configure service ies subscriber-interface group-interface ipv6 dhcp6 relay advertise-selection
configure service vprn subscriber-interface group-interface ipv6 dhcp6 relay advertise-selection
configure service vprn subscriber-interface ipv6 dhcp6 relay advertise-selection
Description
Commands in this context configure a solicit delay or a DHCPv6 preference option value to influence the advertise selection of DHCPv6 clients.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
advertise-stale-to-all-neighbors
advertise-stale-to-all-neighbors
Syntax
advertise-stale-to-all-neighbors [without-no-export]
no advertise-stale-to-all-neighbors
Context
[Tree] (config>service>vprn>bgp>group>graceful-restart>long-lived advertise-stale-to-all-neighbors)
[Tree] (config>service>vprn>bgp>group>neighbor>graceful-restart>long-lived advertise-stale-to-all-neighbors)
[Tree] (config>service>vprn>bgp>graceful-restart>long-lived advertise-stale-to-all-neighbors)
Full Context
configure service vprn bgp group graceful-restart long-lived advertise-stale-to-all-neighbors
configure service vprn bgp group neighbor graceful-restart long-lived advertise-stale-to-all-neighbors
configure service vprn bgp graceful-restart long-lived advertise-stale-to-all-neighbors
Description
This command allows BGP routes marked as LLGR stale to be advertised to BGP peers that did not advertise the LLGR capability when the session was opened. The no version of this command causes advertisement behavior to follow the rule that stale routes cannot be advertised to a peer that does not understand or implement the LLGR capability. Stale routes are withdrawn towards such peers.
When this command is configured with the without-no-export option, LLGR stales routes can be advertised to any peer (EBGP or IBGP) that did not signal the LLGR capability. Towards IBGP and confederation-EBGP peers that did not advertise the LLGR capability, the LOCAL_PREFERENCE attribute in the advertised stale routes is automatically set to zero.
When this command is configured without the without-no-export option, LLGR stale routes are not advertised to any EBGP peer that did not signal the LLGR capability. Towards IBGP and confederation-EBGP peers that did not advertise the LLGR capability the LOCAL_PREFERENCE attribute in the advertised stale routes is automatically set to zero and a NO_EXPORT standard community is automatically added to the routes.
Default
no advertise-stale-to-all-neighbors
Parameters
- without-no-export
-
Allows LLGR stale routes to be advertised to all peers, such that they can exit the local AS.
Platforms
All
advertise-stale-to-all-neighbors
Syntax
advertise-stale-to-all-neighbors [without-no-export | no without-no-export]
no advertise-stale-to-all-neighbors
Context
[Tree] (config>router>bgp>graceful-restart>long-lived advertise-stale-to-all-neighbors)
[Tree] (config>router>bgp>group>graceful-restart>long-lived advertise-stale-to-all-neighbors)
[Tree] (config>router>bgp>group>neighbor>graceful-restart>long-lived advertise-stale-to-all-neighbors)
Full Context
configure router bgp graceful-restart long-lived advertise-stale-to-all-neighbors
configure router bgp group graceful-restart long-lived advertise-stale-to-all-neighbors
configure router bgp group neighbor graceful-restart long-lived advertise-stale-to-all-neighbors
Description
This command allows BGP routes marked as LLGR stale to be advertised to BGP peers that did not advertise the LLGR capability when the session was opened.
When this command is configured with the without-no-export option, LLGR stale routes can be advertised to any peer (EBGP or IBGP) that did not signal the LLGR capability. Towards IBGP and confederation-EBGP peers that did not advertise the LLGR capability, the LOCAL_PREFERENCE attribute in the advertised stale routes is automatically set to zero.
When this command is configured without the without-no-export option, LLGR stale routes are not advertised to any EBGP peer that did not signal the LLGR capability. Towards IBGP and confederation-EBGP peers that did not advertise the LLGR capability the LOCAL_PREFERENCE attribute in the advertised stale routes is automatically set to zero and a NO_EXPORT standard community is automatically added to the routes.
The no version of this command causes advertisement behavior to follow the rule that stale routes cannot be advertised to a peer that does not understand or implement the LLGR capability. Stale routes are withdrawn towards such peers.
Default
no advertise-stale-to-all-neighbors
Parameters
- without-no-export
-
Allows LLGR stale routes to be advertised to all peers, such that they can exit the local AS.
Platforms
All
advertise-subnet
advertise-subnet
Syntax
[no] advertise-subnet
Context
[Tree] (config>service>vprn>ospf>area>if advertise-subnet)
Full Context
configure service vprn ospf area interface advertise-subnet
Description
This command enables advertising point-to-point interfaces as subnet routes (network number and mask). When disabled, point-to-point interfaces are advertised as host routes.
This command is not supported in the OSPF3 context.
The no form of this command disables advertising point-to-point interfaces as subnet routes meaning they are advertised as host routes.
Default
advertise-subnet — Advertises point-to-point interfaces as subnet routes.
Platforms
All
advertise-subnet
Syntax
[no] advertise-subnet
Context
[Tree] (config>router>ospf>area>interface advertise-subnet)
Full Context
configure router ospf area interface advertise-subnet
Description
This command enables advertising point-to-point interfaces as subnet routes (network number and mask). When disabled, point-to-point interfaces are advertised as host routes.
The no form of this command disables advertising point-to-point interfaces as subnet routes meaning they are advertised as host routes.
Default
advertise-subnet
Platforms
All
advertise-tunnel-link
advertise-tunnel-link
Syntax
[no] advertise-tunnel-link
Context
[Tree] (config>router>ospf advertise-tunnel-link)
[Tree] (config>router>isis advertise-tunnel-link)
Full Context
configure router ospf advertise-tunnel-link
configure router isis advertise-tunnel-link
Description
This command enables the forwarding adjacency feature. With this feature, IS-IS or OSPF advertises an RSVP LSP as a link so that other routers in the network can include it in their SPF computations. The RSVP LSP is advertised as an unnumbered point-to-point link and the link LSP or LSA has no Traffic Engineering opaque sub-TLVs, as per RFC 3906. An SR-TE LSP is not supported with forwarding adjacency.
The forwarding adjacency feature can be enabled independently from the IGP shortcut feature in CLI. If both igp-shortcut and advertise-tunnel-link options are enabled for a given IGP instance, then the advertise-tunnel-link takes precedence.
When the forwarding adjacency feature is enabled, each node advertises a p2p unnumbered link for each best metric tunnel to the router ID of any endpoint node. The node does not include the tunnels as IGP shortcuts in SPF computation directly. Instead, when the LSA or LSP that advertises the corresponding P2P unnumbered link is installed in the local routing database, the node performs an SPF using it like any other link LSA or LSP. The bidirectional check of the link requires that a link, regular or tunnel, exists in the reverse direction for the tunnel to be used in SPF.
The igp-shortcut option under the LSP name governs the use of the LSP with both the igp-shortcut and the advertise-tunnel-link options in IGP. In other words, the user can exclude a specific RSVP LSP from being used as a forwarding adjacency by entering the command config>router>mpls>lsp>no igp-shortcut.
Support is provided for resolving and forwarding IPv4 and IPv6 prefixes over IPv4 forwarding adjacency RSVP-TE LSP. Specifically, the forwarding adjacency feature supports family IPv4 in OSPFv2, family IPv6 in OSPFv3, families IPv4 and IPv6 in ISIS MT=0, and family IPv6 in ISIS MT=2.
In addition, both IPv4 and IPv6 SR-ISIS tunnels can be resolved and further tunneled over one or more RSVP-TE LSPs used as forwarding adjacencies. This is enabled by configuring both segment routing and forwarding adjacency features within an IS-IS instance in a multi-topology MT=0.
IS-IS forwarding adjacency using the advertise-tunnel-link command is not supported in combination with the IS-IS link bundling and the IS-IS metric link quality adjustment features.
The no form of this command disables forwarding adjacency and disables the advertisement of RSVP LSP into IGP.
Default
no advertise-tunnel-link
Platforms
All
advertised-stale-time
advertised-stale-time
Syntax
advertised-stale-time seconds
no advertised-stale-time
Context
[Tree] (config>service>vprn>bgp>graceful-restart>long-lived advertised-stale-time)
[Tree] (config>service>vprn>bgp>group>graceful-restart>long-lived advertised-stale-time)
[Tree] (config>service>vprn>bgp>group>neighbor>graceful-restart>long-lived advertised-stale-time)
[Tree] (config>service>vprn>bgp>graceful-restart>long-lived>family advertised-stale-time)
[Tree] (config>service>vprn>bgp>group>neighbor>graceful-restart>long-lived>family advertised-stale-time)
[Tree] (config>service>vprn>bgp>group>graceful-restart>long-lived>family advertised-stale-time)
Full Context
configure service vprn bgp graceful-restart long-lived advertised-stale-time
configure service vprn bgp group graceful-restart long-lived advertised-stale-time
configure service vprn bgp group neighbor graceful-restart long-lived advertised-stale-time
configure service vprn bgp graceful-restart long-lived family advertised-stale-time
configure service vprn bgp group neighbor graceful-restart long-lived family advertised-stale-time
configure service vprn bgp group graceful-restart long-lived family advertised-stale-time
Description
This command sets the value of the long-lived stale time that is advertised by the router in its LLGR capability. When configured in the long-lived configuration context, advertised-stale-time applies to all AFI/SAFI in the advertised LLGR capability except for any AFI/SAFI with a family-specific override. A family-specific override is configured with the advertised-stale-time command in a family context.
The no version of this command sets the advertised-stale-time value to 24 hours (86400 seconds).
Default
no advertised-stale-time
Parameters
- seconds
-
Specifies the advertised long-lived stale time in seconds.
Platforms
All
advertised-stale-time
Syntax
advertised-stale-time seconds
no advertised-stale-time
Context
[Tree] (config>router>bgp>group>graceful-restart>long-lived advertised-stale-time)
[Tree] (config>router>bgp>group>graceful-restart>long-lived>family advertised-stale-time)
[Tree] (config>router>bgp>group>neighbor>graceful-restart>long-lived advertised-stale-time)
[Tree] (config>router>bgp>graceful-restart>long-lived advertised-stale-time)
[Tree] (config>router>bgp>graceful-restart>long-lived>family advertised-stale-time)
[Tree] (config>router>bgp>group>neighbor>graceful-restart>long-lived>family advertised-stale-time)
Full Context
configure router bgp group graceful-restart long-lived advertised-stale-time
configure router bgp group graceful-restart long-lived family advertised-stale-time
configure router bgp group neighbor graceful-restart long-lived advertised-stale-time
configure router bgp graceful-restart long-lived advertised-stale-time
configure router bgp graceful-restart long-lived family advertised-stale-time
configure router bgp group neighbor graceful-restart long-lived family advertised-stale-time
Description
This command sets the value of the long-lived stale time that is advertised by the router in its LLGR capability. When configured in the long-lived configuration context, advertised-stale-time applies to all AFI/SAFI in the advertised LLGR capability except for any AFI/SAFI with a family-specific override. A family-specific override is configured with the advertised-stale-time command in a family context.
The no version of this command sets the advertised-stale-time value to 24 hours (86400 seconds).
Default
no advertised-stale-time
Parameters
- seconds
-
Specifies the advertised long-lived stale time in seconds.
Platforms
All
advertising-timeout
advertising-timeout
Syntax
advertising-timeout seconds
no advertising-timeout
Context
[Tree] (config>system>bluetooth advertising-timeout)
Full Context
configure system bluetooth advertising-timeout
Description
When the power is enabled, this command configures the pairing timeout interval for the Bluetooth device during which it advertises that it is ready to pair. If an external device does not complete the pairing within this time, then the pairing must be reinitiated.
The no form of this command disables the timeout.
Default
advertising-timeout 30
Parameters
- seconds
-
Specifies the pairing timeout interval.
Platforms
7750 SR-1, 7750 SR-s, 7950 XRS-20e
advertising-timeout
Syntax
advertising-timeout seconds
no advertising-timeout
Context
[Tree] (config>system>bluetooth advertising-timeout)
Full Context
configure system bluetooth advertising-timeout
Description
When the power is enabled, this timer controls the amount of time the Bluetooth device will advertise that is ready to pair. If an external device does not complete the pairing within this time, then the pairing must be re-initiated.
The no form of this command disables the timeout.
Default
advertising-timeout 30
Parameters
- seconds
-
Specifies the paring timeout interval.
Platforms
7750 SR-1, 7750 SR-s, 7950 XRS-20e
aes-initialization-vector
aes-initialization-vector
Syntax
aes-initialization-vector hex-string
no aes-initialization-vector
Context
[Tree] (config>app-assure>group>http-enrich>field aes-initialization-vector)
Full Context
configure application-assurance group http-enrich field aes-initialization-vector
Description
This command configures the initialization vector that is used for the AES CBC encryption.
The no form of this command removes the initialization vector.
Default
no aes-initialization-vector
Parameters
- hex-string
-
Specifies the AES initialization vector in 34 characters, that is, 0x followed by exactly 32 hexadecimal characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
agg-rate
agg-rate
Syntax
[no] agg-rate
Context
[Tree] (config>service>ies>if>sap>egress agg-rate)
[Tree] (config>service>ies>sub-if>grp-if>sap>egress agg-rate)
[Tree] (config>service>vprn>sub-if>grp-if>sap>egress agg-rate)
Full Context
configure service ies interface sap egress agg-rate
configure service ies subscriber-interface group-interface sap egress agg-rate
configure service vprn subscriber-interface group-interface sap egress agg-rate
Description
Commands in this context configure aggregation rate parameters. This command is used to control an HQoS aggregate rate limit. It is used in conjunction with the following parameter commands: rate, limit-unused-bandwidth, and queue-frame-based-accounting.
When specified under a Vport, the agg-rate, port-scheduler-policy and scheduler-policy commands are mutually exclusive. Changing between the use of a scheduler policy and the use of an agg-rate or port-scheduler-policy involves removing the existing command and applying the new command.
The no form of this command disables the aggregation rate.
Platforms
All
- configure service ies interface sap egress agg-rate
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn subscriber-interface group-interface sap egress agg-rate
- configure service ies subscriber-interface group-interface sap egress agg-rate
agg-rate
Syntax
[no] agg-rate
Context
[Tree] (config>port>ethernet>access>egr>qgrp agg-rate)
[Tree] (config>port>ethernet>access>egr>vport agg-rate)
[Tree] (config>port>ethernet>network>egr>qgrp agg-rate)
Full Context
configure port ethernet access egress queue-group agg-rate
configure port ethernet access egress vport agg-rate
configure port ethernet network egress queue-group agg-rate
Description
This command controls an H-QoS aggregate rate limit. It is used in conjunction with the following parameter commands: rate, limit-unused-bandwidth, and queue-frame-based-accounting.
When specified under a Vport, the agg-rate rate, port-scheduler-policy and scheduler-policy commands are mutually exclusive. Changing between the use of a scheduler policy and the use of an agg-rate/port-scheduler-policy involves removing the existing command and applying the new command.
Platforms
All
agg-rate
Syntax
[no] agg-rate
Context
[Tree] (config>service>ipipe>sap>egress agg-rate)
[Tree] (config>service>epipe>sap>egress agg-rate)
[Tree] (config>service>cpipe>sap>egress agg-rate)
Full Context
configure service ipipe sap egress agg-rate
configure service epipe sap egress agg-rate
configure service cpipe sap egress agg-rate
Description
This command is used to control an HQoS aggregate rate limit. It is used in conjunction with the following parameter commands: rate, limit-unused-bandwidth, and queue-frame-based-accounting.
Platforms
All
- configure service ipipe sap egress agg-rate
- configure service epipe sap egress agg-rate
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service cpipe sap egress agg-rate
agg-rate
Syntax
[no] agg-rate
Context
[Tree] (config>service>vpls>sap>egress>encap-defined-qos>encap-group agg-rate)
[Tree] (config>service>template>vpls-sap-template>egress agg-rate)
[Tree] (config>service>vpls>sap>egress agg-rate)
Full Context
configure service vpls sap egress encap-defined-qos encap-group agg-rate
configure service template vpls-sap-template egress agg-rate
configure service vpls sap egress agg-rate
Description
This command is used to control an HQoS aggregate rate limit. It is used in conjunction with the following parameter commands: rate, limit-unused-bandwidth, and queue-frame-based-accounting.
Platforms
All
agg-rate
Syntax
[no] agg-rate
Context
[Tree] (config>service>vprn>if>sap>egress agg-rate)
Full Context
configure service vprn interface sap egress agg-rate
Description
This command is used to control an HQoS aggregate rate limit. It is used in conjunction with the following parameter commands: rate, limit-unused-bandwidth, and queue-frame-based-accounting.
Platforms
All
agg-rate
Syntax
[no] agg-rate
Context
[Tree] (config>service>cust>multi-service-site>egress agg-rate)
Full Context
configure service customer multi-service-site egress agg-rate
Description
Commands in this context control an HQoS aggregate rate limit. It is used in conjunction with the following parameter commands: rate, limit-unused-bandwidth, and queue-frame-based-accounting.
The no form of the command disables the aggregate rate limit parameters.
Platforms
All
agg-rate-limit
agg-rate-limit
Syntax
agg-rate-limit agg-rate [min-resv-bw min-rate] [queue-frame-based-accounting]
no agg-rate-limit
Context
[Tree] (config>subscr-mgmt>sub-prof>egress agg-rate-limit)
Full Context
configure subscriber-mgmt sub-profile egress agg-rate-limit
Description
This command defines a subscriber aggregate limit when the subscriber profile is directly associated with an egress port based scheduler instead of a scheduler policy. The optional queue-frame-based-accounting keyword allows the subscriber queues to operate in the frame based accounting mode.
Once egress frame based accounting is enabled on the subscriber profile, all queues associated with the subscriber (created through the sla-profile associated with each subscriber host) will have their rate and CIR values interpreted as frame based values. When shaping, the queues will include the 12-byte Inter-Frame Gap (IFG) and 8-byte preamble for each packet scheduled out the queue. The profiling CIR threshold will also include the 20-byte frame encapsulation overhead. Statistics associated with the queue do not include the frame encapsulation overhead. Packet byte offset settings are not included in the applied rate when queue frame based accounting is configured, however the offsets are applied to the statistics.
The queue-frame-based-accounting keyword does not change the behavior of the egress-agg-rate-limit rate value. Since the egress-agg-rate-limit is always associated with egress port based scheduling and egress port based scheduling is dependent on frame based operation, the egress-agg-rate-limit rate is always interpreted as a frame based value.
Enabling queue-frame-based-accounting will not cause statistics for queues associated with the subscriber to be cleared.
The no form of this command removes both an egress aggregate rate limit and egress frame based accounting for all subscribers associated with the sub-profile. If a subscriber’s accounting mode is changed, the subscriber’s queue statistics are cleared.
Parameters
- agg-rate
-
Specifies the egress aggregate rate.
- min-rate
-
Specifies the minimum rate of the minimum reserved bandwidth for unicast data traffic. Since minimum rate can oversubscribe subscriber bandwidth to guarantee a minimum bandwidth for unicast traffic, care must be taken in QoS provisioning to prioritize packets accordingly (downstream network elements such as the access node or aggregation nodes) when congestion occurs.
- queue-frame-based-accounting
-
Specifies whether to use frame-based accounting when evaluating the aggregation rate limit for the egress queues for this SAP.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
agg-rate-limit
Syntax
agg-rate-limit agg-rate
no agg-rate-limit
Context
[Tree] (config>port>ethernet>access>egress>vport agg-rate-limit)
Full Context
configure port ethernet access egress vport agg-rate-limit
Description
This command configures an aggregate rate for the Vport. This command is mutually exclusive with the port-scheduler-policy command.
The no form of this command reverts to the default.
Parameters
- agg-rate
-
Specifies the rate limit for the Vport.
Platforms
All
agg-rate-limit
Syntax
agg-rate-limit kilobits-per-second
no agg-rate-limit
Context
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>egress agg-rate-limit)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>egress agg-rate-limit)
Full Context
configure service vprn subscriber-interface group-interface wlan-gw egress agg-rate-limit
configure service ies subscriber-interface group-interface wlan-gw egress agg-rate-limit
Description
This command configures an HQoS aggregate rate limit. It is used in conjunction with the following parameter commands: rate, limit-unused-bandwidth, and queue-frame-based-accounting.
The no form of this command removes the rate from the configuration.
Parameters
- kilobits-per-second
-
Specifies the aggregate rate limit.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
agg-rate-limit
Syntax
agg-rate-limit agg-rate [min-resv-bw min-rate] [queue-frame-based-accounting] [adaptation-rule adaptation-rule] [burst-limit size] [bytes| kilobytes]
no agg-rate-limit
Context
[Tree] (config>subscr-mgmt>sub-prof>egr agg-rate-limit)
Full Context
configure subscriber-mgmt sub-profile egress agg-rate-limit
Description
This command configures a hardware-assisted HQoS aggregate rate limit.
The no form of this command removes the rate from the configuration.
Parameters
- agg-rate
-
Specifies the aggregate rate limit in kb/s.
- min-rate
-
Specifies the minimum reserved bandwidth rate.
- queue-frame-based-accounting
-
Enables frame-based accounting at the queue level.
