s Commands – Part I

s-pmsi

s-pmsi

Syntax

s-pmsi [{vpnSrcAddr [vpnGrpAddr]} [mdSrcAddr]]

no s-pmsi

Context

[Tree] (debug>router>pim s-pmsi)

Full Context

debug router pim s-pmsi

Description

This command enables debugging for PIM selective provider multicast service interface.

The no form of this command disables the debugging.

Parameters

vpnSrcAddr

Specifies the VPN source address.

vpnGrpAddr

Specifies the VPN group address.

mdSrcAddr

Specifies the source address of the multicast domain.

Platforms

All

s-tag

s-tag

Syntax

s-tag qtag1 c-tag-range qtag2 [to qtag2]

no s-tag qtag1 c-tag-range qtag2

Context

[Tree] (config>service>system>bgp-evpn>eth-seg>qinq s-tag)

Full Context

configure service system bgp-evpn ethernet-segment qinq s-tag

Description

This command determines the inner VIDs (for a specified outer VID) associated with the virtual Ethernet Segment on a specific qinq port or LAG based on the following:

  • Values *, null, 0 to 4094 are allowed.

  • Any SAP for which the outer and inner service-delimiting qtags match the range is associated with the virtual ES, and only those, for example, SAP 1/1/1:10.* will not match port 1/1/1, s-tag 10 c-tag-range 10 to 100.

  • A maximum of 8 ranges (including the s-tag ranges) are allowed in the qinq context.

  • A c-tag range can be composed of a single qtag.

  • Shutting down the ES is not required before making changes.

  • A qtag included in the s-tag-range command cannot be included in the s-tag qtag of this command.

Note:

Not all qtag1 and qtag2 combinations are valid for values 0, *, and null. The following combinations are allowed:

  • s-tag 0 c-tag-range *

  • s-tag * c-tag-range *

  • s-tag * c-tag-range null

  • s-tag null c-tag-range null

  • s-tag X c-tag-range 0 (where: X=1 to 4094)

  • s-tag X c-tag-range * (where: X=1 to 4094)

The no form of the command removes the configured range. Only the first qtag1 value is required to remove the range.

Parameters

qtag1

Specifies the outer VID for the c-tag range.

Values

*, null, 0 to 4094

qtag2

Specifies the inner VID for the c-tag range. When configuring a range of qtags (and not a single value), the second qtag1 value must be greater than the value of the first qtag1.

Values

*, null, 0 to 4094

Platforms

All

s-tag

Syntax

s-tag

Context

[Tree] (config>test-oam>sath>svc-test>svc-stream>frm-payl>eth s-tag)

Full Context

configure test-oam service-activation-testhead service-test service-stream frame-payload ethernet s-tag

Description

Commands in this context configure service VLAN tag (s-tag) information specification.

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

s-tag-range

s-tag-range

Syntax

s-tag-range qtag1 [to qtag1]

no s-tag-range qtag1

Context

[Tree] (config>service>system>bgp-evpn>eth-seg>qinq s-tag-range)

Full Context

configure service system bgp-evpn ethernet-segment qinq s-tag-range

Description

This command determines the VIDs associated with the virtual Ethernet Segment on a specific qinq port or LAG based on the following considerations:

  • Values *, 0 to 4094 are allowed.

  • Any SAP for which the service-delimiting qtag matches the range is associated with the virtual ES, and only those, for example, SAP 1/1/1:0.* will not match port 1/1/1, s-tag-range 100.

  • Maximum 8 ranges are allowed in the qinq context.

  • A range can be composed of a single qtag.

  • Shutting down the ES is not required before making changes in the q-tag-range.

The no form of the command removes the configured range. Only the first qtag1 value is required to remove the range.

Parameters

qtag1

Specifies the outer VID. When configuring a range of qtags (and not a single value), the second qtag1 value must be greater than the first qtag1.

Values

*, 0 to 4094

Platforms

All

s1-release

s1-release

Syntax

[no] s1-release

Context

[Tree] (config>subscr-mgmt>acct-plcy>triggered-updates>gc s1-release)

Full Context

configure subscriber-mgmt radius-accounting-policy triggered-updates gtp-change s1-release

Description

This command configures the router to send an interim accounting update when an S1 release (idle) procedure is performed.

The no form of the command configures the router not to send an interim accounting update when an S1 release (idle) procedure is performed.

Default

no s1-release

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

s11

s11

Syntax

s11

Context

[Tree] (config>service>vprn>gtp s11)

[Tree] (config>router>gtp s11)

Full Context

configure service vprn gtp s11

configure router gtp s11

Description

This command enables GTP configuration related to S11 termination in this VRF.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

s2l-path

s2l-path

Syntax

[no] s2l-path path-name to ip-address

Context

[Tree] (config>router>mpls>lsp>primary-p2mp-instance s2l-path)

Full Context

configure router mpls lsp primary-p2mp-instance s2l-path

Description

This command creates a root-to-leaf (S2L) sub-LSP path for the primary instance of a P2MP LSP. The primary instance of a P2MP LSP is modeled as a set of root-to-leaf (S2L) sub-LSPs. The root, for example, head-end node, triggers signaling using one path message per S2L path. The leaf sub-LSP paths are merged at branching points.

Each S2L sub-LSP is signaled in a separate path message. Each leaf node will respond with its own RESV message. A branch LSR node will forward the path message of each S2L sub-LSP to the downstream LSR without replicating it. It will also forward the RESV message of each S2L sub-LSP to the upstream LSR without merging it with the RESV messages of other S2L sub-LSPs of the same P2MP LSP. The same is done for subsequent refreshes of the path and RESV states.

The S2L paths can be empty paths or can specify a list of explicit hops. The path name must exist and must have been defined using the config>router>mpls>path command. The same path name can be re-used by more than one S2L of the primary P2MP instance. However, the to keyword must have a unique argument per S2L as it corresponds to the address of the egress LER node.

This command is not supported on the 7450 ESS.

Parameters

path-name

Specifies the name of the path which consists of up to 32 alphanumeric characters.

to ip-address

Specifies the IP address of the egress router.

Platforms

All

sa-db

sa-db

Syntax

sa-db [group grpAddr] [source srcAddr] [rp rpAddr]

no sadb

Context

[Tree] (debug>router>msdp sa-db)

Full Context

debug router msdp sa-db

Description

This command enables debugging for MSDP SA requests.

The no form of this command disables the MSDP SA database debugging.

Parameters

grpAddr

Debugs the IP address of the group.

srcAddr

Debugs the source IP address.

rpAddr

Debugs the specified RP address.

Platforms

All

sa-mac

sa-mac

Syntax

sa-mac ieee-address da-mac ieee-address

no sa-mac

Context

[Tree] (config>mirror>mirror-dest>sap>egress>ip-mirror sa-mac)

Full Context

configure mirror mirror-dest sap egress ip-mirror sa-mac

Description

This command configures the source and destination MAC addresses for IP mirroring.

The no form of this command reverts to the default.

Parameters

sa-mac ieee-address

Specifies the source MAC address. Multicast, Broadcast and zeros are not allowed.

da-mac ieee-address

Specifies the destination MAC address. Zeros are not allowed.

Platforms

All

sa-timeout

sa-timeout

Syntax

sa-timeout seconds

no sa-timeout

Context

[Tree] (config>service>vprn>msdp sa-timeout)

Full Context

configure service vprn msdp sa-timeout

Description

This command configures the value for the SA entries in the cache. If these entries are not refreshed within the timeout value, they are removed from the cache. Normally, the entries are refreshed at least once a minute. But under high load with many of MSDP peers, the refresh cycle could be incomplete. A higher timeout value (more then 90) could be useful to prevent instabilities in the MSDP cache.

Default

90

Parameters

seconds

Specifies the time, in seconds, to wait for a response from the peer before declaring the peer unavailable.

Values

90 to 600

Platforms

All

sa-timeout

Syntax

sa-timeout seconds

no sa-timeout

Context

[Tree] (config>router>msdp sa-timeout)

Full Context

configure router msdp sa-timeout

Description

This command configures the timeout interval for the SA entries in the cache. If these entries are not refreshed within the timeout interval, they are removed from the cache. Normally, the entries are refreshed at least once a minute, but under high load with many MSDP peers, the refresh cycle could be incomplete. A higher timeout value (greater than 90) is useful to prevent instabilities in the MSDP cache.

The no form of this command reverts to the default timeout interval of 90 seconds.

Default

no sa-timeout

Parameters

seconds

Specifies the time, in seconds, to wait for a response from the peer before declaring the peer unavailable.

Values

90 to 600

Platforms

All

saa

saa

Syntax

saa

Context

[Tree] (config saa)

Full Context

configure saa

Description

Commands in this context configure the Service Assurance Agent (SAA) tests.

Platforms

All

saa

Syntax

saa test-name [owner test-owner] {start | stop} [no-accounting]

Context

[Tree] (oam saa)

Full Context

oam saa

Description

This command starts or stops an SAA test that is not configured as continuous.

Parameters

test-name

Specifies the name of the SAA test, up to 32 characters. The test name must already be configured in the config>saa>test context.

test-owner

Specifies the owner of an SAA operation, up to 32 characters. If a test-owner value is not specified, the default owner is used.

Default

"TiMOS CLI”

start

Starts the test. A test cannot be started if the same test is still running.

A test cannot be started if it is in a shut-down state. An error message and log event is generated to indicate a failed attempt to start an SAA test run. A test cannot be started if it is in a continuous state.

stop

Stops a test in progress. A test cannot be stopped if it is not in progress. A log message is generated to indicate that an SAA test run has been aborted. A test cannot be stopped if it is in a continuous state.

no-accounting

Disables the recording results in the accounting policy. When specifying no-accounting the MIB record produced at the end of the test is not added to the accounting file. It uses one of the three MIB rows available for the accounting module for collection.

Platforms

All

saii-type2

saii-type2

Syntax

saii-type2 global-id:node-id:ac-id

no saii-type2

Context

[Tree] (config>service>vpls>spoke-sdp>pw-path-id saii-type2)

[Tree] (config>service>epipe>spoke-sdp>pw-path-id saii-type2)

[Tree] (config>service>cpipe>spoke-sdp>pw-path-id saii-type2)

Full Context

configure service vpls spoke-sdp pw-path-id saii-type2

configure service epipe spoke-sdp pw-path-id saii-type2

configure service cpipe spoke-sdp pw-path-id saii-type2

Description

This command configures the Source Individual Attachment Identifier (SAII) for an MPLS-TP spoke-sdp. If this is configured on a spoke-sdp for which vc-switching is also configured (for example, it is at an S-PE), then the values must match those of the taii-type2 of the mate spoke-sdp.

Parameters

global-id

Specifies the global ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP.

Values

0 to 4294967295

node-id

Specifies the node ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP.

Values

a.b.c.d or 0 to 4294967295

ac-id

Specifies the attachment circuit ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP. If this node is the source of the PW, then the AC ID must be set to a locally unique value.

Values

1 to 4294967295

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

saii-type2

Syntax

saii-type2 global-id:prefix:ac-id

no saii-type2

Context

[Tree] (config>service>epipe>spoke-sdp-fec saii-type2)

Full Context

configure service epipe spoke-sdp-fec saii-type2

Description

This command configures the source attachment individual identifier for the spoke-sdp. This is only applicable to FEC129 AII type 2.

Parameters

global-id

A Global ID of this router T-PE. This value must correspond to one of the global_id values configured for a local-prefix under config>service>pw-routing>local-prefix context.

Values

1 to 4294967295

prefix

The prefix on this router T-PE that the spoke-sdp SDP is associated with. This value must correspond to one of the prefixes configured under config>service>pw-routing>local-prefix context.

Values

an IPv4-formatted address a.b.c.d or 1 to 4294967295

ac-id

An unsigned integer representing a locally unique identifier for the spoke SDP.

Values

1 to 4294967295

Platforms

All

saii-type2

Syntax

saii-type2 global-id:node-id:ac-id

no saii-type2

Context

[Tree] (config>service>vprn>if>spoke-sdp>pw-path-id saii-type2)

[Tree] (config>service>vprn>red-if>spoke-sdp>pw-path-id saii-type2)

Full Context

configure service vprn interface spoke-sdp pw-path-id saii-type2

configure service vprn redundant-interface spoke-sdp pw-path-id saii-type2

Description

This command configures the source individual attachment identifier (SAII) for an MPLS-TP spoke SDP. If this is configured on a spoke SDP for which vc-switching is also configured (for example, it is at an S-PE), then the values must match those of the taii-type2 of the mate spoke SDP.

Parameters

global-id

Specifies the global ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP.

Values

0 to 4294967295

node-id

Specifies the node ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP.

Values

a.b.c.d or 1 to 4294967295

ac-id

Specifies the attachment circuit ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP. If this node is the source of the PW, then the AC ID must be set to a locally unique value.

Values

1 to 4294967295

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  • configure service vprn interface spoke-sdp pw-path-id saii-type2

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s

  • configure service vprn redundant-interface spoke-sdp pw-path-id saii-type2

saii-type2

Syntax

saii-type2 global-id:node-id:ac-id

no saii-type2

Context

[Tree] (config>mirror>mirror-dest>remote-src>spoke-sdp>pw-path-id saii-type2)

[Tree] (config>mirror>mirror-dest>spoke-sdp>pw-path-id saii-type2)

Full Context

configure mirror mirror-dest remote-source spoke-sdp pw-path-id saii-type2

configure mirror mirror-dest spoke-sdp pw-path-id saii-type2

Description

This command configures the source individual attachment identifier (SAII) for an MPLS-TP spoke SDP. If this is configured on a spoke SDP for which vc-switching is also configured (for example, it is at an S-PE), then the values must match those of the taii-type2 of the mate spoke SDP.

Parameters

global-id

Specifies the global ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP.

Values

0 to 4294967295

node-id

Specifies the node ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP.

Values

a.b.c.d or 1 to 4294967295

ac-id

Specifies the attachment circuit ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP. If this node is the source of the PW, then the AC ID must be set to a locally unique value.

Values

1 to 4294967295

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

same-recipnonce-for-pollreq

same-recipnonce-for-pollreq

Syntax

[no] same-recipnonce-for-pollreq

Context

[Tree] (config>system>security>pki>ca-profile>cmpv2 same-recipnonce-for-pollreq)

Full Context

configure system security pki ca-profile cmpv2 same-recipnonce-for-pollreq

Description

This command enables the system to use same recipNonce as the last CMPv2 response for poll request.

The no form of this command disables the use of the same recipNonce as the last CMPv2 response for poll request.

Default

no same-recipnonce-for-pollreq

Platforms

All

sample-interval

sample-interval

Syntax

sample-interval interval

Context

[Tree] (config>router>rsvp>dbw-accounting sample-interval)

Full Context

configure router rsvp dbw-accounting sample-interval

Description

This command sets the dark bandwidth sample interval to the specified value. Changing this parameter in the course of dark bandwidth accounting restarts the accounting cycle. The user is encouraged to specify values as multiples of 10. Selecting other values may lead to inconsistent estimation of Dark Bandwidth.

Default

sample-interval 30

Parameters

interval

Specifies the sample interval, expressed in seconds.

Values

10 to 600

Platforms

7750 SR, 7750 SR-s, 7950 XRS, VSR

sample-interval

Syntax

sample-interval sample-period

no sample-interval

Context

[Tree] (config>qos>adv-config-policy>child-control>offered-measurement sample-interval)

Full Context

configure qos adv-config-policy child-control offered-measurement sample-interval

Description

This command defines the number of intervening sample periods before a new offered rate is measured and is only applicable when the policy is applied to a policer. By decreasing the sampling interval, the system measures a child’s new offered rate more frequently. Inversely, increasing the sampling interval causes the child’s offered rate to be measured less frequently.

The overall number of offered rate measurements the system attempts within a specified timeframe is not affected by the sample-interval command. If the system is asked to perform offered rate measurements more often on some policers, it takes longer to get to all children.

When this command is not specified or removed, the system evaluates the offered rate of each child after 1 sampling period.

The no form of this command is used to restore the sampling interval default of 1 sample period.

Parameters

sample-period

The sample-periods parameter is specified as a whole number between 1 and 8. The value '1’ represents the fastest sampling rate available and the value '8’ represents the slowest sampling period available.

Default

1

Values

1 to 8

Platforms

All

sample-interval

Syntax

sample-interval interval

Context

[Tree] (config>system>telemetry>persistent-subscriptions>subscription sample-interval)

Full Context

configure system telemetry persistent-subscriptions subscription sample-interval

Description

This command configures the sample interval for persistent subscription.

This sampling interval only applies when the mode command is set to either target-defined or sample.

Default

sample-interval 10000

Parameters

interval

Specifies the sample interval, in milliseconds.

Values

1000 to 4294967295

Platforms

All

sample-multiplier

sample-multiplier

Syntax

sample-multiplier multiplier

Context

[Tree] (config>router>rsvp>dbw-accounting sample-multiplier)

Full Context

configure router rsvp dbw-accounting sample-multiplier

Description

This command sets the dark bandwidth sample interval multiplier to the specified value. Changing this parameter in the course of dark bandwidth accounting restarts the accounting cycle.

Default

sample-multiplier 3

Parameters

multiplier

Specifies the sample interval multiplier, expressed as an integer.

Values

1 to 10

Platforms

7750 SR, 7750 SR-s, 7950 XRS, VSR

sample-profile

sample-profile

Syntax

sample-profile profile-id [create]

no sample-profile profile-id

Context

[Tree] (config>cflowd sample-profile)

Full Context

configure cflowd sample-profile

Description

Commands in this context create and define sampling parameters.

The no form of this command removes the associated sample-profile. sample-profile 1 cannot be deleted.

Parameters

profile-id

Specifies the rate profile.

Values

1 to 5

create

Mandatory keyword when creating a sample profile. The create keyword requirement can be enabled or disabled in the environment>create context.

Platforms

All

sample-profile

Syntax

sample-profile sample-profile-id

no sample-profile

Context

[Tree] (config>filter>ip-filter>entry sample-profile)

[Tree] (config>filter>ipv6-filter>entry sample-profile)

Full Context

configure filter ip-filter entry sample-profile

configure filter ipv6-filter entry sample-profile

Description

This command allows traffic matching of an IPv4 or IPv6 filter to be sampled for cflowd processing using a specific sample profile.

This command is only compatible if the associated interface is configured for interface-based sampling and is only supported for ingress sampling.

An IP filter can only specify a single alternate sample profile for cflowd sampling, but that sample profile can be used in multiple entries.

The no form of this command removes the specified sampling profile from the configuration. Cflowd continues to process traffic based on the default or configured interface cflowd sampling profile.

Default

no sample-profile

Parameters

sample-profile-id

Specifies the cflowd sample profile to be used for packets matching this filter entry.

Values

1 to 5

Platforms

All

sample-rate

sample-rate

Syntax

sample-rate [rate]

Context

[Tree] (config>cflowd>sample-profile sample-rate)

Full Context

configure cflowd sample-profile sample-rate

Description

This command defines the cflowd sampling rate for the sample profile ID.

The sample rate indicates that the associated interface samples 1 in N packets for cflowd analysis. Only one rate profile below 1:256 with a specific IOM, IMM, or XMA can be associated.

Default

sample-rate 1000

Parameters

rate

Specifies the rate at which traffic is sampled and forwarded for cflowd analysis.

Values

1 to 60000

Platforms

All

sample-window

sample-window

Syntax

sample-window seconds

no sample-window

Context

[Tree] (config>oam-pm>streaming>delay-template sample-window)

Full Context

configure oam-pm streaming delay-template sample-window

Description

This command specifies the sample window duration in seconds for the template. This configuration option represents time over which the average will be calculated and subsequently streamed.

The no form of this command reverts to the default.

Default

sample-window 60

Parameters

seconds

Specifies the sample window duration.

Values

10 to 60

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

sample-window

Syntax

sample-window

Context

[Tree] (config>test-oam>link-meas>template sample-window)

Full Context

configure test-oam link-measurement measurement-template sample-window

Description

Commands in this context configure sample window parameters to be used when the measurement-template is assigned to an IP interface. The sample window is the collection of individual probe results, over a defined period.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

sample-window

Syntax

sample-window

Context

[Tree] (config>test-oam>lag-meas>template sample-window)

Full Context

configure test-oam lag-ip-measurement lag-ip-measurement-template sample-window

Description

Commands in this context configure the sample window for LAG IP measurement.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

sampling

sampling

Syntax

sampling {unicast | multicast} type {acl | interface} [direction { ingress-only | egress-only | both}] [sample-profile [profile-id]]

no sampling {unicast | multicast}

Context

[Tree] (config>service>ies>if>cflowd-parameters sampling)

[Tree] (config>service>vprn>nw-if>cflowd-parameters sampling)

[Tree] (config>service>vprn>sub-if>grp-if>cflowd-parameters sampling)

[Tree] (config>service>ies>sub-if>grp-if>cflowd-parameters sampling)

[Tree] (config>service>vprn>if>cflowd-parameters sampling)

Full Context

configure service ies interface cflowd-parameters sampling

configure service vprn network-interface cflowd-parameters sampling

configure service vprn subscriber-interface group-interface cflowd-parameters sampling

configure service ies subscriber-interface group-interface cflowd-parameters sampling

configure service vprn interface cflowd-parameters sampling

Description

This command enables and configures the cflowd sampling behavior to collect traffic flow samples through a router for analysis.

This command can be used to configure the sampling parameters for unicast and multicast traffic separately. If sampling is not configured for either unicast or multicast traffic, then that type of traffic will not be sampled.

If cflowd is enabled without either egress-only or both keywords specified or with the ingress-only keyword specified, then only ingress sampling is enabled on the associated IP interface.

The no form of this command disables the associated type of traffic sampling.

Parameters

unicast | multicast

Specifies unicast or multicast sampling.

type

Specifies the cflowd sampling type on the specific virtual router interface.

Values

acl — Specifies ACL cflowd analysis be applied to the specified virtual router interface.

interface — Specifies interface cflowd analysis be applied to the specified virtual router interface

direction

Specifies the direction of the cflowd analysis that is applied to the specified virtual router interface.

Values

ingress-only — Specifies an ingress only direction of the cflowd analysis be applied to the specified virtual router interface.

egress-only — Specifies an egress only direction of the cflowd analysis be applied to the specified virtual router interface.

both — Specifies both ingress and egress direction of the cflowd analysis be applied to the specified virtual router interface.

profile-id

Defines the sampling rate profile to be associated with this interface.

Values

1 to 5

Platforms

All

  • configure service vprn interface cflowd-parameters sampling
  • configure service vprn network-interface cflowd-parameters sampling
  • configure service ies interface cflowd-parameters sampling

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service ies subscriber-interface group-interface cflowd-parameters sampling
  • configure service vprn subscriber-interface group-interface cflowd-parameters sampling

sampling

Syntax

sampling {unicast | multicast} type {acl | interface} [direction { ingress-only | egress-only | both}] [sample-profile profile]

no sampling {unicast | multicast}

Context

[Tree] (config>router>if>cflowd-parameters sampling)

Full Context

configure router interface cflowd-parameters sampling

Description

This command enables and configures the cflowd sampling behavior to collect traffic flow samples through a router for analysis.

This command can be used to configure the sampling parameters for unicast and multicast traffic separately. If sampling is not configured for either unicast or multicast traffic, then that type of traffic will not be sampled.

If cflowd is enabled without either egress-only or both specified or with the ingress-only keyword specified, then only ingress sampling will be enabled on the associated IP interface.

The no form of this command disables the associated type of traffic sampling on the associated interface.

Default

no sampling

Parameters

unicast

Specifies that the sampling command will control the sampling of unicast traffic on the associated interface/SAP.

multicast

Specifies that the sampling command will control the sampling of multicast traffic on the associated interface/SAP.

type

Specifies whether the traffic sampling is based on an acl match, or all traffic entering or exiting the associated interface.

Values

acl — Specifies that the sampled traffic is controlled via an IP traffic filter entry with the action "filter-sample” configured.

interface — Specifies that all traffic entering or exiting the interface is subject to sampling.

direction

Specifies the direction to collect traffic flow samples.

Values

ingress-only — Enables ingress sampling only on the associated interface.

egress-only — Enables egress sampling only on the associated interface.

both — Enables both ingress and egress cflowd sampling.

profile

Specifies the sampling profile to be associated with this interface.

Values

1 to 5

Platforms

All

sampling-rate

sampling-rate

Syntax

sampling-rate sampling-rate

no sampling-rate

Context

[Tree] (config>mirror>mirror-dest sampling-rate)

Full Context

configure mirror mirror-dest sampling-rate

Description

This command configures the packet sampling rate for mirrored traffic and is supported with config and debug mirror sources. The sampling rate is common to all endpoints on a specified line card FP per mirror destination service.

The no form of this command disables the packet sampling rate for mirrored traffic.

Default

no sampling-rate

Parameters

sampling-rate

Specifies the sampling rate.

Values

256 to 100000

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

sap

sap

Syntax

sap sap-id [split-horizon-group group-name] [create] [capture-sap] [eth-ring ring-index]

sap sap-id [split-horizon-group group-name] [create] [capture-sap] [eth-ring ring-index] leaf-ac

sap sap-id [split-horizon-group group-name] [create] [capture- sap] [eth-ring ring-index] root-leaf-tag leaf-tag leaf-tag

no sap sap-id

Context

[Tree] (config>service>vpls sap)

Full Context

configure service vpls sap

Description

This command creates a Service Access Point (SAP) within a service. A SAP is a combination of port and encapsulation parameters which identifies the service access point on the interface and within the 7450 ESS or 7750 SR. Each SAP must be unique. All SAPs must be explicitly created within a service or on an IP interface.

Enter an existing SAP without the create keyword to edit SAP parameters. The SAP is owned by the service in which it was created.

A SAP can only be associated with a single service. A SAP can only be defined on a port that has been configured as an access port using the configure port port-id ethernet mode access command. Channelized TDM ports are always access ports (TDM applies to the 7750 SR only).

If a port is shut down, all SAPs on that port become operationally down. When a service is shut down, SAPs for the service are not displayed as operationally down although all traffic traversing the service is discarded. The operational state of a SAP is relative to the operational state of the port on which the SAP is defined.

The no form of this command deletes the SAP with the specified port. When a SAP is deleted, all configuration parameters for the SAP are also deleted. For Internet Ethernet Service (IES), the IP interface must be shut down before the SAP on that interface may be removed.

Parameters

sap-id

Specifies the physical port identifier portion of the SAP definition.

port-id

Specifies the physical port ID in the slot/mda/port format.

If the card in the slot has Media Dependent Adapters (MDAs) installed, the port-id must be in the slot_number/MDA_number/port_number [.channel] format. For example 6/2/3 specifies port 3 on MDA 2 in slot 6.

The port-id must reference a valid port type. When the port-id parameter represents SONET/SDH and TDM channels, the port ID must include the channel ID. A period ".” separates the physical port from the channel-id. The port must be configured as an access port.

If the SONET/SDH port is configured as clear-channel then only the port is specified.

group-name

Specifies the name of the split horizon group to which the SAP belongs. This parameter applies to the 7450 ESS or 7750 SR only.

capture-sap

Specifies a capturing SAP in which triggering packets are sent to the CPM. Non-triggering packets captured by the capture SAP are dropped. This parameter applies to the 7450 ESS or 7750 SR only.

create

Keyword used to create a SAP instance. The create keyword requirement can be enabled or disabled in the environment>create context.

root-leaf-tag

Specifies a SAP as a root leaf tag SAP. Only SAPs of the form dot1q (for example, 1/1/1:X) or qinq (for example, 1/1/1:X.Y, 1/1/1:X.*) are supported. The default E-Tree SAP type is a root AC, if root-leaf-tag (or leaf-ac) is not specified at SAP creation. This option is only available when the VPLS is designated as an E-Tree VPLS.

leaf-tag-vid

Specifies to replace the outer SAP-ID for leaf traffic. The leaf tag VID is only significant between peering VPLS but the values must be consistent on each end.

leaf-ac

Specifies a SAP as a leaf access (AC) SAP. The default E-Tree SAP type is root AC if leaf-ac (or root-leaf-tag) is not specified at SAP creation. This option is only available when the VPLS is designated as an E-Tree VPLS.

Platforms

All

sap

Syntax

[no] sap sap-id

Context

[Tree] (config>service>vpls>pbb>backbone-vpls sap)

Full Context

configure service vpls pbb backbone-vpls sap

Description

This command configures attributes of a SAP on the B-VPLS service.

Platforms

All

sap

Syntax

sap sap-id [create] [no-endpoint]

sap sap-id [create] endpoint endpoint-name

sap sap-id [create] [qtag-normalization] [[tag] | [s-tag.c-tag]]

no sap sap-id

Context

[Tree] (config>service>epipe sap)

Full Context

configure service epipe sap

Description

This command creates a Service Access Point (SAP) within a service. A SAP is a combination of port and encapsulation parameters which identifies the service access point on the interface and within the device. Each SAP must be unique.

All SAPs must be explicitly created. If no SAPs are created within a service or on an IP interface, a SAP will not exist on that object.

Enter an existing SAP without the create keyword to edit SAP parameters. The SAP is owned by the service in which it was created.

A SAP can only be associated with a single service. A SAP can only be defined on a port that has been configured as an access port. Channelized TDM ports are always access ports.

If a port is shutdown, all SAPs on that port become operationally down. When a service is shutdown, SAPs for the service are not displayed as operationally down although all traffic traversing the service will be discarded.

The operational state of a SAP is relative to the operational state of the port on which the SAP is defined.

Ethernet SAPs support null, dot1q, and qinq is supported for all routers.

The no form of this command deletes the SAP with the specified port. When a SAP is deleted, all configuration parameters for the SAP will also be deleted. For Internet Enhanced Service (IES), the IP interface must be shutdown before the SAP on that interface may be removed.

By default, no SAPs are defined.

Parameters

sap-id

Specifies the physical port identifier portion of the SAP.

port-id

Specifies the physical port ID.

If the card in the slot has Media Dependent Adapters (MDAs) installed, the port-id must be in the slot_number/MDA_number/port_number format. For example 6/2/3 specifies port 3 on MDA 2 in slot 6.

The port-id must reference a valid port type. When the port-id parameter represents SONET/SDH and TDM channels, the port ID must include the channel ID. A period ".” separates the physical port from the channel-id. The port must be configured as an access port.

If the SONET/SDH port is configured as clear-channel then only the port is specified.

port-id

slot/mda/port [.channel]

eth-sat-id

esat-id/slot/port

esat

keyword

id

1 to 20

pxc-id

pxc-id.sub-port

pxc

keyword

id

1 to 64

sub-port

a, b

endpoint

Adds a SAP endpoint association.

no endpoint

Removes the association of a SAP or a spoke SDP with an explicit endpoint name.

create

Keyword to create a SAP instance. The create keyword requirement can be enabled or disabled in the environment create context.

qtag-normalization

Keyword to enable Q-tag normalization.

tag

Specifies the value for tag normalization. The tag value is pushed as the S-tag (outer tag) into the frames coming from this SAP and sent to EVPN. On network ingress, the inner and outer VLAN tags are looked up and the frames matching this value and the normalized C-tag value are sent to the associated SAP.

Values

0 to 4094

s-tag

Specifies the value for tag normalization. The tag value is pushed as the S-tag (outer tag) into the frames coming from this SAP and sent to EVPN. On network ingress, the inner and outer VLAN tags are looked up and the frames matching this value and the normalized C-tag value are sent to the associated SAP.

Values

0 to 4094

c-tag

Specifies the value for tag normalization. The tag value is pushed as the C-tag (inner tag) into the frames coming from this SAP and sent to EVPN. On network ingress, the inner and outer VLAN tags are looked up and the frames matching this value and the normalized S-tag value are sent to the associated SAP.

Values

0 to 4094

Platforms

All

Output

The following output is an example of VLL SAP information.

Output Example
*A:test>config>service>epipe 200 name "200" customer 1 info detail
=================================================================
            sap 1/1/c5/1:200.200 create
                no shutdown
            exit
            sap pw-21:200.200 create
                no shutdown
            exit
            no shutdown
        exit
    exit
=================================================================

sap

Syntax

sap sap-id [create] [no-endpoint]

sap sap-id [create] endpoint endpoint-name

no sap sap-id

Context

[Tree] (config>service>ipipe sap)

[Tree] (config>service>cpipe sap)

Full Context

configure service ipipe sap

configure service cpipe sap

Description

This command creates a Service Access Point (SAP) within a service. A SAP is a combination of port and encapsulation parameters which identifies the service access point on the interface and within the device. Each SAP must be unique.

All SAPs must be explicitly created. If no SAPs are created within a service or on an IP interface, a SAP will not exist on that object.

Enter an existing SAP without the create keyword to edit SAP parameters. The SAP is owned by the service in which it was created.

A SAP can only be associated with a single service. A SAP can only be defined on a port that has been configured as an access port. Channelized TDM ports are always access ports.

If a port is shutdown, all SAPs on that port become operationally down. When a service is shutdown, SAPs for the service are not displayed as operationally down although all traffic traversing the service will be discarded.

The operational state of a SAP is relative to the operational state of the port on which the SAP is defined.

Ethernet SAPs support null, dot1q, and qinq is supported for all routers.

The no form of this command deletes the SAP with the specified port. When a SAP is deleted, all configuration parameters for the SAP will also be deleted. For Internet Enhanced Service (IES), the IP interface must be shutdown before the SAP on that interface may be removed.

By default, no SAPs are defined.

Parameters

sap-id

Specifies the physical port identifier portion of the SAP.

port-id

Specifies the physical port ID.

If the card in the slot has Media Dependent Adapters (MDAs) installed, the port-id must be in the slot_number/MDA_number/port_number format. For example 6/2/3 specifies port 3 on MDA 2 in slot 6.

The port-id must reference a valid port type. When the port-id parameter represents SONET/SDH and TDM channels, the port ID must include the channel ID. A period ".” separates the physical port from the channel-id. The port must be configured as an access port.

If the SONET/SDH port is configured as clear-channel then only the port is specified.

port-id

slot/mda/port [.channel]

eth-sat-id

esat-id/slot/port

esat

keyword

id

1 to 20

pxc-id

pxc-id.sub-port

pxc

keyword

id

1 to 64

sub-port

a, b

endpoint

Adds a SAP endpoint association.

no endpoint

Removes the association of a SAP or a spoke SDP with an explicit endpoint name.

create

Keyword to create a SAP instance. The create keyword requirement can be enabled/disabled in the environment>create context.

Platforms

All

  • configure service ipipe sap

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  • configure service cpipe sap

Output

The following output is an example of VLL SAP information.

Output Example
*A:bksim2801>config>service>apipe>sap$ 
=================================================================
ATM PVCs, Port 1/1/1 
=================================================================
VPI/VCI     Owner     Type     Ing.TD   Egr.TD  Adm  OAM     Opr 
-----------------------------------------------------------------
2/102      SAP       PVC       1        1       up   ETE-AIS dn 
10/100     SAP       PVC       1        1       up   ETE-AIS dn 
=================================================================
*A:bksim2801# 

sap

Syntax

sap sap-id [create]

no sap sap-id

Context

[Tree] (config>service>vprn>if sap)

[Tree] (config>service>ies>if sap)

[Tree] (config>service>ies sap)

[Tree] (config>service>vprn>sub-if>grp-if sap)

[Tree] (config>service>ies>sub-if>grp-if sap)

[Tree] (config>service>vprn sap)

Full Context

configure service vprn interface sap

configure service ies interface sap

configure service ies sap

configure service vprn subscriber-interface group-interface sap

configure service ies subscriber-interface group-interface sap

configure service vprn sap

Description

This command creates a Service Access Point (SAP) within a service. A SAP is a combination of port and encapsulation parameters which identifies the service access point on the interface and within the router. Each SAP must be unique.

All SAPs must be explicitly created. If no SAPs are created within a service or on an IP interface, a SAP will not exist on that object.

Enter an existing SAP without the create keyword to edit SAP parameters. The SAP is owned by the service in which it was created.

A SAP can only be associated with a single service. A SAP can only be defined on a port that has been configured as an access port using the configure port port-id ethernet mode access command. For the 7750 SR, channelized TDM ports are always access ports.

If a port is shutdown, all SAPs on that port become operationally down. When a service is shutdown, SAPs for the service are not displayed as operationally down although all traffic traversing the service will be discarded. The operational state of a SAP is relative to the operational state of the port on which the SAP is defined.

Note:

Configure an IES interface as a loopback interface by issuing the loopback command instead of the sap sap-id command. The loopback flag cannot be set on an interface where a SAP is already defined and a SAP cannot be defined on a loopback interface.

The no form of this command deletes the SAP with the specified port. When a SAP is deleted, all configuration parameters for the SAP are also deleted. For Internet Enhanced Service (IES), the IP interface must be shutdown before the SAP on that interface may be removed. The no form of this command causes the ptp-hw-assist to be disabled.

Default

No SAPs are defined.

Parameters

sap-id

Specifies the physical port identifier portion of the SAP definition.

port-id

Specifies the physical port ID in the slot/mda/port format.

If the card in the slot has Media Dependent Adapters (MDAs) installed, the port-id must be in the slot_number/MDA_number/port_number format. For example 61/2/3 specifies port 3 on MDA 2 in slot 61.

Table 1. Port ID Syntax

null

port-id | lag-id

dot1q

{port-id | lag-id}:{qtag1 | cp-conn-prof-id

qinq

{port-id | lag-id}:{qtag1 | cp-conn-prof-id}.{qtag2 | cp-conn-prof-id}

cp: keyword

conn-prof-id: 1 to 8000

port-id

slot/mda/port [.channel]

eth-sat-id

esat-id/slot/port

esat: keyword

id: 1 to20

pxc-id

psc-id.sub-port

pxc psc-id.sub-port

pxc: keyword

id: 1 to 64

sub-port: a, b

lag-id

lag-id

lag: keyword

id: 1 to 800

qtag1

0 to 4094

qtag2

* | null | 0 to 4094

The port-id must reference a valid port type. When the port-id parameter represents SONET/SDH and TDM channels (7750 SR), the port ID must include the channel ID. A period ".” separates the physical port from the channel-id. The port must be configured as an access port.

If the SONET/SDH port is configured as clear-channel then only the port is specified.

create

Keyword used to create a SAP instance. The create keyword requirement can be enabled/disabled in the environment>create context.

Platforms

All

  • configure service vprn interface sap
  • configure service vprn sap
  • configure service ies sap
  • configure service ies interface sap

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service ies subscriber-interface group-interface sap
  • configure service vprn subscriber-interface group-interface sap

sap

Syntax

sap sap-id [create]

no sap sap-id

Context

[Tree] (config>service>vprn>sub-if>grp-if sap)

Full Context

configure service vprn subscriber-interface group-interface sap

Description

This command creates a SAP for the interface.

The no form of this command removes the SAP.

Parameters

sap-id

Specifies the SAP ID.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

sap

Syntax

[no] sap sap-id

Context

[Tree] (debug>service>id>ppp sap)

Full Context

debug service id ppp sap

Description

This command enables PPP debug output for the specified SAP, this command allow multiple instances.

The no form of this command disables debugging.

Parameters

sap-id

Specifies the SAP ID.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

sap

Syntax

sap sap-id

no sap

Context

[Tree] (config>service>vpls>site sap)

Full Context

configure service vpls site sap

Description

This command configures a SAP for the site.

The no form of this command removes the SAP ID from the configuration.

Parameters

sap-id

Specifies the physical port identifier portion of the SAP definition

Platforms

All

sap

Syntax

[no] sap sap-id

Context

[Tree] (debug>service>id>mrp sap)

Full Context

debug service id mrp sap

Description

This command filters debug events and only shows events for the particular SAP.

The no form of this command removes the debug filter.

Parameters

sap-id

The SAP ID.

Platforms

All

sap

Syntax

sap sap-id

no sap

Context

[Tree] (config>service>epipe>site sap)

Full Context

configure service epipe site sap

Description

This command configures a SAP for the site.

The no form of this command removes the SAP ID from the configuration.

Parameters

sap-id

Specifies the physical port identifier portion of the SAP definition.

Platforms

All

sap

Syntax

[no] sap sap-id

Context

[Tree] (debug>service>id>stp sap)

[Tree] (debug>service>id>dhcp sap)

[Tree] (debug>service>id sap)

Full Context

debug service id stp sap

debug service id dhcp sap

debug service id sap

Description

This command enables STP debugging for a specific SAP.

The no form of the command disables debugging.

Parameters

sap-id

Specifies the physical port identifier portion of the SAP definition.

Platforms

All

sap

Syntax

sap [split-horizon-group group-name] [create] [capture-sap]

no sap sap-id

Context

[Tree] (config>service>vpls>mac-move>secondary-ports sap)

[Tree] (config>service>vpls>mac-move>primary-ports sap)

Full Context

configure service vpls mac-move secondary-ports sap

configure service vpls mac-move primary-ports sap

Description

This command declares a specified SAP as a primary (or secondary) VPLS port.

Parameters

sap-id

Specifies the physical port identifier portion of the SAP definition

Platforms

All

sap

Syntax

[no] sap sap-id

Context

[Tree] (debug>service>id>arp-host sap)

Full Context

debug service id arp-host sap

Description

This command displays ARP host events for a particular SAP.

Parameters

sap-id

Specifies the physical port identifier portion of the SAP definition.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

sap

Syntax

[no] sap sap-id

Context

[Tree] (debug>service>id>igmp-snooping sap)

Full Context

debug service id igmp-snooping sap

Description

This command shows IGMP packets for a specific SAP.

The no form of this command disables the debugging for the SAP.

Platforms

All

sap

Syntax

[no] sap sap-id

Context

[Tree] (debug>service>id>mld sap)

Full Context

debug service id mld-snooping sap

Description

This command shows MLD packets for a specific SAP.

The no form of this command disables the debugging for the SAP.

Platforms

All

sap

Syntax

[no] sap sap-id

Context

[Tree] (debug>service>id>host-connectivity-verify sap)

Full Context

debug service id host-connectivity-verify sap

Description

This command displays Subscriber Host Connectivity Verification (SHCV) events for a particular SAP.

Parameters

sap-id

Specifies the physical port identifier portion of the SAP definition

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

sap

Syntax

sap card/mda/aa-svc:vlan [create]

no sap

Context

[Tree] (config>service>vprn>aa-if sap)

Full Context

configure service vprn aa-interface sap

Description

This commands specifies which ISA card and which VLAN is used by a specified AA Interface.

Default

no sap

Parameters

card/mda/aa-svc:vlan

Specifies the AA ISA card slot/port and VLAN information.

create

Keyword used to create the AARP instance.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sap

Syntax

sap sap-id [create]

no sap sap-id

Context

[Tree] (config>service>vprn>aa-interface sap)

[Tree] (config>service>ies>aa-interface sap)

Full Context

configure service vprn aa-interface sap

configure service ies aa-interface sap

Description

This command configures the AA interface SAP.

Parameters

sap-id

specifies the physical port identifier portion of the SAP definition.

create

creates the SAP instance.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sap

Syntax

sap sap-id [create] [no-endpoint]

sap sap-id [create] endpoint name

no sap

Context

[Tree] (config>mirror>mirror-dest sap)

Full Context

configure mirror mirror-dest sap

Description

This command creates a service access point (SAP) within a mirror destination service. The SAP is owned by the mirror destination service ID.

The SAP is defined with port and encapsulation parameters to uniquely identify the (mirror) SAP on the interface and within the box. The specified SAP may be defined on an Ethernet access port with a dot1q, null, or q-in-q encapsulation type.

Only one SAP can be created within a mirror-dest service ID. If the defined SAP has not been created on any service within the system, the SAP is created and the context of the CLI will change to the newly created SAP. In addition, the port cannot be a member of a multi-link bundle, APS group or IMA bundle.

If the defined SAP exists in the context of another service ID, mirror-dest or any other type, an error is generated.

Mirror destination SAPs can be created on Ethernet interfaces that have been defined as an access interface. If the interface is defined as network, the SAP creation returns an error.

When the no form of this command is used on a SAP created by a mirror destination service ID, the SAP with the specified port and encapsulation parameters is deleted.

Parameters

sap-id

Specifies the physical port identifier portion of the SAP definition.

no-endpoint

Removes the association of a SAP or a sdp with an explicit endpoint name.

name

Specifies the name of the endpoint associated with the SAP.

Platforms

All

sap

Syntax

sap sap-id {[egress] [ingress]}

no sap sap-id [egress] [ingress]

Context

[Tree] (config>mirror>mirror-source sap)

Full Context

configure mirror mirror-source sap

Description

This command enables mirroring of traffic ingressing or egressing a service access port (SAP). A SAP that is defined within a mirror destination cannot be used in a mirror source. The mirror source SAP referenced by the sap-id is owned by the service ID of the service in which it was created. The SAP is only referenced in the mirror source name for mirroring purposes. The mirror source association does not need to be removed before deleting the SAP from its service ID. If the SAP is deleted from its service ID, the mirror association is removed from the mirror source.

More than one SAP can be associated within a single mirror-source. Each SAP has its own ingress and egress parameter keywords to define which packets are mirrored to the mirror destination.

The SAP must be valid and properly configured. If the associated SAP does not exist, an error occurs and the command will not execute.

The same SAP cannot be associated with multiple mirror source definitions for ingress packets.

The same SAP cannot be associated with multiple mirror source definitions for egress packets.

If a particular SAP is not associated with a mirror source name, then that SAP will not have mirroring enabled for that mirror source.

Note that the ingress and egress options cannot be supported at the same time on a CEM encap-type SAP. The options must be configured in either the ingress or egress contexts (applies to the 7750 SR and 7950 XRS).

The no form of this command disables mirroring for the specified SAP. All mirroring for that SAP on ingress and egress is terminated. Mirroring of packets on the SAP can continue if more specific mirror criteria is configured. If the egress or ingress parameter keywords are specified in the no command, only the ingress or egress mirroring condition is removed.

Parameters

sap-id

Specifies the physical port identifier portion of the SAP definition.

egress

Specifies that packets egressing the SAP should be mirrored. Egress packets are mirrored to the mirror destination after egress packet modification.

ingress

Specifies that packets ingressing the SAP should be mirrored. Ingress packets are mirrored to the mirror destination before the ingress packet modification.

Platforms

All

sap

Syntax

sap sap-id {[ingress] [egress]}

no sap sap-id [ingress] [egress]

Context

[Tree] (config>li>li-source sap)

Full Context

configure li li-source sap

Description

This command creates a service access point (SAP) within an LI configuration. The specified SAP must define a FastE, GigE, or XGigE, or XGigE access port with a dot1q, null, or q-in-q encapsulation type.

When the no form of this command is used on a SAP, the SAP with the specified port and encapsulation parameters is deleted.

Parameters

sap-id

Specifies the physical port identifier portion of the SAP definition.

egress

Specifies that the router perform lawful intercept on egress traffic. Packets egressing the SAP are mirrored to the mirror destination after egress packet modification.

ingress

Specifies that the router perform lawful intercept on ingress traffic. Packets ingressing the SAP are mirrored to the mirror destination before ingress packet modification.

Platforms

All

sap

Syntax

sap sap-id {[egress] [ingress]}

no sap sap-id [egress] [ingress]

Context

[Tree] (debug>mirror-source sap)

Full Context

debug mirror-source sap

Description

This command enables mirroring of traffic ingressing or egressing a service access port (SAP). A SAP that is defined within a mirror destination cannot be used in a mirror source. The mirror source SAP referenced by the sap-id is owned by the service ID of the service in which it was created. The SAP is only referenced in the mirror source name for mirroring purposes. The mirror source association does not need to be removed before deleting the SAP from its service ID. If the SAP is deleted from its service ID, the mirror association is removed from the mirror source.

More than one SAP can be associated within a single mirror-source. Each SAP has its own ingress and egress parameter keywords to define which packets are mirrored to the mirror destination.

The SAP must be valid and properly configured. If the associated SAP does not exist, an error occurs and the command does not execute.

The same SAP cannot be associated with multiple mirror source definitions for ingress packets.

The same SAP cannot be associated with multiple mirror source definitions for egress packets.

If a particular SAP is not associated with a mirror source name, then that SAP does not have mirroring enabled for that mirror source.

Note that the ingress and egress options cannot be supported at the same time on a CEM encap-type SAP. The options must be configured in either the ingress or egress contexts (applies to the 7750 SR and 7950 XRS).

The no form of this command disables mirroring for the specified SAP. All mirroring for that SAP on ingress and egress is terminated. Mirroring of packets on the SAP can continue if more specific mirror criteria is configured. If the egress or ingress parameter keywords are specified in the no command, only the ingress or egress mirroring condition is removed.

Parameters

sap-id

Specifies the physical port identifier portion of the SAP definition.

egress

Specifies that packets egressing the SAP should be mirrored. Egress packets are mirrored to the mirror destination after egress packet modification.

ingress

Specifies that packets ingressing the SAP should be mirrored. Ingress packets are mirrored to the mirror destination before the ingress packet modification.

Platforms

All

sap

Syntax

sap sap-id [create]

no sap sap-id

Context

[Tree] (config>system>satellite>local-forward sap)

Full Context

configure system satellite local-forward sap

Description

This command configures a Service Access Point (SAP) used in satellite local forward instances defined in the system.

The no form of this command removes the satellite access point from the local-forward instance.

Parameters

eth-sat-id

Specifies the satellite access point in the local-forward instance in the esat-id/slot/port format.

Values

esat

keyword

id

1 to 20

lag-id

Specifies the LAG identifier, expressed as an integer,

Values

lag

keyword

id

1 to 800

qtag1

Specifies the qtag value.

Values

1 to 4094

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

sap

Syntax

sap sap-id

no sap

Context

[Tree] (config>li>li-fltr>li-mac-fltr>entry>match sap)

Full Context

configure li li-filter li-mac-filter entry match sap

Description

This command specifies the QinQ SAP to match from the Epipe or VPLS service, where the s-tag must be a value and the outer-tag must be of type *. This filter match is used in conjunction with match criteria outer-tag where the outer-tag must also be provisioned for the entry match on the QinQ packet to activate.

The match criteria SAP must be an exact match with the QinQ configured on the Epipe or VPLS service. An associated outer-tag must be provisioned to match on the QinQ packet. For example, SAP 1/1/1:1.*, where the outer-tag is “*”, and an outer-tag of 1 would perform LI on 1/1/1:1.1 on a 1/1/1:1.* SAP.

The no form of this command removes the QinQ SAP as the match criterion.

Default

no sap

Parameters

sap-id

Specifies the physical port identifier portion of the SAP definition.

Values

null

port-id | lag-id | eth-sat-id

dot1q

port-id | lag-id | pw-id | eth-sat-id:[qtag1 cp-conn-prof-id]

qinq

port-id | lag-id | pw-id | eth-sat-id:[qtag1 cp-conn-prof-id].[qtag2 | cp-conn-prof-id]

cp

keyword

conn-prof-id

1 to 8000

port-id

slot/mda/port[.channel]

eth-tunnel

eth-tunnel-id[:eth-tun-sap-id]

id

1 to 1024

eth-tun-sap-id

0 to 4094

lag-id

lag-id | lag-string

lag

keyword

id

1 to 800

string

up to 23 characters

pw-id

pw-id

pw

keyword

id

1 to 32767

qtag1

* | null | 0 to 4094

qtag2

* | null | 0 to 4094

tunnel-id

tunnel-id.private | public:tag

tunnel

keyword

id

1 to 64

tag

0 to 4094

eth-sat-id

esat-id/slot/port

esat

keyword

id

1 to 20

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

sap

Syntax

sap sap-id

no sap

Context

[Tree] (config>service>vpls>proxy-nd>dynamic sap)

[Tree] (config>service>vpls>proxy-arp>dynamic sap)

Full Context

configure service vpls proxy-nd dynamic sap

configure service vpls proxy-arp dynamic sap

Description

This command configures the proxy ARP or ND entry for creation when the ARP or neighbor advertisement (NA) packet for the configured IP address is received on the configured SAP. This command can be configured in combination with the configure service vpls proxy-arp dynamic mac-list or configure service vpls proxy-nd dynamic mac-list command for the entry. In this case, the MAC of the ARP or NA message and the SAP on which the ARP or NA packet is received are both checked before creating the entry.

The no form of this command removes the SAP as the match criterion.

Default

no sap

Parameters

sap-id

Specifies the physical port identifier portion of the SAP definition.

Values

null

port-id | lag-id | eth-sat-id

dot1q

port-id | lag-id | pw-id | eth-sat-id:[qtag1 cp-conn-prof-id]

qinq

port-id | lag-id | pw-id | eth-sat-id:[qtag1 cp-conn-prof-id].[qtag2 | cp-conn-prof-id]

cp

keyword

conn-prof-id

1 to 8000

port-id

slot/mda/port[.channel]

eth-tunnel

eth-tunnel-id[:eth-tun-sap-id]

id

1 to 1024

eth-tun-sap-id

0 to 4094

lag-id

lag-id | lag-string

lag

keyword

id

1 to 800

string

up to 23 characters

pw-id

pw-id

pw

keyword

id

1 to 32767

qtag1

* | null | 0 to 4094

qtag2

* | null | 0 to 4094

tunnel-id

tunnel-id.private | public:tag

tunnel

keyword

id

1 to 64

tag

0 to 4094

eth-sat-id

esat-id/slot/port

esat

keyword

id

1 to 20

Platforms

All

sap-egress

sap-egress

Syntax

sap-egress {policy-id | policy-name} [create] [name name]

no sap-egress {policy-id | policy-name}

Context

[Tree] (config>qos sap-egress)

Full Context

configure qos sap-egress

Description

This command is used to create or edit a Service Egress QoS policy. The egress policy defines the SLA for service packets as they egress on the SAP.

Policies are templates that can be applied to multiple services as long as the scope of the policy is template. The queues defined in the policy are not instantiated until a policy is applied to a service.

Sap-egress policies determine queue mappings based on ingress DSCP, IP precedence, dot1p, and IPv4 or IPv6 match criteria. Multiple queues can be created per forwarding class and each queue can have different CIR or PIR parameters.

Egress SAP QoS policies allow the definition of queues and the mapping of forwarding classes to those queues. Each queue needs to have a relative CIR for determining its allocation of QoS resources during periods of congestion. A PIR can also be defined that forces a hard limit on the packets transmitted through the queue. When the forwarding class is mapped to the queue, a DSCP, IP precedence, or dot1p value can optionally be specified.

The sap-egress policy with policy-id 1 is the default sap-egress QoS policy and is applied to service egress SAPs when an explicit policy is not specified or removed. The default sap-egress policy cannot be modified or deleted.

By default, all forwarding classes map to queue 1.

Any changes made to an existing policy, using any of the sub-commands, will be applied immediately to all egress SAPs where this policy is applied. For this reason, when many changes are required on a policy, it is highly recommended that the policy be copied to a work area policy-id. That work-in-progress policy can be modified until complete, then written over the original policy-id. Use the config qos copy command to maintain policies in this manner.

The no form of this command deletes the sap-egress policy. A policy cannot be deleted until it is removed from all service SAPs where it is applied. When a sap-egress policy is removed from a SAP, the SAP will revert to the default sap-egress policy-id 1.

Parameters

policy-id

The policy-id uniquely identifies the policy on the router.

Values

1 to 65535

policy-name

The policy-name uniquely identifies the policy.

Values

64 characters maximum.

create

Required parameter when creating a SAP QoS egress policy.

name

Configures an optional policy name which adds a name identifier to a specific policy to then use that policy name in configuration references as well as display and use policy names in show commands throughout the system. This helps the service provider or administrator to identify and manage sap-egress policies within the SR OS platforms.

All sap-egress policies are required to assign a policy ID to initially create a policy. However, either the policy ID or the policy name can be used to identify and reference a specific policy once it is initially created.

If a name is not specified at creation time, then SR OS assigns a string version of the policy-id as the name.

Values

64 characters maximum

Platforms

All

sap-egress

Syntax

sap-egress src-pol dst-pol [overwrite]

Context

[Tree] (config>qos>copy sap-egress)

Full Context

configure qos copy sap-egress

Description

This command copies existing QoS policy entries for a QoS policy-id to another QoS policy-id.

The copy command is a configuration-level maintenance tool used to create new policies using existing policies. It also allows bulk modifications to an existing policy with the use of the overwrite keyword.

Parameters

overwrite

Specifies to replace the existing destination policy. Everything in the existing destination policy will be overwritten with the contents of the source policy. If overwrite is not specified, an error will occur if the destination policy ID exists.

Example:
    — SR>config>qos# copy sap-egress 1 1010
    — MINOR: CLI Destination "1010" exists use {overwrite}.
    — SR>config>qos# copy sap-egress 1 1010 overwrite
src-pol dst-pol

Indicates that the source policy ID and the destination policy ID are SAP egress policy IDs. Specify the source policy ID that the copy command will attempt to copy from and specify the destination policy ID to which the command will copy a duplicate of the policy.

Values

1 to 65535

Platforms

All

sap-host-limit

sap-host-limit

Syntax

sap-host-limit max-num-hosts-sap

no sap-host-limit

Context

[Tree] (config>service>ies>sub-if>grp-if>arp-host sap-host-limit)

[Tree] (config>service>vprn>sub-if>grp-if>arp-host sap-host-limit)

Full Context

configure service ies subscriber-interface group-interface arp-host sap-host-limit

configure service vprn subscriber-interface group-interface arp-host sap-host-limit

Description

This command configures the maximum number of ARP hosts per SAP.

The no form of this command reverts to the default.

Default

sap-host-limit 1

Parameters

max-num-hosts-sap

Specifies the maximum number of ARP hosts per SAP allowed on this interface.

Note:

The operational maximum value may be smaller because of equipped hardware dependencies.

Values

1 to 131071

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

sap-id

sap-id

Syntax

sap-id sap-id

no sap-id

Context

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>host-identification sap-id)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>host-ident sap-id)

Full Context

configure subscriber-mgmt local-user-db ppp host host-identification sap-id

configure subscriber-mgmt local-user-db ipoe host host-identification sap-id

Description

This command specifies the SAP ID to match for a host lookup. When the LUDB is accessed using a DHCPv4 server, the SAP-ID is matched against the Nokia vendor-specific sub-option in DHCP Option 82.

Note:

This command is used only when sap-id is configured as one of the match-list parameters.

The no form of this command removes the SAP ID from the configuration.

Parameters

sap-id

Specifies a SAP ID, up to 255 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

sap-id

Syntax

[no] sap-id

Context

[Tree] (config>service>vpls>sap>dhcp>option>vendor sap-id)

[Tree] (config>service>vprn>sub-if>grp-if>dhcp>option>vendor sap-id)

[Tree] (config>service>vprn>if>dhcp>option>vendor sap-id)

[Tree] (config>service>ies>sub-if>grp-if>dhcp>option>vendor sap-id)

[Tree] (config>subscr-mgmt>msap-policy>vpls-only>dhcp>option>vendor sap-id)

Full Context

configure service vpls sap dhcp option vendor-specific-option sap-id

configure service vprn subscriber-interface group-interface dhcp option vendor-specific-option sap-id

configure service vprn interface dhcp option vendor-specific-option sap-id

configure service ies subscriber-interface group-interface dhcp option vendor-specific-option sap-id

configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp option vendor-specific-option sap-id

Description

This command enables the sending of the SAP ID in the Nokia vendor-specific sub-option of the DHCP relay packet.

The no form of this command disables the sending of the SAP ID in the Nokia vendor-specific sub-option of the DHCP relay packet.

Platforms

All

  • configure service vpls sap dhcp option vendor-specific-option sap-id
  • configure service vprn interface dhcp option vendor-specific-option sap-id

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service ies subscriber-interface group-interface dhcp option vendor-specific-option sap-id
  • configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp option vendor-specific-option sap-id
  • configure service vprn subscriber-interface group-interface dhcp option vendor-specific-option sap-id

sap-id

Syntax

sap-id sap-string

no sap-id

Context

[Tree] (config>service>dynsvc>ladb>user>idx sap-id)

Full Context

configure service dynamic-services local-auth-db user-name index sap-id

Description

This command specifies the dynamic data service SAP that is created. A dynamic service SAP ID uniquely identifies a dynamic data service instance. For a local authenticated dynamic service data trigger, one of the dynamic service SAP IDs must be the data trigger SAP.

The no form of this command removes the sap-id from the configuration.

Parameters

sap-string

Specifies a string representing the dynamic service SAP ID (only SAPs on Ethernet ports and LAGs are valid), up to 64 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

sap-ingress

sap-ingress

Syntax

sap-ingress {policy-id | policy-name} [create] [name name]

no sap-ingress {policy-id | policy-name}

Context

[Tree] (config>qos sap-ingress)

Full Context

configure qos sap-ingress

Description

This command is used to create or edit the ingress policy. The ingress policy defines the SLA enforcement that service packets receive as they ingress a SAP. SLA enforcement is accomplished through the definition of queues that have Forwarding Class (FC), Fair Information Rate (FIR), Committed Information Rate (CIR), Peak Information Rate (PIR), Committed Burst Size (CBS), and Maximum Burst Size (MBS) characteristics.

Policies in effect are templates that can be applied to multiple services as long as the scope of the policy is template. Queues defined in the policy are not instantiated until they are assigned to at least one forwarding class and a policy is applied to a service SAP.

It is possible that a SAP ingress policy will include the dscp map command, the dot1p map command, and an IP or MAC match criteria. When multiple matches occur for the traffic, the order of precedence will be used to arrive at the final action. The order of precedence is as follows:

  1. 802.1p bits

  2. DSCP

  3. IP quintuple or MAC headers

The SAP ingress policy with policy-id 1 is a system-defined policy applied to services when no other policy is explicitly specified. The system SAP ingress policy cannot be modified or deleted. The default SAP ingress policy defines one unicast and one multipoint queue associated with all forwarding classes, with an FIR of zero, a CIR of zero, and a PIR of line rate.

Any changes made to the existing policy, using any of the sub-commands, are applied immediately to all services where this policy is applied. For this reason, when many changes are required on a policy, it is recommended that the policy be copied to a work area policy ID. That work-in-progress policy can be modified until complete, then written over the original policy-id. Use the config>qos>copy command to maintain policies in this manner.

The no form of this command deletes the SAP ingress policy. A policy cannot be deleted until it is removed from all services where it is applied.

Parameters

policy-id

The policy-id uniquely identifies the policy.

Values

1 to 65535

policy-name

The policy-name uniquely identifies the policy.

Values

64 characters maximum

create

Required parameter when creating a SAP QoS ingress policy.

name name

Configures an optional policy name which adds a name identifier to a specific policy to then use that policy name in configuration references as well as display and use policy names in show commands throughout the system. This helps the service provider and administrator to identify and manage sap-ingress policies within the SR OS platforms.

All sap-ingress policies are required to assign a policy ID to initially create a policy. However, either the policy ID or the policy name can be used to identify and reference a specific policy after it is initially created.

If a name is not specified at creation time, then SR OS assigns a string version of the policy-id as the name.

Values

64 characters

Platforms

All

sap-ingress

Syntax

sap-ingress src-pol dst-pol [overwrite]

Context

[Tree] (config>qos>copy sap-ingress)

Full Context

configure qos copy sap-ingress

Description

This command copies existing QoS policy entries for a QoS policy-id to another QoS policy-id.

The copy command is a configuration-level maintenance tool used to create new policies using existing policies. It also allows bulk modifications to an existing policy with the use of the overwrite keyword.

Parameters

overwrite

Specifies to replace the existing destination policy. Everything in the existing destination policy will be overwritten with the contents of the source policy. If overwrite is not specified, an error will occur if the destination policy ID exists.

Example:
    — SR>config>qos# copy sap-egress 1 1010
    — MINOR: CLI Destination "1010" exists use {overwrite}.
    — SR>config>qos# copy sap-egress 1 1010 overwrite
src-pol dst-pol

Indicates that the source policy ID and the destination policy ID are SAP ingress policy IDs. Specify the source policy ID that the copy command will attempt to copy from and specify the destination policy ID to which the command will copy a duplicate of the policy.

Values

1 to 65535

Platforms

All

sap-limit

sap-limit

Syntax

sap-limit [limit]

no sap-limit

Context

[Tree] (config>service>dynsvc>policy sap-limit)

Full Context

configure service dynamic-services dynamic-services-policy sap-limit

Description

This command specifies a limit for the number of dynamic data service instances (SAPs) that can be setup simultaneously using a specific dynamic services policy.

A value of zero (0) means the policy is drained: existing dynamic data services can be modified and torn down but no new dynamic data services can be setup.

Default

sap-limit 1

Parameters

limit

Specifies the number of dynamic data service SAPs that can be setup simultaneously using this dynamic services policy.

Values

0 to 131072

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

sap-parameters

sap-parameters

Syntax

sap-parameters

Context

[Tree] (config>service>ies>sub-if>grp-if sap-parameters)

[Tree] (config>service>vprn>sub-if>grp-if sap-parameters)

Full Context

configure service ies subscriber-interface group-interface sap-parameters

configure service vprn subscriber-interface group-interface sap-parameters

Description

Commands in this context configure parameters that can be applied to automatically-generated internal SAPs.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

sap-session-index

sap-session-index

Syntax

[no] sap-session-index

Context

[Tree] (config>subscr-mgmt>auth-policy>include-radius-attribute sap-session-index)

Full Context

configure subscriber-mgmt authentication-policy include-radius-attribute sap-session-index

Description

This command includes sap-session-index attributes.

The no form of this command excludes sap-session-index attributes.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

sap-session-limit

sap-session-limit

Syntax

sap-session-limit sap-session-limit

no sap-session-limit

Context

[Tree] (config>service>ies>sub-if>grp-if>pppoe sap-session-limit)

[Tree] (config>service>vprn>sub-if>grp-if>pppoe sap-session-limit)

Full Context

configure service ies subscriber-interface group-interface pppoe sap-session-limit

configure service vprn subscriber-interface group-interface pppoe sap-session-limit

Description

This command specifies the number of PPPoE hosts per SAP allowed for this group-interface.

The no form of this command reverts to the default.

Default

sap-session-limit 1

Parameters

sap-session-limit

Specifies the number of PPPoE hosts per SAP allowed.

Note:

The operational maximum value may be smaller due to equipped hardware dependencies.

Values

1 to 131071

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

sap-session-limit

Syntax

sap-session-limit sap-session-limit

no sap-session-limit

Context

[Tree] (config>service>vprn>sub-if>grp-if>ipoe-session sap-session-limit)

[Tree] (config>service>ies>sub-if>grp-if>ipoe-session sap-session-limit)

Full Context

configure service vprn subscriber-interface group-interface ipoe-session sap-session-limit

configure service ies subscriber-interface group-interface ipoe-session sap-session-limit

Description

This command specifies the number of IPoE sessions per SAP allowed for this group-interface.

The no form of this command reverts to the default.

Default

sap-session-limit 1

Parameters

sap-session-limit

Specifies the number of allowed IPoE sessions.

Note:

The operational maximum value may be smaller due to equipped hardware dependencies.

Values

1 to 131071 131071 on wlan-gw group interfaces

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

sap-template

sap-template

Syntax

sap-template sap-template

no sap-template

Context

[Tree] (config>service>vpls>wlan-gw sap-template)

Full Context

configure service vpls wlan-gw sap-template

Description

This command specifies the VPLS SAP template that is applied on the internal SAPs created for communication between the VPLS and the ISAs.

The no form of this command removes the SAP template.

Parameters

sap-template

Specifies the existing SAP template to apply. The template is created in the config>service>template context.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

sap-template

Syntax

sap-template name [create]

no sap-template name

Context

[Tree] (config>subscr-mgmt sap-template)

Full Context

configure subscriber-mgmt sap-template

Description

This command configures a template that specifies parameters for automatically generated subscriber SAPs, for example, when creating CUPS sessions. A template with the name "default" is used if no specific name is provided, but this must be manually provisioned.

The no form of this command removes the template.

Parameters

name

Specifies the name of the PFCP association, up to 32 characters.

create

Keyword used to create the SAP template.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

sap-template-binding

sap-template-binding

Syntax

sap-template-binding name/id

no sap-template-binding

Context

[Tree] (config>service>vpls>vpls-group sap-template-binding)

Full Context

configure service vpls vpls-group sap-template-binding

Description

This command configures the binding to a SAP template to be used to instantiate SAPs in the data VPLS using as input variables the VLAN IDs generated by the vid-range command.

The no form of this command removes the binding and deletes the related SAP instances. The command will fail if any of the affected VPLS instances have either a provisioned SAP or an active MVRP declaration/registration or if the related vpls-group is in no shutdown state. Any changes to the sap-template-binding require the vpls-group to be in shutdown state. New control SAP additions to the management VPLS are allowed as long as data VPLS instantiations/removals for vpls-groups are not in progress. Control SAPs can be removed at any time generating the removal of related data SAPs from the data VPLS. The shutdown or no shutdown state for the control SAPs does not have any effect on data SAPs instantiated with this command.

Default

no sap-template-binding

Parameters

name

Specifies the name of the VPLS template

Values

ASCII character string

id

Specifies the ID of the VPLS template

Values

1 to 8196

Platforms

All

saps

saps

Syntax

saps {qset-size size | non-shaper-queues}

Context

[Tree] (config>qos>fp-resource-policy>aggregate-shapers>queue-sets>default-size saps)

Full Context

configure qos fp-resource-policy aggregate-shapers queue-sets default-size saps

Description

This command configures the default queue-set size for SAPs.

Parameters

size

Specifies the size of the queue sets.

Values

2 to 8

non-shaper-queues

Specifies that subscribers will not use hardware aggregate shapers on FPs where the FP resource policy is applied.

Platforms

7750 SR-1, 7750 SR-s

sat-type

sat-type

Syntax

sat-type sat-type [port-template template-name]

no sat-type

Context

[Tree] (config>system>satellite>eth-sat sat-type)

[Tree] (config>system>satellite>tdm-sat sat-type)

Full Context

configure system satellite eth-sat sat-type

configure system satellite tdm-sat sat-type

Description

This command configures the type of satellite variant for the associated satellite chassis.

The no form of the command deletes the sat-type configuration.

Default

no sat-type

Parameters

sat-type

Specifies the satellite type. Configuration of the following variants is supported:

es24-1gb-sfp

Specifies the 24xGE (SFP) + 4x10GE Ethernet satellite.

es48-1gb-sfp

Specifies the 48xGE (SFP) + 4x10GE Ethernet satellite.

es24-sass-1gb-sfp

Specifies the SAS-S 24xGE (SFP) + 4x10GE Ethernet satellite.

es48-sass-1gb-sfp

Specifies the SAS-S 48xGE (SFP) + 4x10GE Ethernet satellite.

es24-1gb-tx

Specifies the 24xGE (copper) + 4x10GE Ethernet satellite.

es48-1gb-tx

Specifies the 48xGE (copper) + 4x10GE Ethernet satellite.

es24-1gb-tx

Specifies the 24-port copper + PoE Ethernet satellite.

es48-1gb-tx

Specifies the 48-port copper + PoE Ethernet satellite.

es64-10gb-sfpp+4-100gb-cfp4

Specifies the 64x10GE + 4x100GE Ethernet satellite.

es64-10gb-sfpp+4-100gb-qsfp28

Specifies the 64x10GE + 4xQSFP28 Ethernet satellite.

es24-sasmxp-1gb-sfp

Specifies the 7210 SAS-Mxp as an ethernet satellite.

ts4-choc3-sfp

Specifies the 4-port OC3 TDM satellite.

ts4-chstm1-sfp

Specifies the 4-port STM1 TDM satellite.

ts1-choc12-sfp

Specifies the 1-port OC12 TDM satellite.

ts1-chstm4-sfp

Specifies the 1-port STM4 TDM satellite.

template-name

Specifies the name for the associated port template.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  • configure system satellite eth-sat sat-type

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

  • configure system satellite tdm-sat sat-type

satellite

satellite

Syntax

satellite

Context

[Tree] (config>system satellite)

Full Context

configure system satellite

Description

This command enables the satellite configuration context. Within the satellite context, the administrator can specify the configuration details for a satellite chassis that is hosted by the associated local system.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

satellite

Syntax

satellite

Context

[Tree] (admin satellite)

Full Context

admin satellite

Description

This command performs satellite operations.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

save

save

Syntax

save

Context

[Tree] (config>li save)

Full Context

configure li save

Description

This command is required to save LI configuration parameters.

Platforms

All

save

Syntax

save [cflash-id]

Context

[Tree] (bof save)

Full Context

bof save

Description

This command uses the boot option parameters currently in memory and writes them from the boot option file to the specified compact flash.

The BOF must be located in the root directory of the internal or external compact flash drives local to the system and have the mandatory filename of bof.cfg.

If a location is not specified, the BOF is saved to the default compact flash drive (cf3:) on the active CPM (typically the CPM in slot A, but the CPM in slot B could also be acting as the active CPM). The slot name is not case-sensitive. You can use upper or lowercase "A” or "B”.

Command usage:

  • bof save — saves the BOF to the default drive (cf3:) on the active CPM (either in slot A or B)

  • bof save cf3: — saves the BOF to cf3: on the active CPM (either in slot A or B)

To save the BOF to a compact flash drive on the standby CPM (for example, the redundant (standby) CPM is installed in slot B), specify -A or -B option.

Command usage:

  • bof save cf3-A: — saves the BOF to cf3: on CPM in slot A whether it is active or standby

  • bof save cf3-B: — saves the BOF to cf3: on CPM in slot B whether it is active or standby

The slot name is not case-sensitive. You can use upper or lowercase "A” or "B”.

The bof save and show bof commands allow you to save to or read from the compact flash of the standby CPM. Use the show card command to determine the active and standby CPM (A or B).

Default

Saves must be explicitly executed. The BOF is saved to cf3: if a location is not specified.

Parameters

flash-id

Specifies the compact flash ID where the bof.cfg is to be saved.

Values

cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:

Default

cf3:

Platforms

All

save

Syntax

save file-url

Context

[Tree] (candidate save)

Full Context

candidate save

Description

This command saves the current candidate to a file.

Parameters

file-url

Specifies the directory and filename.

Platforms

All

save

Syntax

save [comment comment] [rescue]

Context

[Tree] (admin>rollback save)

Full Context

admin rollback save

Description

If the optional rescue keyword is not used, this command saves a rollback checkpoint at the location and with the filename specified by the rollback-location with a suffix of .rb. The previously saved checkpoints will have their suffixes incremented by one (.rb.1 becomes .rb.2, and so on). If there are already as many checkpoint files as the maximum number supported, then the last checkpoint file is deleted.

If the rescue keyword is used, then this command saves the current operational configuration as a rescue configuration at the location and with the filename specified by the rescue location. The filename will have the suffix .rc appended.

Parameters

comment-string

Specifies a comment, up to 255 characters, that is associated with the checkpoint.

rescue

Saves the rescue checkpoint instead of a normal rollback checkpoint.

Platforms

All

save

Syntax

save [file-url] [detail] [index]

Context

[Tree] (admin save)

Full Context

admin save

Description

This command saves the running configuration to a configuration file. For example:

A:ALA-1>admin# save ftp://test:test@192.168.x.xx/./100.cfg
Saving configuration .........Completed.

By default, the running configuration is saved to the primary configuration file.

Parameters

file-url

Specifies the file URL location to save the configuration file.

Values

local-url | remote-url

local-url

[cflash-id/][file-path] 200 chars max, including cflash-id

directory length 99 chars max each

remote-url

[{ftp:// | tftp://}login:pswd@remote-locn/][file-path]

243 chars max

directory length 99 chars max each

remote-locn

[hostname | ipv4-address | ipv6-address]

ipv4-address

a.b.c.d

ipv6-address

x:x:x:x:x:x:x:x[-interface]

x:x:x:x:x:x:d.d.d.d[-interface]

x - [0 to FFFF]H

d - [0 to 255]D

interface - 32 chars max, for link local addresses

cflash-id

cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:

Default

the primary configuration file location

detail

Saves both default and non-default configuration parameters.

index

Forces a save of the persistent index file regardless of the persistent status in the BOF file. The index option can also be used to avoid an additional boot required while changing your system to use the persistence indexes.

Platforms

All

save-deterministic-script

save-deterministic-script

Syntax

save-deterministic-script

Context

[Tree] (admin>nat save-deterministic-script)

Full Context

admin nat save-deterministic-script

Description

This command saves the script that calculates Deterministic NAT map entries.

Once the location for the Python deterministic NAT script is configured, the script is generated/updated every time deterministic NAT configuration is modified. However, the script must be manually exported to the remote location. This command triggers the export of the script to a remote location.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

save-when-restricted

save-when-restricted

Syntax

[no] save-when-restricted

Context

[Tree] (config>system>security>user-template save-when-restricted)

[Tree] (config>system>security>user save-when-restricted)

Full Context

configure system security user-template save-when-restricted

configure system security user save-when-restricted

Description

This command specifies whether the system permits configuration save operations for all configuration regions (bof, debug, configure, li) via any management interface (such as CLI and NETCONF) even if restricted-to-home is enabled.

The configuration for a region can be saved with CLI commands such as bof save, admin debug-save, admin save, or configure li save.

The no form of this command denies saving the configuration when restricted-to-home is enabled.

Default

save-when-restricted

Platforms

All

saved-ind-prompt

saved-ind-prompt

Syntax

[no] saved-ind-prompt

Context

[Tree] (environment saved-ind-prompt)

Full Context

environment saved-ind-prompt

Description

This command enables saved indicator in the prompt. When changes are made to the configuration file a "*” appears in the prompt string indicating that the changes have not been saved. When an admin save command is executed the "*” disappears.

*A:ALA-48# admin save
Writing file to ftp://192.0.2.43/./sim48/sim48-config.cfg
Saving configuration .... Completed.
A:ALA-48#

Platforms

All

scaling-profile

scaling-profile

Syntax

scaling-profile scaling-profile-id

Context

[Tree] (config>isa>nat-group scaling-profile)

Full Context

configure isa nat-group scaling-profile

Description

This command determines profiles for NAT scaling. Lower profile numbers allocate less resources, therefore, supporting lower scaling.

Contact your Nokia representative for more information about NAT scaling figures in each profile.

Default

scaling-profile profile1

Parameters

scaling-profile-id

Specifies the name of the profile, up to 32 characters.

Values

ESA-VM supports three scaling profiles, while VSR-I supports only two.

  • profile1 is a low scaling profile that requires 8 CPU cores and 32 GB of DRAM memory per ESA-VM

  • profile2 is a medium scaling profile that requires 11 CPU cores and 96 GB of DRAM memory per ESA-VM

  • profile3 is a high scaling profile that requires 15 CPU cores and 115 GB of DRAM memory per ESA-VM

For the number of required CPU control cores on a VSR-I in relation to profiles, see the Sysinfo section in the Virtualized Service Router Installation and Setup Guide.

For the amount of required memory on VSR-I in relation to profiles, see the Software Release Notes, section VM Memory Requirements by Function Mix.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sched-class

sched-class

Syntax

sched-class sched-class group name [weight weight]

no sched-class sched-class

Context

[Tree] (config>qos>hw-agg-shap-sched-plcy sched-class)

Full Context

configure qos hw-agg-shaper-scheduler-policy sched-class

Description

This command configures the scheduling class for the hardware aggregate shaper scheduler policy.

The no form of this command removes the scheduling class configuration.

Parameters

sched-class

Specifies the scheduling class ID.

Values

3 to 6

name

Assigns the specified scheduling class to a group within the hardware aggregate shaper scheduler policy.

weight

Specifies the weight for a scheduling class within the specified group.

Values

3 to 8

Default

1

Platforms

7750 SR-1, 7750 SR-s

sched-class

Syntax

sched-class sched-class

no sched-class

Context

[Tree] (config>qos>sap-egress>queue sched-class)

Full Context

configure qos sap-egress queue sched-class

Description

This command configures the scheduling class for the hardware aggregate shaper scheduler policy.

The no form of this command removes the scheduling class configuration.

Parameters

sched-class

Specifies the scheduling class ID.

Values

3 to 6

Platforms

7750 SR-1, 7750 SR-s

sched-class

Syntax

sched-class class

no sched-class

Context

[Tree] (config>qos>qgrps>egr>qgrp>queue sched-class)

Full Context

configure qos queue-group-templates egress queue-group queue sched-class

Description

This command configures the scheduling class for the hardware aggregate shaper scheduler policy.

The no form of this command removes the scheduling class configuration.

Default

no sched-class

Parameters

sched-class

Specifies the scheduling class ID.

Values

1 to 6

Platforms

7750 SR-1, 7750 SR-s

sched-class-elevation

sched-class-elevation

Syntax

sched-class-elevation sched-class sched-class weight weight

no sched-class-elevation sched-class sched-class

Context

[Tree] (config>qos>sap-egress sched-class-elevation)

Full Context

configure qos sap-egress sched-class-elevation

Description

This command configures the scheduling class elevation.

The no form of this command removes the scheduling class elevation configuration.

Parameters

sched-class

Specifies the scheduling class ID.

Values

3 to 6

weight

Specifies the weight for the scheduling class.

Values

3 to 8

Platforms

7750 SR-1, 7750 SR-s

sched-class-elevation

Syntax

sched-class-elevation sched-class sched-class weight weight

no sched-class-elevation sched-class sched-class

Context

[Tree] (cfg>qos>qgrps>egr>qgrp sched-class-elevation)

Full Context

configure qos queue-group-templates egress queue-group sched-class-elevation

Description

This command configures the scheduling class elevation.

The no form of this command removes the scheduling class elevation configuration.

Parameters

sched-class

Specifies the scheduling class ID.

Values

1 to 6

weight

Specifies the weight for the scheduling class.

Values

1 to 8

Platforms

7750 SR-1, 7750 SR-s

sched-run-min-int

sched-run-min-int

Syntax

sched-run-min-int percent-of-default

no sched-run-min-int

Context

[Tree] (config>card>virt-sched-adj sched-run-min-int)

Full Context

configure card virtual-scheduler-adjustment sched-run-min-int

Description

This command overrides the default minimum time that must elapse before a virtual scheduler may redistribute bandwidth based on changes to the offered rates of member policers or queues. A minimum run interval is enforced to allow a minimum amount of "batching” queue changes before reacting to the changed rates. This minimum interval is beneficial since the periodic function of determining policer or queue offered rates is performed sequentially and the interval allows a number policer and queue rates to be determined before determining the distribution of bandwidth to the policers and queues.

The default minimum scheduler run interval is 0.5 seconds. The sched-run-min-int command uses a percent value to modify the default interval.

The no form of this command restores the default minimum scheduler run interval for all virtual schedulers on the card.

Default

no sched-run-min-int

Parameters

percent-of-default

Specifies that the percent-of-default parameter is required and is used to modify the default minimum scheduler run interval for all virtual schedulers on the card. Defining 100.00 percent is equivalent to removing the override (restoring the default) for the minimum scheduler run interval.

Values

0.01% to 1000.00%

Default

100.00%

Platforms

All

schedule

schedule

Syntax

[no] schedule schedule-name [owner schedule-owner]

Context

[Tree] (config>system>cron schedule)

Full Context

configure system cron schedule

Description

This command configures the type of schedule to run, including one-time only (oneshot), periodic or calendar-based runs. All runs are determined by month, day of month or weekday, hour, minute and interval (seconds).

The no form of the command removes the context from the configuration.

Parameters

schedule-name

Specifies the name of the schedule. The name can be up to 32 characters.

schedule-owner

Specifies the owner name of the schedule. The name can be up to 32 characters.

Default

TiMOS CLI

Platforms

All

schedule-type

schedule-type

Syntax

schedule-type schedule-type

Context

[Tree] (config>system>security>pki>ca-prof>auto-crl-update schedule-type)

Full Context

configure system security pki ca-profile auto-crl-update schedule-type

Description

This command specifies the schedule type for auto CRL update. The system supports two types:

  • periodic: — The system will download a CRL periodically at the interval configured via the periodic-update-interval command. For example, if the periodic-update-interval is 1 day, then the system will download a CRL every 1 day. The minimal periodic-update-interval is 1 hour.

  • next-update-based — The system will download a CRL at the time = Next_Update_of_existing_CRL minus pre-update-time. For example, if the Next-Update of the existing CRL is 2015-06-30 06:00 and pre-update-time is 1 hour, then the system will start downloading at 2015-06-30, 05:00.

Default

schedule-type next-update-based

Parameters

schedule-type

Specifies the type of time scheduler to update the CRL.

Values

periodic, next-update-based

Platforms

All

scheduler

scheduler

Syntax

scheduler scheduler-name rate pir-rate [cir cir-rate]

no scheduler scheduler-name

Context

[Tree] (config>subscr-mgmt>sub-prof>egr>sched scheduler)

[Tree] (config>subscr-mgmt>sub-prof>ing>sched scheduler)

Full Context

configure subscriber-mgmt sub-profile egress scheduler-policy scheduler

configure subscriber-mgmt sub-profile ingress scheduler-policy scheduler

Description

This command provides a way to override parameters of the existing scheduler associated with the egress or ingress scheduler policy. A scheduler defines bandwidth controls that limit each child (other schedulers and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created will have queues or other schedulers defined as child associations. The scheduler can be a child (take bandwidth from a scheduler in a higher tier).

The no form of this command reverts to the default.

Parameters

scheduler-policy-name

Specify an existing scheduler policy name.

pir-rate

Specify the pir-rate, in kilobits, to override the administrative PIR used by the scheduler. When the rate command is executed, a valid PIR setting must be explicitly defined. Fractional values are not allowed and must be specified as a positive integer.

Values

1 to 3200000000, max

cir-rate

The cir parameter overrides the administrative CIR used by the scheduler. When the rate command is executed, a CIR setting is optional. The sum keyword specifies that the CIR be used as the summed CIR values of the children schedulers or queues. Fractional values are not allowed and must be given as a positive integer.

Values

0 to 3200000000, sum, max

Default

sum

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

scheduler

Syntax

scheduler scheduler-name [create]

no scheduler scheduler-name

Context

[Tree] (config>service>vpls>sap>egress>sched-override scheduler)

Full Context

configure service vpls sap egress scheduler-override scheduler

Description

This command overrides specific attributes of the specified scheduler name.

A scheduler defines a bandwidth control that limits each child (other schedulers, policers and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created has policers, queues or other schedulers defined as child associations. The scheduler can be a child which takes bandwidth from a scheduler in a higher tier. A total of 32 schedulers can be created within a single scheduler policy with no restriction on the distribution between the tiers.

Each scheduler must have a unique name within the context of the scheduler policy; however the same name can be reused in multiple scheduler policies. If scheduler-name already exists within the policy tier level (regardless of the inclusion of the keyword create), the context changes to that scheduler name for the purpose of editing the scheduler parameters. Modifications made to an existing scheduler are executed on all instantiated schedulers created through association with the policy of the edited scheduler. This can cause policers, queues or schedulers to become orphaned (invalid parent association) and adversely affect the ability of the system to enforce service level agreements (SLAs).

If the scheduler-name exists within the policy on a different tier (regardless of the inclusion of the keyword create), an error occurs and the current CLI context does not change.

If the scheduler-name does not exist in this or another tier within the scheduler policy, it is assumed that an attempt is being made to create a scheduler of that name. The success of the command execution is dependent on the following:

  1. The maximum number of schedulers has not been configured.

  2. The provided scheduler-name is valid.

  3. The create keyword is entered with the command if the system is configured to require it (enabled in the environment create command).

When the maximum number of schedulers has been exceeded on the policy, a configuration error occurs and the command does not execute, nor does the CLI context change.

If the provided scheduler-name is invalid according to the criteria below, a name syntax error occurs, the command does not execute, and the CLI context does not change.

The no form of this command removes the scheduler name from the configuration.

Parameters

scheduler-name

Specifies name of the scheduler

Values

Valid names consist of any string up to 32 characters long composed of printable, 7-bit ASCII characters excluding double quotes. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.

create

This optional keyword explicitly specifies that it is acceptable to create a scheduler with the given scheduler-name. If the create keyword is omitted, scheduler-name is not created when the system environment variable create is set to true. This safeguard is meant to avoid accidental creation of system objects (such as schedulers) while attempting to edit an object with a mistyped name or ID. The keyword has no effect when the object already exists.

Platforms

All

scheduler

Syntax

scheduler scheduler-name [create]

no scheduler scheduler-name

Context

[Tree] (config>port>ethernet>access>ing>qgrp>sched-override scheduler)

[Tree] (config>port>ethernet>access>egr>qgrp>sched-override scheduler)

Full Context

configure port ethernet access ingress queue-group scheduler-override scheduler

configure port ethernet access egress queue-group scheduler-override scheduler

Description

This command can be used to override specific attributes of the specified scheduler name. A scheduler defines bandwidth controls that limit each child (other schedulers and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created will have queues or other schedulers defined as child associations. The scheduler can be a child which takes bandwidth from a scheduler in a higher tier. A total of 32 schedulers can be created within a single scheduler policy with no restriction on the distribution between the tiers. The scheduler-name must exist in the applied scheduler policy.

The no form of this command removes the scheduler overrides for the specified scheduler and returns the scheduler’s parent weight and CIR weight, and its PIR and CIR to the values configured in the applied scheduler policy.

Parameters

scheduler-name

Specifies the name of the scheduler.

Values

Valid names consist of any string up to 32 characters composed of printable, 7-bit ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.

create

Creates a new scheduler for this port.

Platforms

All

scheduler

Syntax

scheduler scheduler-name [create]

no scheduler scheduler-name

Context

[Tree] (config>service>cpipe>sap>egress>sched-override scheduler)

[Tree] (config>service>ipipe>sap>egress>sched-override scheduler)

[Tree] (config>service>ipipe>sap>ingress>sched-override scheduler)

[Tree] (config>service>cpipe>sap>ingress>sched-override scheduler)

[Tree] (config>service>epipe>sap>egress>sched-override scheduler)

[Tree] (config>service>epipe>sap>ingress>sched-override scheduler)

Full Context

configure service cpipe sap egress scheduler-override scheduler

configure service ipipe sap egress scheduler-override scheduler

configure service ipipe sap ingress scheduler-override scheduler

configure service cpipe sap ingress scheduler-override scheduler

configure service epipe sap egress scheduler-override scheduler

configure service epipe sap ingress scheduler-override scheduler

Description

This command can be used to override specific attributes of the specified scheduler name. A scheduler defines bandwidth controls that limit each child (other schedulers, policers, and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created will have policers, queues or other schedulers defined as child associations. The scheduler can be a child which takes bandwidth from a scheduler in a higher tier. A total of 32 schedulers can be created within a single scheduler policy with no restriction on the distribution between the tiers.

Each scheduler must have a unique name within the context of the scheduler policy; however the same name can be reused in multiple scheduler policies. If scheduler-name already exists within the policy tier level (regardless of the inclusion of the keyword create), the context changes to that scheduler name for the purpose of editing the scheduler parameters. Modifications made to an existing scheduler are executed on all instantiated schedulers created through association with the policy of the edited scheduler. This can cause policers, queues, or schedulers to become orphaned (invalid parent association) and adversely affect the ability of the system to enforce service level agreements (SLAs).

If the scheduler-name exists within the policy on a different tier (regardless of the inclusion of the keyword create), an error occurs and the current CLI context will not change.

If the scheduler-name does not exist in this or another tier within the scheduler policy, it is assumed that an attempt is being made to create a scheduler of that name. The success of the command execution is dependent on the following:

  1. The maximum number of schedulers has not been configured.

  2. The provided scheduler-name is valid.

  3. The create keyword is entered with the command if the system is configured to require it (enabled in the environment create command).

When the maximum number of schedulers has been exceeded on the policy, a configuration error occurs and the command will not execute, nor will the CLI context change.

If the provided scheduler-name is invalid according to the following criteria, a name syntax error will occur, the command will not execute, and the CLI context will not change.

Parameters

scheduler-name

The name of the scheduler. Each scheduler must be explicitly created.

Values

Valid names consist of any string up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.

create

This optional keyword explicitly specifies that it is acceptable to create a scheduler with the given scheduler-name. If the create keyword is omitted, scheduler-name is not created when the system environment variable create is set to true. This safeguard is meant to avoid accidental creation of system objects (such as schedulers) while attempting to edit an object with a mistyped name or ID. The keyword has no effect when the object already exists.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  • configure service cpipe sap ingress scheduler-override scheduler
  • configure service cpipe sap egress scheduler-override scheduler

All

  • configure service epipe sap egress scheduler-override scheduler
  • configure service ipipe sap ingress scheduler-override scheduler
  • configure service epipe sap ingress scheduler-override scheduler
  • configure service ipipe sap egress scheduler-override scheduler

scheduler

Syntax

scheduler scheduler-name [create]

no scheduler scheduler-name

Context

[Tree] (config>service>vprn>if>sap>ingress>sched-override scheduler)

[Tree] (config>service>vprn>if>sap>egress>sched-override scheduler)

Full Context

configure service vprn interface sap ingress scheduler-override scheduler

configure service vprn interface sap egress scheduler-override scheduler

Description

This command can be used to override specific attributes of the specified scheduler name.

A scheduler defines a bandwidth controls that limit each child (other schedulers, policers, and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created will have policers, queues, or other schedulers defined as child associations. The scheduler can be a child which takes bandwidth from a scheduler in a higher tier. A total of 32 schedulers can be created within a single scheduler policy with no restriction on the distribution between the tiers.

Each scheduler must have a unique name within the context of the scheduler policy; however the same name can be reused in multiple scheduler policies. If scheduler-name already exists within the policy tier level (regardless of the inclusion of the keyword create), the context changes to that scheduler name for the purpose of editing the scheduler parameters. Modifications made to an existing scheduler are executed on all instantiated schedulers created through association with the policy of the edited scheduler. This can cause queues or schedulers to become orphaned (invalid parent association) and adversely affect the ability of the system to enforce service level agreements (SLAs).

If the scheduler-name exists within the policy on a different tier (regardless of the inclusion of the keyword create), an error occurs and the current CLI context will not change.

If the scheduler-name does not exist in this or another tier within the scheduler policy, it is assumed that an attempt is being made to create a scheduler of that name. The success of the command execution is dependent on the following:

  1. The maximum number of schedulers has not been configured.

  2. The provided scheduler-name is valid.

  3. The create keyword is entered with the command if the system is configured to require it (enabled in the environment create command).

When the maximum number of schedulers has been exceeded on the policy, a configuration error occurs and the command will not execute, nor will the CLI context change.

If the provided scheduler-name is invalid according to the criteria below, a name syntax error will occur, the command will not execute, and the CLI context will not change.

Parameters

scheduler-name

Specifies the name of the scheduler.

Values

Valid names consist of any string up to 32 characters composed of printable, 7-bit ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed between double quotes.

create

Specifies that it is acceptable to create a scheduler with the given scheduler-name. If the create keyword is omitted, scheduler-name is not created when the system environment variable create is set to true. This safeguard is meant to avoid accidental creation of system objects (such as schedulers) while attempting to edit an object with a mistyped name or ID. The keyword has no effect when the object already exists.

Platforms

All

scheduler

Syntax

scheduler scheduler-name [create]

no scheduler scheduler-name

Context

[Tree] (config>service>ies>if>sap>egress>sched-override scheduler)

[Tree] (config>service>ies>if>sap>ingress>sched-override scheduler)

Full Context

configure service ies interface sap egress scheduler-override scheduler

configure service ies interface sap ingress scheduler-override scheduler

Description

This command can be used to override specific attributes of the specified scheduler name.

A scheduler defines a bandwidth controls that limit each child (other schedulers, policers, and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created will have policers, queues, or other schedulers defined as child associations. The scheduler can be a child which takes bandwidth from a scheduler in a higher tier. A total of 32 schedulers can be created within a single scheduler policy with no restriction on the distribution between the tiers.

Each scheduler must have a unique name within the context of the scheduler policy; however the same name can be reused in multiple scheduler policies. If scheduler-name already exists within the policy tier level (regardless of the inclusion of the keyword create), the context changes to that scheduler name for the purpose of editing the scheduler parameters. Modifications made to an existing scheduler are executed on all instantiated schedulers created through association with the policy of the edited scheduler. This can cause queues or schedulers to become orphaned (invalid parent association) and adversely affect the ability of the system to enforce service level agreements (SLAs).

If the scheduler-name exists within the policy on a different tier (regardless of the inclusion of the keyword create), an error occurs and the current CLI context will not change.

If the scheduler-name does not exist in this or another tier within the scheduler policy, it is assumed that an attempt is being made to create a scheduler of that name. The success of the command execution is dependent on the following:

  1. The maximum number of schedulers has not been configured.

  2. The provided scheduler-name is valid.

  3. The create keyword is entered with the command if the system is configured to require it (enabled in the environment create command).

When the maximum number of schedulers has been exceeded on the policy, a configuration error occurs and the command will not execute, nor will the CLI context change.

If the provided scheduler-name is invalid according to the criteria below, a name syntax error will occur, the command will not execute, and the CLI context will not change.

Parameters

scheduler-name

The name of the scheduler. Each scheduler must be explicitly created.

Values

Valid names consist of any string up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.

create

This optional keyword explicitly specifies that it is acceptable to create a scheduler with the given scheduler-name. If the create keyword is omitted, scheduler-name is not created when the system environment variable create is set to true. This safeguard is meant to avoid accidental creation of system objects (such as schedulers) while attempting to edit an object with a mistyped name or ID. The keyword has no effect when the object already exists.

Platforms

All

scheduler

Syntax

scheduler scheduler-name [create]

no scheduler scheduler-name

Context

[Tree] (config>qos>scheduler-policy>tier scheduler)

Full Context

configure qos scheduler-policy tier scheduler

Description

This command creates a new scheduler or edits an existing scheduler within the scheduler policy tier. A scheduler defines bandwidth controls that limit each child (other schedulers and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created will have queues or other schedulers defined as child associations. The scheduler can be a child which takes bandwidth from a scheduler in a higher tier. A total of 32 schedulers can be created within a single scheduler policy with no restriction on the distribution between the tiers.

Each scheduler must have a unique name within the context of the scheduler policy; however, the same name can be reused in multiple scheduler policies. If scheduler-name already exists within the policy tier level (regardless of the inclusion of the keyword create), the context changes to that scheduler name for the purpose of editing the scheduler parameters. Modifications made to an existing scheduler are executed on all instantiated schedulers created through association with the policy of the edited scheduler. This can cause queues or schedulers to become orphaned (invalid parent association) and adversely affect the ability of the system to enforce SLAs.

If the scheduler-name exists within the policy on a different tier (regardless of the inclusion of the keyword create), an error occurs and the current CLI context will not change.

If the scheduler-name does not exist in this or another tier within the scheduler policy, it is assumed that an attempt is being made to create a scheduler of that name. The success of the command execution is dependent on the following:

  1. The maximum number of schedulers has not been configured.

  2. The provided scheduler-name is valid.

  3. The create keyword is entered with the command if the system is configured to require it (enabled in the environment create command).

When the maximum number of schedulers has been exceeded on the policy, a configuration error occurs, the command will not execute, nor will the CLI context change.

If the provided scheduler-name is invalid according to the criteria below, a name syntax error will occur, the command will not execute, and the CLI context will not change.

Parameters

scheduler-name

Specifies the scheduler name.

Values

Valid names consist of any string up to 32 characters, composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, etc.), the entire string must be enclosed within double quotes.

create

This optional keyword explicitly specifies that it is acceptable to create a scheduler with the given scheduler-name. If the create keyword is omitted, scheduler-name is not created when the system environment variable create is set to true. This safeguard is meant to avoid accidental creation of system objects (such as schedulers) while attempting to edit an object with a mistyped name or ID. The keyword has no effect when the object already exists.

Platforms

All

scheduler

Syntax

scheduler scheduler-name [create]

no scheduler scheduler-name

Context

[Tree] (config>service>cust>multi-service-site>ingress>sched-override scheduler)

[Tree] (config>service>cust>multi-service-site>egress>sched-override scheduler)

Full Context

configure service customer multi-service-site ingress scheduler-override scheduler

configure service customer multi-service-site egress scheduler-override scheduler

Description

This command override specifics attributes of the specified scheduler name.

A scheduler defines bandwidth controls that limit each child (other schedulers, policers and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created will have policers, queues or other schedulers defined as child associations. The scheduler can be a child which takes bandwidth from a scheduler in a higher tier. A total of 32 schedulers can be created within a single scheduler policy with no restriction on the distribution between the tiers.

Each scheduler must have a unique name within the context of the scheduler policy; however the same name can be reused in multiple scheduler policies. If scheduler-name already exists within the policy tier level (regardless of the inclusion of the keyword create), the context changes to that scheduler name for the purpose of editing the scheduler parameters. Modifications made to an existing scheduler are executed on all instantiated schedulers created through association with the policy of the edited scheduler. This can cause policer, queues or schedulers to become orphaned (invalid parent association) and adversely affect the ability of the system to enforce service level agreements (SLAs).

If the scheduler-name exists within the policy on a different tier (regardless of the inclusion of the keyword create), an error occurs and the current CLI context will not change.

If the scheduler-name does not exist in this or another tier within the scheduler policy, it is assumed that an attempt is being made to create a scheduler of that name. The success of the command execution is dependent on the following:

  1. The maximum number of schedulers has not been configured.

  2. The provided scheduler-name is valid.

  3. The create keyword is entered with the command if the system is configured to require it (enabled in the environment create command).

When the maximum number of schedulers has been exceeded on the policy, a configuration error occurs and the command will not execute, nor will the CLI context change.

If the provided scheduler-name is invalid according to the criteria below, a name syntax error will occur, the command will not execute, and the CLI context will not change.

The no form of the command disables the scheduler override.

Parameters

scheduler-name

Specifies the name of the scheduler.

Values

Valid names consist of any string up to 32 characters in length, composed of printable, 7-bit ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.

create

This optional keyword explicitly specifies that it is acceptable to create a scheduler with the given scheduler-name. If the create keyword is omitted, scheduler-name is not created when the system environment variable create is set to true. This safeguard is meant to avoid accidental creation of system objects (such as schedulers) while attempting to edit an object with a mistyped name or ID. The keyword has no effect when the object already exists.

Platforms

All

scheduler

Syntax

scheduler scheduler-name rate pir-rate [cir cir-rate]

no scheduler scheduler-name

Context

[Tree] (config>subscr-mgmt>sla-prof>egress>sched scheduler)

Full Context

configure subscriber-mgmt sla-profile egress scheduler-policy scheduler

Description

This command provides a way to override parameters of the existing scheduler associated with the egress scheduler policy. A scheduler defines bandwidth controls that limit each child (other schedulers and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created will have queues or other schedulers defined as child associations. The scheduler can be a child (take bandwidth from a scheduler in a higher tier).

The no form of this command reverts to the default.

Parameters

scheduler-name

Specify an existing scheduler policy name up to 32 characters.

pir-rate

Specifies the PIR rate in kb/s. This parameter overrides the administrative PIR used by the scheduler. When the rate command is executed, a valid PIR setting must be explicitly defined. Fractional values are not allowed and must be given as a positive integer.

Values

1 to 3200000000, max

cir-rate

Specifies the CIR rate in kb/s. This parameter overrides the administrative CIR used by the scheduler. When the rate command is executed, a CIR setting is optional. The sum keyword specifies that the CIR be used as the summed CIR values of the children schedulers or queues. Fractional values are not allowed and must be given as a positive integer.

Values

0 to 3200000000, sum, max

Default

sum

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

scheduler-override

scheduler-override

Syntax

[no] scheduler-override

Context

[Tree] (config>service>vpls>sap>egress scheduler-override)

[Tree] (config>service>vpls>sap>ingress scheduler-override)

Full Context

configure service vpls sap egress scheduler-override

configure service vpls sap ingress scheduler-override

Description

Commands in this context configure the set of attributes whose values have been overridden via management on this virtual scheduler. Clearing a given flag returns the corresponding overridden attribute to the value defined on the SAP's ingress scheduler policy.

The no form of this command removes scheduler parameters from the configuration.

Platforms

All

scheduler-override

Syntax

[no] scheduler-override

Context

[Tree] (config>port>ethernet>access>ing>qgrp scheduler-override)

[Tree] (config>port>ethernet>access>egr>qgrp scheduler-override)

Full Context

configure port ethernet access ingress queue-group scheduler-override

configure port ethernet access egress queue-group scheduler-override

Description

This command specifies the set of attributes whose values have been overridden by management on this virtual scheduler. Clearing a given flag will return the corresponding overridden attribute to the value defined on the ingress or egress queue group template.

The no form of this command removes all of the scheduler overrides and returns the scheduler’s parent weight and CIR weight, and its PIR and CIR to the values configured in the applied scheduler policy.

Platforms

All

scheduler-override

Syntax

[no] scheduler-override

Context

[Tree] (config>service>epipe>sap>egress scheduler-override)

[Tree] (config>service>cpipe>sap>ingress scheduler-override)

[Tree] (config>service>ipipe>sap>ingress scheduler-override)

[Tree] (config>service>ipipe>sap>egress scheduler-override)

[Tree] (config>service>epipe>sap>ingress scheduler-override)

[Tree] (config>service>cpipe>sap>egress scheduler-override)

Full Context

configure service epipe sap egress scheduler-override

configure service cpipe sap ingress scheduler-override

configure service ipipe sap ingress scheduler-override

configure service ipipe sap egress scheduler-override

configure service epipe sap ingress scheduler-override

configure service cpipe sap egress scheduler-override

Description

This command specifies the set of attributes whose values have been overridden by management on this virtual scheduler. Clearing a given flag will return the corresponding overridden attribute to the value defined on the SAP's ingress scheduler policy.

Platforms

All

  • configure service epipe sap ingress scheduler-override
  • configure service epipe sap egress scheduler-override
  • configure service ipipe sap ingress scheduler-override
  • configure service ipipe sap egress scheduler-override

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  • configure service cpipe sap ingress scheduler-override
  • configure service cpipe sap egress scheduler-override

scheduler-override

Syntax

[no] scheduler-override

Context

[Tree] (config>service>ies>if>sap>egress scheduler-override)

[Tree] (config>service>ies>if>sap>ingress scheduler-override)

Full Context

configure service ies interface sap egress scheduler-override

configure service ies interface sap ingress scheduler-override

Description

This command specifies the set of attributes whose values have been overridden via management on this virtual scheduler. Clearing a given flag will return the corresponding overridden attribute to the value defined on the SAP's ingress scheduler policy.

Platforms

All

scheduler-override

Syntax

[no] scheduler-override

Context

[Tree] (config>service>vprn>if>sap>ingress scheduler-override)

[Tree] (config>service>vprn>if>sap>egress scheduler-override)

Full Context

configure service vprn interface sap ingress scheduler-override

configure service vprn interface sap egress scheduler-override

Description

This command specifies the set of attributes whose values have been overridden via management on this virtual scheduler. Clearing a given flag will return the corresponding overridden attribute to the value defined on the SAP's ingress scheduler policy.

Platforms

All

scheduler-override

Syntax

[no] scheduler-override

Context

[Tree] (config>service>cust>multi-service-site>egress scheduler-override)

[Tree] (config>service>cust>multi-service-site>ingress scheduler-override)

Full Context

configure service customer multi-service-site egress scheduler-override

configure service customer multi-service-site ingress scheduler-override

Description

This command specifies the set of attributes whose values have been overridden by management on this virtual scheduler. Clearing a given flag will return the corresponding overridden attribute to the value defined on the SAP's ingress and egress scheduler policy.

The no form of the command disables the override.

Platforms

All

scheduler-parent

scheduler-parent

Syntax

scheduler-parent scheduler-name [weight weight] [level level] [cir-weight cir-weight] [cir-level cir-level]

no scheduler-parent

Context

[Tree] (config>qos>sap-egress>policer scheduler-parent)

Full Context

configure qos sap-egress policer scheduler-parent

Description

This command defines an optional parent scheduler that governs the available bandwidth given to a policer in addition to the PIR setting of the policer. When multiple schedulers, queues, or policers share a child status with the parent scheduler, the weight or level parameters define how this policer contends with the other children for the bandwidth of the parent. This command and the configuration of a SAP policer port-parent or parent arbiter are mutually exclusive.

Multiple schedulers can exist in different scheduler policies with the same scheduler-name; in this command, the associated scheduler-name pertains to a scheduler that should exist on the SAP as the policy is applied and the policer is created. When the policer is created on the SAP, the existence of the scheduler-name is dependent on a scheduler policy containing the scheduler-name being directly applied or indirectly applied (through a multiservice customer site) to the SAP. The policer accepts packets, but is not bandwidth limited by a virtual scheduler or the scheduler hierarchy applied to the SAP. The SAP to which the policer belongs displays an orphan policer status with the SapEgressPolicerMismatch flag in the show service sap-using output. The orphaned state of the policer is automatically cleared when the scheduler-name becomes available on the SAP.

The parent scheduler can be made unavailable by the removal of a scheduler policy or scheduler. When an existing parent scheduler is removed or inoperative, the policer enters the orphaned state. The policer automatically returns to normal operation when the parent scheduler is available again.

The no form of this command removes a child association with a parent scheduler. If a parent association does not currently exist, the command has no effect and no error message is returned. When a parent association has been removed, the former child policer attempts to operate based on its configured rate parameter.

Removing the parent association on the policer within the policy takes effect immediately on all policers using the SAP QoS policy.

Default

no scheduler-parent

Parameters

scheduler-name

Scheduler names are configured in the config>qos>scheduler-policy>tier context. There are no checks performed at the time of definition to ensure that the scheduler-name exists within an existing scheduler policy. For the policer to use the defined scheduler-name, the scheduler must exist on each SAP that the policer is created on. If a scheduler-name does not exist on the SAP, the policer operates in an orphaned state. Each parental association must be explicitly defined.

Values

Any string up to 32 characters, composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, etc.), the entire string must be enclosed within double quotes.

weight

Defines the relative weight of this policer in comparison with other child policers, queues, and schedulers when competing for bandwidth on the parent scheduler-name at the above-CIR priority level defined by the level parameter.

All weight values from all weighted active policers, queues, and schedulers with a common port parent are added together. Then, each individual active weight is divided by the total to determine the percentage of remaining bandwidth provided to the policer, queue, or scheduler after the higher priority level children have been serviced. A weight is considered to be active when the applicable policer, queue, or scheduler has not reached its maximum rate and still has packets to transmit. All child policers, queues, and schedulers with a weight of 0 are considered to have the lowest priority at the configured level and are not serviced until all non-zero weighted policers, queues, and schedulers at that level are operating at the maximum bandwidth or are idle.

Values

0 to 100

Default

1

level

Defines the level of hierarchy when compared with other policers, queues, and schedulers when competing for bandwidth on the parent scheduler-name.

Children of the parent scheduler with a lower priority will not receive bandwidth until all children with a higher priority have either reached their maximum bandwidth or are idle. Children with the same level are serviced in relation to their relative weights.

Values

1 to 8 (8 is the highest priority)

Default

1

cir-weight

Defines the relative weight of this policer in comparison with other child policers, queues, or schedulers competing for bandwidth on the parent scheduler-name at the within-CIR priority level defined by the cir-level parameter.

All cir-weight values from all weighted active policers, queues, and schedulers with a common parent are added together. Then, each individual active weight is divided by the total to determine the percentage of remaining bandwidth provided to the policer, queue, or scheduler after the higher priority level children have been serviced. A weight is considered to be active when the applicable policer, queue, or scheduler has not reached its maximum rate and still has packets to transmit.

The weight is specified as an integer value from 0 to 100, with 100 being the highest weight. When the cir-weight parameter is set to a value of 0, the policer receives bandwidth only after the other children with a non-zero weight at this level.

Values

0 to 100

Default

1

cir-level

Defines the level of hierarchy when compared with other policers, queues, and schedulers that the policer uses to receive bandwidth for its within-CIR offered load. If the cir-level parameter is set to a value of 0 (the default value), the policer does not receive bandwidth during the schedulers within-CIR pass and the cir-weight parameter is ignored. If the cir-level parameter is 1 or greater, the cir-weight parameter is used.

Values

0 to 8 (8 is the highest priority)

Default

0

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-1se, 7750 SR-2s, 7750 SR-2se, 7750 SR-7s, VSR

scheduler-parent

Syntax

scheduler-parent scheduler-name [weight weight] [level level] [cir-weight cir-weight] [cir-level cir-level]

no scheduler-parent

Context

[Tree] (config>qos>sap-ingress>policer scheduler-parent)

Full Context

configure qos sap-ingress policer scheduler-parent

Description

This command defines an optional parent scheduler that governs the available bandwidth given to a policer in addition to the PIR setting of the policer. When multiple schedulers, queues, or policers share a child status with the parent scheduler, the weight or level parameters define how this policer contends with the other children for the bandwidth of the parent. This command and the configuration of a SAP policer scheduler-parent or parent arbiter are mutually exclusive.

Multiple schedulers can exist in different scheduler policies with the same scheduler-name; in this command, the associated scheduler-name pertains to a scheduler that should exist on the SAP as the policy is applied and the policer is created. When the policer is created on the SAP, the existence of the scheduler-name is dependent on a scheduler policy containing the scheduler-name being directly applied or indirectly applied (through a multiservice customer site) to the SAP. The policer accepts packets, but is not bandwidth limited by a virtual scheduler or the scheduler hierarchy applied to the SAP.

The parent scheduler can be made unavailable by the removal of a scheduler policy or scheduler. When an existing parent scheduler is removed or inoperative, the policer enters the orphaned state. The policer automatically returns to normal operation when the parent scheduler is available again.

The no form of this command removes a child association with a parent scheduler. If a parent association does not currently exist, the command has no effect and no error message is returned. When a parent association has been removed, the former child policer attempts to operate based on its configured rate parameter.

Removing the parent association on the policer within the policy takes effect immediately on all policers using the SAP QoS policy.

Default

no scheduler-parent

Parameters

scheduler-name

Scheduler names are configured in the config>qos>scheduler-policy>tier context. There are no checks performed at the time of definition to ensure that the scheduler-name exists within an existing scheduler policy. For the policer to use the defined scheduler-name, the scheduler must exist on each SAP that the policer is created on. If a scheduler-name does not exist on the SAP, the policer operates in an orphaned state. Each parental association must be explicitly defined.

Values

Any string up to 32 characters, composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, etc.), the entire string must be enclosed within double quotes.

weight

Defines the relative weight of this policer in comparison with other child policers, queues, and schedulers when competing for bandwidth on the parent scheduler-name at the above-CIR priority level defined by the level parameter.

All weight values from all weighted active policers, queues, and schedulers with a common port parent are added together. Then, each individual active weight is divided by the total to determine the percentage of remaining bandwidth provided to the policer, queue, or scheduler after the higher priority level children have been serviced. A weight is considered to be active when the applicable policer, queue, or scheduler has not reached its maximum rate and still has packets to transmit. All child policers, queues, and schedulers with a weight of 0 are considered to have the lowest priority at the configured level and are not serviced until all non-zero weighted policers, queues, and schedulers at that level are operating at the maximum bandwidth or are idle.

Values

0 to 100

Default

1

level

Defines the level of hierarchy when compared with other policers, queues, and schedulers when competing for bandwidth on the parent scheduler-name.

Children of the parent scheduler with a lower priority will not receive bandwidth until all children with a higher priority have either reached their maximum bandwidth or are idle. Children with the same level are serviced in relation to their relative weights.

Values

1 to 8 (8 is the highest priority)

Default

1

cir-weight

Defines the relative weight of this policer in comparison with other child policers, queues, or schedulers competing for bandwidth on the parent scheduler-name at the within-CIR priority level defined by the cir-level parameter.

All cir-weight values from all weighted active policers, queues, and schedulers with a common parent are added together. Then, each individual active weight is divided by the total to determine the percentage of remaining bandwidth provided to the policer, queue, or scheduler after the higher priority level children have been serviced. A weight is considered to be active when the applicable policer, queue, or scheduler has not reached its maximum rate and still has packets to transmit.

The weight is specified as an integer value from 0 to 100, with 100 being the highest weight. When the cir-weight parameter is set to a value of 0, the policer receives bandwidth only after the other children with a non-zero weight at this level.

Values

0 to 100

Default

1

cir-level

Defines the level of hierarchy when compared with other policers, queues, and schedulers that the policer uses to receive bandwidth for its within-CIR offered load. If the cir-level parameter is set to a value of 0 (the default value), the policer does not receive bandwidth during the schedulers within-CIR pass and the cir-weight parameter is ignored. If the cir-level parameter is 1 or greater, the cir-weight parameter is used.

Values

0 to 8 (8 is the highest priority)

Default

0

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-1se, 7750 SR-2s, 7750 SR-2se, 7750 SR-7s

scheduler-policy

scheduler-policy

Syntax

scheduler-policy scheduler-policy-name

no scheduler-policy

Context

[Tree] (config>subscr-mgmt>sla-prof>egress scheduler-policy)

Full Context

configure subscriber-mgmt sla-profile egress scheduler-policy

Description

This command specifies a scheduler policy to associate to the sla profile. Scheduler policies are configured in the configure>qos>scheduler>policy context. Each scheduler policy is divided up into groups of schedulers based on the tier each scheduler is created under. A tier is used to give structure to the schedulers within a policy and define rules for parent scheduler associations. The policy defines the hierarchy and operating parameters for virtual schedulers.

The no form of this command removes the scheduler-policy-name from the configuration.

Parameters

scheduler-policy-name

Specifies an existing scheduler policy name up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

scheduler-policy

Syntax

scheduler-policy scheduler-policy-name

no scheduler-policy

Context

[Tree] (config>subscr-mgmt>sub-profile>ingress scheduler-policy)

[Tree] (config>subscr-mgmt>sub-profile>egress scheduler-policy)

Full Context

configure subscriber-mgmt sub-profile ingress scheduler-policy

configure subscriber-mgmt sub-profile egress scheduler-policy

Description

This command specifies a scheduler policy to associate to the subscriber profile. Scheduler policies are configured in the configure>qos>scheduler>policy context. Each scheduler policy is divided up into groups of schedulers based on the tier each scheduler is created under. A tier is used to give structure to the schedulers within a policy and define rules for parent scheduler associations. The policy defines the hierarchy and operating parameters for virtual schedulers.

The no form of this command reverts to the default.

Parameters

scheduler-policy-name

Specify an existing scheduler policy name up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

scheduler-policy

Syntax

scheduler-policy scheduler-policy-name

no scheduler-policy

Context

[Tree] (config>service>ies>sub-if>grp-if>sap>ingress scheduler-policy)

[Tree] (config>service>ies>sap>ingress scheduler-policy)

[Tree] (config>service>ies>sap>egress scheduler-policy)

[Tree] (config>service>vprn>sub-if>grp-if>sap>egress scheduler-policy)

[Tree] (config>service>ies>sub-if>grp-if>sap>egress scheduler-policy)

[Tree] (config>service>vprn>sub-if>grp-if>sap>ingress scheduler-policy)

Full Context

configure service ies subscriber-interface group-interface sap ingress scheduler-policy

configure service ies sap ingress scheduler-policy

configure service ies sap egress scheduler-policy

configure service vprn subscriber-interface group-interface sap egress scheduler-policy

configure service ies subscriber-interface group-interface sap egress scheduler-policy

configure service vprn subscriber-interface group-interface sap ingress scheduler-policy

Description

This command applies an existing scheduler policy to an ingress or egress scheduler used by ingress SAP queues or egress SAP policers and queues associated with this multi-service customer site. The schedulers defined in the scheduler policy can only be created once the customer site has been appropriately assigned to a chassis port, channel or slot. Scheduler policies are defined in the config>qos>scheduler-policy scheduler-policy-name context.

The no form of this command removes the configured ingress or egress scheduler policy from the multi-service customer site. When the policy is removed, the schedulers created due to the policy are removed also making them unavailable for the SAP policers or queues associated with the customer site. Policers and queues that lose their parent scheduler association are deemed to be orphaned and are no longer subject to a virtual scheduler. The SAPs that have policers or queues reliant on the removed schedulers enter into an operational state depicting the orphaned status of one or more policers or queues. When the no form of this command executed, the customer site ingress or egress node will not contain an applied scheduler policy.

Parameters

scheduler-policy-name:

Specifies the scheduler policy name to apply to an existing scheduler policy that was created in the config>qos>scheduler-policy scheduler-policy-name context to create the hierarchy of ingress or egress virtual schedulers. The scheduler names defined within the policy are created and made available to any ingress queues or egress policers and queues created on associated SAPs.

Values

Any existing valid scheduler policy name.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

scheduler-policy

Syntax

scheduler-policy scheduler-policy-name

no scheduler-policy

Context

[Tree] (config>port>ethernet>access>egress>vport scheduler-policy)

Full Context

configure port ethernet access egress vport scheduler-policy

Description

This command specifies a scheduler policy to associate to the Vport. Scheduler policies are configured in the configure>qos>scheduler>policy context. Each scheduler policy is divided up into groups of schedulers based on the tier each scheduler is created under. A tier is used to give structure to the schedulers within a policy and define rules for parent scheduler associations. The policy defines the hierarchy and operating parameters for virtual schedulers.

The no form of this command removes the configured egress scheduler policy from the Vport.

The agg-rate rate, port-scheduler-policy and scheduler-policy commands are mutually exclusive. Changing between the use of a scheduler policy and the use of an agg-rate/port-scheduler-policy involves removing the existing command and applying the new command.

The configuration of a scheduler policy under a Vport is mutually exclusive with the configuration of the egress-rate-modify parameter.

The no form of this command reverts to the default.

Parameters

scheduler-policy-name

Specifies the scheduler-policy-name parameter applies an existing scheduler policy that was created in the config>qos>scheduler-policy scheduler-policy-name context to create the hierarchy of egress virtual schedulers.

Platforms

All

scheduler-policy

Syntax

scheduler-policy scheduler-policy-name

no scheduler-policy

Context

[Tree] (config>service>vprn>if>sap>egress scheduler-policy)

[Tree] (config>service>ies>if>sap>ingress scheduler-policy)

[Tree] (config>service>vpls>sap>ingress scheduler-policy)

[Tree] (config>service>vprn>if>sap>ingress scheduler-policy)

[Tree] (config>service>vpls>sap>egress scheduler-policy)

[Tree] (config>service>ies>if>sap>egress scheduler-policy)

Full Context

configure service vprn interface sap egress scheduler-policy

configure service ies interface sap ingress scheduler-policy

configure service vpls sap ingress scheduler-policy

configure service vprn interface sap ingress scheduler-policy

configure service vpls sap egress scheduler-policy

configure service ies interface sap egress scheduler-policy

Description

This command applies an existing scheduler policy to an ingress or egress scheduler used by SAP queues associated with this multi-service customer site. The schedulers defined in the scheduler policy can only be created once the customer site has been appropriately assigned to a chassis port, channel or slot. Scheduler policies are defined in the config>qos>scheduler-policy scheduler-policy-name context.

The no form of this command removes the configured ingress or egress scheduler policy from the multi-service customer site. When the policy is removed, the schedulers created due to the policy are removed also making them unavailable for the ingress SAP queues and egress SAP policers and queues associated with the customer site. Policers and queues that lose their parent scheduler association are deemed to be orphaned and are no longer subject to a virtual scheduler. The SAPs that have policers or queues reliant on the removed schedulers enter into an operational state depicting the orphaned status of one or more policers or queues. When the no scheduler-policy command is executed, the customer site’s ingress or egress node will not contain an applied scheduler policy.

Parameters

scheduler-policy-name

Specifies that the scheduler-policy-name is applied to an existing scheduler policy that was created in the config>qos>scheduler-policy scheduler-policy-name context to create the hierarchy of ingress or egress virtual schedulers. The scheduler names defined within the policy are created and made available to any ingress or egress queues created on associated SAPs.

Values

Any existing valid scheduler policy name.

Platforms

All

scheduler-policy

Syntax

scheduler-policy scheduler-policy-name

no scheduler-policy

Context

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>egress scheduler-policy)

Full Context

configure service ies subscriber-interface group-interface wlan-gw egress scheduler-policy

Description

This command configures the identifier of the egress scheduler policy associated with each wlan-gw tunnel of this interface.

The no form of this command removes the scheduler policy name from the configuration.

Parameters

scheduler-policy-name

Specifies the identifier of the egress scheduler policy associated with each wlan-gw tunnel of this interface.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

scheduler-policy

Syntax

scheduler-policy scheduler-policy-name

no scheduler-policy

Context

[Tree] (config>port>ethernet>ingress>queue-group scheduler-policy)

[Tree] (config>port>ethernet>egress>queue-group scheduler-policy)

[Tree] (config>port>ethernet>network>egress>queue-group scheduler-policy)

Full Context

configure port ethernet ingress queue-group scheduler-policy

configure port ethernet egress queue-group scheduler-policy

configure port ethernet network egress queue-group scheduler-policy

Description

This command configures a scheduler policy for the egress queue group.

Parameters

scheduler-policy-name

Specifies the scheduler policy name, up to 32 characters.

Platforms

All

scheduler-policy

Syntax

scheduler-policy scheduler-policy-name

no scheduler-policy

Context

[Tree] (config>service>ipipe>sap>egress scheduler-policy)

[Tree] (config>service>cpipe>sap>egress scheduler-policy)

[Tree] (config>service>cpipe>sap>ingress scheduler-policy)

[Tree] (config>service>ipipe>sap>ingress scheduler-policy)

[Tree] (config>service>epipe>sap>ingress scheduler-policy)

[Tree] (config>service>epipe>sap>egress scheduler-policy)

Full Context

configure service ipipe sap egress scheduler-policy

configure service cpipe sap egress scheduler-policy

configure service cpipe sap ingress scheduler-policy

configure service ipipe sap ingress scheduler-policy

configure service epipe sap ingress scheduler-policy

configure service epipe sap egress scheduler-policy

Description

This command applies an existing scheduler policy to an ingress or egress scheduler used by SAP queues associated with this multi-service customer site. The schedulers defined in the scheduler policy can only be created when the customer site has been appropriately assigned to a chassis port, channel or slot. Scheduler policies are defined in the config>qos>scheduler-policy scheduler-policy-name context.

The no form of this command removes the configured ingress or egress scheduler policy from the multi-service customer site. When the policy is removed, the schedulers created due to the policy are removed also making them unavailable for the ingress SAP queues associated with the customer site. Policers or queues that lose their parent scheduler association are deemed to be orphaned and are no longer subject to a virtual scheduler. The SAPs that have policers or queues reliant on the removed schedulers enter into an operational state depicting the orphaned status of one or more policers or queues. When the no scheduler-policy command is executed, the customer site ingress or egress node will not contain an applied scheduler policy.

Parameters

scheduler-policy-name

The scheduler-policy-name parameter applies an existing scheduler policy that was created in the config>qos>scheduler-policy scheduler-policy-name context to create the hierarchy of ingress or egress virtual schedulers. The scheduler names defined within the policy are created and made available to any ingress or egress queues and to egress policers managed by HQoS created on associated SAPs.

Platforms

All

  • configure service epipe sap ingress scheduler-policy
  • configure service ipipe sap ingress scheduler-policy
  • configure service epipe sap egress scheduler-policy
  • configure service ipipe sap egress scheduler-policy

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  • configure service cpipe sap ingress scheduler-policy
  • configure service cpipe sap egress scheduler-policy

scheduler-policy

Syntax

scheduler-policy scheduler-policy-name

no scheduler-policy

Context

[Tree] (config>service>vpls>sap>egress>encap-defined-qos>encap-group scheduler-policy)

Full Context

configure service vpls sap egress encap-defined-qos encap-group scheduler-policy

Description

This command configures the scheduler policy.

Platforms

All

scheduler-policy

Syntax

scheduler-policy scheduler-policy-name [create]

no scheduler-policy scheduler-policy-name

Context

[Tree] (config>qos scheduler-policy)

Full Context

configure qos scheduler-policy

Description

Each scheduler policy is divided up into groups of schedulers based on the tier each scheduler is created under. A tier is used to give structure to the schedulers within a policy and define rules for parent scheduler associations.

The scheduler-policy command creates a scheduler policy or allows editing of an existing policy. The policy defines the hierarchy and operating parameters for virtual schedulers. Creating a policy does not create the schedulers; it only provides a template for the schedulers to be created when the policy is associated with a SAP or multiservice site.

Each scheduler policy must have a unique name within the context of the system. Modifications made to an existing policy are executed on all schedulers that use the policy. This can cause queues or schedulers to become orphaned (invalid parent association) and adversely affect the ability of the system to enforce SLAs.

If a scheduler-policy-name does not exist, it is assumed that an attempt is being made to create a new policy. The success of the command execution is dependent on the following:

  1. The maximum number of scheduler policies has not been configured.

  2. The provided scheduler-policy-name is valid.

  3. The create keyword is entered with the command if the system is configured to require it (enabled in the environment create command).

When the maximum number of scheduler policies has been exceeded, a configuration error occurs, the command will not execute, and the CLI context will not change.

If the provided scheduler-policy-name is invalid according to the criteria below, a name syntax error occurs, the command will not execute, and the CLI context will not change.

Parameters

scheduler-policy-name

The name of the scheduler policy.

Values

Valid names consist of any string up to 32 characters, composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, etc.), the entire string must be enclosed within double quotes.

Platforms

All

scheduler-policy

Syntax

scheduler-policy scheduler-policy-name

no scheduler-policy

Context

[Tree] (config>service>cust>multi-service-site>egress scheduler-policy)

[Tree] (config>service>cust>multi-service-site>ingress scheduler-policy)

Full Context

configure service customer multi-service-site egress scheduler-policy

configure service customer multi-service-site ingress scheduler-policy

Description

This command applies an existing scheduler policy to an ingress or egress scheduler used by SAP queues or, at egress only, policers associated with this multi-service customer site. The schedulers defined in the scheduler policy can only be created once the customer site has been appropriately assigned to a chassis port, channel or slot. Scheduler policies are defined in the config>qos>scheduler-policy scheduler-policy-name context.

The no form of this command removes the configured ingress or egress scheduler policy from the multi-service customer site. When the policy is removed, the schedulers created due to the policy are removed also making them unavailable for the SAP policers and queues associated with the customer site. Policers and queues that lose their parent scheduler association are deemed to be orphaned and are no longer subject to a virtual scheduler.

The SAPs that have ingress queues reliant on the removed schedulers enter into an operational state depicting the orphaned status of one or more policers and queues. When the no scheduler-policy command is executed, the customer site ingress or egress node will not contain an applied scheduler policy.

Parameters

scheduler-policy-name

Applies an existing scheduler policy that was created in the config>qos>scheduler-policy scheduler-policy-name context to create the hierarchy of ingress or egress virtual schedulers. The scheduler names defined within the policy are created and made available to any ingress or egress queues and egress policers managed by HQoS created on associated SAPs.

Values

Any existing valid scheduler policy name up to 32 characters in length.

Platforms

All

scheduler-policy

Syntax

scheduler-policy src-name dst-name [overwrite]

Context

[Tree] (config>qos>copy scheduler-policy)

Full Context

configure qos copy scheduler-policy

Description

This command copies existing QoS policy entries for a QoS policy to another QoS policy.

The copy command is a configuration-level maintenance tool used to create new policies using existing policies. It also allows bulk modifications to an existing policy with the use of the overwrite keyword.

If overwrite is not specified, an error will occur if the destination policy exists.

Parameters

src-name dst-name

Indicates that the source policy and the destination policy are scheduler policy. Specify the source policy that the copy command will attempt to copy from and specify the destination policy to which the command will copy a duplicate of the policy.

overwrite

Forces the destination policy name to be copied as specified. When forced, everything in the existing destination policy will be completely overwritten with the contents of the source policy.

Platforms

All

scheduling-class

scheduling-class

Syntax

scheduling-class class rate rate

scheduling-class class weight weight-in-group

no scheduling-class class

Context

[Tree] (config>port>ethernet>egress>hs-sched-ovr scheduling-class)

Full Context

configure port ethernet egress hs-scheduler-overrides scheduling-class

Description

This command overrides the scheduling class configuration in the HS scheduler policy applied to the port egress. The scheduling class rate or weight within the WRR group can be overridden.

The no form of this command removes the scheduling class override parameters from the port egress configuration.

Parameters

class

Specifies the scheduling class.

Values

1 to 6

rate

Specifies the explicit maximum frame based bandwidth limit, in megabits per second, for this HS scheduler policy scheduling class. The rate keyword must be followed by either the keyword max or a rate specified in megabits per second.

Values

1 to 100000, max

The max keyword specifies that a limit is not enforced for the specified class. The max keyword is mutually exclusive to the rate value and when specified, must directly follow the rate keyword. Setting the rate of the class will fail when the class is currently a member of a group.

weight-in-group

Specifies the weight the HS scheduler policy should apply to this scheduling class within the group in which it belongs. The weight-in-group parameter must follow the weight keyword and is used to specify the relative weight of class to the other scheduling classes within the group. Setting the weight will fail if the scheduling class is not currently configured in a group.

Values

1 to 127

Platforms

7750 SR-7/12/12e

scheduling-class

Syntax

scheduling-class class-id

no scheduling-class

Context

[Tree] (config>service>vprn>if>sap scheduling-class)

Full Context

configure service vprn interface sap scheduling-class

Description

This command specifies the scheduling class to use for this SAP.

Parameters

class-id

Specifies the scheduling class to use for this SAP.

Values

0 to 3

Default

0

Platforms

All

scheduling-class

Syntax

scheduling-class class-id group group-id [weight weight-in-group]

scheduling-class class-id rate rate

no scheduling-class class-id

Context

[Tree] (config>qos>hs-scheduler-policy scheduling-class)

Full Context

configure qos hs-scheduler-policy scheduling-class

Description

This command configures the behavior of a specific scheduling class on all HSQ schedulers associated with the policy. The scheduler-class command performs one of two operations: it configures a maximum rate for the scheduling class or places the scheduling class into the weighted scheduling group. The two operations are mutually exclusive.

By default, none of the scheduling classes are members of the weighted scheduling group and each class is set to a rate limit of max (no rate limit applied).

Specifying Scheduling Class Rate (or Removing the Scheduling Class from Group) — If the scheduling-class command is executed with the rate keyword specified, either max or a specified rate value must follow. If a class-id was previously mapped into the weighted scheduling group, the class is removed from the group. However, if removing the class from the group causes the group to no longer have contiguous class members, the command fails with no effect on the specified class. A "non-contiguous grouping error” is returned. The lowest or highest members within a weighted group must be removed prior to removing the middle members. For example, if scheduling classes 3, 4, and 5 were members of weighted group 1, class 4 cannot be removed first.

This command using the rate keyword also fails when an override for the group weight is in place on the scheduling class within a scheduler associated with the policy. The override expects the class to be associated with a weighted scheduling group and the policy rate definition is attempting to remove the class from the group. An "override mismatch” error is generated, specifying the scheduling object where the override exists.

After a rate has been successfully defined for a scheduling class, the specified rate is automatically updated on all HSQ scheduler instances associated with the scheduling policy. The exception is where the scheduler instance has a local override for the rate on the scheduling class.

Specifying Scheduling Class Weighted Group Membership — If the scheduling-class command is executed with the group keyword specified, the group ID value of 1 must follow. The corresponding optional weight keyword is used to specify the weight of the scheduling class within the group. If weight is not specified, the default weight of 1 is used. If the specified scheduling class is not contiguous with the other scheduling classes in the group, the command fails with no change to the current state of the scheduling class and a "non-contiguous grouping” error is returned, specifying the weighted scheduling group and the current group members.

The scheduling-class command fails using the group keyword when a rate override for the scheduling class exists on an HSQ scheduler instance associated with the policy. The rate override for the scheduling class indicates the class is directly attached to a strict priority level, conflicting with the policy group keyword trying to place the class in the specified group. The command fails without affecting the scheduling class definition on the policy and returns an error specifying the scheduling object where the override exists.

Other Override Constraints — The scheduling overrides cannot change or remove a scheduling class from a policy-defined weighted group membership.

The no form of the command returns the scheduling class represented by class-id to the default behavior. The default behavior for a scheduling class is to not be a member of the weighted scheduling class group and have a rate set to max. The no scheduling-class command fails if the scheduling class is currently a member of the weighted scheduling class group and a weight override is in effect on a scheduling object for the class, in which case an error is returned.

Parameters

class-id

Specifies the scheduling class for HS scheduler policy. The class-id value is a required parameter that specifies which scheduling class the scheduling-class command is acting upon.

Values

1 to 6

group-id

Specifies the group this HS scheduler policy scheduling class belongs to. The group and the rate keywords are mutually exclusive when executing this command. A group ID value of 1 must follow the group keyword. The group keyword removes the class ID from its inherent strict scheduling level and places it into the specified group ID. The associated weight parameter is optional and is used to specify the weight of a class ID within the weighted scheduling class group. Specifying the group parameter while an override for the scheduling class exists for rate causes the scheduling-class command to fail.

Values

1

weight-in-group

Specifies the weight the HS scheduler policy should apply to this scheduling class within the group in which it belongs. This keyword is optional and must follow the group parameter when specified. The weight-in-group parameter must follow the weight keyword and is used to specify the relative weight of the class-id to the other scheduling classes within the group. If the group is specified without the weight parameter, a default weight of 1 is used.

Values

1 to 127

rate

Specifies the explicit maximum frame-based bandwidth limit, in megabits per second, for this HS scheduler policy scheduling class. The rate and group keywords are mutually exclusive. Either the rate or group keyword must be specified when executing this command. When specified, the rate keyword must be followed by either the keyword max or a rate specified in megabits per second. The specified rate can be overridden at the port Ethernet egress using the scheduler override functions. A newly-created HS scheduler policy defaults each scheduling class to have its rate set to max and the weighted scheduling class group has no members.

Values

1 to 100000, max

The max keyword specifies that a limit is not enforced for the specified class ID and that the class ID is not a member of a weighted scheduling class group. The max keyword and the rate value are mutually exclusive; when max is specified, it must directly follow the rate keyword. Setting the rate of the class fails when the class currently has a group weight override defined on a scheduling object.

Platforms

7750 SR-7/12/12e

schema-path

schema-path

Syntax

schema-path url-string

no schema-path

Context

[Tree] (config>system>management-interface schema-path)

Full Context

configure system management-interface schema-path

Description

This command specifies the schema path where the SR OS YANG modules can be placed by the user before using a <get-schema> request. Nokia recommends that the URL string not exceed 135 characters for the <get-schema> request to work correctly with all schema files.

If this command is not configured, the software upgrade process manages the YANG schema files to ensure the schema files are synchronized with the software image on both the primary and standby CPM.

The no form of this command reverts to the default value.

Default

no schema-path

Parameters

url-string

Specifies the schema path URL up to 180 characters. However, Nokia recommends that the string shall not exceed 135 characters to ensure that the <get-schema> request works properly with all schema files.

Platforms

All

scope

scope

Syntax

scope {exclusive | template}

no scope

Context

[Tree] (config>service>mrp>mrp-policy scope)

Full Context

configure service mrp mrp-policy scope

Description

This command configures the filter policy scope as exclusive or template. If the scope of the policy is template and is applied to one or more services, the scope cannot be changed.

The no form of this command sets the scope of the policy to the default of template.

Default

scope template

Parameters

exclusive

When the scope of a policy is defined as exclusive, the policy can only be applied to a single entity (SAP or SDP). Attempting to assign the policy to a second entity will result in an error message. If the policy is removed from the entity, it will become available for assignment to another entity.

template

When the scope of a policy is defined as template, the policy can be applied to multiple SAPs or network ports.

Platforms

All

scope

Syntax

scope {exclusive | template}

no scope

Context

[Tree] (config>qos>sap-ingress scope)

Full Context

configure qos sap-ingress scope

Description

This command configures the Service Ingress QoS policy scope as exclusive or template.

The policy’s scope cannot be changed if the policy is applied to a service.

The no form of this command sets the scope of the policy to the default of template.

Default

scope template

Parameters

exclusive

When the scope of a policy is defined as exclusive, the policy can only be applied to one SAP. If a policy with an exclusive scope is assigned to a second SAP, an error message is generated. If the policy is removed from the exclusive SAP, it will become available for assignment to another exclusive SAP.

The system default policies cannot be put into the exclusive scope. An error will be generated if scope exclusive is executed in any policies with a policy-id equal to 1.

template

When the scope of a policy is defined as template, the policy can be applied to multiple SAPs on the router.

Default QoS policies are configured with template scopes. An error is generated when the template scope parameter to exclusive scope on default policies is modified.

Platforms

All

scope

Syntax

scope {exclusive | template}

no scope

Context

[Tree] (config>qos>sap-egress scope)

Full Context

configure qos sap-egress scope

Description

Enter the scope of this policy. The scope of the policy cannot be changed if the policy is applied to one or more services.

The no form of this command sets the scope of the policy to the default of template.

Default

scope template

Parameters

exclusive

When the scope of a policy is defined as exclusive, the policy can only be applied to a single SAP. Attempting to assign the policy to a second SAP will result in an error message. If the policy is removed from the exclusive SAP, it will become available for assignment to another exclusive SAP.

The system default policies cannot be put into the exclusive scope. An error will be generated if scope exclusive is executed in any policies with a policy-id equal to 1.

template

When the scope of a policy is defined as template, the policy can be applied to multiple SAPs on the router.

Platforms

All

scope

Syntax

scope {exclusive | template}

no scope

Context

[Tree] (config>qos>network scope)

Full Context

configure qos network scope

Description

This command configures the network policy scope as exclusive or template. The policy’s scope cannot be changed if the policy is applied to an interface.

The no form of this command sets the scope of the policy to the default of template.

Default

scope template

Parameters

exclusive

When the scope of a policy is defined as exclusive, the policy can only be applied to one interface. If a policy with an exclusive scope is assigned to a second interface, an error message is generated. If the policy is removed from the exclusive interface, it will become available for assignment to another exclusive interface.

The system default policies cannot be put into the exclusive scope. An error will be generated if the scope exclusive command is executed in any policies with a policy-id equal to 1.

template

When the scope of a policy is defined as template, the policy can be applied to multiple interfaces on the router.

Default QoS policies are configured with template scopes. An error is generated if the template scope parameter is modified to exclusive scope on default policies.

Platforms

All

scope

Syntax

scope {exclusive | template | embedded | system}

scope {exclusive | template}

no scope

Context

[Tree] (config>filter>ip-filter scope)

[Tree] (config>filter>ip-exception scope)

[Tree] (config>filter>mac-filter scope)

[Tree] (config>filter>ipv6-filter scope)

Full Context

configure filter ip-filter scope

configure filter ip-exception scope

configure filter mac-filter scope

configure filter ipv6-filter scope

Description

This command configures the filter policy scope as exclusive, template, embedded or system.

The scope of the policy cannot be changed when:

  • the scope is template and the policy is applied to one or more services or network interfaces

  • the scope is embedded and the policy is embedded by another policy

Changing the scope to/from system is only allowed when a policy is not active and the policy has no entries configured.

The no form of the command sets the scope of the policy to the default of template.

Default

scope template

Parameters

exclusive

Specifies that the policy can only be applied to a single entity. Attempting to assign the policy to a second entity will result in an error message.

template

Specifies that the policy can be applied to multiple entities.

embedded

Specifies that the policy cannot be applied directly. The policy defines embedded filter rules, which are embedded by other exclusive/template/system filter policies. The embedded scope is supported for IPv4 and IPv6 filter policies only.

system

Specifies that the policy defines system-wide filter rules. To apply system policy rules, activate system filter and chain exclusive/template ACL filter policy to the system filter. The system scope is supported for IPv4 and IPv6 filter policies only.

Platforms

All

  • configure filter ipv6-filter scope
  • configure filter mac-filter scope
  • configure filter ip-filter scope

VSR

  • configure filter ip-exception scope

scp

scp

Syntax

scp local-file-url destination-file-url [router router-instance] [force]

scp local-file-url destination-file-url [force] service service-name

Context

[Tree] (file scp)

Full Context

file scp

Description

This command copies a local file to a remote host file system. It uses ssh for data transfer, and uses the same authentication and provides the same security as ssh. The following prompt appears:

"Are you sure (y/n)?” The destination must specify a user and a host.

Parameters

local-file-url

Specifies the local source file or directory.

Values

[cflash-id/] file-path

up to 200 characters

cflash-id

cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:

destination-file-url

Specifies the destination file.

Values

destination-file-*: user@hostname:file-path - up to 255 characters

user

up to 32 characters

hostname

[dns-name | ipv4-address | "["ipv6-address”]”]

ipv4-address

a.b.c.d

ipv6-address

x:x:x:x:x:x:x:x[-interface]

x:x:x:x:x:x:d.d.d.d[-interface]

x - [0 to FFFF]H

d - [0 to 255]D

interface - up to 32 characters, mandatory for link local addresses

dns-name

up to 128 characters

file-path

up to 200 characters, directory length up to 99 characters

user

Specifies the SSH user.

hostname

Specifies the remote host IP address of DNS name.

file-path

Specifies the destination path.

router-instance

Specifies the router name or service ID used to specify the router instance.

Values

router-name

"Base”, "management”, "vpls-management”

vprn-service-id

1 to 2147483647

Default

Base

force

Forces an immediate copy of the specified file. The command file scp local-file-url destination-file-url [router router-instance] force executes the command without displaying a user prompt message.

service-name

Specifies the service name used to identify the router instance. The service name can be a maximum of 64 characters long.

Platforms

All

scramble

scramble

Syntax

[no] scramble

Context

[Tree] (config>port>tdm>e3 scramble)

[Tree] (config>port>tdm>ds3 scramble)

Full Context

configure port tdm e3 scramble

configure port tdm ds3 scramble

Description

This command enables payload scrambling on channel groups.

Scrambling randomizes the pattern of 1s and 0s carried in a SONET frame. Rearranging or scrambling the pattern prevents continuous strings of all 1s or all 0s and meets the needs of physical layer protocols that rely on sufficient transitions between 1s and 0s to maintain clocking.

The no form of this command disables scrambling.

Default

no scramble

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

scramble

Syntax

[no] scramble

Context

[Tree] (config>port>sonet-sdh>path scramble)

Full Context

configure port sonet-sdh path scramble

Description

This command enables SONET/SDH payload scrambling. Scrambling randomizes the pattern of 1s and 0s carried in a SONET frame. Rearranging or scrambling the pattern prevents continuous strings of all 1s or all 0s and meets the needs of physical layer protocols that rely on sufficient transitions between 1s and 0s to maintain clocking.

For ATM, this command enables or disables ATM cell-level payload scrambling/descrambling using x43+1 polynomial as defined in ITU-T I.432.1. Scrambling is enabled by default for the ATM path/channel. Note that this scrambling is done in addition to SONET/SDH frame scrambling/descrambling, which is always enabled in the framer.

The no form of this command disables scrambling.

Default

no scramble

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

script

script

Syntax

script script

Context

[Tree] (debug>dynsvc>scripts script)

Full Context

debug dynamic-services scripts script

Description

Commands in this context configure dynamic services script debugging for a specific script.

Parameters

script

Specifies the script name.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

script

Syntax

script script-name [owner script-owner]

no script

Context

[Tree] (config>system>script-control>script-policy script)

[Tree] (config>system>script-control script)

Full Context

configure system script-control script-policy script

configure system script-control script

Description

This command is used to configure a script to be run.

The no form of the command removes the script.

Default

no script

Parameters

script-name

Specifies the name of the script. Can be up to 32 characters.

script-owner

Specifies the name of the script owner. Can be up to 32 characters.

The owner is an arbitrary name and not necessarily a user name. Commands in the scripts are not authorized against the owner. The configure system security cli-script authorization x cli-user command determines the user context against which commands in the scripts are authorized.

Default

"TiMOS CLI”

Platforms

All

script-all-info

script-all-info

Syntax

script-all-info

Context

[Tree] (debug>python>py-script script-all-info)

Full Context

debug python python-script script-all-info

Description

This command enables the script-compile-error, script-export-variables, script-output, script-output-on-error, and script-runtime-error functionalities.

Platforms

All

script-all-info

Syntax

script-all-info

Context

[Tree] (debug>subscr-mgmt>sub-ident-plcy script-all-info)

Full Context

debug subscriber-mgmt sub-ident-policy script-all-info

Description

This command enables the script-compile-error, script-export-variables, script-output, script-output-on-error, and script-runtime-error functionalities.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

script-compile-error

script-compile-error

Syntax

[no] script-compile-error

Context

[Tree] (debug>python>py-script script-compile-error)

Full Context

debug python python-script script-compile-error

Description

This command sends the traceback of the compile error to the logger. The traceback contains detailed information about where and why the compilation fails. The compilation takes place when the CLI user changes the admin state of the Python script from shutdown to no shutdown.

Platforms

All

script-compile-error

Syntax

[no] script-compile-error

Context

[Tree] (debug>subscr-mgmt>sub-ident-plcy script-compile-error)

Full Context

debug subscriber-mgmt sub-ident-policy script-compile-error

Description

This command send the traceback of the compile error to the logger. The traceback contains detailed information about where and why the compilation fails. The compilation takes place when the CLI user changes the admin state of the Python URL from shutdown to no-shutdown.

The no form of this command disables debugging.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

script-control

script-control

Syntax

script-control

Context

[Tree] (config>system script-control)

Full Context

configure system script-control

Description

Commands in this context configure command script parameters.

Platforms

All

script-export-variables

script-export-variables

Syntax

[no] script-export-variables

Context

[Tree] (debug>python>py-script script-export-variables)

Full Context

debug python python-script script-export-variables

Description

This command sends the output variables of the Python script to the logger when the script ran successfully.

Platforms

All

script-export-variables

Syntax

[no] script-export-variables

Context

[Tree] (debug>subscr-mgmt>sub-ident-plcy script-export-variables)

Full Context

debug subscriber-mgmt sub-ident-policy script-export-variables

Description

This command sends the result (the three output variables) of the Python script to the logger when the script ran successfully.

The no form of this command disables debugging.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

script-output

script-output

Syntax

[no] script-output

Context

[Tree] (debug>python>py-script script-output)

Full Context

debug python python-script script-output

Description

This command sends the output (such as from print statements) of the Python script to the logger.

Platforms

All

script-output

Syntax

[no] script-output

Context

[Tree] (debug>subscr-mgmt>sub-ident-plcy script-output)

Full Context

debug subscriber-mgmt sub-ident-policy script-output

Description

This command sends the output (such as from 'print' statements) of the Python script to the logger.

The no form of this command disables debugging.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

script-output-on-error

script-output-on-error

Syntax

[no] script-output-on-error

Context

[Tree] (debug>python>py-script script-output-on-error)

Full Context

debug python python-script script-output-on-error

Description

This command sends the output (such as traceback data) of the Python script to the logger, only when the script fails.

Platforms

All

script-output-on-error

Syntax

[no] script-output-on-error

Context

[Tree] (debug>subscr-mgmt>sub-ident-plcy script-output-on-error)

Full Context

debug subscriber-mgmt sub-ident-policy script-output-on-error

Description

This command sends the output (such as from print statements) of the Python script to the logger, but only when the script fails.

The no form of this command disables debugging.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

script-parameters-1

script-parameters-1

Syntax

script-parameters-1 param-string1

no script-parameters-1

Context

[Tree] (config>service>dynsvc>ladb>user>idx script-parameters-1)

Full Context

configure service dynamic-services local-auth-db user-name index script-parameters-1

Description

This command specifies the first part of parameters as input to the dynamic data service Python script. The concatenation of all four script-parameters strings are passed to the Python script and must be formatted as function-key <dictionary>. The function-key specifies which Python functions is called, and <dictionary> contains the actual parameters in a Python dictionary structure format. The no form of this command removes script-parameters-1 from the configuration.

Parameters

param-string1

Specifies a string representing parameters that are used as input for the dynamic service Python script, up to 250 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

script-parameters-2

script-parameters-2

Syntax

script-parameters-2 param-string2

no script-parameters-2

Context

[Tree] (config>service>dynsvc>ladb>user>idx script-parameters-2)

Full Context

configure service dynamic-services local-auth-db user-name index script-parameters-2

Description

This command specifies the second part of parameters as input to the dynamic data service Python script. The concatenation of all four script-parameters strings are passed to the Python script and must be formatted as function-key <dictionary>. The function-key specifies which Python functions is called, and <dictionary> contains the actual parameters in a Python dictionary structure format. The no form of this command removes the script-parameters-2 from the configuration.

Parameters

param-string2

Specifies a string representing parameters that are used as input for the dynamic service Python script, up to 250 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

script-parameters-3

script-parameters-3

Syntax

script-parameters-3 param-string3

no script-parameters-3

Context

[Tree] (config>service>dynsvc>ladb>user>idx script-parameters-3)

Full Context

configure service dynamic-services local-auth-db user-name index script-parameters-3

Description

This command specifies the third part of parameters as input to the dynamic data service Python script. The concatenation of all four script-parameters strings are passed to the Python script and must be formatted as function-key <dictionary>. The function-key specifies which Python functions is called, and <dictionary> contains the actual parameters in a Python dictionary structure format. The no form of this command removes the script-parameters-3 from the configuration.

Parameters

param-string3

Specifies string representing parameters that are used as input for the dynamic service Python script, up to 250 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

script-parameters-4

script-parameters-4

Syntax

script-parameters-4 param-string4

no script-parameters-4

Context

[Tree] (config>service>dynsvc>ladb>user>idx script-parameters-4)

Full Context

configure service dynamic-services local-auth-db user-name index script-parameters-4

Description

This command specifies the fourth part of parameters as input to the dynamic data service Python script. The concatenation of all four script-parameters strings are passed to the Python script and must be formatted as function-key <dictionary>. The function-key specifies which Python functions is called, and <dictionary> contains the actual parameters in a Python dictionary structure format. The no form of this command removes the script-parameters-4 from the configuration.

Parameters

param-string4

Specifies a string representing parameters that are used as input for the dynamic service Python script, up to 250 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

script-policy

script-policy

Syntax

script-policy name

no script-policy

Context

[Tree] (config>service>dynsvc>policy script-policy)

Full Context

configure service dynamic-services dynamic-services-policy script-policy

Description

This command specifies the radius script policy to be used to setup the dynamic data services. The script-policy configuration cannot be changed when there are active dynamic data services referencing the policy.

The no form of this command removes the script-policy from the configuration. This is only allowed when there are no active dynamic data services referencing this policy.

Parameters

name

Specifies the RADIUS script policy name.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

script-policy

Syntax

script-policy policy-name [owner policy-owner]

no script-policy

Context

[Tree] (config>system>cron>schedule script-policy)

Full Context

configure system cron schedule script-policy

Description

This command is used to configure the CLI script policy.

Parameters

policy-name

Specifies the name of the policy. Can be up to 32 characters.

policy-owner

Specifies the name of the policy owner. Can be up to 32 characters.

The owner is an arbitrary name and not necessarily a user name. Commands in the scripts are not authorized against the owner. The configure system security cli-script authorization x cli-user command determines the user context against which commands in the scripts are authorized.

Default

"TiMOS CLI”

Platforms

All

script-policy

Syntax

[no] script-policy policy-name [owner policy-owner]

Context

[Tree] (config>system>script-control script-policy)

Full Context

configure system script-control script-policy

Description

This command is used to configure the CLI script policy.

Parameters

policy-name

Specifies the name of the policy, up to 32 characters.

policy-owner

Specifies the name of the policy owner, up to 32 characters.

The owner is an arbitrary name and not necessarily a user name. Commands in the scripts are not authorized against the owner. The configure system security cli-script authorization x cli-user command determines the user context against which commands in the scripts are authorized.

Default

"TiMOS CLI”

Platforms

All

script-policy

Syntax

script-policy policy-name [owner policy-owner]

no script-policy

Context

[Tree] (config>log>event-handling>handler>action-list>entry script-policy)

Full Context

configure log event-handling handler action-list entry script-policy

Description

This command configures the script policy parameters to use for this EHS handler action-list entry. The associated script is launched when the handler is triggered.

Default

no script-policy

Parameters

policy-name

Specifies the script policy name. Can be up to 32 characters maximum.

owner policy-owner

Specifies the script policy owner. Can be up to 32 characters maximum.

Default

"TiMOS CLI”

Platforms

All

script-runtime-error

script-runtime-error

Syntax

[no] script-runtime-error

Context

[Tree] (debug>python>py-script script-runtime-error)

Full Context

debug python python-script script-runtime-error

Description

This command generates log information when detecting a script runtime error.

Platforms

All

script-runtime-error

Syntax

[no] script-runtime-error

Context

[Tree] (debug>subscr-mgmt>sub-ident-plcy script-runtime-error)

Full Context

debug subscriber-mgmt sub-ident-policy script-runtime-error

Description

This command sends the traceback of the Python script failure to the logger.

The no form of this command disables debugging.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

script-url

script-url

Syntax

script-url primary-script-url

no script-url

Context

[Tree] (config>aaa>radius-scr-plcy>primary script-url)

Full Context

configure aaa radius-script-policy primary script-url

Description

This command configures the URL of the primary script.

The no form of this command removes the URL from the configuration.

Parameters

primary-script-url

Specifies the URL of the secondary script to change RADIUS attributes of the RADIUS message.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

script-url

Syntax

script-url secondary-script-url

no script-url

Context

[Tree] (config>aaa>radius-scr-plcy>secondary script-url)

Full Context

configure aaa radius-script-policy secondary script-url

Description

Specifies the URL of the secondary script to change RADIUS attributes of the RADIUS message.

The no form of this command removes the URL from the configuration.

Parameters

secondary-script-url

Specifies the URL of the secondary script to change RADIUS attributes of the RADIUS message.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

script-url

Syntax

script-url dhcp-script-url

no script-url

Context

[Tree] (config>subscr-mgmt>sub-ident-pol>secondary script-url)

[Tree] (config>subscr-mgmt>sub-ident-pol>primary script-url)

[Tree] (config>subscr-mgmt>sub-ident-pol>tertiary script-url)

Full Context

configure subscriber-mgmt sub-ident-policy secondary script-url

configure subscriber-mgmt sub-ident-policy primary script-url

configure subscriber-mgmt sub-ident-policy tertiary script-url

Description

This command specifies the URL of the identification scripts.

The no form of this command reverts to the default.

Parameters

dhcp-primary-script-url

Specifies the URL of the primary identification script up to 180 characters.

dhcp-secondary-script-url

Specifies the URL of the secondary identification script up to 180 characters.

dhcp-tertiary-script-url

Specifies the URL of the tertiary identification script up to 180 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

script-url

Syntax

script-url script-url-name

no script-url

Context

[Tree] (config>app-assure>group>http-notif script-url)

Full Context

configure application-assurance group http-notification script-url

Description

This command configures the URL of the script used by the http notification policy.

The no form of this command removes the script URL from the http-notification policy.

Default

no script-url

Parameters

script-url-name

Specifies the string representing the URL of the script used in the http notification policy, up to 255 characters.

create

Keyword to create the script URL.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

scripts

scripts

Syntax

scripts

Context

[Tree] (debug>dynsvc scripts)

Full Context

debug dynamic-services scripts

Description

Commands in this context configure dynamic services script debugging.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

scte35-action

scte35-action

Syntax

scte35-action {forward | drop}

Context

[Tree] (config>service>ies>video-interface>channel scte35-action)

[Tree] (config>service>vprn>video-interface>channel scte35-action)

Full Context

configure service ies video-interface channel scte35-action

configure service vprn video-interface channel scte35-action

Description

This command specifies whether the Society of Cable Telecommunications Engineers 35 (SCTE 35) cue avails in the stream need to be forwarded or not. When specified to forward, SCTE 35 messages will be forwarded downstream. When specified to drop, SCTE 35 messages will not be forwarded downstream. They will be still be processed for local splicing decisions.

Parameters

forward

Forwards SCTE 35 messages downstream.

drop

Drops SCTE 35 messages.

Platforms

7450 ESS, 7750 SR, 7750 SR-s

sctp-filter

sctp-filter

Syntax

sctp-filter sctp-filter-name

no sctp-filter

Context

[Tree] (config>app-assure>group>policy>aqp>entry>action sctp-filter)

Full Context

configure application-assurance group policy app-qos-policy entry action sctp-filter

Description

This command assigns an existing SCTP filter as an action on flows matching this AQP entry.

The no form of this command removes this SCTP filter from actions on flows matching this AQP entry.

Default

no sctp-filter

Parameters

sctp-filter-name

Specifies the name of the existing SCTP filter for this application assurance profile. The sctp-filter-name is configured in the config>app-assure>group[:partition]>sctp-filter context.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sctp-filter

Syntax

sctp-filter sctp-filter-name

Context

[Tree] (config>app-assure>group>statistics>tca sctp-filter)

Full Context

configure application-assurance group statistics threshold-crossing-alert sctp-filter

Description

This command configures TCA generation for an SCTP filter.

Parameters

sctp-filter-name

Specifies the name of the SCTP filter, up to 32 characters

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sctp-filter

Syntax

sctp-filter sctp-filter-name [create]

no sctp-filter sctp-filter-name

Context

[Tree] (config>app-assure>group sctp-filter)

Full Context

configure application-assurance group sctp-filter

Description

Commands in this context configure Stream Control Transmission Protocol (SCTP) parameters.

The no form of this command removes this filter.

Parameters

sctp-filter-name

Specifies the SCTP filter name, up to 32 characters.

create

Keyword used to create the SCTP filter.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sctp-filter-stats

sctp-filter-stats

Syntax

[no] sctp-filter-stats

Context

[Tree] (config>app-assure>group>statistics>aa-admit-deny sctp-filter-stats)

Full Context

configure application-assurance group statistics aa-admit-deny sctp-filter-stats

Description

This command configures whether to include or exclude SCTP filter admit-deny statistics in accounting records.

Default

no sctp-filter-stats

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sd

sd

Syntax

sd

Context

[Tree] (config>mcast-mgmt>mcast-info-plcy>video-policy>video-if sd)

Full Context

configure mcast-management multicast-info-policy video-policy video-interface sd

Description

Commands in this context configure within a video interface policy the properties relating to requests received by the video interface for Standard Definition (SD) channel requests.

Platforms

7450 ESS, 7750 SR, 7750 SR-s

sd-offset

sd-offset

Syntax

sd-offset offset-value

no sd-offset

Context

[Tree] (config>service>vprn>isis>if>level sd-offset)

Full Context

configure service vprn isis interface level sd-offset

Description

If the pre-FEC error rate of the associated DWDM port crosses the configured sd-threshold, this offset-value is added to the IS-IS interface metric. This parameter is only effective if the interface is associated with a DWDM port and the sd-threshold value is configured under that port.

The no form of this command reverts the offset value to 0.

Default

no sd-offset

Parameters

offset-value

Specifies the amount the interface metric is increased by if the sd-threshold is crossed.

Values

0 to 16777215

Platforms

All

sd-offset

Syntax

sd-offset sd-offset

no sd-offset

Context

[Tree] (config>router>isis>if>level sd-offset)

Full Context

configure router isis interface level sd-offset

Description

If the pre-FEC error rate of the associated DWDM port crosses the configured sd-threshold, this offset-value is added to the IS-IS interface metric. This parameter is only effective if the interface is associated with a DWDM port and the sd-threshold value is configured under that port.

The no form of this command reverts the offset value to 0.

Default

no sd-offset

Parameters

sd-offset

Specifies the amount the interface metric is increased by if the sd-threshold is crossed.

Values

0 to 16777215

Platforms

All

sd-threshold

sd-threshold

Syntax

sd-threshold threshold [multiplier multiplier]

no sd-threshold

Context

[Tree] (config>esa>crc-monitor sd-threshold)

Full Context

configure esa crc-monitor sd-threshold

Description

This command configures the error rate at which to declare the signal degrade (SD) condition on an Ethernet interface. The value represents M*10E-N, a ratio of errored frames over total frames received over W seconds of the sliding window. The CRC errors on the interface are sampled once per second. A default of 10 seconds is used when no additional window-size is configured. If you ommit the multiplier value or configure no sd-threshold, the multiplier returns to the default value of 1.

Note: Crossing the configured SD threshold raises a log event.

The no form of this command removes the configuration.

Default

no sd-threshold

Parameters

threshold

Specifies the SD threshold.

Values

1 to 9

multiplier

Specifies the SD multiplier.

Values

1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s

sd-threshold

Syntax

sd-threshold threshold [coefficient coefficient]

Context

[Tree] (config>port>otu sd-threshold)

Full Context

configure port otu sd-threshold

Description

This command defines the error rate at which to declare the signal degrade (SD) condition.

The parameters define an error rate of (coefficient/10) * 10E-threshold. For example, sd-threshold 5 coefficient 20 defines an error rate of (20/10) * 10E-5, or 2 * 10E-5, or 0.000 02.

The SD threshold must be:

  • greater than the SF threshold.

  • 5 or higher before setting sf-sd-method to bip8.

The coefficient parameter is only used when sf-sd-method is set to fec. When sf-sd-method is set to bip8, coefficient is considered to have the value of 10.

Parameters

threshold

Specifies the exponent for the SD threshold value.

Values

5 to 9 when sf-sd-method is bip8

3 to 9 when sf-sd-method is fec

Default

7

coefficient

Specifies the coefficient for the SD threshold value.

Values

10 to 99

Default

10

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

sd-threshold

Syntax

sd-threshold errored-frames

no sd-threshold

Context

[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame sd-threshold)

Full Context

configure port ethernet efm-oam link-monitoring errored-frame sd-threshold

Description

The option defines the number of errored frames within the configured window which indicates the port has gone beyond an acceptable error rate and should be considered degraded. This is a first level warning that a port may be suspect. This generates an information log event message only and will be recorded in the Port event index but has no port level actions when the error count is equal to or greater than the threshold. This value must be lower than or equal to the sf-threshold value.

The no value of this option disables the sd-threshold.

Default

no sd-threshold

Parameters

errored-frames

Specifies the number of errored frames within the configured window which indicates the port has become degraded.

Values

1 to 1000000

Platforms

All

sd-threshold

Syntax

sd-threshold errored-frames

Context

[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame-period sd-threshold)

Full Context

configure port ethernet efm-oam link-monitoring errored-frame-period sd-threshold

Description

The option defines the number of errored frames within the configured window which indicates the port has gone beyond an acceptable error rate and should be considered degraded. This is a first level warning that a port may be suspect. This generates an information log event message only and will be recorded in the Port event index but has no port level actions when the error count is equal to or greater than the threshold. This value must be lower than or equal to the sf-threshold value.

The no value of this option disables the sd-threshold

Default

no sd-threshold

Parameters

errored-frames

Specifies the number of errored frames within the configured window which indicates the port has become degraded.

Values

1 to 1000000

Platforms

All

sd-threshold

Syntax

sd-threshold errored-frames

no sd-threshold

Context

[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame-seconds sd-threshold)

Full Context

configure port ethernet efm-oam link-monitoring errored-frame-seconds sd-threshold

Description

This command defines the number of errored frame seconds within the configured window which indicates the port has gone beyond an acceptable error rate and should be considered degraded. This is a first level warning that a port may be suspect. This event is raised when the error count is equal to or greater than the configured threshold. This is an information log event message only and will be recorded in the Port event index but has no port level actions. This value must be lower than or equal to the sf-threshold value.

The no version of this command disables the sd-threshold.

Parameters

errored-frames

Specifies the number of errored seconds within the configured window which indicates the port has become degraded.

Values

1 to 900

Platforms

All

sd-threshold

Syntax

sd-threshold errored-symbols

no sd-threshold

Context

[Tree] (config>port>ethernet>efm-oam>link-mon>errored-symbols sd-threshold)

Full Context

configure port ethernet efm-oam link-monitoring errored-symbols sd-threshold

Description

This command defines the number of errored frames within the configured window which indicates the port has gone beyond an acceptable error rate and should be considered degraded. This is a first level warning that a port may be suspect. An event is raised when the error count is equal to or greater than this value. This is an information log event message only and will be recorded in the Port event index but has no port level actions. This value must be lower than or equal to the sf-threshold value. Specific to symbol errors, this value must be configured with the value that indicates anything less is acceptable and the port can be returned to service. If this value is not configured then manual operation is required to return the port to service.

The no value of this option means there is there is no automatic return to service.

Default

no sd-threshold

Parameters

errored-symbols

Specifies the number of errored symbols which indicates the port has become degraded.

Values

1 to1000000

Platforms

All

sd-threshold

Syntax

sd-threshold threshold [multiplier multiplier]

no sd-threshold

Context

[Tree] (config>port>ethernet>sym-mon sd-threshold)

Full Context

configure port ethernet symbol-monitor sd-threshold

Description

This command specifies the error rate at which to declare the Signal Degrade condition on an Ethernet interface. The value represents M*10E-N a ratio of symbol errors over total symbols received over W seconds of the sliding window. The symbol errors on the interface are sampled once per second. A default of 10 seconds is used when there is no additional window-size configured. The multiplier keyword is optional. If the multiplier keyword is omitted or no sd-threshold is specified the multiplier will return to the default value of 1.

Default

no sd-threshold

Parameters

threshold

Specifies the rate of symbol errors.

Values

1 to 9

multiplier

Specifies the multiplier used to scale the symbol error ratio.

Values

1 to 9

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

sd-threshold

Syntax

sd-threshold threshold [multiplier multiplier]

no sd-threshold

Context

[Tree] (config>port>ethernet>crc-monitor sd-threshold)

Full Context

configure port ethernet crc-monitor sd-threshold

Description

This command specifies the error rate at which to declare the Signal Degrade condition on an Ethernet interface. The value represents M*10E-N a ratio of errored frames over total frames received over W seconds of the sliding window. The CRC errors on the interface are sampled once per second. A default of 10 seconds is used when there is no additional window-size configured. The multiplier keyword is optional. If the multiplier keyword is omitted or no sd-threshold is specified the multiplier will return to the default value of 1.

Default

no sd-threshold

Parameters

threshold

Specifies the threshold value.

Values

1 to 9

multiplier

Specifies the multiplier value.

Values

1 to 9

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

sd-threshold-clear

sd-threshold-clear

Syntax

sd-threshold-clear threshold [coefficient coefficient]

Context

[Tree] (config>port>otu sd-threshold-clear)

Full Context

configure port otu sd-threshold-clear

Description

This command defines the signal degrade (SD) threshold clear value.

When the bit error rate falls below this value, the SD condition is cleared. The parameters define an error rate of (coefficient/10) * 10E-threshold. For example, sd-threshold-clear 7 coefficient 10 defines an error rate of (10/10) * 10E-7, or 10E-7, or 0.000 000 1.

This SD threshold clear setting is valid only when sf-sd-method is set to fec.

Parameters

threshold

Specifies the exponent for the SD threshold clear value.

Values

3 to 10

Default

8

coefficient

Specifies the coefficient for the SD threshold clear value.

Values

10 to 99

Default

10

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

sdp

sdp

Syntax

sdp sdp-id [sync-tag sync-tag] [create]

no sdp sdp-id

Context

[Tree] (config>redundancy>multi-chassis>peer>sync sdp)

Full Context

configure redundancy multi-chassis peer sync sdp

Description

This command specifies the manually configured spoke SDPs to be synchronized with the multi-chassis peer and a synchronization tag to be used while synchronizing these spoke SDPs with the multi-chassis peer.

Manually configured spoke SDPs with the specified sdp-id are synchronized according to the synchronization tag. If synchronization is required only for a subset of the spoke SDPs using the configured SDP, the range sub-command should be used. The range command and the sync-tag parameters are mutually exclusive.

The synchronization of PIM snooping is only supported for manually configured spoke SDPs but is not supported for spoke SDPs configured within an endpoint.

The synchronization of PIM snooping is not supported on any of the following when used with the configured sdp-id:

  • Mesh SDPs

  • Spoke SDPs in non-VPLS services

  • BGP-AD/BGP-VPLS (FEC 129) spoke SDPs

  • Spoke SDPs configured in endpoints

  • Pseudowire SAPs

  • ESM-over-MPLS Pseudowires

Non-existent spoke SDPs may be specified. If these spoke SDPs are created at a later time, then all states on the spoke SDPs are synchronized according to the synchronization tag and the synchronization protocols enabled.

A synchronization tag can be changed by entering the same command with a different synchronization tag. Changing the synchronization tag removes all states relating to the previous synchronization tag for the SDP and a new synchronization tag state is created.

Parameters

sdp-id

Specifies the SDP of the spoke SDPs to be synchronized with the multi-chassis peer.

Values

1 to 32767

sync-tag

Specifies a synchronization tag, up to 32 characters, to be used when synchronizing with the multi-chassis peer.

create

Creates the SDP instance. The create keyword requirement can be enabled or disabled in the environment>create context.

Platforms

All

sdp

Syntax

sdp sdp-id

no sdp

Context

[Tree] (config>service>system>bgp-evpn>eth-seg sdp)

Full Context

configure service system bgp-evpn ethernet-segment sdp

Description

This command configures an sdp-id associated to the Ethernet-Segment. If the Ethernet-Segment is configured as all-active, then only a lag or PW port can be associated to the Ethernet-Segment. If the Ethernet-Segment is configured as single-active, then lag, port or sdp can be associated to the Ethernet-Segment. In any case, only one of the four objects can be configured in the Ethernet-Segment. A specified SDP can be part of only one Ethernet-Segment. Only user-configured SDPs can be added to an Ethernet-Segment.

Default

no sdp

Parameters

sdp-id

Specifies the IP address.

Values

1 to 17407

Platforms

All

sdp

Syntax

[no] sdp sdp-id:vc-id

Context

[Tree] (config>service>vpls>pbb>backbone-vpls sdp)

Full Context

configure service vpls pbb backbone-vpls sdp

Description

This command configures attributes of a SDP binding on the B-VPLS service.

Parameters

sdp-id

Specifies the SDP ID.

Values

1 to 17407

vc-id

Specifies the VC ID.

Values

1 to 4294967295

Platforms

All

sdp

Syntax

[no] sdp sdp-id:vc-id

Context

[Tree] (debug>service>id>mrp sdp)

Full Context

debug service id mrp sdp

Description

This command filters debug events and only shows events for the particular SDP.

The no form of this command removes the debug filter.

Parameters

sdp-id

Specifies the SDP ID for which to display information

Default

All SDPs

Values

1 to 17407

vc-id

Displays information about the virtual circuit identifier.

Values

1 to 4294967295

Platforms

All

sdp

Syntax

[no] sdp sdp-id:vc-id

Context

[Tree] (debug>service>id>dhcp sdp)

[Tree] (debug>service>id>stp sdp)

[Tree] (debug>service>id sdp)

Full Context

debug service id dhcp sdp

debug service id stp sdp

debug service id sdp

Description

This command enables STP debugging for a specific SDP.

The no form of the command disables debugging.

Parameters

sdp-id:vc-id

Specifies the SDP ID and VC ID.

Values

sdp-id: 1 to 17407

vc-id: 1 to 4294967295

Platforms

All

sdp

Syntax

[no] sdp sdp-id:vc-id

Context

[Tree] (debug>service>id>igmp-snooping sdp)

Full Context

debug service id igmp-snooping sdp

Description

This command shows IGMP packets for a specific SDP.

The no form of this command disables the debugging for the SDP.

Parameters

sdp-id

Displays only IGMP snooping entries associated with the specified mesh SDP or spoke-SDP. For a spoke-SDP, the VC ID must be specified, for a mesh SDP, the VC ID is optional.

Values

1 to 17407

vc-id

Displays information for the specified virtual circuit ID on the SDP ID

Values

1 to 4294967295

Platforms

All

sdp

Syntax

[no] sdp sdp-id:vc-id

Context

[Tree] (debug>service>id>mld sdp)

Full Context

debug service id mld-snooping sdp

Description

This command shows MLD packets for a specific SDP.

The no form of this command disables the debugging for the SDP.

Parameters

sdp-id

Displays only MLD entries associated with the specified mesh SDP or spoke-SDP

Values

1 to 17407

vc-id

Displays information for the specified virtual circuit ID on the SDP ID

Values

1 to 4294967295

Platforms

All

sdp

Syntax

sdp sdp-id [delivery-type] [create]

no sdp sdp-id

Context

[Tree] (config>service sdp)

Full Context

configure service sdp

Description

This command creates or edits a service destination point (SDP). SDPs must be explicitly configured.

An SDP is a logical mechanism that ties a far-end router to a particular service without having to specifically define far-end SAPs. Each SDP represents a method to reach another router.

One method is IP Generic Router Encapsulation (GRE), which has no state in the core of the network. GRE does not specify a specific path to the far-end router. A GRE-based SDP uses the underlying IGP routing table to find the best next hop to the far-end router.

The second method is Multi-Protocol Label Switching (MPLS) encapsulation. A router supports both signaled and non-signaled Label Switched Paths (LSPs) through the network. Non-signaled paths are defined at each hop through the network. Signaled paths are communicated by protocol from end-to-end using Resource Reservation Protocol (RSVP). Paths may be manually defined or a constraint-based routing protocol (such as OSPF-TE or CSPF) can be used to determine the best path with specific constraints. An LDP LSP can also be used for an SDP when the encapsulation is MPLS. The use of an LDP LSP type or an RSVP/Static LSP type are mutually exclusive except when the mixed-lsp option is enabled on the SDP.

Segment routing is another MPLS tunnel type and is used to allow service binding to an SR tunnel programmed in TTM by OSPF or IS-IS. The SDP of type sr-isis or sr-ospf can be used with the far-end option. The tunnel-far-end option is not supported. In addition, the mixed-lsp-mode option does not support the sr-isis and sr-ospf tunnel types.

L2TPv3-over-IPv6 transport is also an option for 7750 SR and 7950 XR Ethernet Pipe (Epipe) Services. Like GRE, L2TPv3 is stateless in the core of the network, as well as on the service nodes as the L2TPv3 control plane functionality is disabled for this SDP type. A unique source and destination IPv6 address combined with TX and RX Cookie values are used to ensure that the SDP is bound to the correct service.

SDPs are created and then bound to services. Many services may be bound to a single SDP. The operational and administrative state of the SDP controls the state of the SDP binding to the service.

If the sdp-id does not exist, a new SDP is created. When creating an SDP, either the gre, mpls, or l2tpv3 keyword must be specified. SDPs are created in the admin down state (shutdown) and the no shutdown command must be executed once all relevant parameters are defined and before the SDP can be used.

If sdp-id exists, the current CLI context is changed to that SDP for editing and modification. For editing an existing SDP, neither the gre, mpls, or l2tpv3 keyword is specified. If a keyword is specified for an existing sdp-id, an error is generated and the context of the CLI will not be changed to the specified sdp-id.

The no form of this command deletes the specified SDP. Before an SDP can be deleted, it must be administratively down (shutdown) and not bound to any services. If the specified SDP is bound to a service, the no sdp command will fail generating an error message specifying the first bound service found during the deletion process. If the specified sdp-id does not exist an error will be generated.

Parameters

sdp-id

Specifies the SDP identifier.

Values

1 to 32767

gre

Specifies the SDP will use GRE to reach the far-end router. The GRE encapsulation of the MPLS service packet uses the base 4-byte header as per RFC 2890. The optional fields Checksum (plus Reserved field), Key, and Sequence Number are not inserted. Only one GRE SDP can be created to a given destination address. Multiple GRE SDPs to a single destination address serve no purpose as the path taken to reach the far end is determined by the IGP which will be the same for all SDPs to a given destination and there is no bandwidth reservation in GRE tunnels.

mpls

Specifies the SDP will use MPLS encapsulation and one or more LSP tunnels to reach the far-end device. Multiple MPLS SDPs may be created to a given destination device. Multiple MPLS SDPs to a single destination device are helpful when they use divergent paths.

l2tpv3

Specifies the SDP will use L2TPv3-over-IPv6 encapsulation for the 7750 SR or 7950 XRS. One SDP is created per service, regardless of whether the far-end node is common or not. Unique local and far-end addresses are configured for every L2TPv3 SDP type. The local address must exist on the local node.

eth-gre-bridged

Configures the SDP as an L2oGRE tunnel that is terminated on an FPE-based PW port. Only the end-points of such a tunnel (the far-end IPv4/IPv6 address or local-end IPv4/IPv6 address) are allowed to be configured under this SDP.

Platforms

All

sdp-exclude

sdp-exclude

Syntax

[no] sdp-exclude group-name

Context

[Tree] (config>service>pw-template sdp-exclude)

Full Context

configure service pw-template sdp-exclude

Description

This command configures SDP admin group constraints for a pseudowire template.

The admin group name must have been configured or the command is failed. The user can execute the command multiple times to include or exclude more than one admin group. The sdp-include and sdp-exclude commands can only be used with the use-provisioned-sdp or prefer-provisioned-sdp options. If the same group name is included and excluded within the same pseudowire template, only the exclude option will be enforced.

Any changes made to the admin group sdp-include and sdp-exclude constraints will only be reflected in existing spoke-sdps after the following command has been executed:

tools>perform>service>eval-pw-template>allow-service-impact

When the service is bound to the pseudowire template, the SDP selection rules will enforce the admin group constraints specified in the sdp-include and sdp-exclude commands.

In the SDP selection process, all provisioned SDPs with the correct far-end IP address, the correct tunnel-far-end IP address, and the correct service label signaling are considered. The SDP with the lowest admin metric is selected. If more than one SDP with the same lowest metric are found then the SDP with the highest sdp-id is selected. The type of SDP, GRE or MPLS (BGP/RSVP/LDP) is not a criterion in this selection.

The selection rule with SDP admin groups is modified such that the following admin-group constraints are applied upfront to prune SDPs that do not comply:

  • if one or more sdp-include statement is part of the PW template, then an SDP that is a member of one or more of the included groups will be considered. With the sdp-include statement, there is no preference for an SDP that belongs to all included groups versus one that belongs to one or fewer of the included groups. All SDPs satisfying the admin-group constraint will be considered and the selection above based on the lowest metric and highest sdp-id is applied.

  • if one or more sdp-exclude statement is part of the PW template, then an sdp that is a member of any of the excluded groups will not be considered.

SDP admin group constraints can be configured on all router services that makes use of the pseudowire template (BGP-AD VPLS service, BGP-VPLS service, and FEC129 VLL service). In the latter case, only support at a T-PE node is provided.

The no form of this command removes the SDP admin group constraints from the pseudowire template.

Parameters

group-name

Specifies the name of the SDP admin group. A maximum of 32 characters can be entered.

Platforms

All

sdp-group

sdp-group

Syntax

sdp-group

Context

[Tree] (config>service sdp-group)

Full Context

configure service sdp-group

Description

This command configures the SDP membership in admin groups.

The user can enter a maximum of one (1) admin group name at once. The user can execute the command multiple times to add membership to more than one admin group. The admin group name must have been configured or the command is failed. Admin groups are supported on an SDP of type GRE and of type MPLS (BGP/RSVP/LDP). They are also supported on an SDP with the mixed-lsp-mode option enabled.

The no form of this command removes this SDP membership to the specified admin group.

Platforms

All

sdp-id-range

sdp-id-range

Syntax

sdp-id-range from id to id

no sdp-id-range

Context

[Tree] (config>fwd-path-ext sdp-id-range)

Full Context

configure fwd-path-ext sdp-id-range

Description

This command reserves an SDP ID range used by the FPE based PW-Port and VXLAN termination applications.

Each configured FPE based PW-Port is associated with two internal SDPs (one in each direction) whose id(s) are allocated from the configured sdp-id-range.

When the FPE is associated to VXLAN termination, an internal SDP is allocated from the configured sdp-id-range and is used for R-VPLS services that terminate VXLAN IPv6. A spoke-sdp per VXLAN IPv6 R-VPLS service is created on that SDP for egress processing of the packets. Sdp-id-range cannot be modified if any of its IDs are currently in use.

Default

no sdp-id-range

Parameters

from id

Specifies the start of the SDP ID range (inclusive).

Values

1 to 32767

to id

Specifies the end of the SDP ID range.

Values

1 to 32767

Platforms

All

sdp-include

sdp-include

Syntax

[no] sdp-include group-name

Context

[Tree] (config>service>pw-template sdp-include)

Full Context

configure service pw-template sdp-include

Description

This command configures SDP admin group constraints for a pseudowire template.

The admin group name must have been configured or the command is failed. The user can execute the command multiple times to include or exclude more than one admin group. The sdp-include and sdp-exclude commands can only be used with the use-provisioned-sdp or prefer-provisioned-sdp options. If the same group name is included and excluded within the same pseudowire template, only the exclude option will be enforced.

Any changes made to the admin group sdp-include and sdp-exclude constraints will only be reflected in existing spoke-sdps after the following command has been executed:

tools>perform>service>eval-pw-template>allow-service-impact

When the service is bound to the pseudowire template, the SDP selection rules will enforce the admin group constraints specified in the sdp-include and sdp-exclude commands.

In the SDP selection process, all provisioned SDPs with the correct far-end IP address, the correct tunnel-far-end IP address, and the correct service label signaling are considered. The SDP with the lowest admin metric is selected. If more than one SDP with the same lowest metric are found then the SDP with the highest sdp-id is selected. The type of SDP, GRE or MPLS (BGP/RSVP/LDP) is not a criterion in this selection.

The selection rule with SDP admin groups is modified such that the following admin-group constraints are applied upfront to prune SDPs that do not comply:

  • if one or more sdp-include statement is part of the PW template, then an SDP that is a member of one or more of the included groups will be considered. With the sdp-include statement, there is no preference for an SDP that belongs to all included groups versus one that belongs to one or fewer of the included groups. All SDPs satisfying the admin-group constraint will be considered and the selection above based on the lowest metric and highest sdp-id is applied.

  • if one or more sdp-exclude statement is part of the PW template, then an sdp that is a member of any of the excluded groups will not be considered.

SDP admin group constraints can be configured on all router services that make use of the pseudowire template (BGP-AD VPLS service, BGP-VPLS service, and FEC129 VLL service). In the latter case, only support at a T-PE node is provided.

The no form of this command removes the SDP admin group constraints from the pseudowire template.

Parameters

group-name

Specifies the name of the SDP admin group. A maximum of 32 characters can be entered.

Platforms

All

sdp-mtu

sdp-mtu

Syntax

sdp-mtu orig-sdp-id size-inc start-octets end-octets [step step-size] [timeout timeout] [interval interval]

Context

[Tree] (oam sdp-mtu)

Full Context

oam sdp-mtu

Description

Performs MTU Path tests on an SDP to determine the largest path-mtu supported on an SDP. The size-inc parameter can be used to easily determine the path-mtu of a given SDP-ID. The forwarding class is assumed to be Best-Effort Out-of-Profile. The message reply is returned with IP/GRE encapsulation from the far-end router. OAM request messages sent within an IP/GRE SDP must have the 'DF’ IP header bit set to 1 to prevent message fragmentation.

To terminate an sdp-mtu in progress, use the CLI break sequence <Ctrl-C>.

Parameters

orig-sdp-id

Specifies the sdp-id to be used by sdp-ping, expressed as a decimal integer. The far-end address of the specified sdp-id is the expected responder-id within each reply received. The specified sdp-id defines the encapsulation of the SDP tunnel encapsulation used to reach the far end. This can be IP/GRE or MPLS. If orig-sdp-id is invalid or administratively down or unavailable, the SDP echo request message is not sent and an appropriate error message is displayed (once the interval timer expires, sdp-ping attempts to send the next request, if required).

Values

1 to 32767

start-octets

Specifies the beginning size in octets of the first message sent for an incremental MTU test, expressed as a decimal integer.

Values

40 to 9786

end-octets

Specifies the ending size in octets of the last message sent for an incremental MTU test, expressed as a decimal integer. The specified value must be greater than start-octets.

Values

40 to 9786

step-size

Specifies the number of octets to increment the message size request for each message sent for an incremental MTU test, expressed as a decimal integer. The next size message is not sent until a reply is received or three messages have timed out at the current size.

If the incremented size exceeds the end-octets value, no more messages are sent.

Values

1 to 512

Default

32

timeout

Specifies the timeout parameter in seconds, expressed as a decimal integer. This value is used to override the default timeout value and is the amount of time that the router waits for a message reply after sending the message request. Upon the expiration of the message time out, the requesting router assumes that the message response is not received. A request timeout message is displayed by the CLI for each message request sent that expires. Any response received after the request times out is silently discarded.

Values

1 to 10

Default

5

interval

Specifies the interval parameter in seconds, expressed as a decimal integer. This parameter is used to override the default request message send interval and defines the minimum amount of time that must expire before the next message request is sent.

If the interval is set to 1 second, and the timeout value is set to 10 seconds, then the maximum time between message requests is 10 seconds and the minimum is 1 second. This depends upon the receipt of a message reply corresponding to the outstanding message request.

Values

1 to 10

Default

1

Platforms

All

Output

Output Example: SDP MTU Path Test
*A:Dut-A# oam sdp-mtu 1201 size-inc 512 3072 step 256
Size    Sent    Response
----------------------------
512     .        Success
768     .        Success
1024    .        Success
1280    .        Success
1536    .        Success
1792    .        Success
2048    .        Success
2304    .        Success
2560    .        Success
2816    .        Success
3072    .        Success

Maximum Response Size: 3072
*A:Dut-A#

sdp-ping

sdp-ping

Syntax

sdp-ping orig-sdp-id [resp-sdp resp-sdp-id] [fc fc-name [profile { in | out}]] [size octets] [count send-count] [timeout timeout] [interval interval]

Context

[Tree] (oam sdp-ping)

[Tree] (config>saa>test>type sdp-ping)

Full Context

oam sdp-ping

configure saa test type sdp-ping

Description

This command tests SDPs for uni-directional or round trip connectivity and performs SDP MTU Path tests.

The sdp-ping command accepts an originating SDP-ID and an optional responding SDP-ID. The size, number of requests sent, message time-out and message send interval can be specified. All sdp-ping requests and replies are sent with PLP OAM-Label encapsulation, as a service-id is not specified.

For round trip connectivity testing, the resp-sdp keyword must be specified. If resp-sdp is not specified, a uni-directional SDP test is performed.

To terminate an sdp-ping in progress, use the CLI break sequence <Ctrl-C>.

An sdp-ping response message indicates the result of the sdp-ping message request. When multiple response messages apply to a single SDP echo request/reply sequence, the response message with the highest precedence is displayed. sdp-ping Response Messages shows the response messages sorted by precedence.

Table 2. sdp-ping Response Messages

Result of Request

Displayed Response Message

Precedence

Request time out without reply

Request Timeout

1

Request not sent due to non-existent orig-sdp-id

Orig-SDP Non-Existent

2

Request not sent due to administratively down orig-sdp-id

Orig-SDP Admin-Down

3

Request not sent due to operationally down orig-sdp-id

Orig-SDP Oper-Down

4

Request terminated by user before reply or time out

Request Terminated

5

Reply received, invalid origination-id

Far End: Originator-ID Invalid

6

Reply received, invalid responder-id

Far End: Responder-ID Error

7

Reply received, non-existent resp-sdp-id

Far End: Resp-SDP Non-Existent

8

Reply received, invalid resp-sdp-id

Far End: Resp-SDP Invalid

9

Reply received, resp-sdp-id down (admin or oper)

Far-end: Resp-SDP Down

10

Reply received, No Error

Success

11

Parameters

orig-sdp-id

Specifies the SDP ID to be used by sdp-ping, expressed as a decimal integer. The far-end address of the specified SDP-ID is the expected responder-id within each reply received. The specified SDP-ID defines the encapsulation of the SDP tunnel encapsulation used to reach the far end. This can be IP/GRE or MPLS. If orig-sdp-id is invalid or administratively down or unavailable for some reason, the SDP Echo Request message is not sent and an appropriate error message is displayed (once the interval timer expires, sdp-ping attempts to send the next request if required).

Values

1 to 32767

resp-sdp-id

Specifies the return SDP-ID to be used by the far-end router for the message reply for round trip SDP connectivity testing. If resp-sdp-id does not exist on the far-end router, terminates on another router different than the originating router, or another issue prevents the far-end router from using resp-sdp-id, the SDP echo reply is sent using generic IP/GRE OAM encapsulation. The received forwarding class (as mapped on the ingress network interface for the far end) defines the forwarding class encapsulation for the reply message.

Values

1 to 32767

Default

null. Use the non-SDP return path for message reply.

fc-name

Specifies the parameter to be used to indicate the forwarding class of the SDP encapsulation. The actual forwarding class encoding is controlled by the network egress DSCP or LSP-EXP mappings.

The DSCP or LSP-EXP mappings on the receive network interface controls the mapping back to the internal forwarding class used by the far-end router that receives the message request. The egress mappings of the egress network interface on the far-end router controls the forwarding class markings on the return reply message.

The DSCP or LSP-EXP mappings on the receive network interface controls the mapping of the message reply at the originating router. This is displayed in the response message output upon receipt of the message reply.

Values

be, l2, af, l1, h2, ef, h1, nc

Default

be

profile {in | out}

Specifies the profile state of the SDP encapsulation.

Default

out

octets

Specifies the size parameter in octets. This parameter is used to override the default message size for the sdp-ping request. Changing the message size is a method of checking the ability of an SDP to support a path-mtu. The size of the message does not include the SDP encapsulation, VC-Label (if applied) or any DLC headers or trailers.

When the OAM message request is encapsulated in an IP/GRE SDP, the IP 'DF’ (Do Not Fragment) bit is set. If any segment of the path between the sender and receiver cannot handle the message size, the message is discarded. MPLS LSPs are not expected to fragment the message either, as the message contained in the LSP is not an IP packet.

Values

72 to 9786

Default

72

send-count

Specifies the number of messages to send. The count parameter is used to override the default number of message requests sent. Each message request must either time out or receive a reply before the next message request is sent. The message interval value must have expired before the next message request is sent.

Values

1 to 100

Default

1

timeout

Specifies the time, in seconds, used to override the default timeout value and is the amount of time that the router waits for a message reply after sending the last probe for a specific test. Upon the expiration of time out, the test is marked complete and no more packets is processed for any of those request probes.

Values

1 to 10

Default

5

interval

Specifies the time, in seconds, used to override the default request message send interval and defines the minimum amount of time that must expire before the next message request is sent.

Values

1 to 10

Default

1

Platforms

All

Output

Single Response Round Trip Connectivity Test Output Example
A:router1> sdp-ping 10 resp-sdp 22 fc ef
Request Result: Sent - Reply Received
RTT:30ms

Err  SDP-ID Info            Local     Remote
__   SDP-ID:                10        22
__   Administrative State:  Up        Up
__   Operative State:       Up        Up
__   Path MTU               4470      4470
__   Response SDP Used:               Yes

Err  System IP Interface Info
Local Interface Name: "ESR-System-IP-Interface (Up to 32 chars)…"
__   Local IP Interface State:          Up
__   Local IP Address:                  10.10.10.11
__   IP Address Expected By Remote:     10.10.10.11
__   Expected Remote IP Address:        10.10.10.10
__   Actual Remote IP Address:          10.10.10.10

Err   FC Mapping Info      Local        Remote
__    Forwarding Class     Assured      Assured
__    Profile              In           In

Multiple Response Connectivity Tests — When the connectivity test count is greater than one (1), a single line is displayed per SDP echo request send attempt.

The request number is a sequential number starting with 1 and ending with the last request sent, incrementing by one (1) for each request. This should not be confused with the message-id contained in each request and reply message.

A response message indicates the result of the message request. Following the response message is the round trip time value. If any reply is received, the round trip time is displayed.

After the last reply has been received or response timed out, a total is displayed for all messages sent and all replies received. A maximum, minimum and average round trip time is also displayed. Error response and timed out requests do not apply towards the average round trip time.

Multiple Response Round Trip Connectivity Test Output Example
A:router1> sdp-ping 6 resp-sdp 101size 1514 count 5
Request        Response       RTT
----------     ----------     -------
     1         Success        10ms
     2         Success        15ms
     3         Success        10ms
     4         Success        20ms
     5         Success        5ms
Sent:    5    Received:    5
Min: 5ms       Max: 20ms      Avg: 12ms

seamless-bfd

seamless-bfd

Syntax

seamless-bfd

Context

[Tree] (config>bfd seamless-bfd)

Full Context

configure bfd seamless-bfd

Description

This command specifies the context for the configuration of a seamless BFD reflector.

Platforms

All

seamless-bfd

Syntax

seamless-bfd

Context

[Tree] (config>router>bfd seamless-bfd)

Full Context

configure router bfd seamless-bfd

Description

This command specifies the context for the configuration of seamless BFD initiator parameters that are global to this router.

The no form of this command removes the context.

Platforms

All

search

search

Syntax

search base-dn

no search

Context

[Tree] (config>system>security>ldap>server search)

Full Context

configure system security ldap server search

Description

This command configures the LDAP search command. The search base-dn tells the server which part of the external directory tree to search. The search DN uses the same LDAP attribute as root-dn. For example, to search a public-key for an SSH generated for a Nokia vendor, one might use "dc=public-key,dc=nokia,dc=com”.

The no version of this command removes the search DN; as such, no search is possible on the LDAP server.

Parameters

base-dn

Specifies the base domain name used in the search, up to 512 characters.

Platforms

All

secondary

secondary

Syntax

secondary

Context

[Tree] (config>aaa>radius-scr-plcy secondary)

Full Context

configure aaa radius-script-policy secondary

Description

Commands in this context configure a secondary script.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

secondary

Syntax

secondary

Context

[Tree] (config>subscr-mgmt>sub-ident-pol secondary)

Full Context

configure subscriber-mgmt sub-ident-policy secondary

Description

Commands in this context configure secondary identification script parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

secondary

Syntax

secondary ip-address[/mask] [netmask ] [broadcast {all-ones | host-ones}] [igp-inhibit] [track-srrp srrp-instance]

no secondary ip-address[/mask]

Context

[Tree] (config>service>ies>if secondary)

Full Context

configure service ies interface secondary

Description

This command assigns a secondary IP address or IP subnet/broadcast address format to the interface.

The no form of this command reverts to the default.

Parameters

ip-address

The IP address of the IP interface. The ip-address portion of the address command specifies the IP host address that is used by the IP interface within the subnet. This address must be unique within the subnet and specified in dotted decimal notation. Allowed values are IP addresses in the range 1.0.0.0 – 223.255.255.255 (with support of /31 subnets).

mask

The subnet mask in dotted decimal notation. When the IP prefix is not specified in CIDR notation, a space separates the ip-address from a traditional dotted decimal mask. The mask parameter indicates the complete mask that is used in a logical and function to derive the local subnet of the IP address. Allowed values are dotted decimal addresses in the range 128.0.0.0 – 255.255.255.254.

Note:

A mask of 255.255.255.255 is reserved for system IP addresses.

netmask

Specifies a string of 0s and 1s that mask or screen out the network part of an IP address so that only the host computer part of the address remains.

broadcast

Overrides the default broadcast address used by the IP interface when sourcing IP broadcasts on the IP interface. If no broadcast format is specified for the IP address, the default value is host-ones which indicates a subnet broadcast address. Use this parameter to change the broadcast address to all-ones or revert back to a broadcast address of host-ones.

The broadcast format on an IP interface can be specified when the IP address is assigned or changed.

This parameter does not affect the type of broadcasts that can be received by the IP interface. A host sending either the local broadcast (all-ones) or the valid subnet broadcast address (host-ones) is received by the IP interface. (Default: host-ones)

all-ones

Specifies the broadcast address used by the IP interface for this IP address is 255.255.255.255, also known as the local broadcast.

host-ones

Specifies that the broadcast address used by the IP interface for this IP address is the subnet broadcast address. This is an IP address that corresponds to the local subnet described by the ip-address and the mask-length or mask with all the host bits set to binary one. This is the default broadcast address used by an IP interface. The broadcast parameter within the address command does not have a negate feature, which is usually used to revert a parameter to the default value. To change the broadcast type to host-ones after being changed to all-ones, the address command must be executed with the broadcast parameter defined.

igp-inhibit

Signals that the given secondary IP interface should not be recognized as a local interface by the running IGP. For OSPF and IS-IS, this means that the specified secondary IP interfaces are not injected and used as passive interfaces and are not advertised as internal IP interfaces into the IGP’s link state database. For RIP, this means that these secondary IP interfaces do not source RIP updates.

track-srrp srrp-instance

Specifies the SRRP instance ID that this interface route needs to track.

Values

1 to 4294967295

Platforms

All

secondary

Syntax

secondary ip-address[/mask] [ netmask] [broadcast {all-ones | host-ones}] [igp-inhibit] [ track-srrp srrp-instance]

no secondary ip-address[/mask]

Context

[Tree] (config>service>vprn>nw-if secondary)

[Tree] (config>service>vprn>if secondary)

Full Context

configure service vprn network-interface secondary

configure service vprn interface secondary

Description

This command assigns a secondary IP address to the interface. Up to 16 total primary and secondary IPv4 and IPv6 addresses can be assigned to network interfaces, and up to 256 to access interfaces. Each address can be configured in an IP address, IP subnet or broadcast address format.

CAUTION:

Configurations must not exceed 16 secondary IP addresses when IPsec, GRE, L2TPv3, or IP in IP protocols are active on an access interface.

Parameters

ip-address

The IP address of the IP interface. The ip-address portion of the address command specifies the IP host address that will be used by the IP interface within the subnet. This address must be unique within the subnet and specified in dotted decimal notation. Allowed values are IP addresses in the range 1.0.0.0 – 223.255.255.255 (with support of /31 subnets).

mask

The subnet mask in dotted decimal notation. When the IP prefix is not specified in CIDR notation, a space separates the ip-address from a traditional dotted decimal mask. The mask parameter indicates the complete mask that will be used in a logical 'AND’ function to derive the local subnet of the IP address. Allowed values are dotted decimal addresses in the range 128.0.0.0 – 255.255.255.254. A mask of 255.255.255.255 is reserved for system IP addresses.

netmask

Specifies a string of 0s and 1s that mask or screen out the network part of an IP address so that only the host computer part of the address remains.

broadcast

The optional broadcast parameter overrides the default broadcast address used by the IP interface when sourcing IP broadcasts on the IP interface. If no broadcast format is specified for the IP address, the default value is host-ones which indicates a subnet broadcast address. Use this parameter to change the broadcast address to all-ones or revert back to a broadcast address of host-ones.

The broadcast format on an IP interface can be specified when the IP address is assigned or changed. This parameter does not affect the type of broadcasts that can be received by the IP interface. A host sending either the local broadcast (all-ones) or the valid subnet broadcast address (host-ones) will be received by the IP interface. (Default: host-ones)

all-ones

The all-ones keyword following the broadcast parameter specifies the broadcast address used by the IP interface for this IP address will be 255.255.255.255, also known as the local broadcast.

host-ones

The host-ones keyword following the broadcast parameter specifies that the broadcast address used by the IP interface for this IP address will be the subnet broadcast address. This is an IP address that corresponds to the local subnet described by the ip-address and the mask-length or mask with all the host bits set to binary one. This is the default used by an IP interface.

The broadcast parameter within the address command does not have a negate feature, which is usually used to revert a parameter to the default value. To change the broadcast type to host-ones after being changed to all-ones, the address command must be executed with the broadcast parameter defined.

igp-inhibit

The optional igp-inhibit parameter signals that the given secondary IP interface should not be recognized as a local interface by the running IGP. For OSPF and IS-IS, this means that the specified secondary IP interfaces will not be injected and used as passive interfaces and will not be advertised as internal IP interfaces into the IGP’s link state database. For RIP, this means that these secondary IP interfaces will not source RIP updates.

track-srrp srrp-instance

Specifies the SRRP instance ID that this interface route needs to track.

Platforms

All

secondary

Syntax

[no] secondary path-name

Context

[Tree] (config>router>mpls>lsp secondary)

Full Context

configure router mpls lsp secondary

Description

This command specifies an alternative path that the LSP uses if the primary path is not available. This command is optional and is not required if the config router mpls lsp lsp-name primary path-name command is specified. After the switch over from the primary to the secondary, the system continuously tries to revert to the primary path. The switch back to the primary path is based on the retry-timer interval.

For RSVP-TE LSPs, up to eight secondary paths can be specified (or seven if a primary is configured). For SR-TE LSPs, up to three paths of any type (with a maximum of one primary) can be configured. By default, a secondary path is non-standby unless the standby keyword is configured. All non-standby secondary paths are considered equal and the first available path is used.

The system does not switch among secondary paths. The system starts the signaling (RSVP-TE) or programming (SR-TE) of all non-standby secondary paths at the same time. Retry counters are maintained for each unsuccessful attempt. After the retry limit is reached on a path, the system does not attempt to signal the path and administratively shuts down the path. The first successfully established non-standby secondary path is made the active path for the LSP.

The no form of this command removes the association between this path-name and lsp-name. All specific configurations for this association are deleted. The secondary path must be shut down prior to deleting it. The no secondary path-name command does not result in any action except a warning message on the console indicating that the secondary path is administratively up.

Parameters

path-name

Specifies the case-sensitive alphanumeric name label for the LSP path, up to 64 characters.

Platforms

All

secondary

Syntax

secondary {ip-address/mask | ip-address netmask} [ broadcast {all-ones | host-ones}] [igp-inhibit] [track-srrp srrp-instance]

no secondary {ip-address/mask | ip-address netmask}

Context

[Tree] (config>router>if secondary)

Full Context

configure router interface secondary

Description

This command assigns additional IP addresses to the interface. Up to 16 total primary and secondary IPv4 and IPv6 addresses can be assigned to network interfaces, and up to 256 to access interfaces. Each address can be configured in an IP address, IP subnet, or broadcast address format.

CAUTION:

Configurations must not exceed 16 secondary IP addresses when IPsec, GRE, L2TPv3, or IP in IP protocols are active on an access interface.

Parameters

ip-address

Specifies the IP address of the IP interface. The ip-address portion of the address command specifies the IP host address that will be used by the IP interface within the subnet. This address must be unique within the subnet and specified in dotted decimal notation.

Values

1.0.0.0 to 223.255.255.255

/

The forward slash is a parameter delimiter that separates the ip-address portion of the IP address from the mask that defines the scope of the local subnet. No spaces are allowed between the ip-addr, the "/” and the mask-length parameter. If a forward slash does not immediately follow the ip-addr, a dotted decimal mask must follow the prefix.

mask

Specifies the subnet mask length when the IP prefix is specified in CIDR notation. When the IP prefix is specified in CIDR notation, a forward slash (/) separates the ip-address from the mask parameter. The mask parameter indicates the number of bits used for the network portion of the IP address; the remainder of the IP address is used to determine the host portion of the IP address. Allowed values are integers in the range 1 to 32. A mask length of 32 is reserved for system IP addresses.

Values

1 to 32

netmask

Specifies the subnet mask in dotted decimal notation. When the IP prefix is not specified in CIDR notation, a space separates the ip-address from a traditional dotted decimal mask. The mask parameter indicates the complete mask that will be used in a logical 'AND’ function to derive the local subnet of the IP address. A mask of 255.255.255.255 is reserved for system IP addresses.

Values

128.0.0.0 to 255.255.255.255

broadcast

The optional broadcast parameter overrides the default broadcast address used by the IP interface when sourcing IP broadcasts on the IP interface. If no broadcast format is specified for the IP address, the default value is host-ones, which indicates a subnet broadcast address. Use this parameter to change the broadcast address to all-ones or revert back to a broadcast address of host-ones.

The broadcast parameter within the address command does not have a negate feature, which is usually used to revert a parameter to the default value. To change the broadcast type to host-ones after being changed to all-ones, the address command must be executed with the broadcast parameter defined.

The broadcast format on an IP interface can be specified when the IP address is assigned or changed.

This parameter does not affect the type of broadcasts that can be received by the IP interface. A host sending either the local broadcast (all-ones) or the valid subnet broadcast address (host-ones) will be received by the IP interface.

all-ones

The all-ones keyword following the broadcast parameter specifies that the broadcast address used by the IP interface for this IP address will be 255.255.255.255, also known as the local broadcast.

host-ones

The host-ones keyword following the broadcast parameter specifies that the broadcast address used by the IP interface for this IP address will be the subnet broadcast address. This is an IP address that corresponds to the local subnet described by the ip-address and the mask with all the host bits set to binary 1. This is the default broadcast address used by an IP interface.

igp-inhibit

The secondary IP address should not be recognized as a local interface by the running IGP.

srrp-instance

Specifies the SRRP instance ID that this interface route needs to track.

Platforms

All

secondary-config

secondary-config

Syntax

secondary-config file-url

no secondary-config

Context

[Tree] (bof secondary-config)

Full Context

bof secondary-config

Description

This command specifies the name and location of the secondary configuration file.

The system attempts to use the configuration as specified in secondary-config if the primary config cannot be located. If the secondary-config file cannot be located, the system attempts to obtain the configuration from the location specified in the tertiary-config.

Note that if an error in the configuration file is encountered, the boot process aborts.

The no form of this command removes the secondary-config configuration.

Parameters

file-url

Specifies the secondary configuration file location, expressed as a file URL.

Values

file-url

[local-url | remote-url] (up to 180 characters)

local-url

[cflash-id/][file-path]

remote-url

[{ftp://| tftp://} login:pswd@remote-locn/][file-path]

cflash-id

cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:

Platforms

All

secondary-dns

secondary-dns

Syntax

secondary-dns ip-address

no secondary-dns

Context

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>dhcp secondary-dns)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>dhcp secondary-dns)

Full Context

configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range dhcp secondary-dns

configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range dhcp secondary-dns

Description

This command configures the secondary DNS address to be returned via DHCP on WLAN-GW ISA.

The no form of this command reverts to the default.

Parameters

ip-address

Specifies the secondary DNS address.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

secondary-dns

Syntax

secondary-dns ip-address

no secondary-dns

Context

[Tree] (config>service>vprn>dns secondary-dns)

Full Context

configure service vprn dns secondary-dns

Description

This command configures the secondary DNS server for DNS name resolution. The secondary DNS server is used only if the primary DNS server does not respond.

DNS name resolution can be used when executing ping, traceroute, and service-ping, and also when defining file URLs. DNS name resolution is not supported when DNS names are embedded in configuration files.

The no form of this command removes the secondary DNS server from the configuration.

Default

no secondary-dns — No secondary DNS server is configured.

Parameters

ip-address

The IP or IPv6 address of the secondary DNS server.

Values

ipv4-address -a.b.c.d

ipv6-address:

x:x:x:x:x:x:x:x[-interface]

x:x:x:x:x:x:d.d.d.d[-interface]

x: [0 to FFFF]H

d: [0 to 255]D

interface - 32 characters max, for link local addresses.

Platforms

All

secondary-dns

Syntax

secondary-dns ip-address

no secondary-dns [ip-address]

Context

[Tree] (bof secondary-dns)

Full Context

bof secondary-dns

Description

This command configures the secondary DNS server for DNS name resolution. The secondary DNS server is used only if the primary DNS server does not respond.

DNS name resolution can be used when executing ping, traceroute, and service-ping, and also when defining file URLs. DNS name resolution is not supported when DNS names are embedded in configuration files.

The no form of this command removes the secondary DNS server from the configuration.

Default

no secondary-dns

Parameters

ip-address

Specifies the IP or IPv6 address of the secondary DNS server.

Values

ipv4-address

a.b.c.d

ipv6-address

x:x:x:x:x:x:x:x[-interface]

x:x:x:x:x:x:d.d.d.d[-interface]

x: [0 to FFFF]H

d: [0 to 255]D

interface

up to 32 characters for link local addresses

Note:

IPv6 is applicable to the 7750 SR and 7950 XRS only.

Platforms

All

secondary-fast-retry-timer

secondary-fast-retry-timer

Syntax

secondary-fast-retry-timer seconds

no secondary-fast-retry-timer

Context

[Tree] (config>router>mpls secondary-fast-retry-timer)

Full Context

configure router mpls secondary-fast-retry-timer

Description

This command specifies the value used as the fast retry timer for a secondary path. If the first attempt to set up a secondary path fails due to a path error, the fast retry timer will be started for the secondary path so that the path can be retried sooner. If the next attempt also fails, further retries for the path will use the configured value for LSP retry timer.

If retry-timer for the LSP is configured to be less than the MPLS secondary-fast-retry-timer, all retries for the secondary path will use the LSP retry-timer.

The no form of this command reverts to the default.

Default

no secondary-fast-retry-timer

Parameters

seconds

Specifies the value (in seconds), used as the fast retry timer for a secondary path

Values

1 to 10

Platforms

All

secondary-image

secondary-image

Syntax

secondary-image file-url

no secondary-image

Context

[Tree] (bof secondary-image)

Full Context

bof secondary-image

Description

This command specifies the secondary directory location for runtime image file loading.

The system attempts to load all runtime image files configured in the primary-image first. If this fails, the system attempts to load the runtime images from the location configured in the secondary-image. If the secondary image load fails, the tertiary image specified in tertiary-image is used.

All runtime image files (*.tim files) must be located in the same directory.

The no form of this command removes the secondary-image configuration.

Parameters

file-url

Specifies the file URL; can be either local (this CPM) or a remote FTP server.

Values

file-url

{local-url | remote-url} (up to 180 characters)

local-url

[cflash-id/][file-path]

remote-url

[{ftp://| tftp://} login:pswd@remote-locn/][file-path]

cflash-id

cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:

Platforms

All

secondary-ip-address

secondary-ip-address

Syntax

secondary-ip-address ipv4-address

no secondary-ip-address

Context

[Tree] (config>router>bgp>orr>location secondary-ip-address)

Full Context

configure router bgp optimal-route-reflection location secondary-ip-address

Description

This command specifies the secondary IP address of a reference location used for BGP optimal route reflection. Up to three IPv4 addresses and three IPv6 addresses can be specified per location.

If the TE DB is unable to find a node in its topology database that matches the primary address, then the TE DB tries to find a node with the matching secondary address. If this attempt also fails, the TE DB then tries to find a node with the matching tertiary address.

The IP addresses specified for a location should be topologically "close” to a set of clients that should all receive the same optimal path for that location.

The no form of this command removes the secondary IP address information.

Default

no secondary-ip-address

Parameters

ipv4-address

Specifies the secondary IPv4 address of a location, expressed in dotted decimal notation.

Values

a.b.c.d

Platforms

All

secondary-ipv6-address

secondary-ipv6-address

Syntax

secondary-ipv6-address ipv6-address

no secondary-ipv6-address

Context

[Tree] (config>router>bgp>orr>location secondary-ipv6-address)

Full Context

configure router bgp optimal-route-reflection location secondary-ipv6-address

Description

This command specifies the secondary IPv6 address of a reference location used for BGP optimal route reflection. Up to three IPv4 addresses and three IPv6 addresses can be specified per location.

If the TE DB is unable find a node in its topology database that matches a primary address of the location, then it tries to find a node matching a secondary address. If this attempt also fails, the TE DB tries to find a node matching a tertiary address.

The IP addresses specified for a location should be topologically "close” to a set of clients that should all receive the same optimal path for that location.

The no form of this command removes the secondary IPv6 address information.

Default

no secondary-ipv6-address

Parameters

ipv6-address

Specifies the secondary IPv6 address of a location.

Values

ipv6-address:

  • x:x:x:x:x:x:x:x (eight 16-bit pieces)

  • x:x:x:x:x:x:d.d.d.d

  • x: [0 to FFFF]H

  • d: [0 to 255]D

Platforms

All

secondary-location

secondary-location

Syntax

secondary-location file-url

no secondary-location

Context

[Tree] (config>system>software-repository secondary-location)

Full Context

configure system software-repository secondary-location

Description

This command configures the secondary location for the files in the software repository. See the software-repository command description for more information.

The no form of the command removes the secondary location.

Parameters

file-url

Specifies the secondary location to be used to access the files in the software repository.

Values

file url

local-url | remote-url

local-url

[cflash-id/][file-path]

200 chars maximum, including cflash-id directory length 99 characters maximum each

remote-url

[{ftp://} login:pswd@remote-locn/][file-path]

243 characters maximum

directory length 99 characters maximum each

remote-locn

[hostname | ipv4-address | [ipv6- address]]

ipv4-address

a.b.c.d

ipv6-address

x:x:x:x:x:x:x:x[-interface]

x:x:x:x:x:x:d.d.d.d[-interface]

x - [0 to FFFF]H

d - [0 to 255]D

interface - 32 characters max, for link local addresses

cflash-id

cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

secondary-nbns

secondary-nbns

Syntax

secondary-nbns ip-address

no secondary-nbns

Context

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>dhcp secondary-nbns)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>dhcp secondary-nbns)

Full Context

configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range dhcp secondary-nbns

configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range dhcp secondary-nbns

Description

This command configures the secondary NBNS address to be returned via DHCP on WLAN-GW ISA.

The no form of this command reverts to the default.

Parameters

ip-address

Specifies the secondary NBNS address.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

secondary-path

secondary-path

Syntax

secondary-path

Context

[Tree] (config>mcast-mgmt>bw-plcy>t2-paths secondary-path)

Full Context

configure mcast-management bandwidth-policy t2-paths secondary-path

Description

Commands in this context configure secondary path queue parameters. This command overrides the default path limit for the secondary path, which is one of the three ingress multicast paths into the switch fabric.

Platforms

7450 ESS, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-7/12/12e, 7750 SR-s, 7950 XRS, VSR

secondary-ports

secondary-ports

Syntax

secondary-ports

Context

[Tree] (config>service>template>vpls-template>mac-move secondary-ports)

[Tree] (config>service>vpls>mac-move secondary-ports)

Full Context

configure service template vpls-template mac-move secondary-ports

configure service vpls mac-move secondary-ports

Description

This command opens configuration context for defining secondary vpls-ports. VPLS ports that were declared as primary prior to the execution of this command will be moved from primary port-level to secondary port-level. Changing a port to the tertiary level can only be done by first removing it from the primary port-level.

Platforms

All

secondary-retry-limit

secondary-retry-limit

Syntax

secondary-retry-limit {number | infinite}

no secondary-retry-limit

Context

[Tree] (config>router>mpls>lsp>auto-bandwidth>use-last-adj-bw secondary-retry-limit)

Full Context

configure router mpls lsp auto-bandwidth use-last-adj-bw secondary-retry-limit

Description

This command configures the maximum number of retry attempts for secondary paths. After each successful attempt, the counter is reset to zero.

When the specified number is reached, no more attempts are made and the path is put into the shutdown state.

A value of 0 or infinite means that the system will retry forever.

The no form of this command reverts to the default.

Default

no secondary-retry-limit

Parameters

number

Specifies the number of retries.

Values

0 to 10000

Default

5

infinite

Specifies a retry limit of infinity.

Platforms

All

secondary-shaper-hashing

secondary-shaper-hashing

Syntax

[no] secondary-shaper-hashing

Context

[Tree] (config>subscr-mgmt>sub-prof secondary-shaper-hashing)

Full Context

configure subscriber-mgmt sub-profile secondary-shaper-hashing

Description

This command enables LAG secondary shaper ID hashing. With this feature enabled, secondary shaper ID hashing can span multiple forwarding complexes on egress LAG. The default is to perform secondary shaper ID hashing on egress and requires all active LAG members to be on the same forwarding complex.

The no form of this command enables the default behavior.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

secondary-url

secondary-url

Syntax

secondary-url url

no secondary-url

Context

[Tree] (config>python>py-script secondary-url)

Full Context

configure python python-script secondary-url

Description

This command specifies the location of secondary Python script. The system supports three locations for each Python-script. Users can store scripts file on either a local CF card or a FTP server.

The no form of this command removes the URL.

Parameters

url

Specifies the secondary URL of the Python script, up to 180 characters, either a local CF card URL or a FTP server URL.

Platforms

All

seconds

seconds

Syntax

seconds

Context

[Tree] (config>test-oam>sath>svc-test>dur>cir-pir seconds)

[Tree] (config>test-oam>sath>svc-test>dur>cir seconds)

[Tree] (config>test-oam>sath>svc-test>dur>perf seconds)

[Tree] (config>test-oam>sath>svc-test>dur>policing seconds)

Full Context

configure test-oam service-activation-testhead service-test test-duration cir-pir seconds

configure test-oam service-activation-testhead service-test test-duration cir seconds

configure test-oam service-activation-testhead service-test test-duration performance seconds

configure test-oam service-activation-testhead service-test test-duration policing seconds

Description

This command configures the seconds portion of the overall duration of a CIR, CIR-PIR, performance, or policing test.

Parameters

seconds

Specifies the number of seconds to run the test. This parameter applies to all test types.

Values

0 to 59

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

secret

secret

Syntax

secret secret [hash | hash2 | custom]

no secret

Context

[Tree] (config>router>wpp>portals>portal secret)

[Tree] (config>service>vprn>wpp>portals>portal secret)

Full Context

configure router wpp portals portal secret

configure service vprn wpp portals portal secret

Description

This command configures the secret that is used by WPPv2 to authenticate the messages between portal and BRAS.

The no form of this command removes the secret and hash from the configuration.

Parameters

secret

Specifies the secret key to access the server, up to 64 characters.

hash

Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

hash2

Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

custom

Specifies the custom encryption to management interface.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

secret

Syntax

secret secret [hash | hash2 | custom]

no secret

Context

[Tree] (config>router>radius-proxy>server secret)

[Tree] (config>service>vprn>radius-proxy>server secret)

Full Context

configure router radius-proxy server secret

configure service vprn radius-proxy server secret

Description

This command configures the shared secret key. The RADIUS client must have the same key to communicate with the RADIUS-proxy server.

The no form of this command removes the parameters from the configuration.

Parameters

secret key

Specifies the secret key up to 64 characters to access the RADIUS server. This secret key must match the password on the RADIUS server.

Values

hash-key: Up to 33 characters

hash2-key: Up to 55 characters.

hash

Specifies that the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

hash2

Specifies that the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

custom

Specifies the custom encryption to management interface.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

secret

Syntax

secret secret-key | hash-key [hash | hash2 | custom]

no secret

Context

[Tree] (config>aaa>isa-radius-plcy>servers>server secret)

Full Context

configure aaa isa-radius-policy servers server secret

Description

This command configures the secret key to access the RADIUS server. This secret key must match the password on the RADIUS server.

Default

no secret

Parameters

hash

Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

hash2

Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

custom

Specifies the custom encryption to management interface.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

section-trace

section-trace

Syntax

section-trace {increment-z0 | byte value | string string}

Context

[Tree] (config>port>sonet-sdh section-trace)

Full Context

configure port sonet-sdh section-trace

Description

This command configures the section trace bytes in the SONET section header to inter-operate with some older versions of ADMs or regenerators that require an incrementing STM ID. You can explicitly configure an incrementing STM value rather than a static one in the SDH overhead by specifying the z0-increment.

This command is supported on TDM satellite.

Default

section-trace byte 0x1

Parameters

increment-z0

Configures an incrementing STM ID instead of a static value.

value

Sets values in SONET header bytes.

Default

0x1

Values

0 to 255 or 0x00 to 0xFF

string

Specifies a text string that identifies the section. The string can be a maximum of 16 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

secure-boot

secure-boot

Syntax

secure-boot

Context

[Tree] (admin>system>security secure-boot)

Full Context

admin system security secure-boot

Description

Commands in this context administratively provision secure boot.

Platforms

7750 SR-1, 7750 SR-s, 7950 XRS-20e

secure-nd

secure-nd

Syntax

[no] secure-nd

Context

[Tree] (config>service>ies>if>ipv6 secure-nd)

Full Context

configure service ies interface ipv6 secure-nd

Description

This command enables Secure Neighbor Discovery (SeND) on the IPv6 interface.

The no form of this command reverts to the default and disabled SeND.

Platforms

All

secure-nd

Syntax

[no] secure-nd

Context

[Tree] (config>service>vprn>if>ipv6 secure-nd)

Full Context

configure service vprn interface ipv6 secure-nd

Description

This command enables Secure Neighbor Discovery (SeND) on the IPv6 interface.

The no form of this command reverts to the default and disabled SeND.

Platforms

All

secure-nd

Syntax

[no] secure-nd

Context

[Tree] (config>router>if>ipv6 secure-nd)

Full Context

configure router interface ipv6 secure-nd

Description

This command enables Secure Neighbor Discovery (SeND) on the IPv6 interface.

The no form of this command reverts to the default and disabled SeND.

Platforms

All

secure-nd-export

secure-nd-export

Syntax

secure-nd-export

Context

[Tree] (admin>certificate secure-nd-export)

Full Context

admin certificate secure-nd-export

Description

This command exports IPv6 Secure Neighbor Discovery (SeND) certificates to the file cf[1..3]:\system-pki\secureNdKey in PKCS #7 DER format.

Platforms

All

secure-nd-import

secure-nd-import

Syntax

secure-nd-import input url-string format input-format [password password] [key-rollover]

Context

[Tree] (admin>certificate secure-nd-import)

Full Context

admin certificate secure-nd-import

Description

This command imports IPv6 Secure Neighbor Discovery (SeND) certificates from a file, and saves them to cf[1..3]:\system-pki\secureNdKey in PKCS #7 DER format.

Parameters

url-string

Specifies the name of an input file up to 99 characters.

Values

local-url

<cflash-id>\<file-path>

cflash-id

cf1:| cf2:| cf3:

input-format

Specifies the input file format.

Values

pkcs12, pem, or der

password

Specifies the password to decrypt the input file if it is an encrypted PKCS#12 file.

Values

32 characters maximum

Platforms

All

security

security

Syntax

security

Context

[Tree] (config>system security)

Full Context

configure system security

Description

Commands in this context configure a number of central security settings, such as DDoS protection, users, authorization profiles, and certificates. Access to these commands should be restricted to highly trusted users and device administrators.

Platforms

All

security-association

security-association

Syntax

security-association security-entry-id authentication-key hex-string encryption-key hex-string spi spi transform transform-id direction direction

no security-association security-entry-id direction direction

Context

[Tree] (config>service>vprn>if>sap>ipsec-tunnel>manual-keying security-association)

[Tree] (config>router>if>ipsec>ipsec-tunnel>manual-keying security-association)

[Tree] (config>service>ies>if>ipsec>ipsec-tunnel>manual-keying security-association)

[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel>manual-keying security-association)

Full Context

configure service vprn interface sap ipsec-tunnel manual-keying security-association

configure router interface ipsec ipsec-tunnel manual-keying security-association

configure service ies interface ipsec ipsec-tunnel manual-keying security-association

configure service vprn interface ipsec ipsec-tunnel manual-keying security-association

Description

This command configures the information required for manual keying SA creation.

The no form of this command removes the security-association parameters from the configuration.

Parameters

security-entry-id

Specifies the ID of an SA entry.

Values

1 to 16

authentication-key hex-string

Specifies an authentication key.

Values

none or 0x0 to 0xFFFFFFFF...(max 128 hex nibbles)

encryption-key hex-string

Specifies the key used for the encryption algorithm.

Values

none or 0x0 to 0xFFFFFFFF...(max 64 hex nibbles)

spi spi

Specifies the Security Parameter Index (SPI) used to look up the instruction to verify and decrypt the incoming IPsec packets when the direction is inbound. When the direction is outbound, the SPI that will be used in the encoding of the outgoing packets. The remote node can use this SPI to lookup the instruction to verify and decrypt the packet.

Values

256 to 16383

transform transform-id

Specifies the transform entry that will be used by this SA entry. This object should be specified for all the entries created which are manual SAs. If the value is dynamic, then this value is irrelevant and will be zero.

Values

1 to 2048

direction

Specifies the direction of an IPsec tunnel.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure service vprn interface sap ipsec-tunnel manual-keying security-association

VSR

  • configure service ies interface ipsec ipsec-tunnel manual-keying security-association
  • configure router interface ipsec ipsec-tunnel manual-keying security-association
  • configure service vprn interface ipsec ipsec-tunnel manual-keying security-association

security-association

Syntax

security-association spi spi authentication-key authentication-key encryption-key encryption-key [crypto]

no security-association spi spi

Context

[Tree] (config>grp-encryp>encryp-keygrp security-association)

Full Context

configure group-encryption encryption-keygroup security-association

Description

This command is used to create a security association for a specific SPI value in a key group. The command is also used to enter the authentication and encryption key values for the security association, or to delete a security association.

The SPI value used for the security association is a node-wide unique value, meaning that no two security associations in any key group on the node may share the same SPI value.

Keys are entered in cleartext. After configuration, they are never displayed in their original, cleartext form. Keys are displayed in an encrypted form, which is indicated by the system-appended crypto keyword when an info or an admin>save command is run. For security reasons, keys encrypted on one node are not usable on other nodes (that is, keys are not exchangeable between nodes).

The no form of the command removes the security association and related key values from the list of security associations for the key group. If the no form of the command is attempted using the same SPI value that is configured for active-outbound-sa, then a warning is issued and the command is blocked. If the no form of the command is attempted on the last SPI in the key group and the key group is configured on a service, then the command is blocked.

Parameters

spi

Specifies the SPI ID of the SPI being referenced for the security association.

Values

1 to 127

authentication-key

Specifies the authentication key for the SPI, in hexadecimal format. The number of characters in the hexadecimal string must be 64 or 128, depending on whether the authentication algorithm is set to sha256 or sha512, respectively.

encryption-key

Specifies the encryption key for the SPI, in hexadecimal format. The number of characters in the hexadecimal string must be 32 or 64, depending on whether the encryption algorithm is set to aes128 or aes256, respectively.

crypto

Displays the keys showing on the CLI info display in an encrypted form.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

security-param-index

security-param-index

Syntax

security-param-index security-parameter-index

no security-param-index

Context

[Tree] (config>test-oam>build-packet>header>ipsec-auth security-param-index)

[Tree] (debug>oam>build-packet>packet>field-override>header>ipsec-auth security-param-index)

Full Context

configure test-oam build-packet header ipsec-auth security-param-index

debug oam build-packet packet field-override header ipsec-auth security-param-index

Description

This command defines the security index to be used in the IPsec header. This same context can be used for IPv4 and IPv6 packets.

The no form of this command removes the security parameter index value.

Default

security-param-index 1

Parameters

security-parameter-index

Specifies the IPsec security parameter index to be used in the IPsec header.

Values

1 to 4294967295

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

security-parameter

security-parameter

Syntax

security-parameter sec

no security-parameter

Context

[Tree] (config>service>ies>if>ipv6>secure-nd security-parameter)

Full Context

configure service ies interface ipv6 secure-nd security-parameter

Description

This command configures the security parameter used in the generation of a Cryptographically Generated Address (CGA).

Parameters

sec

Specifies the security parameter.

Values

0 to 1

Platforms

All

security-parameter

Syntax

security-parameter sec

[no] security-parameter

Context

[Tree] (config>service>vprn>if>send security-parameter)

Full Context

configure service vprn interface ipv6 secure-nd security-parameter

Description

This command configures the security parameter used in the generation of a Cryptographically Generated Address (CGA).

Parameters

sec

Specifies the security parameter.

Values

0 to 1

Platforms

All

security-parameter

Syntax

security-parameter sec

no security-parameter

Context

[Tree] (config>router>if>ipv6>secure-nd security-parameter)

Full Context

configure router interface ipv6 secure-nd security-parameter

Description

This command configures the security parameter used in the generation of a Cryptographically Generated Address (CGA).

Parameters

sec

Specifies the security parameter.

Values

0 to 1

Platforms

All

security-policy

security-policy

Syntax

security-policy security-policy-id [create]

no security-policy security-policy-id

Context

[Tree] (config>router>ipsec security-policy)

[Tree] (config>service>vprn>ipsec security-policy)

Full Context

configure router ipsec security-policy

configure service vprn ipsec security-policy

Description

This command configures a security policy to use for an IPsec tunnel.

The no form of this command removes the security policy ID from the configuration.

Parameters

security-policy-id

specifies a value to be assigned to a security policy.

Values

1 to 32768

create

Keyword used to create the security policy instance. The create keyword requirement can be enabled or disabled in the environment>create context.

Platforms

VSR

  • configure router ipsec security-policy

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure service vprn ipsec security-policy

security-policy

Syntax

security-policy security-policy-id [strict-match]

no security-policy

Context

[Tree] (config>service>ies>if>ipsec>ipsec-tunnel security-policy)

[Tree] (config>service>vprn>if>sap>ipsec-tunnel security-policy)

[Tree] (config>router>if>ipsec>ipsec-tunnel security-policy)

[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel security-policy)

Full Context

configure service ies interface ipsec ipsec-tunnel security-policy

configure service vprn interface sap ipsec-tunnel security-policy

configure router interface ipsec ipsec-tunnel security-policy

configure service vprn interface ipsec ipsec-tunnel security-policy

Description

This command configures an IPsec security policy. The policy may then be associated with static IPsec tunnels defined in the same routing instance.

With strict-match parameter enabled, when a CREATE_CHILD exchange request is received for a static IPsec tunnel, and this request is not a re-key request, then ISA matches the received TSi and TSr with the configured security policy. This can be a match only when a received TS (in TSi or TSr) address range matches exactly with the subnet in a security policy entry.

If there is no match, then the setup fails, and TS_UNACCEPTABLE is sent.

If there is a match, but there is an existing CHILD_SA for the matched security policy, then the setup fails, and NO_PROPOSAL_CHOSEN.

If there is a match, and there is not CHILD_SA for the matched entry, then the subnet is sent in the matched security-policy entry as TSi and TSr, and the CHILD_SA is created.

Default

no security-policy

Parameters

security-policy-id

Specifies the IPsec security policy entry that the tunnel will use.

Values

1 to 32768

strict-match

Enables strict match of security-policy entry.

Platforms

VSR

  • configure service vprn interface ipsec ipsec-tunnel security-policy
  • configure service ies interface ipsec ipsec-tunnel security-policy
  • configure router interface ipsec ipsec-tunnel security-policy

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure service vprn interface sap ipsec-tunnel security-policy

security-termination-policy

security-termination-policy

Syntax

security-termination-policy policy

no security-termination-policy

Context

[Tree] (config>anysec>tnl-enc>enc-grp security-termination-policy)

Full Context

configure anysec tunnel-encryption encryption-group security-termination-policy

Description

This command configures the local security termination policy parameters.

The no form of this command removes the security termination policy.

Default

no security-termination-policy

Parameters

policy

Specifies the local security termination policy name, up to 32 characters.

create

Keyword used to create the security termination policy.

Platforms

7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se

security-termination-policy

Syntax

security-termination-policy policy [create]

no security-termination-policy policy

Context

[Tree] (config>anysec>tnl-enc security-termination-policy)

Full Context

configure anysec tunnel-encryption security-termination-policy

Description

Commands in this context configure the security termination policy that identifies the set of attributes for locally terminating tunnels for this encryption group.

The no form of this command removes the security termination policy.

Default

no security-termination-policy

Parameters

policy

Specifies the local security termination policy name, up to 32 characters.

Platforms

7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se

seen-ip-radius-acct-policy

seen-ip-radius-acct-policy

Syntax

seen-ip-radius-acct-policy rad-acct-plcy-name

no seen-ip-radius-acct-policy

Context

[Tree] (config>app-assure>group>transit-ip-policy>radius seen-ip-radius-acct-policy)

Full Context

configure application-assurance group transit-ip-policy radius seen-ip-radius-acct-policy

Description

This command refers to a RADIUS accounting-policy to enable seen-IP notification.

The no form of this command removes the policy.

Default

no seen-ip-radius-acct-policy

Parameters

rad-acct-plcy-name

Specifies the RADIUS accounting policy name, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

segment

segment

Syntax

segment [segment-id] [create]

no segment segment-id

Context

[Tree] (conf>router>segment-routing>sr-policies>policy>seg-list segment)

Full Context

configure router segment-routing sr-policies static-policy segment-list segment

Description

This command creates the context to configure a segment inside a segment-list of a statically-defined segment routing policy candidate path.

A segment list of a statically-defined SR policy candidate path of type sr-mpls can only accept a segment of type mpls-label.

A segment list of a statically-defined SR policy candidate path of type srv6 can only accept a segment of type srv6-sid. However, you can mix SRv6 segments derived from both classic SRv6 and micro-segment SRv6 locators.

The no form of this command deletes the segment context.

Default

no segment

Parameters

segment-id

Specifies the segment ID number.

Values

1 to 11 (for segment ID type mpls-label)

1 to 7 (for segment ID type srv6-sid) in a classic SRv6 policy candidate path

1 to 24 (for segment ID type srv6-sid) in a micro-segment SRv6 policy candidate path

create

Keyword used to create the list.

Platforms

All

segment-list

segment-list

Syntax

segment-list segment-list

no segment-list

Context

[Tree] (config>saa>test>type-multi-line>lsp-trace>sr-policy segment-list)

[Tree] (config>saa>test>type-multi-line>lsp-ping>sr-policy segment-list)

Full Context

configure saa test type-multi-line lsp-trace sr-policy segment-list

configure saa test type-multi-line lsp-ping sr-policy segment-list

Description

This command configures the segment list ID.

The no form of this command removes the configuration.

Parameters

segment-list

Specifies the segment list number.

Values

1 to 32

Platforms

All

segment-list

Syntax

segment-list [1..32] [create]

no segment-list list

Context

[Tree] (conf>router>segment-routing>sr-policies>policy segment-list)

Full Context

configure router segment-routing sr-policies static-policy segment-list

Description

This command creates the context to configure a segment list for the statically-defined segment routing policy candidate path.

Up to 32 segment lists are supported per policy.

The no form of this command deletes the segment list.

Parameters

create

Keyword used to create the segment list.

Platforms

All

segment-list

Syntax

segment-list segment-list-id

no segment-list

Context

[Tree] (config>oam-pm>session>ip>tunnel>mpls>sr-policy segment-list)

Full Context

configure oam-pm session ip tunnel mpls sr-policy segment-list

Description

This command configures the segment list ID for the specific policy.

The no form of this command removes segment list ID.

Default

no segment-list

Parameters

segment-list-id

Specifies the segment list ID.

Values

1 to 32

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

segment-routing

segment-routing

Syntax

segment-routing

Context

[Tree] (config>router>bgp segment-routing)

Full Context

configure router bgp segment-routing

Description

Commands in this context configure options related to BGP segment routing (prefix SID support).

Platforms

All

segment-routing

Syntax

segment-routing

no segment-routing

Context

[Tree] (config>router>isis segment-routing)

Full Context

configure router isis segment-routing

Description

Commands in this context configure segment routing parameters within a given IGP instance.

Segment routing adds to IS-IS and OSPF routing protocols the ability to perform shortest path routing and source routing using the concept of abstract segment. A segment can represent a local prefix of a node, a specific adjacency of the node (interface or next-hop), a service context, or a specific explicit path over the network. For each segment, the IGP advertises an identifier referred to as Segment ID (SID).

When segment routing is used together with MPLS data plane, the SID is a standard MPLS label. A router forwarding a packet using segment routing will thus push one or more MPLS labels.

Segment routing using MPLS labels can be used in both shortest path routing applications and in traffic engineering applications. This feature implements the shortest path forwarding application.

After segment routing is successfully enabled in the IS-IS or OSPF instance, the router will perform the following operations:

  1. Advertise the Segment Routing Capability Sub-TLV to routers in all areas/levels of this IGP instance. However, only neighbors with which it established an adjacency interprets the SID or label range information and use it for calculating the label to swap to or push for a given resolved prefix SID.

  2. Advertise the assigned index for each configured node SID in the new prefix SID sub-TLV with the N-flag (node-SID flag) set. Then the segment routing module programs the incoming label map (ILM) with a pop operation for each local node SID in the data path.

  3. Assign and advertise automatically an adjacency SID label for each formed adjacency over a network IP interface in the new adjacency SID sub-TLV. The segment routing module programs the incoming label map (ILM) with a pop operation, in effect with a swap to an implicit null label operation, for each advertised adjacency SID.

  4. Resolve received prefixes and if a prefix SID sub-TLV exists, the Segment Routing module programs the ILM with a swap operation and also an LTN with a push operation both pointing to the primary/LFA NHLFE. An SR tunnel is also added to the TTM.

When the user enables segment routing in a given IGP instance, the main SPF and LFA SPF are computed normally and the primary next-hop and LFA backup next-hop for a received prefix are added to RTM without the label information advertised in the prefix SID sub-TLV.

Platforms

All

segment-routing

Syntax

[no] segment-routing

Context

[Tree] (config>router>ospf segment-routing)

[Tree] (config>router>ospf3 segment-routing)

Full Context

configure router ospf segment-routing

configure router ospf3 segment-routing

Description

Commands in this context configure segment routing parameters within an IGP instance.

Segment routing adds to IS-IS, OSPF, or OSPF3 routing protocols the ability to perform shortest path routing and source routing using the concept of abstract segment. A segment can represent a local prefix of a node, a specific adjacency of the node (interface or next hop), a service context, or a specific explicit path over the network. For each segment, the IGP advertises an identifier referred to as a segment ID (SID).

When segment routing is used together with the MPLS data plane, the SID is a standard MPLS label. A router forwarding a packet using segment routing will thus push one or more MPLS labels.

Segment routing using MPLS labels can be used in both shortest path routing applications and traffic engineering applications. This feature implements the shortest path forwarding application.

After segment routing is successfully enabled in the IS-IS, OSPF, or OSPF3 instance, the router will perform the following operations:

  • Advertise the Segment Routing Capability sub-TLV to routers in all areas or levels of the IGP instance. However, only neighbors with which the IGP instance established an adjacency will interpret the SID and label range information and use it for calculating the label to swap to or push for a particular resolved prefix SID.

  • Advertise the assigned index for each configured node SID in the new prefix SID sub-TLV with the N-flag (node SID flag) set. The segment routing module then programs the incoming label map (ILM) with a pop operation for each local node SID in the data path.

  • Automatically assign and advertise an adjacency SID label for each formed adjacency over a network IP interface in the new adjacency SID sub-TLV. The segment routing module programs the incoming label map (ILM) with a pop operation, in effect with a swap to an implicit null label operation, for each advertised adjacency SID.

  • Resolve received prefixes, and if a prefix SID sub-TLV exists, the segment routing module programs the ILM with a swap operation and programs an LSP ID to NHLFE (LTN) with a push operation, both pointing to the primary/LFA NHLFE. An SR tunnel is also added to the TTM.

When the user enables segment routing in an IGP instance, the main SPF and LFA SPF are computed normally and the primary next hop and LFA backup next hop for a received prefix are added to the RTM without the label information advertised in the prefix SID sub-TLV.

Platforms

All

segment-routing

Syntax

segment-routing

Context

[Tree] (config>router segment-routing)

Full Context

configure router segment-routing

Description

This command creates a context to configure protocol-independent parameters relating to segment routing.

Platforms

All

segment-routing-mpls

segment-routing-mpls

Syntax

segment-routing-mpls

Context

[Tree] (config>router>p2mp-sr-tree>replication-segment segment-routing-mpls)

Full Context

configure router p2mp-sr-tree replication-segment segment-routing-mpls

Description

Commands in this context configure the SR-MPLS parameters of the P2MP tree.

Platforms

All

segment-routing-v6

segment-routing-v6

Syntax

[no] segment-routing-v6

Context

[Tree] (conf>router>segment-routing>sr-policies>policy segment-routing-v6)

Full Context

configure router segment-routing sr-policies static-policy segment-routing-v6

Description

Commands in this context configure parameters of an SRv6 policy.

The no form of this command removes the configuration.

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

segment-routing-v6

Syntax

[no] segment-routing-v6

Context

[Tree] (config>router>segment-routing segment-routing-v6)

Full Context

configure router segment-routing segment-routing-v6

Description

Commands in this context configure global SRv6 parameters.

The no form of this command deletes the context.

Default

no segment-routing-v6

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

segment-routing-v6

Syntax

[no] segment-routing-v6

Context

[Tree] (config>router>isis segment-routing-v6)

Full Context

configure router isis segment-routing-v6

Description

Commands in this context configure SRv6 parameters specific to this IS-IS instance.

Note:

This context has its own shutdown command.The config>router>segment-routing>shutdown command only applies to SR-MPLS and does not impact this context.

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

segment-routing-v6

Syntax

[no] segment-routing-v6 [bgp bgp-instance]

Context

[Tree] (config>service>vprn>bgp-ipvpn segment-routing-v6)

[Tree] (config>service>vprn>bgp-evpn segment-routing-v6)

Full Context

configure service vprn bgp-ipvpn segment-routing-v6

configure service vprn bgp-evpn segment-routing-v6

Description

Commands in this context configure SRv6 parameters specific to this BGP-IPVPN or BGP-EVPN instance.

The no form of this command deletes the context.

Default

no segment-routing-v6

Parameters

bgp bgp-instance

Specifies the BGP instance. If this parameter is not specified, the value of "1" is used by default.

Values
1 to 2
Default
1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

segment-routing-v6

Syntax

[no] segment-routing-v6

Context

[Tree] (config>router>bgp segment-routing-v6)

Full Context

configure router bgp segment-routing-v6

Description

Commands in this context configure SRv6 parameters specific to this BGP instance.

The no form of this command deletes the context.

Default

no segment-routing-v6

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

segment-routing-v6

Syntax

[no] segment-routing-v6

Context

[Tree] (config>router>bgp>group>neighbor segment-routing-v6)

[Tree] (config>router>bgp>group segment-routing-v6)

Full Context

configure router bgp group neighbor segment-routing-v6

configure router bgp group segment-routing-v6

Description

Commands in this context configure SRv6 parameters.

The no form of this command deletes the context.

Note:

When configuring this command at the neighbor level, by default, the neighbor inherits route advertisement options from its BGP peer group. However, after this command is configured, there is no inheritance of any route advertisement options from the group level.

Default

no segment-routing-v6

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

segment-routing-v6

Syntax

segment-routing-v6 instance [create]

no segment-routing-v6 instance

Context

[Tree] (config>service>vprn segment-routing-v6)

[Tree] (config>service>vpls segment-routing-v6)

Full Context

configure service vprn segment-routing-v6

configure service vpls segment-routing-v6

Description

Commands in this context configure the SRv6 instance that is used in the service.

The no form of this command removes the configured SRv6 instance.

Parameters

instance

Specifies the SRv6 instance number enabled in the service.

Values

1, 2 (for VPRN)

1 (for VPLS)

create

Keyword used to create the SRv6 instance. The create keyword requirement can be enabled or disabled in the environment>create context.

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

segment-routing-v6

Syntax

segment-routing-v6 instance [create]

no segment-routing-v6 instance

Context

[Tree] (config>service>epipe segment-routing-v6)

Full Context

configure service epipe segment-routing-v6

Description

Commands in this context configure the SRv6 instance that is used in the service.

The no form of this command removes the configured SRv6 instance.

Parameters

instance

Specifies the SRv6 instance number enabled in the service.

Values

1

create

Keyword used to create the SRv6 instance. The create keyword requirement can be enabled or disabled in the environment>create context.

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

segment-routing-v6

Syntax

segment-routing-v6 [bgp bgp-instance][srv6-instance srv6-instance][default-locator name] [create]

no segment-routing-v6 [bgp bgp-instance]

Context

[Tree] (config>service>epipe>bgp-evpn segment-routing-v6)

[Tree] (config>service>vpls>bgp-evpn segment-routing-v6)

Full Context

configure service epipe bgp-evpn segment-routing-v6

configure service vpls bgp-evpn segment-routing-v6

Description

Commands in this context configure the SRv6 instance that is used in the service.

The no form of this command removes the configured SRv6 instance.

Parameters

bgp-instance

Specifies the SRv6 instance that is configured in the service and associated to an EVPN control plane.

Values

1, 2 (for Epipe)

1 (for VPLS)

srv6-instance

Specifies the SRv6 instance ID that exists in the service and is associated to a BGP EVPN control plane.

Values

1

default-locator

Keyword that refers to a regular or micro-segment locator that exists in the service SRv6 instance and is used as the default locator for the service.

name

Specifies a locator that exists in the service SRv6 instance and is used as the default locator for the service, up to 64 characters.

create

Keyword used to create the SRv6 instance. The create keyword requirement can be enabled or disabled in the environment>create context.

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR