m Commands – Part I

Context

[Tree] (config>test-oam>sath>accept-crit-tmpl m-factor)

Full Context

configure test-oam service-activation-testhead acceptance-criteria-template m-factor

Description

This command configures the margin by which the observed throughput is off from the configured throughput to determine whether a service test passes or fails.

The M-factor is used with cir-threshold and pir-threshold values for different test types to determine whether a test passes or fails.

• type cir

  If the measured throughput is less than the difference of the configured CIR threshold and the M-factor, the test fails.

• type cir-pir

  If the measured throughput is less than the difference of the configured PIR threshold and the M-factor, the test fails.

• type policing

  • If the measured throughput is less than the difference of the configured PIR threshold and the M-factor, the test fails.

  • If the measured throughput is greater than the sum of the configured PIR threshold and the M-factor, the test fails.

• type performance

  If the measured throughput is less than the difference of the configured PIR threshold and the M-factor, the test fails.

The no form of this command removes the M-factor.

Default

no m-factor

Parameters

kbps

Specifies the value, in kb/s, to use for the M-factor.

Values

1 to 400,000,000

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

Context

[Tree] (config>eth-cfm>md-auto-id ma-index-range)

Full Context

configure eth-cfm md-auto-id ma-index-range

Description

This command specifies the range of indexes used by SR OS to automatically assign an index to ETH-CFM associations that are created in model-driven interfaces without an index explicitly specified by the user or client.

An association created with an explicitly-specified index cannot use an index in this range. In classic CLI and SNMP, the ID range cannot be changed while objects exist inside the previous or new range. In MD interfaces, the range can be changed, which causes any previously existing objects in the previous ID range to be deleted and re-created using a new ID in the new range.

The no form of this command removes the range values.

See the md-auto-id command for further details.

Parameters

start ma-index

Specifies the lower value of the index range. The value must be less than or equal to the end value.

Values

1 to 4294967295

end ma-index

Specifies the upper value of the index range. The value must be greater than or equal to the start value.

Values

1 to 4294967295

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>host-ident mac)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>host-ident mac)

Full Context

configure subscriber-mgmt local-user-db ppp host host-identification mac

configure subscriber-mgmt local-user-db ipoe host host-identification mac

Description

This command specifies the MAC address to match for a host lookup.

The no form of this command removes the MAC address from the configuration.

Parameters

ieee-address

Specifies the 48-bit MAC address in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee, and ff are hexadecimal numbers.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>if mac)

[Tree] (config>service>vprn>sub-if>grp-if mac)

[Tree] (config>service>vprn>if>ipv6>vrrp mac)

[Tree] (config>service>vprn>nw-if mac)

[Tree] (config>service>vprn>if>sap>eth-cfm>mep mac)

[Tree] (config>service>vprn>if>vrrp mac)

Full Context

configure service vprn interface mac

configure service vprn subscriber-interface group-interface mac

configure service vprn interface ipv6 vrrp mac

configure service vprn network-interface mac

configure service vprn interface sap eth-cfm mep mac

configure service vprn interface vrrp mac

Description

This command assigns a specific MAC address to a VPRN IP interface.

The no form of this command returns the MAC address of the IP interface to the default value.

Default

The physical MAC address associated with the Ethernet interface on which the SAP is configured.

Parameters

ieee-mac-address

Specifies the 48-bit MAC address for the static ARP in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.

Platforms

All

• configure service vprn network-interface mac
• configure service vprn interface vrrp mac
• configure service vprn interface ipv6 vrrp mac
• configure service vprn interface mac

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn subscriber-interface group-interface mac

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

• configure service vprn interface sap eth-cfm mep mac

Context

[Tree] (debug>service>id>ppp mac)

Full Context

debug service id ppp mac

Description

This command shows PPP packets for the specified MAC address.

Parameters

ieee-address

Sets debugging for the specified MAC address.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>mac-protect mac)

Full Context

configure service vpls mac-protect mac

Description

This command specifies the 48-bit IEEE 802.3 MAC address.

The no form of the command reverts to the default.

Parameters

ieee-address

Specifies the 48-bit MAC address in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee, and ff are hexadecimal numbers.

Platforms

All

Context

[Tree] (config>service>ies>sub-if>grp-if mac)

[Tree] (config>service>ies>if mac)

Full Context

configure service ies subscriber-interface group-interface mac

configure service ies interface mac

Description

This command assigns a specific MAC address to an IES IP interface.

For Routed Central Office (CO), a group interface has no IP address explicitly configured but inherits an address from the parent subscriber interface when needed. For example, a MAC will respond to an ARP request when an ARP is requested for one of the IPs associated with the subscriber interface through the group interface.

The no form of this command returns the MAC address of the IP interface to the default value.

Default

The physical MAC address associated with the Ethernet interface that the SAP is configured on (the default MAC address assigned to the interface, assigned by the system).

Parameters

ieee-address

Specifies the 48-bit MAC address for the static ARP in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff, where aa, bb, cc, dd, ee, and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service ies subscriber-interface group-interface mac

All

• configure service ies interface mac

Context

[Tree] (config>service>vpls>mcr-default-gtw mac)

Full Context

configure service vpls mcr-default-gtw mac

Description

This command relates to a system configured for Dual Homing in L2-TPSDA. It defines the MAC address used when the system sends out a gratuitous ARP on an active SAP after a ring heals or fails in order to attract traffic from subscribers on the ring with connectivity to that SAP.

The no form of this command reverts to the default.

Default

no mac

Parameters

ieee-address

Specifies the address in xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx format (cannot be all zeros).

Platforms

All

Context

[Tree] (config>port>ethernet mac)

[Tree] (config>lag mac)

[Tree] (config>port>tdm>e1>channel-group mac)

[Tree] (config>port>tdm>e3 mac)

[Tree] (config>port>sonet-sdh>path mac)

[Tree] (config>eth-tunnel mac)

[Tree] (config>port>tdm>ds1>channel-group mac)

[Tree] (config>port>tdm>ds3 mac)

Full Context

configure port ethernet mac

configure lag mac

configure port tdm e1 channel-group mac

configure port tdm e3 mac

configure port sonet-sdh path mac

configure eth-tunnel mac

configure port tdm ds1 channel-group mac

configure port tdm ds3 mac

Description

This command assigns a specific MAC address to an Ethernet port, Link Aggregation Group (LAG), Ethernet tunnel, or BCP-enabled port or sub-port.

Only one MAC address can be assigned to a port. When multiple mac commands are entered, the last command overwrites the previous command. When the command is issued while the port is operational, IP will issue an ARP, if appropriate, and BPDUs are sent with the new MAC address.

The no form of this command returns the MAC address to the default value.

By default, a MAC address is assigned by the system from the chassis MAC address pool. The use of an all-zeroes MAC address indicates that an operational MAC address should be assigned from the chassis MAC address pool.

Default

mac 00:00:00:00:00:00

Parameters

ieee-address

Specifies the 48-bit MAC address in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.

Platforms

All

• configure lag mac
• configure port ethernet mac

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

• configure port tdm e3 mac
• configure port tdm ds1 channel-group mac
• configure port tdm ds3 mac
• configure port tdm e1 channel-group mac

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

• configure port sonet-sdh path mac
• configure eth-tunnel mac

Context

[Tree] (config>eth-tunnel>ethernet mac)

Full Context

configure eth-tunnel ethernet mac

Description

This command assigns a specific MAC address to an Ethernet port, Link Aggregation Group (LAG), Ethernet tunnel, or BCP-enabled port or sub-port.

Only one MAC address can be assigned to a port. When multiple mac commands are entered, the last command overwrites the previous command. When the command is issued while the port is operational, IP will issue an ARP, if appropriate, and BPDUs are sent with the new MAC address.

The no form of this command returns the MAC address to the default value.

Default

no mac

Parameters

ieee-address

Specifies the 48-bit MAC address in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses 6-byte unicast mac-address (xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx) of the MEP. Using the all zeros address is equivalent to the no form of this command.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>service>proxy-arp-nd>mac-list mac)

Full Context

configure service proxy-arp-nd mac-list mac

Description

This command configures the proxy ARP or ND MAC address information.

The no form of the command deletes the MAC address.

Parameters

ieee-address

Specifies the MAC address added to the list. The MAC list can be empty or contain up to 10 addresses.

Values

xx:xx:xx:xx:xx:xx

xx-xx-xx-xx-xx-xx

Platforms

All

Context

[Tree] (config>service>vpls>static-mac mac)

Full Context

configure service vpls static-mac mac

Description

This command assigns a conditional static MAC address entry to an SPBM B-VPLS SAP/spoke-SDP allowing external MACs for single and multi-homed operation.

For the 7450 ESS or 7750 SR, this command also assigns a conditional static MAC address entry to an EVPN VPLS SAP/spoke-SDP.

Static MACs are used for PBB Epipe and I-VPLS services that may terminate external to SPBM. If this is configured under a Control B-VPLS the interface referenced will not use IS-IS for this neighbor. This may also be configured under a User B-VPLS where the corresponding interface is not supported under the Control B-VPLS.

Parameters

ieee-address

Specifies the static MAC address to an SPBM/sdp-binding interface.

Values

6-byte mac-address (xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx) Cannot be all zeros.

sap-id

Specifies the SAP identifier.

sdp-id

Specifies the SDP identifier.

Values

1 to 17407

vc-id

Specifies the virtual circuit identifier.

Values

1 to 4294967295

create

Mandatory keyword used to create a static MAC.

fwd-status

Specifies that this static mac is based on the forwarding status of the SAP or spoke-SDP for multi-homed operation.

black-hole

Specifies for TLS FDB entries defined on a local SAP the value 'sap', remote entries defined on an SDP have the value 'sdp'.

Platforms

All

Context

[Tree] (config>service>ipipe>sap mac)

Full Context

configure service ipipe sap mac

Description

This command assigns a specific MAC address to an Ipipe SAP.

The no form of this command returns the MAC address of the SAP to the default value.

Default

The physical MAC address associated with the Ethernet interface where the SAP is configured.

Parameters

ieee-address

Specifies the 48-bit MAC address in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee, and ff are hexadecimal numbers.

Platforms

All

Context

[Tree] (config>service>template>epipe-sap-template>ingress>filter mac)

[Tree] (config>service>template>epipe-sap-template>egress>filter mac)

Full Context

configure service template epipe-sap-template ingress filter mac

configure service template epipe-sap-template egress filter mac

Description

This command associates an existing MAC filter policy with the template.

This command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic).

Parameters

mac-filter-id

Specifies the MAC filter policy. The specified filter ID must already exist within the created MAC filters. The filter policy must already exist within the created MAC filters.

Values

1 to 65535

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>template>epipe-sap-template>egress>filter-name mac)

[Tree] (config>service>template>epipe-sap-template>ingress>filter-name mac)

Full Context

configure service template epipe-sap-template egress filter-name mac

configure service template epipe-sap-template ingress filter-name mac

Description

This command associates an existing IP filter policy with the template.

Parameters

name

Specifies the MAC filter policy name, up to 64 characters.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>mac-list mac)

Full Context

configure service mac-list mac

Description

This command adds a protected MAC address entry.

The no form of this command removes the protected MAC address entry.

Parameters

ieee-address

Specifies the address in xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx format (cannot be all zeros), up to 30 characters.

six-byte-mask

Specifies the mask address in xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx format (cannot be all zeros), up to 30 characters.

Platforms

All

Context

[Tree] (config>service>vpls>interface mac)

Full Context

configure service vpls interface mac

Description

This command assigns a specific MAC address to a VPLS IP interface.

For Routed Central Office (CO), a group interface has no IP address explicitly configured but inherits an address from the parent subscriber interface when needed. For example, a MAC will respond to an ARP request when an ARP is requested for one of the IPs associated with the subscriber interface through the group interface.

The no form of this command returns the MAC address of the IP interface to the default value.

Default

mac

Parameters

ieee-address

Specifies the 48-bit MAC address for the static ARP in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee, and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.

Default

The system chassis MAC address.

Platforms

All

Context

[Tree] (config>service>template>vpls-sap-template>egress>filter-name mac)

[Tree] (config>service>template>vpls-sap-template>ingress>filter-name mac)

Full Context

configure service template vpls-sap-template egress filter-name mac

configure service template vpls-sap-template ingress filter-name mac

Description

This command associates an existing IP filter policy with the template.

Parameters

name

Specifies the MAC filter policy name, up to 64 characters.

Platforms

All

Context

[Tree] (debug>service>id>arp-host mac)

Full Context

debug service id arp-host mac

Description

This command displays ARP host events for a particular MAC address.

Parameters

mac-address

Specifies the 48-bit MAC address for the static ARP in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee, and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.

Values

xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx (cannot be all zeros)

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>service>id>igmp-snooping mac)

Full Context

debug service id igmp-snooping mac

Description

This command shows IGMP packets for the specified MAC address.

The no form of this command disables the MAC debugging.

Platforms

All

Context

[Tree] (debug>service>id>mld mac)

Full Context

debug service id mld-snooping mac

Description

This command shows MLD packets for the specified MAC address.

The no form of this command disables the MAC debugging.

Platforms

All

Context

[Tree] (debug>service>id>host-connectivity-verify mac)

Full Context

debug service id host-connectivity-verify mac

Description

This command displays Subscriber Host Connectivity Verification (SHCV) events for a particular MAC address.

Parameters

mac-address

Specifies the 48-bit MAC address for the static ARP in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee, and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.

Values

xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx (cannot be all zeros)

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>if>ipv6>vrrp mac)

Full Context

configure service ies interface ipv6 vrrp mac

Description

This command assigns a specific MAC address to an IES IP interface.

The no form of this command returns the MAC address of the IP interface to the default value.

Default

The physical MAC address associated with the Ethernet interface that the SAP is configured on (the default MAC address assigned to the interface, assigned by the system).

Parameters

mac-address

Specifies the 48-bit MAC address for the static ARP in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee, and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.

Platforms

All

Context

[Tree] (config>service>ies>if>vrrp mac)

Full Context

configure service ies interface vrrp mac

Description

This command assigns a specific MAC address to an IES IP interface.

The no form of this command returns the MAC address of the IP interface to the default value.

Default

The physical MAC address associated with the Ethernet interface that the SAP is configured on (the default MAC address assigned to the interface, assigned by the system).

Parameters

mac-address

Specifies the 48-bit MAC address for the static ARP in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff, where aa, bb, cc, dd, ee, and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.

Platforms

All

Context

[Tree] (config>router>if mac)

Full Context

configure router interface mac

Description

This command assigns a specific MAC address to an IP interface. Only one MAC address can be assigned to an IP interface. When multiple mac commands are entered, the last command overwrites the previous command.

The no form of this command returns the MAC address of the IP interface to the default value.

Default

no mac

Parameters

ieee-address

Specifies the 48-bit MAC address for the IP interface in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff, where aa, bb, cc, dd, ee and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.

Platforms

All

Context

[Tree] (config>router>if>vrrp mac)

[Tree] (config>router>if>ipv6>vrrp mac)

Full Context

configure router interface vrrp mac

configure router interface ipv6 vrrp mac

Description

This command sets an explicit MAC address used by the virtual router instance overriding the VRRP default derived from the VRID.

Changing the default MAC address is useful when an existing HSRP or other non-VRRP default MAC is in use by the IP hosts using the virtual router IP address. Many hosts do not monitor unessential ARPs and continue to use the cached non-VRRP MAC address after the virtual router becomes master of the host’s gateway address.

The mac command sets the MAC address used in ARP responses when the virtual router instance is master. Routing of IP packets with mac-address as the destination MAC is also enabled. The mac setting must be the same for all virtual routers participating as a virtual router or indeterminate connectivity by the attached IP hosts will result. All VRRP advertisement messages are transmitted with mac-address as the source MAC.

The command can be configured in both non-owner and owner vrrp nodal contexts.

The mac command can be executed at any time and takes effect immediately. When the virtual router MAC on a master virtual router instance changes, a gratuitous ARP is immediately sent with a VRRP advertisement message. If the virtual router instance is disabled or operating as backup, the gratuitous ARP and VRRP advertisement message is not sent.

The no form of the command restores the default VRRP MAC address to the virtual router instance.

Default

no mac

Parameters

mac-address

The 48-bit MAC address for the virtual router instance in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC, and non-IEEE reserved MAC addresses.

Platforms

All

Context

[Tree] (config>system>security>ssh>server-mac-list mac)

[Tree] (config>system>security>ssh>client-mac-list mac)

Full Context

configure system security ssh server-mac-list mac

configure system security ssh client-mac-list mac

Description

This command configures SSH MAC algorithms for SR OS as an SSH server or an SSH client.

The no form of this command removes the specified mac index.

Default

no mac index

Parameters

index

Specifies the index of the algorithm in the list.

Values

1 to 255

mac-name

Specifies the algorithm for calculating the message authentication code.

Values

The following table lists the default client and server algorithms used for SSHv2.

Table 1. SSHv2 Default client and server algorithms

index	mac-name
200	hmac-sha2-512
210	hmac-sha2-256
215	hmac-sha1
220	hmac-sha1-96
225	hmac-md5
240	hmac-md5-96

Platforms

All

Context

[Tree] (config>card>xiom>mda>xconnect mac)

[Tree] (config>card>mda>xconnect mac)

Full Context

configure card xiom mda xconnect mac

configure card mda xconnect mac

Description

This command creates a loopback in the MAC chip. It does not require the allocation of a faceplate. After the loopback is instantiated, a PXC can be configured on top of it.

For a list of MAC chip IDs per forwarding complex (datapath), use the show datapath datapath-id datapath-id command.

When considering loopback creation, the operation should consider the MAC chip’s bandwidth capacity and the bandwidth utilization of all the faceplate ports connected to it. The selection of MAC chips for loopback creation should be taken into consideration.

The no form of this command removes the MAC ID from the configuration.

Parameters

mac-id

Specifies the MAC ID.

Values

1 to 12

create

Keyword used to create the MAC ID instance. The create keyword requirement can be enabled or disabled in the environment>create context.

Platforms

7750 SR-1s, 7750 SR-2s, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s

• configure card xiom mda xconnect mac

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

• configure card mda xconnect mac

Context

[Tree] (config>subscr-mgmt>acct-plcy>include-radius-attribute mac-address)

[Tree] (config>subscr-mgmt>auth-policy>include-radius-attribute mac-address)

Full Context

configure subscriber-mgmt radius-accounting-policy include-radius-attribute mac-address

configure subscriber-mgmt authentication-policy include-radius-attribute mac-address

Description

This command enables the generation of the client MAC address RADIUS attribute.

The no form of this command disables the generation of the client MAC address RADIUS attribute.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>wlan-gw>ue-query mac-address)

Full Context

configure subscriber-mgmt wlan-gw ue-query mac-address

Description

This command enables matching on UEs with the specified MAC address.

The no form of this command disables matching on the MAC address.

Default

no mac-address

Parameters

ieee-address

Specifies the ethernet MAC address.

Values

xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>eth-tunnel>path>eth-cfm>mep mac-address)

[Tree] (config>eth-ring>path>eth-cfm>mep mac-address)

Full Context

configure eth-tunnel path eth-cfm mep mac-address

configure eth-ring path eth-cfm mep mac-address

Description

This command specifies the MAC address of the MEP.

The no form of this command reverts the MAC address of the MEP back to that of the port (if the MEP is on a SAP) or the bridge (if the MEP is on a spoke SDP).

Parameters

mac-address

Specifies the MAC address of the MEP.

Values

6-byte unicast mac-address (xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx) of the MEP. Using the all zeros address is equivalent to the no form of this command.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>lag>eth-cfm>mep mac-address)

[Tree] (config>port>ethernet>eth-cfm>mep mac-address)

[Tree] (config>router>if>eth-cfm>mep mac-address)

Full Context

configure lag eth-cfm mep mac-address

configure port ethernet eth-cfm mep mac-address

configure router interface eth-cfm mep mac-address

Description

This command specifies the MAC address of the MEP.

The no form of this command reverts to the MAC address of the MEP back to the default, that of the port, since this is SAP based.

Default

no mac-address

Parameters

mac-address

Specifies the MAC address of the MEP.

Values

6-byte unicast mac-address (xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx) of the MEP. Using the all zeros address is equivalent to the no form of this command.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>service>epipe>spoke-sdp>eth-cfm>mep mac-address)

Full Context

configure service epipe spoke-sdp eth-cfm mep mac-address

Description

This command specifies the MAC address of the MEP.

The no form of this command reverts the MAC address of the MEP back to that of the port (if the MEP is on a SAP) or the bridge (if the MEP is on a spoke).

Parameters

mac-address

Specifies the MAC address of the MEP.

Values

6-byte mac-address in the form of xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx of the MEP. Must be unicast. Using the all zeros address is equivalent to the no form of this command.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>service>vpls>mesh-sdp>eth-cfm>mep mac-address)

[Tree] (config>service>vpls>eth-cfm>mep mac-address)

[Tree] (config>service>vpls>sap>eth-cfm>mep mac-address)

[Tree] (config>service>vpls>spoke-sdp>eth-cfm>mep mac-address)

Full Context

configure service vpls mesh-sdp eth-cfm mep mac-address

configure service vpls eth-cfm mep mac-address

configure service vpls sap eth-cfm mep mac-address

configure service vpls spoke-sdp eth-cfm mep mac-address

Description

This command specifies the MAC address of the MEP.

The no form of this command reverts the MAC address of the MEP back to that of the port (if the MEP is on a SAP) or the bridge (if the MEP is on a spoke).

Parameters

mac-address

Specifies the MAC address of the MEP

Values

6-byte mac-address in the form of xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx of the MEP. Must be unicast. Using the all zeros address is equivalent to the no form of this command.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>service>vprn>sub-if>grp-if>sap>eth-cfm mac-address)

[Tree] (config>service>vprn>if>spoke-sdp>eth-cfm>mep mac-address)

[Tree] (config>service>vprn>if>sap>eth-cfm>mep mac-address)

Full Context

configure service vprn subscriber-interface group-interface sap eth-cfm mac-address

configure service vprn interface spoke-sdp eth-cfm mep mac-address

configure service vprn interface sap eth-cfm mep mac-address

Description

This command assigns a specific MAC address to an IP interface.

The no form of this command returns the MAC address of the IP interface to the default value.

Default

The physical MAC address associated with the Ethernet interface that the SAP is configured on.

Parameters

mac-address

Specifies the 48-bit MAC address for the static ARP in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s

• configure service vprn subscriber-interface group-interface sap eth-cfm mac-address

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

• configure service vprn interface spoke-sdp eth-cfm mep mac-address
• configure service vprn interface sap eth-cfm mep mac-address

Context

[Tree] (config>aaa>isa-radius-plcy>auth-include-attributes mac-address)

[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes mac-address)

Full Context

configure aaa isa-radius-policy auth-include-attributes mac-address

configure aaa isa-radius-policy acct-include-attributes mac-address

Description

This command enables the generation of the client MAC address RADIUS attribute.

Default

no mac-address

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>system>satellite>tdm-sat mac-address)

[Tree] (config>system>satellite>eth-sat mac-address)

Full Context

configure system satellite tdm-sat mac-address

configure system satellite eth-sat mac-address

Description

This command configures the MAC address for the associated satellite chassis. This MAC address is used to validate the identity of an satellite that attempts to associate with the local host.

The no form of the command deletes the MAC address for the associated satellite.

Parameters

mac-address

Specifies the MAC address of the associated satellite chassis; do not use a broadcast or multicast MAC. Enter the MAC address in either of the following formats: xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx.

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

• configure system satellite tdm-sat mac-address

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

• configure system satellite eth-sat mac-address

Context

[Tree] (config>port>ethernet>dot1x>per-host-authentication>allowed-source-macs mac-address)

Full Context

configure port ethernet dot1x per-host-authentication allowed-source-macs mac-address

Description

This command configures the host MAC address on the allowed MAC list.

The no form of the command deletes the MAC address from the list.

Default

no mac

Parameters

ieee-address

Specifies the MAC address.

Values

xx:xx:xx:xx:xx:xx

Platforms

All

Context

[Tree] (config>service>vpls>bgp-evpn mac-advertisement)

Full Context

configure service vpls bgp-evpn mac-advertisement

Description

This command enables the advertisement in BGP of the learned macs on SAPs and SDP bindings. When the mac-advertisement is disabled, the local macs will be withdrawn in BGP.

Default

mac-advertisement

Platforms

All

Context

[Tree] (config>qos>sap-ingress mac-criteria)

Full Context

configure qos sap-ingress mac-criteria

Description

This command is used to enter the node to create or edit policy entries that specify MAC criteria.

The mac-criteria based SAP ingress policies are used to select the appropriate ingress queue and corresponding forwarding class for matched traffic.

Router implementation will exit on the first match found and execute the actions in accordance with the accompanying action command. For this reason, entries must be sequenced correctly from most to least explicit.

The no form of this command deletes all the entries specified under this node. When mac-criteria entries are removed from a SAP ingress policy, the mac-criteria is removed from all services where that policy is applied.

Platforms

All

Context

[Tree] (config>subscr-mgmt>msap-policy>vpls-only mac-da-hashing)

Full Context

configure subscriber-mgmt msap-policy vpls-only-sap-parameters mac-da-hashing

Description

This command specifies whether subscriber traffic egressing a LAG SAP has its egress LAG link selected by a function of the MAC destination address instead of the subscriber ID.

This command is only meaningful if subscriber management is enabled and can be configured for a VPLS service.

The no form of this command reverts to the default.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>sap>sub-sla-mgmt mac-da-hashing)

Full Context

configure service vpls sap sub-sla-mgmt mac-da-hashing

Description

This command specifies whether subscriber traffic egressing a LAG SAP has its egress LAG link selected by a function of the MAC destination address instead of the subscriber ID.

The no form of this command reverts to the default setting.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>bgp-evpn mac-duplication)

Full Context

configure service vpls bgp-evpn mac-duplication

Description

Commands in this context configure the BGP EVPN MAC duplication parameters.

Platforms

All

Context

[Tree] (config>mirror>mirror-source mac-filter)

Full Context

configure mirror mirror-source mac-filter

Description

This command enables mirroring of packets that match specific entries in an existing MAC filter.

The mac-filter command directs packets which match the defined list of entry IDs to be mirrored to the mirror destination referenced by the mirror-dest-service-id of the mirror-source.

The MAC filter must already exist in order for the command to execute. Filters are configured in the config>filter context. If the MAC filter does not exist, an error will occur. If the filter exists but has not been associated with a SAP or IP interface, an error is not be generated but mirroring will not be enabled (there are no packets to mirror). Once the filter is defined to a SAP or MAC interface, mirroring is enabled.

If the MAC filter is defined as ingress, only ingress packets are mirrored. Ingress mirrored packets are mirrored to the mirror destination prior to any ingress packet modifications.

If the MAC filter is defined as egress, only egress packets are mirrored. Egress mirrored packets are mirrored to the mirror destination after all egress packet modifications.

An entry-id within a MAC filter can only be mirrored to a single mirror destination. If the same entry-id is defined multiple times, an error occurs and only the first mirror-source definition is in effect.

By default, no packets matching any MAC filters are mirrored. Mirroring of MAC filter entries must be explicitly defined.

The no form of this command, without the entry keyword, removes mirroring on all entry-id’s within the mac-filter-id.

When the no command is executed with the entry keyword and one or more entry-id’s, mirroring of that list of entry-id’s is terminated within the mac-filter-id. If an entry-id is listed that does not exist, an error will occur and the command will not execute. If an entry-id is listed that is not currently being mirrored, no error will occur for that entry-id and the command will execute normally.

Parameters

mac-filter-id

Specifies the MAC filter ID whose entries are mirrored. If the mac-filter-id does not exist, an error will occur and the command will not execute. Mirroring of packets will commence once the mac-filter-id is defined on a SAP.

entry-id

Specifies the MAC filter entries to use as match criteria for packet mirroring. The entry keyword begins a list of entry-id’s for mirroring. Multiple entry-id entries may be specified with a single command. Each entry-id must be separated by a space. Up to 8 entry IDs may be specified in a single command.

Each entry-id must exist within the mac-filter-id. If the entry-id is renumbered within the MAC filter definition, the old entry-id is removed from the list and the new entry-id will need to be manually added to the list if mirroring is still desired.

If no entry-id entries are specified in the command, mirroring will not occur for that MAC filter ID. The command will have no effect.

Platforms

All

Context

[Tree] (config>li>li-filter-block-reservation>li-reserved-block mac-filter)

Full Context

configure li li-filter-block-reservation li-reserved-block mac-filter

Description

This command configures to which normal MAC filters the entry reservation is applied.

This command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic).

Parameters

mac-filter-id

Specifies the filter identification identifies the normal MAC filters.

Values

{filter-id | filter-name}

filter-id:	1 to 65535
filter-name:	up to 64 characters (filter-name is an alias for input only. The filter-name gets replaced with an id automatically by SR OS in the configuration).

Platforms

All

Context

[Tree] (config>li>li-filter-assoc>li-mac-fltr mac-filter)

Full Context

configure li li-filter-associations li-mac-filter mac-filter

Description

Specifies the MAC filter(s) into which the entries from the specified li-mac-filter are to be inserted. The li-mac-filter and mac-filter must already exist before the association is made. If the normal MAC filter is deleted then the association is also removed (and not re-created if the MAC filter comes into existence in the future).

The no form of this command removes the MAC filter ID from the configuration.

Parameters

mac-filter-id

Specifies a filter identification to identify the MAC filter.

Values

1 to 65536, name: up to 64 characters

Platforms

All

Context

[Tree] (config>li>li-source mac-filter)

Full Context

configure li li-source mac-filter

Description

This command enables lawful interception (LI) of packets that match specific entries in an existing MAC filter. Multiple entries can be created using unique entry-id numbers within the filter. The router implementation exits the filter on the first match found and executes the actions in accordance with the accompanying action command. For this reason, entries must be sequenced correctly from most to least explicit.

An entry may not have any match criteria defined (in which case, everything matches) but must have at least the keyword action for it to be considered complete. Entries without the action keyword will be considered incomplete and hence will be rendered inactive.

An entry-id within an MAC filter can only be intercepted to a single destination. If the same entry-id is defined multiple times, an error occurs and only the first definition is in effect.

The no form of this command removes the specified entry from the IP or MAC filter. Entries removed from the IP or MAC filter are immediately removed from all services or network ports where that filter is applied.

Parameters

mac-filter-id

Specifies the MAC filter ID. If the mac-filter-id does not exist, an error will occur and the command will not execute.

entry-id

The MAC filter entries to use as match criteria.

intercept-id

Specifies the intercept-id that is inserted into the packet header for all mirrored packets of the associated li-source entry. This intercept-id can be used (for example by a downstream LI gateway) to identify the particular LI session to which the packet belongs. For all types of li-source entries (filter, nat, sap, subscriber), when the mirror service is configured with ip-udp-shim routable encap, an intercept-id field (as part of the routable encap) is always present in the mirrored packets. If there is no intercept-id configured for an li-source entry, then the default value will be inserted. When the mirror service is configured with ip-gre routable encap, no intercept-id is inserted and none should be specified against the li-source entries.

Values

1 to 4294967295 (32b) — For nat li-source entries that are using a mirror service that is not configured with routable encapsulation

Values

1 to 1,073,741,824 (30b) — For all types of li-source entries that are using a mirror service with routable ip-udp-shim encapsulation and no direction-bit.

Values

1 to 536,870,912 (29b) — For all types of li-source entries that are using a mirror service with routable ip-udp-shim encapsulation and with the direction-bit enabled.

session-id

Specifies the session-id that is inserted into the packet header for all mirrored packets of the associated li-source entry. This session-id can be used (for example by a downstream LI gateway) to identify the particular LI session to which the packet belongs. The session-id is only valid and used for mirror services that are configured with ip-udp-shim routable encap (config>mirror>mirror-dest>encap>ip-udp-shim). For all types of li-source entries (filter, nat, sap, or subscriber), when the mirror service is configured with ip-udp-shim routable encap, a session-id field (as part of the routable encap) is always present in the mirrored packets. If there is no session-id configured for an li-source entry, then the default value will be inserted. When a mirror service is configured with ip-gre routable encap, no session-id is inserted and none should be specified against the li-source entries.

Values

1 to 4,294,967,295 (32b)

Platforms

All

Context

[Tree] (debug>mirror-source mac-filter)

Full Context

debug mirror-source mac-filter

Description

This command enables mirroring of packets that match specific entries in an existing MAC filter.

The mac-filter command directs packets which match the defined list of entry IDs to be mirrored to the mirror destination referenced by the mirror-dest-service-id of the mirror-source.

The MAC filter must already exist in order for the command to execute. Filters are configured in the config>filter context. If the MAC filter does not exist, an error will occur. If the filter exists but has not been associated with a SAP or IP interface, an error is not be generated but mirroring will not be enabled (there are no packets to mirror). Once the filter is defined to a SAP or MAC interface, mirroring is enabled.

If the MAC filter is defined as ingress, only ingress packets are mirrored. Ingress mirrored packets are mirrored to the mirror destination prior to any ingress packet modifications.

If the MAC filter is defined as egress, only egress packets are mirrored. Egress mirrored packets are mirrored to the mirror destination after all egress packet modifications.

An entry-id within a MAC filter can only be mirrored to a single mirror destination. If the same entry-id is defined multiple times, an error occurs and only the first mirror-source definition is in effect.

By default, no packets matching any MAC filters are mirrored. Mirroring of MAC filter entries must be explicitly defined.

The no form of this command, without the entry keyword, removes mirroring on all entry-id’s within the mac-filter-id.

When the no command is executed with the entry keyword and one or more entry-id’s, mirroring of that list of entry-id’s is terminated within the mac-filter-id. If an entry-id is listed that does not exist, an error will occur and the command will not execute. If an entry-id is listed that is not currently being mirrored, no error will occur for that entry-id and the command will execute normally.

Parameters

mac-filter-id

Specifies the MAC filter ID whose entries are mirrored. If the mac-filter-id does not exist, an error will occur and the command will not execute. Mirroring of packets will commence once the mac-filter-id is defined on a SAP.

entry-id

Specifies the MAC filter entries to use as match criteria for packet mirroring. The entry keyword begins a list of entry-id’s for mirroring. Multiple entry-id entries may be specified with a single command. Each entry-id must be separated by a space. Up to 8 entry IDs may be specified in a single command.

Each entry-id must exist within the mac-filter-id. If the entry-id is renumbered within the MAC filter definition, the old entry-id is removed from the list and the new entry-id will need to be manually added to the list if mirroring is still desired.

If no entry-id entries are specified in the command, mirroring will not occur for that MAC filter ID. The command will have no effect.

Platforms

All

Context

[Tree] (config>filter mac-filter)

Full Context

configure filter mac-filter

Description

This command creates a configuration context for the specified MAC filter policy.

The no form of the command deletes the MAC filter policy. A filter policy cannot be deleted until it is removed from all objects where it is applied.

Parameters

filter-id

Specifies the MAC filter policy ID expressed as a decimal integer.

Values

1 to 65535

create

Keyword required to create the configuration context. After it is created, the context can be enabled with or without the create keyword.

name

Sets an optional filter name, up to 64 characters in length, to a given filter. This filter name can then be used in configuration references, display, and show commands throughout the system. A defined filter name can help the service provider or administrator to identify and manage filters within the SR OS platforms.

To create a filter, you must assign a filter ID, however, after it is created, either the filter ID or filter name can be used to identify and reference a filter.

If a name is not specified at creation time, then SR OS assigns a string version of the filter-id as the name.

Filter names may not begin with an integer (0 to 9).

Values

name: 64 characters maximum

filter-name

Specifies a string of up to 64 characters uniquely identifying this MAC filter policy.

Platforms

All

Context

[Tree] (config>system>security>mgmt-access-filter mac-filter)

Full Context

configure system security management-access-filter mac-filter

Description

This command configures a management access MAC-filter.

Platforms

All

Context

[Tree] (config>system>security>cpm-filter mac-filter)

Full Context

configure system security cpm-filter mac-filter

Description

Commands in this context configure CPM MAC-filter parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>filter>copy mac-filter)

Full Context

configure filter copy mac-filter

Description

This command copies an existing filter entry for a specific filter ID to another filter ID. The copy command is a configuration level maintenance tool used to create new entries using an existing filter policy. If overwrite is not specified, an error will occur if the destination filter entry exists.

Parameters

src-filter-id

Specifies the source filter policy from which the copy command will attempt to copy. The filter policy must exist within the context of the preceding keyword (mac-filter).

dst-filter-id

Specifies the destination filter policy to which the copy command will attempt to copy. If the overwrite keyword is not specified, the filter entry ID cannot already exist in the destination filter policy. If the overwrite keyword is present, the destination entry ID may or may not exist.

overwrite

Specifies that the destination filter entry may exist. If it does, everything in the existing destination filter entry will be completely overwritten with the contents of the source filter entry. If the destination filter entry exists, either overwrite must be specified or an error message will be returned. If overwrite is specified, the function of copying from source to destination occurs in a "break before make” manner and therefore should be handled with care.

Platforms

All

Context

[Tree] (config>li>li-filter-block-reservation>li-reserved-block mac-filter-name)

Full Context

configure li li-filter-block-reservation li-reserved-block mac-filter-name

Description

This command configures a MAC filter in which the reservation is done through name.

The no form of this command removes the MAC filter name.

Parameters

filter-name

Specifies the MAC filter name, up to 64 characters.

Platforms

All

Context

[Tree] (config>li>li-filter-assoc>li-mac-fltr mac-filter-name)

Full Context

configure li li-filter-associations li-mac-filter mac-filter-name

Description

This command associates a MAC filter with a specified LI MAC filter through its name.

The no form of this command removes the MAC filter name.

Parameters

filter-name

Specifies the MAC filter name, up to 64 characters.

Platforms

All

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>match-radprox-cache mac-format)

Full Context

configure subscriber-mgmt local-user-db ipoe host match-radius-proxy-cache mac-format

Description

This command specifies the format of MAC address used for matching incoming DHCP DISCOVER against the RADIUS proxy cache.

The no form of this command reverts to the default.

Default

mac-format "aa:"

Parameters

format

Specifies the format string that specifies the format of MAC address.

Values

mac-format: (only when match is equal to mac)
	like ab: for 00:0c:f1:99:85:b8
	or XY- for 00-0C-F1-99-85-B8
	or mmmm. for 0002.03aa.abff
	or xx for 000cf19985b8

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>diam-appl-plcy>gx mac-format)

[Tree] (config>subscr-mgmt>diam-appl-plcy>gy mac-format)

[Tree] (config>subscr-mgmt>diam-appl-plcy>nasreq mac-format)

Full Context

configure subscriber-mgmt diameter-application-policy gx mac-format

configure subscriber-mgmt diameter-application-policy gy mac-format

configure subscriber-mgmt diameter-application-policy nasreq mac-format

Description

This command configures the format of the MAC address when reported in Gx, Gy, or NASREQ application message AVPs such as Calling-Station-Id or User-Name.

The no form of this command resets the command to the default setting.

Default

mac-format ab

Parameters

mac-format

Specifies the MAC address format.

Values

like ab: for 00:0c:f1:99:85:b8

or XY- for 00-0C-F1-99-85-B8

or mmmm. for 0002.03aa.abff

or xx for 000cf19985b8

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>track-mobility mac-format)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>track-mobility mac-format)

Full Context

configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range track-mobility mac-format

configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range track-mobility mac-format

Description

This command configures how the MAC address is represented by the RADIUS proxy server.

Default

no mac-format "aa:"

Parameters

mac-format

Specifies how the MAC address is represented by the RADIUS proxy server.

Values

mac-format	like ab: for 00:0c:f1:99:85:b8
	or XY- for 00-0C-F1-99-85-B8
	or mmmm. for 0002.03aa.abff
	or xx for 000cf19985b8

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if>grp-if>sap>static-host-mgmt mac-learning-options)

[Tree] (config>service>ies>sub-if>grp-if>sap>static-host-mgmt mac-learning-options)

Full Context

configure service vprn subscriber-interface group-interface sap static-host-mgmt mac-learning-options

configure service ies subscriber-interface group-interface sap static-host-mgmt mac-learning-options

Description

This command configures additional methods by which the BNG learns the subscriber host MAC.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if>grp-if>sap>static-host mac-linking)

[Tree] (config>service>ies>sub-if>grp-if>sap>static-host mac-linking)

Full Context

configure service vprn subscriber-interface group-interface sap static-host mac-linking

configure service ies subscriber-interface group-interface sap static-host mac-linking

Description

This command associates this IPv6 host to the specified IPv4 host through the learned MAC address. A learned MAC from the IPv6 host is associated with the IPv4 host and vice versa.

The no form of this command removes the IP address from the configuration.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>proxy-arp-nd mac-list)

Full Context

configure service proxy-arp-nd mac-list

Description

This command creates a list of MAC addresses that can be pointed at from the service for a specified IP. The list may contain up to 10 MAC addresses; an empty list is also allowed.

The MAC list allows on-the-fly changes, but a change in the list deletes the proxy entries for all the IPs using that list.

The no form of the command deletes the entire MAC-list. Deleting a MAC list is only possible if it is not referenced in the configuration.

Parameters

name

Specifies the name of the MAC address list, which can be up to 32 characters.

create

Mandatory keyword to create a MAC list.

Platforms

All

Context

[Tree] (config>service>vpls>proxy-arp>dynamic mac-list)

[Tree] (config>service>vpls>proxy-nd>dynamic mac-list)

Full Context

configure service vpls proxy-arp dynamic mac-list

configure service vpls proxy-nd dynamic mac-list

Description

This command associates a previously created MAC list to a dynamic IP. The MAC list is created using the configure service proxy-arp-nd mac-list command.

The no form of the command deletes the association of the MAC list and the dynamic IP.

Parameters

name

Specifies the name of the MAC list previously created using the configure service proxy-arp-nd mac-list command.

Platforms

All

Context

[Tree] (config>service mac-list)

Full Context

configure service mac-list

Description

This command configures a MAC list name. The MAC list is composed of a list of MAC addresses and masks, which along with Auto-Learn Mac Protect (ALMP) can be used to exclude certain MACs from being protected in a given object. This is typically used on SAPs and spoke SDPs configured with ALMP where certain MACs must be able to move to other objects (for example, VRRP virtual MACs).

The no form of this command removes the MAC list name.

Parameters

name

Specifies the MAC list name, up to 32 characters.

create

Keyword used to create the MAC list.

Platforms

All

Context

[Tree] (config>service>template>vpls-template mac-move)

[Tree] (config>service>vpls mac-move)

Full Context

configure service template vpls-template mac-move

configure service vpls mac-move

Description

Commands in this context configure MAC move attributes. A sustained high re-learn rate can be a sign of a loop somewhere in the VPLS topology. Typically, STP detects loops in the topology, but for those networks that do not run STP, the mac-move feature is an alternative way to protect your network against loops.

When enabled in a VPLS, mac-move monitors the re-learn rate of each MAC. If the rate exceeds the configured maximum allowed limit, it disables the SAP where the source MAC was last seen. The SAP can be disabled permanently (until a shutdown/no shutdown command is executed) or for a length of time that grows linearly with the number of times the specified SAP was disabled. You have the option of marking a SAP as non-blockable in the config>service>vpls>sap>limit-mac-move or config>service>vpls>spoke-sdp>limit-mac-move contexts. This means that when the re-learn rate has exceeded the limit, another (blockable) SAP will be disabled instead.

The mac-move command enables the feature at the service level for SAPs and spoke-SDPs, as only those objects can be blocked by this feature. Mesh SDPs are never blocked, but their re-learn rates (sap-to-mesh/spoke-to-mesh or vice versa) are still measured.

The operation of this feature is the same on the SAP and spoke-SDP. For example, if a MAC address moves from SAP to SAP, from SAP to spoke-SDP, or between spoke-SDPs, one will be blocked to prevent thrashing. If the MAC address moves between a SAP and mesh SDP or spoke-SDP and mesh SDP combinations, the respective SAP or spoke-SDP will be blocked.

mac-move will disable a VPLS port when the number of relearns detected has reached the number of relearns needed to reach the move-frequency in the 5-second interval. For example, when the move-frequency is configured to 1 (relearn per second) mac-move will disable one of the VPLS ports when 5 relearns were detected during the 5-second interval because then the average move-frequency of 1 relearn per second has been reached. This can already occur in the first second if the real relearn rate is 5 relearns per second or higher.

The no form of this command disables MAC move.

Platforms

All

Context

[Tree] (config>service>template>vpls-sap-template mac-move-level)

Full Context

configure service template vpls-sap-template mac-move-level

Description

When a SAP is instantiated using vpls-sap-template, if the MAC move feature is enabled at VPLS level, the command mac-move-level indicates whether the sap should be populated as primary-port, secondary-port, or tertiary-port in the instantiated VPLS.

If configured to the default, SAP is populated as a tertiary-port.

Default

no mac-move-level

Platforms

All

Context

[Tree] (config>service>pbb mac-name)

Full Context

configure service pbb mac-name

Description

This command configures the MAC name for the MAC address. It associates an ASCII name with an IEEE MAC to improve the PBB Epipe configuration. It can also change the dest-BMAC in one place instead of 1000s of Epipe.

Parameters

name

Specifies the MAC name up to 32 characters in length.

ieee-address

Specifies the MAC address assigned to the MAC name. The value should be input in either a xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx format.

Platforms

All

Context

[Tree] (config>service mac-notification)

Full Context

configure service mac-notification

Description

This command controls the settings for the MAC notification message.

The MAC notification message must be generated under the following events:

1. When enabled in the BVPLS using no shutdown, a MAC notification will be sent for every active MC-LAG link. The following 3 cases assume no shutdown in the BVPLS.

2. Whenever a related MC-LAG link becomes active (the related MC-LAG link has at least 1 SAP associated with the BVPLS) if the MC-LAG peering is initialized and the PE peers are synchronized.

3. First SAP on an active MC-LAG is associated (via IVPLS/Epipe) with the BVPLS.

4. The link between IVPLS/Epipe and BVPLS is configured and there are I-SAPs configured on an active MC-LAG link.

The MAC notification is not sent for the following events:

1. Change of source-bmac or source-bmac-lsb

2. On changes of use-sap-bmac parameter

3. If MC-LAG peering is not (initialized and in sync).

Platforms

All

Context

[Tree] (config>service>vpls mac-notification)

Full Context

configure service vpls mac-notification

Description

This command controls the settings for the MAC notification message.

The MAC notification message must be generated under the following events:

1. When enabled in the BVPLS using no shutdown, a MAC notification will be sent for every active MC-LAG link. The following three cases assume no shutdown in the BVPLS.

2. Whenever a related MC-LAG link becomes active (the related MC-LAG link has at least 1 SAP associated with the BVPLS) if the MC-LAG peering is initialized and the PE peers are synchronized.

3. First SAP on an active MC-LAG is associated (via IVPLS/Epipe) with the BVPLS

4. The link between IVPLS/Epipe and BVPLS is configured and there are I-SAPs configured on an active MC-LAG link.

The MAC notification is not sent for the following events:

1. Change of source-bmac or source-bmac-lsb

2. On changes of use-sap-bmac parameter

3. If MC-LAG peering is not (initialized and in sync).

Platforms

All

Context

[Tree] (oam mac-ping)

[Tree] (config>saa>test>type mac-ping)

Full Context

oam mac-ping

configure saa test type mac-ping

Description

This command determines the existence of an egress SAP binding of a given MAC within a VPLS service.

A mac-ping packet is sent via the data plane.

A mac-ping is forwarded along the flooding domain if no MAC address bindings exist. If MAC address bindings exist, then the packet is forwarded along those paths, provided they are active. A response is generated only when there is an egress SAP binding for that MAC address or if the MAC address is a "local” OAM MAC address associated with the device’s control plan.

A mac-ping reply can be sent using the data plane or the control plane. The return-control option specifies the reply be sent using the control plane. If return-control is not specified, the request is sent using the data plane.

A mac-ping with data plane reply can only be initiated on nodes that can have an egress MAC address binding. A node without a FDB and without any SAPs cannot have an egress MAC address binding, so it is not a node where replies in the data plane are trapped and sent up to the control plane.

A control plane request is responded to via a control plane reply only.

By default, MAC OAM requests are sent with the system or chassis MAC address as the source MAC. The source option allows overriding of the default source MAC for the request with a specific MAC address.

When a source ieee-address value is specified and the source MAC address is locally registered within a split horizon group (SHG), then this SHG membership is used as if the packet originated from this SHG. In all other cases, SHG 0 (zero) is used. If the mac-trace is originated from a non-zero SHG, such packets do not go out to the same SHG.

Parameters

service-id

Specifies the service ID of the service to diagnose or manage.

Values

1 to 2147483647

service-name: up to 64 characters

dst-ieee-address

Specifies the destination MAC address for the OAM MAC request.

Values

xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

All zeros and multicast is not allowed.

src-ieee-address

Specifies the source MAC address from which the OAM MAC request originates. By default, the system MAC address for the chassis is used.

Values

xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

All zeros and multicast is not allowed.

Default

The system MAC address.

fc-name

Specifies that the fc parameter be used to test the forwarding class of the MPLS echo request packets. The actual forwarding class encoding is controlled by the network egress LSP-EXP mappings.

Values

be, l2, af, l1, h2, ef, h1, nc

Default

be

profile {in | out}

Specifies the profile state of the MPLS echo request encapsulation.

Default

out

octets

Specifies the MAC OAM request packet size in octets, expressed as a decimal integer. The request payload is padded to the specified size with a 6 byte PAD header and a byte payload of 0xAA as necessary. If the octet size specified is less than the minimum packet, the minimum sized packet necessary to send the request is used.

Values

1 to 9198

vc-label-ttl

Specifies the TTL value in the VC label for the OAM MAC request, expressed as a decimal integer.

Values

1 to 255

Default

255

send-count

Specifies the number of messages to send, expressed as a decimal integer. The count parameter is used to override the default number of message requests sent. Each message request must either time out or receive a reply before the next message request is sent. The message interval value must be expired before the next message request is sent.

Values

1 to 100

Default

1

return-control

Specifies the MAC OAM reply to a data plane MAC OAM request be sent using the control plane instead of the data plane.

interval

Specifies the time, in seconds, used to override the default request message send interval and defines the minimum amount of time that must expire before the next message request is sent.

If the interval is set to 1 second where the timeout value is set to 10 seconds, then the maximum time between message requests is 10 seconds and the minimum is 1 second. This depends upon the receipt of a message reply corresponding to the outstanding message request.

Values

1 to 10

Default

1

timeout

Specifies the time, in seconds, used to override the default timeout value and is the amount of time that the router waits for a message reply after sending the message request. Upon the expiration of message time out, the requesting router assumes that the message response is not received. Any response received after the request times out is silently discarded.

Values

1 to 10

Default

5

Platforms

All

Context

[Tree] (config>service>vpls>mesh-sdp mac-pinning)

[Tree] (config>service>vpls>sap mac-pinning)

[Tree] (config>service>vpls>endpoint mac-pinning)

[Tree] (config>service>vpls>spoke-sdp mac-pinning)

Full Context

configure service vpls mesh-sdp mac-pinning

configure service vpls sap mac-pinning

configure service vpls endpoint mac-pinning

configure service vpls spoke-sdp mac-pinning

Description

This command disables re-learning of MAC addresses on other SAPs within the VPLS. The MAC address will remain attached to a given SAP for duration of its age-timer.

The age of the MAC address entry in the FDB is set by the age timer. If mac-aging is disabled on a given VPLS service, any MAC address learned on a SAP or SDP with mac-pinning enabled will remain in the FDB on this SAP or SDP forever.

Every event that would otherwise result in re-learning is logged (MAC address; original-SAP; new-SAP).

When a SAP or spoke SDP is part of a Residential Split Horizon Group (RSHG), MAC pinning is activated at creation of the SAP. Otherwise MAC pinning is not enabled by default.

The no form of the command enables re-learning of MAC addresses.

Default

no mac-pinning

Platforms

All

Context

[Tree] (config>service>pw-template mac-pinning)

Full Context

configure service pw-template mac-pinning

Description

Enabling this command will disable re-learning of MAC addresses on other SAPs within the service. The MAC address will remain attached to a given SAP for duration of its age-timer.

The age of the MAC address entry in the FDB is set by the age timer. If mac-aging is disabled on a given VPLS service, any MAC address learned on a SAP or SDP with mac-pinning enabled will remain in the FDB on this SAP or SDP forever. Every event that would otherwise result in re-learning will be logged (MAC address; original-SAP; new-SAP).

When a SAP or spoke SDP is part of a Residential Split Horizon Group (RSHG), MAC pinning is activated at creation of the SAP. Otherwise MAC pinning is not enabled by default.

Default

no mac-pinning

Platforms

All

Context

[Tree] (config>macsec mac-policy)

Full Context

configure macsec mac-policy

Description

This command configures MAC address policy groups.

The no form of this command removes the MAC address policy group configuration.

Parameters

mac-policy-id

Specifies the value of the MAC address policy.

Values

0 to 4294967295

create

Mandatory keyword used to create the configuration.

Platforms

All

Context

[Tree] (oam mac-populate)

Full Context

oam mac-populate

Description

This command populates the FDB with an OAM-type MAC entry indicating the node is the egress node for the MAC address and optionally floods the OAM MAC association throughout the service. The mac-populate command installs an OAM MAC into the service FDB indicating the device is the egress node for a MAC address. The MAC address can be bound to a SAP (the target-sap) or can be associated with the control plane in that any data destined to the MAC address is forwarded to the control plane (CPM). As a result, if the service on the node has neither a FDB nor an egress SAP, then it is not allowed to initiate a mac-populate.

The MAC address that is populated in the FDBs in the provider network is given a type OAM, so that it can be treated distinctly from regular dynamically learned or statically configured MACs. Note that OAM MAC addresses are operational MAC addresses and are not saved in the device configuration. An exec file can be used to define OAM MACs after system initialization.

The force option in mac-populate forces the MAC in the table to be type OAM in the case it already exists as a dynamic, static or an OAM induced learned MAC with some other type binding.

An OAM-type MAC cannot be overwritten by dynamic learning and allows customer packets with the MAC to either ingress or egress the network while still using the OAM MAC entry.

The flood option causes each upstream node to learn the MAC (that is, populate the local FDB with an OAM MAC entry) and to flood the request along the data plane using the flooding domain. The flooded mac-populate request is sent via the data plane.

An age can be provided to age an OAM MAC using a specific interval. By default, OAM MAC addresses are not aged and can be removed with a mac-purge or with an FDB clear operation.

When split horizon group (SHG) is configured, the flooding domain depends on which SHG the packet originates from. The target-sap sap-id value dictates the originating SHG information.

Parameters

service-id

Specifies the service ID of the service to diagnose or manage.

Values

1 to 2147483647

service-name

Specifies the name of the service to diagnose or manage. 64 characters maximum.

ieee-address

Specifies the MAC address to be populated.

Values

xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

All zeros and multicast is not allowed.

flood

Sends the OAM MAC populate to all upstream nodes.

seconds

Specifies the age for the OAM MAC, in seconds, expressed as a decimal integer.

Values

1 to 65535

Default

3600

force

Converts the MAC to an OAM MAC.

sap-id

Specifies the local target SAP bound to a service on which to associate the OAM MAC. By default, the OAM MAC is associated with the control place, that is, it is associated with the CPU on the router.

When the target-sap sap-id value is not specified the MAC is bound to the CPM or CFM. The originating SHG is 0 (zero). When the target-sap sap-id value is specified, the originating SHG is the SHG of the target-sap.

Values

null	port-id | bundle-id | bpgrp-id | lag-id | aps-id
dot1q	port-id | bundle-id | bpgrp-id | lag-id | aps-id | pw-id:[qtag1| cp-conn-prof-id]
qinq	port-id | bundle-id | bpgrp-id | lag-id | pw-id:[qtag1 cp-conn-prof-id].[qtag2 | cp-conn-prof-id]
	cp	keyword
	conn-prof-id	1 to 8000
cem	slot/mda/port.channel
ima-grp	bundle-id [:vpi/vci | vpi | vpi1.vpi2 | cp.conn-prof-id]
	cp	keyword
	conn-prof-id	1 to 8000
port-id	slot/mda/port[.channel] esat-id/slot/port pxc-id.sub-port
aps-id	aps-group-id[.channel]
	aps	keyword
	group-id	1 to 128
ccag-id	ccag-id.path-id[cc-type]:cc-id
	ccag	keyword
	id	1 to 8
	path-id	a | b
	cc-type	.sap-net | .net-sap
	cc-id	1 to 4094
eth-tunnel	eth-tunnel-id[:eth-tun-sap-id]
	id	1 to 1024
	eth-tun-sap-id	0 to 4094
lag-id	lag-id
	lag	keyword
	id	1 to 800
pw-id	pw-id
	pw	keyword
	id	1 to 10239
qtag1	* | 0 to 4094
qtag2	* | null | 0 to 4094
tunnel-id	tunnel-id.private | public:tag
	tunnel	keyword
	id	1 to 16
	tag	0 to 4094

Platforms

All

Context

[Tree] (config>subscr-mgmt>isa-svc-chain mac-prefix)

Full Context

configure subscriber-mgmt isa-service-chaining mac-prefix

Description

This command configures the unique MAC prefix per ISA and per outside service for all NAT group configured for service-chaining.

The no form of this command removes the MAC prefix from the configuration.

Parameters

mac-prefix

Specifies the MAC prefix, up to eight characters, including separators.

Values

format AA:BB:CC

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls mac-protect)

Full Context

configure service vpls mac-protect

Description

This command indicates if this MAC is protected on the MAC protect list. When enabled, the agent will protect the MAC from being learned or re-learned on a SAP, spoke SDP or mesh SDP that has restricted learning enabled. The MAC protect list is used in conjunction with restrict-protected-src, restrict-unprotected-dst and auto-learn-mac-protect.

The no form of the command reverts to the default.

Platforms

All

Context

[Tree] (oam mac-purge)

Full Context

oam mac-purge

Description

This command removes an OAM-type MAC entry from the FDB and optionally floods the OAM MAC removal throughout the service. A mac-purge can be sent via the forwarding path or via the control plane.

When sending the MAC purge using the data plane, the TTL in the VC label is set to 1.

A MAC address is purged only if it is marked as OAM. A mac-purge request is an HVPLS OAM packet, with the following fields. The Reply Flags is set to 0 (since no reply is expected), the Reply Mode and Reserved fields are set to 0. The Ethernet header has source set to the (system) MAC address, the destination set to the broadcast MAC address. There is a VPN TLV in the FEC Stack TLV to identify the service domain.

If the register option is provided, the R bit in the Address Delete flags is turned on.

The flood option causes each upstream node to be sent the OAM MAC delete request and to flood the request along the data plane using the flooding domain. The flooded mac-purge request is sent via the data plane.

The register option reserves the MAC for OAM testing where it is no longer an active MAC in the FDB for forwarding, but it is retained in the FDB as a registered OAM MAC. Registering an OAM MAC prevents relearns for the MAC based on customer packets. Relearning a registered MAC can only be done through a mac-populate request. The originating SHG is always 0 (zero).

Parameters

service-id

Specifies the service ID of the service to diagnose or manage.

Values

1 to 2147483647

service-name

Specifies the name, up to 64 characters, of the service to diagnose or manage.

ieee-address

Specifies the MAC address to be purged.

Values

xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

All zeros and multicast is not allowed.

flood

Sends the OAM MAC purge to all upstream nodes.

force

Purges the entry regardless of the entry’s originating node.

register

Reserves the MAC for OAM testing.

Platforms

All

Context

[Tree] (config>service>ipipe>sap mac-refresh)

Full Context

configure service ipipe sap mac-refresh

Description

This command specifies the interval between ARP requests sent on this Ipipe SAP. When the SAP is first enabled, an ARP request will be sent to the attached CE device and the received MAC address will be used in addressing unicast traffic to the CE. Although this MAC address will not expire while the Ipipe SAP is enabled and operational, it is verified by sending periodic ARP requests at the specified interval.

The no form of this command restores mac-refresh to the default value.

Default

mac-refresh 14400

Parameters

refresh interval

Specifies the interval, in seconds, between ARP requests sent on this Ipipe SAP.

Values

0 to 65535

Platforms

All

Context

[Tree] (config>service>vpls mac-subnet-length)

Full Context

configure service vpls mac-subnet-length

Description

This command specifies the number of bits to be considered when performing MAC learning (MAC source) and MAC switching (MAC destination). Specifically, this value identifies how many bits, starting from the beginning of the MAC address are used. For example, if the mask-value of 28 is used, MAC learning only performs a lookup for the first 28 bits of the source MAC address when comparing with existing FDB entries. Then, it installs the first 28 bits in the FDB while zeroing out the last 20 bits of the MAC address. When performing switching in the reverse direction, only the first 28 bits of the destination MAC address are used to perform a FDB lookup to determine the next hop.

The no form of this command switches back to full MAC lookup.

Default

mac-subnet-length 48

Parameters

subnet-length

Specifies the number of bits to be considered when performing MAC learning or MAC switching.

Values

24 to 48

Platforms

All

Context

[Tree] (config>saa>test>type mac-trace)

[Tree] (oam mac-trace)

Full Context

configure saa test type mac-trace

oam mac-trace

Description

This command displays the hop-by-hop path for a destination MAC address within a VPLS.

The MAC traceroute operation is modeled after the IP traceroute utility which uses ICMP echo request and reply packets with increasing TTL values to determine the hop-by-hop route to a destination IP. The MAC traceroute command uses Nokia OAM packets with increasing TTL values to determine the hop-by-hop route to a destination MAC.

In a MAC traceroute, the originating device creates a MAC ping echo request packet for the MAC to be tested with increasing values of the TTL. The echo request packet is sent via the data plane and awaits a TTL exceeded response or the echo reply packet from the device with the destination MAC. The devices that reply to the echo request packets with the TTL exceeded and the echo reply are displayed.

When a source ieee-address value is specified and the source MAC address is locally registered within a split horizon group (SHG), then this SHG membership is used as if the packet originated from this SHG. In all other cases, SHG 0 (zero) is used. Note that if the mac-ping is originated from a non-zero SHG, such packets do not go out to the same SHG.

Parameters

service-id

Specifies the service ID of the service to diagnose or manage.

This variant of the command is only supported in the classic configuration-mode (configure system management-interface configuration-mode classic).

Values

{id | svc-name}

service-id:	1 to 2147483647
svc-name:	up to 64 characters

destination ieee-address

Specifies the destination MAC address to be traced.

Values

xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

All zeros and multicast is not allowed.

source ieee-address

The source MAC address from which the OAM MAC request originates. By default, the system MAC address for the chassis is used.

Values

xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

All zeros and multicast is not allowed.

Default

The system MAC address

fc-name

Specifies the forwarding class to test the forwarding class of the ICMP echo request packets. The actual forwarding class encoding is controlled by the network egress LSP-EXP mappings.

Values

be, l2, af, l1, h2, ef, h1, nc

Default

be

profile {in | out}

Specifies the profile state of the ICMP echo request encapsulation.

Default

out

octets

Specifies the MAC OAM request packet size in octets, expressed as a decimal integer. The request payload is padded to the specified size with a 6 byte PAD header and a byte payload of 0xAA as necessary. If the octet size specified is less than the minimum packet, the minimum sized packet necessary to send the request is used.

Values

1 to 9198

min-ttl vc-label-ttl

Specifies the minimum TTL value in the VC label for the MAC trace test, expressed as a decimal integer.

Values

1 to 255

Default

1

max-ttl vc-label-ttl

Specifies the maximum TTL value in the VC label for the MAC trace test, expressed as a decimal integer.

Values

1 to 255

Default

4

send-count

Specifies the number of MAC OAM requests sent for a TTL value, expressed as a decimal integer.

Values

1 to 100

Default

1

return-control

Specifies the MAC OAM reply to a data plane MAC OAM request be sent using the control plane instead of the data plane.

interval

Specifies the time, in seconds, used to override the default request message send interval and defines the minimum amount of time that must expire before the next message request is sent.

If the interval is set to 1 second, and the timeout value is set to 10 seconds, then the maximum time between message requests is 10 seconds and the minimum is 1 second. This depends upon the receipt of a message reply corresponding to the outstanding message request.

Values

1 to 10

Default

1

timeout

Specifies the time, in seconds, used to override the default timeout value and is the amount of time that the router waits for a message reply after sending the message request. Upon the expiration of message time out, the requesting router assumes that the message response is not received. Any response received after the request times out is silently discarded.

Values

1 to 60

Default

5

Platforms

All

Context

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>vrgw>lanext mac-translation)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>vrgw>lanext mac-translation)

Full Context

configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range vrgw lanext mac-translation

configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range vrgw lanext mac-translation

Description

This command enables MAC address translation for HLE services.

The no form of this command disables MAC address translation for HLE services.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config macsec)

Full Context

configure macsec

Description

Commands in this context configure MACsec, including the MACsec MKA profile.

Platforms

All

Context

[Tree] (config>port>ethernet>dot1x macsec)

Full Context

configure port ethernet dot1x macsec

Description

This command configures MACsec under this port.

Platforms

All

Context

[Tree] (config>macsec>connectivity-association macsec-encrypt)

Full Context

configure macsec connectivity-association macsec-encrypt

Description

This command specifies that all PDUs are encrypted and authenticated (ICV payload).

The no form of this command specifies that all PDUs are transmitted with cleartext, but still authenticated and have the trailing ICV.

Default

macsec-encrypt

Platforms

All

Context

[Tree] (config>router>mpls>lsp-template main-ct-retry-limit)

[Tree] (config>router>mpls>lsp main-ct-retry-limit)

Full Context

configure router mpls lsp-template main-ct-retry-limit

configure router mpls lsp main-ct-retry-limit

Description

This command configures the maximum number of retries the LSP primary path should be retried with the LSP Diff-Serv main Class Type (CT).

When an unmapped LSP primary path goes into retry, it uses the main CT until the number of retries reaches the value of the new main-ct-retry-limit parameter. If the path did not come up, it must start using the backup CT at that point in time. By default, this parameter is set to infinite value. The new main-ct-retry-limit parameter has no effect on an LSP primary path which retries due to a failure event.

An unmapped LSP primary path is a path which has never received a Resv in response to the first Path message sent. This can occur when performing a "shut/no-shut” on the LSP or LSP primary path or when the node reboots. An unmapped LSP primary path goes into retry if the retry timer expired or the head-end node received a PathErr message before the retry timer expired.

If the user entered a value of the main-ct-retry-limit parameter that is greater than the value of the LSP retry-limit, the number of retries will still stop when the LSP primary path reaches the value of the LSP retry-limit. In other words, the meaning of the LSP retry-limit parameter is not changed and always represents the upper bound on the number of retries. The unmapped LSP primary path behavior applies to both CSPF and non-CSPF LSPs.

The no form of this command sets the parameter to the default value of zero (0) which means the LSP primary path will retry forever.

Default

no main-ct-retry-limit

Parameters

number

Specifies the number of times MPLS will attempt to re-establish the LSP primary path using the Diff-Serv main CT. Allowed values are integers in the range of zero (0) to 10,000, where zero indicates to retry infinitely.

Values

0 to 1000, integer

Platforms

All

Context

[Tree] (config>router>segment-routing maintenance-policy)

Full Context

configure router segment-routing maintenance-policy

Description

This command configures a named maintenance policy that can be applied to SR Policy candidate paths that are either statically configured or imported via BGP. A maintenance policy is used to configure seamless BFD and protection for an SR Policy candidate path.

A maintenance policy must be administratively disabled in order to change any of the parameters.

A maintenance policy cannot be enabled unless a mode, bfd-enable, and bfd-template are configured.

If a maintenance-template is administratively disabled, then all candidate paths to which it is applied are deprogrammed from the data path.

The no form of this command removes the specified maintenance policy.

Parameters

maintenance-policy-name

Specifies the name of the maintenance policy, up to 32 characters and cannot start with a space or underscore.

Platforms

All

Context

[Tree] (conf>router>segment-routing>sr-policies>policy maintenance-policy)

Full Context

configure router segment-routing sr-policies static-policy maintenance-policy

Description

This command applies a named maintenance policy to the static SR policy path. The maintenance policy must exist under the configure router segment-routing context.

The no form of this command removes the specified maintenance policy.

Parameters

maintenance-policy-name

Specifies the name of the maintenance policy, up to 32 characters and cannot start with a space or underscore.

Platforms

All

Context

[Tree] (config>service>vprn>router-advert>if managed-configuration)

[Tree] (config>service>ies>sub-if>grp-if>ipv6 managed-configuration)

[Tree] (config>service>ies>sub-if>ipv6>rtr-adv managed-configuration)

[Tree] (config>router>router-advert>if managed-configuration)

[Tree] (config>service>vprn>sub-if>grp-if>ipv6>rtr-adv managed-configuration)

[Tree] (config>subscr-mgmt>rtr-adv-plcy managed-configuration)

[Tree] (config>service>vprn>sub-if>ipv6>rtr-adv managed-configuration)

[Tree] (config>service>ies>sub-if>grp-if>ipv6>rtr-adv managed-configuration)

[Tree] (config>service>vprn>sub-if>grp-if>ipv6 managed-configuration)

Full Context

configure service vprn router-advertisement interface managed-configuration

configure service ies subscriber-interface group-interface ipv6 managed-configuration

configure service ies subscriber-interface ipv6 router-advertisements managed-configuration

configure router router-advertisement interface managed-configuration

configure service vprn subscriber-interface group-interface ipv6 router-advertisements managed-configuration

configure subscriber-mgmt router-advertisement-policy managed-configuration

configure service vprn subscriber-interface ipv6 router-advertisements managed-configuration

configure service ies subscriber-interface group-interface ipv6 router-advertisements managed-configuration

configure service vprn subscriber-interface group-interface ipv6 managed-configuration

Description

This command sets or resets managed address configuration flag for this group-interface. This flag indicates that DHCPv6 is available for address configuration in addition to any address auto-configured using stateless address auto-configuration. See RFC 3315 for additional details.

The no form of this command reverts to the default.

Default

no managed-configuration

Platforms

All

• configure service vprn router-advertisement interface managed-configuration
• configure router router-advertisement interface managed-configuration

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn subscriber-interface group-interface ipv6 managed-configuration
• configure service ies subscriber-interface group-interface ipv6 router-advertisements managed-configuration
• configure service ies subscriber-interface group-interface ipv6 managed-configuration
• configure service vprn subscriber-interface group-interface ipv6 router-advertisements managed-configuration
• configure service vprn subscriber-interface ipv6 router-advertisements managed-configuration
• configure subscriber-mgmt router-advertisement-policy managed-configuration
• configure service ies subscriber-interface ipv6 router-advertisements managed-configuration

Context

[Tree] (config>service>vprn>sub-if>grp-if>sap>static-host managed-routes)

[Tree] (config>service>ies>sub-if>grp-if>sap>static-host managed-routes)

Full Context

configure service vprn subscriber-interface group-interface sap static-host managed-routes

configure service ies subscriber-interface group-interface sap static-host managed-routes

Description

Commands in this context configure managed route parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>sap managed-vlan-list)

Full Context

configure service vpls sap managed-vlan-list

Description

Commands in this context configure VLAN ranges to be managed by a management VPLS. The list indicates, for each SAP, the ranges of associated VLANs that will be affected when the SAP changes state. This managed-vlan-list is not used when STP mode is MSTP in which case the vlan-range is taken from the config>service>vpls>stp>msti configuration.

This command is only valid when the VPLS in which it is entered was created as a management VPLS.

Platforms

All

Context

[Tree] (config>service>vprn management)

Full Context

configure service vprn management

Description

Commands in this context configure node management within the VPRN.

Parameters

create

Keyword used to create a management server entry.

Platforms

All

Context

[Tree] (config>system>security management)

Full Context

configure system security management

Description

Commands in this context allow access to management servers.

Platforms

All

Context

[Tree] (config>system>security management-access-filter)

Full Context

configure system security management-access-filter

Description

This command creates the context to edit management access filters and to reset match criteria.

Management access filters control all traffic in and out of the CPM. They can be used to restrict management of the router by other nodes outside either specific (sub)networks or through designated ports.

Management filters, as opposed to other traffic filters, are enforced by system software.

The no form of this command removes management access filters from the configuration.

Platforms

All

Context

[Tree] (config>system management-interface)

Full Context

configure system management-interface

Description

Commands in this context configure the capabilities of router management interfaces such as CLI and NETCONF.

Platforms

All

Context

[Tree] (config>system>security management-interface)

Full Context

configure system security management-interface

Description

Commands in this context configure the selection of a management interface for hash configuration. The management interfaces are classic-cli, md-cli, netconf, or grpc.

Platforms

All

Context

[Tree] (config>system>management-interface>remote-management manager)

Full Context

configure system management-interface remote-management manager

Description

Commands configured in this context take precedence over command values specified directly in the configure management-interface remote-management context.

If a command is not configured in this context, the command setting is inherited from the higher level context.

The no form of this command removes the remote manager configuration.

Default

system-name

Parameters

manager-name

Specifies the name of the remote manager, up to 32 characters.

Platforms

All

Context

[Tree] (config>system>management-interface>remote-management>manager manager-address)

Full Context

configure system management-interface remote-management manager manager-address

Description

This command configures the destination IP address or FQDN of the manager.

The no form of this command removes the configured IP address or FQDN of the configured manager.

Parameters

ip-address

Specifies the IP address, up to 255 characters.

fqdn

Specifies the FQDN, up to 255 characters.

Platforms

All

Context

[Tree] (config>system>management-interface>remote-management>manager manager-port)

Full Context

configure system management-interface remote-management manager manager-port

Description

This command assigns a destination TCP port to be used for opening gRPC connections to the specified remote manager.

The no form of this command reverts the destination TCP port for the remote manager to the default gRPC port (57400).

Parameters

port

Specifies the TCP destination port.

Values

1 to 65535

Default

57400

Platforms

All

Context

[Tree] (config>service>system>bgp-evpn>eth-seg>service-carving manual)

Full Context

configure service system bgp-evpn ethernet-segment service-carving manual

Description

Commands in this context manually configure the service-carving algorithm, that is, configure the EVIs or ISIDs for which the PE is DF.

Platforms

All

Context

[Tree] (config>service>vprn>if>sap>ipsec-tunnel manual-keying)

[Tree] (config>router>if>ipsec>ipsec-tunnel manual-keying)

[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel manual-keying)

[Tree] (config>service>ies>if>ipsec>ipsec-tunnel manual-keying)

Full Context

configure service vprn interface sap ipsec-tunnel manual-keying

configure router interface ipsec ipsec-tunnel manual-keying

configure service vprn interface ipsec ipsec-tunnel manual-keying

configure service ies interface ipsec ipsec-tunnel manual-keying

Description

This command configures Security Association (SA) for manual keying. When enabled, the command specifies whether this SA entry is created manually, by the user, or dynamically by the IPsec sub-system.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn interface sap ipsec-tunnel manual-keying

VSR

• configure service ies interface ipsec ipsec-tunnel manual-keying
• configure service vprn interface ipsec ipsec-tunnel manual-keying
• configure router interface ipsec ipsec-tunnel manual-keying

Context

[Tree] (config>service>nat>pcp-server-policy>opcode map)

Full Context

configure service nat pcp-server-policy opcode map

Description

This command enables/disables support for the map opcode.

Default

no map

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>nat map-domain)

Full Context

configure service nat map-domain

Description

This command creates a MAP domain template, which is used to define MAP rules and parameters specific to the MAP domain. A MAP domain represents a set of CEs that share the same default gateway (BR's IPv6 prefix - DMR rule) and a set of basic MAP rules (BMRs). As a bordering node between the IPv6 and IPv4 realm, the BR performs stateless IPv4 and IPv6 translation based on MAP rules.

A MAP domain can be instantiated within a routing context by referencing an existing MAP domain template in the context.

Parameters

domain-name

Specifies the name of the MAP domain, up to 32 characters. The MAP domain name has local significance.

Platforms

7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s, VSR

Context

[Tree] (config>router>nat>map map-domain)

[Tree] (config>service>vprn>nat>map map-domain)

Full Context

configure router nat map map-domain

configure service vprn nat map map-domain

Description

This command instantiates a MAP-T domain within a routing context, assuming that the MAP-T domain template is administratively enabled (no shutdown). When the MAP-T is instantiated, the forwarding for the MAP-T domain is enabled and its routes can be exported in routing protocols.

Multiple MAP-T domains can be instantiated within a routing context.

Interactions:

The referenced MAP domain is defined under the config>service>nat context.

Parameters

domain-name

Specifies the name of the MAP domain template, up to 32 characters.

Platforms

7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s, VSR

Context

[Tree] (config>fwd-path-ext>fpe map-t)

Full Context

configure fwd-path-ext fpe map-t

Description

This command associates the MAP-T application with the Forwarding Path Extension (FPE).

The no form of this command removes the association.

Platforms

7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s

Context

[Tree] (config>isa map-t-group)

Full Context

configure isa map-t-group

Description

Commands in this context configure a MAP-T group. This group is a set of ESA-VMs responsible for handling downstream fragmentation and ICMPv4 and ICMPv6 processing.

The no form of this command removes the configured MAP-T group.

Parameters

map-t-group-id

Specifies the MAP-T group ID.

Values

1 to 4

create

Keyword used to create the MAP-T group.

Platforms

7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s

Context

[Tree] (conf>service>nat>map-domain map-t-group)

Full Context

configure service nat map-domain map-t-group

Description

This command specifies the MAP-T group with domain association.

The no form of this command removes the association.

Parameters

map-t-group-id

Specifies the MAP-T group ID.

Values

1 to 4

Platforms

7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s

Context

[Tree] (config>service>upnp>upnp-policy mapping-limit)

Full Context

configure service upnp upnp-policy mapping-limit

Description

This command specifies the maximum number of UPnP mapping per subscriber.

The no form of the command reverts to the default.

Default

mapping-limit 256

Parameters

limit

Specifies the upper limit of the number of UPnP mappings per subscriber.

Values

1 to 256

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>nat>map-domain mapping-rule)

Full Context

configure service nat map-domain mapping-rule

Description

This command provides a CLI context for configuring MAP rules.

Parameters

map-rule-name

Specifies the name of the MAP rule; the name has a local significance.

Platforms

7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s, VSR

Context

[Tree] (config>router>isis>segment-routing mapping-server)

Full Context

configure router isis segment-routing mapping-server

Description

Commands in this context configures the Segment Routing mapping server feature in an IS-IS instance.

SR mapping server enables the configuration and advertisement, via IS-IS, of the node SID index for IS-IS prefixes of routers which are in the LDP domain. This is performed in the router acting as a mapping server, which uses a prefix-SID sub-TLV within the SID/Label binding TLV in IS-IS.

The no form of this command deletes all node SID entries in the IS-IS instance.

Platforms

All

Context

[Tree] (config>router>ospf>segm-rtng mapping-server)

Full Context

configure router ospf segment-routing mapping-server

Description

Commands in this context configure the Segment Routing mapping server feature in an OSPF instance.

The mapping server feature allows the configuration and advertisement in OSPF of the node SID index for OSPF prefixes of routers which are in the LDP domain. This is performed in the router acting as a mapping server and using a prefix-SID sub-TLV within the Extended Prefix Range TLV in OSPF.

The no form of this command deletes all node SID entries in the OSPF instance.

Platforms

All

Context

[Tree] (config>qos>post-policer-mapping>fc maps-to)

Full Context

configure qos post-policer-mapping fc maps-to

Description

This command remaps the forwarding class and profile state of an egress policed packet that is to be mapped to another forwarding class and profile, where the profile state is that of the resulting profile after the packet has been processed by the egress policer.

The new forwarding class is used to select the egress queue on which the post-policer traffic is placed. The new profile is used to determine the congestion control handling in that queue, specifically the drop tail or slope that is applied to the traffic.

The maps-to command parameters can be overwritten by reissuing the command with a different FC or profile.

The traffic remarking is based on the marking configured for the forwarding class and profile of the traffic after being policed but before it is remapped.

Parameters

fc-name

Specifies one of the eight forwarding classes supported by the system.

Values

be, l2, af, l1, h2, ef, h1, nc

profile

Specifies one of the egress packet profile states.

Values

exceed, in, inplus, out

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, 7950 XRS, VSR

Context

[Tree] (config>isa>wlan-gw-group>watermarks mark)

Full Context

configure isa wlan-gw-group watermarks mark

Description

This command enables a watermark notification. If the watermark is set, it generates a notification when the corresponding resource consumption goes above the high percentage. No additional notifications are sent until resource consumption goes under the low watermark, upon which, a notification is sent indicating the high watermark is no longer hit.

The no form of this command disables the watermark notification.

Parameters

entity

Specifies which watermark to set.

Values

user-equipment | bridge-domain | radius-proxy-client

percentage-high

Specifies the high watermark in percentage of total resources available.

Values

1 to 100

percentage-low

Specifies the low watermark in percentage of total resources available.

Values

0 to 99

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe mask)

[Tree] (config>subscr-mgmt>loc-user-db>ppp mask)

Full Context

configure subscriber-mgmt local-user-db ipoe mask

configure subscriber-mgmt local-user-db ppp mask

Description

This command configures a mask for the specified match type. The masking is applied on the parameter when performing an LUDB lookup to identify a host.

The no form of this command removes the mask from the configuration.

Parameters

ppp-match-type

Specifies the parameter on which the mask should be applied for an LUDB lookup to identify a PPP host.

Values

circuit-id, mac, remote-id, sap-id, service-name, username

ipoe-match-type

Specifies the parameter on which the mask should be applied for an LUDB lookup to identify an IPoE host.

The prefix-string and suffix-string command options are not supported when the ipoe-match-type value is set to duid-en or duid-ll-llt.

Values

circuit-id, duid-en, duid-ll-llt, option60, remote-id, sap-id, string, system-id

prefix-string

Specifies a substring that is stripped of the start of the incoming parameter value before it is matched against the value configured in the LUDB host identification.

This string can only contain printable ASCII characters. The "*” character is a wildcard that matches any substring. If a "\" character is masked, use the escape key so it becomes "\\".

This command option is unsupported when the ppp-match-type equals mac.

Values

up to 127 characters, "*”

prefix-length

Specifies the number of characters to remove from the start of the incoming parameter value before it is matched against the value configured in the LUDB host identification.

When used with the mac or duid-ll-llt parameter, it specifies the number of bits to remove from the start of the MAC address. For example, if the MAC address is 0a:0b:0c:0d:0e:0f, to obtain the last bit for matching purposes (match an odd or even MAC address), the prefix length is 47. The result in this example would be a binary number of 1 (0xf = 1111).

Values

1 to 127

suffix-string

Specifies a substring that is stripped of the end of the incoming parameter value before it is matched against the value configured in the LUDB host identification.

This string can only contain printable ASCII characters. The "*” character is a wildcard that matches any substring. If a "\" character is masked, use the escape key so it becomes "\\".

This command option is unsupported when the ppp-match-type equals mac.

Values

up to 127 characters

suffix-length

Specifies the number of characters to remove from the end of the incoming parameter value before it is matched against the value configured in the LUDB host identification.

When used with the mac or duid-ll-llt command option, the number of bits to remove from the end of the MAC address is specified.

Values

1 to 127

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>system>security>snmp>view mask)

Full Context

configure system security snmp view mask

Description

The mask value and the mask type, along with the oid-value configured in the view command, determines the access of each sub-identifier of an object identifier (MIB subtree) in the view.

Each bit in the mask corresponds to a sub-identifier position. For example, the most significant bit for the first sub-identifier, the next most significant bit for the second sub-identifier, and so on. If the bit position on the sub-identifier is available, it can be included or excluded.

For example, the MIB subtree that represents MIB-II is 1.3.6.1.2.1. The mask that catches all MIB-II would be 0xfc or 0b11111100.

Only a single mask may be configured per view and OID value combination. If more than one entry is configured, each subsequent entry overwrites the previous entry.

The no form of this command removes the mask from the configuration.

Parameters

mask-value

The mask value associated with the OID value determines whether the sub-identifiers are included or excluded from the view. (Default: all 1s)

The mask can be entered either:

• In hex. For example, 0xfc.

• In binary. For example, 0b11111100.

Note:

If the number of bits in the bit mask is less than the number of sub-identifiers in the MIB subtree, then the mask is extended with ones until the mask length matches the number of sub-identifiers in the MIB subtree.

type

Specifies to include or exclude MIB subtree objects.

Values

included - All MIB subtree objects that are identified with a 1 in the mask are available in the view.

excluded - All MIB subtree objects that are identified with a 1 in the mask are denied access in the view.

Default

included

Platforms

All

Context

[Tree] (config>service>vprn>if>icmp mask-reply)

[Tree] (config>service>ies>sub-if>grp-if mask-reply)

[Tree] (config>service>ies>if>icmp mask-reply)

[Tree] (config>service>vprn>if mask-reply)

[Tree] (config>service>vprn>nw-if>icmp mask-reply)

Full Context

configure service vprn interface icmp mask-reply

configure service ies subscriber-interface group-interface mask-reply

configure service ies interface icmp mask-reply

configure service vprn interface mask-reply

configure service vprn network-interface icmp mask-reply

Description

This command enables responses to Internet Control Message Protocol (ICMP) mask requests on the router interface.

If a local node sends an ICMP mask request to the router interface, the mask-reply command configures the router interface to reply to the request.

By default, the router instance replies to mask requests.

The no form of this command disables replies to ICMP mask requests on the router interface.

Default

mask-reply — Specifies to reply to ICMP mask requests.

Platforms

All

• configure service vprn interface icmp mask-reply
• configure service ies interface icmp mask-reply
• configure service vprn network-interface icmp mask-reply
• configure service vprn interface mask-reply

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service ies subscriber-interface group-interface mask-reply

Context

[Tree] (config>subscr-mgmt>git>ipv4>icmp mask-reply)

Full Context

configure subscriber-mgmt group-interface-template ipv4 icmp mask-reply

Description

This command enables responses to ICMP mask requests on the router interface. If a local node sends an ICMP mask request to the router interface, the router interface replies to the request.

By default, the router instance replies to mask requests.

The no form of this command disables replies to ICMP mask requests on the router interface.

Default

mask-reply

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>if>icmp mask-reply)

Full Context

configure router interface icmp mask-reply

Description

This command enables responses to ICMP mask requests on the router interface.

If a local node sends an ICMP mask request to the router interface, the mask-reply command configures the router interface to reply to the request.

The no form of this command disables replies to ICMP mask requests on the router interface.

Default

mask-reply — Replies to ICMP mask requests.

Platforms

All

Context

[Tree] (config>service>ies>if>ipv6>vrrp master-int-inherit)

Full Context

configure service ies interface ipv6 vrrp master-int-inherit

Description

This command allows the master instance to dictate the master down timer (non-owner context only).

Default

no master-int-inherit

Platforms

All

Context

[Tree] (config>service>ies>if>vrrp master-int-inherit)

Full Context

configure service ies interface vrrp master-int-inherit

Description

This command allows the master instance to dictate the master down timer (non-owner context only).

Default

no master-int-inherit

Platforms

All

Context

[Tree] (config>service>vprn>if>vrrp master-int-inherit)

[Tree] (config>service>vprn>if>ipv6>vrrp master-int-inherit)

Full Context

configure service vprn interface vrrp master-int-inherit

configure service vprn interface ipv6 vrrp master-int-inherit

Description

This command allows the master instance to dictate the master down timer (non-owner context only).

Default

no master-int-inherit

Platforms

All

Context

[Tree] (config>router>if>vrrp master-int-inherit)

[Tree] (config>router>if>ipv6>vrrp master-int-inherit)

Full Context

configure router interface vrrp master-int-inherit

configure router interface ipv6 vrrp master-int-inherit

Description

This command enables the virtual router instance to inherit the master VRRP router’s advertisement interval timer which is used by backup routers to calculate the master down timer.

The master-int-inherit command is only available in the non-owner nodal context and is used to allow the current virtual router instance master to dictate the master down timer for all backup virtual routers. The master-int-inherit command has no effect when the virtual router instance is operating as master.

If master-int-inherit is not enabled, the locally configured message-interval must match the master’s VRRP advertisement message advertisement interval field value or the message is discarded.

The no form of the command restores the default operating condition which requires the locally configured message-interval to match the received VRRP advertisement message advertisement interval field value. The virtual router instance does not inherit the master VRRP router’s advertisement interval timer and uses the locally configured message interval.

Default

no master-int-inherit

Platforms

All

Context

[Tree] (config>system>ptp>port master-only)

Full Context

configure system ptp port master-only

Description

This command is used to restrict the local port to never enter the timeReceiver state. Use the command to ensure that the 7750 SR never draws synchronization from the attached external device.

This parameter is only effective when the profile is set to g8275dot1-2014 or g8275dot2-2016.

Default

master-only true

Parameters

true

Enables the master-only parameter of the PTP port.

false

Disables the master-only parameter of the PTP port.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>app-assure>aarp master-selection-mode)

Full Context

configure application-assurance aarp master-selection-mode

Description

This command configures the AARP mode of operation with the peer instance. The modes affect the AARP state machine behavior according to the desired behavior. Minimize-switchover will change AARP state based on Master ISA failure, and be non-revertive in that when the priority ISA returns a switch does not occur, which is optimal for AA flow identification. Inter-chassis efficiency mode considers both priority (revertive) and the endpoint status of the AARP instance and will switch activity in case of EP failure in order to avoid sending all the traffic over the ICL. The priority-based-balance mode will be revertive after a priority master returns to service, but excludes EP status. The master-selection-mode configuration must match on both peer AARP instances, or the AARP operational status will stay down.

Default

master-selection-mode minimize-switchovers

Parameters

mode

Specifies the AARP master selection mode.

Values

minimize-switchovers — Optimal AA flow detection continuity by minimizing AARP switchovers.

inter-chassis-efficiency — Minimizes inter-chassis traffic.

priority-based-balance — AA load balance between AARP peers based on configured priority.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>match-radprox-cache match)

Full Context

configure subscriber-mgmt local-user-db ipoe host match-radius-proxy-cache match

Description

This command specifies in what DHCPv6 option to retrieve the value to be used as lookup key in the RADIUS proxy cache.

The no form of this command reverts to the default.

Default

match mac

Parameters

circuit-id

Specifies to use the circuit Id to match against.

mac

Specifies the MAC address to match against.

remote-id

Specifies the remote ID to match against.

option number

Specifies the option number that the DHCP server uses to send the identification strings to the client.

Values

1 to 254

option6 number

Specifies the DHCPv6 option to retrieve the value to be used as lookup key in the RADIUS proxy cache.

Values

1 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>policy>chrg-fltr>entry match)

Full Context

configure application-assurance group policy charging-filter entry match

Description

Commands in this context configure the match criterion for a AA charging-filter entry.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>isa-svc-chain>vas-filter>entry match)

Full Context

configure subscriber-mgmt isa-service-chaining vas-filter entry match

Description

Commands in this context configure the match criterion for a VAS filter entry.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ipv6>entry match)

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ipv6>entry match)

Full Context

configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ipv6-filter-entries entry match

configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ipv6-filter-entries entry match

Description

This command configures the match criteria for this IP filter entry.

The no form of this command reverts to the default.

Parameters

next-header

protocol-number, protocol-name

protocol-number

Specifies the protocol number accepted in DBH for IPv6 filter entries.

Values

[0 to 255]D

[0x0 to 0xFF]H

[0b0 to 0b11111111]B

protocol-name

Specifies the protocol name accepted in DBH for IPv6 filter entries.

Values

none, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route, ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp

* - udp/tcp wildcard

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ip>entry match)

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ip>entry match)

Full Context

configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ip-filter-entries entry match

configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ip-filter-entries entry match

Description

This command configures the match criteria for this IP filter entry.

The no form of this command reverts to the default.

Parameters

protocol-id

Specifies the protocol ID or protocol name accepted in DHB.

Values

protocol-number — [0 to 255]D

[0x0 to 0xFF]H

[0b0 to 0b11111111]B

protocol-name — none, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route, ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp

* - udp/tcp wildcard

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>isa-filter>ipv6>entry match)

Full Context

configure subscriber-mgmt isa-filter ipv6 entry match

Description

This command creates a match context for this entry. The protocol value specifies which Layer-4 protocol the packet should match.

The no form of this command removes the match context of this entry.

Default

match protocol any

Parameters

protocol

Specifies that the only supported match context is protocol.

any

Specifies to match any protocol.

icmp

Specifies to match ICMP packets in a v4 filter.

tcp

Specifies to match TCP packets.

udp

Specifies to match UDP packets.

gre

Specifies to match GRE over IP packets.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>mrp>mrp-policy>entry match)

Full Context

configure service mrp mrp-policy entry match

Description

This command creates the context for entering/editing match criteria for the mrp-policy entry. When the match criteria have been satisfied the action associated with the match criteria is executed. In the current implementation just one match criteria (ISID based) is possible in the entry associated with the mrp-policy. Only one match statement can be entered per entry.

The no form of this command removes the match criteria for the entry-id.

Platforms

All

Context

[Tree] (config>service>vprn>bgp>group>dynamic-neighbor match)

Full Context

configure service vprn bgp group dynamic-neighbor match

Description

This command configures match conditions for the dynamic neighbors.

Platforms

All

Context

[Tree] (config>service>vprn>log>filter>entry match)

Full Context

configure service vprn log filter entry match

Description

This command creates context to enter/edit match criteria for a filter entry. When the match criteria is satisfied, the action associated with the entry is executed.

If more than one match parameter (within one match statement) is specified, then all the criteria must be satisfied (AND functional) before the action associated with the match is executed.

Use the match command to display a list of the valid applications.

Match context can consist of multiple match parameters (application, event-number, severity, subject), but multiple match statements cannot be entered per entry.

The no form of this command removes the match criteria for the entry-id.

Default

no match

Platforms

All

Context

[Tree] (config>app-assure>group>policy>aqp>entry match)

Full Context

configure application-assurance group policy app-qos-policy entry match

Description

Commands in this context configure flow match rules for this AQP entry. A flow matches this AQP entry only if it matches all the match rules defined (logical and of all rules). If no match rule is specified, the entry will match all flows.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>sess-fltr>entry match)

Full Context

configure application-assurance group session-filter entry match

Description

Commands in this context configure session conditions for this entry.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>transit-prefix-policy>entry match)

Full Context

configure application-assurance group transit-prefix-policy entry match

Description

Commands in this context configure transit prefix policy entry match criteria.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>app-assure>group>traffic-capture match)

Full Context

debug application-assurance group traffic-capture match

Description

This command configures debugging for traffic match criteria.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>nat>nat-classifier>entry match)

Full Context

configure service nat nat-classifier entry match

Description

This command configures an IP protocol to be used as a nat-classifier match criterion. When the match criteria have been satisfied the action associated with the match criteria is executed.

The no form of the command removes the match criteria for the entry-id.

Default

match protocol udp

Parameters

protocol ip-protocol

Specifies the text value representing the IP protocol to be used as a match criterion.

Values

udp, tcp

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>li>li-filter>li-mac-filter>entry match)

Full Context

configure li li-filter li-mac-filter entry match

Description

Commands in this context configure match criteria for the filter entry and specifies an Ethernet frame type for the entry.

If more than one match criteria (within one match statement) are configured then all criteria must be satisfied (and function) for a match to occur.

A match context may consist of multiple match criteria, but multiple match statements cannot be entered per entry.

The no form of this command removes the match criteria for the entry.

Parameters

frame-type

Filters can continue to be edited by all users even when an li-source references an entry in that filter.

Values

802dot3, 802dot2-llc, 802dot2-snap, ethernet_II

Default

802dot3

Platforms

All

Context

[Tree] (config>li>li-filter>li-ip-filter>entry match)

Full Context

configure li li-filter li-ip-filter entry match

Description

This command enables context to enter match criteria for LI IPv4 filter and optionally allows specifying protocol value to match on.

If more than one match criterion are configured then all criteria must be satisfied for a match to occur (logical "AND”). Multiple criteria must be configured within a single match context for a given entry.

The no form of this command removes the match criteria for the entry.

Parameters

protocol-id

Configures the decimal value representing the IP protocol to be used as an IP filter match criterion. Well known protocol numbers include ICMP(1), TCP(6), UDP(17).

Values

0 to 255 (values can be expressed in decimal, hexadecimal, or binary - DHB)

Keywords for the 7750 SR:

none, crtp, crudp, egp, eigrp, encap, ether-ip, gre, icmp, idrp, igmp, igp, ip, ipv6, ipv6-frag, ipv6-icmp, ipv6-no-nxt, ipv6-opts, ipv6-route, isis, iso-ip, l2tp, ospf-igp, pim, pnni, ptp, rdp, rsvp, stp, tcp, udp, vrrp

Keywords for the 7450 ESS:

none, crtp, crudp, egp, eigrp, encap, ether-ip, gre, icmp, idrp, igmp, igp, ip, isis, iso-ip, l2tp, ospf-igp, pim, pnni, ptp, rdp, rsvp, stp, tcp, udp, vrrp

* — udp/tcp wildcard

Table 2. Protocol ID Descriptions

Protocol	Protocol ID	Description
icmp	1	Internet Control Message
igmp	2	Internet Group Management
ip	4	IP in IP (encapsulation)
tcp	6	Transmission Control
egp	8	Exterior Gateway Protocol
igp	9	Any private interior gateway (used by Cisco for IGRP)
udp	17	User Datagram
rdp	27	Reliable Data Protocol
ipv6	41	IPv6
ipv6-route	43	Routing Header for IPv6
ipv6-frag	44	Fragment Header for IPv6
idrp	45	Inter-Domain Routing Protocol
rsvp	46	Reservation Protocol
gre	47	General Routing Encapsulation
ipv6-icmp	58	ICMP for IPv6
ipv6-no-nxt	59	No Next Header for IPv6
ipv6-opts	60	Destination Options for IPv6
iso-ip	80	ISO Internet Protocol
eigrp	88	EIGRP
ospf-igp	89	OSPFIGP
ether-ip	97	Ethernet-within-IP Encapsulation
encap	98	Encapsulation Header
pnni	102	PNNI over IP
pim	103	Protocol Independent Multicast
vrrp	112	Virtual Router Redundancy Protocol
l2tp	115	Layer Two Tunneling Protocol
stp	118	Spanning Tree Protocol
ptp	123	Performance Transparency Protocol
isis	124	ISIS over IPv4
crtp	126	Combat Radio Transport Protocol
crudp	127	Combat Radio User Datagram

Platforms

All

Context

[Tree] (config>li>li-filter>li-ipv6-filter>entry match)

Full Context

configure li li-filter li-ipv6-filter entry match

Description

Commands in this context enter match criteria for an LI IPv6 filter and optionally allows specification IPv6 next-header value to match on.

If more than one match criterion are configured, then all criteria must be satisfied for a match to occur (logical "AND”). Multiple criteria must be configured within a single match context for a given entry.

The no form removes the match criteria for the entry.

Parameters

next-header

protocol-number, protocol-name

Specifies the IPv6 next header to match. This parameter is analogous to the protocol parameter used in IP filter match criteria.

protocol-number

Specifies the protocol number value to be configured as a match criterion.

Values

[0 to 255]D

[0x0 to 0xFF]H

[0b0 to 0b11111111]B

protocol-name

Specifies the protocol name to be configured as a match criterion.

Values

none, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route, ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp

* - udp/tcp wildcard

Platforms

All

Context

[Tree] (config>qos>sap-ingress>ip-criteria>entry match)

[Tree] (config>qos>sap-egress>ip-criteria>entry match)

Full Context

configure qos sap-ingress ip-criteria entry match

configure qos sap-egress ip-criteria entry match

Description

This command creates a context to configure match criteria for SAP QoS policy match criteria. When the match criteria have been satisfied, the action associated with the match criteria is executed.

If more than one match criteria (within one match statement) are configured, all criteria must be satisfied (AND function) before the action associated with the match is executed.

A match context can consist of multiple match criteria, but multiple match statements cannot be entered per entry.

It is possible that a SAP policy includes the dscp map command, the dot1p map command, and an IP match criteria. When multiple matches occur for the traffic, the order of precedence is used to arrive at the final action. The order of precedence is as follows:

1. 802.1p bits

2. DSCP

3. IP quintuple or MAC headers

The no form of this command removes the match criteria for the entry-id.

Parameters

protocol protocol-id

Specifies an IP protocol to be used as a SAP QoS policy match criterion.

The protocol type such as TCP / UDP / OSPF is identified by its respective protocol number. Well-known protocol numbers include ICMP(1), TCP(6), UDP(17)

IP Protocol Names lists the IP protocols and their respective IDs and descriptions.

Values

The following values apply to the 7750 SR and 7950 XRS:

protocol-id: 0 to 255 protocol numbers accepted in decimal, hexadecimal, or binary

keywords: none, crtp, crudp, egp, eigrp, encap, ether-ip, gre, icmp, idrp, igmp, igp, ip, ipv6, ipv6-frag, ipv6-icmp, ipv6-no-nxt, ipv6-opts, ipv6-route, isis, iso-ip, l2tp, ospf-igp, pim, pnni, ptp, rdp, rsvp, stp, tcp, udp, vrrp

Values

The following values apply to the 7450 ESS:

keywords: none, crtp, crudp, egp, eigrp, encap, ether-ip, gre, icmp, idrp, igmp, igp, ip, ipv6, ipv6-frag, ipv6-icmp, ipv6-no-nxt, ipv6-opts, ipv6-route, isis, iso-ip, l2tp, ospf-igp, pim, pnni, ptp, rdp, rsvp, stp, tcp, udp, vrrp

* — udp/tcp wildcard

Table 3. IP Protocol Names

Protocol	Protocol ID	Description
icmp	1	Internet Control Message
igmp	2	Internet Group Management
ip	4	IP in IP (encapsulation)
tcp	6	Transmission Control
egp	8	Exterior Gateway Protocol
igp	9	Any private interior gateway (used by Cisco for their IGRP)
udp	17	User Datagram
rdp	27	Reliable Data Protocol
ipv6	41	IPv6
ipv6-route	43	Routing Header for IPv6
ipv6-frag	44	Fragment Header for IPv6
idrp	45	Inter-Domain Routing Protocol
rsvp	46	Reservation Protocol
gre	47	General Routing Encapsulation
ipv6-icmp	58	ICMP for IPv6
ipv6-no-nxt	59	No Next Header for IPv6
ipv6-opts	60	Destination Options for IPv6
iso-ip	80	ISO Internet Protocol
eigrp	88	EIGRP
ospf-igp	89	OSPFIGP
ether-ip	97	Ethernet-within-IP Encapsulation
encap	98	Encapsulation Header
pnni	102	PNNI over IP
pim	103	Protocol Independent Multicast
vrrp	112	Virtual Router Redundancy Protocol
l2tp	115	Layer Two Tunneling Protocol
stp	118	Schedule Transfer Protocol
ptp	123	Performance Transparency Protocol
isis	124	ISIS over IPv4
crtp	126	Combat Radio Transport Protocol
crudp	127	Combat Radio User Datagram

Platforms

All

Context

[Tree] (config>qos>sap-egress>ipv6-criteria>entry match)

[Tree] (config>qos>sap-ingress>ipv6-criteria>entry match)

Full Context

configure qos sap-egress ipv6-criteria entry match

configure qos sap-ingress ipv6-criteria entry match

Description

This command creates a context to configure match criteria for ingress SAP QoS policy match IPv6 criteria. When the match criteria have been satisfied, the action associated with the match criteria is executed.

If more than one match criteria (within one match statement) are configured, all criteria must be satisfied (logical AND) before the action associated with the match is executed.

A match context can consist of multiple match criteria, but multiple match statements cannot be created per entry.

A SAP ingress policy may include the dscp map command, the dot1p map command, and an IPv6 match criteria. When multiple matches occur for the traffic, the following order of precedence is used to arrive at the final action.

1. 802.1p bits

2. DSCP

3. IP quintuple or MAC headers

The no form of this command removes the match criteria for the entry-id.

Parameters

next-header

protocol-number, protocol-name

Specifies the IPv6 next header to match.

On the 7750 SR and 7950 XRS, the protocol type such as TCP, UDP, or OSPF is identified by its respective protocol number. Well-known protocol numbers include ICMP(1), TCP(6) and UDP(17).

protocol-number

Specifies the protocol number value to be configured as a match criterion.

Values

[0 to 255]D

[0x0 to 0xFF]H

[0b0 to 0b11111111]B

protocol-name

Specifies the protocol name to be configured as a match criterion.

Values

none, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route, ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp

* - udp/tcp wildcard

Platforms

All

Context

[Tree] (config>qos>sap-ingress>mac-criteria>entry match)

Full Context

configure qos sap-ingress mac-criteria entry match

Description

This command creates a context for entering/editing match MAC criteria for ingress SAP QoS policy match criteria. When the match criteria have been satisfied, the action associated with the match criteria is executed.

If more than one match criteria (within one match statement) are configured, all criteria must be satisfied (AND function) before the action associated with the match will be executed.

A match context can consist of multiple match criteria, but multiple match statements cannot be entered per entry.

The no form of this command removes the match criteria for the entry-id.

Parameters

frame-type

The frame-type keyword configures an Ethernet frame type or an ATM frame type to be used for the MAC filter match criteria.

Values

802dot3, 802dot2-llc, 802dot2-snap, ethernet_II, atm

Default

802dot3

802dot3

Specifies the frame type is Ethernet IEEE 802.3.

802dot2-llc

Specifies the frame type is Ethernet IEEE 802.2 LLC.

802dot2-snap

Specifies the frame type is Ethernet IEEE 802.2 SNAP.

ethernet-II

Specifies the frame type is Ethernet Type II.

atm

Specifies the frame type as ATM cell. The user is not allowed to configure entries with frame type of atm and a frame type of other supported values in the same QoS policy. This parameter applies only to the 7750 SR and 7950 XRS.

Platforms

All

Context

[Tree] (config>qos>network>egress>ip-criteria>entry match)

[Tree] (config>qos>network>ingress>ip-criteria>entry match)

Full Context

configure qos network egress ip-criteria entry match

configure qos network ingress ip-criteria entry match

Description

This command creates a context to configure match criteria for a network QoS policy. When the match criteria have been satisfied, the action associated with it is executed.

If more than one match criteria (within one match statement) are configured, then all criteria must be satisfied before the associated action with the match is executed.

A match context can consist of multiple match criteria, but multiple match statements cannot be entered per entry.

A network QoS policy can include the DSCP map command, the dot1p map command (ingress only), the prec map command (egress only), and an IP match criteria. When multiple matches occur for the traffic, the order of precedence is used to arrive at the final action. The order of precedence is as follows:

• 802.1p bits (ingress only)

• DSCP

• prec (egress only)

• IP quintuple

The no form of this command removes the match criteria for the entry identifier.

Parameters

protocol protocol-id

Specifies an IP protocol to be used as an ingress or egress network QoS policy match criterion.

The protocol type is identified by its respective protocol number. Well-known protocol numbers include ICMP(1), TCP(6), and UDP(17).

Values

protocol-id: 0 to 255 protocol numbers accepted in decimal, hexadecimal, or binary

keywords: none, crtp, crudp, egp, eigrp, encap, ether-ip, gre, icmp, idrp, igmp, igp, ip, ipv6, ipv6-frag, ipv6-icmp, ipv6-no-nxt, ipv6-opts, ipv6-route, isis, iso-ip, l2tp, ospf-igp, pim, pnni, ptp, rdp, rsvp, stp, tcp, udp, vrrp

* — udp/tcp wildcard

Protocol ID Descriptions lists the protocols and their protocol IDs and descriptions.

Table 4. Protocol ID Descriptions

Protocol	Protocol ID	Description
icmp	1	Internet Control Message
igmp	2	Internet Group Management
ip	4	IP in IP (encapsulation)
tcp	6	Transmission Control
egp	8	Exterior Gateway Protocol
igp	9	Any private interior gateway (used by Cisco for their IGRP)
udp	17	User Datagram
rdp	27	Reliable Data Protocol
ipv6	41	IPv6
ipv6-route	43	Routing Header for IPv6
ipv6-frag	44	Fragment Header for IPv6
idrp	45	Inter-Domain Routing Protocol
rsvp	46	Reservation Protocol
gre	47	General Routing Encapsulation
ipv6-icmp	58	ICMP for IPv6
ipv6-no-nxt	59	No Next Header for IPv6
ipv6-opts	60	Destination Options for IPv6
iso-ip	80	ISO Internet Protocol
eigrp	88	EIGRP
ospf-igp	89	OSPFIGP
ether-ip	97	Ethernet-within-IP Encapsulation
encap	98	Encapsulation Header
pnni	102	PNNI over IP
pim	103	Protocol Independent Multicast
vrrp	112	Virtual Router Redundancy Protocol
l2tp	115	Layer Two Tunneling Protocol
stp	118	Schedule Transfer Protocol
ptp	123	Performance Transparency Protocol
isis	124	ISIS over IPv4
crtp	126	Combat Radio Transport Protocol
crudp	127	Combat Radio User Datagram

Platforms

All

Context

[Tree] (config>qos>network>egress>ipv6-criteria>entry match)

[Tree] (config>qos>network>ingress>ipv6-criteria>entry match)

Full Context

configure qos network egress ipv6-criteria entry match

configure qos network ingress ipv6-criteria entry match

Description

This command creates a context to configure match criteria for a network QoS policy match IPv6 criteria. When the match criteria have been satisfied, the action associated with the match criteria is executed.

If more than one match criteria (within one match statement) are configured, all criteria must be satisfied (logical AND) before the action associated with the match is executed.

A match context can consist of multiple match criteria, but multiple match statements cannot be created per entry.

A network policy can include the DSCP map command, the dot1p map command (ingress only), the prec map command (egress only), and an IPv6 match criteria. When multiple matches occur for the traffic, the following order of precedence is used to arrive at the final action.

• 802.1p bits (ingress only)

• DSCP

• prec (egress only)

• IP quintuple

The no form of this command removes the match criteria for the entry identifier.

Parameters

next-header

protocol-number, protocol-name

Specifies the next header to match.

The protocol type is identified by its respective protocol number. Well-known protocol numbers include ICMP(1), TCP(6), and UDP(17).

protocol-number

Specifies the protocol number value to be configured as a match criterion.

Values

[0 to 255]D

[0x0 to 0xFF]H

[0b0 to 0b11111111]B

protocol-name

Specifies the protocol name to be configured as a match criterion.

Values

none, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route, ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp

* - udp/tcp wildcard

Platforms

All

Context

[Tree] (config>qos>queue-group-redirect-list match)

Full Context

configure qos queue-group-redirect-list match

Description

This command configures the value of the field in the ingress or egress packet which, when matched, will cause the packet to be redirected to the specified queue group instance. The field-value is dependent on the setting of the type and therefore must be a valid VXLAN VNI.

A maximum of 16 match statements are supported in a queue group redirect list.

The no form of this command removes the match statement from the redirect list.

Parameters

field-value

Specifies the value of the field in the ingress or egress packet which, when matched, will cause the packet to be redirected to the specified queue group instance. Because the only permitted type is vxlan-vni, the field must be a valid VXLAN VNI. The VNI can be specified in any of the available formats but is always shown in decimal.

Values

1 to 16777215 (Decimal)

0x1 to 0xFFFFFF (Hexadecimal)

0b1 to 0b111111111111111111111111 (Binary)

instance-id

Specifies the instance of the queue group template to which the VXLAN traffic is redirected. The traffic can be redirected to the default instance, which is the instance specified with the QoS policy under the SAP ingress or egress.

Values

1 to 65535

Platforms

All

Context

[Tree] (config>filter>ip-exception>entry match)

Full Context

configure filter ip-exception entry match

Description

Commands in this context enter match criteria for the filter entry. When the match criteria have been satisfied the action associated with the match criteria is executed.

A match context may consist of multiple match criteria, but multiple match statements cannot be entered per entry. More precisely, the command can be entered multiple times but this only results in modifying the protocol-id. and does not affect the underlying match criteria configuration.

The no form of the command removes all the match criteria from the filter entry and sets the protocol-id of the match command to none (keyword). As per above, match protocol none is however not equivalent to no match.

Default

match protocol none

Parameters

protocol-id

Sets an IP protocol to be used as an IP filter match criterion. The protocol type, such as TCP or UDP, is identified by its respective protocol number.

Values

protocol-number: [0..255]D

[0x0..0xFF]H

[0b0..0b11111111]B

protocol-name:0 to 255 in decimal format. Values can also be specified in hexadecimal format, in binary format, or using the following keywords:

IPv4 filter keywords: none (default), icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route, ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp

IP exception filter keywords: none, icmp, igmp, ospf-igp, pim, rsvp, tcp, udp, vrrp

* — udp/tcp wildcard

Table 5. Protocol ID Descriptions

Protocol	Protocol ID	Description
icmp	1	Internet Control Message
igmp	2	Internet Group Management
ip	4	IP in IP (encapsulation)
tcp	6	Transmission Control
egp	8	Exterior Gateway Protocol
igp	9	Any private interior gateway (used by Cisco for IGRP)
udp	17	User Datagram
rdp	27	Reliable Data Protocol
ipv6	41	IPv6
ipv6-route	43	Routing Header for IPv6
ipv6-frag	44	Fragment Header for IPv6
idrp	45	Inter-Domain Routing Protocol
rsvp	46	Reservation Protocol
gre	47	General Routing Encapsulation
ipv6-icmp	58	ICMP for IPv6
ipv6-no-nxt	59	No Next Header for IPv6
ipv6-opts	60	Destination Options for IPv6
iso-ip	80	ISO Internet Protocol
eigrp	88	EIGRP
ospf-igp	89	OSPFIGP
ether-ip	97	Ethernet-within-IP Encapsulation
encap	98	Encapsulation Header
pnni	102	PNNI over IP
pim	103	Protocol Independent Multicast
vrrp	112	Virtual Router Redundancy Protocol
l2tp	115	Layer Two Tunneling Protocol
stp	118	Spanning Tree Protocol
ptp	123	Performance Transparency Protocol
isis	124	ISIS over IPv4
crtp	126	Combat Radio Transport Protocol
crudp	127	Combat Radio User Datagram
sctp	132	Stream Control Transmission Protocol