- adaptation-rule
-
Specifies the adaptation rule for the PIR value of the subscriber aggregate rate. This rule determines which configured value is adapted to oper-agg-rate based on hardware capabilities.
- size
-
Specifies the burst limit size.
- bytes | kilobytes
-
Specifies whether the value is in bytes or kilobytes.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
agg-shaper-weight
agg-shaper-weight
Syntax
agg-shaper-weight weight
no agg-shaper-weight
Context
[Tree] (config>qos>qgrps>egr>qgrp>queue agg-shaper-weight)
[Tree] (config>qos>sap-egress>queue agg-shaper-weight)
Full Context
configure qos queue-group-templates egress queue-group queue agg-shaper-weight
configure qos sap-egress queue agg-shaper-weight
Description
This command specifies the aggregate shaper weight of the SAP-egress or queue-group queue.
The no form of this command returns the aggregate shaper weight to the default value.
Default
agg-shaper-weight 1
Parameters
- weight
-
Specifies the aggregate shaper weight.
Platforms
7750 SR-1, 7750 SR-s
aggregate
aggregate
Syntax
[no] aggregate
Context
[Tree] (config>port>ethernet>egress>hs-sec-shaper aggregate)
Full Context
configure port ethernet egress hs-secondary-shaper aggregate
Description
Commands in this context configure aggregate parameters.
The no form of this command removes all of the aggregate parameter values from the configuration of this HS secondary shaper.
Platforms
7750 SR-7/12/12e
aggregate
Syntax
aggregate ip-prefix/ip-prefix-length [summary-only] [as-set] [aggregator as-number:ip-address] [discard-component-communities] [black-hole [generate-icmp]] [community comm-id [comm-id] [ local-preference local-pref]] [description description] [tunnel-group tunnel-group-id]
aggregate ip-prefix/ip-prefix-length [summary-only] [as-set] [aggregator as-number:ip-address] [discard-component-communities] [community comm-id [comm-id]] [ indirect ip-address] [local-preference local-pref]] [description description] [tunnel-group tunnel-group-id]
no aggregate ip-prefix/ip-prefix-length
Context
[Tree] (config>service>vprn aggregate)
Full Context
configure service vprn aggregate
Description
This command creates an aggregate route. Use this command to automatically install an aggregate route in the routing table when there are one or more component routes. A component route is any route used for forwarding that is a more specific match of the aggregate.
The use of aggregate routes can reduce the number of routes that need to be advertised to neighbor routers, leading to smaller routing table sizes.
Overlapping aggregate routes may be configured; in this case a route becomes a component of only the one aggregate route with the longest prefix match. For example if one aggregate is configured as 10.0.0.0/16 and another as 10.0.0.0/24, then route 10.0.128/17 would be aggregated into 10.0.0.0/16, and route 10.0.0.128/25 would be aggregated into 10.0.0.0/24. If multiple entries are made with the same prefix and the same mask the previous entry is overwritten.
A list of up to 12 BGP communities (any mix of standard, extended, and large communities) may be associated with an aggregate route. These communities can be matched in route policies and are automatically added to BGP routes that are created from the aggregate route.
By default, aggregate routes are not installed in the forwarding table, however there are configuration options that allow an aggregate route to be installed with a black-hole next hop or with an indirect IP address as next hop.
Aggregate routes can be advertised via MP-BGP to other PEs within the network. Aggregate routes advertised using MP-BGP do not include aggregated BGP path attributes from the component routes which were used to activate the aggregate route. The aggregate route will be advertised with the minimal set of path attributes as if the aggregate was originated by the advertising routes. Export route policies should be used to control and modify the advertisement and path attributes of the aggregate routes.
The no form of this command removes the aggregate.
Default
no aggregate
Parameters
- ip-prefix
-
The destination address of the aggregate route in dotted decimal notation.
- summary-only
-
This optional parameter suppresses advertisement of more specific component routes for the aggregate.
To remove the summary-only option, enter the same aggregate command without the summary-only parameter.
- as-set
-
This optional parameter is only applicable to BGP and creates an aggregate where the path advertised for this route will be an AS_SET consisting of all elements contained in all paths that are being summarized. Use this feature carefully as it can increase the amount of route churn due to best path changes.
- aggregator as-number:ip-address
-
This optional parameter specifies the BGP aggregator path attribute to the aggregate route. When configuring the aggregator, a two-octet AS number used to form the aggregate route must be entered, followed by the IP address of the BGP system that created the aggregate route.
- discard-component-communities
-
This optional keyword causes the aggregate to be advertised with only the configured BGP community set, none of the communities from the component routes activating the aggregate are included. (Component attributes are never included in aggregate routes advertised to other PE routers via MP-BGP).
- black-hole
-
This optional parameter installs the aggregate route, when activated, in the FIB with a black-hole next-hop, where packets matching this route are discarded.
- generate-icmp
-
This optional parameter keyword generates an ICMP.
- community
-
This configuration option associates a BGP community with the aggregate route. The community can be matched in route policies and is automatically added to BGP routes exported from the aggregate route.
- comm-id
-
Specifies a BGP community value, up to 72 characters.
- description
-
Specifies a text description stored in the configuration file for a configuration context.
- local-preference
-
Specifies a BGP local-preference value with the aggregate route. The local-preference overrides the default local preference value of a BGP route originated by exporting the aggregate route.
- indirect ip-address
-
This configuration option specifies that the aggregate route should be installed in the FIB with a next-hop taken from the route used to forward packets to ip-address.
- tunnel-group-id
-
Specifies that the MC-IPsec state of the specific tunnel-group is added to the aggregate route.
Platforms
All
aggregate
Syntax
aggregate ip-prefix/ip-prefix-length [summary-only] [as-set] [aggregator as-number:ip-address] [discard-component-communities] [black-hole [generate-icmp]] [community comm-id [comm-id]] [ description description] [local-preference local-preference] [policy policy-name]
aggregate ip-prefix/ip-prefix-length [summary-only] [as-set] [aggregator as-number:ip-address] [discard-component-communities] [community comm-id [comm-id]] [ indirect ip-address] [description description] [local-preference local-preference] [policy policy-name]
no aggregate ip-prefix/ip-prefix-length
Context
[Tree] (config>router aggregate)
Full Context
configure router aggregate
Description
This command creates an aggregate route.
Use this command to automatically install an aggregate route in the routing table when there are one or more component routes. A component route is any route used for forwarding that is a more-specific match of the aggregate.
The use of aggregate routes can reduce the number of routes that need to be advertised to neighbor routers, leading to smaller routing table sizes.
Overlapping aggregate routes may be configured; in this case a route becomes a component of only the one aggregate route with the longest prefix match. For example if one aggregate is configured as 10.0.0.0/16 and another as 10.0.0.0/24, then route 10.0.128/17 would be aggregated into 10.0.0.0/16, and route 10.0.0.128/25 would be aggregated into 10.0.0.0/24. If multiple entries are made with the same prefix and the same mask the previous entry is overwritten.
A standard 4-byte BGP community may be associated with an aggregate route in order to facilitate route policy matching.
By default aggregate routes are not installed in the forwarding table, however there are configuration options that allow an aggregate route to be installed with a black-hole next hop or with an indirect IP address as next hop.
The no form of this command removes the aggregate.
Default
no aggregate
Parameters
- ip-prefix
-
Specifies the destination address of the aggregate route in dotted decimal notation.
- ip-prefix-length
-
Specifies the mask associated with the network address expressed as a mask length.
- summary-only
-
Suppresses advertisement of more specific component routes for the aggregate.
To remove the summary-only option, enter the same aggregate command without the summary-only parameter.
- as-set
-
This optional parameter is only applicable to BGP and creates an aggregate where the path advertised for this route will be an AS_SET consisting of all elements contained in all paths that are being summarized. Use this feature carefully as it can increase the amount of route churn due to best path changes.
- as-number:ip-address
-
Specifies the BGP aggregator path attribute to the aggregate route. When configuring the aggregator, a two-octet AS number used to form the aggregate route must be entered, followed by the IP address of the BGP system that created the aggregate route.
- discard-component-communities
-
Causes the aggregate to be advertised with only the configured BGP community set, none of the communities from the component routes activating the aggregate are included.
- black-hole
-
Installs the aggregate route, when activated, in the FIB with a black-hole next-hop, where packets matching this route are discarded.
- generate-icmp
-
Mandatory keyword to generate an ICMP.
- community
-
Associates a BGP community with the aggregate route. The community can be matched in route policies and is automatically added to BGP routes exported from the aggregate route.
- comm-id
-
Specifies a BGP community value, up to 72 characters. A maximum of twelve community IDs can be specified in a single statement.
- indirect ip-address
-
Specifies that the aggregate route should be installed in the FIB with a next-hop taken from the route used to forward packets to ip-address.
- description
-
Specifies a text description stored in the configuration file for a configuration context, up to 80 characters.
- local-preference
-
Specifies a BGP local-preference value with the aggregate route. The local-preference overrides the default local preference value of a BGP route originated by exporting the aggregate route.
- policy-name
-
Specifies the route policy, up to 64 characters.
Platforms
All
aggregate-contributor
aggregate-contributor
Syntax
[no] aggregate-contributor
Context
[Tree] (config>router>policy-options>policy-statement>entry>from>aggregate-contributor aggregate-contributor)
Full Context
configure router policy-options policy-statement entry from aggregate-contributor aggregate-contributor
Description
This command matches all routes (BGP and non-BGP) that contributed to an active aggregate route. If the prefix tree above a particular route includes no active aggregate routes, or the most specific active aggregate route in the prefix tree above this route has a policy that rejects the route, then it is not considered as an aggregate-contributor.
This match condition is only supported when used in a BGP export policy. If it is used in an entry of a BGP import policy, VRF export policy or VRF import policy, no routes are matched by that entry.
The no form of this command disables matching of routes (BGP and non-BGP) that contributed to an active aggregate route.
Platforms
All
aggregate-prefix-match
aggregate-prefix-match
Syntax
[no] aggregate-prefix-match
Context
[Tree] (config>router>ldp aggregate-prefix-match)
Full Context
configure router ldp aggregate-prefix-match
Description
The command enables the use by LDP of the aggregate prefix match procedures.
When this option is enabled, LDP performs the following procedures for all prefixes. When an LSR receives a FEC-label binding from an LDP neighbor for a given specific FEC1 element, it will install the binding in the LDP FIB if:
-
It is able to perform a successful longest IP match of the FEC prefix with an entry in the routing table, and
-
The advertising LDP neighbor is the next-hop to reach the FEC prefix.
When such a FEC-label binding has been installed in the LDP FIB, then LDP programs an NHLFE entry in the egress data path to forward packets to FEC1. It also advertises a new FEC-label binding for FEC1 to all its LDP neighbors.
When a new prefix appears in the routing table, LDP inspects the LDP FIB to determine if this prefix is a better match (a more specific match) for any of the installed FEC elements. For any FEC for which this is true, LDP may have to update the NHLFE entry for this FEC.
When a prefix is removed from the routing table, LDP inspects the LDP FIB for all FEC elements which matched this prefix to determine if another match exists in the routing table. If so, it updates the NHLFE entry accordingly. If not, it sends a label withdraw message to its LDP neighbors to remove the binding.
When the next hop for a routing prefix changes, LDP updates the LDP FIB entry for the FEC elements which matched this prefix. It also updates the NHLFE entry for these FEC elements accordingly.
The no form of this command disables the use by LDP of the aggregate prefix procedures and deletes the configuration. LDP resumes performing exact prefix match for FEC elements.
Default
no aggregate-prefix-match
Platforms
All
aggregate-qos-stats
aggregate-qos-stats
Syntax
aggregate-qos-stats
Context
[Tree] (config>subscr-mgmt>sla-prof aggregate-qos-stats)
Full Context
configure subscriber-mgmt sla-profile aggregate-qos-stats
Description
Commands in this context configure how aggregate QoS statistics are calculated for the SLA profile.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
aggregate-sample-window
aggregate-sample-window
Syntax
aggregate-sample-window
Context
[Tree] (config>test-oam>link-meas>template aggregate-sample-window)
Full Context
configure test-oam link-measurement measurement-template aggregate-sample-window
Description
Commands in this context configure the aggregate sample window parameters to be used when the measurement template is assigned to an IP interface. The aggregate sample window is the collection of sample windows.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
aggregate-shapers
aggregate-shapers
Syntax
aggregate-shapers
Context
[Tree] (config>qos>fp-resource-policy aggregate-shapers)
Full Context
configure qos fp-resource-policy aggregate-shapers
Description
This command enters the aggregate-shapers context.
Platforms
7750 SR-1, 7750 SR-s
aggregate-stats
aggregate-stats
Syntax
aggregate-stats export-using export-method [export-method...(up to 2 max)]
aggregate-stats no-export
Context
[Tree] (config>app-assure>group>statistics>aa-sub aggregate-stats)
Full Context
configure application-assurance group statistics aa-sub aggregate-stats
Description
This command configures aa-sub accounting statistics for export of aggregate statistics of a given subscriber.
Default
aggregate-stats no-export
Parameters
- export-method
-
Specifies the method of statistics export to be used.
- no-export
-
Disables the export.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
aggregate-used-paths
aggregate-used-paths
Syntax
aggregate-used-paths family [family]
no aggregate-used-paths
Context
[Tree] (config>service>vprn>bgp>group>neighbor>link-bandwidth aggregate-used-paths)
[Tree] (config>service>vprn>bgp>group>link-bandwidth aggregate-used-paths)
Full Context
configure service vprn bgp group neighbor link-bandwidth aggregate-used-paths
configure service vprn bgp group link-bandwidth aggregate-used-paths
Description
This command configures BGP to aggregate the bandwidth values from the link-bandwidth extended communities of the used multipaths towards an IP prefix when it is re-advertising a route with next-hop-self towards peers within the scope of the command, as long as the route belongs to one of the listed address families.
Aggregation is not supported unless all of the used multipaths (up to the configured ECMP limit) correspond to received BGP routes with a link-bandwidth extended community. If add-path is also enabled toward the peer, then all of the add-paths advertised to the peer encode the aggregated bandwidth in a link-bandwidth extended community.
Up to three families may be configured.
The no form of this command disables aggregation in a next-hop-self scenario and the link-bandwidth extended community in the advertised route is a copy of the link-bandwidth extended community in the received route (which may have been added by import policy or by the effect of the add-to-received-ebgp command).
Default
no aggregate-used-paths
Parameters
- family
-
Specifies the address families for which receiving the link-bandwidth extended community from EBGP peers should be supported.
Platforms
All
aggregate-used-paths
Syntax
aggregate-used-paths family [family]
no aggregate-used-paths
Context
[Tree] (config>router>bgp>group>neighbor>link-bandwidth aggregate-used-paths)
[Tree] (config>router>bgp>group>link-bandwidth aggregate-used-paths)
Full Context
configure router bgp group neighbor link-bandwidth aggregate-used-paths
configure router bgp group link-bandwidth aggregate-used-paths
Description
This command configures BGP to aggregate the bandwidth values from the link-bandwidth extended communities of the used multipaths towards an IP prefix when it is re-advertising a route with next-hop-self towards peers within the scope of the command, as long as the route belongs to one of the listed address families.
Aggregation is not supported unless all of the used multipaths (up to the configured ECMP limit) correspond to received BGP routes with a link-bandwidth extended community. If add-path is also enabled toward the peer, then all of the add-paths advertised to the peer encode the aggregated bandwidth in a link-bandwidth extended community.
Up to six families may be configured.
The no form of this command disables aggregation in a next-hop-self scenario and the link-bandwidth extended community in the advertised route is a copy of the link-bandwidth extended community in the received route (which may have been added by import policy or by the effect of the add-to-received-ebgp command).
Default
no aggregate-used-paths
Parameters
- family
-
Specifies the address families for which receiving the link-bandwidth extended community from EBGP peers should be supported.
Platforms
All
aggregation
aggregation
Syntax
[no] aggregation
Context
[Tree] (config>cflowd>collector aggregation)
Full Context
configure cflowd collector aggregation
Description
This command configures the type of aggregation scheme to be exported.
Specifies the type of data to be aggregated and to the collector.
To configure aggregation, you must decide which type of aggregation scheme to configure: autonomous system, destination prefix, protocol port, raw, source destination, or source prefix.
This can only be configured if the collector version is configured as V8.
The no form of this command removes all aggregation types from the collector configuration.
Default
no aggregation
Platforms
All
aggregator-id-zero
aggregator-id-zero
Syntax
[no] aggregator-id-zero
Context
[Tree] (config>subscr-mgmt>bgp-prng-plcy aggregator-id-zero)
Full Context
configure subscriber-mgmt bgp-peering-policy aggregator-id-zero
Description
This command is used to set the router ID in the BGP aggregator path attribute to zero when BGP aggregates routes. This prevents different routers within an AS from creating aggregate routes that contain different AS paths.
When BGP is aggregating routes, it adds the aggregator path attribute to the BGP update messages. By default, BGP adds the AS number and router ID to the aggregator path attribute.
When this command is enabled, BGP adds the router ID to the aggregator path attribute. The no form of this command used at the global level reverts to default where BGP adds the AS number and router ID to the aggregator path attribute.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
aggregator-id-zero
Syntax
[no] aggregator-id-zero
Context
[Tree] (config>service>vprn>bgp>group aggregator-id-zero)
[Tree] (config>service>vprn>bgp>group>neighbor aggregator-id-zero)
[Tree] (config>service>vprn>bgp aggregator-id-zero)
Full Context
configure service vprn bgp group aggregator-id-zero
configure service vprn bgp group neighbor aggregator-id-zero
configure service vprn bgp aggregator-id-zero
Description
This command is used to set the router ID in the BGP aggregator path attribute to zero when BGP aggregates routes. This prevents different routers within an AS from creating aggregate routes that contain different AS paths.
When BGP is aggregating routes, it adds the aggregator path attribute to the BGP update messages. By default, BGP adds the AS number and router ID to the aggregator path attribute.
When this command is enabled, BGP adds the router ID to the aggregator path attribute. This command is used at the group level to revert to the value defined under the global level, while this command is used at the neighbor level to revert to the value defined under the group level.
The no form of this command used at the global level reverts to default where BGP adds the AS number and router ID to the aggregator path attribute.
The no form of this command used at the group level reverts to the value defined at the group level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
Default
no aggregator-id-zero — BGP adds the AS number and router ID to the aggregator path attribute.
Platforms
All
aggregator-id-zero
Syntax
[no] aggregator-id-zero
Context
[Tree] (config>router>bgp>group aggregator-id-zero)
[Tree] (config>router>bgp>group>neighbor aggregator-id-zero)
[Tree] (config>router>bgp aggregator-id-zero)
Full Context
configure router bgp group aggregator-id-zero
configure router bgp group neighbor aggregator-id-zero
configure router bgp aggregator-id-zero
Description
This command sets the router ID in the BGP aggregator path attribute to zero when BGP aggregates routes. This prevents different routers within an AS from creating aggregate routes for the same prefix with different path attributes.
When BGP is aggregating routes, it adds the aggregator path attribute to the BGP update messages. By default, BGP adds the AS number and router ID to the aggregator path attribute.
When this command is enabled, BGP adds the router ID to the aggregator path attribute. This command is used at the group level to revert to the value defined under the global level, while this command is used at the neighbor level to revert to the value defined under the group level.
The no form of this command used at the global level reverts to default where BGP adds the AS number and router ID to the aggregator path attribute.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
Default
no aggregator-id-zero
Platforms
All
agi
agi
Syntax
agi agi
no agi
Context
[Tree] (config>service>cpipe>spoke-sdp>pw-path-id agi)
[Tree] (config>service>epipe>spoke-sdp>pw-path-id agi)
[Tree] (config>service>vpls>spoke-sdp>pw-path-id agi)
Full Context
configure service cpipe spoke-sdp pw-path-id agi
configure service epipe spoke-sdp pw-path-id agi
configure service vpls spoke-sdp pw-path-id agi
Description
This command configures the attachment group identifier for an MPLS-TP PW.
Parameters
- agi
-
Specifies the attachment group identifier.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
agi
Syntax
agi agi
no agi
Context
[Tree] (config>service>ies>red-if>spoke-sdp>pw-path-id agi)
[Tree] (config>service>ies>if>spoke-sdp>pw-path-id agi)
Full Context
configure service ies redundant-interface spoke-sdp pw-path-id agi
configure service ies interface spoke-sdp pw-path-id agi
Description
This command configures the attachment group identifier for an MPLS-TP PW.
Parameters
- agi
-
Specifies the attachment group identifier.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s
- configure service ies redundant-interface spoke-sdp pw-path-id agi
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service ies interface spoke-sdp pw-path-id agi
agi
Syntax
agi attachment-group-identifier
no agi
Context
[Tree] (config>service>vprn>if>spoke-sdp>pw-path-id agi)
[Tree] (config>service>vprn>red-if>spoke-sdp>pw-path-id agi)
Full Context
configure service vprn interface spoke-sdp pw-path-id agi
configure service vprn redundant-interface spoke-sdp pw-path-id agi
Description
This command configures the attachment group identifier for an MPLS-TP PW.
Parameters
- attachment-group-identifier
-
Specifies the attachment group identifier.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service vprn interface spoke-sdp pw-path-id agi
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s
- configure service vprn redundant-interface spoke-sdp pw-path-id agi
agi
Syntax
agi route-identifier
no agi
Context
[Tree] (config>mirror>mirror-dest>spoke-sdp>pw-path-id agi)
[Tree] (config>mirror>mirror-dest>remote-src>spoke-sdp>pw-path-id agi)
Full Context
configure mirror mirror-dest spoke-sdp pw-path-id agi
configure mirror mirror-dest remote-source spoke-sdp pw-path-id agi
Description
This command configures the attachment group identifier for an MPLS-TP PW.
Parameters
- route-identifier
-
Specifies the attachment group identifier.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
aging
aging
Syntax
aging days
no aging
Context
[Tree] (config>system>security>password aging)
Full Context
configure system security password aging
Description
This command configures the number of days a user password is valid before the user must change their password. This parameter can be used to force the user to change the password at the configured interval. Note the aging starts after the last password configuration or update. This timer is persistence (per user) over a node reboot or activity switch between CPMs. When the user changes the password, the timer is reset to the maximum age. When the password for a user ages out, the user is prompted at login to change the password. Console/SSH/Telnet supports password change prompt.
The no form of this command reverts to the default value.
Parameters
- days
-
Specifies the maximum number of days the password is valid.
Platforms
All
ah-ext-hdr
ah-ext-hdr
Syntax
ah-ext-hdr {true | false}
no ah-ext-hdr
Context
[Tree] (config>filter>ipv6-filter>entry>match ah-ext-hdr)
Full Context
configure filter ipv6-filter entry match ah-ext-hdr
Description
This command enables match on existence of AH Extension Header in the IPv6 filter policy.
The no form of this command ignores AH Extension Header presence/absence in a packet when evaluating match criteria of a given filter policy entry.
Default
no ah-ext-hdr
Parameters
- true
-
Matches a packet with an AH Extension Header.
- false
-
Matches a packet without an AH Extension Header.
Platforms
All
aigp
aigp
Syntax
[no] aigp
Context
[Tree] (config>router>bgp>group aigp)
[Tree] (config>router>bgp>group>neighbor aigp)
Full Context
configure router bgp group aigp
configure router bgp group neighbor aigp
Description
This command enables or disables Accumulated IGP (AIGP) path attribute support with one or more BGP peers. BGP path selection among routes with an associated AIGP metric is based on the end-to-end IGP metrics of the different BGP paths, even when these BGP paths span more than one AS and IGP instance.
The effect of disabling AIGP (using the no form of this command or implicit) is to remove the AIGP attribute from advertised routes, if present, and to ignore the AIGP attribute in received routes.
Default
no aigp
Platforms
All
aigp-metric
aigp-metric
Syntax
aigp-metric metric
aigp-metric add
aigp-metric igp
no aigp-metric
Context
[Tree] (config>router>policy-options>policy-statement>default-action aigp-metric)
[Tree] (config>router>policy-options>policy-statement>entry>action aigp-metric)
Full Context
configure router policy-options policy-statement default-action aigp-metric
configure router policy-options policy-statement entry action aigp-metric
Description
This command assigns a BGP AIGP metric to routes matching the entry. The effect of this command on a route matched and accepted by a route policy entry depends on how the policy is applied (BGP import policy vs. BGP export policy), the type of route and the specific form of this command.
In a BGP import policy this command is used to:
-
Associate an AIGP metric with an IBGP route received with an empty AS path and no AIGP attribute.
-
Associate an AIGP metric with an EBGP route received without an AIGP attribute that has an AS path containing only AS numbers belonging to the local AIGP administrative domain.
-
Modify the received AIGP metric value prior to BGP path selection.
In a BGP export policy this command is used to:
-
Add the AIGP attribute and set the AIGP metric value in a BGP route originated by exporting a direct, static or IGP route from the routing table.
-
Remove the AIGP attribute from a route advertisement to a particular peer.
-
Modify the AIGP metric value in a route advertisement to a particular peer.
Default
no aigp-metric
Parameters
- metric
-
Administratively defined metric.
- add
-
Adds the AIGP attribute.
- igp
-
Sets the AIGP metric to the IGP metric.
Platforms
All
ais-enable
ais-enable
Syntax
[no] ais-enable
Context
[Tree] (config>port>ethernet>eth-cfm>mep ais-enable)
[Tree] (config>lag>eth-cfm>mep ais-enable)
Full Context
configure port ethernet eth-cfm mep ais-enable
configure lag eth-cfm mep ais-enable
Description
This command enables the reception of AIS messages.
The no form of this command reverts to the default values.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
ais-enable
Syntax
[no] ais-enable
Context
[Tree] (config>service>epipe>sap>eth-cfm ais-enable)
[Tree] (config>service>epipe>spoke-sdp>eth-cfm>mep ais-enable)
[Tree] (config>service>epipe>sap>eth-cfm>mep ais-enable)
Full Context
configure service epipe sap eth-cfm ais-enable
configure service epipe spoke-sdp eth-cfm mep ais-enable
configure service epipe sap eth-cfm mep ais-enable
Description
This command enables the generation and the reception of AIS messages.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
ais-enable
Syntax
[no] ais-enable
Context
[Tree] (config>service>vpls>spoke-sdp>eth-cfm>mep ais-enable)
[Tree] (config>service>vpls>sap>eth-cfm>mep ais-enable)
[Tree] (config>service>vpls>mesh-sdp>eth-cfm>mep ais-enable)
Full Context
configure service vpls spoke-sdp eth-cfm mep ais-enable
configure service vpls sap eth-cfm mep ais-enable
configure service vpls mesh-sdp eth-cfm mep ais-enable
Description
This command enables the generation and the reception of AIS messages.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
ais-enable
Syntax
[no] ais-enable
Context
[Tree] (config>service>ies>if>spoke-sdp>eth-cfm ais-enable)
Full Context
configure service ies interface spoke-sdp eth-cfm ais-enable
Description
This command configures the reception of Alarm Indication Signal (AIS) message.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
ais-enable
Syntax
[no] ais-enable
Context
[Tree] (cfg>svc>vprn>if>sap>eth-cfm>mep ais-enable)
[Tree] (config>service>vprn>if>spoke-sdp>eth-cfm ais-enable)
[Tree] (config>service>vprn>sub-if>grp-if>sap>eth-cfm ais-enable)
Full Context
configure service vprn interface sap eth-cfm mep ais-enable
configure service vprn interface spoke-sdp eth-cfm ais-enable
configure service vprn subscriber-interface group-interface sap eth-cfm ais-enable
Description
This command configures the reception of Alarm Indication Signal (AIS) message.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service vprn interface sap eth-cfm mep ais-enable
- configure service vprn interface spoke-sdp eth-cfm ais-enable
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s
- configure service vprn subscriber-interface group-interface sap eth-cfm ais-enable
ais-enable
Syntax
[no] ais-enable
Context
[Tree] (config>router>mpls>if>mpls-tp-mep ais-enable)
Full Context
configure router mpls interface mpls-tp-mep ais-enable
Description
This command enables MPLS-TP AIS insertion for the forward and reverse directions of all MPLS-TP transit paths using the MPLS interface. This causes the generation of AIS packets in the forward or reverse directions of a path if a fault is detected on the applicable underlying interface for the ingress of the path direction.
The no form of this command disables AIS insertion.
Default
no ais-enable
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
alarm
alarm
Syntax
alarm rmon-alarm-id variable-oid oid-string interval seconds [sample-type] [startup-alarm alarm-type] [rising-event rmon-event-id rising-threshold threshold] [falling-event rmon-event-id falling-threshold threshold] [owner owner-string]
no alarm rmon-alarm-id
Context
[Tree] (config>system>thresholds>rmon alarm)
Full Context
configure system thresholds rmon alarm
Description
The alarm command configures an entry in the RMON-MIB alarmTable. The alarm command controls the monitoring and triggering of threshold crossing events. In order for notification or logging of a threshold crossing event to occur there must be at least one associated rmon>event configured.
The agent periodically takes statistical sample values from the MIB variable specified for monitoring and compares them to thresholds that have been configured with the alarm command. The alarm command configures the MIB variable to be monitored, the polling period (interval), sampling type (absolute or delta value), and rising and falling threshold parameters. If a sample has crossed a threshold value, the associated event is generated.
Use the no form of this command to remove an rmon-alarm-id from the configuration.
Parameters
- rmon-alarm-id
-
Specifies a numerical identifier for the alarm being configured. The number of alarms that can be created is limited to 1200. Alarm ID values above 65400 are used for dynamic system threshold commands and should be avoided.
- oid-string
-
Specifies the SNMP object identifier of the particular variable to be sampled. Only SNMP variables that resolve to an ASN.1 primitive type of integer (integer, Integer32, Counter32, Counter64, Gauge, or TimeTicks) may be sampled. The oid-string, up to 255 characters, may be expressed using either the dotted string notation or as object name plus dotted instance identifier. For example, "1.3.6.1.2.1.2.2.1.10.184582144" or "ifInOctets.184582144".
- seconds
-
Specifies the polling period over which the data is sampled and compared with the rising and falling thresholds. When setting this interval value, care should be taken in the case of ’delta’ type sampling - the interval should be set short enough that the sampled variable is very unlikely to increase or decrease by more than 2147483647 - 1 during a single sampling interval. Care should also be taken not to set the interval value too low to avoid creating unnecessary processing overhead.
- sample-type
-
Specifies the method of sampling the selected variable and calculating the value to be compared against the thresholds.
- alarm-type
-
Specifies the alarm that may be sent when this alarm is first created.
If the first sample is greater than or equal to the rising threshold value and startup-alarm is equal to rising or either, then a single rising threshold crossing event is generated.
If the first sample is less than or equal to the falling threshold value and startup-alarm is equal to falling or either, a single falling threshold crossing event is generated.
- rising-event rmon-event-id
-
Specifies the identifier of the rmon>event that specifies the action to be taken when a rising threshold crossing event occurs.
If there is no corresponding event configured for the specified rmon-event-id, then no association exists and no action is taken.
If the rising-event rmon-event-id has a value of zero (0), no associated event exists.
If a rising-event rmon-event-id is configured, the CLI requires a rising-threshold to also be configured.
- rising-threshold threshold
-
Specifies a threshold for the sampled statistic. When the current sampled value is greater than or equal to this threshold, and the value at the last sampling interval was less than this threshold, a single threshold crossing event will be generated. A single threshold crossing event will also be generated if the first sample taken is greater than or equal to this threshold and the associated startup-alarm is equal to rising or either.
After a rising threshold crossing event is generated, another such event will not be generated until the sampled value falls below this threshold and reaches less than or equal the falling-threshold value.
- falling-event rmon-event-id
-
Specifies the identifier of the rmon>event that specifies the action to be taken when a falling threshold crossing event occurs. If there is no corresponding event configured for the specified rmon-event-id, then no association exists and no action is taken. If the falling-event has a value of zero (0), no associated event exists.
If a falling-event is configured, the CLI requires a falling-threshold to also be configured.
- falling-threshold threshold
-
Specifies a threshold for the sampled statistic. When the current sampled value is less than or equal to this threshold, and the value at the last sampling interval was greater than this threshold, a single threshold crossing event will be generated. A single threshold crossing event will also be generated if the first sample taken is less than or equal to this threshold and the associated startup-alarm is equal to falling or either.
After a falling threshold crossing event is generated, another such event will not be generated until the sampled value rises above this threshold and reaches greater than or equal the rising-threshold value.
- owner-string
-
Specifies the owner string; the owner identifies the creator of this alarm. It defaults to "TiMOS CLI". This parameter is defined primarily to allow entries that have been created in the RMON-MIB alarmTable by remote SNMP managers to be saved and reloaded in a CLI configuration file. The owner will not normally be configured by CLI users and can be a maximum of 80 characters long.
Platforms
All
alarm
Syntax
[no] alarm
Context
[Tree] (config>sys>security>cpu-protection>policy alarm)
Full Context
configure system security cpu-protection policy alarm
Description
This command enables the generation of an event when a rate is exceed. The event includes information about the offending source. Only one event is generated per monitor period.
The no form of this command disables the notifications.
Default
no alarm
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS
alarm-contact-in-power
alarm-contact-in-power
Syntax
alarm-contact-in-power {on | off}
Context
[Tree] (config>system alarm-contact-in-power)
Full Context
configure system alarm-contact-in-power
Description
This command allows the user to enable a supply of +24V output power on the +24VDC pin of the Alarm Interface Port of the CPM. When enabled, the power supplied through the +24VDC output pin can be used as a source voltage for the alarm contact input pins. The +24VDC output can be used to supply power for monitoring external sensor devices such as cabinet door sensors instead of using an external power source. If users want to use a separate external power source, they should disable the supply of power to the +24VDC output pin by using this CLI command.
Default
alarm-contact-in-power off
Parameters
- on
-
Specifies to turn on power to the +24VDC output pin of the Alarm Interface Port of the CPM.
- off
-
Specifies to turn off power to the +24VDC output pin of the Alarm Interface Port of the CPM.
Platforms
7750 SR-a
alarm-contact-input
alarm-contact-input
Syntax
alarm-contact-input input-pin-number
Context
[Tree] (config>system alarm-contact-input)
Full Context
configure system alarm-contact-input
Description
Commands in this context configure the alarm contact input pin parameters for the specified input pin.
Parameters
- input-pin-number
-
Specifies the alarm contact input pin.
Platforms
7750 SR-a
alarm-notification
alarm-notification
Syntax
alarm-notification
Context
[Tree] (config>lag>eth-cfm>mep alarm-notification)
[Tree] (config>eth-tunnel>path>eth-cfm>mep alarm-notification)
Full Context
configure lag eth-cfm mep alarm-notification
configure eth-tunnel path eth-cfm mep alarm-notification
Description
This command configures the MEP alarm notification parameter.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
alarm-notification
Syntax
alarm-notification
Context
[Tree] (config>service>ies>sub-if>grp-if>sap>eth-cfm>mep alarm-notification)
[Tree] (config>service>epipe>sap>eth-cfm>mep alarm-notification)
[Tree] (config>service>vpls>sap>eth-cfm>mep alarm-notification)
[Tree] (config>service>epipe>spoke-sdp>eth-cfm>mep alarm-notification)
[Tree] (config>router>if>eth-cfm>mep alarm-notification)
[Tree] (config>service>ies>if>spoke-sdp>eth-cfm>mep alarm-notification)
[Tree] (config>service>vpls>spoke-sdp>eth-cfm>mep alarm-notification)
[Tree] (config>service>ies>if>sap>eth-cfm>mep alarm-notification)
[Tree] (config>service>vprn>if>sap>eth-cfm>mep alarm-notification)
[Tree] (config>service>vpls>mesh-sdp>eth-cfm>mep alarm-notification)
[Tree] (config>service>vpls>eth-cfm>mep alarm-notification)
[Tree] (config>service>vprn>sub-if>grp-if>sap>eth-cfm>mep alarm-notification)
[Tree] (config>service>ipipe>sap>eth-cfm>mep alarm-notification)
[Tree] (config>service>vprn>if>spoke-sdp>eth-cfm>mep alarm-notification)
[Tree] (config>port>ethernet>eth-cfm>mep alarm-notification)
Full Context
configure service ies subscriber-interface group-interface sap eth-cfm mep alarm-notification
configure service epipe sap eth-cfm mep alarm-notification
configure service vpls sap eth-cfm mep alarm-notification
configure service epipe spoke-sdp eth-cfm mep alarm-notification
configure router interface eth-cfm mep alarm-notification
configure service ies interface spoke-sdp eth-cfm mep alarm-notification
configure service vpls spoke-sdp eth-cfm mep alarm-notification
configure service ies interface sap eth-cfm mep alarm-notification
configure service vprn interface sap eth-cfm mep alarm-notification
configure service vpls mesh-sdp eth-cfm mep alarm-notification
configure service vpls eth-cfm mep alarm-notification
configure service vprn subscriber-interface group-interface sap eth-cfm mep alarm-notification
configure service ipipe sap eth-cfm mep alarm-notification
configure service vprn interface spoke-sdp eth-cfm mep alarm-notification
configure port ethernet eth-cfm mep alarm-notification
Description
Commands in this context configure the Fault Notification Generation time values for raising the alarm and resetting the CCM defect alarm. These timers are used for network management processes and are not tied into delaying the notification to the fault management system on the network element. These timers do not affect fault propagation mechanisms.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s
- configure service vprn subscriber-interface group-interface sap eth-cfm mep alarm-notification
- configure service ies subscriber-interface group-interface sap eth-cfm mep alarm-notification
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service vpls sap eth-cfm mep alarm-notification
- configure port ethernet eth-cfm mep alarm-notification
- configure service ies interface sap eth-cfm mep alarm-notification
- configure service ipipe sap eth-cfm mep alarm-notification
- configure service vprn interface sap eth-cfm mep alarm-notification
- configure service vpls spoke-sdp eth-cfm mep alarm-notification
- configure service ies interface spoke-sdp eth-cfm mep alarm-notification
- configure service vprn interface spoke-sdp eth-cfm mep alarm-notification
- configure service epipe spoke-sdp eth-cfm mep alarm-notification
- configure router interface eth-cfm mep alarm-notification
- configure service epipe sap eth-cfm mep alarm-notification
- configure service vpls eth-cfm mep alarm-notification
- configure service vpls mesh-sdp eth-cfm mep alarm-notification
alarm-notification
Syntax
alarm-notification
Context
[Tree] (config>eth-ring>path>eth-cfm>mep alarm-notification)
Full Context
configure eth-ring path eth-cfm mep alarm-notification
Description
Commands in this context configure the MEP alarm notification parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
alarm-thresholds
alarm-thresholds
Syntax
[no] alarm-thresholds
Context
[Tree] (config>port>network>egress>pool>monitor-depth alarm-thresholds)
[Tree] (config>port>access>egress>pool>monitor-depth alarm-thresholds)
[Tree] (config>card>fp>ingress>network>pool>monitor-depth alarm-thresholds)
[Tree] (config>port>access>ingress>pool>monitor-depth alarm-thresholds)
Full Context
configure port network egress pool monitor-pool-depth alarm-thresholds
configure port access egress pool monitor-pool-depth alarm-thresholds
configure card fp ingress network pool monitor-pool-depth alarm-thresholds
configure port access ingress pool monitor-pool-depth alarm-thresholds
Description
Commands in this context configure the alarm thresholds for pool usage.
The no form of this command removes the configured alarm thresholds.
Default
no alarm-thresholds
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
alarms
alarms
Syntax
alarms
Context
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>video>analyzer alarms)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>source-override>video>analyzer alarms)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>video>analyzer alarms)
Full Context
configure mcast-management multicast-info-policy bundle video analyzer alarms
configure mcast-management multicast-info-policy bundle channel source-override video analyzer alarms
configure mcast-management multicast-info-policy bundle channel video analyzer alarms
Description
Commands in this context configure alarms for the analyzer (VQM).
Platforms
7450 ESS, 7750 SR, 7750 SR-s
alarms
Syntax
alarms
Context
[Tree] (config>li>x-interfaces>x3 alarms)
Full Context
configure li x-interfaces x3 alarms
Description
This command enables the configuration of X3 alarms.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
alarms
Syntax
alarms
Context
[Tree] (config>system alarms)
Full Context
configure system alarms
Description
Commands in this context configure facility alarm parameters. Alarm support is intended to cover a focused subset of router states that are likely to indicate service impacts (or imminent service impacts) related to the overall state of hardware assemblies (cards, fans, links, and so on).
Platforms
All
alc-acct-triggered-reason
alc-acct-triggered-reason
Syntax
[no] alc-acct-triggered-reason
Context
[Tree] (config>subscr-mgmt>acct-plcy>include-radius-attribute alc-acct-triggered-reason)
Full Context
configure subscriber-mgmt radius-accounting-policy include-radius-attribute alc-acct-triggered-reason
Description
This command includes the alc-acct-triggered-reason attribute.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
alc-error-code
alc-error-code
Syntax
[no] alc-error-code
Context
[Tree] (config>subscr-mgmt>acct-plcy>include-radius-attribute alc-error-code)
Full Context
configure subscriber-mgmt radius-accounting-policy include-radius-attribute alc-error-code
Description
This command enables RADIUS accounting messages to include an error number and error code when the subscriber host session terminates. To obtain a complete list of error numbers and their corresponding codes, use the tools>dump>aaa>radius-acct-terminate-cause command.
The no form of this command reverts to the default.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
alg
alg
Syntax
alg
Context
[Tree] (config>service>nat>up-nat-policy alg)
[Tree] (config>service>nat>firewall-policy alg)
[Tree] (config>service>nat>nat-policy alg)
Full Context
configure service nat up-nat-policy alg
configure service nat firewall-policy alg
configure service nat nat-policy alg
Description
Commands in this context configure application layer gateway (ALG) parameters of this policy.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service nat nat-policy alg
- configure service nat up-nat-policy alg
7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service nat firewall-policy alg
algorithm
algorithm
Syntax
algorithm flex-algo-id
no algorithm
Context
[Tree] (conf>router>segment-routing>srv6>micro-segment-locator algorithm)
[Tree] (config>router>segment-routing>srv6>locator algorithm)
Full Context
configure router segment-routing segment-routing-v6 micro-segment-locator algorithm
configure router segment-routing segment-routing-v6 locator algorithm
Description
This command configures an IGP flexible algorithm identifier for an SRv6 or micro-segment locator.
A locator can only be part of a single algorithm but it can be used in multiple IGP instances.
The no form of this command returns the locator to the base IGP algorithm 0.
Default
no algorithm
Parameters
- flex-algo-id
-
Specifies the flexible algorithm ID.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
alias
alias
Syntax
alias alias-name alias-command-name
no alias alias-name
Context
[Tree] (environment alias)
Full Context
environment alias
Description
This command enables the substitution of a command line (or part of a command line) by an alias. Use this command to create alternative or easier to remember or understand names for an entity or command string. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes. The special characters forward slash (/) and backslash (\) cannot be used as the first character inside an alias string. An alias can contain a double quote character by preceding the quote with a backslash (\) character (for example, alias my-alias "| match \"string\""). Only a single command can be present in the command string (the command can be long with many parameters but there is no support for aliases that include multiple CLI commands or lines). This command can be entered in any context but must be created in the root environment context.
For example, to create an alias named soi to display OSPF interfaces, enter the following command:
alias soi "show router ospf interface”
Complex aliases can be created to have shortcuts for customized show routine output.
environment alias my-summary "| match expression \"----|Description|Interface|Admin State|Oper State|Transceiver Type|Optical Compliance|Link Length\" | match invert-match expression \"Ethernet Interface|OTU Interface\" | match invert-match expression \"----\" post-lines 1"
and then used like this:
show port detail my-summary
Parameters
- alias-name
-
Specifies the alias name, up to 80 characters. Do not use a valid command string for the name of the alias. If the alias specified is an actual command, this causes the command to be replaced by the alias.
- alias-command-name
-
Specifies the command name to be associated, up to 320 characters.
Platforms
All
align
align
Syntax
[no] align
Context
[Tree] (config>log>acct-policy align)
Full Context
configure log accounting-policy align
Description
This command enables alignment of statistics collection to the nearest interval within an hour. Enabling the alignment allows statistics collection into an accounting file that is being synchronized across multiple network nodes in the network.
The no form of this command disables alignment of statistics collection.
Default
no align
Platforms
All
all
all
Syntax
all [group grp-ip-address] [source ip-address] [detail]
no all
Context
[Tree] (debug>service>id>pim-snooping all)
Full Context
debug service id pim-snooping all
Description
This command enables or disables debugging for all the PIM modules.
Parameters
- grp-ip-address
-
Debugs information associated with all PIM modules
- ip-address
-
Debugs information associated with all PIM modules
- detail
-
Debugs detailed information on all PIM modules
Platforms
All
all
Syntax
all [detail]
no all
Context
[Tree] (debug>router>rsvp>event all)
[Tree] (debug>router>mpls>event all)
Full Context
debug router rsvp event all
debug router mpls event all
Description
This command debugs all events.
The no form of the command disables the debugging.
Parameters
- detail
-
Displays detailed information about all events.
Platforms
All
all
Syntax
all [detail]
no all
Context
[Tree] (debug>router>rsvp>packet all)
Full Context
debug router rsvp packet all
Description
This command debugs all packets.
The no form of the command disables the debugging.
Parameters
- detail
-
Displays detailed information about all RSVP packets.
Platforms
All
all
Syntax
all [group grp-ip-address] [source ip-address] [detail]
no all
Context
[Tree] (debug>router>pim all)
Full Context
debug router pim all
Description
This command enables debugging for all the PIM modules.
The no form of this command disables debugging PIM modules.
Parameters
- grp-ip-address
-
Debugs information associated with all PIM modules.
- ip-address
-
Debugs information associated with all PIM modules.
- detail
-
Debugs detailed information on all PIM modules.
Platforms
All
all
Syntax
[no] all
Context
[Tree] (debug>router>rpki-session>packet all)
Full Context
debug router rpki-session packet all
Description
This command enables debugging for all RPKI packets.
The no form of this command disables debugging for all RPKI packets.
Platforms
All
all
Syntax
all
Context
[Tree] (config>log>acct-policy>cr>aa>aa-to-sub-cntr all)
[Tree] (config>log>acct-policy>cr>aa>aa-sub-attr all)
[Tree] (config>log>acct-policy>cr>aa>aa-sub-cntr all)
[Tree] (config>log>acct-policy>cr>aa>aa-from-sub-cntr all)
Full Context
configure log accounting-policy custom-record aa-specific to-aa-sub-counters all
configure log accounting-policy custom-record aa-specific aa-sub-attributes all
configure log accounting-policy custom-record aa-specific aa-sub-counters all
configure log accounting-policy custom-record aa-specific from-aa-sub-counters all
Description
This command includes all counters and only applies to the 7750 SR.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
all
Syntax
all [detail]
no all
Context
[Tree] (debug>router>pcep>pcc>conn all)
[Tree] (debug>router>pcep>pcc all)
Full Context
debug router pcep pcc connection all
debug router pcep pcc all
Description
This command enables debugging for all PCEP PCC or connection events.
The no form of this command disables debugging.
Parameters
- detail
-
Keyword used to specify detailed information about all events.
Platforms
All
all
Syntax
all [detail]
no all
Context
[Tree] (debug>router>pcep>pce all)
[Tree] (debug>router>pcep>pce>conn all)
Full Context
debug router pcep pce all
debug router pcep pce connection all
Description
This command enables debugging for all PCEP PCE or connection events.
The no form of this command disables debugging.
Parameters
- detail
-
Keyword used to specify detailed information about all events.
Platforms
VSR-NRC
all
Syntax
[no] all
Context
[Tree] (debug>open-flow all)
Full Context
debug open-flow all
Description
This command enables debugging of all the OpenFlow modules.
The no form of this command disables debugging of all the OpenFlow modules.
Platforms
VSR
all
Syntax
[no] all
Context
[Tree] (debug>open-flow>of-switch all)
Full Context
debug open-flow of-switch all
Description
This command enables debugging of all OpenFlow switch configurations.
The no form of this command disables debugging of all OpenFlow switch configurations.
Platforms
VSR
all-authorized-session-addresses
all-authorized-session-addresses
Syntax
[no] all-authorized-session-addresses
Context
[Tree] (config>subscr-mgmt>acct-plcy>include-radius-attribute all-authorized-session-addresses)
Full Context
configure subscriber-mgmt radius-accounting-policy include-radius-attribute all-authorized-session-addresses
Description
This command specifies to include all included and authorized address/prefix attributes in session accounting and is applicable only for session-accounting mode.
With this flag enabled, all IP address attributes explicitly enabled to be included are the following:
-
delegated-ipv6-prefix
-
framed-ip-address
-
framed-ip-netmask
-
framed-ipv6-prefix
-
ipv6-address
These are included if the corresponding addresses or prefixes are authorized (via access-accept or ludb) and independent if they are used or not.
The no form of this command reverts to the default.
Default
no all-authorized-session-addresses
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
all-events
all-events
Syntax
all-events
Context
[Tree] (debug>service>id>mrp all-events)
Full Context
debug service id mrp all-events
Description
This command enables MRP debugging for the applicant, leave all, periodic and registrant state machines and enables debugging of received and transmitted MRP PDUs.
Platforms
All
all-events
Syntax
all-events
Context
[Tree] (debug>service>id>stp all-events)
Full Context
debug service id stp all-events
Description
This command enables STP debugging for all events.
The no form of the command disables debugging.
Platforms
All
all-l1isis
all-l1isis
Syntax
all-l1isis ieee-address
no all-l1isis
Context
[Tree] (config>service>vprn>isis all-l1isis)
Full Context
configure service vprn isis all-l1isis
Description
This command specifies the MAC address to use for the VPRN instance of the Layer 1 IS-IS routers. The MAC address should be a multicast address.
The no form of this command reverts to the default value.
Default
all-l1isis 01:80:c2:00:00:14
Parameters
- ieee-address
-
Specifies the destination MAC address for all Layer 1 I-IS neighbors on the link for this ISIS instance.
Platforms
All
all-l1isis
Syntax
all-l1isis ieee-address
no all-l1isis
Context
[Tree] (config>router>isis all-l1isis)
Full Context
configure router isis all-l1isis
Description
This command enables you to specify the MAC address to use for all Layer 1 IS-IS routers. The MAC address should be a multicast address.
The no form of this command reverts to the default value.
Default
01:80:c2:00:00:14
Parameters
- ieee-address
-
Specifies the destination MAC address for all Layer 1 I-IS neighbors on the link for this IS-IS instance.
Platforms
All
all-l2isis
all-l2isis
Syntax
all-l2isis ieee-address
no all-l2isis
Context
[Tree] (config>service>vprn>isis all-l2isis)
Full Context
configure service vprn isis all-l2isis
Description
This command specifies the MAC address to use for Layer 2 IS-IS routers for the VPRN instance. The MAC address should be a multicast address.
The no form of this command reverts to the default value.
Default
all-l2isis 01:80:c2:00:00:15
Parameters
- ieee-address
-
Specifies the destination MAC address for all Layer 2 ISIS neighbors on the link for this ISIS instance.
Platforms
All
all-l2isis
Syntax
all-l2isis ieee-address
no all-l2isis
Context
[Tree] (config>router>isis all-l2isis)
Full Context
configure router isis all-l2isis
Description
This command enables you to specify the MAC address to use for all Layer 2 IS-IS routers. The MAC address should be a multicast address.
The no form of this command reverts to the default value.
Default
01:80:c2:00:00:15
Parameters
- ieee-address
-
Specifies the destination MAC address for all Layer 2 IS-IS neighbors on the link for this IS-IS instance.
Platforms
All
all-octets-offered-count
all-octets-offered-count
Syntax
[no] all-octets-offered-count
Context
[Tree] (config>subscr-mgmt>acct-plcy>cr>queue>i-counters all-octets-offered-count)
[Tree] (config>subscr-mgmt>acct-plcy>cr>ref-queue>i-counters all-octets-offered-count)
Full Context
configure subscriber-mgmt radius-accounting-policy custom-record queue i-counters all-octets-offered-count
configure subscriber-mgmt radius-accounting-policy custom-record ref-queue i-counters all-octets-offered-count
Description
This command includes all octets offered in the count.
The no form of this command excludes the octets offered in the count.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
all-octets-offered-count
Syntax
[no] all-octets-offered-count
Context
[Tree] (config>log>acct-policy>cr>queue>i-counters all-octets-offered-count)
[Tree] (config>log>acct-policy>cr>ref-queue>i-counters all-octets-offered-count)
Full Context
configure log accounting-policy custom-record queue i-counters all-octets-offered-count
configure log accounting-policy custom-record ref-queue i-counters all-octets-offered-count
Description
This command includes all octets offered in the count.
The no form of this command excludes the octets offered in the count.
Default
no all-octets-offered-count
Platforms
All
all-packets-offered-count
all-packets-offered-count
Syntax
[no] all-packets-offered-count
Context
[Tree] (config>subscr-mgmt>acct-plcy>cr>ref-queue>i-counters all-packets-offered-count)
[Tree] (config>subscr-mgmt>acct-plcy>cr>queue>i-counters all-packets-offered-count)
Full Context
configure subscriber-mgmt radius-accounting-policy custom-record ref-queue i-counters all-packets-offered-count
configure subscriber-mgmt radius-accounting-policy custom-record queue i-counters all-packets-offered-count
Description
This command includes all packets offered in the count.
The no form of this command excludes the packets offered in the count.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
all-packets-offered-count
Syntax
[no] all-packets-offered-count
Context
[Tree] (config>log>acct-policy>cr>queue>i-counters all-packets-offered-count)
[Tree] (config>log>acct-policy>cr>ref-queue>i-counters all-packets-offered-count)
Full Context
configure log accounting-policy custom-record queue i-counters all-packets-offered-count
configure log accounting-policy custom-record ref-queue i-counters all-packets-offered-count
Description
This command includes all packets offered in the count.
The no form of this command excludes the packets offered in the count.
Default
no all-packets-offered-count
Platforms
All
allocate-dual-sids
allocate-dual-sids
Syntax
[no] allocate-dual-sids
Context
[Tree] (config>router>ospf>segm-rtng>adj-sid allocate-dual-sids)
[Tree] (config>router>ospf3>segm-rtng>adj-sid allocate-dual-sids)
[Tree] (config>router>isis>segm-rtng>adj-sid allocate-dual-sids)
Full Context
configure router ospf segment-routing adjacency-sid allocate-dual-sids
configure router ospf3 segment-routing adjacency-sid allocate-dual-sids
configure router isis segment-routing adjacency-sid allocate-dual-sids
Description
This command enables the support of two SR-MPLS adjacency SIDs per interface. A protected and unprotected adjacency SID is instantiated and advertised. If an SR-MPLS adjacency SID already exists, an additional complementary (protected or unprotected) adjacency SID is created on the interface.
The no form of this command disables the support of two SR-MPLS adjacency SIDs per interface.
Default
no allocate-dual-sids
Platforms
All
allocation
allocation
Syntax
allocation explicit-percent percent-of-parent-pool
allocation port-bw-weight pool-weight
no allocation
Context
[Tree] (config>qos>hs-port-pool-policy>std-port-class-pools>class-pool allocation)
[Tree] (config>qos>hs-port-pool-policy>alt-port-class-pools>class-pool allocation)
Full Context
configure qos hs-port-pool-policy std-port-class-pools class-pool allocation
configure qos hs-port-pool-policy alt-port-class-pools class-pool allocation
Description
This command sizes the associated class-pool based on either the specified explicit-percent percent-of-parent-pool or based on the dynamic port bandwidth portioning mechanism. Setting an explicit percentage prevents the port-class pool from participating in the dynamic port level bandwidth-based distribution of the mid-pool’s size as the port bandwidth weight of the port-class pool becomes zero (0). Setting a port bandwidth weight causes the explicit percent value to become zero (0) disabling explicit sizing of the port-class pool.
The no form of the command sets the percent-of-parent-pool value to zero (0) and the pool-weight parameter to 1 for the port-class pool, restoring the default settings.
Default
allocation 1
Parameters
- percent-of-parent-pool
-
Specifies the percentage of parent pool being allocated. This parameter must be configured when specifying the explicit-percent. The percent-of-parent-pool value is expressed as a percentage with two decimal places (100th of a percent) that indicates that the port-class pool should be sized by applying the value to the parent mid-pool size. Specifying explicit-percent forces the port-bw-weight to a zero (0) value (disabled).
- pool-weight
-
Specifies port bandwidth weight being allocated. The port-bw-weight and explicit-percent commands are mutually exclusive. The pool-weight parameter is required when specifying the port bandwidth weight and defines both that the port-class pool should be sized in the port bandwidth distribution of the mid-pool’s size and what the distribution weight should be for the port-class pool compared to other port-class pools associated with the same mid-pool when competing for the port’s distribution portion.
Platforms
7750 SR-7/12/12e
allocation-percent
allocation-percent
Syntax
allocation-percent percent-of-parent-pool
no allocation-percent
Context
[Tree] (config>qos>hs-pool-policy>mid-tier>mid-pool allocation-percent)
Full Context
configure qos hs-pool-policy mid-tier mid-pool allocation-percent
Description
This command sizes the associated mid-pool based on the specified percent of the parent pool. The size is obtained by applying the specified percentage value to the current root-pool size acting as the mid-pool’s parent. Whenever the parent root-pool is changed to a new root-pool or the size of the current parent root-pool is modified, the mid-pool’s size is updated.
The no form of the command reverts to the default.
Default
allocation-percent 1.00
Parameters
- percent-of-parent-pool
-
Specifies the percent of the parent pool. This parameter is required when the allocation-percent command is executed. This parameter defines the percentage of the root pool's size to derive the size of the mid-pool. The value is specified as a percentage with two decimal places (100th of a percent).
Platforms
7750 SR-7/12/12e
allocation-weight
allocation-weight
Syntax
allocation-weight pool-weight
no allocation-weight
Context
[Tree] (config>qos>hs-pool-policy>root-tier>root-pool allocation-weight)
Full Context
configure qos hs-pool-policy root-tier root-pool allocation-weight
Description
This command specifies the weight that is applied to the root pool and is divided by the sum of all root pool weights to derive the pool’s buffer allocation factor. The amount of buffers remaining after the system-reserve percentage is applied is multiplied by the buffer allocation factor to derive the pool size.
Root pools function as an oversubscription control mechanism. A root pool acts as the root of a hierarchy of buffer pools and queues with respect to buffer allocation. Because the sum of the root pool sizes does not exceed the total number of buffers available, the number of buffers indicated by the root pools size is always be available to the queues within the root pools hierarchy, queues from one hierarchy can never steal buffers from another.
A root pool hierarchy is based on the dynamic parenting of one or more mid-tier pools to a root pool. A mid-tier pool represents the buffering allowed for all port-class pools mapped to the mid-tier pool. Each mid-tier pool is sized as a percentage of the root pool to which it is parented. The sum of the mid-tier pools percentages for a root pool may be greater than 100 percent, which allows the root pool to be oversubscribed. This can be beneficial when large fluctuations in mid-tier buffer utilization are expected and a given mid-tier pool should be allowed to exceed its fair share of buffering.
Through the mapping hierarchy presented above, each queue is mapped to a port-class pool, mid-tier pool, and root pool.
A root pool with an allocation-weight set to "0” is considered inactive and is not allocated buffers. Mid-tier pools cannot be parented to a root pool with a weight set to "0”. After a mid-tier pool is associated with a root pool, the root pool’s weight cannot be set to "0”.
As port classes are mapped to mid-tier pools in a different policy than mid-tier pools are mapped to root pools, a port-class pool can be mapped to a mid-tier pool that is not parented to a root pool. A queue mapped indirectly to a non-parented mid-tier pool has its operational MBS value set to zero and drops all incoming packets.
When a root pool’s allocation weight is modified, all root pools, mid-tier pools, and port class pool sizes are reevaluated and modified when necessary.
The no form of the command restores the default allocation-weight value to the associated root pool. Root pool 1 has a different default weight than root pools 2 through 8. The no allocation-weight command fails for root pools 2 through 8 if the root pool is currently parented to a class pool.
Default
root-pool 1: allocation-weight 100
root-pool 2 to 16: allocation-weight 0
Parameters
- pool-weight
-
Defines the weight of the associated root-pool root-pool-id and is used by the system to calculate the size of the root buffer pool. This parameter is required when executing the allocation-weight command. Setting the pool-weight to 0 disables the pool and prevents the root pool from being a parent to any class pools. Root pool 1 cannot be set with an allocation weight of 0.
Platforms
7750 SR-7/12/12e
allow-bgp-to-igp-export
allow-bgp-to-igp-export
Syntax
[no] allow-bgp-to-igp-export
Context
[Tree] (config>router allow-bgp-to-igp-export)
Full Context
configure router allow-bgp-to-igp-export
Description
This command enables the export of base BGP RTM routes into the IGP routing instance within the base router. This command applies to already exported BGP prefixes and to newly received BGP prefixes.
Default
allow-bgp-to-igp-export
Platforms
All
allow-boot-license-violations
allow-boot-license-violations
Syntax
[no] allow-boot-license-violations
Context
[Tree] (config>system allow-boot-license-violations)
Full Context
configure system allow-boot-license-violations
Description
This command configures whether the system should allow successful execution of the bootup configuration file when it contains license violations. When enabled, the system will not error on any configuration that causes a license violation and as a result permits the system to come into service. However, if violations are detected, the system reboots after a period of time if the violations are not fixed. See the 7450 ESS, 7750 SR, 7950 XRS and VSR Pay-as-You-Grow Licensing Reference Guide for more information.
Platforms
All
allow-client-id-change
allow-client-id-change
Syntax
[no] allow-client-id-change
Context
[Tree] (config>service>ies>sub-if>ipv6>dhcp6 allow-client-id-change)
[Tree] (config>service>vprn>sub-if>ipv6>dhcp6 allow-client-id-change)
[Tree] (config>service>ies>sub-if>grp-if>ipv6>dhcp6 allow-client-id-change)
[Tree] (config>service>vprn>sub-if>grp-if>ipv6>dhcp6 allow-client-id-change)
Full Context
configure service ies subscriber-interface ipv6 dhcp6 allow-client-id-change
configure service vprn subscriber-interface ipv6 dhcp6 allow-client-id-change
configure service ies subscriber-interface group-interface ipv6 dhcp6 allow-client-id-change
configure service vprn subscriber-interface group-interface ipv6 dhcp6 allow-client-id-change
Description
This command configures the system to allow changes to the client ID. This command can be configured on subscriber interface of retailer IES/VPRN in case of wholesale retail configuration.
Default
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
allow-directed-broadcasts
allow-directed-broadcasts
Syntax
[no] allow-directed-broadcasts
Context
[Tree] (config>service>vprn>if allow-directed-broadcasts)
[Tree] (config>router>if allow-directed-broadcasts)
[Tree] (config>service>ies>if allow-directed-broadcasts)
[Tree] (config>service>vprn>nw-if allow-directed-broadcasts)
Full Context
configure service vprn interface allow-directed-broadcasts
configure router interface allow-directed-broadcasts
configure service ies interface allow-directed-broadcasts
configure service vprn network-interface allow-directed-broadcasts
Description
This command enables the forwarding of directed broadcasts out of the IP interface.
A directed broadcast is a packet received on a local router interface destined for the subnet broadcast address on another IP interface. The allow-directed-broadcasts command on an IP interface enables or disables the transmission of packets destined to the subnet broadcast address of the egress IP interface.
When enabled, a frame destined to the local subnet on this IP interface is sent as a subnet broadcast out this interface. Care should be exercised when allowing directed broadcasts as it is a well-known mechanism used for denial-of-service attacks.
When disabled, directed broadcast packets discarded at this egress IP interface are counted in the normal discard counters for the egress SAP.
Allowing directed broadcasts is a well-known mechanism used for denial-of-service attacks.
By default, directed broadcasts are not allowed and are discarded at this egress IP interface.
The no form of this command disables the forwarding of directed broadcasts out of the IP interface. All broadcasts are dropped.
Default
no allow-directed-broadcasts — Directed broadcasts are dropped.
Platforms
All
allow-dot1q-msaps
allow-dot1q-msaps
Syntax
[no] allow-dot1q-msaps
Context
[Tree] (config>service>vpls>sap allow-dot1q-msaps)
Full Context
configure service vpls sap allow-dot1q-msaps
Description
This command enables support for single tagged traffic triggering managed SAP creation on a qinq encapsulated capture SAP.
With this command enabled, a single tagged trigger packet received on a qinq encapsulated capture SAP (x/y/z:*.* or x/y/z:tag.*) can trigger the creation of an x/y/z:tag.0 managed SAP (MSAP).
The config>system>ethernet>new-qinq-untagged-sap command should be configured:
-
as a prerequisite for an x/y/z:tag.* capture-sap
-
where x/y/z:tag1.0 and x/y/z:tag1.tag2 MSAPs for an x/y/z:*.* capture-sap should co-exist
Note that enabling new-qinq-untagged-sap affects the behavior of existing <port-id>:tag.0 SAPs.
With the allow-dot1q-msaps command disabled (default), a single tagged trigger packet received on a qinq encapsulated capture SAP (x/y/z:*.* or x/y/z:tag.*) is dropped as "Invalid QTag”.
This command cannot be enabled on:
-
a dot1q encapsulated capture-sap
-
an inverse capture sap (x/y/z:*.tag)
The no form of this command reverts to the default.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
allow-egress-remark-dscp
allow-egress-remark-dscp
Syntax
[no] allow-egress-remark-dscp
Context
[Tree] (config>oam-pm>session>ip allow-egress-remark-dscp)
Full Context
configure oam-pm session ip allow-egress-remark-dscp
Description
This command instructs the egress QoS process to modify the DSCP based on the egress QoS configuration. This command exposes the DSCP to egress DSCP processing rules.
The no form of this command instructs the egress QoS process to ignore the DSCP and allow it to bypass egress QoS. If the config>qos>network>egress>remark force command is configured for the network egress QoS profile, the egress QoS process is applied and the DSCP can be overwritten regardless of the allow-egress-remark-dscp configuration.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
allow-egress-remark-dscp
Syntax
[no] allow-egress-remark-dscp
Context
[Tree] (config>test-oam>link-meas>template>twl allow-egress-remark-dscp)
Full Context
configure test-oam link-measurement measurement-template twamp-light allow-egress-remark-dscp
Description
This command instructs the egress QoS process to modify the DSCP based on the egress QoS configuration. This command exposes the DSCP to egress DSCP processing rules.
If the config>qos>network>egress>remark-force command is configured for the network egress QoS profile, the egress QoS process is applied and the DSCP can be overwritten regardless of the allow-egress-remark-dscp configuration.
The no form of this command reverts to the default value, bypassing egress QoS processing of the DSCP.
Default
no allow-egress-remark-dscp
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
allow-egress-remark-dscp
Syntax
[no] allow-egress-remark-dscp
Context
[Tree] (config>test-oam>lag-meas>template>twl allow-egress-remark-dscp)
Full Context
configure test-oam lag-ip-measurement lag-ip-measurement-template twamp-light allow-egress-remark-dscp
Description
This command overwrites the IP header DSCP for each launched packet in accordance with the egress port QoS policy.
The no form of this command does not overwrite the IP header DSCP.
Default
no allow-egress-remark-dscp
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
allow-export-bgp-vpn
allow-export-bgp-vpn
Syntax
[no] allow-export-bgp-vpn
Context
[Tree] (config>service>vprn allow-export-bgp-vpn)
Full Context
configure service vprn allow-export-bgp-vpn
Description
This command allows routes leaked from another local VPRN service to be re-exported by this VPRN in the form of new VPN-IP routes. The service label, route targets, and BGP next-hop of the re-advertised routes are based on the configuration and default values of the re-exporting VPRN.
When re-exporting leaked routes, the following restrictions apply.
-
The allow-export-bgp-vpn command is not configurable in combination with any of the following commands: carrier-carrier-vpn (CSC), label-mode next-hop (LPN), type {hub | spoke | subscriber-split-horizon}, redundant-interface, and export-inactive-bgp.
-
Re-exported routes always have the per-VRF label of the exporting VPRN; label-per-prefix advertisement is not supported.
-
The best-external (inactive BGP) routes leaked by another VPRN cannot be re-exported by a VPRN configured with allow-export-bgp-vpn.
When a VPRN configured with allow-export-bgp-vpn advertises a leaked route, the split-horizon context is lost. A re-exported route can be easily advertised back to the sending peer unless this is blocked by BGP export policies. This can cause route flaps or other similar instability. In addition, allow-export-bgp-vpn may never be used in a VPRN service with a route distinguisher that is used in other PEs attached to the same service; if the same route distinguisher is used in this case, there is constant route flap.
If the no form of this command is configured, leaked routes cannot be re-advertised as VPN-IP routes; they can only be re-advertised to PE-CE BGP peers of the VPRN.
Default
no allow-export-bgp-vpn
Platforms
All
allow-flex-algo-fallback
allow-flex-algo-fallback
Syntax
[no] allow-flex-algo-fallback
Context
[Tree] (config>service>vpls>bgp-evpn>mpls>auto-bind-tunnel allow-flex-algo-fallback)
[Tree] (config>service>vprn>bgp-ipvpn>mpls>auto-bind-tunnel allow-flex-algo-fallback)
[Tree] (config>service>epipe>bgp-evpn>mpls>auto-bind-tunnel allow-flex-algo-fallback)
[Tree] (config>router>bgp>next-hop-resolution>shortcut-tunnel>family allow-flex-algo-fallback)
[Tree] (config>service>vprn>bgp-evpn>mpls>auto-bind-tunnel allow-flex-algo-fallback)
[Tree] (config>router>bgp>next-hop-resolution>labeled-routes>transport-tunnel>family allow-flex-algo-fallback)
Full Context
configure service vpls bgp-evpn mpls auto-bind-tunnel allow-flex-algo-fallback
configure service vprn bgp-ipvpn mpls auto-bind-tunnel allow-flex-algo-fallback
configure service epipe bgp-evpn mpls auto-bind-tunnel allow-flex-algo-fallback
configure router bgp next-hop-resolution shortcut-tunnel family allow-flex-algo-fallback
configure service vprn bgp-evpn mpls auto-bind-tunnel allow-flex-algo-fallback
configure router bgp next-hop-resolution labeled-routes transport-tunnel family allow-flex-algo-fallback
Description
This command configures a router to relax the strictly enforced Flex-Algorithm aware autobind, which is enabled through an import policy configured with the action flex-algo command.
If the allow-flex-algo-fallback command is enabled, the BGP router can autobind to a fallback algorithm 0 tunnel if no target Flex-Algorithm tunnel is available. If the allow-flex-algo-fallback command is disabled, the BGP autobind is strictly enforced to an intended Flex-Algorithm tunnel, which may cause traffic loss if no corresponding Flex-Algorithm tunnel exists.
The no form of this command removes the allow-flex-algo-fallback command from the configuration.
Default
no allow-flex-algo-fallback
Platforms
All
allow-flex-algo-fallback
Syntax
allow-flex-algo-fallback
Context
[Tree] (config>service>vprn>auto-bind-tunnel allow-flex-algo-fallback)
Full Context
configure service vprn auto-bind-tunnel allow-flex-algo-fallback
Description
Platforms
All
allow-fragmentation
allow-fragmentation
Syntax
[no] allow-fragmentation
Context
[Tree] (config>service>sdp allow-fragmentation)
[Tree] (config>service>pw-template allow-fragmentation)
Full Context
configure service sdp allow-fragmentation
configure service pw-template allow-fragmentation
Description
This command disables the setting of the do-not-fragment bit in the IP header of GRE encapsulated service traffic. This feature is only applicable to GRE SDPs and will be applied to all service traffic using the associated GRE SDP.
The no form of this command removes the command from the active configuration and returns the associated SDP to its default which is to set the do-not-fragment bit in all GRE encapsulated service traffic.
Default
no allow-fragmentation
Platforms
All
allow-ftp
allow-ftp
Syntax
[no] allow-ftp
Context
[Tree] (config>service>vprn>management allow-ftp)
Full Context
configure service vprn management allow-ftp
Description
This commands allows access to the FTP server from VPRN.
The no form of this command removes FTP access for this VPRN.
Platforms
All
allow-ftp
Syntax
[no] allow-ftp
Context
[Tree] (config>system>security>management allow-ftp)
Full Context
configure system security management allow-ftp
Description
This command allows access to the FTP server from Base and Management routers if it is operationally up.
The no form of this command disallows access to the FTP server.
Default
allow-ftp
Platforms
All
allow-grpc
allow-grpc
Syntax
[no] allow-grpc
Context
[Tree] (config>system>security>management allow-grpc)
Full Context
configure system security management allow-grpc
Description
This command allows access to the gRPC server from Base and Management routers if it is operationally up.
The no form of this command disallows access to the gRPC server.
Platforms
All
allow-grpc
Syntax
[no] allow-grpc
Context
[Tree] (config>service>vprn>management allow-grpc)
Full Context
configure service vprn management allow-grpc
Description
This commands allows access to the GRPC server from VPRN.
The no form of this command removes GRPC access for this VPRN.
Platforms
All
allow-icmp-redirect
allow-icmp-redirect
Syntax
[no] allow-icmp-redirect
Context
[Tree] (config>router allow-icmp-redirect)
Full Context
configure router allow-icmp-redirect
Description
This command allows ICMP redirects received on the management interface.
The no form of this command drops the ICMP redirects received on the management interface.
Platforms
All
allow-icmp6-redirect
allow-icmp6-redirect
Syntax
[no] allow-icmp-redirect
Context
[Tree] (config>router allow-icmp6-redirect)
Full Context
configure router allow-icmp6-redirect
Description
This command allows IPv6 ICMP redirects received on the management interface.
The no form of this command drops the IPv6 ICMP redirects received on the management interface.
Platforms
All
allow-immediate
allow-immediate
Syntax
[no] allow-immediate
Context
[Tree] (config>system>management-interface>cli>classic-cli allow-immediate)
Full Context
configure system management-interface cli classic-cli allow-immediate
Description
This command enables write access in the classic CLI configuration branch without having to use the classic CLI candidate edit functionality.
The no form of this command blocks write access and configuration changes in the classic CLI configuration branch, and the classic CLI configuration branch is read-only. This enforces using the classic CLI candidate edit functionality, including candidate commit, to modify the router configuration, instead of allowing immediate line-by-line configuration changes.
Default
allow-immediate
Platforms
All
allow-ip-int-bind
allow-ip-int-bind
Syntax
[no] allow-ip-int-bind
Context
[Tree] (config>service>vpls allow-ip-int-bind)
Full Context
configure service vpls allow-ip-int-bind
Description
The allow-ip-int-bind command that sets a flag on the VPLS or I-VPLS service that enables the ability to attach an IES or VPRN IP interface to the VPLS service in order to make the VPLS service routable. When the allow-ip-int-bind command is not enabled, the VPLS service cannot be attached to an IP interface.
VPLS Configuration Constraints for Enabling allow-ip-int-bind
When attempting to set the allow-ip-int-bind VPLS flag, the system first checks to see if the correct configuration constraints exist for the VPLS service and the network ports. The following VPLS features must be disabled or not configured for the allow-ip-int-bind flag to set:
-
SAP ingress QoS policies applied to the VPLS SAPs cannot have MAC match criteria defined
-
The VPLS service type cannot be B-VPLS or M-VPLS
-
MVR from Routed VPLS and to another SAP is not supported
-
Enhanced and Basic Subscriber Management (ESM and BSM) features
-
Network domain on SDP bindings
Once the VPLS allow-ip-int-bind flag is set on a VPLS service, the above features cannot be enabled on the VPLS service.
Network Port Hardware Constraints
The system also checks to ensure that all ports configured in network mode are associated with FlexPath2 forwarding planes. If a port is currently in network mode and the port is associated with a FlexPath1 forwarding plane, the allow-ip-int-bind command will fail. Once the allow-ip-int-bind flag is set on any VPLS service, attempting to enable network mode on a port associated with a FlexPath1 forwarding plane will fail.
VPLS SAP Hardware Constraints
Besides VPLS configuration and network port hardware association, the system also checks to that all SAPs within the VPLS are created on Ethernet ports and the ports are associated with FlexPath2 forwarding planes. Certain Ethernet ports and virtual Ethernet ports are not supported which include CCAG virtual ports (VSM based). If a SAP in the VPLS exists on an unsupported port type or is associated with a FlexPath1 forwarding plane, the allow-ip-int-bind command will fail. Once the allow-ip-int-bind flag is set on the VPLS service, attempting to create a VPLS SAP on the wrong port type or associated with a FlexPath1 forwarding plane will fail.
VPLS Service Name Bound to IP Interface without allow-ip-int-bind flag Set
If a service name is applied to a VPLS service and that service name is also bound to an IP interface but the allow-ip-int-bind flag has not been set on the VPLS service context, the system attempt to resolve the service name between the VPLS service and the IP interface will fail. After the allow-ip-int-bind flag is successfully set on the VPLS service, either the service name on the VPLS service must be removed and reapplied or the IP interface must be re-initialized using the shutdown / no shutdown commands. This will cause the system to reattempt the name resolution process between the IP interface and the VPLS service.
The no form of this command resets the allow-ip-int-bind flag on the VPLS service. If the VPLS service currently has an IP interface from an IES or VPRN service attached, the no allow-ip-int-bind command will fail. Once the allow-ip-int-bind flag is reset on the VPLS service, the configuration and hardware restrictions associated with setting the flag are removed. The port network mode hardware restrictions are also removed.
Platforms
All
allow-ipv6-udp-checksum-zero
allow-ipv6-udp-checksum-zero
Syntax
[no] allow-ipv6-udp-checksum-zero
Context
[Tree] (config>service>vprn>twamp-light>reflector allow-ipv6-udp-checksum-zero)
[Tree] (config>test-oam>link-meas>template>twl allow-ipv6-udp-checksum-zero)
[Tree] (config>router>twamp-light>reflector allow-ipv6-udp-checksum-zero)
Full Context
configure service vprn twamp-light reflector allow-ipv6-udp-checksum-zero
configure test-oam link-measurement measurement-template twamp-light allow-ipv6-udp-checksum-zero
configure router twamp-light reflector allow-ipv6-udp-checksum-zero
Description
This command configures the acceptance of IPv6 packets with UDP checksums of 0.This optional configuration allows the router to process arriving IPv6 TWAMP Test packets that contain IPv6 UDP checksum of 0x0000. The UDP port specific to this TWAMP Light test bypasses the default discard IPv6 UDP checksum 0x0000. If this optional command is not configured, IPv6 UDP checksum 0x000 arriving packets are discarded.
The no form of this command reverts to the default value, discarding packets that arrive with an IPv6 UDP checksum of 0x0000.
Default
no allow-ipv6-udp-checksum-zero
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
allow-ipv6-udp-checksum-zero
Syntax
[no] allow-ipv6-udp-checksum-zero
Context
[Tree] (config>test-oam>lag-meas>template>twl allow-ipv6-udp-checksum-zero)
Full Context
configure test-oam lag-ip-measurement lag-ip-measurement-template twamp-light allow-ipv6-udp-checksum-zero
Description
This command enables the processing of IPv6 packets with UDP checksum zero.
The no form of this command does not process IPv6 packets with UDP checksum zero.
Default
no allow-ipv6-udp-checksum-zero
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
allow-lease-query
allow-lease-query
Syntax
[no] allow-lease-query
Context
[Tree] (config>router>dhcp6>server allow-lease-query)
[Tree] (config>service>vprn>dhcp6>server allow-lease-query)
Full Context
configure router dhcp6 local-dhcp-server allow-lease-query
configure service vprn dhcp6 local-dhcp-server allow-lease-query
Description
If enabled, the local DHCPv6 server will handle and reply to lease query messages.
The no form of this command disables lease query support.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
allow-list
allow-list
Syntax
allow-list allow-list-name
no allow-list
Context
[Tree] (config>app-assure>group>url-filter>local-filtering allow-list)
Full Context
configure application-assurance group url-filter local-filtering allow-list
Description
This command adds an allow-list URL list to the local filtering URL filter policy.
The no form of this command removes the URL list object.
Default
no allow-list
Parameters
- allow-list-name
-
Specifies the URL list name.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
allow-local-management
allow-local-management
Syntax
[no] allow-local-management
Context
[Tree] (config>service>vprn>grt>enable-grt allow-local-management)
Full Context
configure service vprn grt-lookup enable-grt allow-local-management
Description
This command enables the support of specific management protocols over VPRN interfaces that terminate on Base routing context IPv4 and IPv6 interface addresses, including Base loopback and system addresses. Global Routing Table (GRT) leaking is used to enable the visibility and access of the Base interface addresses in the VPRN. The supported protocols are Telnet, FTP, SNMP, TACACS+, RADIUS (IPv4 only, not IPv6), SSH (including applications that ride over the standard SSH TCP port 22 such as SCP and SFTP) and NETCONF (configured on port 22 or 830).
Ping and traceroute responses from the Base router interfaces are supported but are not configurable.
The allow-local-management command does not control the support for management protocols terminating on VPRN interfaces directly. See "Node Management using VPRN" in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Layer 3 Services Guide: IES and VPRN for more information. Also, see the access command in the config>service>vprn>snmp context, and the commands in the config>service>vprn>management context.
Platforms
All
allow-multiple-wan-addresses
allow-multiple-wan-addresses
Syntax
[no] allow-multiple-wan-addresses
Context
[Tree] (config>service>ies>sub-if>ipv6 allow-multiple-wan-addresses)
[Tree] (config>service>vprn>sub-if>grp-if>ipv6 allow-multiple-wan-addresses)
[Tree] (config>service>ies>sub-if>grp-if>ipv6 allow-multiple-wan-addresses)
[Tree] (config>service>vprn>sub-if>ipv6 allow-multiple-wan-addresses)
Full Context
configure service ies subscriber-interface ipv6 allow-multiple-wan-addresses
configure service vprn subscriber-interface group-interface ipv6 allow-multiple-wan-addresses
configure service ies subscriber-interface group-interface ipv6 allow-multiple-wan-addresses
configure service vprn subscriber-interface ipv6 allow-multiple-wan-addresses
Description
This command enables host to have two WAN addresses, one from DHCP IA_NA and one from SLAAC assignment.
The no form of this command reverts to the default.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
allow-netconf
allow-netconf
Syntax
[no] allow-netconf
Context
[Tree] (config>system>security>management allow-netconf)
Full Context
configure system security management allow-netconf
Description
This command allows access to the NETCONF server from Base and Management routers if it is operationally up.
The no form of this command disallows access to the NETCONF server.
Platforms
All
allow-netconf
Syntax
[no] allow-netconf
Context
[Tree] (config>service>vprn>management allow-netconf)
Full Context
configure service vprn management allow-netconf
Description
This commands allows access to the NETCONF server from VPRN.
The no form of this command removes NETCONF access for this VPRN.
Platforms
All
allow-qinq-network-interface
allow-qinq-network-interface
Syntax
[no] allow-qinq-network-interface
Context
[Tree] (config>system>ip allow-qinq-network-interface)
Full Context
configure system ip allow-qinq-network-interface
Description
This command is a system-wide option that allows the creation of network interfaces on a QinQ encapsulated VLAN.
When enabled, the maximum number of allowed MPLS labels is reduced by 1 to allow for the additional VLAN tag at egress processing.
The no form of this command reverts the option to the default value, which is to not allow network interfaces on QinQ encapsulated VLANs.
Default
no allow-qinq-network-interface
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
allow-reverse-route-override
allow-reverse-route-override
Syntax
allow-reverse-route-override [type]
no allow-reverse-route-override
Context
[Tree] (config>service>vprn>ipsec allow-reverse-route-override)
Full Context
configure service vprn ipsec allow-reverse-route-override
Description
This command allows a new dynamic LAN-to-LAN tunnel that terminates in the private VPRN service to be created with an overlapping reverse route.
The no form of this command reverts to the default value.
Default
no allow-reverse-route-override
Parameters
- type
-
Specifies the action to take when the system accepts a new reverse route.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
allow-sr-over-srte
allow-sr-over-srte
Syntax
[no] allow-sr-over-srte
Context
[Tree] (config>router>isis>igp-sc allow-sr-over-srte)
[Tree] (config>router>ospf>igp-sc allow-sr-over-srte)
Full Context
configure router isis igp-shortcut allow-sr-over-srte
configure router ospf igp-shortcut allow-sr-over-srte
Description
This command enables the SR-TE LSPs as eligible SRv4 or SRv6 IGP shortcuts.
For SR-MPLS SRv4 and SRv6, IGP shortcuts can only use SR-TE LSPs with allow-sr-over-srte explicitly enabled that have an adjacency SID as top SID in the SR-TE LSP. IPv4 and IPv6 addresses can use all available SR-TE LSPs as shortcuts regardless of the explicit allow-sr-over-srte configuration.
Under ECMP, when IGP allow-sr-over-srte is configured, preference is given to the SR-TE LSPs with allow-sr-over-srte explicitly configured over the LSPs that do not have allow-sr-over-srte configured.
The no form of this command disables the eligibility.
Default
no allow-sr-over-srte
Platforms
All
allow-ssh
allow-ssh
Syntax
[no] allow-ssh
Context
[Tree] (config>service>vprn>management allow-ssh)
Full Context
configure service vprn management allow-ssh
Description
This command allows configuration of the SSH parameters.
The no form of this command disallows configuration of the SSH parameters.
Platforms
All
allow-ssh
Syntax
[no] allow-ssh
Context
[Tree] (config>system>security>management allow-ssh)
Full Context
configure system security management allow-ssh
Description
This command allows the SSH parameters to be configured from Base and Management routers.
The no form of this command disallows SSH parameters from being configured.
Default
allow-ssh
Platforms
All
allow-static
allow-static
Syntax
allow-static
no allow-static
Context
[Tree] (config>router>bgp>next-hop-res>labeled-routes allow-static)
Full Context
configure router bgp next-hop-resolution labeled-routes allow-static
Description
This command allows the BGP next-hop of label-IPv4, label-IPv6, VPN-IPv4, and VPN-IPv6 routes received from any EBGP or IBGP peer to be resolved using static routes, except for static default routes (0/0 and ::/0).
A static route is less preferred than a local or interface route for resolving the BGP next-hop of labeled route, but more preferred than other IGP routes or tunnels.
A label-IPv4 or label-IPv6 route can be resolved by a static blackhole route, even when the allow-static command is not configured, but only if the static blackhole route is the longest prefix match (LPM) static route for the BGP next-hop address.
Default
no allow-static
Platforms
All
allow-telnet
allow-telnet
Syntax
[no] allow-telnet
Context
[Tree] (config>service>vprn>management allow-telnet)
Full Context
configure service vprn management allow-telnet
Description
This command allows access to the Telnet server from a VPRN.
The no form of this command removes the Telnet access.
Platforms
All
allow-telnet
Syntax
[no] allow-telnet
Context
[Tree] (config>system>security>management allow-telnet)
Full Context
configure system security management allow-telnet
Description
This command allows access to the Telnet server from Base and Management routers if it is operationally up.
The no form of this command disallows access to the Telnet server.
Default
allow-telnet
Platforms
All
allow-telnet6
allow-telnet6
Syntax
[no] allow-telnet6
Context
[Tree] (config>service>vprn>management allow-telnet6)
Full Context
configure service vprn management allow-telnet6
Description
This command allows access to the Telnet IPv6 server from a VPRN.
The no form of this command removes the Telnet IPv6 access.
Platforms
All
allow-telnet6
Syntax
[no] allow-telnet6
Context
[Tree] (config>system>security>management allow-telnet6)
Full Context
configure system security management allow-telnet6
Description
This command allows access to the Telnet IPv6 server from Base and Management routers if it is operationally up.
The no form of this command disallows access to the Telnet IPv6 server.
Default
allow-telnet6
Platforms
All
allow-unmatching-prefixes
allow-unmatching-prefixes
Syntax
[no] allow-unmatching-prefixes
Context
[Tree] (config>service>vprn>sub-if>ipv6 allow-unmatching-prefixes)
[Tree] (config>service>ies>sub-if>ipv6 allow-unmatching-prefixes)
Full Context
configure service vprn subscriber-interface ipv6 allow-unmatching-prefixes
configure service ies subscriber-interface ipv6 allow-unmatching-prefixes
Description
This command allows address assignment for IPoEv6 and PPPoEv6 hosts in cases where the subscriber host assigned IPv6 address or prefix falls outside of the subscriber-prefix range explicitly configured for the subscriber-interface (configure>service>vprn/ies>sub-if>ipv6) or the subscriber-prefix is not configured at all.
SLAAC hosts is installed in the FDB as /64 entries, the length of the installed DHCP-PD prefix is dictated by the prefix-length and the DHCP-NA host is installed as /128 entries.
IPv4 subscriber hosts are unaffected by this command.
The no form of this command reverts to the default.
Default
no allow-unmatching-prefixes
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
allow-unmatching-subnets
allow-unmatching-subnets
Syntax
[no] allow-unmatching-subnets
Context
[Tree] (config>service>vprn>subscriber-interface allow-unmatching-subnets)
Full Context
configure service vprn subscriber-interface allow-unmatching-subnets
Description
This command specifies whether subscriber hosts with a subnet that does not match any of the subnets configured on this interface, are allowed.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
allow-unmatching-subnets
Syntax
[no] allow-unmatching-subnets
Context
[Tree] (config>service>vprn>sub-if>ipv6 allow-unmatching-subnets)
[Tree] (config>service>ies>sub-if>ipv6 allow-unmatching-subnets)
Full Context
configure service vprn subscriber-interface ipv6 allow-unmatching-subnets
configure service ies subscriber-interface ipv6 allow-unmatching-subnets
Description
This command allows address assignment for IPoEv6 and PPPoEv6 hosts in cases where the subscriber host assigned IPv6 address or prefix falls outside of the subscriber-prefix range explicitly configured for the subscriber-interface (configure>service>vprn/ies>sub-if>ipv6) or the subscriber-prefix is not configured at all.
SLAAC hosts are installed in the FDB as /64 entries, the length of the installed DHCP-PD prefix is dictated by the prefix-length and the DHCP-NA host is installed as /128 entries.
IPv4 subscriber hosts are unaffected by this command.
The no form of this command reverts to the default.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
allow-unmatching-subnets
Syntax
[no] allow-unmatching-subnets
Context
[Tree] (config>service>ies>subscriber-interface allow-unmatching-subnets)
Full Context
configure service ies subscriber-interface allow-unmatching-subnets
Description
This command specifies whether subscriber hosts with a subnet that does not match any of the subnets configured on this interface, are allowed.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
allow-unresolved-leaking
allow-unresolved-leaking
Syntax
[no] allow-unresolved-leaking
Context
[Tree] (config>router>bgp>next-hop-res allow-unresolved-leaking)
Full Context
configure router bgp next-hop-resolution allow-unresolved-leaking
Description
This command instructs BGP, in the base router instance, to allow its routes to be leaked to other (VPRN) BGP instances, even if the routes to be leaked do not have a BGP next hop that can be resolved by the base instance.
By default, BGP routes cannot be leaked to another BGP instance unless they are resolvable by the instance that receives them.
The no form of this command provides the default behavior.
Default
no allow-unresolved-leaking
Platforms
All
allow-unsecure-connection
allow-unsecure-connection
Syntax
[no] allow-unsecure-connection
Context
[Tree] (config>system>grpc allow-unsecure-connection)
Full Context
configure system grpc allow-unsecure-connection
Description
This command enables unsecure operation of gRPC connections. This means that TCP connections are not encrypted, including username and password information.
This command can be enabled only if there is no TLS profile assigned to the gRPC server.
The no form of this command enables TLS encryption on gRPC connections.
Default
no allow-unsecure-connection
Platforms
All
allow-unsecure-connection
Syntax
[no] allow-unsecure-connection
Context
[Tree] (config>system>management-interface>remote-management allow-unsecure-connection)
Full Context
configure system management-interface remote-management allow-unsecure-connection
Description
This command enables unsecure operation of all remote manager connections. In an unsecured operation, connections are not encrypted, including the username and password information.
This command and client-tls-profile are mutually exclusive. This means it can be used only if there are no TLS profiles assigned to the server.
If this command is also configured in the config>system>management-interface>remote-management> manager context, that configuration takes precedence.
The no form of this command disables unsecured connections.
Default
no allow-unsecure-connection
Platforms
All
allow-unsecure-connection
Syntax
[no] allow-unsecure-connection
Context
[Tree] (config>system>management-interface>remote-management>manager allow-unsecure-connection)
Full Context
configure system management-interface remote-management manager allow-unsecure-connection
Description
This command allows an unsecured connection to the remote managers; the TCP connection is not encrypted. This includes username and password information.
This command and client-tls-profile are mutually exclusive.
This command takes precedence over the same command configured in the config> system>management-interface>remote-management context, if applicable.
The no form of this command disables unsecured connections for the specified manager.
Default
no allow-unsecure-connection
Platforms
All
allow-unsecure-connection
Syntax
[no] allow-unsecure-connection
Context
[Tree] (config>system>telemetry>destination-group allow-unsecure-connection)
Full Context
configure system telemetry destination-group allow-unsecure-connection
Description
This command enables an unsecured connection for a specified destination group.
This command is mutually exclusive with the tls-client-profile command.
The no form of this command disables unsecured connections for the specified destination group.
Default
no allow-unsecure-connection
Platforms
All
allow-unsecure-connection
Syntax
[no] allow-unsecure-connection
Context
[Tree] (config>system>grpc-tunnel>destination-group allow-unsecure-connection)
Full Context
configure system grpc-tunnel destination-group allow-unsecure-connection
Description
This command enables an unsecured connection for a specified destination group, which allows a gRPC tunnel to run without a secured transport protocol. Data is transferred in unencrypted form.
This command is mutually exclusive with the tls-client-profile command.
The no form of this command disables unsecured connections for the specified destination group.
Default
no allow-unsecure-connection
Platforms
All
allow-unsecured-msgs
allow-unsecured-msgs
Syntax
[no] allow-unsecured-msgs
Context
[Tree] (config>service>ies>if>ipv6>secure-nd allow-unsecured-msgs)
Full Context
configure service ies interface ipv6 secure-nd allow-unsecured-msgs
Description
This command specifies whether unsecured messages are accepted. When Secure Neighbor Discovery (SeND) is enabled, only secure messages are accepted by default.
The no form of this command disables accepting unsecured messages.
Platforms
All
allow-unsecured-msgs
Syntax
[no] allow-unsecured-msgs
Context
[Tree] (config>service>vprn>if>send allow-unsecured-msgs)
Full Context
configure service vprn interface ipv6 secure-nd allow-unsecured-msgs
Description
This command specifies whether unsecured messages are accepted. When Secure Neighbor Discovery (SeND) is enabled, only secure messages are accepted by default.
The no form of this command disables accepting unsecured messages.
Platforms
All
allow-unsecured-msgs
Syntax
[no] allow-unsecured-msgs
Context
[Tree] (config>router>if>ipv6>secure-nd allow-unsecured-msgs)
Full Context
configure router interface ipv6 secure-nd allow-unsecured-msgs
Description
This command specifies whether unsecured messages are accepted. When Secure Neighbor Discovery (SeND) is enabled, only secure messages are accepted by default.
The no form of this command disables accepting unsecured messages.
Platforms
All
allow-user-name
allow-user-name
Syntax
[no] allow-user-name
Context
[Tree] (config>system>security>password>complexity-rules allow-user-name)
Full Context
configure system security password complexity-rules allow-user-name
Description
The user name is allowed to be used as part of the password.
The no form of this command does not allow user name to be used as password.
Default
no allow-user-name
Platforms
All
allowed-peer-as
allowed-peer-as
Syntax
[no] allowed-peer-as min-as-number [max max-as-number]
Context
[Tree] (config>service>vprn>bgp>group>dynamic-neighbor>match>prefix allowed-peer-as)
Full Context
configure service vprn bgp group dynamic-neighbor match prefix allowed-peer-as
Description
This command configures a single peer AS value or a contiguous range of peer AS values to associate with a prefix from which dynamic BGP sessions can be accepted.
If an incoming dynamic BGP session is associated with the prefix then the peer’s AS, as reported in the OPEN message, is checked against the list of allowed-peer-as values. If the peer AS is not contained in one of the allowed-peer-as commands, then the connection is rejected with a Bad_Peer_AS error. If there is no allowed-peer-as configuration in the matched prefix, then the ASN in the peer’s OPEN message, is checked against the group level peer-as.
The no form of this command removes an allowed-peer-as entry.
Default
no allowed-peer-as
Parameters
- min-as-number
-
Specifies an allowed peer AS value as well as the start of an allowed range if the max-as-number value is also configured.
- max-as-number
-
Specifies the end of an allowed range.
Platforms
All
allowed-peer-as
Syntax
[no] allowed-peer-as min-as-number [max max-as-number]
Context
[Tree] (config>router>bgp>group>dynamic-neighbor>match>prefix allowed-peer-as)
Full Context
configure router bgp group dynamic-neighbor match prefix allowed-peer-as
Description
This command configures a single peer AS value or a contiguous range of peer AS values to associate with a prefix from which dynamic BGP sessions can be accepted.
If an incoming dynamic BGP session is associated with the prefix, then the peer’s AS, as reported in the OPEN message, is checked against the list of allowed-peer-as values. If the peer AS is not contained in one of the allowed-peer-as commands, then the connection is rejected with a Bad_Peer_AS error. If there is no allowed-peer-as configuration in the matched prefix, then the ASN in the peer’s OPEN message, is checked against the group level peer-as.
The no form of this command removes an allowed-peer-as entry.
Default
no allowed-peer-as
Parameters
- min-as-number
-
Specifies an allowed peer AS value as well as the start of an allowed range if the max-as-number value is also configured.
- max-as-number
-
Specifies the end of an allowed range.
Platforms
All
allowed-peer-as
Syntax
[no] allowed-peer-as min-as-number [max max-as-number]
Context
[Tree] (config>service>vprn>bgp>group>dynamic-neighbor>interface allowed-peer-as)
[Tree] (config>router>bgp>group>dynamic-neighbor>interface allowed-peer-as)
Full Context
configure service vprn bgp group dynamic-neighbor interface allowed-peer-as
configure router bgp group dynamic-neighbor interface allowed-peer-as
Description
This command configures a singular allowed peer AS value or a range of acceptable values.
The no form of this command removes an allowed peer AS value or range of acceptable values.
Parameters
- min-as-number
-
Specifies an allowed peer AS value as well as the start of an allowed range if the max-as-number value is also configured.
- max-as-number
-
Specifies the end of an allowed range.
Platforms
All
allowed-source-macs
allowed-source-macs
Syntax
allowed-source-macs
Context
[Tree] (config>port>ethernet>dot1x>per-host-authentication allowed-source-macs)
Full Context
configure port ethernet dot1x per-host-authentication allowed-source-macs
Description
Commands in this context add the source MAC addresses of the hosts to the allowed MAC list.
Platforms
All
already-signed-in
already-signed-in
Syntax
[no] already-signed-in
Context
[Tree] (config>subscr-mgmt>wlan-gw>ue-query>state already-signed-in)
Full Context
configure subscriber-mgmt wlan-gw ue-query state already-signed-in
Description
This command enables matching on UEs that are already signed in.
The no form of this command disables matching on UEs that are already signed in, unless all state matching is disabled.
Default
no already-signed-in
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
alt-port-class-pools
alt-port-class-pools
Syntax
alt-port-class-pools
Context
[Tree] (config>qos>hs-port-pool-policy alt-port-class-pools)
Full Context
configure qos hs-port-pool-policy alt-port-class-pools
Description
Commands in this context configure alternate port class pools parameters. Within this context, the corresponding port-class pools can be associated with a mid-pool, explicitly sized as a percentage of the mid-pool size, dynamically sized based on relative port bandwidth, or have a slope policy applied.
Platforms
7750 SR-7/12/12e
alternate-profile
alternate-profile
Syntax
alternate-profile alternate-profile-name [create]
no alternate-profile alternate-profile-name
Context
[Tree] (config>system>ptp alternate-profile)
Full Context
configure system ptp alternate-profile
Description
This command creates an alternate profile configuration for use in PTP messaging.
The alternate profile can be used at the edge of a network to provide PTP time or frequency distribution outward to external PTP clocks.
The alternate profile cannot be deleted if it is configured as the profile under a PTP port.
The no form of this command removes the alternate profile configuration.
Parameters
- alternate-profile-name
-
Configures the alternate profile name, up to 64 characters. The string "profile” in any uppercase or lowercase form cannot be used for the alternate profile name.
- create
-
Keyword used to create the alternate profile.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
alternate-profile
Syntax
alternate-profile alternate-profile-name
no alternate-profile alternate-profile-name
Context
[Tree] (config>system>ptp>port alternate-profile)
Full Context
configure system ptp port alternate-profile
Description
This command assigns the alternate profile configuration that is used for PTP messaging on the port.
If no alternate profile is specified, the primary profile is used.
If an alternate-profile-name is specified, that alternate profile must already exist in the configuration.
The no form of this command removes the profile assignment.
Parameters
- alternate-profile-name
-
Assigns the alternate profile name, up to 64 characters. The string "profile” in any uppercase or lowercase form cannot be used for the alternate profile name.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
alternate-profile-threshold
alternate-profile-threshold
Syntax
alternate-profile-threshold threshold type threshold value
no alternate-profile-threshold
Context
[Tree] (config>subscriber-mgmt alternate-profile-threshold)
Full Context
configure subscriber-mgmt alternate-profile-threshold
Description
This command configures the thresholds that determine when an alternate subscriber-management profile is used instead of the original profile. The alternate profile is configured under the original profile, for example using the alternate-sub-profile command in the configure subscriber-management sub-profile context and the alternate-sla-profile command in the configure subscriber-management sla-profile context.
When this command is configured, the system classifies every new subscriber either as "alternate" or "non-alternate". By default, the system classifies a subscriber as non-alternate. When the number of non-alternate subscribers reaches the configured threshold, the system classifies new subscribers as alternate.
The no form of this command removes the configuration.
Parameters
- threshold type
-
Specifies the threshold type.
- threshold value
-
Specifies the maximum number of subscribers. A value of 0 indicates that the threshold is disabled.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
alternate-sla-profile
alternate-sla-profile
Syntax
alternate-sla-profile [256 chars max]
no alternate-sla-profile
Context
[Tree] (config>subscr-mgmt>sla-prof alternate-sla-profile)
Full Context
configure subscriber-mgmt sla-profile alternate-sla-profile
Description
This command configures the alternate SLA profile that is used if the system hits any of the thresholds configured using the configure subscriber-management alternate-profile-threshold command. In this case, the alternate profile is used instead of the current profile.
The no form of this command causes the system to use the current profile even if threshold conditions apply.
Default
no alternate-sla-profile
Parameters
- [256 chars max]
-
Specifies the SLA profile name, up to 256 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
alternate-sub-profile
alternate-sub-profile
Syntax
alternate-sub-profile [256 chars max]
no alternate-sub-profile
Context
[Tree] (config>subscr-mgmt>sub-prof alternate-sub-profile)
Full Context
configure subscriber-mgmt sub-profile alternate-sub-profile
Description
This command configures the alternate subscriber profile to be used if the system hits any of the thresholds configured using the configure subscriber-management alternate-profile-threshold command. In this case, the alternate profile is used instead of the current profile.
The no form of this command causes the current profile to be used even if threshold conditions apply.
Default
no alternate-subscriber-profile
Parameters
- [256 chars max]
-
Specifies the profile subscriber name, up to 256 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
always-compare-med
always-compare-med
Syntax
always-compare-med {zero | infinity}
no always-compare-med strict-as {zero | infinity}
no always-compare-med
Context
[Tree] (config>service>vprn>bgp>path-selection always-compare-med)
[Tree] (config>router>bgp>best-path-selection always-compare-med)
Full Context
configure service vprn bgp best-path-selection always-compare-med
configure router bgp best-path-selection always-compare-med
Description
This command configures the comparison of BGP routes based on the MED attribute. The default behavior of SR OS (equivalent to the no form of this command) is to only compare two routes on the basis of MED if they have the same neighbor AS (the first non-confed AS in the received AS_PATH attribute). Also by default, a route without a MED attribute is handled the same as though it had a MED attribute with the value 0. The always-compare-med command without the strict-as keyword allows MED to be compared even if the paths have a different neighbor AS; in this case, if neither zero nor infinity is specified, the zero option is inferred, meaning a route without a MED is handled the same as though it had a MED attribute with the value 0. When the strict-as keyword is present, MED is only compared between paths from the same neighbor AS, and in this case, zero or infinity is mandatory and tells BGP how to interpret paths without a MED attribute.
Default
no always-compare-med
Parameters
- zero
-
Specifies that for routes learned without a MED attribute that a zero (0) value is used in the MED comparison. The routes with the lowest metric are the most preferred.
- infinity
-
Specifies for routes learned without a MED attribute that a value of infinity (2^32-1) is used in the MED comparison. This in effect makes these routes the least desirable.
- strict-as
-
Specifies that the BGP MED values are only compared if the route comes from the same neighbor AS.
Platforms
All
always-display
always-display
Syntax
always-display
Context
[Tree] (config>system>management-interface>cli>md-cli>environment>info-output always-display)
Full Context
configure system management-interface cli md-cli environment info-output always-display
Description
Commands in this context configure the elements that are always displayed in the info output of an MD-CLI session, regardless of whether the detail option is used.
Platforms
All
always-set-sender-for-ir
always-set-sender-for-ir
Syntax
[no] always-set-sender-for-ir
Context
[Tree] (config>system>security>pki>ca-profile>cmpv2 always-set-sender-for-ir)
Full Context
configure system security pki ca-profile cmpv2 always-set-sender-for-ir
Description
This command specifies to always set the sender field in CMPv2 header of all Initial Registration (IR) messages with the subject name. By default, the sender field is only set if an optional certificate is specified in the CMPv2 request.
Default
no always-set-sender-for-ir
Platforms
All
amber-alarm-threshold
amber-alarm-threshold
Syntax
amber-alarm-threshold percentage
no amber-alarm-threshold
Context
[Tree] (config>port>access>ingress>pool amber-alarm-threshold)
[Tree] (config>port>network>egress>pool amber-alarm-threshold)
[Tree] (config>port>access>egress>pool amber-alarm-threshold)
Full Context
configure port access ingress pool amber-alarm-threshold
configure port network egress pool amber-alarm-threshold
configure port access egress pool amber-alarm-threshold
Description
This command configures the threshold for the amber alarm on the over-subscription allowed.
Users can selectively enable amber or red alarm thresholds. But if both are enabled (non-zero), the amber alarm threshold cannot be more than the red alarm threshold.
The no form of this command reverts to the default value.
Default
no amber-alarm-threshold
Parameters
- percentage
-
Specifies the amber alarm threshold.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
amber-alarm-threshold
Syntax
amber-alarm-threshold percentage
no amber-alarm-threshold
Context
[Tree] (config>card>fp>ingress>network>pool amber-alarm-threshold)
Full Context
configure card fp ingress network pool amber-alarm-threshold
Description
This command configures the threshold for the amber alarm on the over-subscription allowed.
Users can selectively enable amber or red alarm thresholds. But if both are enabled (non-zero) then the red alarm threshold must be greater than the amber alarm threshold.
The no form of this command reverts to the default value.
Default
no amber-alarm-threshold
Parameters
- percentage
-
Specifies the amber alarm threshold.
Platforms
All
ambr
ambr
Syntax
ambr down-link down-link-kbps up-link up-link-kbps
no ambr
Context
[Tree] (config>subscr-mgmt>gtp>peer-profile>pgw>qos ambr)
[Tree] (config>subscr-mgmt>gtp>peer-profile>ggsn>qos ambr)
[Tree] (config>subscr-mgmt>gtp>peer-profile>mme>qos ambr)
Full Context
configure subscriber-mgmt gtp peer-profile pgw qos ambr
configure subscriber-mgmt gtp peer-profile ggsn qos ambr
configure subscriber-mgmt gtp peer-profile mme qos ambr
Description
This command configures the Aggregated Maximum Bit Rate (AMBR) to be sent in the APN AMBR IE. The contents of this IE can be overridden by RADIUS or report-rate mechanisms. If those mechanisms specify a partial value, such as only specifying the down-link parameter, the other value is picked up from the ambr configuration.
For GTPv1, the no form of this command implies that the IE will not be sent. If a partial value is received from another source, the missing value will use the following defaults:
-
10000 kb/s up-link
-
20000 kb/s down-link
For GTPv2, the no form of this command reverts to the default of 10000 kb/s up-link and 20000 kb/s down-link.
Default
no ambr - for ggsn
ambr down-link 20000 up-link 10000 - for mme and pgw
Parameters
- down-link-kbps
-
Specifies the downlink AMBR.
- up-link-kbps
-
Specifies the uplink AMBR.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
ambr-qos-mapping
ambr-qos-mapping
Syntax
ambr-qos-mapping
Context
[Tree] (config>subscr-mgmt>gtp>apn-policy>apn ambr-qos-mapping)
Full Context
configure subscriber-mgmt gtp apn-policy apn ambr-qos-mapping
Description
Mapping of an incoming APN-AMBR to SR OS QoS overrides.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
an-gw-address
an-gw-address
Syntax
[no] an-gw-address
Context
[Tree] (config>subscr-mgmt>diam-appl-plcy>gx>include-avp an-gw-address)
Full Context
configure subscriber-mgmt diameter-application-policy gx include-avp an-gw-address
Description
This command configures the IPv4 address of the node.
The no form of this command reverts to the default.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
analyze-gre-payload
analyze-gre-payload
Syntax
[no] analyze-gre-payload
Context
[Tree] (config>cflowd analyze-gre-payload)
Full Context
configure cflowd analyze-gre-payload
Description
This command enables cflowd analysis of the inner IP packet in a sampled GRE packet that is transiting the local router.
If the GRE packet terminates on the local node, the inner IP payload is analyzed and reported using existing IPv4 or IPv6 flow templates. This behavior is not affected by this command.
If this parameter is enabled and a GRE packet is transiting the local node, the inner payload is reported using the GRE Flow Template. (Template ID 308 or 309)
This behavior is only supported with V10 (IPFIX) collectors.
The no form of this command disables cflowd analysis of the inner IP packet in a sampled GRE packet.
Platforms
All
analyze-l2tp-traffic
analyze-l2tp-traffic
Syntax
[no] analyze-l2tp-traffic
Context
[Tree] (config>cflowd analyze-l2tp-traffic)
Full Context
configure cflowd analyze-l2tp-traffic
Description
This command causes cflowd to look for and analyze the inner IP header of an L2TPv2 frame.
L2TPv2 traffic is identified by either the source or destination UDP port numbering that is set to 1701.
The no form of this command disables this function.
Default
no analyze-l2tp-traffic
Platforms
All
analyze-v4overv6-traffic
analyze-v4overv6-traffic
Syntax
[no] analyze-v4overv6-traffic
Context
[Tree] (config>cflowd analyze-v4overv6-traffic)
Full Context
configure cflowd analyze-v4overv6-traffic
Description
This command causes cflowd to look for and analyze the inner IPv4 header of IPv4overIPv6 frames that include MAP-E as well as DS-Lite and SAM traffic.
The no form of this command disables this function.
Default
no analyze-v4overv6-traffic
Platforms
All
analyzer
analyzer
Syntax
[no] analyzer
Context
[Tree] (config>isa>video-group analyzer)
Full Context
configure isa video-group analyzer
Description
This command specifies whether or not the video analyzer is enabled for all streams on this video group.
The no form of the command disables the analyzer for the group.
Default
no analyzer
Platforms
7450 ESS, 7750 SR, 7750 SR-s
analyzer
Syntax
[no] analyzer
Context
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>video analyzer)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>video analyzer)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>source-override>video analyzer)
Full Context
configure mcast-management multicast-info-policy bundle channel video analyzer
configure mcast-management multicast-info-policy bundle video analyzer
configure mcast-management multicast-info-policy bundle channel source-override video analyzer
Description
This command enables or disables the analyzer for the group.
Platforms
7450 ESS, 7750 SR, 7750 SR-s
ancp
ancp
Syntax
ancp
Context
[Tree] (config>subscr-mgmt ancp)
[Tree] (config>subscr-mgmt>sub-prof ancp)
Full Context
configure subscriber-mgmt ancp
configure subscriber-mgmt sub-profile ancp
Description
Commands in this context configure Access Node Control Protocol (ANCP) parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
ancp
Syntax
ancp
Context
[Tree] (config>service>vpls>gsmp>group ancp)
[Tree] (config>service>vprn>gsmp>group ancp)
Full Context
configure service vpls gsmp group ancp
configure service vprn gsmp group ancp
Description
Commands in this context configure Access Node Control Protocol (ANCP) parameters for this GSMP group.
Platforms
All
ancp
Syntax
[no] ancp
Context
[Tree] (config>service>vprn>gsmp>group ancp)
Full Context
configure service vprn gsmp group ancp
Description
Commands in this context configure ANCP parameters for this GSMP group.
The no form of this command disables the ANCP parameters configured in this context.
Platforms
All
ancp
Syntax
ancp ancp-string ancp-string loopback [count send-count] [timeout timeout] [alarm]
ancp subscriber sub-ident-string loopback [count send-count] [timeout timeout] [alarm]
Context
[Tree] (oam ancp)
Full Context
oam ancp
Description
This command sends an OAM request to the access node. ANCP can be used to send OAM messages to the access node. The access node must be able to accept these messages and signals such support by the capability negotiations. If the operator attempts to send an OAM command to an access node that does not support, the operation results in an error.
Parameters
- ancp-string
-
Specifies an existing ANCP string, up to 63 characters.
- loopback
-
Sends an OAM loopback test request to the access node.
- send-count
-
Specifies the number of messages the access node uses to test the circuit. If omitted, the number is determined by the access node via local policy.
- timeout
-
Specifies the length of time, in seconds, that the controlling node waits for a result.
- alarm
-
Specifies that the CLI the result is returned to the CLI and a trap is issued to indicate the test has finished. If the flag is used through SNMP the results are available in the results MIB and after the node sends the trap to indicate the results are ready.
- sub-ident-string
-
Specifies an existing subscriber-id, up to 32 characters. The node uses the ancp-string value associated with the provided subscriber-id to identify the circuit.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
ancp
Syntax
ancp
Context
[Tree] (config>system>persistence ancp)
Full Context
configure system persistence ancp
Description
This command configures ANCP persistence parameters.
Platforms
All
ancp-policy
ancp-policy
Syntax
ancp-policy policy-name [create]
no ancp-policy policy-name
Context
[Tree] (config>subscr-mgmt>ancp ancp-policy)
Full Context
configure subscriber-mgmt ancp ancp-policy
Description
This command creates an Access Node Control Protocol (ANCP) policy. The policy is associated with either the ANCP string (static case) or subscriber-profile (dynamic case) and defines the behavior of the hosts belonging to these profiles.
ANCP policies control rates and subscribers based on port-up/port-down messages from the access node. When configured, the 7450 ESS or 7750 SR should stop SHCV to a host that is part of a port defined to be down (by port-down message). When the node receives a port-up message for a port that was in port-down state, the node will initiate the SHCV process immediately to verify connectivity.
When ANCP is used with Enhanced Subscriber Management, the ANCP string last associated with the subscriber is used. All hosts of a subscriber is updated with the new ANCP string.
The no form of this command removes the policy name from the ANCP configuration.
Parameters
- policy-name
-
Configures the ANCP policy name, up to 32 characters.
- create
-
Keyword used to create the ANCP policy. The create keyword requirement can be enabled or disabled in the environment>create context.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
ancp-policy
Syntax
ancp-policy name
Context
[Tree] (config>subscr-mgmt>sub-prof>ancp ancp-policy)
Full Context
configure subscriber-mgmt sub-profile ancp ancp-policy
Description
This command specifies an existing Access Node Control Protocol (ANCP) policy to associate with the subscriber profile. The policy is associated with either the ANCP string (static case) or subscriber-profile (dynamic case) and defines the behavior of the hosts belonging to these profiles.
The no form of this command removes the policy name from the ANCP configuration.
Parameters
- name
-
Specifies an existing ANCP policy name, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
ancp-static-map
ancp-static-map
Syntax
ancp-static-map
Context
[Tree] (config>subscr-mgmt>ancp ancp-static-map)
Full Context
configure subscriber-mgmt ancp ancp-static-map
Description
Commands in this context configure a static ANCP name map.
Default
ancp-static-map
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
ancp-string
ancp-string
Syntax
ancp-string ancp-string
no ancp-string
Context
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>ident-strings ancp-string)
[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>ident-strings ancp-string)
Full Context
configure subscriber-mgmt local-user-db ipoe host identification-strings ancp-string
configure subscriber-mgmt local-user-db ppp host identification-strings ancp-string
Description
This command specifies the ANCP string which is encoded in the identification strings.
The no form of this command returns to the default.
Parameters
- ancp-string
-
Specifies the ANCP string, up to 63 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
ancp-string
Syntax
ancp-string ancp-string
no ancp-string
Context
[Tree] (config>service>vpls>sap>static-host ancp-string)
[Tree] (config>service>ies>sub-if>grp-if>sap>static-host ancp-string)
[Tree] (config>service>ies>if>sap>static-host ancp-string)
[Tree] (config>service>vprn>sub-if>grp-if>sap>static-host ancp-string)
[Tree] (config>service>vprn>if>sap>static-host ancp-string)
Full Context
configure service vpls sap static-host ancp-string
configure service ies subscriber-interface group-interface sap static-host ancp-string
configure service ies interface sap static-host ancp-string
configure service vprn subscriber-interface group-interface sap static-host ancp-string
configure service vprn interface sap static-host ancp-string
Description
This command specifies the ANCP string associated to this SAP host.
The no form of this command reverts to the default.
Parameters
- ancp-string
-
Specifies the ANCP string up to 63 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
anno-rx-timeout
anno-rx-timeout
Syntax
anno-rx-timeout count
no anno-rx-timeout
Context
[Tree] (config>system>ptp anno-rx-timeout)
Full Context
configure system ptp anno-rx-timeout
Description
This command configures the announceReceiptTimeout value for all peer associations. This defines the number of Announce message intervals that must expire with no received Announce messages before declaring an ANNOUNCE_RECIPT_TIMEOUT event.
The announce-rx-timeout cannot be changed unless PTP is shut down.
Default
anno-rx-timeout 3
Parameters
- count
-
Specifies the announce packet interval, in log form.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
announce
announce
Syntax
[no] announce
Context
[Tree] (config>service>nat>pcp-server-policy>opcode announce)
Full Context
configure service nat pcp-server-policy opcode announce
Description
This command enables/disables support for the announce opcode.
Default
no announce
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
antenna-cable-delay
antenna-cable-delay
Syntax
antenna-cable-delay nanoseconds
Context
[Tree] (config>port>gnss antenna-cable-delay)
Full Context
configure port gnss antenna-cable-delay
Description
This command configures the expected signal delay resulting from the length of the GNSS antenna cable, for platforms that support one or more embedded GNSS receivers.
Default
0
Parameters
- nanoseconds
-
Specifies the signal delay in nanoseconds.
Platforms
7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se, 7750 SR-2se
anti-spoof
anti-spoof
Syntax
anti-spoof type
no anti-spoof
Context
[Tree] (config>service>vprn>sub-if>grp-if>sap-parameters anti-spoof)
[Tree] (config>service>vprn>sub-if>grp-if>pppoe anti-spoof)
[Tree] (config>service>ies>sub-if>grp-if>sap-parameters anti-spoof)
[Tree] (config>subscr-mgmt>msap-policy>ies-vprn-only-sap-parameters anti-spoof)
[Tree] (config>service>ies>sub-if>grp-if>sap anti-spoof)
[Tree] (config>service>ies>sub-if>grp-if>pppoe anti-spoof)
[Tree] (config>service>vpls>sap anti-spoof)
[Tree] (config>service>vprn>sub-if>grp-if>sap anti-spoof)
[Tree] (config>service>ies>sap anti-spoof)
Full Context
configure service vprn subscriber-interface group-interface sap-parameters anti-spoof
configure service vprn subscriber-interface group-interface pppoe anti-spoof
configure service ies subscriber-interface group-interface sap-parameters anti-spoof
configure subscriber-mgmt msap-policy ies-vprn-only-sap-parameters anti-spoof
configure service ies subscriber-interface group-interface sap anti-spoof
configure service ies subscriber-interface group-interface pppoe anti-spoof
configure service vpls sap anti-spoof
configure service vprn subscriber-interface group-interface sap anti-spoof
configure service ies sap anti-spoof
Description
This command enables anti-spoof filtering and optionally changes the anti-spoof matching type for the SAP.
The type of anti-spoof filtering defines what information in the incoming packet is used to generate the criteria to lookup an entry in the anti-spoof filter table. The type parameter (ip, mac, ip-mac) defines the anti-spoof filter type enforced by the SAP when anti-spoof filtering is enabled.
Enabling anti-spoof filtering on a subscriber-facing SAP causes the anti-spoof table to be populated with all static and dynamic host information available on the SAP. Enabling anti-spoof filtering on the SAP will fail if any static hosts are defined without the proper addresses specified for the selected anti-spoof filter type.
When enabled, forwarding IP packets that ingress the SAP is dependent on a successful anti-spoof table match with an entry in the table. DHCP and non-IP packets (including ARP) are not subject to anti-spoof filtering. If an entry does not match the ingress packet, the packet is silently discarded while incrementing the SAP discard counter.
Anti-spoof filtering is only allowed on VPLS SAPs, IES SAP-based IP interfaces, and VPRN SAP-based IP interfaces. Anti-spoof filtering is not available on IES or VPRN SDP bound IP interfaces. Anti-spoof filtering is not supported on Epipe and other VLL type services. Support for anti-spoofing is dependent on SAP based service interfaces. Note VPRN and VLL are supported on the 7750 SR only.
Anti-spoofing filters, with type ip-mac, must be enabled to perform Enhanced Subscriber Management (as described in the Triple Play Enhanced Subscriber Management section).
The no form of this command disables anti-spoof filtering on the SAP.
Default
no anti-spoof
Parameters
- type
-
Specifies the anti-spoof filtering type for this SAP.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn subscriber-interface group-interface sap-parameters anti-spoof
- configure service ies subscriber-interface group-interface sap-parameters anti-spoof
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure subscriber-mgmt msap-policy ies-vprn-only-sap-parameters anti-spoof
- configure service vprn subscriber-interface group-interface sap anti-spoof
- configure service ies subscriber-interface group-interface pppoe anti-spoof
- configure service vpls sap anti-spoof
- configure service vprn subscriber-interface group-interface pppoe anti-spoof
- configure service ies subscriber-interface group-interface sap anti-spoof
anti-spoof
Syntax
anti-spoof pppoe-anti-spoofing-type
no anti-spoof
Context
[Tree] (config>service>vprn>sub-if>grp-if>pppoe anti-spoof)
[Tree] (config>service>ies>sub-if>grp-if>pppoe anti-spoof)
Full Context
configure service vprn subscriber-interface group-interface pppoe anti-spoof
configure service ies subscriber-interface group-interface pppoe anti-spoof
Description
This command specifies the type of PPPoE anti-spoof filtering to use.
The no form of this command reverts to the default.
Default
anti-spoof mac-sid
Parameters
- pppoe-anti-spoofing-type
-
Specifies the PPPoE anti-spoof filtering.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
anti-spoof
Syntax
anti-spoof {ip | ip-mac | nh-mac}
no anti-spoof
Context
[Tree] (config>service>vprn>sub-if>grp-if>sap anti-spoof)
[Tree] (config>service>ies>sub-if>grp-if>sap anti-spoof)
Full Context
configure service vprn subscriber-interface group-interface sap anti-spoof
configure service ies subscriber-interface group-interface sap anti-spoof
Description
This command configures the anti-spoof type of the MSAP.
The type of anti-spoof filtering defines what information in the incoming packet is used to generate the criteria to lookup an entry in the anti-spoof filter table. The type parameter (ip, ip-mac) defines the anti-spoof filter type enforced by the SAP when anti-spoof filtering is enabled.
The no form of this command reverts to the default.
For IES and VPRN subscriber group interfaces, setting no anti-spoof sets the default anti-spoofing type which is ip-mac.
Parameters
- ip
-
Configures SAP anti-spoof filtering to use only the source IP address in its lookup. If a static host exists on the SAP without an IP address specified, the anti-spoof type ip command fails.
Note:This parameter is not applicable in the config>subscr-mgmt>msap-policy context.
- ip-mac
-
Configures SAP anti-spoof filtering to use both the source IP address and the source MAC address in its lookup. The anti-spoof type ip-mac command fails if the default anti-spoof filter type of the SAP is ip-mac and the default is not overridden, or if the SAP does not support Ethernet encapsulation.
- nh-mac
-
Indicates that the ingress anti-spoof is based on the source MAC and egress anti-spoof is based on the nh-ip-address .
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
anti-spoof
Syntax
anti-spoof type
no anti-spoof
Context
[Tree] (config>service>vprn>if>sap anti-spoof)
[Tree] (config>service>ies>if>sap anti-spoof)
[Tree] (config>service>vpls>sap anti-spoof)
Full Context
configure service vprn interface sap anti-spoof
configure service ies interface sap anti-spoof
configure service vpls sap anti-spoof
Description
This command enables anti-spoof filtering and optionally changes the anti-spoof matching type for the SAP.
The type of anti-spoof filtering defines what information in the incoming packet is used to generate the criteria to lookup an entry in the anti-spoof filter table. The type parameter (ip, mac, ip-mac) defines the anti-spoof filter type enforced by the SAP when anti-spoof filtering is enabled.
The no form of the command disables anti-spoof filtering on the SAP.
Default
no anti-spoof
Parameters
- type
-
Specifies the anti-spoof filtering type for this SAP.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
anti-spoof
Syntax
anti-spoof {ip | mac | ip-mac | nh-mac}
no anti-spoof-type
Context
[Tree] (config>service>vprn>if>sap anti-spoof)
Full Context
configure service vprn interface sap anti-spoof
Description
This command enables anti-spoof filtering and optionally changes the anti-spoof matching type for the interface.
The type of anti-spoof filtering defines what information in the incoming packet is used to generate the criteria to lookup an entry in the anti-spoof filter table. The type parameter (ip, mac, ip-mac, nh-mac) defines the anti-spoof filter type enforced by the SAP when anti-spoof filtering is enabled.
The no form of this command reverts to the default.
Default
Filter type default types:
-
anti-spoof ip (Non-Ethernet encapsulated SAP)
-
anti-spoof ip-mac (Ethernet encapsulated SAP)
-
no anti-spoof-type (other SAPs)
Parameters
- ip
-
Configures SAP anti-spoof filtering to use only the source IP address in its lookup. If a static host exists on the SAP without an IP address specified, the anti-spoof type ip command fails.
- mac
-
Configures SAP anti-spoof filtering to use only the source MAC address in its lookup. Setting the anti-spoof filter type to mac is not allowed on non-Ethernet encapsulated SAPs. If a static host exists on the SAP without a specified MAC address, the anti-spoof type mac command fails. The anti-spoof type mac command will also fail if the SAP does not support Ethernet encapsulation.
- ip-mac
-
Configures SAP anti-spoof filtering to use both the source IP address and the source MAC address in its lookup. If a static host exists on the SAP without both the IP address and MAC address specified, the anti-spoof type ip-mac command fails. This is also true if the default anti-spoof filter type of the SAP is ip-mac and the default is not overridden. The anti-spoof type ip-mac command will also fail if the SAP does not support Ethernet encapsulation.
- nh-mac
-
Indicates that the ingress anti-spoof is based on the source MAC address and the egress anti-spoof is based on the nh-ip-address.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
anti-spoof
Syntax
[no] anti-spoof
Context
[Tree] (config>app-assure>group>http-enrich>field anti-spoof)
Full Context
configure application-assurance group http-enrich field anti-spoof
Description
This command configures the HTTP header enrichment anti-spoofing functionality.
The no form of this command disables anti-spoofing functionality.
Default
no anti-spoof
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
anycast
anycast
Syntax
[no] anycast rp-ip-address
Context
[Tree] (config>service>vprn>pim>rp anycast)
Full Context
configure service vprn pim rp anycast
Description
This command configures a PIM anycast protocol instance for the RP being configured. Anycast enables fast convergence when a PIM RP router fails by allowing receivers and sources to rendezvous at the closest RP.
The no form of this command removes the anycast instance from the configuration.
Parameters
- rp-ip-address
-
Configure the loopback IP address shared by all routes that form the RP set for this anycast instance. Only a single address can be configured. If another anycast command is entered with an address then the old address will be replaced with the new address. If no ip-address is entered then the command is simply used to enter the anycast CLI level.
Platforms
All
anycast
Syntax
anycast ipv6-address
no anycast ipv6-address
Context
[Tree] (config>service>vprn>pim>rp>ipv6 anycast)
Full Context
configure service vprn pim rp ipv6 anycast
Description
This command configures an IPv6 PIM anycast protocol instance for the RP being configured. Anycast enables fast convergence when a PIM RP router fails by allowing receivers and sources to rendezvous at the closest RP.
The no form of this command removes the anycast instance from the configuration.
Parameters
- ipv6-address
-
Configures the loopback IP address shared by all routes that form the RP set for this anycast instance. Only a single address can be configured. If another anycast command is entered with an address then the old address will be replaced with the new address. If no address is entered then the command is simply used to enter the anycast CLI context.
Platforms
All
anycast
Syntax
[no] anycast rp-ip-address
Context
[Tree] (config>router>pim>rp anycast)
Full Context
configure router pim rp anycast
Description
This command configures a PIM anycast protocol instance for the RP being configured. Anycast enables fast convergence when a PIM RP router fails by allowing receivers and sources to rendezvous at the closest RP.
The no form of this command removes the anycast instance from the configuration.
Parameters
- rp-ip-address
-
Specifies the loopback IP address shared by all routes that form the RP set for this anycast instance. Only a single address can be configured. If another anycast command is entered with an address then the old address will be replaced with the new address. If no ip-address is entered then the command is simply used to enter the anycast CLI level.
Platforms
All
anycast
Syntax
[no] anycast ipv6-address
Context
[Tree] (config>router>pim>rp>ipv6 anycast)
Full Context
configure router pim rp ipv6 anycast
Description
This command configures a PIM anycast protocol instance for the RP being configured. Anycast enables fast convergence when a PIM RP router fails by allowing receivers and sources to rendezvous at the closest RP.
The no form of this command removes the anycast instance from the configuration.
Parameters
- ipv6-address
-
Specifies the loopback IPv6 address shared by all routes that form the RP set for this anycast instance. Only a single address can be configured. If another anycast command is entered with an address then the old address is replaced with the new address. If no ipv6-address is entered then the command is simply used to enter the anycast CLI level.
Platforms
All
anysec
anysec
Syntax
[no] anysec
Context
[Tree] (config>macsec>connectivity-association anysec)
Full Context
configure macsec connectivity-association anysec
Description
This command configures the Connectivity Association (CA) for exclusive use with ANYsec encyrption.
configure macsec connectivity-association clear-tag-mode
configure macsec connectivity-association delay-protection
configure macsec connectivity-association encryption-offset
configure macsec connectivity-association macsec-encrypt
configure macsec connectivity-association replay-window-size
configure macsec mac-policy
The no form of this command removes ANYsec from the CA configuration.
Default
no anysec
Platforms
7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se
anysec
Syntax
anysec
Context
[Tree] (config anysec)
Full Context
configure anysec
Description
Commands in this context configure ANYsec.
Platforms
7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se
anysec
Syntax
[no] anysec
Context
[Tree] (debug anysec)
Full Context
debug anysec
Description
This command enables ANYsec debugging.
The no form of this command disables ANYsec debugging.
Platforms
7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se
ap-mac-learn-failed
ap-mac-learn-failed
Syntax
ap-mac-learn-failed {true | false | not-specified}
Context
[Tree] (config>subscr-mgmt>wlan-gw>tunnel-query ap-mac-learn-failed)
Full Context
configure subscriber-mgmt wlan-gw tunnel-query ap-mac-learn-failed
Description
This command specifies the matching criteria of tunnels based on whether or not learning the associated AP-MAC address last failed.
Default
ap-mac-learn-failed not-specified
Parameters
- true
-
Specifies matching of tunnels status where learning of the AP-MAC address succeeded.
- false
-
Specifies matching of tunnels status where learning of the AP-MAC address failed.
- not-specified
-
Specifies no matching on the AP-MAC address learning status.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
apn
apn
Syntax
apn apn
no apn
Context
[Tree] (config>router>gtp>uplink apn)
[Tree] (config>service>vprn>gtp>uplink apn)
Full Context
configure router gtp uplink apn
configure service vprn gtp uplink apn
Description
This command configures the Network Identifier part of the APN.
The no form of this command removes the string from the configuration.
Default
no apn
Parameters
- apn
-
Specifies the APN used for this IMSI to connect to this Mobile Gateway, up to 80 characters.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
apn
Syntax
apn {apn-name | unknown} [create]
no apn {apn-name | unknown}
Context
[Tree] (config>subscr-mgmt>gtp>apn-policy apn)
Full Context
configure subscriber-mgmt gtp apn-policy apn
Description
This command configures the parameters that should be applied to incoming connections with the APN specified. Multiple APN nodes can be defined per APN policy.
For each APN-policy, one unknown APN entry can be created. This APN is used by all connections not matching another APN.
The no form of this command removes the APN from the policy. Only new sessions are affected by the removal.
Parameters
- apn-name
-
Specifies the APN name as it appears in GTP messaging, up to 80 characters.
- create
-
Creates an apn-name instance. The create keyword requirement can be enabled or disabled in the environment>create context.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
apn
Syntax
[no] apn
Context
[Tree] (config>subscr-mgmt>acct-plcy>include-radius-attribute apn)
[Tree] (config>subscr-mgmt>auth-plcy>include-radius-attribute apn)
Full Context
configure subscriber-mgmt radius-accounting-policy include-radius-attribute apn
configure subscriber-mgmt authentication-policy include-radius-attribute apn
Description
This command enables the inclusion of the APN n AAA protocols as signaled in the incoming GTP setup message.
The no form of this command disables the inclusion of the attribute.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
apn
Syntax
apn apn-string
no apn
Context
[Tree] (config>app-assure>group>gtp>gtp-fltr>imsi-apn-fltr>entry apn)
Full Context
configure application-assurance group gtp gtp-filter imsi-apn-filter entry apn
Description
This command configures a matching condition for an APN configured as a GTP filter.
Parameters
- apn-string
-
Specifies the match string, which can include 1 to 32 characters.
If no APN is specified, the entry will not check for the APN IE in GTP-C packets.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
apn-ambr
apn-ambr
Syntax
[no] apn-ambr
Context
[Tree] (config>subscr-mgmt>diam-appl-plcy>gx>include-avp apn-ambr)
Full Context
configure subscriber-mgmt diameter-application-policy gx include-avp apn-ambr
Description
This command enables the inclusion of the APN-Aggregate-Max-Bitrate-DL and APN-Aggregate-Max-Bitrate-UL AVPs inside the QoS-Information AVP, as signaled in the incoming GTP message.
The no form of this command disables the inclusion of the AVPs.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
apn-ambr-dl
apn-ambr-dl
Syntax
apn-ambr-dl agg-rate
apn-ambr-dl arbiter arbiter-name
apn-ambr-dl hs-sla-agg-rate
apn-ambr-dl policer policer-id
apn-ambr-dl queue queue-id
apn-ambr-dl scheduler scheduler-name
no apn-ambr-dl
Context
[Tree] (config>subscr-mgmt>diam-appl-plcy>gx>3gpp-qos-mapping apn-ambr-dl)
Full Context
configure subscriber-mgmt diameter-application-policy gx 3gpp-qos-mapping apn-ambr-dl
Description
This command configures the APN-Aggregate-Max-Bitrate-DL AVP. When enabled, the AVP is interpreted as a rate override for the specified egress QoS object. For queues and policers, the PIR is overridden.
This override uses the same QoS override mechanism as the native Gx and RADIUS-based QoS overrides. Therefore, a subsequent Gx/RADIUS-based override removes this override and an APN-AMBR based override removes any preceding Gx/RADIUS-based override.
The no form of this command disables the override mechanism based on APN-AMBR.
Parameters
- agg-rate
-
Specifies to map to an aggregate rate.
- arbiter-name
-
Specifies the name of the arbiter to be overridden.
- hs-sla-agg-rate
-
Specifies to map to an HS SLA aggregate rate.
- policer-id
-
Specifies the ID of the policer to be overridden.
- queue-id
-
Specifies the ID of the queue to be overridden.
- scheduler-name
-
Specifies the name of the scheduler to be overridden.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
apn-ambr-ul
apn-ambr-ul
Syntax
apn-ambr-ul arbiter arbiter-name
apn-ambr-ul policer policer-id
apn-ambr-ul queue queue-id
apn-ambr-ul scheduler scheduler-name
no apn-ambr-ul
Context
[Tree] (config>subscr-mgmt>diam-appl-plcy>gx>3gpp-qos-mapping apn-ambr-ul)
Full Context
configure subscriber-mgmt diameter-application-policy gx 3gpp-qos-mapping apn-ambr-ul
Description
This command configures the APN-Aggregate-Max-Bitrate-UL AVP. When enabled, the AVP is interpreted as a rate override for the specified egress QoS object. For queues and policers, the PIR is overridden.
This override uses the same QoS override mechanism as the native Gx and RADIUS-based QoS overrides. Therefore, a subsequent Gx/RADIUS-based override removes this override and an APN-AMBR based override removes any preceding Gx/RADIUS-based override.
The no form of this command disables the override mechanism based on APN-AMBR.
Parameters
- arbiter-name
-
Specifies the name of the arbiter to be overridden.
- policer-id
-
Specifies the ID of the policer to be overridden.
- queue-id
-
Specifies the ID of the queue to be overridden.
- scheduler-name
-
Specifies the name of the scheduler to be overridden.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
apn-policy
apn-policy
Syntax
apn-policy apn-policy-name
no apn-policy
Context
[Tree] (config>router>gtp>s11>interface apn-policy)
[Tree] (config>service>vprn>gtp>s11>interface apn-policy)
Full Context
configure router gtp s11 interface apn-policy
configure service vprn gtp s11 interface apn-policy
Description
This command configures an Access Point Name (APN) policy for the S11 interface.
The no form of this command removes the APN policy.
Parameters
- apn-policy-name
-
Specifies the name of the policy, up to 32 characters.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
apn-policy
Syntax
apn-policy policy-name [create]
no apn-policy policy-name
Context
[Tree] (config>subscr-mgmt>gtp apn-policy)
Full Context
configure subscriber-mgmt gtp apn-policy
Description
This command configures an APN policy that defines parameters to be used when setting up a new incoming GTP connection. Each APN can be mapped to its own set of parameters.
The no form of this command removes the policy from the system. A policy can only be removed if it is not in use.
Parameters
- policy-name
-
Specifies the name of the policy, up to 32 characters.
- create
-
Creates an entry.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
app-filter
app-filter
Syntax
app-filter
Context
[Tree] (config>app-assure>group>policy app-filter)
Full Context
configure application-assurance group policy app-filter
Description
Commands in this context configure an application filter for application assurance.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
app-group
app-group
Syntax
app-group app-group-name [rate]
no app-group app-group-name
Context
[Tree] (config>app-assure>group>cflowd>comp app-group)
[Tree] (config>app-assure>group>cflowd>tcp-perf app-group)
Full Context
configure application-assurance group cflowd comprehensive app-group
configure application-assurance group cflowd tcp-performance app-group
Description
This command configures application groups to export performance records with cflowd.
The no form of this command removes the parameters from the configuration.
Parameters
- app-group-name
-
Specifies the application group name.
- rate
-
Specifies which sampling flow rate to use; flow-rate or flow-rate2.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
app-group
Syntax
app-group application-group-name [create]
no app-group application-group-name
Context
[Tree] (config>app-assure>group>policy app-group)
Full Context
configure application-assurance group policy app-group
Description
This command creates an application group for an application assurance policy.
The no form of this command deletes the application group from the configuration. All associations must be removed in order to delete a group.
Default
no app-group
Parameters
- application-group-name
-
A string of up to 32 characters uniquely identifying this application group in the system.
- create
-
Mandatory keyword used when creating an application group. The create keyword requirement can be enabled/disabled in the environment>create context.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
app-group
Syntax
app-group app-group-name
Context
[Tree] (config>app-assure>group>policy>application app-group)
Full Context
configure application-assurance group policy application app-group
Description
This command associates an application with an application group of an application assurance policy.
Parameters
- app-group-name
-
A string of up to 32 characters uniquely identifying an existing application in the system.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
app-group
Syntax
app-group {eq | neq} application-group-name
no app-group
Context
[Tree] (config>app-assure>group>policy>aqp>entry>match app-group)
[Tree] (config>app-assure>group>policy>charging-filter>entry>match app-group)
Full Context
configure application-assurance group policy app-qos-policy entry match app-group
configure application-assurance group policy charging-filter entry match app-group
Description
This command adds app-group to match criteria used by this entry.
The no form of this command removes the app-group from match criteria for this entry.
Default
no app-group
Parameters
- eq
-
Specifies that the value configured and the value in the flow must be equal.
- neq
-
Specifies that the value configured and the value in the flow must differ.
- application-group-name
-
Specifies the name of the existing application group entry, up to 32 characters
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
app-group
Syntax
app-group app-group-name export-using export-method [export-method ...(up to 2 max)]
app-group app-group-name no-export
no app-group app-group-name
Context
[Tree] (config>app-assure>group>statistics>aa-sub app-group)
Full Context
configure application-assurance group statistics aa-sub app-group
Description
Commands in this context configure accounting and statistics collection parameters per system for application groups of application assurance for a given AA ISA group/partition.
The no form of this command removes the application group name.
Parameters
- app-group-name
-
Specifies an existing application group name, up to 32 characters.
- export-method
-
Specifies the method of statistics export to be used.
- no-export
-
Allows the operator to enable the referred to application group to be selected (via Diameter) for Gx-usage monitoring. Gx usage monitoring is enabled automatically (and this command is not shown) if the export-using parameter is selected for the respective application group.
Usage monitoring must be enabled at the group:partition level (config>app-assure>group>statistics>aa-sub>usage-monitoring) as well in order to allow any application/application group/charging group usage monitoring.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
app-group
Syntax
app-group {eq | neq} application-group-name
no app-group
Context
[Tree] (config>app-assure>group>policy>chrg-fltr>entry>match app-group)
Full Context
configure application-assurance group policy charging-filter entry match app-group
Description
This command configures the addition of an application group to the match criteria used by this charging filter entry.
The no form of this command removes the application group match criteria.
Default
no app-group
Parameters
- eq
-
Specifies that the value configured and the value in the flow must be equal.
- neq
-
Specifies that the value configured and the value in the flow must differ.
- application-group-name
-
Specifies the name of the existing application group entry, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
app-profile
app-profile
Syntax
app-profile app-profile-name
no app-profile
Context
[Tree] (config>service>vprn>if>spoke-sdp app-profile)
[Tree] (config>service>vprn>if>sap>static-host app-profile)
[Tree] (config>service>ies>sub-if>grp-if>sap app-profile)
[Tree] (config>service>vprn>if>sap app-profile)
[Tree] (config>service>vpls>sap app-profile)
[Tree] (config>service>ies>if>sap app-profile)
[Tree] (config>service>vpls>sap>static-host app-profile)
[Tree] (config>service>vprn>sub-if>grp-if>sap app-profile)
[Tree] (config>service>ies>if>spoke-sdp app-profile)
[Tree] (config>service>ies>if>sap>static-host app-profile)
[Tree] (config>service>vpls>spoke-sdp app-profile)
Full Context
configure service vprn interface spoke-sdp app-profile
configure service vprn interface sap static-host app-profile
configure service ies subscriber-interface group-interface sap app-profile
configure service vprn interface sap app-profile
configure service vpls sap app-profile
configure service ies interface sap app-profile
configure service vpls sap static-host app-profile
configure service vprn subscriber-interface group-interface sap app-profile
configure service ies interface spoke-sdp app-profile
configure service ies interface sap static-host app-profile
configure service vpls spoke-sdp app-profile
Description
This command specifies an application profile name.
The no form of this command reverts to the default.
Parameters
- app-profile-name
-
Specifies the application profile name up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
app-profile
Syntax
app-profile app-profile-name [scope scope-type]
no app-profile
Context
[Tree] (config>service>ies>sub-if>grp-if>sap>static-host app-profile)
[Tree] (config>service>vprn>sub-if>grp-if>sap>static-host app-profile)
Full Context
configure service ies subscriber-interface group-interface sap static-host app-profile
configure service vprn subscriber-interface group-interface sap static-host app-profile
Description
This command specifies an application profile name.
Parameters
- app-profile-name
-
Specifies the application profile name up to 32 characters in length.
- scope-type
-
Specifies the scope to which the application profile is assigned in the context.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
app-profile
Syntax
app-profile app-profile-name
no app-profile
Context
[Tree] (config>service>epipe>spoke-sdp app-profile)
[Tree] (config>service>epipe>sap app-profile)
[Tree] (config>service>ipipe>sap app-profile)
[Tree] (config>service>ipipe>spoke-sdp app-profile)
Full Context
configure service epipe spoke-sdp app-profile
configure service epipe sap app-profile
configure service ipipe sap app-profile
configure service ipipe spoke-sdp app-profile
Description
This command configures the application profile name.
Parameters
- app-profile-name
-
Specifies an existing application profile name configured in the config>app-assure>group>policy context.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service epipe spoke-sdp app-profile
- configure service epipe sap app-profile
All
- configure service ipipe spoke-sdp app-profile
- configure service ipipe sap app-profile
app-profile
Syntax
app-profile app-profile-name [create]
no app-profile app-profile-name
Context
[Tree] (config>app-assure>group>policy app-profile)
Full Context
configure application-assurance group policy app-profile
Description
This command creates an application profile and commands in this context configure the profile parameters.
The no form of this command removes the application profile from the configuration.
Parameters
- app-profile-name
-
Specifies the name of the application profile up to 32 characters.
- create
-
Mandatory keyword used when creating an application profile. The create keyword requirement can be enabled/disabled in the environment>create context.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
app-profile
Syntax
[no] app-profile
Context
[Tree] (config>log>acct-policy>cr>aa>aa-sub-attributes app-profile)
Full Context
configure log accounting-policy custom-record aa-specific aa-sub-attributes app-profile
Description
This command enables the subscriber app-profile attribute information to be exported in the AA subscriber's custom record.
The no form of this command excludes the subscriber app-profile attribute from the AA subscriber's custom record.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR