i Commands – Part III

Context

[Tree] (config>service>vprn>flowspec ip-filter-max-size)

Full Context

configure service vprn flowspec ip-filter-max-size

Description

This command configures the maximum number of FlowSpec routes or rules that can be embedded into an ingress IP filter policy for a specified routing instance. FlowSpec filter entries embedded in a filter policy in this routing instance will use filter entries from the range between the embedding offset and "offset + ip-filter-max-size – 1”.

The sum of this command and the highest offset in any IPv4 filter that embeds IPv4 FlowSpec rules from this routing instance (excluding filters that embed at offset 262143) must not exceed 262143.

This command can be configured to a higher or lower value at any time. If the number of IPv4 FlowSpec rules that are currently installed is M, and the new configured limit is N, where N<M, then the last set of rules from N to M (by FlowSpec order) are immediately removed, but are retained in the BGP RIB. If the limit is increased, new rules are programmed only as they are received again in new BGP updates.

Default

ip-filter-max-size 512

Parameters

value

The maximum number of FlowSpec routes or rules that can be embedded into an ingress IP filter policy.

Values

0 to 262143

default

Keyword to configure the maximum size as 512.

Platforms

All

Context

[Tree] (config>router>flowspec ip-filter-max-size)

Full Context

configure router flowspec ip-filter-max-size

Description

This command configures the maximum number of FlowSpec routes or rules that can be embedded into the auto-created embedded filter (fSpec- X). FlowSpec filter entries embedded in a filter policy in this routing instance will use filter entries from the range between "embedding offset + 1” and "embedding offset + ip-filter-max-size”.

The sum of this command and the highest offset in any IPv4 filter that embeds IPv4 FlowSpec rules from this routing instance (excluding filters that embed at offset 262143) must not exceed 262143.

This command can be configured to a higher or lower value at any time. If the number of IPv4 FlowSpec rules that are currently installed is M, and the new configured limit is N, where N<M, then the last set of rules from N to M (by FlowSpec order) are immediately removed, but are retained in the BGP RIB. If the limit is increased, new rules are programmed only as they are received again in new BGP updates.

Default

ip-filter-max-size 512

Parameters

value

Specifies the maximum number of FlowSpec routes or rules that can be embedded into an ingress IP filter policy.

Values

0 to 262143

default

Keyword to configure the maximum size as 512.

Platforms

All

Context

[Tree] (config>li>li-filter-block-reservation>li-reserved-block ip-filter-name)

Full Context

configure li li-filter-block-reservation li-reserved-block ip-filter-name

Description

This command configures an IP filter in which the reservation is done through name.

The no form of this command removes the IP filter name.

Parameters

filter-name

Specifies the IP filter name, up to 64 characters.

Platforms

All

Context

[Tree] (config>li>li-filter-assoc>li-ip-fltr ip-filter-name)

Full Context

configure li li-filter-associations li-ip-filter ip-filter-name

Description

This command associates an IP filter with a specified LI IP filter through its name.

The no form of this command removes the IP filter name.

Parameters

filter-name

Specifies the IP filter name, up to 64 characters.

Platforms

All

Context

[Tree] (config>router>nat>inside>dslite>address ip-fragmentation)

[Tree] (config>service>vprn>nat>inside>nat64 ip-fragmentation)

[Tree] (config>service>vprn>nat>inside>dslite>addressip-fragmentation ip-fragmentation)

[Tree] (config>router>nat>inside>nat64 ip-fragmentation)

Full Context

configure router nat inside dual-stack-lite address ip-fragmentation

configure service vprn nat inside nat64 ip-fragmentation

configure service vprn nat inside dslite addressip-fragmentation ip-fragmentation

configure router nat inside nat64 ip-fragmentation

Description

This command configures downstream IPv6 fragmentation behavior in DS-Lite and NAT64. IPv6 fragmentation is performed in the ISA. IPv4 fragmentation is not affected by this command. If desired, downstream IPv4 packet can be fragmented in the carrier IOM before the packet reaches ISA (and the NAT function). The IPv4 fragmentation in the downstream direction can be set by the config>router/vprn>nat>outside>mtu command.

DS-Lite IPv6 Fragmentation in Downstream Direction (IPv4 to IPv6)

In case that the length of the received IPv4 packet is larger than the configured tunnel-mtu value while fragmentation is allowed, the resulting IPv6 packet will be fragmented (IPv4 is tunneled within IPv6). The maximum size of the of the fragmented IPv6 packet will be 48bytes larger than the configured tunnel-mtu value. This is due to the size of the tunneling IPv6 header: 40bytes basic IPv6 header + 8 bytes of extended fragmentation IPv6 header.

In case that fragmentation is not allowed while the IPv4 packet size is larger than configured tunnel-mtu size, the IPv4 packet will be dropped and an ICMPv4 Datagram Too Big message will be generated towards the source. The advertised mtu size in that ICMP message will be set to configured tunnel-mtu value.

NAT64 IPv6 Fragmentation in Downstream Direction (IPv4to IPv6)

In contrast to DS-Lite, NAT64 transport is not based on tunneling. Instead, IP headers are translated between IPv4 and IPv6. Consequently, NAT64 fragmentation operates based on the ipv6-mtu, as opposed to tunnel-mtu in DS-Lite which represents the size of the tunnel payload (IPv4 packet).

In case that the length of the translated IPv6 packet exceeds the size of the configured ipv6-mtu value while fragmentation is allowed, the resulting IPv6 packet will be fragmented. The maximum size of the of the fragmented IPv6 packet will be the configured ipv6-mtu value.

In case that fragmentation is not allowed while the translated IPv6 packet size is larger than configured ipv6-mtu size, the IPv4 packet (that is supposed to be translated into IPv6) will be dropped and an ICMPv4 Datagram Too Big message will be generated towards the source. The advertised mtu size in that ICMP message will be set to the ipv6-mtu value minus 28bytes. The 28bytes comes from the size of the IPv6 overhead of the translated packet (20bytes difference between the IP header sizes 40bytes in IPv6 vs 20bytes in IPv4; 8 bytes for extended IPv6 fragmentation header).

Default

disabled

Parameters

disabled

IPv6 Fragmentation is disabled. In case that the packet size is larger

than what is set by the mtu value (tunnel-mtu or ipv6-mtu) the IPv4 packet will be dropped and ICPMv4 Datagram Too Big messages will be sent back to the source.

fragment-ipv6

IPv6 fragmentation will be performed in all cases, regardless of the DF bit setting in the tunneled/translated IPv4 packet.

fragment-ipv6-unless-ipv4-df-set

IPv6 Fragmentation will be performed only in cases when DF bit in tunneled/translated IPv4 packet is cleared.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (conf>service>nat>map-domain ip-fragmentation)

Full Context

configure service nat map-domain ip-fragmentation

Description

This command enables the context to configure IP fragmentation.

The no form of this commands disables IP fragmentation.

Platforms

7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s, VSR

Context

[Tree] (config>service>ies>if ip-helper-address)

Full Context

configure service ies interface ip-helper-address

Description

This command enables broadcast UDP packets received on the associated interface to be redirected to the specified gateway address and then forwarded on to the gateway.

The no form of this command removes the gateway address from the interface configuration and stops the UDP broadcast redirect function.

Parameters

gateway-address

Specifies the IPv4 address of the target UDP broadcast gateway.

Platforms

All

Context

[Tree] (config>service>vprn>if ip-helper-address)

Full Context

configure service vprn interface ip-helper-address

Description

This command enables broadcast UDP packets received on the associated interface to be redirected to the specified gateway address and then forwarded on to the gateway.

The no form of this command removes the gateway address from the interface configuration and stops the UDP broadcast redirect function.

Parameters

gateway-address

Specifies the IPv4 address of the target UDP broadcast gateway.

Platforms

All

Context

[Tree] (config>router>if ip-helper-address)

Full Context

configure router interface ip-helper-address

Description

This command enables broadcast UDP packets received on the associated interface to be redirected to the specified gateway address and then forwarded on to the gateway.

The no form of this command removes the gateway address from the interface configuration and stops the UDP broadcast redirect function.

Parameters

gateway-address

Specifies the IPv4 address of the target UDP broadcast gateway.

Platforms

All

Context

[Tree] (config>app-assure>group ip-identification-assist)

Full Context

configure application-assurance group ip-identification-assist

Description

Commands in this context configure the IP identification assist feature, which uses IP addresses to assist in traffic identification.

This optional mechanism is enabled by default and consults an internally generated and stored database when app-filters fail to classify the traffic as one of the configured applications from the AppDB.

Use the configure application-assurance group ip-identification-assist shutdown command to administratively disable the IP identification assist feature.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>policy>app-filter>entry ip-identification-assist)

Full Context

configure application-assurance group policy app-filter entry ip-identification-assist

Description

This command configures the router to perform a network IP address lookup that overrides the assigned application if it finds the network IP address in its internal application-IP database.

If an IP match is found, the application assigned from the app-filter is overridden with the application from the IP lookup. This also affects the app-group and charging group.

If an IP match is not found, the application assigned from the app-filter is not overridden and remains (including the app-group and charging group).

The no form of this command disables the router from performing a network IP address lookup and overriding the assigned application.

Default

no ip-identification-assist

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group ip-identification-contribute)

Full Context

configure application-assurance group ip-identification-contribute

Description

This command configures the router to collect information from traffic in the partition and contribute it to the database that is built by the IP identification assist feature.

The no form of this command disables the router from contributing traffic information in this partition to the database.

Default

ip-identification-contribute

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>mirror>mirror-dest>sap>egress ip-mirror)

Full Context

configure mirror mirror-dest sap egress ip-mirror

Description

This command configures IP mirror information.

Platforms

All

Context

[Tree] (config>service>vprn ip-mirror-interface)

Full Context

configure service vprn ip-mirror-interface

Description

This command is used for remote mirroring, where the mirror source is a separate system then the mirror destination. The mirror source can only be of IP type and is only supported for the following services: IES, VPRN, VPLS and Ipipe. The mirror destination on a remote system will configure an interface on a VPRN as ip-mirror-interface. This interface only supports spoke sdp termination. The IP mirror interface requires PBR to determine the next outgoing interface for the mirror packet to be delivered to.

The no form of this command removes the interface name from the configuration.

Parameters

ip-int-name

Specifies the name of the IP interface, up to 32 characters. An interface name cannot be in the form of an IP address.

create

Keyword used to create an IP mirror interface.

Platforms

All

Context

[Tree] (config>service>ies>sub-if>grp-if ip-mtu)

[Tree] (config>service>vprn>sub-if>grp-if ip-mtu)

Full Context

configure service ies subscriber-interface group-interface ip-mtu

configure service vprn subscriber-interface group-interface ip-mtu

Description

This command specifies the maximum size of IP packets on this group interface. Packets larger than this are fragmented.

The ip-mtu applies to all IPoE host types (dhcp, arp, static). For PPP/L2TP sessions, the ip-mtu is not considered for the MTU negotiation. The ppp-mtu in the ppp-policy should be used instead.

The no form of this command reverts to the default.

Parameters

octets

Specifies the largest frame size (in octets) that this interface can handle.

Values

512 to 9786

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>if ip-mtu)

Full Context

configure service vprn interface ip-mtu

Description

This command specifies the maximum size of IP packets on this group interface. Packets larger than this are fragmented.

The ip-mtu applies to all IPoE host types (DHCP, ARP, or static). For PPP/L2TP sessions, the ip-mtu is not considered for the MTU negotiation. The ppp-mtu in the PPP policy should be used instead.

The no form of this command reverts to the default.

Default

no ip-mtu

Parameters

octets

Specifies the largest frame size (in octets) that this interface can handle.

Values

512 to 9000

Platforms

All

Context

[Tree] (config>service>ies>if ip-mtu)

[Tree] (config>service>ies>if>sap>ip-tunnel ip-mtu)

Full Context

configure service ies interface ip-mtu

configure service ies interface sap ip-tunnel ip-mtu

Description

This command configures the IP maximum transmit unit (packet) for this interface.

Because this connects a Layer 2 to a Layer 3 service, this parameter can be adjusted under the IES interface.

The MTU that is advertised from the IES size is:

MINIMUM((SdpOperPathMtu - EtherHeaderSize), (Configured ip-mtu))

By default (for Ethernet network interface) if no ip-mtu is configured it is (1568 - 14) = 1554.

The no form of this command returns the default value.

Default

no ip-mtu

Parameters

octets

Specifies the maximum number of octets that can be transmitted.

Values

512 to 9786 (for IES interface)

512 to 9000 (for ip-tunnel interface)

Platforms

All

• configure service ies interface ip-mtu

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

• configure service ies interface sap ip-tunnel ip-mtu

Context

[Tree] (config>service>ies>if>ipsec>ipsec-tunnel ip-mtu)

[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel ip-mtu)

[Tree] (config>service>vprn>if>sap>ip-tunnel ip-mtu)

[Tree] (config>service>vprn>if>sap>ipsec-tunnel ip-mtu)

[Tree] (config>router>if>ipsec>ipsec-tunnel ip-mtu)

Full Context

configure service ies interface ipsec ipsec-tunnel ip-mtu

configure service vprn interface ipsec ipsec-tunnel ip-mtu

configure service vprn interface sap ip-tunnel ip-mtu

configure service vprn interface sap ipsec-tunnel ip-mtu

configure router interface ipsec ipsec-tunnel ip-mtu

Description

This command configures the IP maximum transmit unit (packet) for this interface.

Because this connects a Layer 2 to a Layer 3 service, this parameter can be adjusted under the IES interface.

The MTU that is advertised from the IES size is:

MINIMUM((SdpOperPathMtu - EtherHeaderSize), (Configured ip-mtu))

By default (for the Ethernet network interface), if no ip-mtu is configured it is (1568 - 14) equals 1554.

The ip-mtu command instructs the MS-ISA to perform IP packet fragmentation, prior to IPsec encryption and encapsulation, based on the configured MTU value. In particular:

If the length of a payload IP packet (including its header) exceeds the configured MTU value and the DF flag is clear (due to the presence of the clear-df-bit command or because the original DF value was 0) then the MS-ISA fragments the payload packet as efficiently as possible (i.e. it creates the minimum number of fragments each less than or equal to the configured MTU size); in each created fragment the DF bit shall be 0.

If the length of a payload IP packet (including its header) exceeds the configured MTU value and the DF flag is set (because the original DF value was 1 and the tunnel has no clear-df-bit in its configuration) then the MS-ISA discards the payload packet without sending an ICMP type 3/code 4 message back to the packet’s source address.

The effective MTU for packets entering a tunnel is the minimum of the private tunnel SAP interface IP MTU value (used by the IOM) and the tunnel IP MTU value (configured using the above command and used by the MS-ISA). To fragment IP packets larger than X bytes with DF set, rather than discarding them, the tunnel IP MTU should be set to X and the private tunnel SAP interface IP MTU should be set to a value larger than X.

The no ip-mtu command, corresponding to the default behavior, disables fragmentation of IP packets by the MS-ISA; all IP packets, regardless of size or DF bit setting, are allowed into the tunnel.

Default

no ip-mtu

Parameters

bytes

Specifies the IP maximum transmit unit (packet) for this interface.

Values

512 to 9000

Platforms

VSR

• configure service vprn interface ipsec ipsec-tunnel ip-mtu
• configure router interface ipsec ipsec-tunnel ip-mtu
• configure service ies interface ipsec ipsec-tunnel ip-mtu

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn interface sap ip-tunnel ip-mtu
• configure service vprn interface sap ipsec-tunnel ip-mtu

Context

[Tree] (config>service>vprn>subscriber-interface ip-mtu)

[Tree] (config>service>ies>subscriber-interface ip-mtu)

Full Context

configure service vprn subscriber-interface ip-mtu

configure service ies subscriber-interface ip-mtu

Description

This command specifies the maximum size of frames on this group-interface. Packets larger than this will get fragmented.

The no form of this command removes this functionality.

Parameters

octets.

Specifies the largest frame size (in octets) that this interface can handle.

Values

512 to 9000

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>git ip-mtu)

Full Context

configure subscriber-mgmt group-interface-template ip-mtu

Description

This command configures the maximum size of outgoing IP packets on this group interface. Packets larger than this are fragmented.

The no form of this command removes the configuration.

Default

no ip-mtu

Parameters

octets

Specifies the largest frame size (in octets) that this interface can handle.

Values

512 to 9786

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>aarp-interface ip-mtu)

Full Context

configure service ies aarp-interface ip-mtu

Description

This command configures the IP maximum transmit unit (packet) for this interface.

The no form of this command returns the default value.

Default

no ip-mtu

By default (for Ethernet network interface) if no ip-mtu is configured it is (1568 - 14) = 1554.

Parameters

octets

Specifies the maximum number of octets that can be transmitted.

Values

512 to 9786

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>red-if ip-mtu)

Full Context

configure service ies redundant-interface ip-mtu

Description

This command configures the IP maximum transmit unit (packet) for the associated router IP interface.

The configured IP-MTU cannot be larger than the calculated IP MTU based on the port MTU configuration.

The MTU that is advertised from the IES size is:

MINIMUM((SdpOperPathMtu - EtherHeaderSize), (Configured ip-mtu))

The no form of this command returns the associated IP interfaces MTU to its default value, which is calculated based on the port MTU setting. For Ethernet ports this will typically be 1554.

Default

no ip-mtu

Parameters

octets

Specifies the octets.

Values

512 to 9786

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>aarp-interface ip-mtu)

Full Context

configure service vprn aarp-interface ip-mtu

Description

This command configures the IP maximum transmit unit (packet) for this interface.

The no form of this command returns the default value. By default (for Ethernet network interface) if no ip-mtu is configured it is (1568 - 14) = 1554.

Default

no ip-mtu

Parameters

octets

Specifies the maximum number of octets that can be transmitted.

Values

512 to 9786

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>red-if ip-mtu)

[Tree] (config>service>vprn>nw-if ip-mtu)

Full Context

configure service vprn redundant-interface ip-mtu

configure service vprn network-interface ip-mtu

Description

This command configures the IP maximum transmit unit (packet) for the associated router IP interface.

The configured IP-MTU cannot be larger than the calculated IP MTU based on the port MTU configuration.

The MTU that is advertised from the IES size is:

MINIMUM((SdpOperPathMtu - EtherHeaderSize), (Configured ip-mtu))

The no form of this command returns the associated IP interfaces MTU to its default value, which is calculated based on the port MTU setting. For Ethernet ports this will typically be 1554.

Default

no ip-mtu

Parameters

octets

Specifies the octets.

Values

512 to 9786

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn redundant-interface ip-mtu

All

• configure service vprn network-interface ip-mtu

Context

[Tree] (config>service>ies>aa-interface ip-mtu)

[Tree] (config>service>vprn>aa-interface ip-mtu)

Full Context

configure service ies aa-interface ip-mtu

configure service vprn aa-interface ip-mtu

Description

This command configures the AA interface IP MTU.

Default

no ip-mtu

Parameters

octets

Specifies the MTU value.

Values

512 to 9786

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>ipsec>tnl-temp ip-mtu)

Full Context

configure ipsec tunnel-template ip-mtu

Description

This command configures the template IP MTU.

Default

no ip-mtu

Parameters

octets

Specifies the maximum size in octets.

Values

512 to 9000

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>isa>nat-group>inter-chassis-redundancy ip-mtu)

Full Context

configure isa nat-group inter-chassis-redundancy ip-mtu

Description

This command configures the IP-MTU size that is used to transport flow synchronization records between the ISAs. Multiple flow synchronization events can be packed into a single frame up to the IP-MTU size.

Default

ip-mtu 1500

Parameters

bytes

Specifies the IP-MTU size in bytes.

Values

512 to 9000

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>if ip-mtu)

Full Context

configure router interface ip-mtu

Description

This command configures the IP maximum transmit unit (packet) for the associated router IP interface.

The operational IP MTU that is used for the interface is determined based on both the configured IP MTU and the port MTU of the port bound to this interface.

The MTU that is used is:

MINIMUM((Port_MTU - EthernetHeaderSize), (configured ip-mtu))

The no form of this command returns the associated IP interfaces MTU to its default value, which is calculated based on the port MTU setting. (For Ethernet ports the default IP MTU is 1500 octets.)

Default

no ip-mtu

Parameters

octets

Specifies the IP MTU value associated with the IP interface, specified in octets. If the interface supports IPv6 packets, the IP-MTU must be set to a value greater than or equal to ( ≥) 1280 in accordance with RFC 2460 Internet Protocol, Version 6 (IPv6) Specification.

Values

512 to 9786

Platforms

All

Context

[Tree] (bof ip-mtu)

Full Context

bof ip-mtu

Description

This command configures the IP maximum transmit unit (packet) for the management router instance.

The operational IP MTU that is used for the interface is determined based on both the configured IP MTU and the port MTU of the port bound to this interface.

The MTU that is used is:

MINIMUM((Port_MTU - EthernetHeaderSize), (configured ip-mtu))

For the management port, the port MTU is fixed at 1514 and the EthernetHeaderSize is 14 so the first element of the equation above is 1500 octets.

The no form of this command returns the associated IP interfaces MTU to its default value, which is calculated based on the port MTU setting. (For the management port the default IP MTU is 1500 octets.)

Default

ip-mtu 1500

Parameters

octets

Specifies the IP MTU value associated with the IP interface, specified in octets. If the interface supports IPv6 packets, the IP-MTU must be set to a value greater than or equal to ( ≥) 1280 in accordance with RFC 2460 Internet Protocol, Version 6 (IPv6) Specification.

Values

512 to 9786

Platforms

All

Context

[Tree] (config>filter>match-list ip-packet-length-list)

Full Context

configure filter match-list ip-packet-length-list

Description

This command configures a list of IPv4 packet lengths for match criteria in IPv4 filter policies. The create keyword is mandatory when configuring a packet length list.

The no form of this command deletes the specified list.

Parameters

pkt-len-list-name

Specifies the name of the packet length list, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>host-ident ip-prefix)

Full Context

configure subscriber-mgmt local-user-db ipoe host host-identification ip-prefix

Description

This command specifies the source IPv4/IPv6 address/prefix of the data trigger packet as the host identification.

The no form of this command removes the IP prefix from the configuration.

Parameters

ip-prefix/ip-prefix-length

Specifies the IPv4 address, IPv6 address, or IPv6 prefix.

Values

ipv4-prefix a.b.c.d

ipv4-prefix-length 0 to 32

ipv6-prefix x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x to [0 to FFFF]H

d to [0 to 255]D

ipv6-prefix-length 0 to 128

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (conf>router>segment-routing>srv6>loc>prefix ip-prefix)

Full Context

configure router segment-routing segment-routing-v6 locator prefix ip-prefix

Description

This command configures the IPv6 prefix and prefix length for an SRv6 locator.

The locator prefix length is the sum of the lengths of the block field and that of the node ID field.

The no form of this command deletes the IPv6 prefix from this locator.

Default

no ip-prefix

Parameters

ipv6-prefix/prefix-length

Specifies an IPv6 address prefix written as hexadecimal numbers separated by colons with host bits set to 0.

Values

ipv6-prefix	x:x:x:x:x:x:x:x (eight 16-bit pieces)
ipv6-prefix-length	4 to 96

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

Context

[Tree] (conf>router>sr>srv6>ms>block>prefix ip-prefix)

Full Context

configure router segment-routing segment-routing-v6 micro-segment block prefix ip-prefix

Description

This command configures the IPv6 prefix and prefix length for an SRv6 micro-segment locator.

For micro-segment SRv6, the locator prefix length must be equal to the micro-segment block length.

The no form of this command deletes the IPv6 prefix from this micro-segment locator.

Default

no ip-prefix

Parameters

ipv6-prefix/prefix-length

Specifies an IPv6 address prefix written as hexadecimal numbers separated by colons with host bits set to 0.

Values

ipv6-prefix	x:x:x:x:x:x:x:x (eight 4-hexadecimal pieces)
ipv6-prefix-length	8 to 64

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

Context

[Tree] (config>app-assure>group ip-prefix-list)

Full Context

configure application-assurance group ip-prefix-list

Description

This command configures an IP prefix list.

Parameters

ip-prefix-list-name

Specifies the name of the IP prefix list, up to 32 characters.

create

Mandatory keyword used when creating an application profile. The create keyword requirement can be enabled or disabled in the environment>create context.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>qos>match-list ip-prefix-list)

Full Context

configure qos match-list ip-prefix-list

Description

This command creates a list of IPv4 prefixes for match criteria in QoS policies.

An IP prefix list must contain only IPv4 address prefixes created using the prefix command and cannot be deleted if it is referenced by a QoS policy.

The no form of this command deletes the specified list.

Parameters

ip-prefix-list-name

A string of up to 32 characters of printable ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes. The name default (case insensitive) is reserved by the system.

Platforms

All

Context

[Tree] (config>filter>match-list ip-prefix-list)

Full Context

configure filter match-list ip-prefix-list

Description

This command creates a list of IPv4 prefixes for match criteria in IPv4 ACL and CPM filter policies.

The no form of this command deletes the specified list.

Operational Notes:

An ip-prefix-list must contain only IPv4 address prefixes.

An IPv4 prefix match list cannot be deleted if it is referenced by a filter policy.

See general description related to match-list usage in filter policies.

Parameters

ip-prefix-list-name

Specifies a string of up to 32 printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.

Platforms

All

Context

[Tree] (config>service>system>bgp-evpn ip-prefix-routes)

Full Context

configure service system bgp-evpn ip-prefix-routes

Description

Commands in this context configure attribute uniform propagation and BGP path selection.

Platforms

All

Context

[Tree] (config>app-assure>group>policy>aqp>entry>match ip-protocol-num)

[Tree] (config>app-assure>group>policy>app-filter>entry ip-protocol-num)

Full Context

configure application-assurance group policy app-qos-policy entry match ip-protocol-num

configure application-assurance group policy app-filter entry ip-protocol-num

Description

This command configures the IP protocol to use in the application definition.

The no form of this command restores the default (removes IP protocol number from application criteria defined by this app-filter entry).

Default

no ip-protocol-num

Parameters

eq

Specifies that the value configured and the value in the flow must be equal.

neq

Specifies that the value configured differs from the value in the flow.

protocol-id

Specifies the decimal value representing the IP protocol to be used as an IP filter match criterion. Well known protocol numbers include ICMP (1), TCP (6), UDP (17).

The no form the command removes the protocol from the match criteria.

Values

1 to 255 (Decimal, Hexadecimal, or Binary representation).

Supported IANA IP protocol names:

none, crtp, crudp, egp, eigrp, encap, ether-ip, gre, icmp, idrp, igmp, igp, ip, ipv6, ipv6-frag, ipv6-icmp, ipv6-no-nxt, ipv6-opts, ipv6-route, isis, iso-ip, l2tp, ospf-igp, pim, pnni, ptp, rdp, rsvp, sctp, stp, tcp, udp, vrrp

* - udp/tcp wildcard

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>sess-fltr>entry>match ip-protocol-num)

Full Context

configure application-assurance group session-filter entry match ip-protocol-num

Description

This command configures the IP protocol to use in the application definition.

The no form of this command restores the default (removes IP protocol number from application criteria defined by this app-filter entry).

Default

no ip-protocol-num

Parameters

ip-protocol-number

Specifies the decimal value representing the IP protocol to be used as an IP filter match criterion. Well known protocol numbers include ICMP (1), TCP (6), UDP (17).

The no form the command removes the protocol from the match criteria.

Values

protocol-number: 0 to 255 (decimal, hexadecimal, or binary representation)

protocol-name: Supported IANA IP protocol names:

none, crtp, crudp, egp, eigrp, encap, ether-ip, gre, icmp, idrp, igmp, igp, ip, ipv6, ipv6-frag, ipv6-icmp, ipv6-no-nxt, ipv6-opts, ipv6-route, isis, iso-ip, l2tp, ospf-igp, pim, pnni, ptp, rdp, rsvp, sctp, stp, tcp, udp, vrrp

* - udp/tcp wildcard

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>app-assure>group>traffic-capture>match ip-protocol-num)

Full Context

debug application-assurance group traffic-capture match ip-protocol-num

Description

This command configures debugging on an IP protocol number.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>bgp-evpn ip-route-advertisement)

Full Context

configure service vpls bgp-evpn ip-route-advertisement

Description

This command enables and disables the advertisement of IP prefixes in EVPN. If enabled, any active route in the R-VPLS VPRN route table are advertised in EVPN using the VPLS BGP configuration. The interface host addresses are not advertised in EVPN unless the ip-route-advertisement incl-host command is enabled.

The no form of this command disables IP prefixes advertisement in EVPN.

Default

no ip-route-advertisement

Parameters

incl-host

Specifies to advertise the interface host addresses in EVPN.

global-field:local-field

Specifies the domain ID.

Values

4byte-GlobalAdminValue:2byte-LocalAdminValue
	4byte-GlobalAdminValue:	0 to 4294967295
	2byte-LocalAdminValue	0 to 65535

Platforms

All

Context

[Tree] (config>service>vpls>bgp-evpn ip-route-link-bandwidth)

Full Context

configure service vpls bgp-evpn ip-route-link-bandwidth

Description

Commands in this context configure the IP route link bandwidth.

Platforms

All

Context

[Tree] (config>li>mirror-dest-template>layer-3-encap ip-src)

Full Context

configure li mirror-dest-template layer-3-encap ip-src

Description

This command configures the source IPv4 address to use in the IPv4 header part of the routable LI encapsulation.

Parameters

ip-address

Specifies the source IPv4 address.

Values

a.b.c.d

Platforms

All

Context

[Tree] (config>subscr-mgmt>gtp>peer-profile ip-ttl)

Full Context

configure subscriber-mgmt gtp peer-profile ip-ttl

Description

This command configures the value to put in the IP header’s TTL field for GTP control messages.

The no form of this command reverts to the default value.

Default

ip-ttl 255

Parameters

hops

Specifies the IP TTL.

Values

1 to 255

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>if>sap ip-tunnel)

[Tree] (config>service>vprn>if>sap ip-tunnel)

Full Context

configure service ies interface sap ip-tunnel

configure service vprn interface sap ip-tunnel

Description

This command is used to configure an IP-GRE or IP-IP tunnel and associate it with a private tunnel SAP within an IES or VPRN service.

The no form of this command deletes the specified IP/GRE or IP-IP tunnel from the configuration. The tunnel must be administratively shutdown before issuing the no ip-tunnel command.

Default

no-ip tunnel name

Parameters

name

Specifies the name of the IP tunnel. Tunnel names can be from 1 to 32 alphanumeric characters. If the string contains special characters (for example, #, $, spaces), the entire string must be enclosed within double quotes.

Platforms

All

Context

[Tree] (config>router>l2tp>group>ppp ipcp-subnet-negotiation)

[Tree] (config>router>l2tp>group>tunnel>ppp ipcp-subnet-negotiation)

[Tree] (config>service>vprn>l2tp>group>tunnel>ppp ipcp-subnet-negotiation)

[Tree] (config>service>vprn>l2tp>group>ppp ipcp-subnet-negotiation)

Full Context

configure router l2tp group ppp ipcp-subnet-negotiation

configure router l2tp group tunnel ppp ipcp-subnet-negotiation

configure service vprn l2tp group tunnel ppp ipcp-subnet-negotiation

configure service vprn l2tp group ppp ipcp-subnet-negotiation

Description

This command configures the IPCP subnet negotiation using PPP IPCP Subnet-Mask option (0x90) if requested by the client. The subnet can be obtained from RADIUS (Framed-IP-Netmask attribute) or local user database. The subnet is installed as a managed route of the PPP session. This requires the anti-spoof type on the SAP to be configured to nh-mac.

By default, an IPCP Config Request with IPCP Subnet-Mask option (0x90) is rejected.

The no form of this command reverts to the default value.

Default

no ipcp-subnet-negotiation

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>ppp-policy ipcp-subnet-negotiation)

Full Context

configure subscriber-mgmt ppp-policy ipcp-subnet-negotiation

Description

This command enables subnet negotiation using PPP IPCP Subnet-Mask option (0x90) if requested by the client. The subnet can be obtained from RADIUS (Framed-IP-Netmask attribute) or local user database. The subnet is installed as a managed route of the PPP session. This requires the anti-spoof type on the SAP to be configured to nh-mac.

By default, an IPCP Config Request with IPCP Subnet-Mask option (0x90) is rejected.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service ipfix)

Full Context

configure service ipfix

Description

Commands in this context configure IPFIX parameters.

Platforms

All

Context

[Tree] (config>service>nat>nat-policy ipfix-export-policy)

[Tree] (config>service>nat>up-nat-policy ipfix-export-policy)

Full Context

configure service nat nat-policy ipfix-export-policy

configure service nat up-nat-policy ipfix-export-policy

Description

This command configures the IP flow information export policy.

The no form of the command removes the IP flow information export policy.

Default

no ipfix-export-policy

Parameters

policy-name

Specifies the name of the policy, up to 32 characters. The specified policy must be created in the config>service>ipfix ipfix-export-policy context.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ipfix ipfix-export-policy)

Full Context

configure service ipfix ipfix-export-policy

Description

This command creates an IPFIX export policy with a set of transport parameters that will be used to transmit IPFIX records generated by an application within 7750 SR node to an external collector node. This policy name can be referenced from each application within 7750 SR that requires flow logging.

Parameters

policy-name

Specifies the name of the policy that can be referenced within an application in 7750 SR node that requires flow logging.

create

Keyword used to create the policy.

Platforms

All

Context

[Tree] (config>service ipipe)

Full Context

configure service ipipe

Description

This command configures an IP-Pipe service.

Parameters

service-id

The unique service identification number or string identifying the service in the service domain. This ID must be unique to this service and may not be used for any other service of any type. The service-id must be the same number used for every 7450 ESS or 7750 SR on which this service is defined.

Values

service-id: 1 to 2147483647

svc-name: up to 64 characters

customer-id

Specifies the customer ID number to be associated with the service. This parameter is required on service creation and optional for service editing or deleting.

Values

1 to 2147483647

vpn vpn-id

Specifies the VPN ID number which allows you to identify virtual private networks (VPNs) by a VPN identification number.

Values

1 to 2147483647

Default

null (0)

vc-switching

Specifies if the pseudowire switching signaling is used for the spoke SDPs configured in this service.

create

Keyword used to create the Ipipe service instance. The create keyword requirement can be enabled/disabled in the environment>create context.

name name

Configures an optional service name identifier, up to 64 characters, to a given service. This service name can then be used in configuration references, display, and show commands throughout the system. A defined service name can help the service provider or administrator to identify and manage services within the SR OS platforms.

To create a service, you must assign a service ID; however, after it is created, either the service ID or the service name can be used to identify and reference a service.

If a name is not specified at creation time, then SR OS assigns a string version of the service-id as the name.

Values

name: up to 64 characters

Platforms

All

Context

[Tree] (config>subscr-mgmt>loc-user-db ipoe)

Full Context

configure subscriber-mgmt local-user-db ipoe

Description

Commands in this context configure IPoE host parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>call-trace ipoe)

Full Context

debug call-trace ipoe

Description

Commands in this context set up call trace debugging for IP over Ethernet (IPoE) sessions.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>li>x-interfaces>correlation-id ipoe)

Full Context

configure li x-interfaces correlation-id ipoe

Description

This command specifies the type of RADIUS accounting session ID to use for IPoE subscriber correlation.

Default

host

Parameters

origin

Specifies the correlation identifier origin type for IPoE.

Values

host, queue, session

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>subscr-mgmt>sub-profile>session-limits ipoe)

[Tree] (config>subscr-mgmt>sla-profile>session-limits ipoe)

Full Context

configure subscriber-mgmt sub-profile session-limits ipoe

configure subscriber-mgmt sla-profile session-limits ipoe

Description

This command configures the maximum number of IPoE sessions per SLA profile instance or per subscriber.

The no form of this command removes the maximum number of IPoE sessions limit.

Parameters

max-nr-of-sessions

Specifies the maximum number of IPoE sessions.

Values

0 to 131071

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>redundancy>multi-chassis>peer>sync>subscriber-mgmt ipoe)

Full Context

configure redundancy multi-chassis peer sync subscriber-mgmt ipoe

Description

This command configures the router to synchronize subscriber management IPoE information with the multi-chassis peer.

The no form of this command disables the router from synchronizing subscriber management IPoE information with the multi-chassis peer.

Default

no ipoe

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>sub-if>grp-if>ipv6 ipoe-bridged-mode)

[Tree] (config>service>ies>sub-if>ipv6 ipoe-bridged-mode)

[Tree] (config>service>vprn>sub-if>ipv6 ipoe-bridged-mode)

[Tree] (config>service>vprn>sub-if>grp-if>ipv6 ipoe-bridged-mode)

Full Context

configure service ies subscriber-interface group-interface ipv6 ipoe-bridged-mode

configure service ies subscriber-interface ipv6 ipoe-bridged-mode

configure service vprn subscriber-interface ipv6 ipoe-bridged-mode

configure service vprn subscriber-interface group-interface ipv6 ipoe-bridged-mode

Description

This command enables IPv6 IPoE bridged mode.

The no form of this command disables the IPv6 IPoE bridged mode.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>sub-if ipoe-linking)

[Tree] (config>service>vprn>sub-if ipoe-linking)

[Tree] (config>service>vprn>sub-if>grp-if ipoe-linking)

[Tree] (config>service>ies>sub-if>grp-if ipoe-linking)

Full Context

configure service ies subscriber-interface ipoe-linking

configure service vprn subscriber-interface ipoe-linking

configure service vprn subscriber-interface group-interface ipoe-linking

configure service ies subscriber-interface group-interface ipoe-linking

Description

Commands in this context configure IPoE host linking.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>sap ipoe-session)

[Tree] (config>service>ies>sub-if ipoe-session)

[Tree] (config>service>vprn>sub-if>grp-if ipoe-session)

[Tree] (config>service>ies>sub-if>grp-if ipoe-session)

[Tree] (config>service>vprn>sub-if ipoe-session)

Full Context

configure service vpls sap ipoe-session

configure service ies subscriber-interface ipoe-session

configure service vprn subscriber-interface group-interface ipoe-session

configure service ies subscriber-interface group-interface ipoe-session

configure service vprn subscriber-interface ipoe-session

Description

Commands in this context configure IPoE session parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt ipoe-session-policy)

Full Context

configure subscriber-mgmt ipoe-session-policy

Description

This command configures an IPoE session policy. The policies are referenced from subscriber interfaces, group interfaces and capture SAPs. Multiple IPoE session policies can be configured.

The no form of this command removes the policy name from the configuration.

Parameters

policy-name

Specifies the IPoE policy name up to 32 characters.

create

Keyword required to create the configuration context

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if>grp-if>ipoe-session ipoe-session-policy)

[Tree] (config>service>vpls>sap>ipoe-session ipoe-session-policy)

[Tree] (config>service>ies>sub-if>grp-if>ipoe-session ipoe-session-policy)

Full Context

configure service vprn subscriber-interface group-interface ipoe-session ipoe-session-policy

configure service vpls sap ipoe-session ipoe-session-policy

configure service ies subscriber-interface group-interface ipoe-session ipoe-session-policy

Description

This command specifies the IPoE session policy applicable for this group interface or capture SAP.

On WLAN GW group interfaces, it is not possible to change this value.

The no form of this command reverts to the default.

Default

no ipoe-session-policy ipoe-session-policy default on WLAN GW group interfaces

Parameters

policy-name

Specifies the IPoE session policy name up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>auto-sub-id-key ipoe-sub-id-key)

Full Context

configure subscriber-mgmt auto-sub-id-key ipoe-sub-id-key

Description

This command enables certain fields to become the base for auto-generation of the default sub-id name. The sub-id name is auto generated if there is not a more specific method available. Such more specific methods would be a default sub-id name as a sap-id, a preconfigured static string or explicit mappings based on RADIUS/LUDB returned strings.

In case that a more specific sub-id name generation method is not available and the auto-id keyword is defined under the def-sub-id hierarchy, the sub-id name is generated by concatenating fields defined in this command separated by a "|” character.

The maximum length of the auto-generated sub-id name is 64 characters while the concatenation of subscriber identification fields can exceed 64 characters. Subscriber host instantiation fails if the sub-id name is based on subscriber identification fields whose concatenated length exceeds 64 characters. Failing the host creation rather than truncating the sub-id name on a 64 character boundary prevents collision of sub-ids (subscriber name duplication).

If the more specific sub-id name generation method is not available and the auto-id keyword is not defined under the def-sub-id hierarchy, the sub-id name is a random 10 character encoded string based on the fields defined under this command.

There is only one set of identification fields allowed per host type (IPoE or PPP) per chassis.

The no form of this command reverts to the default.

Default

ipoe-sub-id-key mac sap-id

Parameters

sub-id-key

Specifies the auto-generated sub-id keys for IPoE hosts.

Values

mac — Specifies that the MAC address can be combined with other subscriber host identification fields (circuit-id, remote-id, session-id, sap-id, or service-name) to form a sub-id name in a user readable format or as a random 10 character encoded value.

In case that the mac address is used as a concatenation field in the sub-id name, then its format becomes a string xx:xx:xx:xx:xx:xx with the length 17B.

The MAC address as the subscriber host identification field is not applicable to static hosts.

circuit-id — Specifies that the circuit-id can be combined with other subscriber host identification fields (mac, remote-id, session-id, sap-id, or service-name) to form a sub-id name in a user readable format or as a random 10 character encoded value.

In case that the circuit-id is used as a concatenation field in the sub-id name, then its format becomes access-node-id eth slot/port:[vlan-id] or access-node-id atm slot/port:vpi.vci with a variable length.

Note:

If circuit-id contains any non-printable ASCII characters, the entire circuit-id string is formatted in hex in the sub-id name output. Otherwise all characters in circuit-id is converted to ASCII. ASCII printable characters contain bytes in range 0x20 to 0x7E.

The circuit-id as the subscriber identification field is not applicable to ARP hosts or static hosts.

remote-id — Specifies that the remote-id can be combined with other subscriber host identification fields (mac, circuit-id, session-id, sap-id, or service-name) to form a sub-id name in a user readable format or as a random 10 character encoded value.

In case that the remote-id is used as a concatenation field in the sub-id name, then its format becomes a remote-id string with a variable length.

Note:

If remote-id contains any non-printable ASCII characters, the entire remote-id string is formatted in hex in the sub-id name output. Otherwise all characters in remote-id is converted to ASCII. ASCII printable characters contain bytes in range 0x20 to 0x7E.

The remote-id as the subscriber identification field is not applicable to ARP hosts or static hosts.

sap-id — Specifies that the sap-id can be combined with other subscriber host identification fields (mac, circuit-id, remote-id, session-id, or service-name) to form a sub-id name in a user readable format or as a random 10 character encoded value.

If a circuit-id is used as a concatenation field in the sub-id name, then its format becomes: slot/mda:[outer-vlan].[inner-vlan] with a variable length.

The sap-id as the subscriber identification field is applicable to all hosts types with exception of static hosts.

dual-stack-remote-id — Specifies that the dual stack remote ID is used as the base for the auto-generated subscriber identification

service-name — Specifies that the service name that terminates the subscriber is used as the base for auto-generated subscriber identification.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (admin ipsec)

Full Context

admin ipsec

Description

Commands in this context perform Internet Protocol Security (IPsec) operations. IPsec is a structure of open standards to ensure private, secure communications over Internet Protocol (IP) networks by using cryptographic security services.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>redundancy>multi-chassis>peer>sync ipsec)

Full Context

configure redundancy multi-chassis peer sync ipsec

Description

This command enables multi-chassis synchronization of IPsec states on system level.

Default

no ipsec

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config ipsec)

Full Context

configure ipsec

Description

Commands in this context configure Internet Protocol Security (IPsec) parameters. IPsec is a structure of open standards to ensure private, secure communications over Internet Protocol (IP) networks by using cryptographic security services.

Platforms

All

Context

[Tree] (config>service>ies>if ipsec)

[Tree] (config>router>if ipsec)

[Tree] (config>service>vprn ipsec)

[Tree] (config>service>ies ipsec)

Full Context

configure service ies interface ipsec

configure router interface ipsec

configure service vprn ipsec

configure service ies ipsec

Description

Commands in this context configure IPsec policies on a VSR.

Parameters

ipsec-group-id

Specifies the IPsec group ID used for the IPsec tunnels configured under this context.

Values

1 to 16

public-sap

Specifies the public SAP ID used for the IPsec tunnels configured under this context.

Values

0 to 4096

Platforms

VSR

• configure router interface ipsec
• configure service ies interface ipsec

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn ipsec

All

• configure service ies ipsec

Context

[Tree] (config>test-oam>build-packet>header ipsec-auth)

[Tree] (debug>oam>build-packet>packet>field-override>header ipsec-auth)

Full Context

configure test-oam build-packet header ipsec-auth

debug oam build-packet packet field-override header ipsec-auth

Description

This command causes the associated header to be defined as an IPsec header template and enters the context to define the IPsec parameters. This same context can be used for IPv4 and IPv6 packets.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>redundancy>multi-chassis ipsec-domain)

Full Context

configure redundancy multi-chassis ipsec-domain

Description

Commands in this context configure parameters for the multi-chassis IPsec domain configured on this system.

The no form of this command removes the ID from the configuration.

Parameters

ipsec-domain-id

Specifies IPsec domain ID.

Values

1 to 255

create

Keyword used to create the command instance.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>if>sap ipsec-gw)

[Tree] (config>service>ies>if>sap ipsec-gw)

Full Context

configure service vprn interface sap ipsec-gw

configure service ies interface sap ipsec-gw

Description

This command configures an IPsec gateway.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>ipsec>ike-policy ipsec-lifetime)

Full Context

configure ipsec ike-policy ipsec-lifetime

Description

This command specifies the lifetime of the Phase 2 IKE key.

The no form of this command reverts to the default, which is 3600 seconds.

Default

no ipsec-lifetime

Parameters

ipsec-lifetime

Specifies the Phase 2 lifetime for this IKE policy in seconds.

Values

1200 to 31536000

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>ipsec>ipsec-transform ipsec-lifetime)

Full Context

configure ipsec ipsec-transform ipsec-lifetime

Description

This command specifies the CHILD_SA. If the inherit parameter is specified, then the system uses the IPsec lifetime configuration in the corresponding IKE policy configured in the same IPsec gateway or IPsec tunnel.

Default

ipsec-lifetime inherit

Parameters

seconds

Specifies the lifetime of the Phase 2 IKE key in seconds.

Values

1200 to 31536000

inherit

Specifies that the system uses the ipsec-lifetime configuration in the corresponding IKE policy that is configured for the same IPsec gateway or IPsec tunnel.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>isa>tunnel-group ipsec-responder-only)

Full Context

configure isa tunnel-group ipsec-responder-only

Description

With this command configured, system will only act as IKE responder except for the automatic CHILD_SA re-key upon MC-IPsec switchover.

Default

no ipsec-responder-only

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>ipsec ipsec-transform)

Full Context

configure ipsec ipsec-transform

Description

Commands in this context create an ipsec-transform policy. IPsec transforms policies can be shared. A change to the ipsec-transform is allowed at any time. The change will not impact tunnels that have been established until they are renegotiated. If the change is required immediately the tunnel must be cleared (reset) for force renegotiation.

IPsec transform policy assignments to a tunnel require the tunnel to be shutdown.

The no form of this command removes the ID from the configuration.

Parameters

transform-id

Specifies a policy ID value to identify the IPsec transform policy.

Values

1 to 2048

create

This keyword is mandatory when creating an ipsec-transform policy. The create keyword requirement can be enabled or disabled in the environment>create context.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>ipsec ipsec-transport-mode-profile)

Full Context

configure ipsec ipsec-transport-mode-profile

Description

Commands in this context configure an IPsec transport mode profile.

The no form of this command removes the name from the configuration.

Parameters

name

Specifies the name of the IPsec transport mode profile, up to 32 characters.

create

Keyword used to create the IPsec transport mode profile instance.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>if>sap>ip-tunnel ipsec-transport-mode-profile)

[Tree] (config>service>ies>if>sap>ip-tunnel ipsec-transport-mode-profile)

Full Context

configure service vprn interface sap ip-tunnel ipsec-transport-mode-profile

configure service ies interface sap ip-tunnel ipsec-transport-mode-profile

Description

This command specifies an IPsec transport mode profile name to the SAP.

The no form of this command removes the profile name from the service configuration.

Parameters

name

Specifies the name of an existing IPsec transport mode profile, up to 32 characters

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>static-route-entry ipsec-tunnel)

Full Context

configure service vprn static-route-entry ipsec-tunnel

Description

This command creates a static route in a VPRN service context that points to the global routing context (base router). This is primarily used to allow traffic that ingress through a VPRN service to be routed out of the global routing context.

This next-hop type cannot be used in conjunction with any other next-hop types.

Default

no ipsec-tunnel

Parameters

ipsec-tunnel-name

IPsec tunnel name; maximum length up to 32 characters.

Platforms

All

Context

[Tree] (config>router>if>ipsec ipsec-tunnel)

[Tree] (config>service>vprn>if>sap ipsec-tunnel)

[Tree] (config>service>ies>if>ipsec ipsec-tunnel)

Full Context

configure router interface ipsec ipsec-tunnel

configure service vprn interface sap ipsec-tunnel

configure service ies interface ipsec ipsec-tunnel

Description

This command configures a secured interface IPsec tunnel. If the private-service-name is not specified, the private service is the secured interface service.

The no form of this command removes the IPsec tunnel from the configuration.

Parameters

name

Specifies the name of the IPsec tunnel.

private-sap

Specifies the private SAP ID.

Values

0 to 4094

private-service-name

Specifies the private service name.

create

Keyword used to create the IPsec tunnel instance. The create keyword requirement can be enabled or disabled in the environment>create context.

Platforms

VSR

• configure router interface ipsec ipsec-tunnel
• configure service ies interface ipsec ipsec-tunnel

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn interface sap ipsec-tunnel

Context

[Tree] (config>subscr-mgmt>git ipv4)

Full Context

configure subscriber-mgmt group-interface-template ipv4

Description

Commands in this context configure IPv4 parameters.

Default

ipv4

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>to-client-options ipv4)

Full Context

configure subscriber-mgmt local-user-db ipoe host to-client-options ipv4

Description

Commands in this context configure DHCPv4 options.

Default

ipv4

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>bgp>multi-path ipv4)

Full Context

configure service vprn bgp multi-path ipv4

Description

This command sets ECMP multipath parameters that apply only to the (unlabeled) IPv4 unicast address family. These settings override the values set by the maximum-paths command.

When multipath is enabled, traffic to the destination is load-shared across a set of paths (BGP routes) that the BGP decision process considers equal to the best path. The actual distribution of traffic over the multiple paths may be equal or unequal (that is, based on weights derived from the Link Bandwidth Extended Community).

To qualify as a multipath, a non-best route must meet the following criteria (some criteria are controlled by this command):

• The multi-path route must be the same type of route as the best path (same AFI/SAFI and, in some cases, same next-hop resolution method).

• The multi-path route must be tied with the best path for all criteria of greater significance than next-hop cost, except for criteria that are configured to be ignored.

• If the best path selection reaches the next-hop cost comparison, the multi-path route must have the same next-hop cost as the best route unless the unequal-cost option is configured.

• The multi-path route must not have the same BGP next-hop as the best path or any other multi-path route.

• The multi-path route must not cause the ECMP limit of the routing instance to be exceeded (configured using the ecmp command with a value in the range 1 to 64).

• The multi-path route must not cause the applicable max-paths limit to be exceeded. If the best path is an EBGP learned route and the ebgp option is used, the ebgp-max-paths limit overrides the max-paths limit. If the best path is an IBGP-learned route and the ibgp option is used, the ibgp-max-paths limit overrides the max-paths limit. All path limits are configurable up to a maximum of 64. Multi-path is effectively disabled if a value is set to 1.

• The multi-path route must have the same neighbor AS in its AS path as the best path if the restrict same-neighbor-as option is configured. By default, any path with the same AS path length as the best path (regardless of neighbor AS) is eligible for multi-path.

• The route must have the same AS path as the best path if the restrict exact-as-path option is configured. By default, any path with the same AS path length as the best path (regardless of the actual AS numbers) is eligible for multi-path.

The no form of this command removes IPv4-specific overrides.

Default

no ipv4

Parameters

max-paths

Specifies the maximum number of multipaths per prefix/NLRI if ebgp-max-paths or ibgp-max-paths does not apply.

Values

1 to 64

egp-max-paths

Specifies the maximum number of multipaths per prefix or NLRI when the best path is an EBGP learned route.

Values

1 to 64

ibgp-max-paths

Specifies the maximum number of multipaths per prefix or NLRI when the best path is an IBGP learned route.

Values

1 to 64

restrict same-neighbor-as

Specifies that the non-best path must have the same neighbor AS in its AS path as the best path.

restrict exact-as-path-as

Specifies that the non-best path must have the same AS path as the best path.

unequal-cost

Instructs BGP to ignore differences in the next-hop cost only when determining eligible multipaths.

Platforms

All

Context

[Tree] (config>router>ldp>if-params>if ipv4)

Full Context

configure router ldp interface-parameters interface ipv4

Description

Commands in this context configure LDP interfaces and parameters applied to an IPv4 LDP interface.

Platforms

All

Context

[Tree] (config>subscr-mgmt>bgp-prng-plcy>family ipv4)

Full Context

configure subscriber-mgmt bgp-peering-policy family ipv4

Description

This command configures Multiprotocol Border Gateway Protocol (MPBGP) support for the IPv4 address family.

The no form of this command removes the IPv4 configuration.

Default

no ipv4

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>ldp>if-params ipv4)

Full Context

configure router ldp interface-parameters ipv4

Description

Commands in this context configure IPv4 LDP parameters applied to the interface.

Platforms

All

Context

[Tree] (config>router>ldp>targeted-session ipv4)

Full Context

configure router ldp targeted-session ipv4

Description

Commands in this context configure parameters applied to targeted sessions to all IPv4 LDP peers.

Platforms

All

Context

[Tree] (config>router>ldp>targeted-session>auto-tx ipv4)

[Tree] (config>router>ldp>targeted-session>auto-rx ipv4)

Full Context

configure router ldp targeted-session auto-tx ipv4

configure router ldp targeted-session auto-rx ipv4

Description

Commands in this context configure IPv4 parameters of an automatic targeted LDP session.

Platforms

All

Context

[Tree] (config>service>ies>if>sap>ipsec-gw>lcl-addr-assign ipv4)

[Tree] (config>service>vprn>if>sap>ipsec-gw>lcl-addr-assign ipv4)

Full Context

configure service ies interface sap ipsec-gw local-address-assignment ipv4

configure service vprn interface sap ipsec-gw local-address-assignment ipv4

Description

Commands in this context configure IPv4 local address assignment parameters for the IPsec gateway.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>oam>build-packet>packet>field-override>header ipv4)

[Tree] (config>test-oam>build-packet>header ipv4)

Full Context

debug oam build-packet packet field-override header ipv4

configure test-oam build-packet header ipv4

Description

This command causes the associated header to be defined as an IPv4 header template and enables the context to define the IPv4 parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>cflowd>collector>export-filter>family ipv4)

Full Context

configure cflowd collector export-filter family ipv4

Description

This command filters IPv4 flow data from being sent to the associated collector.

The no form of this command removes the filter, allowing IPv4 flow data to be sent to the associated collector.

Default

no ipv4

Platforms

All

Context

[Tree] (config>filter>gre-tun-tmp ipv4)

Full Context

configure filter gre-tunnel-template ipv4

Description

Commands in this context configure GRE tunnel template IPv4 parameters.

Platforms

All

Context

[Tree] (bof>autoconfigure ipv4)

Full Context

bof autoconfigure ipv4

Description

Commands in this context autoconfigure the IPv4 DHCP client.

Platforms

7450 ESS-7, 7750 SR-1, 7750 SR-7, 7750 SR-1e, 7750 SR-2e, 7750 SR-s

Context

[Tree] (config>system>ned>prof>neip ipv4)

Full Context

configure system network-element-discovery profile neip ipv4

Description

This command configures the IPv4 NEIP for this profile. The NEIP can be configured manually or set to be automatically generated using the NEID. If the NEID option is set, the first most significant byte of the IPv4 NEIP is set to 140 and the remaining 3 bytes are set to the NEID value. The NEID can be configured with a vendor ID value, in which case the first most significant byte of the IPv4 NEIP is set to this vendor ID value.

The no form of this command removes the IPv4 address association for this profile.

Default

no ipv4

Parameters

ip-address

Specifies the IPv4 address of the NEIP.

auto-generate

Specifies that the NEIP is automatically generated using the NEID.

vendor-id-value

Specifies the vendor ID value.

Values

1 to 255

Platforms

All

Context

[Tree] (config>router>bgp>group>add-paths ipv4)

[Tree] (config>router>bgp>add-paths ipv4)

[Tree] (config>router>bgp>group>neighbor>add-paths ipv4)

Full Context

configure router bgp group add-paths ipv4

configure router bgp add-paths ipv4

configure router bgp group neighbor add-paths ipv4

Description

This command configures the add-paths capability for unlabeled IPv4 unicast routes. By default, add-paths is not enabled for unlabeled IPv4 unicast routes.

The maximum number of unlabeled unicast paths per IPv4 prefix to send is the configured send limit, which is a mandatory parameter. The capability to receive multiple unlabeled IPv4 unicast paths per prefix from a peer is configurable using the receive keyword, which is optional. If the receive keyword is not included in the command the receive capability is enabled by default.

The no form of this command disables add-paths support for unlabeled IPv4 unicast routes, causing sessions established using add-paths for unlabeled IPv4 unicast to go down and come back up without the add-paths capability.

Default

no ipv4

Parameters

send-limit

Specifies the maximum number of paths per unlabeled IPv4 unicast prefix that are allowed to be advertised to add-paths peers, the actual number of advertised routes may be less. If the value is none, the router does not negotiate the send capability with respect to IPv4 AFI/SAFI. If the value is multipaths, then BGP advertises all of the used BGP multipaths for each IPv4 NLRI if the peer has signaled support to receive multiple add-paths.

Values

1 to 16, none, multipaths

receive

Specifies that the router negotiates to receive multiple unlabeled unicast routes per IPv4 prefix.

none

Specifies that the router does not negotiate to receive multiple unlabeled unicast routes per IPv4 prefix.

Platforms

All

Context

[Tree] (config>router>bgp>multi-path ipv4)

Full Context

configure router bgp multi-path ipv4

Description

This command sets ECMP multipath parameters that apply only to the (unlabeled) IPv4 unicast address family. These settings override the values set by the maximum-paths command.

When multipath is enabled, traffic to the destination is load-shared across a set of paths (BGP routes) that the BGP decision process considers equal to the best path. The actual distribution of traffic over the multiple paths may be equal or unequal (that is, based on weights derived from the Link Bandwidth Extended Community).

The no form of this command removes IPv4-specific overrides.

Default

no ipv4

Parameters

max-paths

Specifies the maximum number of multipaths per prefix/NLRI if ebgp-max-paths or ibgp-max-paths does not apply.

Values

1 to 64

ebgp-max-paths

Specifies the maximum number of multipaths per prefix or NLRI when the best path is an EBGP learned route.

Values

1 to 64

ibgp-max-paths

Specifies the maximum number of multipaths per prefix or NLRI when the best path is an IBGP learned route.

Values

1 to 64

restrict same-neighbor-as

Specifies that the non-best path must have the same neighbor AS in its AS path as the best path.

restrict exact-as-path

Specifies that the non-best path must have the same AS path as the best path.

unequal-cost

Instructs BGP to ignore differences in the next-hop cost only when determining eligible multipaths.

Platforms

All

Context

[Tree] (config>router>if>if-attr>delay>dyn>twamp ipv4)

Full Context

configure router interface if-attribute delay dynamic twamp-light ipv4

Description

Commands in this context select, enable, and specify the IPv4 addressing used to carry the TWAMP Light test packet.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>subscr-mgmt>wlan-gw>ue-query ipv4-address)

Full Context

configure subscriber-mgmt wlan-gw ue-query ipv4-address

Description

This command enables matching on UEs with the specified IPv4 address.

The no form of this command disables matching on the IPv4 address.

Default

no ipv4-address

Parameters

ip-address

Specifies the IPv4 address.

Values

a.b.c.d

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>port>ethernet>ptp-timestamping ipv4-address)

[Tree] (config>lag>ptp-timestamping ipv4-address)

Full Context

configure port ethernet ptp-timestamping ipv4-address

configure lag ptp-timestamping ipv4-address

Description

This command configures an IPv4 destination address by which to filter the PTP messages. Only unicast addresses are supported.

The no form of this command removes the IPv4 address from the filter.

Default

no ipv4-address

Parameters

ip-address

Specifies the IPv4 address.

Values

a.b.c.d

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

Context

[Tree] (conf>sys>sat>eth-sat>ptp-ip ipv4-address)

Full Context

configure system satellite eth-sat ptp-ip ipv4-address

Description

This command configures the IPv4 destination address of PTP messages received into the satellite client ports. Use the same IPv4 address used for the PTP process on the host system. Only unicast addresses can be used.

The no form of this command removes the IPv4 destination address.

Default

no ipv4-address

Parameters

ip-address

Specifies the IPv4 address.

Values

ipv4-address

a.b.c.d (host bits must be 0)

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

Context

[Tree] (config>router>isis>interface ipv4-adjacency-sid)

Full Context

configure router isis interface ipv4-adjacency-sid

Description

This command allows a static value to be assigned to an IPv4 adjacency SID in IS-IS segment routing.

The label option specifies that the value is assigned to an MPLS label.

The no form of this command removes the adjacency SID.

Parameters

value

Specifies the adjacency SID label.

Values

18432 to 5248 | 1048575 (FP4 or FP5 only)

Platforms

All

Context

[Tree] (config>subscr-mgmt>sub-profile>host-limits ipv4-arp)

[Tree] (config>subscr-mgmt>sla-profile>host-limits ipv4-arp)

Full Context

configure subscriber-mgmt sub-profile host-limits ipv4-arp

configure subscriber-mgmt sla-profile host-limits ipv4-arp

Description

This command configures the maximum number of IPv4 ARP hosts per SLA profile instance or per subscriber.

The no form of this command removes the maximum number of IPv4 ARP hosts limit.

Parameters

max-nr-of-hosts

Specifies the maximum number of IPv4 ARP hosts.

Note:

The operational maximum value may be smaller due to equipped hardware dependencies.

Values

0 to 131071

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>sla-profile>host-limits ipv4-dhcp)

[Tree] (config>subscr-mgmt>sub-profile>host-limits ipv4-dhcp)

Full Context

configure subscriber-mgmt sla-profile host-limits ipv4-dhcp

configure subscriber-mgmt sub-profile host-limits ipv4-dhcp

Description

This command limits the number of IPv4 DHCP hosts per SLA profile instance or per subscriber.

The no form of this command removes the maximum number of IPv4 DHCP hosts limit.

Parameters

max-nr-of-hosts

Specifies the maximum number of IPv4 DHCP hosts.

Note:

The operational maximum value may be smaller due to equipped hardware dependencies.

Values

0 to 131071

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>gtp>peer-profile ipv4-mtu)

Full Context

configure subscriber-mgmt gtp peer-profile ipv4-mtu

Description

This command configures the value of the IPv4-MTU PCO sent in S11 GTP messages. This is the MTU a device should honor when sending data toward the SGW/PGW. For IPv6, this value is signaled in the RA message and which can be configured in the grp-if> ipv6>rtr-adv>mtu context.

The no form of this command resets the signaled IPv4 MTU to the default.

Default

ipv4-mtu 1400

Parameters

bytes

Specifies the MTU value in bytes.

Values

512 to 9000

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>isis>multi-topology ipv4-multicast)

Full Context

configure service vprn isis multi-topology ipv4-multicast

Description

This command enables support for the IPv4 topology (MT3) within the associate IS-IS instance.

The no form of this command disables support for the IPv4 topology (MT3) within the associated IS-IS instance.

Default

no ipv4-multicast

Platforms

All

Context

[Tree] (config>router>isis>multi-topology ipv4-multicast)

Full Context

configure router isis multi-topology ipv4-multicast

Description

This command enables support for the IPv4 topology (MT3) within the associate IS-IS instance.

The no form of this command disables support for the IPv4 topology (MT3) within the associated IS-IS instance.

Default

no ipv4-multicast

Platforms

All

Context

[Tree] (config>service>vpls>pim-snooping ipv4-multicast-disable)

Full Context

configure service vpls pim-snooping ipv4-multicast-disable

Description

This command disables PIM snooping for IPv4 multicast traffic within a VPLS service.

The no form of this command enables PIM snooping for IPv4 multicast traffic within a VPLS service. To fully remove PIM snooping from a VPLS service it is necessary to issue the no pim-snooping command.

Default

no ipv4-multicast-disable

Platforms

All

Context

[Tree] (config>service>vprn>isis>if ipv4-multicast-disable)

Full Context

configure service vprn isis interface ipv4-multicast-disable

Description

This command administratively disables/enables ISIS operation for IPv4.

Default

no ipv4-multicast-disable

Platforms

All

Context

[Tree] (config>service>vprn>pim ipv4-multicast-disable)

[Tree] (config>service>vprn>pim>if ipv4-multicast-disable)

Full Context

configure service vprn pim ipv4-multicast-disable

configure service vprn pim interface ipv4-multicast-disable

Description

This command administratively disables/enables PIM operation for IPv4.

Default

no ipv4-multicast-disable

Platforms

All

Context

[Tree] (config>router>pim>interface ipv4-multicast-disable)

[Tree] (config>router>pim ipv4-multicast-disable)

Full Context

configure router pim interface ipv4-multicast-disable

configure router pim ipv4-multicast-disable

Description

This command administratively enables PIM operation for IPv4.

IPv4 multicast must be enabled to enable MLDP in-band signaling for IPv4 PIM joins; see config>router>pim>interface p2mp-ldp-tree-join.

The no form of this command disables the PIM operation for IPv4.

Default

no ipv4-multicast-disable

Platforms

All

Context

[Tree] (config>router>isis>interface ipv4-multicast-disable)

Full Context

configure router isis interface ipv4-multicast-disable

Description

This command disables IS-IS IPv4 multicast routing for the interface.

The no form of this command enables IS-IS IPv4 multicast routing for the interface.

Platforms

All

Context

[Tree] (config>service>vprn>isis>if>level ipv4-multicast-metric)

Full Context

configure service vprn isis interface level ipv4-multicast-metric

Description

This command configures IS-IS interface metric for IPv4 multicast for the VPRN instance.

The no form of this command removes the metric from the configuration.

Parameters

metric

Specifies the IS-IS interface metric for IPv4 multicast.

Values

1 to 16777215

Platforms

All

Context

[Tree] (config>router>isis>if>level ipv4-multicast-metric)

Full Context

configure router isis interface level ipv4-multicast-metric

Description

This command configures the IS-IS interface metric for IPv4 multicast.

The no form of this command removes the metric from the configuration.

Parameters

metric

Specifies the IS-IS interface metric for IPv4 multicast.

Values

1 to 16777215

Platforms

All

Context

[Tree] (config>service>vprn>isis>link-group>level ipv4-multicast-metric-offset)

Full Context

configure service vprn isis link-group level ipv4-multicast-metric-offset

Description

This command sets the offset value for the IPv4 multicast address family. If the number of operational links drops below the oper-members threshold, the configured offset is applied to the interface metric for the IPv4 multicast topology

The no form of this command reverts the offset value to 0.

Default

no ipv4-multicast-metric-offset

Parameters

offset-value

Specifies the amount the interface metric for the associated address family is to be increased if the number of operational members in the associated link-group drops below the oper-members threshold.

Values

0 to 6777215

Platforms

All

Context

[Tree] (config>router>isis>link-group>level ipv4-multicast-metric-offset)

Full Context

configure router isis link-group level ipv4-multicast-metric-offset

Description

This command sets the offset value for the IPv4 multicast address family. If the number of operational links drops below the oper-members threshold, the configured offset is applied to the interface metric for the IPv4 multicast topology.

The no form of this command reverts the offset value to 0.

Default

no ipv4-multicast-metric-offset

Parameters

offset-value

Specifies the amount the interface metric for the associated address family is to be increased if the number of operational members in the associated link-group drops below the oper-members threshold

Values

0 to 6777215

Platforms

All

Context

[Tree] (config>service>vprn>isis ipv4-multicast-routing)

Full Context

configure service vprn isis ipv4-multicast-routing

Description

The multicast RTM is used for Reverse Path Forwarding checks. This command controls which IS-IS topology is used to populate the IPv4 multicast RTM.

The no ipv4-multicast-routing form of this command results in none of the IS-IS routes being populated in the IPv4 multicast RTM and would be used if multicast is configured to use the unicast RTM for the RPF check.

Default

ipv4-multicast-routing native

Parameters

native

Causes IPv4 routes from the MT0 topology to be added to the multicast RTM for RPF checks.

mt

Causes IPv4 routes from the MT3 topology to be added to the multicast RTM for RPF checks.

Platforms

All

Context

[Tree] (config>router>isis ipv4-multicast-routing)

Full Context

configure router isis ipv4-multicast-routing

Description

The multicast RTM is used for Reverse Path Forwarding checks. This command controls which IS-IS topology is used to populate the IPv4 multicast RTM.

The no form of this command results in none of the IS-IS routes being populated in the IPv4 multicast RTM and would be used if multicast is configured to use the unicast RTM for the RPF check.

Default

ipv4-multicast-routing native

Parameters

native

Causes IPv4 routes from the MT0 topology to be added to the multicast RTM for RPF checks.

mt

Causes IPv4 routes from the MT3 topology to be added to the multicast RTM for RPF checks.

Platforms

All

Context

[Tree] (config>router>isis>interface ipv4-node-sid)

Full Context

configure router isis interface ipv4-node-sid

Description

This command assigns a node SID index or label value to the prefix representing the primary address of an IPv4 network interface of type loopback. Only a single node SID can be assigned to an interface. The secondary address of an IPv4 interface cannot be assigned a node SID index and does not inherit the SID of the primary IPv4 address.

The command fails if the network interface is not of type loopback or if the interface is defined in an IES or a VPRN context. Also, assigning the same SID index or label value to the same interface in two different IGP instances is not allowed within the same node.

The value of the label or index SID is taken from the range configured for this IGP instance. When using the global mode of operation, a new segment routing module checks that the same index or label value cannot be assigned to more than one loopback interface address. When using the per-instance mode of operation, this check is not required since the index and thus label ranges of the various IGP instance are not allowed to overlap.

The clear-n-flag option allows the user to clear the N-flag (node-sid flag) in an IS-IS prefix SID sub-TLV originated for the IPv4 prefix of a loopback interface on the system.

By default, the prefix SID sub-TLV for the prefix of a loopback interface is tagged as a node SID, meaning that it belongs to this node only. However, when the user wants to configure and advertise an anycast SID using the same loopback interface prefix on multiple nodes, you must clear the N-flag to assure interoperability with third party implementations, which may perform a strict check on the receiving end and drop duplicate prefix SID sub-TLVs when the N-flag is set.

The SR OS implementation is relaxed on the receiving end and accepts duplicate prefix SIDs with the N-flag set or cleared. SR OS will resolve to the closest owner, or owners if ECMP is configured, of the prefix SID according to its cost.

Default

no ipv4-node-sid

Parameters

index index-value

Specifies the index value.

Values

0 to 4294967295

label label-value

Specifies the label value.

Values

0 to 4294967295

clear-n-flag

Clears the node SID flag.

Default

no clear-n-flag

Platforms

All

Context

[Tree] (config>subscr-mgmt>sub-profile>host-limits ipv4-overall)

[Tree] (config>subscr-mgmt>sla-profile>host-limits ipv4-overall)

Full Context

configure subscriber-mgmt sub-profile host-limits ipv4-overall

configure subscriber-mgmt sla-profile host-limits ipv4-overall

Description

This command configures the maximum number of IPv4 hosts per SLA profile instance or per subscriber.

The no form of this command removes the maximum number of IPv4 hosts limit.

Parameters

max-nr-of-hosts

Specifies the maximum number of IPv4 hosts.

Note:

The operational maximum value may be smaller due to equipped hardware dependencies.

Values

0 to 131071

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>sla-profile>host-limits ipv4-ppp)

[Tree] (config>subscr-mgmt>sub-profile>host-limits ipv4-ppp)

Full Context

configure subscriber-mgmt sla-profile host-limits ipv4-ppp

configure subscriber-mgmt sub-profile host-limits ipv4-ppp

Description

This command configures the maximum number of IPv4 PPP hosts per SLA profile instance or per subscriber.

The no form of this command removes the maximum number of IPv4 PPP hosts limit.

Parameters

max-nr-of-hosts

Specifies the maximum number of IPv4 PPP hosts.

Values

0 to 131071

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>nat>map-domain>mapping-rule ipv4-prefix)

Full Context

configure service nat map-domain mapping-rule ipv4-prefix

Description

This command configures an IPv4 MAP rule prefix.

Parameters

ipv4-prefix

Specifies the IPv4 MAP prefix.

Values

<ipv4-prefix>/<ipv4-prefix-length>

<ipv4-prefix> : a.b.c.d (host bits must be 0)

<ipv4-prefix-length> : [0..32]

Platforms

7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s, VSR

Context

[Tree] (debug>router>rpki-session>packet ipv4-prefix)

Full Context

debug router rpki-session packet ipv4-prefix

Description

This command enables debugging for IPv4 prefix RPKI packets.

The no form of this command disables debugging for IPv4 prefix RPKI packets.

Platforms

All

Context

[Tree] (config>service>vprn>isis ipv4-routing)

Full Context

configure service vprn isis ipv4-routing

Description

This command specifies whether this IS-IS instance supports IPv4.

The no form of this command disables IPv4 on the IS-IS instance.

Default

ipv4-routing

Platforms

All

Context

[Tree] (config>router>isis ipv4-routing)

Full Context

configure router isis ipv4-routing

Description

This command specifies whether this IS-IS instance supports IPv4.

The no form of this command disables IPv4 on the IS-IS instance.

Default

ipv4-routing

Platforms

All

Context

[Tree] (config>router>segment-routing>sr-mpls>prefix-sids ipv4-sid)

Full Context

configure router segment-routing sr-mpls prefix-sids ipv4-sid

Description

This command is used to configure the IPv4 segment routing SID associated with the primary IPv4 address of the loopback or system interface.

The no form of this command removes the configuration of the IPv4 segment routing SID associated with the primary IPv4 interface address.

Default

no ipv4-sid

Parameters

index index-id

Specifies the node SID index for this interface.

Values

0 to 4294967295

label label-id

Specifies the label value for the node SID.

Values

32 to 1048575

Platforms

All

Context

[Tree] (config>service>vprn>dns ipv4-source-address)

Full Context

configure service vprn dns ipv4-source-address

Description

This command configures the IPv4 address of the default secondary DNS server for the subscribers using this interface. Subscribers that cannot obtain an IPv4 DNS server address by other means, can use this for DNS name resolution.

The ipv4-address value can only be set to a nonzero value if the value of VPRN type is set to subscriber-split-horizon.

The no form of this command reverts to the default.

Parameters

ipv4-address

Specifies the IPv4 address of the default secondary DNS server.

Values

ipv4-address - a.b.c.d

Platforms

All

Context

[Tree] (config>system>file-trans-prof ipv4-source-address)

Full Context

configure system file-transmission-profile ipv4-source-address

Description

This command specifies the IPv4 source address used for transport protocol.

The no form of this command uses the default source address which typically is the address of the egress interface.

Default

no ipv4-source-address

Parameters

ip-address

Specifies a unicast v4 address. This should be a local interface address.

Platforms

All

Context

[Tree] (config>service>nat>syslog>syslog-export-policy>collector ipv4-source-address)

Full Context

configure service nat syslog syslog-export-policy collector ipv4-source-address

Description

This command configures the IPv4 source address from which the UDP streams containing syslog flow records are sourced.

The no form of the command removes the IPv4 address from the configuration.

Parameters

ip-address

Specifies the source IPv4 address from which UDP streams are sent.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>isis>link-group>level ipv4-unicast-metric-offset)

Full Context

configure service vprn isis link-group level ipv4-unicast-metric-offset

Description

This command sets the offset value for the IPv4 unicast address family. If the number of operational links drops below the oper-members threshold, the configured offset is applied to the interface metric.

The no form of this command reverts the offset value to 0.

Default

no ipv4-unicast-metric-offset

Parameters

offset-value

Specifies the amount the interface metric for the associated address family is to be increased if the number of operational members in the associated link-group drops below the oper-members threshold.

Values

0 to 6777215

Platforms

All

Context

[Tree] (config>router>isis>link-group>level ipv4-unicast-metric-offset)

Full Context

configure router isis link-group level ipv4-unicast-metric-offset

Description

This command sets the offset value for the IPv4 unicast address family. If the number of operational links drops below the oper-members threshold, the configured offset is applied to the interface metric.

The no form of this command reverts the offset value to 0.

Default

no ipv4-unicast-metric-offset

Parameters

offset-value

Specifies the amount the interface metric for the associated address family is to be increased if the number of operational members in the associated link-group drops below the oper-members threshold.

Values

0 to 6777215

Platforms

All

Context

[Tree] (config>service>vprn>if ipv6)

[Tree] (config>service>ies>sub-if ipv6)

[Tree] (config>service>ies>if ipv6)

[Tree] (config>service>vprn>sub-if ipv6)

[Tree] (config>service>vprn>sub-if>lcl-addr-assign ipv6)

[Tree] (config>service>ies>sub-if>lcl-addr-assign ipv6)

[Tree] (config>service>ies>sub-if>grp-if ipv6)

[Tree] (config>service>vprn>sub-if>grp-if ipv6)

Full Context

configure service vprn interface ipv6

configure service ies subscriber-interface ipv6

configure service ies interface ipv6

configure service vprn subscriber-interface ipv6

configure service vprn subscriber-interface local-address-assignment ipv6

configure service ies subscriber-interface local-address-assignment ipv6

configure service ies subscriber-interface group-interface ipv6

configure service vprn subscriber-interface group-interface ipv6

Description

Commands in this context configure IPv6 parameters for the interface.

Platforms

All

• configure service ies interface ipv6
• configure service vprn interface ipv6

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn subscriber-interface group-interface ipv6
• configure service ies subscriber-interface group-interface ipv6
• configure service ies subscriber-interface ipv6
• configure service ies subscriber-interface local-address-assignment ipv6
• configure service vprn subscriber-interface local-address-assignment ipv6
• configure service vprn subscriber-interface ipv6

Context

[Tree] (config>subscr-mgmt>bgp-prng-plcy>family ipv6)

Full Context

configure subscriber-mgmt bgp-peering-policy family ipv6

Description

This command configures Multiprotocol Border Gateway Protocol (MPBGP) support for the IPv6 address family.

The no form of this command removes the IPv6 configuration.

Default

no ipv6

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>template>epipe-sap-template>egress>filter ipv6)

[Tree] (config>service>template>epipe-sap-template>ingress>filter ipv6)

Full Context

configure service template epipe-sap-template egress filter ipv6

configure service template epipe-sap-template ingress filter ipv6

Description

This command associates an existing IPv6 filter policy with the template.

This command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic).

Parameters

ipv6-filter-id

Specifies the IPv6 filter policy. The filter ID must already exist within the created IPv6 filters.

Values

1 to 65535

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>template>epipe-sap-template>ingress>filter-name ipv6)

[Tree] (config>service>template>epipe-sap-template>egress>filter-name ipv6)

Full Context

configure service template epipe-sap-template ingress filter-name ipv6

configure service template epipe-sap-template egress filter-name ipv6

Description

This command associates an existing IP filter policy with the template.

Parameters

name

Specifies the IPv6 filter policy name, up to 64 characters.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>template>vpls-sap-template>egress>filter-name ipv6)

[Tree] (config>service>template>vpls-sap-template>ingress>filter-name ipv6)

Full Context

configure service template vpls-sap-template egress filter-name ipv6

configure service template vpls-sap-template ingress filter-name ipv6

Description

This command associates an existing IP filter policy with the template.

Parameters

name

Specifies the IPv6 filter policy name, up to 64 characters.

Platforms

All

Context

[Tree] (config>service>vprn>bgp>multi-path ipv6)

Full Context

configure service vprn bgp multi-path ipv6

Description

This command sets ECMP multipath parameters that apply only to the (unlabeled) IPv6 unicast address family. These settings override the values set by the maximum-paths command.

When multipath is enabled, traffic to the destination is load-shared across a set of paths (BGP routes) that the BGP decision process considers equal to the best path. The actual distribution of traffic over the multiple paths may be equal or unequal (that is, based on weights derived from the Link Bandwidth Extended Community).

To qualify as a multipath, a non-best route must meet the following criteria (some criteria are controlled by this command):

• The multi-path route must be the same type of route as the best path (same AFI/SAFI and, in some cases, same next-hop resolution method).

• The multi-path route must be tied with the best path for all criteria of greater significance than next-hop cost, except for criteria that are configured to be ignored.

• If the best path selection reaches the next-hop cost comparison, the multi-path route must have the same next-hop cost as the best route unless the unequal-cost option is configured.

• The multi-path route must not have the same BGP next-hop as the best path or any other multi-path route.

• The multi-path route must not cause the ECMP limit of the routing instance to be exceeded (configured using the ecmp command with a value in the range 1 to 64)

• The multi-path route must not cause the applicable max-paths limit to be exceeded. If the best path is an EBGP learned route and the ebgp option is used, the ebgp-max-paths limit overrides the max-paths limit. If the best path is an IBGP-learned route and the ibgp option is used, the ibgp-max-paths limit overrides the max-paths limit. All path limits are configurable up to a maximum of 64. Multi-path is effectively disabled if a value is set to 1.

• The multi-path route must have the same neighbor AS in its AS path as the best path if the restrict same-neighbor-as option is configured. By default, any path with the same AS path length as the best path (regardless of neighbor AS) is eligible for multi-path.

• The route must have the same AS path as the best path if the restrict exact-as-path option is configured. By default, any path with the same AS path length as the best path (regardless of the actual AS numbers) is eligible for multi-path.

The no form of this command removes IPv6-specific overrides.

Default

no ipv6

Parameters

max-paths

Specifies the maximum number of multipaths per prefix/NLRI if ebgp-max-paths or ibgp-max-paths does not apply.

Values

1 to 64

egp-max-paths

Specifies the maximum number of multipaths per prefix or NLRI when the best path is an EBGP learned route.

Values

1 to 64

ibgp-max-paths

Specifies the maximum number of multipaths per prefix or NLRI when the best path is an IBGP learned route.

Values

1 to 64

restrict same-neighbor-as

Specifies that the non-best path must have the same neighbor AS in its AS path as the best path.

restrict exact-as-path-as

Specifies that the non-best path must have the same AS path as the best path.

unequal-cost

Instructs BGP to ignore differences in the next-hop cost only when determining eligible multipaths.

When enabled, the Alc-App-Prof-Str VSA is ignored in a radius Accept that enables portal redirection using this redirect policy. AA functionality will be disabled during portal authentication.

The no version of this command allows an Alc-App-Prof-Str to be present and will enable Application Assurance during portal authentication. In this case redirection rules defined in this policy are bypassed and it is assumed the AA function is configured for portal redirection.

Platforms

All

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>to-server-options ipv6)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>to-client-options ipv6)

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>to-client-options ipv6)

Full Context

configure subscriber-mgmt local-user-db ipoe host to-server-options ipv6

configure subscriber-mgmt local-user-db ipoe host to-client-options ipv6

configure subscriber-mgmt local-user-db ppp host to-client-options ipv6

Description

This command enables the context to configure DHCPv6 options.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>isa-filter ipv6)

Full Context

configure subscriber-mgmt isa-filter ipv6

Description

Commands in this context configure IPv6 parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>mvpn>red-source-list ipv6)

Full Context

configure service vprn mvpn red-source-list ipv6

Description

This command enables context to configure list of redundant IPv6 source prefixes for preferred source selection.

Platforms

All

Context

[Tree] (config>service>vprn>pim>rp ipv6)

Full Context

configure service vprn pim rp ipv6

Description

This command enables access to the context to configure the rendezvous point (RP) of a PIM IPv6 protocol instance.

A Nokia IPv6 PIM router acting as an RP must respond to an IPv6 PIM register message specifying an SSM multicast group address by sending to the first hop router stop register message(s). It does not build an (S, G) shortest path tree toward the first hop router. An SSM multicast group address can be either from the SSM default range or from a multicast group address range that was explicitly configured for SSM.

Default

ipv6 RP enabled when IPv6 PIM is enabled.

Platforms

All

Context

[Tree] (config>router>ldp>if-params>if ipv6)

Full Context

configure router ldp interface-parameters interface ipv6

Description

Commands in this context configure IPv6 LDP parameters applied to the interface.

This command is not supported on the 7450 ESS.

Platforms

All

Context

[Tree] (config>router>ldp>if-params ipv6)

Full Context

configure router ldp interface-parameters ipv6

Description

Commands in this context configure LDP interfaces and parameters applied to an IPv6 LDP interface.

This command is not supported on the 7450 ESS.

Platforms

All

Context

[Tree] (config>router>ldp>targeted-session ipv6)

Full Context

configure router ldp targeted-session ipv6

Description

Commands in this context configure parameters applied to targeted sessions to all IPv6 LDP peers.

This command is not supported on the 7450 ESS.

Platforms

All

Context

[Tree] (config>service>vprn>if>sap>ipsec-gw>lcl-addr-assign ipv6)

[Tree] (config>service>ies>if>sap>ipsec-gw>lcl-addr-assign ipv6)

Full Context

configure service vprn interface sap ipsec-gw local-address-assignment ipv6

configure service ies interface sap ipsec-gw local-address-assignment ipv6

Description

Commands in this context configure IPv6 local address assignment parameters for the IPsec gateway.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>pim>rp ipv6)

Full Context

configure router pim rp ipv6

Description

Commands in this context configure IPv6 parameters.

Platforms

All

Context

[Tree] (debug>oam>build-packet>packet>field-override>header ipv6)

[Tree] (config>test-oam>build-packet>header ipv6)

Full Context

debug oam build-packet packet field-override header ipv6

configure test-oam build-packet header ipv6

Description

This command causes the associated header to be defined as an IPv6 header template and enters the context to define the IPv6 parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>cflowd>collector>export-filter>family ipv6)

Full Context

configure cflowd collector export-filter family ipv6

Description

This command filters IPv6 flow data from being sent to the associated collector.

The no form of this command removes the filter, allowing IPv6 flow data to be sent to the associated collector.

Default

no ipv6

Platforms

All

Context

[Tree] (config>filter>system-filter ipv6)

Full Context

configure filter system-filter ipv6

Description

This command activates an IPv6 system filter policy. Once activated, all IPv6 ACL filter policies that chain to the system filter ( config>filter>ipv6-filter>chain-to-system-filter) will automatically execute system filter policy rules first.

The no form of the command deactivates the system filter policy.

Parameters

ipv6-filter-id

Specifies the existing IPv6 filter policy with scope system. This parameter can either be expressed as a decimal integer, or as an ASCII string of up to 64 characters in length.

Values

1 to 65535 or the filter policy name

Platforms

All

Context

[Tree] (config>router ipv6)

Full Context

configure router ipv6

Description

Commands in this context configure the IPv6 interface of the router.

Default

ipv6

Platforms

All

Context

[Tree] (config>router>if ipv6)

Full Context

configure router interface ipv6

Description

This command configures IPv6 for a router interface.

The no form of this command disables IPv6 on the interface.

Default

no ipv6

Platforms

All

Context

[Tree] (bof>autoconfigure ipv6)

Full Context

bof autoconfigure ipv6

Description

Commands in this context autoconfigure the IPv6 DHCP client.

Platforms

7450 ESS-7, 7750 SR-1, 7750 SR-7, 7750 SR-1e, 7750 SR-2e, 7750 SR-s

Context

[Tree] (config>system>ned>prof>neip ipv6)

Full Context

configure system network-element-discovery profile neip ipv6

Description

This command configures the IPv6 NEIP for this profile. The NEIP can be configured manually or set to be automatically generated. If the NEIP is set to be automatically generated, the NEID is used for the subnet and host portion of the IPv6 address and the vendor ID value is set to 140 by default. The vendor ID value can be configured.

The no form of this command removes the IPv6 address association for this profile.

Default

no ipv6

Parameters

ipv6-address

Specifies the IPv6 address of the NEIP.

Values

ipv6-address	x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x: [0..FFFF]H
	d: [0..255]D

auto-generate

Specifies that the NEIP is automatically generated using the NEID.

vendor-id-value

Specifies the vendor ID value.

Values

1 to 255

Platforms

All

Context

[Tree] (config>router>bgp>add-paths ipv6)

[Tree] (config>router>bgp>group>add-paths ipv6)

[Tree] (config>router>bgp>group>neighbor>add-paths ipv6)

Full Context

configure router bgp add-paths ipv6

configure router bgp group add-paths ipv6

configure router bgp group neighbor add-paths ipv6

Description

This command configures the add-paths capability for unlabeled IPv6 unicast routes. By default, add-paths is not enabled for unlabeled IPv6 unicast routes.

The maximum number of unlabeled unicast paths per IPv6 prefix to send is the configured send limit, which is a mandatory parameter. The capability to receive multiple unlabeled IPv6 unicast paths per prefix from a peer is configurable using the receive keyword, which is optional. If the receive keyword is not included in the command the receive capability is enabled by default.

The no form of this command disables add-paths support for unlabeled IPv6 unicast routes, causing sessions established using add-paths for unlabeled IPv6 unicast to go down and come back up without the add-paths capability.

Default

no ipv6

Parameters

send send-limit

Specifies the maximum number of paths per unlabeled IPv6 unicast prefix that are allowed to be advertised to add-paths peers. (The actual number of advertised routes may be less.) If the value is none, the router does not negotiate the send capability with respect to IPv6 AFI/SAFI. If the value is multipaths, then BGP advertises all the used BGP multipaths for each IPv6 NLRI if the peer has signaled support to receive multiple add-paths.

Values

1 to 16, none, multipaths

receive

Specifies the router negotiates to receive multiple unlabeled unicast routes per IPv6 prefix.

none

Specifies the router does not negotiate to receive multiple unlabeled unicast routes per IPv6 prefix.

Platforms

All

Context

[Tree] (config>router>bgp>multi-path ipv6)

Full Context

configure router bgp multi-path ipv6

Description

This command sets ECMP multipath parameters that apply only to the (unlabeled) IPv6 unicast address family. These settings override the values set by the maximum-paths command.

When multipath is enabled, traffic to the destination is load-shared across a set of paths (BGP routes) that the BGP decision process considers equal to the best path. The actual distribution of traffic over the multiple paths may be equal or unequal (that is, based on weights derived from the Link Bandwidth Extended Community).

The no form of this command removes IPv6-specific overrides.

Default

no ipv6

Parameters

max-paths

Specifies the maximum number of multipaths per prefix/NLRI if ebgp-max-paths or ibgp-max-paths does not apply.

Values

1 to 64

ebgp-max-paths

Specifies the maximum number of multipaths per prefix or NLRI when the best path is an EBGP learned route.

Values

1 to 64

ibgp-max-paths

Specifies the maximum number of multipaths per prefix or NLRI when the best path is an IBGP learned route.

Values

1 to 64

restrict same-neighbor-as

Specifies that the non-best path must have the same neighbor AS in its AS path as the best path.

restrict exact-as-path

Specifies that the non-best path must have the same AS path as the best path.

unequal-cost

Instructs BGP to ignore differences in the next-hop cost only when determining eligible multipaths.

Platforms

All

Context

[Tree] (config>router>isis>traffic-engineering-options ipv6)

Full Context

configure router isis traffic-engineering-options ipv6

Description

This command enables the advertisement of IPv6 TE in the IS-IS instance. When this command is enabled, traffic engineering behavior with IPv6 TE links is enabled. This IS-IS instance automatically begins advertising the new RFC 6119 IPv6 and TE TLVs and sub-TLVs.

The no form of this command disables IPv6 TE in this ISIS instance.

Default

no ipv6

Platforms

All

Context

[Tree] (config>router>if>if-attr>delay>dyn>twamp ipv6)

Full Context

configure router interface if-attribute delay dynamic twamp-light ipv6

Description

Commands in this context select, enable, and specify the IPv6 addressing used to carry the TWAMP Light test packet.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>test-oam>icmp ipv6)

Full Context

configure test-oam icmp ipv6

Description

Commands in this context configure IPv6 traceroute packet handling.

Platforms

All

Context

[Tree] (config>aaa>isa-radius-plcy>servers ipv6)

Full Context

configure aaa isa-radius-policy servers ipv6

Description

Commands in this context configure how to communicate with IPv6 RADIUS servers.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host ipv6-address)

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host ipv6-address)

Full Context

configure subscriber-mgmt local-user-db ipoe host ipv6-address

configure subscriber-mgmt local-user-db ppp host ipv6-address

Description

This command configures static DHCPv6 IA-NA address for the host. This address is delegated to the client as /128 via DHCPv6 proxy function within the router. This IP address must not be part of any DHCP pool within internal DHCP server.

The no form of this command removes the IPv6 address from the host configuration.

Parameters

ipv6-address

Specifies the IPv6 address.

Values

ipv6-address:	ipv6-prefix x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x [0 to FFFF]H
	d [0 to 255]D

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>radius-proxy>server>wlan-gw ipv6-address)

[Tree] (config>service>vprn>radius-proxy>server>wlan-gw ipv6-address)

Full Context

configure router radius-proxy server wlan-gw ipv6-address

configure service vprn radius-proxy server wlan-gw ipv6-address

Description

This command configures the IPv6 address of the distributed RADIUS proxy server for use by the access points.

The no form of this command removes the address from the configuration.

Parameters

ipv6-address

Specifies the destination IPv6 address of the RADIUS proxy server.

Values

ipv6-prefix x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x [0 to FFFF]H

d [0 to 255]D

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>acct-plcy>include-radius-attribute ipv6-address)

Full Context

configure subscriber-mgmt radius-accounting-policy include-radius-attribute ipv6-address

Description

This command enables the generation of the ipv6-address RADIUS attribute.

The no form of this command disables the generation of the ipv6-address RADIUS attribute.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>aaa>isa-radius-plcy>auth-include-attributes ipv6-address)

Full Context

configure aaa isa-radius-policy auth-include-attributes ipv6-address

Description

This attribute defines if the ipv6 address of the UE is present during authentication if the datatrigger packet is IPv6.

Default

no ipv6-address

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes ipv6-address)

Full Context

configure aaa isa-radius-policy acct-include-attributes ipv6-address

Description

If an active IA_NA lease exists, this attribute defines if the IA_NA address of the UE is present in accounting.

Default

no ipv6-address

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>port>ethernet>ptp-timestamping ipv6-address)

[Tree] (config>lag>ptp-timestamping ipv6-address)

Full Context

configure port ethernet ptp-timestamping ipv6-address

configure lag ptp-timestamping ipv6-address

Description

This command configures an IPv6 destination address by which to filter the PTP messages. Only unicast addresses are supported.

The no form of this command removes the IPv6 address from the filter.

Default

no ipv6-address

Parameters

ipv6-address

Specifies the IPv6 address.

Values

ipv6-address:	ipv6-prefix x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x [0 to FFFF]H
	d [0 to 255]D

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

Context

[Tree] (conf>sys>sat>eth-sat>ptp-ip ipv6-address)

Full Context

configure system satellite eth-sat ptp-ip ipv6-address

Description

This command configures the IPv6 destination address of PTP messages received into the satellite client ports. Use the same IPv6 address used for the PTP process on the host system. Only unicast addresses can be used.

The no form of this command removes the IPv6 address.

Default

no ipv6-address

Parameters

ipv6-address

Specifies the IPv6 address.

Values

ipv6-address	x:x:x:x:x:x:x:x[-interface]
	x:x:x:x:x:x:d.d.d.d[-interface]
	where:
	x: [0 to FFFF]H
	d: [0 to 255]D
	interface: up to 32 characters, mandatory for link local addresses

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

Context

[Tree] (config>app-assure>group>transit-ip-policy ipv6-address-prefix-length)

Full Context

configure application-assurance group transit-ip-policy ipv6-address-prefix-length

Description

This command configures a transit IP policy IPv6 address prefix length.

Default

no ipv6-address-prefix-length

Parameters

IPv6-prefix-length

Specifies the prefix length of IPv6 addresses in this policy for both static and dynamic transits.

Values

32 to 64

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>isis>interface ipv6-adjacency-sid)

Full Context

configure router isis interface ipv6-adjacency-sid

Description

This command allows a static value to be assigned to an IPv6 adjacency SID in IS-IS segment routing.

The label option specifies that the value is assigned to an MPLS label.

The no form of this command removes the adjacency SID.

Parameters

value

Specifies the adjacency SID label.

Values

18432 to 5248, 1048575 (FP4 or FP5 only)

Platforms

All

Context

[Tree] (config>qos>sap-ingress ipv6-criteria)

[Tree] (config>qos>sap-egress ipv6-criteria)

Full Context

configure qos sap-ingress ipv6-criteria

configure qos sap-egress ipv6-criteria

Description

IPv6 criteria-based SAP egress or ingress policies are used to select the appropriate ingress or egress queue or policer and corresponding forwarding class and packet profile for matched traffic.

This command is used to enter the node to create or edit policy entries that specify IPv6 criteria such as IP quintuple lookup or DiffServ code point.

The OS implementation will exit on the first match found and execute the actions in accordance with the accompanying action command. For this reason, entries must be sequenced correctly from most to least explicit.

The no form of this command deletes all the entries specified under this node. When ipv6-criteria entries are removed from a SAP ingress policy, the ipv6-criteria is removed from all services where that policy is applied.

Platforms

All

Context

[Tree] (config>qos>network>ingress ipv6-criteria)

[Tree] (config>qos>network>egress ipv6-criteria)

Full Context

configure qos network ingress ipv6-criteria

configure qos network egress ipv6-criteria

Description

IPv6 criteria-based network ingress and egress policies are used to select the appropriate ingress or egress queue or policer, and the corresponding forwarding class and packet profile for matched traffic. This command is used to enter the context to create or edit policy entries that specify IPv6 criteria such as IP quintuple lookup or DSCP.

The 7750 SR OS implementation will exit on the first match found and execute the actions in accordance with the accompanying action command. Entries must be sequenced correctly from most to least explicit.

The ingress classification only applies to the outer IPv6 header of non-tunneled traffic.

Attempting to apply a network QoS policy containing an ipv6-criteria statement to any object except a network IP interface will result in an error.

The no form of this command deletes all entries specified under this node. When IP criteria entries are removed from a network policy, the IPv6 criteria are removed from all network interfaces to which that policy is applied.

Platforms

All

Context

[Tree] (config>service>ipipe>sap>ingress>criteria-overrides ipv6-criteria)

[Tree] (config>service>vprn>if>sap>ingress>criteria-overrides ipv6-criteria)

[Tree] (config>service>cpipe>sap>ingress>criteria-overrides ipv6-criteria)

[Tree] (config>service>ies>if>sap>ingress>criteria-overrides ipv6-criteria)

[Tree] (config>service>epipe>sap>ingress>criteria-overrides ipv6-criteria)

[Tree] (config>service>vpls>sap>ingress>criteria-overrides ipv6-criteria)

Full Context

configure service ipipe sap ingress criteria-overrides ipv6-criteria

configure service vprn interface sap ingress criteria-overrides ipv6-criteria

configure service cpipe sap ingress criteria-overrides ipv6-criteria

configure service ies interface sap ingress criteria-overrides ipv6-criteria

configure service epipe sap ingress criteria-overrides ipv6-criteria

configure service vpls sap ingress criteria-overrides ipv6-criteria

Description

Commands in this context configure IPv6 criteria overrides.

The no form of this command removes any existing IPv6 overrides from the SAP.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host ipv6-delegated-prefix)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host ipv6-delegated-prefix)

Full Context

configure subscriber-mgmt local-user-db ppp host ipv6-delegated-prefix

configure subscriber-mgmt local-user-db ipoe host ipv6-delegated-prefix

Description

This command configures static DHCPv6 IA-PD prefix for the host. This prefix can be further delegated by the host itself to its clients. The prefix length is restricted to 48 to 64 bits. This prefix must not be part of any DHCP pool within internal DHCP server.

Parameters

ipv6-address

Specifies the IPv6 address.

Values

ipv6-address:	ipv6-prefix x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x [0 to FFFF]H
	d [0 to 255]D
prefix-length	48 to 64

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host ipv6-delegated-prefix-length)

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host ipv6-delegated-prefix-length)

Full Context

configure subscriber-mgmt local-user-db ipoe host ipv6-delegated-prefix-length

configure subscriber-mgmt local-user-db ppp host ipv6-delegated-prefix-length

Description

This command allows configuration of delegated prefix length via local user database.

The no form of this command reverts to the default.

Parameters

bits

Specifies the delegated prefix length, in bits.

Values

48 to 64

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host ipv6-delegated-prefix-pool)

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host ipv6-delegated-prefix-pool)

Full Context

configure subscriber-mgmt local-user-db ipoe host ipv6-delegated-prefix-pool

configure subscriber-mgmt local-user-db ppp host ipv6-delegated-prefix-pool

Description

This command configures the pool name that is used in DHCPv6 server for DHCPv6 IA-PD prefix selection.

The no form of this command removes the pool name from the configuration.

Parameters

pool-name

Specifies the pool name, up to 32 characters, to be assigned to the delegated prefix pool.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>test-oam>link-meas>template>twl ipv6-destination-discovery)

Full Context

configure test-oam link-measurement measurement-template twamp-light ipv6-destination-discovery

Description

Commands in this context configure IPv6 discovery of a directly-connected IPv6 peer address.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>system>ip ipv6-eh)

Full Context

configure system ip ipv6-eh

Description

This command defines the maximum number of IPv6 extension headers parsed in the line cards. The system parses up to six extension headers when ipv6-eh max is configured.

When the ipv6-eh limited command is configured, the system does not parse IPv6 extension headers and provides consistent ipv6-filter matches for the next-header value found in the IPv6 packet header. LAG and ECMP hashing of IPv6 packets with extension headers is limited to Layer 3 IP addresses. Layer 4 ports, TEID, and SPI values are not available for hashing. MLD snooping on Layer 2 services is also not supported in this mode.

The no form of this command reverts to the default value.

Default

ipv6-eh max

Parameters

max

Specifies that the maximum number of IPv6 extension headers is parsed in the line cards.

limited

Specifies that the system does not parse IPv6 extension headers and provides consistent ipv6-filter matches for the next-header value found in the IPv6 packet header.

Platforms

All

Context

[Tree] (debug>router>ip>event ipv6-error)

Full Context

debug router ip event ipv6-error

Description

This command enables debugging for IPv6 error events.

The no form of this command disables debugging for IPv6 error events

Platforms

All

Context

[Tree] (config>service>vprn>if>ipsec ipv6-exception)

[Tree] (config>router>if>ipsec ipv6-exception)

[Tree] (config>service>ies>if>ipsec ipv6-exception)

Full Context

configure service vprn interface ipsec ipv6-exception

configure router interface ipsec ipv6-exception

configure service ies interface ipsec ipv6-exception

Description

This command configures the IPv6 filter exception for an IPsec-secured IPv6 interface. When an IPv6 filter exception is added, clear text packets that match the exception criteria in the IPv6 filter exception policy can ingress the interface, even when IPsec is enabled on that interface.

The no form of this command removes the IPv6 filter exception.

Default

no ipv6-exception

Parameters

exception

Specifies the IPv6 filter exception that is used to bypass encryption.

Values

exception-id: 1 to 65535

exception-name: An existing IPv6 filter exception name up to 64 characters.

Platforms

VSR

Context

[Tree] (config>filter ipv6-exception)

Full Context

configure filter ipv6-exception

Description

Commands in this context configure the specified IPv6 exception filter.

The no form of the command deletes the IPv6 exception filter.

Parameters

exception-id

Specifies the IPv6 filter exception ID expressed as a decimal integer.

Values

1 to 65535

name exception-name

Specifies the IPv6 filter exception as a name, up to 64 characters.

create

This keyword is required to create the configuration context. Once it is created, the context can be enabled with or without the create keyword.

Platforms

VSR

Context

[Tree] (config>subscr-mgmt>sla-profile>egress ipv6-filter)

[Tree] (config>subscr-mgmt>sla-profile>ingress ipv6-filter)

Full Context

configure subscriber-mgmt sla-profile egress ipv6-filter

configure subscriber-mgmt sla-profile ingress ipv6-filter

Description

This command configures an egress or ingress IPv6 filter.

The no form of this command reverts to the default.

Parameters

ipv6-filter-id

Specifies an existing IPv6 filter policy ID.

Values

1 to 65535, or name, up to 64 characters

force

Forces the exclusion of the IPv6 filter.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>mirror>mirror-source ipv6-filter)

Full Context

configure mirror mirror-source ipv6-filter

Description

This command enables mirroring of packets that match specific entries in an existing IPv6 filter.

The ipv6-filter command directs packets which match the defined list of entry IDs to be mirrored to the mirror destination referenced by the mirror-dest-service-id of the mirror-source.

The IPv6 filter must already exist in order for the command to execute. Filters are configured in the config>filter context. If the IPv6 filter does not exist, an error will occur. If the filter exists but has not been associated with a SAP or IPv6 interface, an error is not generated but mirroring will not be enabled (there are no packets to mirror). Once the IPv6 filter is defined to a SAP or IPv6 interface, mirroring is enabled.

If the IPv6 filter is defined as ingress, only ingress packets are mirrored. Ingress mirrored packets are mirrored to the mirror destination prior to any ingress packet modifications.

If the IPv6 filter is defined as egress, only egress packets are mirrored. Egress mirrored packets are mirrored to the mirror destination after all egress packet modifications.

An entry-id within an IPv6 filter can only be mirrored to a single mirror destination. If the same entry-id is defined multiple times, an error occurs and only the first mirror-source definition is in effect.

By default, no packets matching any IPv6 filters are mirrored. Mirroring of IPv6 filter entries must be explicitly defined.

The no ipv6-filter command, without the entry keyword, removes mirroring on all entry-id’s within the ip-filter-id.

When the no form of this command is executed with the entry keyword and one or more entry-id’s, mirroring that entry-id list is terminated within the ip-filter-id. If an entry-id is listed that does not exist, an error will occur and the command will not execute. If an entry-id is listed that is not currently being mirrored, no error will occur for that entry-id and the command will execute normally.

Parameters

ipv6-filter-id

Specifies the IPv6 filter ID whose entries are mirrored. If the ipv6-filter-id does not exist, an error will occur and the command will not execute. Mirroring of packets will commence once the ipv6-filter-id is defined on a SAP or IPv6 interface.

entry-id

Specifies the IP filter entries to use as match criteria for packet mirroring. The entry keyword begins a list of entry-id’s for mirroring. Multiple entry-id entries may be specified with a single command. Each entry-id must be separated by a space.

If an entry-id does not exist within the IP filter, an error occurs and the command will not execute.

If the filter’s entry-id is renumbered within the IP filter definition, the old entry-id is removed but the new entry-id must be manually added to the configuration to include the new (renumbered) entry’s criteria.

Platforms

All

Context

[Tree] (config>li>li-filter-block-reservation>li-reserved-block ipv6-filter)

Full Context

configure li li-filter-block-reservation li-reserved-block ipv6-filter

Description

This command configures to which normal IPv6 address filters the entry reservation is applied.

This command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic).

The no form of this command removes the IPv6 filter ID from the configuration.

Parameters

ipv6-filter-id

Specifies the filter identification identifies the normal IPv6 address filters.

Values

{filter-id | filter-name}

filter-id:	1 to 65535
filter-name:	up to 64 characters (filter-name is an alias for input only. The filter-name gets replaced with an id automatically by SR OS in the configuration).

Platforms

All

Context

[Tree] (config>li>li-fltr-assoc>li-ipv6-fltr ipv6-filter)

Full Context

configure li li-filter-associations li-ipv6-filter ipv6-filter

Description

This command specifies the IP filter(s) into which the entries from the specified li-ipv6-filter are to be inserted. The li-ipv6-filter and ipv6-filter must already exist before the association is made. If the normal IPv6 filter is deleted then the association is also removed (and not re-created if the IPv6 filter comes into existence in the future).

The no form of this command removes the IPv6 filter ID from the configuration.

Parameters

ipv6-filter-id

Specifies an existing IPv6 filter policy.

Values

filter-id — 1 to 65535

filter-name — up to 64 characters

Platforms

All

Context

[Tree] (config>li>li-source ipv6-filter)

Full Context

configure li li-source ipv6-filter

Description

This command enables lawful interception (LI) of packets that match specific entries in an existing IPv6 filter.

The ipv6-filter command directs packets which match the defined list of entry IDs to be intercepted to the destination referenced by the mirror-dest-service-id of the mirror-source.

The IPv6 filter must already exist in order for the command to execute. Filters are configured in the config>filter context. If the IPv6 filter does not exist, an error will occur. If the filter exists but has not been associated with a SAP or IPv6 interface, an error is not generated but mirroring will not be enabled (there are no packets to mirror). Once the IPv6 filter is defined to a SAP, IPv6 interface or subscriber, mirroring is enabled (subscriber mirroring applies only to the 7750 SR).

If the IPv6 filter is defined as ingress, only ingress packets are intercepted. Ingress packets are sent to the destination prior to any ingress packet modifications.

If the IPv6 filter is defined as egress, only egress packets are intercepted. Egress packets are sent to the destination after all egress packet modifications.

An entry-id within an IPv6 filter can only be intercepted to a single destination. If the same entry-id is defined multiple times, an error occurs and only the first definition is in effect.

By default, no packets matching any IPv6 filters are intercepted. Interception of IPv6 filter entries must be explicitly defined.

When the no command is executed with the entry keyword and one or more entry-id’s, interception of that list of entry-id’s is terminated within the ipv6-filter-id. If an entry-id is listed that does not exist, an error will occur and the command will not execute. If an entry-id is listed that is not currently being intercepted, no error will occur for that entry-id and the command will execute normally.

Parameters

ipv6-filter-id

Specifies the IPv6 filter ID whose entries are to be intercepted. If the ipv6-filter-id does not exist, an error will occur and the command will not execute. Intercepting packets will commence when the ipv6-filter-id is defined on a SAP or IPv6 interface.

entry-id

Specifies the IPv6 filter entries to use as match criteria for lawful intercept (LI). The entry keyword begins a list of entry-id’s for interception. Multiple entry-id entries can be specified with a single command. Each entry-id must be separated by a space. Up to <N><n> 8 entry IDs may be specified in a single command.

If an entry-id does not exist within the IPv6 filter, an error occurs and the command will not execute.

If the filter’s entry-id is renumbered within the IPv6 filter definition, the old entry-id is removed but the new entry-id must be manually added to the configuration to include the new (renumbered) entry’s criteria.

intercept-id

Specifies the intercept ID that is inserted into the packet header for all mirrored packets of the associated li-source entry. This intercept ID can be used (for example by a downstream LI Gateway) to identify the particular LI session to which the packet belongs. For all types of li-source entries (filter, nat, sap, subscriber), when the mirror service is configured with ip-udp-shim routable encap, an intercept-id field (as part of the routable encap) is always present in the mirrored packets. If there is no intercept ID configured for an li-source entry, then the default value will be inserted. When the mirror service is configured with ip-gre routable encapsulation, no intercept-id is inserted and none should be specified against the li-source entries.

Values

1 to 4294967295 (32b) For nat li-source entries that are using a mirror service that is not configured with routable encap

Values

1 to 1,073,741,824 (30b) For all types of li-source entries that are using a mirror service with routable ip-udp-shim encap and no direction-bit.

Values

1 to 536,870,912 (29b) For all types of li-source entries that are using a mirror service with routable ip-udp-shim encap and with the direction-bit enabled.

session-id

Specifies the session-id that is inserted into the packet header for all mirrored packets of the associated li-source entry. This session-id can be used (for example by a downstream LI Gateway) to identify the particular LI session to which the packet belongs. The session-id is only valid and used for mirror services that are configured with ip-udp-shim routable encap ( config>mirror>mirror-dest>encap>ip-udp-shim). For all types of li-source entries (filter, nat, sap, subscriber), when the mirror service is configured with ip-udp-shim routable encapsulation, a session-id field (as part of the routable encapsulation) is always present in the mirrored packets. If there is no session-id configured for an li-source entry, then the default value will be inserted. When a mirror service is configured with ip-gre routable encap, no session-id is inserted and none should be specified against the li-source entries.

Values

1 to 4,294,967,295 (32b)

Platforms

All

Context

[Tree] (config>filter ipv6-filter)

Full Context

configure filter ipv6-filter

Description

Commands in this context configure the specified IPv6 filter policy.

The no form of the command deletes the IPv6 filter policy. A filter policy cannot be deleted until it is removed from all objects where it is applied.

Parameters

filter-id

Specifies the IPv6 filter policy ID expressed as a decimal integer.

Values

1 to 65535

name

Configures an optional filter name, up to 64 characters in length, to a given filter. This filter name can then be used in configuration references, display, and show commands throughout the system. A defined filter name can help the service provider or administrator to identify and manage filters within the SR OS platforms.

To create a filter, you must assign a filter ID, however, after it is created, either the filter ID or filter name can be used to identify and reference a filter.

If a name is not specified at creation time, then SR OS assigns a string version of the filter-id as the name.

Filter names may not begin with an integer (0 to 9).

Values

name: 64 characters maximum

filter-name

Specifies a string of up to 64 characters uniquely identifying this IPv6 filter policy.

create

This keyword is required to create the configuration context. Once it is created, the context can be enabled with or without the create keyword.

Platforms

All

Context

[Tree] (config>system>security>mgmt-access-filter ipv6-filter)

Full Context

configure system security management-access-filter ipv6-filter

Description

Commands in this context configure management access IPv6 filter parameters. This command only applies to the 7750 SR and 7950 XRS.

Platforms

All

Context

[Tree] (config>system>security>cpm-filter ipv6-filter)

Full Context

configure system security cpm-filter ipv6-filter

Description

Commands in this context configure CPM IPv6 filter parameters. This command applies only to the 7750 SR and 7950 XRS.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>filter>copy ipv6-filter)

Full Context

configure filter copy ipv6-filter

Description

This command copies an existing filter entry for a specific filter ID to another filter ID. The command is a configuration level maintenance tool used to create new entries using an existing filter policy. If overwrite is not specified, an error will occur if the destination filter entry exists.

Parameters

src-filter-id

Identifies the source filter policy from which the copy command will attempt to copy. The filter policy must exist within the context of the preceding keyword ( ipv6-filter).

dst-filter-id

Identifies the destination filter policy to which the copy command will attempt to copy. If the overwrite keyword is not specified, the filter entry ID cannot already exist in the destination filter policy. If the overwrite keyword is present, the destination entry ID may or may not exist.

overwrite

Specifies that the destination filter entry may exist. If it does, everything in the existing destination filter entry will be completely overwritten with the contents of the source filter entry. If the destination filter entry exists, either overwrite must be specified or an error message will be returned. If overwrite is specified, the function of copying from source to destination occurs in a "break before make” manner and therefore should be handled with care.

Platforms

All

Context

[Tree] (config>service>vprn>flowspec ipv6-filter-max-size)

Full Context

configure service vprn flowspec ipv6-filter-max-size

Description

This command configures the maximum number of IPv6 FlowSpec routes or rules that can be embedded into an ingress IPv6 filter policy for a specified routing instance. Flowspec filter entries embedded in a filter policy in this routing instance will use filter entries from the range between the embedding offset and "offset + ip-filter-max-size – 1”.

The sum of this command and the highest offset in any IPv6 filter that embeds IPv6 FlowSpec rules from this routing instance (excluding filters that embed at offset 262143) must not exceed 262143.

This command can be configured to a higher or lower value at any time. If the number of IPv6 FlowSpec rules that are currently installed is M, and the new configured limit is N, where N<M, then the last set of rules from N to M (by FlowSpec order) are immediately removed, but are retained in the BGP RIB. If the limit is increased, new rules are programmed only as they are received again in new BGP updates.

Default

ipv6-filter-max-size 512

Parameters

value

The maximum number of FlowSpec routes or rules that can be embedded into an ingress IP filter policy.

Values

0 to 262143

default

Keyword to configure the maximum size as 512.

Platforms

All

Context

[Tree] (config>router>flowspec ipv6-filter-max-size)

Full Context

configure router flowspec ipv6-filter-max-size

Description

This command configures the maximum number of IPv6 FlowSpec routes or rules that can be embedded into the auto-created embedded filter (fSpec- X). FlowSpec filter entries embedded in a filter policy in this routing instance will use filter entries from the range between "embedding offset + 1” and "embedding offset + ip-filter-max-size”.

The sum of this command and the highest offset in any IPv6 filter that embeds IPv6 FlowSpec rules from this routing instance (excluding filters that embed at offset 262143) must not exceed 262143.

This command can be configured to a higher or lower value at any time. If the number of IPv6 FlowSpec rules that are currently installed is M, and the new configured limit is N, where N<M, then the last set of rules from N to M (by FlowSpec order) are immediately removed, but are retained in the BGP RIB. If the limit is increased, new rules are programmed only as they are received again in new BGP updates.

Default

ipv6-filter-max-size 512

Parameters

value

Specifies the maximum number of FlowSpec routes or rules that can be embedded into an ingress IP filter policy.

Values

0 to 262143

default

Keyword to configure the maximum size as 512.

Platforms

All

Context

[Tree] (config>li>li-filter-block-reservation>li-reserved-block ipv6-filter-name)

Full Context

configure li li-filter-block-reservation li-reserved-block ipv6-filter-name

Description

This command configures an IPv6 filter in which the reservation is done through name.

The no form of this command removes the IPv6 filter name.

Parameters

filter-name

Specifies the IPv6 filter name, up to 64 characters.

Platforms

All

Context

[Tree] (config>li>li-fltr-assoc>li-ipv6-fltr ipv6-filter-name)

Full Context

configure li li-filter-associations li-ipv6-filter ipv6-filter-name

Description

This command associates an IPv6 filter with a specified LI IPv6 filter through its name.

The no form of this command removes the IPv6 filter name.

Parameters

filter-name

Specifies the IPv6 filter name, up to 64 characters.

Platforms

All

Context

[Tree] (config>test-oam>build-packet>header ipv6-fragment)

Full Context

configure test-oam build-packet header ipv6-fragment

Description

This command causes the associated header to be defined as an IPv6 fragment header template.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host ipv6-lease-times)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host ipv6-lease-times)

Full Context

configure subscriber-mgmt local-user-db ppp host ipv6-lease-times

configure subscriber-mgmt local-user-db ipoe host ipv6-lease-times

Description

Commands in this context configure lease times for DHCPv6.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>nat>inside>nat64 ipv6-mtu)

[Tree] (config>router>nat>inside>nat64 ipv6-mtu)

Full Context

configure service vprn nat inside nat64 ipv6-mtu

configure router nat inside nat64 ipv6-mtu

Description

This command sets the size of the IPv6 downstream packet in NAT64. This packet is translated from IPv4.

The no form of the command reverts to the default.

Default

ipv6-mtu 1520

Parameters

ipv6-mtu

Specifies the IPv6 MTU.

Values

1280 to 9212

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>isis>multi-topology ipv6-multicast)

Full Context

configure router isis multi-topology ipv6-multicast

Description

This command enables support for the IPv6 topology (MT4) within the associate IS-IS instance.

The no form of this command disables support for the IPv6 topology (MT4) within the associated IS-IS instance.

Default

no ipv6-multicast

Platforms

All

Context

[Tree] (config>service>vpls>pim-snooping ipv6-multicast-disable)

Full Context

configure service vpls pim-snooping ipv6-multicast-disable

Description

This command disables PIM snooping for IPv6 multicast traffic within a VPLS service.

The no form of this command enables PIM snooping for IPv6 multicast traffic within a VPLS service. To fully remove PIM snooping from a VPLS service it is necessary to issue the no pim-snooping command.

Default

ipv6-multicast-disable

Platforms

All

Context

[Tree] (config>service>vprn>pim>if ipv6-multicast-disable)