d Commands – Part II

Context

[Tree] (config>redundancy>multi-chassis>ipsec-domain designated-role)

Full Context

configure redundancy multi-chassis ipsec-domain designated-role

Description

This command sets the designated role for the tunnel group in the IPsec domain.

The no form of this command reverts to the default value.

Default

designated-role standby

Parameters

standby

Sets the designated role to standby.

active

Sets the designated role to active.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>policy-options>policy-statement>default-action dest-class)

[Tree] (config>router>policy-options>policy-statement>entry dest-class)

Full Context

configure router policy-options policy-statement default-action dest-class

configure router policy-options policy-statement entry dest-class

Description

This command specifies the policy accounting destination class index to associate with matched routes.

Default

no dest-class

Parameters

dest-class

Specifies the destination class.

Values

1 to 255

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

• configure router policy-options policy-statement default-action dest-class

All

• configure router policy-options policy-statement entry dest-class

Context

[Tree] (config>router>mpls>lsp dest-global-id)

Full Context

configure router mpls lsp dest-global-id

Description

This optional command configures the MPLS-TP Global ID of the far end node of the MPLS-TP LSP. This command is only allowed for MPLS-TP LSPs. Global ID values of 0 indicate that the local node’s configured global ID is used. If the local global-id is 0, then the dest-global-id must also be 0. The dest-global-id cannot be changed if an LSP is in use by an SDP.

Default

dest-global-id 0

Parameters

dest-global-id

Specifies the destination global ID.

Values

0 to 4294967295

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>service>ies>if>sap>ip-tunnel dest-ip)

[Tree] (config>service>vprn>if>sap>ip-tunnel dest-ip)

[Tree] (config>service>vprn>sap>ipsec-tunnel dest-ip)

Full Context

configure service ies interface sap ip-tunnel dest-ip

configure service vprn interface sap ip-tunnel dest-ip

configure service vprn sap ipsec-tunnel dest-ip

Description

This command configures a private IPv4 or IPv6 address of the remote tunnel endpoint. A tunnel can have up to 16 dest-ip commands. At least one dest-ip address is required in the configuration of a tunnel. A tunnel does not come up operationally unless all dest-ip addresses are reachable (part of a local subnet).

Unnumbered interfaces are not supported.

The no form of this command deletes the destination IP of the tunnel.

Parameters

ip-address

Specifies the private IPv4 or IPv6 address of the remote IP tunnel endpoint. If this remote IP address is not within the subnet of the IP interface associated with the tunnel then the tunnel will not come up.

Values

<ip-address>	ipv4-address	a.b.c.d
	ipv6-address	x:x:x:x:x:x:x:x (eight 16-bit pieces)
		x:x:x:x:x:x:d.d.d.d
		x - [0 to FFFF]H
		d - [0 to 255]D

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>mcast-mgmt>mcast-rprt-dest dest-ip-addr)

Full Context

configure mcast-management mcast-reporting-dest dest-ip-addr

Description

This command specifies the IP address of the external node to which IGMP events are exported. The destination IP address can only be reachable from the global routing table (no vrf access).

The no form of this command removes the destination address from the configuration.

Parameters

ip-addr

Specifies the IP address of the multicast reporting destination.

Platforms

All

Context

[Tree] (config>port>ethernet>lldp dest-mac)

Full Context

configure port ethernet lldp dest-mac

Description

This command configures destination MAC address parameters.

Default

dest-mac nearest-bridge

Parameters

nearest-bridge

Specifies to use the nearest bridge.

nearest-non-tpmr

Specifies to use the nearest non-Two-Port MAC Relay (TPMR).

nearest-customer

Specifies to use the nearest customer.

Platforms

All

Context

[Tree] (config>oam-pm>session>ethernet dest-mac)

Full Context

configure oam-pm session ethernet dest-mac

Description

This command defines the destination MAC address of the peer MEP and sets the destination MAC address in the layer two header to match. This must be a unicast address.

The no form of this command removes session parameter.

Parameters

ieee-address

Specifies the Layer 2 unicast MAC address of the destination MEP.

Values

xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

Platforms

All

Context

[Tree] (config>lag>lldp-member-template dest-mac)

Full Context

configure lag lldp-member-template dest-mac

Description

This command configures the destination MAC address parameters.

Default

dest-mac nearest-bridge

Parameters

nearest-bridge

Keyword to specify that the nearest bridge should be used.

nearest-non-tpmr

Keyword to specify that the nearest non-Two-Port MAC Relay (TPMR) should be used.

nearest-customer

Keyword to specify that the nearest customer should be used.

Platforms

All

Context

[Tree] (config>macsec>mac-policy dest-mac-address)

Full Context

configure macsec mac-policy dest-mac-address

Description

This command specifies the destination MAC address.

The no form of this command removes the MAC address.

Parameters

mac-address

Specifies the value of the MAC address policy.

Values

xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

create

Mandatory to create the configuration.

Platforms

All

Context

[Tree] (config>service>vpls>sap>egress dest-mac-rewrite)

Full Context

configure service vpls sap egress dest-mac-rewrite

Description

This commands enables the overwriting of a destination MAC address to an operator-configured value for all unicast packets egressing the specified SAP. The command is intended to be deployed with L2 PBF SAP redirect when a remote end of the SAP interface is an L3 interface with a MAC address different from the MAC address of the non-PBF-ed L3 interface. See Filter Policy in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Router Configuration Guide for more details.

The no form disables the option.

Default

no dest-mac-rewrite

Parameters

ieee-address

Specifies the MAC address

Values

1xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

Cannot be all zeros

Platforms

All

Context

[Tree] (config>subscr-mgmt>diam-appl-plcy>gy dest-realm-learning)

[Tree] (config>subscr-mgmt>diam-appl-plcy>gx dest-realm-learning)

Full Context

configure subscriber-mgmt diameter-application-policy gy dest-realm-learning

configure subscriber-mgmt diameter-application-policy gx dest-realm-learning

Description

This command configures destination realm learning that is used in outgoing Gx and Gy Credit Control Request (CCR) messages. Destination realm is a mandatory configuration parameter.

The configured destination realm is always used in the initial CCR-I message. The consecutive request message of a Gx or Gy session can use the destination realm as learned from replies within a DIAMETER session (if learning is enabled), or they can ignore the realm from the reply and always use the configured destination realm in Gx and Gy request messages (learning is disabled).

The no form of this command ignores the realm from the reply.

Default

dest-realm-learning

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>mpls>lsp dest-tunnel-number)

Full Context

configure router mpls lsp dest-tunnel-number

Description

This optional command configures the MPLS-TP tunnel number of the LSP at the far end node of the MPLS-TP LSP. This command is only allowed for MPLS-TP LSPs. If it is not entered, then the system will take the dest-tunnel-number to be the same as the src-tunnel-num for the LSP.

Default

The default value is the configured src-tunnel-num.

Parameters

dest-tunnel-number

Specifies the destination tunnel number.

Values

1 to 61440

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>oam-pm>session>ip dest-udp-port)

Full Context

configure oam-pm session ip dest-udp-port

Description

This command defines the destination UDP port on outbound TWAMP Light packets sent from the session controller. The destination UDP port must match the UDP port value configured on the TWAMP Light reflector that is responding to this specific TWAMP Light test.

The no form of this command removes the destination UDP port setting.

Parameters

udp-port-number

Specifies the UDP source port.

Values

1 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>test-oam>link-meas>template>twl dest-udp-port)

Full Context

configure test-oam link-measurement measurement-template twamp-light dest-udp-port

Description

This command configures the destination UDP port used by the link measurement tests.

Default

dest-udp-port 862

Parameters

port-number

Specifies the destination UDP port copied into the UDP header of each Echo request packet launched for each link measurement test belonging to the specified template.

Values

1 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>test-oam>lag-meas>template>twl dest-udp-port)

Full Context

configure test-oam lag-ip-measurement lag-ip-measurement-template twamp-light dest-udp-port

Description

This command configures the destination UDP port for the test packets.

Default

dest-udp-port 862

Parameters

port-number

Specifies the destination UDP port number.

Values

1 to 65535

Default

862

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>oam-pm>session>ip destination)

Full Context

configure oam-pm session ip destination

Description

This command defines the destination IP address that is assigned to the TWAMP Light packets. The destination address must be included in the prefix list on the session reflector within the configured context in order to allow the reflector to process the inbound TWAMP Light packets.

The no form of this command removes the destination parameters.

Parameters

ip-address

Specifies the IP address of the IP peer to which the packet is directed.

Values

ipv4-address:	a.b.c.d
ipv6-address:	x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x:	[0 to FFFF]H
	d:	[0 to 255]D

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>filter>redirect-policy destination)

Full Context

configure filter redirect-policy destination

Description

This command defines a destination in a redirect policy. More than one destination can be configured. Whether a destination IPv4/IPv6 address will receive redirected packets depends on the effective priority value after evaluation.

The most preferred destination is programmed in hardware as action forward next-hop. If all destinations are down (as determined by the supported tests), action forward is programmed in hardware. All destinations within a given policy must be either IPv4 or (exclusive) IPv6. The redirect policy with IPv4 destinations configured can only be used by IPv4 filter policies. The redirect policy with IPv6 destinations configured can only be used by IPv6 filter policies.

Default

no destination

Parameters

ip-address

Specifies the IPv4 address (in dotted decimal notation) or IPv6 address to send the redirected traffic to.

Values

IPv4 address: ip-address: a.b.c.d

IPv6-address: x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x: [0..FFFF]H

d: [0..255]D

Platforms

All

Context

[Tree] (config>filter>log destination)

Full Context

configure filter log destination

Description

This command configures the destination for filter log entries for the filter log ID.

Filter logs can be sent to either memory (memory) or to an existing Syslog server definition (syslog).

If the filter log destination is memory, the maximum number of entries in the log must be specified.

The no form of the command deletes the filter log association.

Default

destination memory 1000

Parameters

memory num-entries

Specifies the destination of the filter log ID is a memory log. The num-entries value is the maximum number of entries in the filter log expressed as a decimal integer.

Values

10 to 50000

syslog syslog-id

Specifies the destination of the filter log ID is a Syslog server. The syslog-id parameter is the number of the Syslog server definition.

Values

1 to 10

Platforms

All

Context

[Tree] (config>system>telemetry>destination-group destination)

[Tree] (config>system>grpc-tunnel>destination-group destination)

Full Context

configure system telemetry destination-group destination

configure system grpc-tunnel destination-group destination

Description

This command configures a destination IP address and port for a specific destination within a destination group. Up to two destinations can be defined within a destination group. Each destination is an IPv4 address, an IPv6 address, or the Fully Qualified Domain Name (FQDN).

The no form of this command removes the destination from the destination group.

Parameters

ip-address

Specifies the IPv4 address (in dotted decimal notation) or IPv6 address.

Values

IPv4 address: ip-address: a.b.c.d

IPv6-address: x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x: [0..FFFF]H

d: [0..255]D

fqdn

Specifies the FQDN.

port

Specifies the TCP destination port number.

Values

1 to 65535

create

Keyword used to create a destination.

Platforms

All

Context

[Tree] (config>router>if>if-attr>delay>dyn>twamp>ipv4 destination)

Full Context

configure router interface if-attribute delay dynamic twamp-light ipv4 destination

Description

This command configures the unicast IPv4 destination address for the TWAMP Light test packet. When this command is not configured, the destination IPv4 address is auto-assigned for interfaces configured with a prefix length of 30 and 31. All other interface prefix lengths and unnumbered interfaces are unable to auto- assign the destination IPv4 address. If the interface does not use a prefix length of 30 or 31, the destination must be configured.

Deleting a configured destination removes the specified address and causes the source address to be auto-assigned for prefix length of 30 and 31.

Configuration modifications are allowed without administratively disabling the IPv4 protocol.

The no form of this command removes the IPv4 address from the configuration.

Default

no destination

Parameters

ip-address

Specifies the IPv4 destination address.

Values

a.b.c.d

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>router>if>if-attr>delay>dyn>twamp>ipv6 destination)

Full Context

configure router interface if-attribute delay dynamic twamp-light ipv6 destination

Description

This command configures the IPv6 destination address of the TWAMP Light test packet. When this command is not configured, no destination address is present and an error is raised to prevent the transmission of the test packet.

The IPv6 protocol can be enabled without addressing. However, the test does not transmit packets.

The link local address must be in the form fe80::/60 in accordance with RFC 4291, IP Version 6 Addressing Architecture.

The no form of this command removes the IPv6 address from the configuration.

Default

no destination

Parameters

ipv6-address

Specifies the TWAMP Light IPv6 destination address

Values

ipv6-address:	x:x:x:x:x:x:x:x
	x - [0 to FFFF]H
	unicast and link local IPv6 address only

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>filter>gre-tun-tmp>ipv4 destination-address)

Full Context

configure filter gre-tunnel-template ipv4 destination-address

Description

This command defines one or more destinations for the GRE IP header used to encapsulate the matching IPv4/IPv6 packet.

Traffic matching the associated IPv4 or IPv6 filter are hashed across all available destination address. If no destination address is available, then matching traffic follows the configured pbr-down-action-override action, if configured.

The no form of this command removes the specified destination IP address configuration from the associated GRE tunnel template.

Parameters

ip-address

Specifies up to 16 IPv4 addresses to be used as the destination address.

Platforms

All

Context

[Tree] (config>service>vprn>if>ping-template destination-address)

[Tree] (config>service>ies>if>ping-template destination-address)

Full Context

configure service vprn interface ping-template destination-address

configure service ies interface ping-template destination-address

Description

This command configures the address to where the ICMP echo requests are directed to test connectivity. The source of the ICMP echo request is the primary IPv4 address of the interface under which the ping-template is configured. The destination address must be on the same subnet as the source IP address. A configuration warning message displays if the primary IPv4 address and the destination are not on the same subnet, INFO: PIP #2092 Ping template misconfiguration - destination-address and primary IP address should fall in the same subnet. Unnumbered interfaces and loopback addresses are not supported.

The config>service>ies|vprn>interface>ping-template must be in the no shutdown state to remove or change the destination-address ip-address.

The no form of this command removes the destination address from the configuration.

Parameters

ip-address

Specifies the destination address to where the ICMP echo requests are directed to test connectivity, in a.b.c.d format.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>router>policy-acct-template destination-class)

Full Context

configure router policy-acct-template destination-class

Description

Commands in this context create a destination class index for the template.

The no form of this command removes the index from the configuration.

Parameters

index

Specifies the destination index value.

Values

1 to 255

all

Deletes all destination class indexes from this configuration.

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

Context

[Tree] (config>service>vprn>static-route-entry>indirect destination-class)

[Tree] (config>service>vprn>static-route-entry>ipsec-tunnel destination-class)

Full Context

configure service vprn static-route-entry indirect destination-class

configure service vprn static-route-entry ipsec-tunnel destination-class

Description

This command configures the policy accounting destination-class index to be used when incrementing accounting statistic for traffic matching the associated static route.

The no form of this command removes the associated destination-class from the associated static route nexthop.

Default

no destination-class

Parameters

dest-index

The destination index integer value.

Values

1 to 255

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

Context

[Tree] (config>filter>ip-filter>entry>match destination-class)

[Tree] (config>filter>ipv6-filter>entry>match destination-class)

Full Context

configure filter ip-filter entry match destination-class

configure filter ipv6-filter entry match destination-class

Description

This command configures the BGP destination-class value match criterion. Filtering egress traffic on destination-class requires the destination-class-lookup command to be enabled on the interface that the packet ingresses on.

The no form of the command removes the destination-class value match criterion.

Default

no destination-class

Parameters

dest-index

Specifies the destination index integer value.

Values

1 to 255

Platforms

All

Context

[Tree] (config>router>static-route-entry>indirect destination-class)

[Tree] (config>router>static-route-entry>next-hop destination-class)

Full Context

configure router static-route-entry indirect destination-class

configure router static-route-entry next-hop destination-class

Description

This command configures the policy accounting destination-class index to be used when incrementing accounting statistic for traffic matching the associated static route.

The no form of this command removes the associated destination-class from the associated static route next hop.

Default

no destination-class

Parameters

dest-index

Specifies the destination index integer value.

Values

1 to 255

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

Context

[Tree] (config>service>ies>if>ingress destination-class-lookup)

Full Context

configure service ies interface ingress destination-class-lookup

Description

This command enables BGP destination-class lookup for packets on this interface ingress and is supported on FP3-based cards and later. It is used in combination with an IP filter or IPv6 filter destination-class to filter traffic egress of the router based on BGP destination classes.

The command is supported on network, IES, VPRN and R-VPLS interfaces. It is not supported on subscriber interfaces, tunnel interfaces or VPRN network interfaces.

Default

no destination-class-lookup

Platforms

All

Context

[Tree] (config>service>vprn>if>ingress destination-class-lookup)

Full Context

configure service vprn interface ingress destination-class-lookup

Description

This command enables BGP destination-class lookup for packets on this interface ingress and is supported on FP3-based cards and later. It is used in combination with an IP filter or IPv6 filter destination-class to filter traffic egress of the router based on BGP destination classes.

The command is supported on network, IES, VPRN and R-VPLS interfaces. It is not supported on subscriber interfaces, tunnel interfaces and VPRN network interfaces.

Default

no destination-class-lookup

Platforms

All

Context

[Tree] (config>router>if>ingress destination-class-lookup)

Full Context

configure router interface ingress destination-class-lookup

Description

This command enables BGP destination-class lookup for packets on this interface ingress. It is used in combination with an IP filter or IPv6 filter destination-class to filter traffic egress of the router based on BGP destination classes.

The command is supported on network, IES, VPRN and R-VPLS interfaces. It is not supported on subscriber interfaces, tunnel interfaces or VPRN network interfaces.

The no form of this command reverts to the default value.

Default

no destination-class-lookup

Platforms

All

Context

[Tree] (config>system>telemetry destination-group)

[Tree] (config>system>grpc-tunnel destination-group)

Full Context

configure system telemetry destination-group

configure system grpc-tunnel destination-group

Description

Commands in this context configure commands for destination groups.

The no form of this command removes the destination group name.

Parameters

name

Specifies the destination group name, up to 32 characters.

create

Keyword used to create a destination group.

Platforms

All

Context

[Tree] (config>system>grpc-tunnel>tunnel destination-group)

Full Context

configure system grpc-tunnel tunnel destination-group

Description

This command assigns the specified destination group to a gRPC tunnel.

The no form of this command removes the specified destionation group from the gRPC tunnel.

Default

no destination-group

Parameters

name

Specifies the destination group name, up to 32 characters

Platforms

All

Context

[Tree] (config>system>telemetry>persistent-subscriptions>subscription destination-group)

Full Context

configure system telemetry persistent-subscriptions subscription destination-group

Description

This command assigns an existing destination group to the specified persistent subscription. The assigned destination-group must already exist before the configured persistent subscription can be activated.

The no form of this command removes the destination group name from the persistent subscription.

Parameters

name

Specifies the destination group name, up to 32 characters.

Platforms

All

Context

[Tree] (config>service>nat>syslog>syslog-export-policy>include destination-ip)

Full Context

configure service nat syslog syslog-export-policy include destination-ip

Description

This command includes the destination IP address in the flow log. The destination-ip is significant in Destination Based NAT (DNAT) where the foreign IP address is translated. A foreign IP address is the original IP address toward the destination node and in DNAT it is replaced by the destination-ip. More clearly, on the inside (private side), the IP address of the destination node is referred to as foreign IP (original destination IP), and once this address is translated by DNAT, it is referred to as destination IP (translated destination IP) on the outside (public side).

The no form of the command disables the feature.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>nat>syslog>syslog-export-policy>collector destination-port)

Full Context

configure service nat syslog syslog-export-policy collector destination-port

Description

This command configures the destination port (collector port) to which UDP stream containing the syslog flow records are sent.

Default

destination-port 514

Parameters

destination-port

Specifies the destination port to which UDP streams are sent.

Values

1 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>nat>inside destination-prefix)

[Tree] (config>service>vprn>nat>inside destination-prefix)

Full Context

configure router nat inside destination-prefix

configure service vprn nat inside destination-prefix

Description

This command configures a destination prefix. An (internal) static route will be created for this prefix. All traffic that hits this route will be subject to NAT. The system will not allow a destination-prefix to be configured if the configured nat-policy refers to an IP pool that resides in the same service (as this would result in a routing loop).

Parameters

ip-prefix

Specifies the IP prefix; host bits must be zero (0).

Values

a.b.c.d

length

Specifies the prefix length.

Values

0 to 32

nat-policy-name

Specifies the NAT policy name, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>cflowd>collector>aggregation destination-prefix)

Full Context

configure cflowd collector aggregation destination-prefix

Description

This command specifies that the aggregation data is based on destination prefix information.

The no form removes this type of aggregation from the collector configuration.

Platforms

All

Context

[Tree] (debug>router>ip>dhcp6 detail-level)

[Tree] (debug>router>ip>dhcp detail-level)

[Tree] (debug>router>local-dhcp-server detail-level)

Full Context

debug router ip dhcp6 detail-level

debug router ip dhcp detail-level

debug router local-dhcp-server detail-level

Description

This command debugs the DHCP tracing detail level.

Parameters

low

Displays a low detail level for DHCP debugging.

medium

Displays a medium detail level for DHCP debugging.

high

Displays a high detail level for DHCP debugging.

Platforms

All

• debug router ip dhcp6 detail-level
• debug router ip dhcp detail-level

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• debug router local-dhcp-server detail-level

Context

[Tree] (debug>router>l2tp>packet detail-level)

[Tree] (debug>router>l2tp>group>packet detail-level)

[Tree] (debug>router>l2tp>assignment-id>packet detail-level)

Full Context

debug router l2tp packet detail-level

debug router l2tp group packet detail-level

debug router l2tp assignment-id packet detail-level

Description

This command configures the L2TP packet debugging level of detail.

Parameters

detail-level

Specifies the detail level.

Values

low, high

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>service>id>ppp>packet detail-level)

Full Context

debug service id ppp packet detail-level

Description

This command specify the detail level of PPP packet debug output.

The no form of this command disables debugging.

Parameters

low | medium | high

Specifies the detail level of PPP packet debug output.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>router>radius detail-level)

Full Context

debug router radius detail-level

Description

This command specifies the output detail level of command debug router radius.

Default

detail-level medium

Parameters

low

Specifies that the output includes packet type, server address, length, radius-server-policy name.

medium

Specifies all output in low level including the RADIUS attributes in the packet.

high

Specifies all output in medium level including the hex packet dump.

Platforms

All

Context

[Tree] (debug>router>wpp>portal>packet detail-level)

[Tree] (debug>router>wpp>packet detail-level)

Full Context

debug router wpp portal packet detail-level

debug router wpp packet detail-level

Description

This command specifies the detail level of WPP packet debugging.

Parameters

detail-level

specifies the detail level of WPP packet debugging.

Values

high — Specifies a high detail level for WPP packet debugging

low — Specifies a low detail for WPP packet debugging

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>subscr-mgmt>vrgw>brg>pppoe-client>brg-id detail-level)

Full Context

debug subscriber-mgmt vrgw brg pppoe-client brg-id detail-level

Description

This command specifies the amount of detail present in debugging the specified PPPoE client.

Default

detail-level high

Parameters

low

Specifies a low level of detail during debugging.

medium

Specifies a medium level of detail during debugging.

high

Specifies a high level of detail during debugging.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>service>id>igmp-snooping detail-level)

Full Context

debug service id igmp-snooping detail-level

Description

This command enables and configures the IGMP tracing detail level.

The no form of this command disables the IGMP tracing detail level.

Platforms

All

Context

[Tree] (debug>service>id>mld detail-level)

Full Context

debug service id mld-snooping detail-level

Description

This command enables and configures the MLD tracing detail level.

The no form of this command disables the MLD tracing detail level.

Platforms

All

Context

[Tree] (debug>service>id>dhcp detail-level)

Full Context

debug service id dhcp detail-level

Description

This command configures the DHCP tracing detail level.

The no form of the command disables debugging.

Parameters

low

Displays a low detail level for DHCP debugging.

medium

Displays a medium detail level for DHCP debugging.

high

Displays a high detail level for DHCP debugging.

Platforms

All

Context

[Tree] (debug>router>pcp>pcp-server>packet detail-level)

Full Context

debug router pcp pcp-server packet detail-level

Description

This command configures the packet debugging level of detail.

Parameters

detail-level

Specifies the detail level.

Values

low, high

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>acct-plcy>include detailed-acct-attributes)

Full Context

configure subscriber-mgmt radius-accounting-policy include-radius-attribute detailed-acct-attributes

Description

This command enables detailed reporting of per queue and per policer octet and packet counters using RADIUS VSAs. Enabled by default. It can be enabled simultaneously with aggregate counters (std-acct-attributes).

The no form of this command excludes the detailed counter VSAs from the RADIUS accounting messages.

Default

detailed-acct-attributes

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>bgp-evpn>mac-duplication detect)

Full Context

configure service vpls bgp-evpn mac-duplication detect

Description

This command modifies the behavior of the mac-duplication command, which is always enabled by default. It monitors the number of moves of a MAC address for a period of time (window).

Default

detect num-moves 5 window 3 trusted-mac-move-factor 1

Parameters

num-moves

Identifies the number of MAC moves in a VPLS service. The counter is incremented when a specified MAC is locally relearned in the FDB or flushed from the FDB due to the reception of a better remote EVPN route for that MAC.

Values

3 to 10

Default

5

minutes

Specifies the length of the window in minutes.

Values

1 to 15

Default

3

factor

Specifies the multiplying value used to calculate a MAC duplication event. The num-moves value is multiplied by this value to determine the number of moves needed to declare a trusted MAC as duplicate.

For example, if num-moves=5 and factor=3, five moves within the window is enough to declare a non-trusted MAC as duplicate. However, 15 moves are needed to declare a trusted MAC as duplicate.

By default, the value of factor is 1, which means the factor for a trusted MAC is the same as for a non-trusted MAC. This provides a backwards compatible solution upon upgrade of the node.

Values

1 to 10

Default

1

Platforms

All

Context

[Tree] (config>app-assure>group>transit-ip-policy detect-seen-ip)

Full Context

configure application-assurance group transit-ip-policy detect-seen-ip

Description

This command enables the detection of transit subscribers based on the IP address.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>sys>security>dist-cpu-protection>policy>protocol>dynamic-parameters detection-time)

Full Context

configure system security dist-cpu-protection policy protocol dynamic-parameters detection-time

Description

When a dynamic enforcing policer is instantiated, it remains allocated until at least a contiguous conforming period of detection-time passes.

Default

detection-time 30

Parameters

seconds

Specifies the detection time.

Values

1 to 128000

Platforms

All

Context

[Tree] (config>sys>security>dist-cpu-protection>policy>static-policer detection-time)

Full Context

configure system security dist-cpu-protection policy static-policer detection-time

Description

When a policer is declared as in an "exceed” state, it remains as exceeding until a contiguous conforming period of detection-time passes. The detection-time only starts after the exceed-action hold-down is complete. If the policer detects another exceed during the detection count down then a hold-down is once again triggered before the policer re-enters the detection time (that is, the countdown timer starts again at the configured value). During the hold-down (and the detection-time), the policer is considered as in an "exceed” state.

Default

detection-time 30

Parameters

seconds

Specifies the detection time.

Values

1 to 128000

Platforms

All

Context

[Tree] (config>service>vprn>nat>inside deterministic)

[Tree] (config>router>nat>inside deterministic)

Full Context

configure service vprn nat inside deterministic

configure router nat inside deterministic

Description

Commands in this context configure deterministic NAT.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>nat>outside>pool deterministic)

Full Context

configure service vprn nat outside pool deterministic

Description

This command configures deterministic NAT for this pool.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>bgp>best-path-selection deterministic-med)

Full Context

configure service vprn bgp best-path-selection deterministic-med

Description

This command controls how the BGP decision process compares routes on the basis of MED. When deterministic-med is configured, BGP groups paths that are equal up to the MED comparison step based on neighbor AS, and then compares the best path from each group to arrive at the overall best path. This change to the BGP decision process makes best path selection completely deterministic in all cases. Without deterministic-med, the overall best path selection is sometimes dependent on the order of the route arrival because of the rule that MED cannot be compared in routes from different neighbor AS.

Default

no deterministic-med

Platforms

All

Context

[Tree] (config>router>bgp>best-path-selection deterministic-med)

Full Context

configure router bgp best-path-selection deterministic-med

Description

This command controls how the BGP decision process compares routes on the basis of MED. When deterministic-med is configured, BGP groups paths that are equal up to the MED comparison step based on neighbor AS, and then compares the best path from each group to arrive at the overall best path. This change to the BGP decision process makes best path selection completely deterministic in all cases. Without deterministic-med, the overall best path selection is sometimes dependent on the order of the route arrival because of the rule that MED cannot be compared in routes from different neighbor AS.

Default

no deterministic-med

Platforms

All

Context

[Tree] (config>service>nat deterministic-script)

Full Context

configure service nat deterministic-script

Description

This command configures the script generated for deterministic NAT.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>system>bluetooth device)

Full Context

configure system bluetooth device

Description

This command is used to add and remove devices from the Bluetooth allowlist or to enter the context to configure the MAC. The router only accepts pairing requests with devices that are in the allowlist. The devices are identified through their IEEE 802 MAC addresses. Up to six devices can be defined in the allowlist.

The create keyword must be used to add a new device.

The no form of this command removes the indicated device from the allowlist.

Parameters

ieee-address

Specifies the MAC address of the external Bluetooth device.

Values

6-byte unicast MAC address (xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx)

Platforms

7750 SR-1, 7750 SR-s, 7950 XRS-20e

Context

[Tree] (config>system>management-interface>remote-management device-label)

Full Context

configure system management-interface remote-management device-label

Description

This command configures the metadata label that is supplied to all remote managers. This label can be used to group devices (network-nodes) that serve a common purpose or role.

If this command is also configured for a specific remote manager in the config>system> management-interface>remote-management>manager context, that configuration takes precedence.

The no form of this command causes an empty string to be used.

Parameters

name

Specifies the device-label name, up to 64 characters.

Platforms

All

Context

[Tree] (config>system>management-interface>remote-management>manager device-label)

Full Context

configure system management-interface remote-management manager device-label

Description

This command configures the metadata label that is supplied to this remote manager. This label can be used to group devices (network-nodes) with a common purpose/role.

This command takes precedence over the same command configured in the global context (config>system>management-interface>remote-management).

The no form of this command causes the device-label name to be inherited from the global context (config>system>management-interface>remote-management).

Parameters

name

Specifies the device-label name, up to 64 characters.

Platforms

All

Context

[Tree] (config>system>management-interface>remote-management device-name)

Full Context

configure system management-interface remote-management device-name

Description

This command configures a device name that is supplied to all remote managers. This name identifies the specified SR OS node in the network.

If this command is also configured for a specific manager in the config>system>management-interface>remote-management> manager context, that configuration takes precedence.

The no form of this command causes the system to use the default device name (system-name).

Default

system-name

Parameters

name

Specifies the device name, up to 64 characters.

Platforms

All

Context

[Tree] (config>system>management-interface>remote-management>manager device-name)

Full Context

configure system management-interface remote-management manager device-name

Description

This command configures a device name that is supplied to the specific manager. This name identifies the specified SR OS node in the network.

This command takes precedence over the same command configured in the global context (config>system>management-interface>remote-management).

The no form of this command causes the device name to be inherited from the global context (config>system>management-interface>remote-management).

Default

system-name

Parameters

name

Specifies the device name, up to 64 characters.

Platforms

All

Context

[Tree] (config>service>vprn>l2tp df-bit-lac)

[Tree] (config>router>l2tp df-bit-lac)

Full Context

configure service vprn l2tp df-bit-lac

configure router l2tp df-bit-lac

Description

By default, the LAC df-bit-lac is always set and sends all L2TP packets with the DF bit set to 1. The DF bit is configurable to allow downstream routers to fragment the L2TP packets. The LAC itself will not fragment L2TP packets. L2TP packets that have a larger MTU size than what the LAC egress ports allows are dropped.

The no form of this command reverts to the default.

Default

df-bit-lac always

Parameters

always

Specifies that the LAC sends all L2TP packets with the DF bit set to 1.

never

Specifies that the LAC sends all L2TP packets with the DF bit set to 0.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>l2tp>group>tunnel df-bit-lac)

[Tree] (config>service>vprn>l2tp>group df-bit-lac)

[Tree] (config>service>vprn>l2tp>group>tunnel df-bit-lac)

[Tree] (config>router>l2tp>group df-bit-lac)

Full Context

configure router l2tp group tunnel df-bit-lac

configure service vprn l2tp group df-bit-lac

configure service vprn l2tp group tunnel df-bit-lac

configure router l2tp group df-bit-lac

Description

By default, the LAC df-bit-lac is set to default and sends all L2TP packets with the DF bit set to 1. The DF bit is configurable to allow downstream routers to fragment the L2TP packets. The LAC will not fragment L2TP packets. L2TP packets that have a larger MTU size than what the LAC egress ports allows are dropped. The configuration of the df-bit can be overridden at different levels: l2tp, tunnel, and group. The configuration at the tunnel level overrides the configuration on both the group and l2tp levels. The configuration at the group level overrides the configuration on l2tp.

The no form of this command reverts to the default.

Default

df-bit-lac default

Parameters

always

Specifies that the LAC sends all L2TP packets with the DF bit set to 1.

never

Specifies that the LAC sends all L2TP packets with the DF bit set to 0.

default

Follows the DF-bit configuration specified on upper levels.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>ipsec>ike-transform dh-group)

Full Context

configure ipsec ike-transform dh-group

Description

This command specifies the Diffie-Hellman group to be used in this IKE transform instance.

Default

dh-group 2 (1024-bit — More Modular Exponential (MODP))

Parameters

dh-group {1 | 2 | 5 | 14 | 15 | 19 | 20 | 21}

Specifies which Diffie-Hellman group to use for calculating session keys. More bits provide a higher level of security, but require more processing. Three groups are supported with IKE-v1:

Group 1: 768 bits

Group 2: 1024 bits

Group 5: 1536 bits

Group 14: 2048 bits

Group 15: 3072 bits

Group 19: P-256 ECC Curve, 256 bits

Group 20: P-384 ECC Curve, 384 bits

Group 21: P-512 ECC Curve, 512 bits

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>msap-policy>vpls-only-sap-parameters dhcp)

Full Context

configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp

Description

Commands in this context configure DHCP parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>sub-if>grp-if dhcp)

[Tree] (config>service>vpls>mesh-sdp dhcp)

[Tree] (config>service>vprn>sub-if>grp-if dhcp)

[Tree] (config>service>vpls>spoke-sdp dhcp)

[Tree] (config>service>vpls>sap dhcp)

[Tree] (config>service>vprn>sub-if dhcp)

[Tree] (config>service>vprn>if dhcp)

[Tree] (config>service>vprn dhcp)

[Tree] (config>service>ies>sub-if dhcp)

[Tree] (config>service>ies>if dhcp)

Full Context

configure service ies subscriber-interface group-interface dhcp

configure service vpls mesh-sdp dhcp

configure service vprn subscriber-interface group-interface dhcp

configure service vpls spoke-sdp dhcp

configure service vpls sap dhcp

configure service vprn subscriber-interface dhcp

configure service vprn interface dhcp

configure service vprn dhcp

configure service ies subscriber-interface dhcp

configure service ies interface dhcp

Description

Commands in this context configure DHCP parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service ies subscriber-interface dhcp
• configure service vprn dhcp
• configure service vprn subscriber-interface dhcp
• configure service ies subscriber-interface group-interface dhcp
• configure service vprn subscriber-interface group-interface dhcp

All

• configure service vpls mesh-sdp dhcp
• configure service vprn interface dhcp
• configure service ies interface dhcp
• configure service vpls sap dhcp
• configure service vpls spoke-sdp dhcp

Context

[Tree] (debug>router>ip dhcp)

Full Context

debug router ip dhcp

Description

This command enables DHCP debugging.

The no form of this command disables debugging.

Parameters

ip-int-name

Specifies the name of the IP interface, up to 32 characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.

ieee-address

Specifies the 48-bit MAC address for the static ARP in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee, and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.

sap-id

Specifies the physical port identifier portion of the SAP definition.

Platforms

All

Context

[Tree] (config>python>py-policy dhcp)

Full Context

configure python python-policy dhcp

Description

This command specifies the Python script for the specified DHCPv4 packet type in the specified direction.

Multiple dhcp command configurations are allowed in the same Python policy.

The no form of this command reverts to the default.

Parameters

type

Specifies the message type of the event.

Values

discover, offer, request, decline, ack, nak, release, inform, force-renew, lease-query, lease-unassigned, lease-unknown, lease-active

direction {ingress | egress}

Specifies whether the packet is being received by the system or being sent by the system.

script script

Specifies the name of the Python script, up to 32 characters, that is used to handle the specified message.

Platforms

All

Context

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range dhcp)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range dhcp)

Full Context

configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range dhcp

configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range dhcp

Description

Commands in this context create DHCP configuration for WLAN-GW ISA subscribers (such as migrant subscribers).

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>service>id dhcp)

Full Context

debug service id dhcp

Description

Commands in this context perform DHCP debugging.

The no form of the command disables DHCP debugging.

Platforms

All

Context

[Tree] (config>app-assure>group>transit-ip-policy dhcp)

Full Context

configure application-assurance group transit-ip-policy dhcp

Description

This command enables dynamic DHCP-based management of transit aa-subs for the transit-ip-policy. This is mutually exclusive to other types management of transit subs for a given transit-ip-policy.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>if>sap>ipsec-gw dhcp)

[Tree] (config>service>vprn>if>sap>ipsec-gw dhcp)

Full Context

configure service ies interface sap ipsec-gw dhcp

configure service vprn interface sap ipsec-gw dhcp

Description

Commands in this context configure DHCPv4-based address assignment for IKEv2 remote-access tunnels.

The system acts as a DHCPv4 client on behalf of the IPsec client, and also a relay agent to relay DHCPv4 packets to the DHCPv4 server.

DHCPv4 DORA(Discovery/Offer/Request/Ack) exchange happens during IKEv2 remote-access tunnel setup. The system also supports standard renew.

In order to use this feature, the relay-proxy must be enabled on the corresponding interface (either the private interface or the interface that has the gi-address as the interface address).

Default

no dhcp

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>if dhcp)

Full Context

configure router interface dhcp

Description

Commands in this context configure DHCP parameters.

Platforms

All

Context

[Tree] (bof>autoconfigure>ipv4 dhcp)

Full Context

bof autoconfigure ipv4 dhcp

Description

This command configures the IPv4 DHCP client for OOB management. The OOB management IPv4 can be set using a DHCP server offer.

The no form of this command disables IPv4 DHCP OOB management.

Default

no dhcp

Parameters

include-user-class

Specifies to include Option 77 user class data in the offer.

client-id

Specifies to include the client ID for IPv4 Option 61 for auto-discovery. The identifier is opaque and is in string format. By default, this is the chassis serial number.

timeout

Specifies the DHCP offer timeout, in seconds.

Values

1 to 65535

Default

30

ascii-string

Specifies the string format for this option, up to 127 characters.

hex-string

Specifies the hexadecimal format for this option, up to 254 hex nibbles.

Values

0x0 to 0xFFFFFFFF

Platforms

7450 ESS-7, 7750 SR-1, 7750 SR-7, 7750 SR-1e, 7750 SR-2e, 7750 SR-s

Context

[Tree] (bof>autoconfigure>ipv6 dhcp)

Full Context

bof autoconfigure ipv6 dhcp

Description

This command configures the IPv6 DHCP client for out-of-band (OOB) management. The OOB management IPv6 can be set using a DHCP server offer.

The no form of this command disables IPv6 DHCP client OOB management.

Default

no dhcp

Parameters

include-user-class

Specifies to include Option 15 user class data in the offer.

client-id

Specifies to include the client ID for IPv6 DHCP Option 1 for auto-discovery. The identifier is opaque and is in string format. By default, this is the chassis serial number.

seconds

Specifies the DHCP client ID timeout, in seconds.

Values

1 to 65535

duid-type

Specifies the type code of the server DUID.

Values

duid-link-local, duid-enterprise

ascii-string

Specifies the string format for this option, up to 124 characters.

hex-string

Specifies the hexadecimal format for this option, up to 248 hex nibbles.

Values

0x0 to 0xFFFFFFFF

timeout

Specifies the DHCP offer timeout, in seconds.

Values

1 to 65535

Default

30

Platforms

7450 ESS-7, 7750 SR-1, 7750 SR-7, 7750 SR-1e, 7750 SR-2e, 7750 SR-s

Context

[Tree] (config>sys>security>cpu-protection>ip>included-protocols dhcp)

Full Context

configure system security cpu-protection ip-src-monitoring included-protocols dhcp

Description

This command includes the extracted IPv4 DHCP packets for ip-src-monitoring. IPv4 DHCP packets will be subject to the per-source-rate of CPU protection policies.

Default

dhcp (Note this is different from the other protocols)

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS

Context

[Tree] (debug>router>l2tp>peer>packet dhcp-client)

[Tree] (debug>router>l2tp>assignment-id>packet dhcp-client)

[Tree] (debug>router>l2tp>packet dhcp-client)

[Tree] (debug>router>l2tp>group>packet dhcp-client)

Full Context

debug router l2tp peer packet dhcp-client

debug router l2tp assignment-id packet dhcp-client

debug router l2tp packet dhcp-client

debug router l2tp group packet dhcp-client

Description

This command enables debugging for DHCP client packet.

The no form of this command disables debugging for DHCP client packet.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>service>id>ppp>event dhcp-client)

Full Context

debug service id ppp event dhcp-client

Description

This command enable PPP event debug for DHCP client.

The no form of this command disables PPP event debugging for the DHCP client.

Parameters

terminate-only

Enables debug for local terminated PPP session.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>service>id>ppp>packet dhcp-client)

Full Context

debug service id ppp packet dhcp-client

Description

This command enables debugging for specific DHCP client packets.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if>grp-if>pppoe dhcp-client)

[Tree] (config>service>ies>sub-if>grp-if>pppoe dhcp-client)

Full Context

configure service vprn subscriber-interface group-interface pppoe dhcp-client

configure service ies subscriber-interface group-interface pppoe dhcp-client

Description

Commands in this context configure the PPPoE-to-DHCP options.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>filter dhcp-filter)

Full Context

configure filter dhcp-filter

Description

Commands in this context create and configure the specified DHCP filter policy.

Parameters

filter-id

Specifies the DHCP filter policy ID expressed as a decimal integer.

Values

1 to 65535

create

Keyword required to create the configuration context.

Platforms

All

Context

[Tree] (config>system>persistence>options dhcp-leasetime-threshold)

Full Context

configure system persistence options dhcp-leasetime-threshold

Description

This command configures Dynamic Data Persistence (DDP) compact flash access optimization for DHCP leases.

The DHCP lease-time threshold controls the eligibility of a DHCP lease for persistency updates when no data other than the lease expiry time is to be updated. When the offered lease time of the DHCP lease is less than the configured threshold, the lease is flagged to skip persistency updates and will be installed with its full lease time upon a persistency recovery after a reboot.

The dhcp-leasetime-threshold command controls persistency updates for DHCPv4 and DHCPv6 leases for a DHCP relay or proxy and DHCPv4 leases for DHCP snooping (enabled with subscriber-mgmt) and a DHCP server (enabled with dhcp-server).

The no form of the command disables the DHCP lease time threshold.

Default

no dhcp-leasetime-threshold

Parameters

days

Specifies the threshold in days.

Values

0 to 7305

hours

Specifies the threshold in hours.

Values

0 to 23

minutes

Specifies the threshold in minutes.

Values

0 to 59

seconds

Specifies the threshold in seconds.

Values

0 to 59

Platforms

All

Context

[Tree] (config>redundancy>multi-chassis>options>sub-mgmt dhcp-leasetime-threshold)

Full Context

configure redundancy multi-chassis options sub-mgmt dhcp-leasetime-threshold

Description

This command configures the DHCP lease time threshold to be eligible for MCS synchronization.

DHCP leases for the sub-mgmt MCS applications are eligible to skip synchronization if the committed lease time is less than the active threshold on a multi-chassis peer. The active threshold is the minimum value of the thresholds configured on the nodes at each end of a multi-chassis peer. The threshold is inactive when it is unconfigured on at least one end of the multi-chassis peer.

The no form of the command disables the DHCP lease time threshold.

Default

no dhcp-leasetime-threshold

No threshold is active and all sub-mgmt DHCP leases are synchronized.

Parameters

days

Specifies the threshold in days.

Values

0 to 1

hours

Specifies the threshold in hours.

Values

0 to 23

minutes

Specifies the threshold in minutes.

Values

0 to 59

seconds

Specifies the threshold in seconds.

Values

0 to 59

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>auth-plcy>include-radius-attribute dhcp-options)

Full Context

configure subscriber-mgmt authentication-policy include-radius-attribute dhcp-options

Description

This command enables insertion of RADIUS VSA containing all DHCP options from DHCP discover (or DHCP request) message. The VSA contains all DHCP options in a form of the string. If required (the total length of all DHCP options exceeds 255B), multiple VSAs are included.

The no form of this command reverts to the default.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes dhcp-options)

[Tree] (config>aaa>isa-radius-plcy>auth-include-attributes dhcp-options)

Full Context

configure aaa isa-radius-policy acct-include-attributes dhcp-options

configure aaa isa-radius-policy auth-include-attributes dhcp-options

Description

This command enables insertion of RADIUS VSA containing all dhcp-options from dhcp-discover (or dhcp-request) message. The VSA contains all dhcp-options in a form of the string. If required (the total length of all dhcp-options exceeds 255B), multiple VSAs are included.

Default

no dhcp-options

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>vrgw>brg>brg-profile dhcp-pool)

Full Context

configure subscriber-mgmt vrgw brg brg-profile dhcp-pool

Description

Commands in this context configure per-subscriber IPv4 address pool parameters to be used for address allocation. Pools for different subscribers can overlap. Specific pool parameters can be overridden by RADIUS.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>sap dhcp-python-policy)

Full Context

configure service vpls sap dhcp-python-policy

Description

This command specifies the name of the Python policy. The Python policy is created in the config>python>python-policy name context.

The no form of this command reverts to the default.

Parameters

policy-name

Specifies a Python policy name, up to 32 characters.

Platforms

All

Context

[Tree] (config>system>persistence dhcp-server)

Full Context

configure system persistence dhcp-server

Description

This command configures DHCP server persistence parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>wlan-gw>ue-query>state dhcp-triggered)

Full Context

configure subscriber-mgmt wlan-gw ue-query state dhcp-triggered

Description

This command enables matching on UEs currently in a DHCP-triggered state. This query only filters UEs that are currently authenticating due to a DHCP, DHCPv6, or RS trigger, not RADIUS-authenticated UEs in an ESM, DSM, or portal state that were originally authenticated due to a DHCP, DHCPv6, or RS trigger.

The no form of this command disables matching on UEs in a DHCP-triggered state, unless all state matching is disabled.

Default

no dhcp-triggered

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>sap dhcp-user-db)

Full Context

configure service vpls sap dhcp-user-db

Description

This command enabled access to LUDB for DHCPv4 hosts under the capture SAP. The name of this local user database must match the name of local user database configured under the config>service>vprn/ies>sub-if>group-if>dhcp context.

Parameters

local-user-db

Specifies the name of the local user database name up to 32 characters.

Platforms

All

Context

[Tree] (config>subscr-mgmt>auth-plcy>include-radius-attribute dhcp-vendor-class-id)

[Tree] (config>subscr-mgmt>acct-plcy>include-radius-attribute dhcp-vendor-class-id)

Full Context

configure subscriber-mgmt authentication-policy include-radius-attribute dhcp-vendor-class-id

configure subscriber-mgmt radius-accounting-policy include-radius-attribute dhcp-vendor-class-id

Description

This command includes the [26-6527-36] Alc-DHCP-Vendor-Class-Id attribute in authentication or RADIUS accounting messages. The content of the DHCP Vendor-Class-Identifier option (60) is mapped in this attribute.

The no form of this command reverts to the default.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes dhcp-vendor-class-id)

[Tree] (config>aaa>isa-radius-plcy>auth-include-attributes dhcp-vendor-class-id)

Full Context

configure aaa isa-radius-policy acct-include-attributes dhcp-vendor-class-id

configure aaa isa-radius-policy auth-include-attributes dhcp-vendor-class-id

Description

This command includes the "[26-6527-36] Alc-DHCP-Vendor-Class-Id” attribute in authentication or RADIUS accounting messages. The content of the DHCP Vendor-Class-Identifier option (60) is mapped in this attribute.

Default

no dhcp-vendor-class-id

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>interface dhcp6)

[Tree] (config>service>vpls>mesh-sdp dhcp6)

[Tree] (config>service>vprn>sub-if>grp-if>ipv6 dhcp6)

[Tree] (config>service>ies>if dhcp6)

[Tree] (config>service>vprn dhcp6)

[Tree] (config>service>vprn>sub-if>grp-if dhcp6)

[Tree] (config>service>vpls>sap dhcp6)

[Tree] (config>service>ies>sub-if>grp-if dhcp6)

[Tree] (config>service>ies>sub-if>grp-if>ipv6 dhcp6)

[Tree] (config>service>ies>sub-if dhcp6)

[Tree] (config>service>vprn>sub-if dhcp6)

[Tree] (config>service>vpls>spoke-sdp dhcp6)

Full Context

configure service vprn interface dhcp6

configure service vpls mesh-sdp dhcp6

configure service vprn subscriber-interface group-interface ipv6 dhcp6

configure service ies interface dhcp6

configure service vprn dhcp6

configure service vprn subscriber-interface group-interface dhcp6

configure service vpls sap dhcp6

configure service ies subscriber-interface group-interface dhcp6

configure service ies subscriber-interface group-interface ipv6 dhcp6

configure service ies subscriber-interface dhcp6

configure service vprn subscriber-interface dhcp6

configure service vpls spoke-sdp dhcp6

Description

Commands in this context configure DHCPv6 parameters.

Platforms

All

• configure service ies interface dhcp6
• configure service vpls spoke-sdp dhcp6
• configure service vprn interface dhcp6
• configure service vpls sap dhcp6
• configure service vpls mesh-sdp dhcp6

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn subscriber-interface dhcp6
• configure service ies subscriber-interface dhcp6
• configure service vprn subscriber-interface group-interface ipv6 dhcp6
• configure service vprn subscriber-interface group-interface dhcp6
• configure service ies subscriber-interface group-interface ipv6 dhcp6
• configure service vprn dhcp6
• configure service ies subscriber-interface group-interface dhcp6

Context

[Tree] (config>system dhcp6)

Full Context

configure system dhcp6

Description

Commands in this context configure system-wide DHCPv6 parameters.

Platforms

All

Context

[Tree] (debug>router>ip dhcp6)

Full Context

debug router ip dhcp6

Description

This command enables DHCPv6 debugging with optional interface, SAP, and client-identifier match criteria to filter the debug output.

The no form of this command disables debugging.

Parameters

ip-int-name

Specifies the name of an existing IP interface, up to 32 characters. Up to four DHCPv6 interface match criteria can be specified per routing instance.

client-identifier

Specifies a client identifier option match criteria.

duid duid-hex-string

Specifies a hexadecimal value for an opaque match on the client DUID in the client identifier option. When the actual length of the client DUID is longer than the length of the specified hex-string, only the left most octets are matched. Up to four DHCPv6 client-identifier match criteria can be specified per routing instance.

Values

0x0 to 0xFFFFFFFF (maximum 260 hex nibbles)

mask mask-hex-string

Specifies an optional substring match criteria. When a mask is specified, both hex-string lengths must be equal.

Values

0x0 to 0xFFFFFFFF (maximum 260 hex nibbles)

link-layer-address lla-hex-string

Specifies a hexadecimal value for a link layer address field match of a type 1 (DUID-LLT) or type 3 (DUID-LL) client DUID in the client identifier option. When the actual length of the link layer address field is longer than the length of the specified hex-string, only the left most octets are matched. Up to four DHCPv6 client-identifier match criteria can be specified per routing instance.

Values

0x0 to 0xFFFFFFFF (maximum 252 hex nibbles)

sap-id

Specifies an existing SAP identifier. Up to four DHCPv6 SAP match criteria can be specified per routing instance.

Platforms

All

Context

[Tree] (config>python>py-policy dhcp6)

Full Context

configure python python-policy dhcp6

Description

This command specifies the Python script for the specified DHCPv6 packet type in the specified direction.

Multiple dhcps command configurations are allowed in the same Python policy.

The no form of this command reverts to the default.

Parameters

type

Specifies the message type of the event.

Values

solicit, advertise, request, confirm, renew, rebind, reply, release, decline, reconfigure, info-request, relay-forward, relay-reply

direction {ingress | egress}

Specifies whether the event is incoming or outgoing.

script

Specifies the name of the Python script, up to 32 characters, that will be used to handle the specified message.

Platforms

All

Context

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range dhcp6)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range dhcp6)

Full Context

configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range dhcp6

configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range dhcp6

Description

Commands in this context create DHCPv6 configuration for WLAN-GW ISA subscribers.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>if>sap>ipsec-gw dhcp6)

[Tree] (config>service>ies>if>sap>ipsec-gw dhcp6)

Full Context

configure service vprn interface sap ipsec-gw dhcp6

configure service ies interface sap ipsec-gw dhcp6

Description

Commands in this context configure DHCPv6-based address assignment for IKEv2 remote-access tunnels.

The system acts as a DHCPv6 client on behalf of the IPsec client, and also acts as a relay agent to relay DHCPv6 packets to the DHCPv6 server.

DHCPv6 exchange happens during IKEv2 remote-access tunnel setup. The system also supports standard renew.

Default

no dhcp6

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>wlan-gw>ue-query dhcp6-address)

Full Context

configure subscriber-mgmt wlan-gw ue-query dhcp6-address

Description

This command enables matching on UEs with the specified DHCPv6 IA-NA address.

The no form of this command disables matching on the IA-NA address.

Default

no dhcp6-address

Parameters

ipv6-address

Specifies the IA-NA address.

Values

ipv6-address	x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x: [0 to FFFF]H
	d: [0 to 255]D

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>filter dhcp6-filter)

Full Context

configure filter dhcp6-filter

Description

Commands in this context create and configure the specified DHCPv6 filter policy.

The no form of this command reverts to the default.

Parameters

filter-id

Specifies the DHCPv6 filter policy ID expressed as a decimal integer.

Values

1 to 65535

create

Keyword required to create the configuration context.

Platforms

All

Context

[Tree] (config>subscr-mgmt>auth-plcy>include dhcp6-options)

Full Context

configure subscriber-mgmt authentication-policy include-radius-attribute dhcp6-options

Description

This command copies DHCPv6 options from received DHCPv6 messages on ingress access and pass them to the RADIUS server in Accept-Request. The messages is carried in the RADIUS VSA Alc-ToServer-Dhcp6-Options.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes dhcp6-options)

Full Context

configure aaa isa-radius-policy acct-include-attributes dhcp6-options

Description

If a DHCPv6 stack is active for a UE, this attribute defines if options received in the last DHCPv6 message should be reflected.

Default

no dhcp6-options

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>aaa>isa-radius-plcy>auth-include-attributes dhcp6-options)

Full Context

configure aaa isa-radius-policy auth-include-attributes dhcp6-options

Description

If authentication was triggered by DHCPv6, this knob defines if options received in that DHCPv6 message should be reflected in the radius Access-Request.

Default

no dhcp6-options

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>sap dhcp6-python-policy)

Full Context

configure service vpls sap dhcp6-python-policy

Description

This command specified the Python policy for DHCPv6 packets sent/received on the capture SAP.

The no form of this command removes the policy name from the configuration.

Parameters

policy name

Specifies an existing Python policy name, up to 256 characters.

Platforms

All

Context

[Tree] (config>service>ies>if>ipv6 dhcp6-relay)

[Tree] (config>service>vprn>if>ipv6 dhcp6-relay)

Full Context

configure service ies interface ipv6 dhcp6-relay

configure service vprn interface ipv6 dhcp6-relay

Description

Commands in this context configure DHCPv6 relay parameters for the interface.

The no form of this command disables DHCPv6 relay.

Platforms

All

Context

[Tree] (config>service>ies>if>ipv6 dhcp6-server)

[Tree] (config>service>vprn>if>ipv6 dhcp6-server)

Full Context

configure service ies interface ipv6 dhcp6-server

configure service vprn interface ipv6 dhcp6-server

Description

Commands in this context configure DHCPv6 server parameters for the interface.

The no form of this command disables the DHCP6 server.

Platforms

All

Context

[Tree] (config>service>vpls>sap dhcp6-user-db)

Full Context

configure service vpls sap dhcp6-user-db

Description

This command enabled access to LUDB for DHCPv6 hosts under the capture SAP. The name of this LUDB must match the name of the LUDB configured under the config>service>vprn/ies>sub-if>grp-if>dhcp hierarchy.

The no form of this command reverts to the default.

Parameters

local-user-db

Specifies the name of the local-user-database, up to 32 characters.

Platforms

All

Context

[Tree] (config>router>subscriber-mgmt dhcpv4)

[Tree] (config>service>vprn>subscriber-mgmt dhcpv4)

Full Context

configure router subscriber-mgmt dhcpv4

configure service vprn subscriber-mgmt dhcpv4

Description

Commands in this context configure DHCPv4 parameters that apply to this routing instance.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>sub-if>wlan-gw>pool-manager>dhcp6-client dhcpv4-nat)

[Tree] (config>service>vprn>sub-if>wlan-gw>pool-manager>dhcp6-client dhcpv4-nat)

Full Context

configure service ies subscriber-interface wlan-gw pool-manager dhcpv6-client dhcpv4-nat

configure service vprn subscriber-interface wlan-gw pool-manager dhcpv6-client dhcpv4-nat

Description

This node enables address pools for DHCPv4 NAT inside addresses. This configuration is only available in wholesale interfaces.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if>wlan-gw>pool-manager dhcpv6-client)

[Tree] (config>service>ies>sub-if>wlan-gw>pool-manager dhcpv6-client)

Full Context

configure service vprn subscriber-interface wlan-gw pool-manager dhcpv6-client

configure service ies subscriber-interface wlan-gw pool-manager dhcpv6-client

Description

This command configures the DHCPv6 client for the pool manager.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>python>py-policy diameter)

Full Context

configure python python-policy diameter

Description

This command specifies the Python script to use for the specified Diameter message type in the specified direction.

Multiple diameter command configurations are allowed in the same Python policy.

The no form of this command reverts to the default.

Parameters

type

Specifies the message type.

Message type	Application	Direction
aaa – AA Answer	Nasreq	ingress
aar – AA Request	Nasreq	egress
asa – Abort Session Answer	Gx, Gy	egress
asr – Abort Session Request	Gx, Gy	ingress
cca – Credit Control Answer	Gx, Gy	ingress
ccr – Credit Control Request	Gx, Gy	egress
cea – Capabilities Exchange Answer	Base	ingress
cer – Capabilities Exchange Request	Base	egress
dpa – Disconnect Peer Answer	Base	ingress/egress
dpr – Disconnect Peer Request	Base	ingress/egress
dwa – Device Watchdog Answer	Base	ingress/egress
dwr – Device Watchdog Request	Base	ingress/egress
raa – Re-Authentication Answer	Gx, Gy	egress
rar – Re-Authentication Request	Gx, Gy	ingress

direction {ingress | egress}

Specifies if the message is incoming or outgoing.

script

Specifies the name of the Python script, up to 32 characters, that is used to handle the specified message.

Platforms

All

Context

[Tree] (config>aaa diameter)

Full Context

configure aaa diameter

Description

Commands in this context configure Diameter parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug diameter)

Full Context

debug diameter

Description

This command enables debugging for diameter.

The no form of this command disables debugging.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>transit-ip diameter)

Full Context

configure application-assurance group transit-ip-policy diameter

Description

Commands in this context configure dynamic Diameter-based management of transit AA subs for the transit IP policy. This is mutually exclusive to other types of management of transit subs for a given transit IP policy.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>sub-if>grp-if diameter-application-policy)

[Tree] (config>service>vpls>sap diameter-application-policy)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host diameter-application-policy)

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host diameter-application-policy)

[Tree] (config>service>vprn>sub-if>grp-if diameter-application-policy)

Full Context

configure service ies subscriber-interface group-interface diameter-application-policy

configure service vpls sap diameter-application-policy

configure subscriber-mgmt local-user-db ipoe host diameter-application-policy

configure subscriber-mgmt local-user-db ppp host diameter-application-policy

configure service vprn subscriber-interface group-interface diameter-application-policy

Description

This command applies the diameter-application-policy to the processing of the host attachment requests.

The no form of this command reverts to the default value.

Parameters

policy-name

Specifies the name of the diameter policy, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure subscriber-mgmt local-user-db ipoe host diameter-application-policy
• configure subscriber-mgmt local-user-db ppp host diameter-application-policy
• configure service vprn subscriber-interface group-interface diameter-application-policy
• configure service ies subscriber-interface group-interface diameter-application-policy

All

• configure service vpls sap diameter-application-policy

Context

[Tree] (config>subscr-mgmt diameter-application-policy)

Full Context

configure subscriber-mgmt diameter-application-policy

Description

Commands in this context create and configure diameter application policy.

The no form of this command reverts to the default.

Parameters

application-policy-name

Specifies the name of the diameter policy, up to 32 characters.

create

Specifies the keyword used to create a diameter application policy. The create keyword requirement can be enabled or disabled in the environment>create context.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host diameter-auth-policy)

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host diameter-auth-policy)

Full Context

configure subscriber-mgmt local-user-db ipoe host diameter-auth-policy

configure subscriber-mgmt local-user-db ppp host diameter-auth-policy

Description

This command is used to configure the Diameter NASREQ application policy to use for authentication.

The no form of this command reverts to the default.

Parameters

name

Specifies the name of the Diameter NASREQ application policy, up to 32 characters, to use for authentication.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>gtp>apn-policy>apn diameter-auth-policy)

Full Context

configure subscriber-mgmt gtp apn-policy apn diameter-auth-policy

Description

This command configures the Diameter authentication policy with which the GTP connection is authenticated.

The no form of this command removes the authentication policy. Only new session setups are affected.

Default

no diameter-auth-policy

Parameters

diameter-authentication-policy-name

Specifies the name of the authentication policy to be used, up to 32 characters.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>sap diameter-auth-policy)

Full Context

configure service vpls sap diameter-auth-policy

Description

This command is used to configure the Diameter NASREQ application policy to use for authentication.

The no form of this command reverts to the default value.

Parameters

name

Specifies the name of the Diameter NASREQ application policy, up to 32 characters, to use for authentication.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if>grp-if diameter-auth-policy)

[Tree] (config>service>ies>sub-if>grp-if diameter-auth-policy)

Full Context

configure service vprn subscriber-interface group-interface diameter-auth-policy

configure service ies subscriber-interface group-interface diameter-auth-policy

Description

This command is used to configure the Diameter NASREQ application policy to use for authentication.

The no form of this command reverts to the default.

Parameters

name

Specifies the name of the Diameter NASREQ application policy, up to 32 characters, to use for authentication.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>diam-appl-plcy diameter-node)

Full Context

configure subscriber-mgmt diameter-application-policy diameter-node

Description

This command configures the Diameter node for this Diameter application policy.

Parameters

origin-host-string

Specifies the Origin-Host AVP used by this Diameter policy, up to 80 characters.

destination-realm-string

Specifies the Destination-Realm AVP used by this Diameter policy peer, up to 80 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>rsvp diffserv-te)

Full Context

configure router rsvp diffserv-te

Description

This command enables Diff-Serv TE on the node.

When this command is enabled, IS-IS and OSPF starts advertising available bandwidth for each TE class configured under the diffserv-te node. This command only takes effect if the operator has already enabled TE at the IS-IS, OSPF, or both routing protocol levels:

configure router isis traffic-engineering

and/or:

configure router ospf traffic-engineering

IGP advertises for each RSVP interface in the system the available bandwidth in each TE class in the unreserved bandwidth TE parameter for that class. In addition, IGP continues to advertise the existing Maximum Reservable Link Bandwidth TE parameter to mean the maximum bandwidth that can be booked on a given interface by all classes. The value advertised is adjusted with the link subscription percentage factor configured in the configure router rsvp interface context.

The user configures the following parameters for the operation of Diff-Serv:

• Definition of TE classes, TE Class = {Class Type (CT), LSP priority}.

• Mapping of the system forwarding classes to the Diff-Serv Class Type (CT).

• Configuration of the percentage of RSVP interface bandwidth each CT shares, that is, the Bandwidth Constraint (BC).

When Diff-Serv TE is enabled, the system automatically enables the Max Allocation Model (MAM) Admission Control Policy. MAM represents the bandwidth constraint model for the admission control of an LSP reservation to a link.

Each CT shares a percentage of the Maximum Reservable Link Bandwidth through the user-configured Bandwidth Constraint (BC) for this CT. The Maximum Reservable Link Bandwidth is the link bandwidth multiplied by the RSVP interface subscription factor.

The sum of all BC values across all CTs does not exceed the Maximum Reservable Link Bandwidth. In other words, the following rule is enforced:

SUM (BCc) =< Max-Reservable-Bandwidth, 0 <= c <= 7

An LSP of class-type CTc, setup priority p, holding priority h (h=<p), and bandwidth B is admitted into a link if the following condition is satisfied:

B <= Unreserved Bandwidth for TE-Class[i]

where TE-Class [i] maps to < CTc , p > in the definition of the TE classes on the node. The bandwidth reservation is effected at the holding priority, that is, in TE-class [j] = <CTc, h>. Thus, the reserved bandwidth for CTc and the unreserved bandwidth for the TE classes using CTc are updated as follows:

Reserved(CTc) = Reserved(CTc) + B

Unreserved TE-Class [j] = BCc - SUM (Reserved(CTc,q)) for 0<= q <= h

Unreserved TE-Class [i] = BCc - SUM (Reserved(CTc,q)) for 0<= q <= p

The same is done to update the unreserved bandwidth for any other TE class making use of the same CTc. These new values are advertised to the rest of the network at the next IGP-TE flooding.

The Russian Doll Model (RDM) LSP admission control policy allows bandwidth sharing across Class Types. It provides a hierarchical model by which the reserved bandwidth of a CT is the sum of the reserved bandwidths of the numerically equal and higher CTs.

The RDM model is defined using the following equations:

SUM (Reserved (CTc)) <= BCb,

where the SUM is across all values of c in the range b <= c <= (MaxCT - 1), and BCb is the bandwidth constraint of CTb.

BC0= Max-Reservable-Bandwidth, so that

SUM (Reserved(CTc)) <= Max-Reservable-Bandwidth,

where the SUM is across all values of c in the range 0 <= c <= (MaxCT - 1).

When Diff-Serv is disabled on the node, this model degenerates into a single default CT internally with eight preemption priorities and a non-configurable BC equal to the Maximum Reservable Link Bandwidth. This would behave exactly like CT0 with eight preemption priorities and BC= Maximum Reservable Link Bandwidth if Diff-Serv was enabled.

The enabling or disabling of Diff-Serv TE on the system requires the RSVP and MPLS protocol be shutdown.

The no form of this command reverts to the default value.

Default

no diffserv-te

Parameters

mam

Defines the default admission control policy for Diff-Serv LSPs.

rdm

Defines Russian doll model for the admission control policy of Diff-Serv LSPs.

Platforms

All

Context

[Tree] (config>service>vprn>l2tp>l2tpv3 digest-type)

[Tree] (config>service>vprn>l2tp>group>l2tpv3 digest-type)

Full Context

configure service vprn l2tp l2tpv3 digest-type

configure service vprn l2tp group l2tpv3 digest-type

Description

This command configures the hashing algorithm used to calculate the message digest.

The no form of this command returns the digest-type to none.

Default

no digest-type

Parameters

none

Specifies that no digest should be used.

md5

Specifies that the MD5 algorithm should be used.

sha1

Specifies that the SHA1 algorithm should be used.

default

When specified within the config>service>vprn>l2tp>group>l2tpv3 context, this is referencing to the digest-type configuration within the config>service>vprn>l2tp>l2tpv3 context.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>port>transceiver digital-coherent-optics)

Full Context

configure port transceiver digital-coherent-optics

Description

This command specifies if a digital coherent optics module is used for this port.

The no form of this command specifies that the optical module used in this port is not a digital coherent optics module.

Default

no digital-coherent-optics

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (file dir)

Full Context

file dir

Description

This command displays a list of files and subdirectories in a directory.

Parameters

file-url

Specifies the path or directory name.

Use the file-url with the optional wildcard (*) to reduce the number of files to list.

sort-order {d | n | s}

Specifies the sort order.

Values

d — date

n — name

s — size

reverse

Reverses the sort order.

Default

Lists all files in the current working directory.

local-url	[cflash-id/][file-path] up to 200 characters, including cflash-id directory length up to 99 each
remote-url	[{ftp:// | tftp://}login:pswd@remote-locn/][file-path]
	up to 247 characters
	directory length up to 99 characters each
remote-locn	[hostname | ipv4-address | [ipv6-address]]
ipv4-address	a.b.c.d
ipv6-address	x:x:x:x:x:x:x:x[-interface]
	x:x:x:x:x:x:d.d.d.d[-interface]
	x - [0 to FFFF]H
	d - [0 to 255]D
	interface - up to 32 characters, for link local addresses 255
cflash-id	cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:

Platforms

All

Output

The following output is an example of directory information.

A:cses-E12>file cf3:\ # dir
  - dir [<file-url>] [sort-order { d | n | s}] [reverse]
 
 <file-url>           : <local-url> | <remote-url>
                        local-url      - [<cflash-id>/][<file-path>]
                                         200 chars max, including cflash-id
                                         directory length 99 chars max each
                        remote-url     - [ftp://<login>:<pswd>@<remote-locn>/
                                         ][<file-path>]
                                         255 chars max
                                         directory length 99 chars max each
                        remote-locn    - [ <hostname> | <ipv4-address> |
                                         [<ipv6-address>]]
                        ipv4-address   - a.b.c.d
                        ipv6-address   - x:x:x:x:x:x:x:x[-interface]
                                         x:x:x:x:x:x:d.d.d.d[-interface]
                                         x - [0..FFFF]H
                                         d - [0..255]D
                                         interface - 32 chars max, for link
                                         local addresses
                        cflash-id      - cf1:|cf1-A:|cf1-B:|cf2:|cf2-A:|
                                         cf2-B:|cf3:|cf3-A:|cf3-B:
 < d | n | s>         : Sort order: d - date, n - name, s - size
 <reverse>            : keyword - reverse order
A:cses-E12>file cf3:\ # dir

Context

[Tree] (debug>router>l2tp>group>packet direction)

[Tree] (debug>router>l2tp>peer>packet direction)

[Tree] (debug>router>l2tp>packet direction)

[Tree] (debug>router>l2tp>assignment-id>packet direction)

Full Context

debug router l2tp group packet direction

debug router l2tp peer packet direction

debug router l2tp packet direction

debug router l2tp assignment-id packet direction

Description

This command enables debugging for packet direction.

Parameters

direction

Specifies the packet direction.

Values

ingress, egress, both

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>subscr-mgmt>vrgw>brg>pppoe-client>brg-id direction)

Full Context

debug subscriber-mgmt vrgw brg pppoe-client brg-id direction

Description

This command specifies if debugging should only include ingress, egress or all messages.

Default

direction both

Parameters

ingress

Specifies that debugging only includes ingress messages.

egress

Specifies that debugging only includes egress messages.

both

Specifies that debugging includes both ingress and egress messages.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>ipsec>static-sa direction)

Full Context

configure ipsec static-sa direction

Description

This command configures the direction for an IPsec manual SA.

The no form of this command reverts to the default value.

Default

direction bidirectional

Parameters

ipsec-direction

Identifies the direction to which this static SA entry can be applied.

Values

inbound, outbound, bidirectional

Platforms

All

Context

[Tree] (debug>router>pcp>pcp-server>packet direction)

Full Context

debug router pcp pcp-server packet direction

Description

This command enables debugging for packet direction.

Parameters

direction

Specifies the packet direction.

Values

ingress, egress, both

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>system>security>keychain direction)

Full Context

configure system security keychain direction

Description

This command specifies the data type that indicates the TCP stream direction to apply the keychain.

Platforms

All

Context

[Tree] (config>mirror>mirror-dest>encap>layer-3-encap direction-bit)

Full Context

configure mirror mirror-dest encap layer-3-encap direction-bit

Description

This command is used to steal one bit from the intercept-id in the LI-Shim and use it to indicate the direction of traffic flow for an LI session. Using a direction bit may be used by a LI Mediation Gateway to distinguish between the two directions of traffic flow for an LI session when both directions share a common mirror-dest, intercept-id and session-id. If the direction bit is enabled then the Mirror Header Version (2 bit mhv) in the LI-Shim will be set to binary 01, and the next bit after the mhv is set to 0 for ingress traffic and 1 for egress traffic.

For NAT based LI, ingress means the traffic is arriving at the node from the subscriber host (applies to the 7450 ESS and 7750 SR).

No changes are allowed to the direction-bit configuration once a gateway is configured.

Platforms

All

Context

[Tree] (config>li>mirror-dest-template>layer-3-encap direction-bit)

Full Context

configure li mirror-dest-template layer-3-encap direction-bit

Description

This command enables and disables the use of one bit from the interception ID field in the LI-Shim header to be used to indicate the direction of mirrored traffic flow for an LI session. An LI Mediation Gateway can use a direction bit to distinguish between the two directions of traffic flow for an LI session when both directions share a common mirror destination, interception ID, and session ID. If the direction bit is enabled, the Mirror Header Version (2-bit MHV) in the LI-Shim header will be set to binary 01, and the next bit after the MHV is set to 0 for ingress traffic and 1 for egress traffic.

For NAT-based LI, ingress traffic arrives at the node from the subscriber host. No changes are allowed to the direction bit configuration after a gateway is configured.

The no form of this command disables the use of the bit as a direction indicator.

Platforms

All

Context

[Tree] (config>call-trace>location disable)

Full Context

configure call-trace location disable

Description

When configured, the specified compact flash will not be used by call-trace. The no form of this command enables the compact flash for use by call-trace.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>bgp-prng-plcy disable-4byte-asn)

Full Context

configure subscriber-mgmt bgp-peering-policy disable-4byte-asn

Description

This command disables the use of 4-byte ASNs. It can be configured at all 3 level of the hierarchy so it can be specified down to the per peer basis.

If this command is enabled 4-byte ASN support should not be negotiated with the associated remote peer.

The no form of this command resets the behavior to the default which is to enable the use of 4-byte ASN.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>bgp disable-4byte-asn)

[Tree] (config>service>vprn>bgp>group disable-4byte-asn)

[Tree] (config>service>vprn>bgp>group>neighbor disable-4byte-asn)

Full Context

configure service vprn bgp disable-4byte-asn

configure service vprn bgp group disable-4byte-asn

configure service vprn bgp group neighbor disable-4byte-asn

Description

This command disables the use of 4-byte ASNs. It can be configured at all 3 level of the hierarchy so it can be specified down to the per peer basis.

If this command is enabled 4-byte ASN support should not be negotiated with the associated remote peer(s).

The no form of this command resets the behavior to the default which is to enable the use of 4-byte ASN.

Platforms

All

Context

[Tree] (config>router>bgp disable-4byte-asn)

[Tree] (config>router>bgp>group>neighbor disable-4byte-asn)

[Tree] (config>router>bgp>group disable-4byte-asn)

Full Context

configure router bgp disable-4byte-asn

configure router bgp group neighbor disable-4byte-asn

configure router bgp group disable-4byte-asn

Description

This command disables the support of 4-byte ASNs. It can be configured at all three levels of the hierarchy so it can be specified down to the per-peer basis.

If this command is enabled, 4-byte ASN support should not be negotiated with the associated remote peers.

The no form of this command resets the behavior to the default which is to enable the support of 4-byte ASN.

Default

no disable-4byte-asn

Platforms

All

Context

[Tree] (config>service>vpls>vxlan disable-aging)

[Tree] (config>service>vpls>sap disable-aging)

[Tree] (config>service>vpls disable-aging)

[Tree] (config>service>template>vpls-template disable-aging)

[Tree] (config>service>vpls>spoke-sdp disable-aging)

Full Context

configure service vpls vxlan disable-aging

configure service vpls sap disable-aging

configure service vpls disable-aging

configure service template vpls-template disable-aging

configure service vpls spoke-sdp disable-aging

Description

This command disables MAC address aging across a VPLS service, on a VPLS service SAP or spoke-SDP, or VXLAN instance with static binds. Learned MACs can be aged out if no packets are sourced from the MAC address for a period of time (aging time). In each VPLS service instance, there are independent aging timers for local learned MAC and remote learned MAC entries in the VPLS forwarding database (FDB).

The disable-aging command turns off aging for local and remote learned MAC addresses. When no disable-aging is specified for a VPLS, aging can be disabled for specific SAPs, spoke-SDPs, and VXLAN instances (or any combination) by entering the disable-aging command at the appropriate level.

When the disable-aging command is entered at the VPLS level, the aging state of individual SAPs or SDPs or VXLAN instance is ignored.

The no form of this command enables aging on the VPLS service.

Default

no disable-aging

Except for VXLAN instances, where the disable-aging is the default mode

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

• configure service vpls vxlan disable-aging

All

• configure service vpls spoke-sdp disable-aging
• configure service vpls sap disable-aging
• configure service vpls disable-aging
• configure service template vpls-template disable-aging

Context

[Tree] (config>service>pw-template disable-aging)

Full Context

configure service pw-template disable-aging

Description

This command disables MAC address aging across a service.

The no form of this command enables aging.

Default

no disable-aging

Platforms

All

Context

[Tree] (config>service>vprn>bgp>group>neighbor disable-capability-negotiation)

[Tree] (config>service>vprn>bgp>group disable-capability-negotiation)

Full Context

configure service vprn bgp group neighbor disable-capability-negotiation

configure service vprn bgp group disable-capability-negotiation

Description

This command disables the exchange of capabilities. When command is enabled and after the peering is flapped, any new capabilities are not negotiated and strictly supports IPv4 routing exchanges with that peer.

The no form of this command removes this command from the configuration and restores the normal behavior.

Default

no disable-capability-negotiation

Platforms

All

Context

[Tree] (config>router>bgp>group disable-capability-negotiation)

[Tree] (config>router>bgp>group>neighbor disable-capability-negotiation)

Full Context

configure router bgp group disable-capability-negotiation

configure router bgp group neighbor disable-capability-negotiation

Description

This command disables capability negotiation. When the command is enabled and after the peering is flapped, any new capabilities are not negotiated and will strictly support IPv4 routing exchanges with that peer.

The no form of this command removes this command from the configuration and restores the normal behavior.

Default

no disable-capability-negotiation

Platforms

All

Context

[Tree] (config>subscr-mgmt>bgp-prng-plcy disable-client-reflect)

Full Context

configure subscriber-mgmt bgp-peering-policy disable-client-reflect

Description

This command disables the reflection of routes by the route reflector to the group or neighbor. This only disables the reflection of routes from other client peers. Routes learned from non-client peers are still reflected to all clients.

The no form re-enables client reflection of routes to all client peers.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>bgp>group>neighbor disable-client-reflect)

[Tree] (config>service>vprn>bgp disable-client-reflect)

[Tree] (config>service>vprn>bgp>group disable-client-reflect)

Full Context

configure service vprn bgp group neighbor disable-client-reflect

configure service vprn bgp disable-client-reflect

configure service vprn bgp group disable-client-reflect

Description

This command disables the reflection of routes by the route reflector to the group or neighbor. This only disables the reflection of routes from other client peers. Routes learned from non-client peers are still reflected to all clients.

The no form re-enables client reflection of routes.

Default

no disable-client-reflect

Platforms

All

Context

[Tree] (config>router>bgp>group>neighbor disable-client-reflect)

[Tree] (config>router>bgp disable-client-reflect)

[Tree] (config>router>bgp>group disable-client-reflect)

Full Context

configure router bgp group neighbor disable-client-reflect

configure router bgp disable-client-reflect

configure router bgp group disable-client-reflect

Description

This command determines whether routes received from neighbors considered to be RR clients are reflected to other clients.

The no form enables client reflection of routes.

Default

no disable-client-reflect

Platforms

All

Context

[Tree] (config>subscr-mgmt>bgp-prng-plcy disable-communities)

Full Context

configure subscriber-mgmt bgp-peering-policy disable-communities

Description

This command configures BGP to disable sending communities.

The no form of this command reverts to the default.

Parameters

standard

Specifies standard communities that existed before VPRNs or 2547.

extended

Specifies BGP communities used were expanded after the concept of 2547 was introduced, to include handling the VRF target.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>bgp>group>neighbor disable-communities)

[Tree] (config>service>vprn>bgp disable-communities)

[Tree] (config>service>vprn>bgp>group disable-communities)

Full Context

configure service vprn bgp group neighbor disable-communities

configure service vprn bgp disable-communities

configure service vprn bgp group disable-communities

Description

This command configures BGP to disable sending standard, extended, or large communities to specific peers.

By default, all communities that are attached to a BGP route (any address family) are not stripped from the route when it is advertised to any type of peer: IBGP, EBGP or confed-EBGP.

Default

no disable-communities

Parameters

standard

Specifies that standard 4-byte communities should be removed.

extended

Specifies that 8-byte extended communities (of all types) should be removed.

large

Specifies that 12-byte large communities should be removed.

Platforms

All

Context

[Tree] (config>router>bgp disable-communities)

[Tree] (config>router>bgp>group>neighbor disable-communities)

[Tree] (config>router>bgp>group disable-communities)

Full Context

configure router bgp disable-communities

configure router bgp group neighbor disable-communities

configure router bgp group disable-communities

Description

This command configures BGP to disable sending standard, extended, or large communities to specific peers.

By default, all communities that are attached to a BGP route (any address family) are not stripped from the route when it is advertised to any type of peer: IBGP, EBGP, or confed-EBGP.

Default

no disable-communities

Parameters

standard

Advertise the Communities attribute to peers.

extended

Advertise the Extended Communities attribute to peers.

large

Advertise the Large Communities attribute to peers.

Platforms

All

Context

[Tree] (config>subscr-mgmt>ppp-policy disable-cookies)

Full Context

configure subscriber-mgmt ppp-policy disable-cookies

Description

This command disables the use of cookies.

The no form of this command enables cookies.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>bgp>label-allocation>label-ipv6 disable-explicit-null)

Full Context

configure router bgp label-allocation label-ipv6 disable-explicit-null

Description

This command controls the allocation and use of explicit null MPLS labels with labeled-unicast ipv6 routes.

When this command is enabled (no disable-explicit-null), the following behaviors apply:

• during the times when the router is required to act as the BGP next-hop of a label-unicast IPv6 route that it is advertising, it sets the BGP label value to IPv6 explicit null (value 2), forcing a POP behavior for received packets.

• received label-unicast IPv6 routes never create tunnels in TTM that can be used to resolve other BGP routes (with an IPv6 next-hop).

• a received label-unicast IPv6 route can be resolved by a label-ipv4 BGP tunnel that is transported over a stacked tunnel (SR-TE LSP or LDPoRSVP LSP)

When this command is disabled (disable-explicit-null), the following behaviors apply:

• during those times when the router is required to act as the BGP next-hop of a label-unicast IPv6 route that it is advertising, it sets the BGP label value to a proper value in the dynamic label range and programs a POP or SWAP operation for that label, depending on the origin of the route and various import policy actions that could apply to the route

• received label-unicast IPv6 routes that have a prefix length of 128 bits are automatically installed in TTM so that they can be used to resolve other (non-labeled-unicast) BGP routes (with an IPv6 next-hop)

• a received label-unicast ipv6 route cannot be resolved by a label-ipv4 BGP tunnel that is transported over a stacked tunnel (SR-TE LSP or LDPoRSVP LSP)

• the label-ipv6 routes used for ECMP towards an IPv6 destination cannot be a mix of routes with regular label values and routes with special (IPv6 explicit null) label values

Changes in the operational status do not cause the BGP sessions of the base router to reset.

Platforms

All

Context

[Tree] (config>subscr-mgmt>bgp-prng-plcy disable-fast-external-failover)

Full Context

configure subscriber-mgmt bgp-peering-policy disable-fast-external-failover

Description

This command configures BGP fast external failover.

The no form of this command reverts to the default.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>bgp disable-fast-external-failover)

[Tree] (config>service>vprn>bgp>group disable-fast-external-failover)

[Tree] (config>service>vprn>bgp>group>neighbor disable-fast-external-failover)

Full Context

configure service vprn bgp disable-fast-external-failover

configure service vprn bgp group disable-fast-external-failover

configure service vprn bgp group neighbor disable-fast-external-failover

Description

This command configures BGP fast external failover.

Platforms

All

Context

[Tree] (config>router>bgp>group>neighbor disable-fast-external-failover)

[Tree] (config>router>bgp disable-fast-external-failover)

[Tree] (config>router>bgp>group disable-fast-external-failover)

Full Context

configure router bgp group neighbor disable-fast-external-failover

configure router bgp disable-fast-external-failover

configure router bgp group disable-fast-external-failover

Description

This command configures BGP fast external failover.

Default

no disable-fast-external-failover

Platforms

All

Context

[Tree] (config>system>login-control>ssh disable-graceful-shutdown)

Full Context

configure system login-control ssh disable-graceful-shutdown

Description

This command enables graceful shutdown of SSH sessions.

The no form of this command disables graceful shutdown of SSH sessions.

Platforms

All

Context

[Tree] (config>router>isis disable-ldp-sync)

Full Context

configure router isis disable-ldp-sync

Description

This command disables the IGP-LDP synchronization feature on all interfaces participating in the OSPF or IS-IS routing protocol. When this command is executed, IGP immediately advertises the actual value of the link cost for all interfaces which have the IGP-LDP synchronization enabled if the currently advertised cost is different. It will then disable IGP-LDP synchronization for all interfaces. This command does not delete the interface configuration. The no form of this command has to be entered to re-enable IGP-LDP synchronization for this routing protocol.

The no form of this command restores the default settings and re-enables IGP-LDP synchronization on all interfaces participating in the OSPF or IS-IS routing protocol and for which the ldp-sync-timer is configured.

Default

no disable-ldp-sync

Platforms

All

Context

[Tree] (config>router>ospf disable-ldp-sync)

[Tree] (config>router>ospf3 disable-ldp-sync)

Full Context

configure router ospf disable-ldp-sync

configure router ospf3 disable-ldp-sync

Description

This command disables the IGP-LDP synchronization feature on all interfaces participating in the OSPF routing protocol. When this command is executed, IGP immediately advertises the actual value of the link cost for all interfaces which have the IGP-LDP synchronization enabled if the currently advertised cost is different. It will then disable IGP-LDP synchronization for all interfaces. This command does not delete the interface configuration. The no form of this command has to be entered to re-enable IGP-LDP synchronization for this routing protocol.

The no form of this command restores the default settings and re-enables IGP-LDP synchronization on all interfaces participating in the OSPF or IS-IS routing protocol and for which the ldp-sync-timer is configured.

Default

no disable-ldp-sync

Platforms

All

Context

[Tree] (config>service>template>vpls-template disable-learning)

[Tree] (config>service>vpls disable-learning)

[Tree] (config>service>vpls>sap disable-learning)

[Tree] (config>service>vpls>spoke-sdp disable-learning)

[Tree] (config>service>vpls>vxlan disable-learning)

Full Context

configure service template vpls-template disable-learning

configure service vpls disable-learning

configure service vpls sap disable-learning

configure service vpls spoke-sdp disable-learning

configure service vpls vxlan disable-learning

Description

This command disables learning of new MAC addresses in the VPLS forwarding database (FDB) for the service instance, SAP instance, spoke-SDP instance, or VXLAN instance.

When disable-learning is enabled, new source MAC addresses are not entered in the VPLS service forwarding database. This applies for both local and remote MAC addresses.

When no disable-learning is specified for a VPLS on a 7450 ESS, it is possible to disable learning for specific SAPs and/or spoke SDPs by entering the disable-learning command at the appropriate level.

When disable-learning is disabled, new source MAC addresses are learned and entered into the VPLS forwarding database.

This parameter is mainly used in conjunction with the discard-unknown command.

The no form of this command enables learning of MAC addresses.

Default

no disable-learning

Normal MAC learning is enabled. The default mode for VXLAN instances is disable-learning.

Platforms

All

• configure service vpls disable-learning
• configure service vpls sap disable-learning
• configure service template vpls-template disable-learning
• configure service vpls spoke-sdp disable-learning

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

• configure service vpls vxlan disable-learning

Context

[Tree] (config>service>pw-template disable-learning)

Full Context

configure service pw-template disable-learning

Description

This command enables learning of new MAC addresses.

This parameter is mainly used in conjunction with the discard-unknown command.

The no form of this command enables learning of MAC addresses.

Default

no disable-learning (Normal MAC learning is enabled)

Platforms

All

Context

[Tree] (config>router>bgp disable-route-table-install)

Full Context

configure router bgp disable-route-table-install

Description

This command disables the installation of all IPv4, label-ipv4, IPv6 and label-ipv6 routes into the route table and tunnel table associated with the BGP instance.

Configuring this command prevents the advertisement of all IPv4, label-ipv4, IPv6 and label-ipv6 routes if there is a change of the BGP next-hop to one of the router’s own addresses. Typically, this is only useful on a router that is a control-plane route reflector (not in the datapath).

The no form of the command enables the installation of all IPv4, label-ipv4, IPv6 and label-ipv6 routes into the route table and tunnel table associated with the BGP instance.

Default

no disable-route-table-install

Platforms

All

Context

[Tree] (config>router>policy-options>policy-statement>default-action disable-route-table-install)

[Tree] (config>router>policy-options>policy-statement>entry>action disable-route-table-install)

Full Context

configure router policy-options policy-statement default-action disable-route-table-install

configure router policy-options policy-statement entry action disable-route-table-install

Description

This command specifies that BGP routes (IPv4, IPv6, label-ipv4, label-ipv6) matching the policy entry (or, depending on the context, the policy’s default-action) should not be installed in the route table, tunnel table (in the case of label-ipv4 routes), or IP FIB table.

This policy action has an effect only in BGP peer import policies. This policy action does not prevent the matched routes from contributing toward aggregate routes and does not prevent the matched routes from being advertised, even if next-hop-self has been applied. This means that incorrect use of this feature can blackhole traffic.

Marking label-ipv4 routes with this action does not prevent label-swap (ILM) entries from being programmed when such routes are re-advertised with a new BGP next-hop and label.

The no form of this command provides the default behavior of installing routes that are selected as the best path, ECMP path or backup path, depending on the circumstances.

Default

no disable-route-table-install

Platforms

All

Context

[Tree] (config>service>vprn>igmp>group-interface disable-router-alert-check)

[Tree] (config>service>vprn>mld>group-interface disable-router-alert-check)

[Tree] (config>router>igmp>group-interface disable-router-alert-check)

[Tree] (config>router>mld>group-interface disable-router-alert-check)

[Tree] (config>router>igmp>if disable-router-alert-check)

Full Context

configure service vprn igmp group-interface disable-router-alert-check

configure service vprn mld group-interface disable-router-alert-check

configure router igmp group-interface disable-router-alert-check

configure router mld group-interface disable-router-alert-check

configure router igmp interface disable-router-alert-check

Description

This command disables router alert checking for IGMP/MLD messages received on this interface.

The no form of this command enables router alert checking.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn mld group-interface disable-router-alert-check
• configure service vprn igmp group-interface disable-router-alert-check
• configure router igmp group-interface disable-router-alert-check
• configure router mld group-interface disable-router-alert-check

All

• configure router igmp interface disable-router-alert-check

Context

[Tree] (config>router>mld>if disable-router-alert-check)

Full Context

configure router mld interface disable-router-alert-check

Description

This command enables router alert checking for MLD messages received on this interface.

The no form of this command disables router alert checking.

Platforms

All

Context

[Tree] (config>subscr-mgmt>igmp-policy disable-router-alert-check)

Full Context

configure subscriber-mgmt igmp-policy disable-router-alert-check

Description

This command disables router alert checking for IGMP messages received on this interface.

The no form of this command reverts to the default value.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if>grp-if>sap>igmp-host-tracking disable-router-alert-check)

Full Context

configure service vprn subscriber-interface group-interface sap igmp-host-tracking disable-router-alert-check

Description

This command disables the IGMP router alert check option.

The no form of this command enables the router alert check.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>mld-policy disable-router-alert-check)

Full Context

configure subscriber-mgmt mld-policy disable-router-alert-check

Description

This command disables router alert checking for MLD messages received on this interface.

The no form of this command enables router alert checking.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>sap>igmp-host-tracking disable-router-alert-check)

[Tree] (config>service>vpls>mesh-sdp>mld-snooping disable-router-alert-check)

[Tree] (config>service>vpls>spoke-sdp>mld-snooping disable-router-alert-check)

[Tree] (config>service>vpls>spoke-sdp>igmp-snooping disable-router-alert-check)

[Tree] (config>service>vpls>mesh-sdp>igmp-snooping disable-router-alert-check)

[Tree] (config>service>vpls>sap>igmp-snooping disable-router-alert-check)

[Tree] (config>service>vpls>sap>mld-snooping disable-router-alert-check)

Full Context

configure service vpls sap igmp-host-tracking disable-router-alert-check

configure service vpls mesh-sdp mld-snooping disable-router-alert-check

configure service vpls spoke-sdp mld-snooping disable-router-alert-check

configure service vpls spoke-sdp igmp-snooping disable-router-alert-check

configure service vpls mesh-sdp igmp-snooping disable-router-alert-check

configure service vpls sap igmp-snooping disable-router-alert-check

configure service vpls sap mld-snooping disable-router-alert-check

Description

This command disables the IGMP or MLD router alert check option.

The no form of this command enables the router alert check.

Default

no disable-router-alert-check

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service vpls sap igmp-host-tracking disable-router-alert-check

All

• configure service vpls sap igmp-snooping disable-router-alert-check
• configure service vpls mesh-sdp mld-snooping disable-router-alert-check
• configure service vpls spoke-sdp igmp-snooping disable-router-alert-check
• configure service vpls spoke-sdp mld-snooping disable-router-alert-check
• configure service vpls mesh-sdp igmp-snooping disable-router-alert-check
• configure service vpls sap mld-snooping disable-router-alert-check

Context

[Tree] (config>service>vprn>igmp>if disable-router-alert-check)

[Tree] (config>service>ies>sub-if>grp-if>sap>igmp-host-tracking disable-router-alert-check)

Full Context

configure service vprn igmp interface disable-router-alert-check

configure service ies subscriber-interface group-interface sap igmp-host-tracking disable-router-alert-check

Description

This command disables the IGMP router alert check option.

The no form of this command enables the router alert check.

Platforms

All

• configure service vprn igmp interface disable-router-alert-check

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service ies subscriber-interface group-interface sap igmp-host-tracking disable-router-alert-check

Context

[Tree] (config>service>vprn>mld>if disable-router-alert-check)

Full Context

configure service vprn mld interface disable-router-alert-check

Description

This command disables router alert checking for MLD messages received on this interface.

The no form of this command enables the router alert checking.

Platforms

All

Context

[Tree] (config>service>vprn disable-selective-fib)

Full Context

configure service vprn disable-selective-fib

Description

This command specifies whether the system level selective FIB setting is overridden on this instance.

The no form of this command enables the selective FIB.

Default

no disable-selective-fib

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>router disable-selective-fib)

Full Context

configure router disable-selective-fib

Description

This command disables the selective FIB.

The no form of this command enables the selective FIB.

Default

no disable-selective-fib

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>service>vpls>spoke-sdp disable-send-bvpls-evpn-flush)

[Tree] (config>service>vpls>sap disable-send-bvpls-evpn-flush)

Full Context

configure service vpls spoke-sdp disable-send-bvpls-evpn-flush

configure service vpls sap disable-send-bvpls-evpn-flush

Description

This command disables the ISID-based C-MAC flush indication when the corresponding SAP or spoke-SDP enters the operationally down state.

If the send-bvpls-evpn-flush is properly enabled, the no version of the command enables B-MAC/ISID route updates to be sent when the SAP or spoke-SDP is operationally down.

Default

no disable-send-bvpls-evpn-flush

Platforms

All

Context

[Tree] (config>subscr-mgmt>ancp>policy>port-dwn disable-shcv)

Full Context

configure subscriber-mgmt ancp ancp-policy port-down disable-shcv

Description

When this command is configured, the node suspends SHCV for the hosts defined with this ANCP policy until the access node sends a port-up message. When the hold-time parameter is used, the node suspends SHCV for the period of time defined. If the hold-time parameter is not defined the node will suspend SHCV until a port-up message is received.

If the optional alarm flag is used, the node sends a SHCV alarm before suspending.

The no form of this command reverts to the default.

Parameters

alarm

Specifies that the node sends an alarm before suspending SHCV.

seconds

Specifies the time that the node suspends SHCV.

Values

0 to 7200

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>lag>bfd disable-soft-reset-extension)

Full Context

configure lag bfd disable-soft-reset-extension

Description

This command disables the automatic extension of BFD timers during an IOM/IMM soft-reset. Normally, BFD session timers are automatically extended during a soft-reset operation on the IOMs and IMMs to avoid BFD sessions timing out and causing protocol events. However, in some cases this behavior is not desired as it could delay fast re-route transitions if the timers are in place. The disable-soft-reset-extension command controls this behavior.

Default

no disable-soft-reset-extension

Platforms

All

Context

[Tree] (config>aaa>radius-srv-plcy>servers disable-stickiness)

Full Context

configure aaa radius-server-policy servers disable-stickiness

Description

This command disables a subscriber RADIUS accounting session from sticking with a single server under normal working conditions. If a direct algorithm is used, all subscriber RADIUS sessions will go directly to the server with the lowest configured index. If a failure occurs, a new in-service server with the next lowest index is used. When the original server recovers, if stickiness is not disabled, all existing sessions will continue to use the new server. This command disables stickiness, and as a result, the recovered original RADIUS server will again service every subscriber. If a round-robin algorithm is used and stickiness is not disabled, an accounting session for a particular subscriber (or host, depending on the accounting mode) will stay with the same server. This command removes the stickiness and all subscriber accounting messages will go through the list of servers in a round-robin manner.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>ldp>targ-session disable-targeted-session)

Full Context

configure router ldp targeted-session disable-targeted-session

Description

This command disables support for SDP triggered automatic generated targeted sessions. Targeted sessions are LDP sessions between non-directly connected peers. The discovery messages for an indirect LDP session are addressed to the specified peer and not to the multicast address.

The no form of this command enables the set up of any targeted sessions.

Default

no disable-targeted-session

Platforms

All

Context

[Tree] (config>router>static-route-entry>indirect>tunnel-next-hop disallow-igp)

Full Context

configure router static-route-entry indirect tunnel-next-hop disallow-igp

Description

This optional command determines if the associated static route can be resolved via an IGP next-hop in the RTM if no tunnel next-hops are found in TTM.

When configured, the associated static route will not be resolved to an available IGP route in the RTM.

The no form of this command returns the behavior to the default, which allows the static route to be resolved via an IGP route in the RTM if no tunnel next-hop can be found in the TTM.

Default

no disallow-igp

Platforms

All

Context

[Tree] (config>system>sec>passwd>compl disallow-sequence-keys)

Full Context

configure system security password complexity-rules disallow-sequence-keys

Description

This command configures the number of consecutive characters that are not allowed to be entered as part of the password on a U.S. English or Korean keyboard. These characters can be lowercase or uppercase letters, or numbers. Special characters are not taken into account. These consecutive characters can be horizontal (left to right) or (right to left) or diagonal (up to bottom or bottom to top). If the number of consecutive characters is equal to or larger than the configured value, the password is disallowed.

For example, if the user attempts to use the password "dsalkjhgfdsa", with this command configured to 8, the system rejects the password because the first consecutive sequence “dsa” is 3 lowercase letters, which passes the check, but the second consecutive sequence is “lkjhgfdsa”, which consists of 9 consecutive lowercase letters and this does not pass the check.

The no form of this command removes the restriction on the number of characters.

Default

no disallow-sequence-keys

Parameters

number-of-characters

Specifies the number of characters.

Values

2 to 8

Platforms

All

Context

[Tree] (candidate discard)

Full Context

candidate discard

Description

This command deletes the entire contents of the candidate configuration and exits the edit-cfg mode. Undo cannot be used to recover a candidate that has been discarded with candidate discard.

Parameters

now

Avoids a confirmation prompt for the discard.

Platforms

All

Context

[Tree] (configure>system>security>profile>netconf>base-op-authorization discard-changes)

Full Context

configure system security profile netconf base-op-authorization discard-changes

Description

This command enables the NETCONF <discard-changes> RPC.

The no form of this command disables the RPC.

Default

no discard-changes

Platforms

All

Context

[Tree] (config>test-oam>sath>svc-test>svc-stream>frm-payl>eth>s-tag discard-eligible)

[Tree] (config>test-oam>sath>svc-test>svc-stream>frm-payl>eth>c-tag discard-eligible)

Full Context

configure test-oam service-activation-testhead service-test service-stream frame-payload ethernet s-tag discard-eligible

configure test-oam service-activation-testhead service-test service-stream frame-payload ethernet c-tag discard-eligible

Description

This command configures the marking of the discard eligibility (DEI) bit in the VLAN header.

Default

discard-eligible false

Parameters

true

Keyword to indicate that the frame is discard eligible.

false

Keyword to indicate that the frame is not discard eligible.

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

Context

[Tree] (config>port>ethernet discard-rx-pause-frames)

Full Context

configure port ethernet discard-rx-pause-frames

Description

This command discards received pause frames. Pause frames are used for local link flow control.

The no form of this command processes pause frames upon reception and the transmit side of the receiving port pauses in its transmissions.

Default

no discard-rx-pause-frames

Platforms

All

Context

[Tree] (config>service>vpls discard-unknown)

[Tree] (config>service>template>vpls-template discard-unknown)

Full Context

configure service vpls discard-unknown

configure service template vpls-template discard-unknown

Description

By default, packets with unknown destination MAC addresses are flooded. If discard-unknown is enabled at the VPLS level, packets with unknown destination MAC address will be dropped instead (even when configured FDB size limits for VPLS or SAP are not yet reached).

The no form of this command allows flooding of packets with unknown destination MAC addresses in the VPLS.

Default

no discard-unknown

Platforms

All

Context

[Tree] (config>service>template>vpls-sap-template discard-unknown-source)

[Tree] (config>service>template>vpls-template discard-unknown-source)

[Tree] (config>service>vpls>sap discard-unknown-source)

[Tree] (config>service>vpls>vxlan discard-unknown-source)

[Tree] (config>service>vpls>spoke-sdp discard-unknown-source)

Full Context

configure service template vpls-sap-template discard-unknown-source

configure service template vpls-template discard-unknown-source

configure service vpls sap discard-unknown-source

configure service vpls vxlan discard-unknown-source

configure service vpls spoke-sdp discard-unknown-source

Description

When this command is enabled, packets received on a SAP, a spoke-SDP, or a static VXLAN instance with an unknown source MAC address will be dropped only if the maximum number of MAC addresses for that SAP or spoke-SDP (see max-nbr-mac-addr [config>service>vpls>sap max-nbr-mac-addr, config>service>vpls>spoke-sdp max-nbr-mac-addr]) has been reached. If max-nbr-mac-addr has not been set for the SAP or spoke-SDP, enabling discard-unknown-source has no effect.

When disabled, the packets are forwarded based on the destination MAC addresses.

The no form of this command causes packets with an unknown source MAC addresses to be forwarded by destination MAC addresses in VPLS.

Default

no discard-unknown-source

Platforms

All

• configure service vpls spoke-sdp discard-unknown-source
• configure service template vpls-sap-template discard-unknown-source
• configure service template vpls-template discard-unknown-source
• configure service vpls sap discard-unknown-source

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

• configure service vpls vxlan discard-unknown-source

Context

[Tree] (config>service>pw-template discard-unknown-source)

Full Context

configure service pw-template discard-unknown-source

Description

When this command is enabled, packets received with an unknown source MAC address will be dropped only if the maximum number of MAC addresses have been reached.

When disabled, the packets are forwarded based on the destination MAC addresses.

The no form of this command causes packets with an unknown source MAC addresses to be forwarded by destination MAC addresses.

Default

no discard-unknown-source

Platforms

All

Context

[Tree] (admin disconnect)

Full Context

admin disconnect

Description

This command disconnects a user from a session.

Issuing the disconnect command without any parameters disconnects the session in which the command was executed.

If any of the session type options (for example, console, bluetooth, telnet, FTP, SSH) are specified, only the respective sessions are affected.

If no session type options are specified, all sessions from the IP address or from the specified user are disconnected.

Any task that the user is executing is terminated. FTP files accessed by the user are not removed.

A major severity security log event is created specifying what was terminated and by whom.

By default, no disconnect options are configured.

Parameters

ip-address

Specifies the IP address to disconnect, specified in dotted decimal notation.

Note:

IPv6 is supported on the 7750 SR and 7950 XRS.

Values

ipv4-address	a.b.c.d
ipv6-address	x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x - [0 to FFFF]H
	d - [0 to 255]D

session-id

The model-driven session ID. Can be obtained using the show system management-interface datastore-locks [detail] command.

user-name

Specifies the name of the user. The name can be up to 32 characters.

console

Disconnects the console session.

bluetooth

Disconnects the Bluetooth session.

telnet

Disconnects the Telnet session.

ftp

Disconnects the FTP session.

ssh

Disconnects the SSH session.

netconf

Disconnects the NETCONF session.

grpc

Disconnects the gRPC session.

Platforms

All

Context

[Tree] (config>service>vprn>sub-if>dhcp>osel discover-delay)

[Tree] (config>service>ies>sub-if>grp-if>dhcp>osel discover-delay)

[Tree] (config>service>vprn>sub-if>grp-if>dhcp>osel discover-delay)

Full Context

configure service vprn subscriber-interface dhcp offer-selection discover-delay

configure service ies subscriber-interface group-interface dhcp offer-selection discover-delay

configure service vprn subscriber-interface group-interface dhcp offer-selection discover-delay

Description

This command configures the default time to delay DHCP Discover messages. The delay is applied to all DHCP Discover messages for which no per DHCP server or per client MAC delay is configured.

The no form of this command removes the delay.

Parameters

delay

Specifies the default time to delay DHCP Discover messages, in deciseconds.

Values

1 to 100

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if>dhcp>osel>clnt-mac discover-delay)

[Tree] (config>service>ies>sub-if>grp-if>dhcp>osel>clnt-mac discover-delay)

[Tree] (config>service>vprn>sub-if>grp-if>dhcp>osel>clnt-mac discover-delay)

Full Context

configure service vprn subscriber-interface dhcp offer-selection client-mac discover-delay

configure service ies subscriber-interface group-interface dhcp offer-selection client-mac discover-delay

configure service vprn subscriber-interface group-interface dhcp offer-selection client-mac discover-delay

Description

This command configures the amount of time to delay DHCP Discover messages from odd or even source MAC addresses.

The no form of this command removes the delay.

Parameters

delay

Specifies the amount of time to delay DHCP Discover messages from odd or even source MAC addresses, in deciseconds.

Values

1 to 100

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if>grp-if>dhcp>osel>srvr discover-delay)

[Tree] (config>service>vprn>sub-if>dhcp>osel>srvr discover-delay)

[Tree] (config>service>ies>sub-if>grp-if>dhcp>osel>srvr discover-delay)

Full Context

configure service vprn subscriber-interface group-interface dhcp offer-selection server discover-delay

configure service vprn subscriber-interface dhcp offer-selection server discover-delay

configure service ies subscriber-interface group-interface dhcp offer-selection server discover-delay

Description

This command configures the amount of time to delay DHCP Discover messages relayed to the server.

The no form of this command removes the delay.

Parameters

delay

Specifies the amount of time to delay DHCP Discover messages relayed to the server, in deciseconds.

Values

1 to 100

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>service>id>ppp>packet discovery)

Full Context

debug service id ppp packet discovery

Description

This command enables debugging for specific PPP discovery packets.

Parameters

padi

Enables debugging for PADI PPP discovery packets.

pado

Enables debugging for PADO PPP discovery packets.

padr

Enables debugging for PADR PPP discovery packets.

pads

Enables debugging for PADS PPP discovery packets.

padt

Enables debugging for PADT PPP discovery packets.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>subscr-mgmt>vrgw>brg>pppoe-client>brg-id discovery)

Full Context

debug subscriber-mgmt vrgw brg pppoe-client brg-id discovery

Description

This command, limits debugging only to the specified messages in the discovery phase.

Parameters

padi

Limits debugging only to padi messages.

pado

Limits debugging only to pado messages.

padr

Limits debugging only to padr messages.

pads

Limits debugging only to pads messages.

padt

Limits debugging only to padt messages.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>port>ethernet>efm-oam discovery)

Full Context

configure port ethernet efm-oam discovery

Description

This is the top level of the hierarchy containing various discovery parameters that allow the operator to control certain aspects of the negotiation process as well as what action to take when there is a mismatch in peer capabilities.

Platforms

All

Context

[Tree] (config>redundancy>multi-chassis>peer>mc-ipsec discovery-interval)

Full Context

configure redundancy multi-chassis peer mc-ipsec discovery-interval

Description

This command specifies the time interval of tunnel-group stays in the Discovery state. Interval-1 is used as discovery-interval when a new tunnel-group is added to multi-chassis redundancy (mp-ipsec); interval-2 is used as discovery-interval when the system boots up, it is optional, when it is not specified, the interval-1 will be used.

Default

discovery-interval 300 boot 300

Parameters

interval-secs

Specifies the maximum duration, in seconds, of the discovery interval during which a newly activated multi- chassis IPsec tunnel-group will remain dormant while trying to contact its redundant peer. Groups held dormant in this manner will neither pass traffic nor negotiate security keys. This interval ends when either the redundant peer is contacted and a master election occurs, or when the maximum duration expires.

Values

1 to 1800

boot interval-secs

Specifies the maximum duration of an interval immediately following system startup. When the normal discovery interval for a group would expire while the post-boot discovery interval is still active, then the group's discovery interval is extended until the post-boot discovery interval expires. This allows an extension to the normal discovery stage of groups following a chassis reboot, to account for the larger variance in routing.

Values

1 to 1800

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>test-oam>link-meas>template>twl>ipv6-dest-disc discovery-interval)

Full Context

configure test-oam link-measurement measurement-template twamp-light ipv6-destination-discovery discovery-interval

Description

This command configures the frequency at which IPv6 peer discovery packets are transmitted when the discovery-timer is active.

The no form of the command reverts to the default value.

Default

discovery-interval 10

Parameters

seconds

Specifies transmission frequency of the discovery packet.

Values

1 to 10

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>test-oam>link-meas>template>twl>ipv6-dest-disc discovery-timer)

Full Context

configure test-oam link-measurement measurement-template twamp-light ipv6-destination-discovery discovery-timer

Description

This command configures the amount of time to transmit peer discovery packets at the discovery-interval. The timer starts when the IPv6 protocols is enabled under the config>router>if>if-attribute>delay>dynamic> twamp-light>ipv6 context. At the expiration of the discovery-interval or when a peer is discovered, the probe interval changes to the value configured for the update-interval.

The no form of the command reverts to the default value.

Default

discovery-interval 60

Parameters

seconds

Specifies transmission frequency of the discovery packet.

Values

1 to 1800

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS