s Commands – Part II

sel-mcast-advertisement

Syntax

[no] sel-mcast-advertisement

Context

[Tree] (config>service>vpls>bgp-evpn sel-mcast-advertisement)

Full Context

configure service vpls bgp-evpn sel-mcast-advertisement

Description

This command enables the advertisement of BGP EVPN Selective Multicast Ethernet Tag (SMET) routes.

The no form of this command disables the advertisement of BGP EVPN SMET routes.

Default

no sel-mcast-advertisement

Platforms

All

selection-criteria

Syntax

selection-criteria [best-port | highest-count | highest-weight] [slave-to-partner] [ subgroup-hold-time hold-time]

no selection-criteria

Context

[Tree] (config>lag selection-criteria)

Full Context

configure lag selection-criteria

Description

This command specifies which selection criteria should be used to select the active sub-group. If there is a tie for highest-count or highest-weight, the LAG will prefer the port with the lowest priority. If that does not break the tie, the currently active subgroup will stay active (that is, non-revertive behavior).

The no form of this command reverts to the default value.

Default

selection-criteria highest-count

Parameters

highest-count: Selects a sub-group with the highest number of eligible members as an active sub-group (not applicable to "power-off” mode of operations).

highest-weight: Selects a sub-group with the highest aggregate weight as an active subgroup (not applicable to "power-off” mode of operations). Aggregate weight is calculated as the sum of (65535 - port priority) all ports within a sub-group.

best-port: Selects a sub-group containing the port with highest priority port as an active subgroup. In case of equal port priorities, the sub-group containing the port with the lowest port-id is chosen.

slave-to-partner: The slave-to-partner keyword specifies that it, together with the selection criteria, should be used to select the active sub-group. An eligible member is a LAG-member link which can potentially become active. This means it is operationally up (not disabled) for use by the remote side. The slave-to-partner keyword can be used to control whether or not this latter condition is taken into account.

hold-time

Applicable with LACP enabled. Specifies the optional delay timer for switching to a newly selected active sub-group from the existing active sub-group. The timer delay applies only if the existing sub-group remains operationally up.

Values


not specified	Equivalent to specifying a value of 0. Specifies no delay and to switchover immediately to a new candidate active sub-group.
0 to 2000	Integer specifying the timer value in 10ths of a second.
infinite	Do not switchover from existing active sub-group if the subgroup remains UP. Manual switchover possible using tools perform lag force command.

Platforms

All

selective

Syntax

selective

Context

[Tree] (config>service>vpls>provider-tunnel selective)

[Tree] (config>service>vprn>mvpn>provider-tunnel selective)

Full Context

configure service vpls provider-tunnel selective

configure service vprn mvpn provider-tunnel selective

Description

Commands in this context specify selective provider tunnel parameters.

Platforms

All

selective

Syntax

selective

Context

[Tree] (config>router>gtm>provider-tunnel selective)

Full Context

configure router gtm provider-tunnel selective

Description

Commands in this context configure selective provider tunnel parameters.

Platforms

All

selective-label-ip

Syntax

selective-label-ip {no-install | route-table-install-only}

no selective-label-ip

Context

[Tree] (config>router>bgp selective-label-ip)

Full Context

configure router bgp selective-label-ip

Description

This command configures selective-label-ip for the BGP level.

The no-install option conserves labeled route table space on BGP-LU next-hop-self route reflectors. This option causes BGP-LU routes to be reflected downstream via the ABR with the next-hop-self update. BGP-LU routes are not installed to local MPLS tables or routing tables for use by local services.

The route-table-install-only option conserves labeled route table space on BGP-LU next-hop-self route reflectors and allows these routes to be used for IP transport, unlike the no-install option. When the route-table-install-only option is used, learned BGP-LU routes are also reflected downstream via the ABR with the next-hop-self update. BGP-LU routes are not installed to local MPLS tables for use by local services. These routes are installed to the RTM and used for the best route selection process.

Note: If local services need to use BGP-LU routes, the no-install and route-table-install-only options should not be used.

The default no form of this command installs BGP-LU routes to the datapath for local services and makes them available to the RTM for IP next-hop selection.

Default

no selective-label-ip

Parameters

no-install: Specifies that BGP-LU routes are not installed to local MPLS tables or routing tables.

route-table-install-only: Specifies the installation of BGP-LU routes to the RTM. BGP-LU routes are not installed to local MPLS tables for use by local services.

Platforms

All

selective-label-ip-prioritization

Syntax

[no] selective-label-ip-prioritization

Context

[Tree] (config>router>bgp selective-label-ip-prioritization)

Full Context

configure router bgp selective-label-ip-prioritization

Description

This command enables selective-label IP prioritization for BGP labeled IPv4 and IPv6 routes.

When this command is configured, every received labeled IPv4 and IPv6 route that is potentially usable by a local service is automatically prioritized for fast control plane reconvergence. When the reachability of a BGP next-hop changes, these labeled IPv4 and IPv6 routes are updated into the route table first, along with other routes manually tagged as high priority by import policies.

A /32 or /128 labeled unicast route (and associated BGP-LU tunnel) is determined to be potentially usable by a local service if one of the following conditions is met:

the route matches the far-end address of a user-provisioned SDP of an Layer 2 service and the SDP is configured to use BGP tunnels as transport
the route matches the BGP next-hop address of a BGP-EVPN or IP VPN route, and this VPN route is either imported into a local service or readvertised by the router acting as a next-hop-self route-reflector or a model-B ASBR

The no form of this command disables selective-label IP prioritization for BGP.

Default

no selective-label-ip-prioritization

Platforms

All

selective-label-ipv4-install

Syntax

[no] selective-label-ipv4-install

Context

[Tree] (config>router>bgp>group selective-label-ipv4-install)

[Tree] (config>router>bgp selective-label-ipv4-install)

[Tree] (config>router>bgp>group>neighbor selective-label-ipv4-install)

Full Context

configure router bgp group selective-label-ipv4-install

configure router bgp selective-label-ipv4-install

configure router bgp group neighbor selective-label-ipv4-install

Description

This command enables selective download for BGP label-ipv4 routes.

When this command is configured so that it applies to a BGP session, label-ipv4 routes received on this session are marked as invalid if they are not needed for any eligible service. A /32 label-ipv4 route is determined to be required if one of the following applies:

It matches the far-end address of a manually configured or auto-created SDP Layer 2 VLL or VPLS service and the SDP is configured to use BGP tunnels as transport.
It matches the IPv4 BGP next hop of a BGP-EVPN route and this EVPN route is either imported into a VPLS service or re-advertised by the router acting as a next-hop-self route-reflector or a model-B ASBR.
It matches the IPv4 BGP next hop of a VPN-IPv4 route and this VPN-IP route is either imported into a VPRN service or re-advertised by the router acting as a next-hop-self route-reflector or a model-B ASBR.
It matches the IPv4 address in the IPv4-mapped IPv6 address of a VPN IPv6 route and this VPN-IP route is either imported into a VPRN service or re-advertised by the router acting as a next-hop-self route-reflector or a model-B ASBR.

The no form of this command at the top (config>router>bgp) level disables the selective installation functionality. The no form of this command at the group or neighbor level causes the setting to be inherited from a higher level configuration.

Default

no selective-label-ipv4-install

Platforms

All

selective-learned-fdb

Syntax

[no] selective-learned-fdb

Context

[Tree] (config>service>vpls selective-learned-fdb)

Full Context

configure service vpls selective-learned-fdb

Description

This command determines which line cards FDB entries are allocated on for MAC addresses in the VPLS service in which the command is configured.

By default, FDB entries for MAC addresses in VPLS services are allocated on all line cards in the system. Enabling selective-learned-fdb causes FDB entries to be allocated only on the line cards on which the service has a configured object, which includes all line cards:

on which a SAP is configured
which have ports configured in a LAG SAP
which have ports configured in an Ethernet tunnel SAP
which have ports configured on a network interface (which also may be on a LAG) when the service has a mesh or spoke-SDP, VXLAN or EVPN-MPLS configured

Only MAC addresses with a type "L” or "Evpn” in the show output displaying the FDB can be allocated selectively, unless a MAC address configured as a conditional static MAC address is learned dynamically on an object other than its monitored object; this can be displayed with type "L” or "Evpn” but is allocated as global because of the conditional static MAC configuration.

The no form of this command returns the FDB MAC address entry allocation mode to its default where FDB entries for MAC addresses are allocated on all line cards in the system.

Default

no selective-learned-fdb

Platforms

All

send

Syntax

send {broadcast | multicast | none | version-1 | both}

no send

Context

[Tree] (config>service>vprn>ripng send)

[Tree] (config>service>vprn>rip>group send)

[Tree] (config>service>vprn>rip send)

[Tree] (config>service>vprn>ripng>group send)

[Tree] (config>service>vprn>ripng>group>neighbor send)

[Tree] (config>service>vprn>rip>group>neighbor send)

Full Context

configure service vprn ripng send

configure service vprn rip group send

configure service vprn rip send

configure service vprn ripng group send

configure service vprn ripng group neighbor send

configure service vprn rip group neighbor send

Description

This command configures the type of RIP messages sent to RIP neighbors. This control can be issued at the global, group or interface level. The default behavior sends RIPv2 messages with the multicast (224.0.0.9) destination address.

If version-1 is specified, the router only listens for and accepts packets sent to the broadcast address.

The no form of this command resets the type of messages sent back to the default value.

Default

no send

Parameters

broadcast: Send RIPv2 formatted messages to the broadcast address.

multicast: Send RIPv2 formatted messages to the multicast address.

none: Do not send any RIP messages (i.e. silent listener).

version-1: Send RIPv1 formatted messages to the broadcast address.

both: Send both RIP v1 & RIP v2 updates to the broadcast address.

Platforms

All

send

Syntax

send

Context

[Tree] (config>system>security>keychain>direction>uni send)

Full Context

configure system security keychain direction uni send

Description

This command specifies the send nodal context to sign TCP segments that are being sent by the router to another device.

Platforms

All

send

Syntax

send option-number

no send

Context

[Tree] (config>system>security>keychain>tcp-option-number send)

Full Context

configure system security keychain tcp-option-number send

Description

This command configures the TCP option number accepted in TCP packets sent.

Default

send 254

Parameters

option-number

Specifies an enumerated integer that indicates the TCP option number to be used in the TCP header.

Values: 253, 254, tcp-ao

Platforms

All

send

Syntax

send {broadcast | multicast | none | version-1}

no send

Context

[Tree] (config>router>rip>group send)

[Tree] (config>router>rip send)

[Tree] (config>router>rip>group>neighbor send)

Full Context

configure router rip group send

configure router rip send

configure router rip group neighbor send

Description

This command specifies the type of RIP messages sent to RIP neighbors.

If version-1 is specified, the router need only listen for and accept packets sent to the broadcast address.

This control can be issued at the global, group or interface level.

The no form of the command reverts to the default value.

Default

send version-1

Parameters

broadcast: Specifies send RIPv2 formatted messages to the broadcast address.

multicast: Specifies send RIPv2 formatted messages to the multicast address.

none: Specifies not to send any RIP messages (i.e. silent listener).

version-1: Specifies send RIPv1 formatted messages to the broadcast address.

Platforms

All

send

Syntax

send {none | ripng | unicast}

no send

Context

[Tree] (config>router>ripng>group>neighbor send)

[Tree] (config>router>ripng send)

[Tree] (config>router>ripng>group send)

Full Context

configure router ripng group neighbor send

configure router ripng send

configure router ripng group send

Description

This command specifies if RIPng are sent to RIP neighbors or not and what type of IPv6 address is to be used to deliver the messages.

This control can be issued at the global, group or interface level.

The no form of the command reverts to the default value.

Default

send ripng

Parameters

ripng: Specifies RIPng messages to be sent to the standard multicast address (FF02::9).

none: Specifies not to send any RIPng messages (i.e. silent listener).

unicast: Specifies to send RIPng updates as unicast messages to the defined unicast address configured through the unicast-address command. This option is only allowed within the neighbor context.

Platforms

All

send-accounting-response

Syntax

[no] send-accounting-response

Context

[Tree] (config>router>radius-proxy>server send-accounting-response)

[Tree] (config>service>vprn>radius-proxy>server send-accounting-response)

Full Context

configure router radius-proxy server send-accounting-response

configure service vprn radius-proxy server send-accounting-response

Description

This command results in the system to always generate RADIUS accounting-response to acknowledge RADIUS accounting-request received from the RADIUS client.

The no form of this command disables the command.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

send-acct-stop-on-fail

Syntax

send-acct-stop-on-fail {[on-request-failure] [on-reject] [on-accept-failure]}

no send-acct-stop-on-fail

Context

[Tree] (config>subscr-mgmt>auth-policy send-acct-stop-on-fail)

Full Context

configure subscriber-mgmt authentication-policy send-acct-stop-on-fail

Description

This command activates the reporting of RADIUS authentication failures of a PPPoE session to a RADIUS accounting server with an Accounting Stop message.

Three failure categories can be enabled separately:

on-request-failure: All failure conditions between the sending of an Access-Request and the reception of an Access-Accept or Access-Reject.
on-reject:
on-accept-failure: All failure conditions that appear after receiving an Access-Accept and before successful instantiation of the host or session.

The RADIUS accounting policy to be used for sending the Accounting Stop messages must be obtained prior to RADIUS authentication via local user database pre-authentication.

The no form of this command reverts to the default.

Parameters

on-request-failure: Specifies that an accounting stop message is sent when a RADIUS Access-Request message could not be sent (for example, there is no server configured, or timeout).

on-reject: Specifies that an accounting stop message is sent when an Access-Reject is received.

on-accept-failure: Specifies that an accounting stop message is sent a failure occurred after the reception of a RADIUS Access-Accept message (such as a duplicate IP address).

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

send-bvpls-evpn-flush

Syntax

[no] send-bvpls-evpn-flush

Context

[Tree] (config>service>vpls>pbb send-bvpls-evpn-flush)

Full Context

configure service vpls pbb send-bvpls-evpn-flush

Description

This command triggers ISID-based C-MAC flush signaling in the PBB-EVPN. When the command is enabled in an I-VPLS service, a B-MAC/ISID route is sent for the I-VPLS ISID.

Default

no send-bvpls-evpn-flush

Platforms

All

send-bvpls-flush

Syntax

send-bvpls-flush {[all-but-mine] [all-from-me]}

no send-bvpls-flush

Context

[Tree] (config>service>vpls>pbb send-bvpls-flush)

Full Context

configure service vpls pbb send-bvpls-flush

Description

This command enables generation of LDP MAC withdrawal "flush-all-from-me” in the B-VPLS domain when the following triggers occur in the related IVPLS:

MC-LAG failure
Failure of a local SAP
Failure of a local pseudowire/SDP binding

A failure means transition of link SAP/pseudowire to either down or standby status.

This command does not require send-flush-on-failure in B-VPLS to be enabled on an IVPLS trigger to send an MAC flush into the BVPLS.

Default

no send-bvpls-flush

Parameters

all-but-mine: Specifies to send an LDP flush all-but-mine and also sent into the B-VPLS. Both parameters can be set together.

all-from-me: Specifies to send an LDP flush-all-from and when STP initiates a flush, it is sent into the B-VPLS using LDP MAC flush all-from-me. Both parameters can be set together.

Platforms

All

send-chain

Syntax

[no] send-chain

Context

[Tree] (config>ipsec>cert-profile>entry send-chain)

Full Context

configure ipsec cert-profile entry send-chain

Description

Commands in this context configure the send-chain in the cert-profile entry.

The configuration of this command is optional, by default system will only send the certificate specified by cert command in the selected entry to the peer. This command allows system to send additional CA certificates to the peer. These additional CA certificates must be in the certificate chain of the certificate specified by the cert command in the same entry.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

send-chain

Syntax

[no] send-chain

Context

[Tree] (config>system>security>tls>cert-profile>entry send-chain)

Full Context

configure system security tls cert-profile entry send-chain

Description

This command enables the sending of certificate authority (CA) certificates, and enters the context to configure send-chain information.

By default, the system only sends the TLS server certificate or TLS client certificate specified by the cert command. If CA certificates are to be sent using send-chain, they must be in the chain of certificates specified by the config>system>security>pki>ca-profile command. The specification of the send-chain is not necessary for a working TLS profile if the TLS peer has the CA certificate used to sign the server or client certificate in its own trust anchor.

For example, given a TLS client running on SR OS, the ROOT CA certificate resides on the TLS server, but the subsequent SUB-CA certificate needed to complete the chain resides within SR OS. The send-chain command allows these SUB-CA certificates to be sent from SR OS to the peer to be authenticated using the ROOT CA certificate that resides on the peer.

The no form of the command disables the send-chain.

Default

no send-chain

Platforms

All

send-count

Syntax

send-count send-count

no send-count

Context

[Tree] (config>saa>test>type-multi-line>lsp-ping>sr-policy send-count)

[Tree] (config>saa>test>type-multi-line>lsp-ping send-count)

Full Context

configure saa test type-multi-line lsp-ping sr-policy send-count

configure saa test type-multi-line lsp-ping send-count

Description

This command configures the number of messages to send. The send-count value is used to override the default number of message requests sent. Each message request must either time out or receive a reply before the next message request is sent. The message interval value must be expired before the next message request is sent.

The no form of this command reverts to the default value.

Default

send-count 1

Parameters

send-count

Specifies the send count in number of packets.

Values: 1 to 100

Default: 1

Platforms

All

send-default

Syntax

send-default [ipv4] [ ipv6] [export-policy export-policy]

no send-default

Context

[Tree] (config>router>bgp send-default)

[Tree] (config>router>bgp>group send-default)

[Tree] (config>router>bgp>group>neighbor send-default)

Full Context

configure router bgp send-default

configure router bgp group send-default

configure router bgp group neighbor send-default

Description

This command enables the advertisement of a default route. When this command is configured to apply to an IBGP or EBGP session, the default route for IPv4 or IPv6 is automatically added to the Adj_RIB-OUT of that peer. The advertised default routes are unrelated to any default routes installed in the FIB of the local router.

If a BGP export policy allows an active default route in the FIB of the local router to be advertised and conflict with this command, the artificially generated default route overrides the advertisement of the installed default route.

The artificially generated default route is not matched by BGP export policies. To modify its attributes or decide whether it should be advertised (based on a conditional expression), a route policy must be created and referenced by the export-policy parameter. Only conditional entries with an action and no from or to criteria are parsed. If there are no such entries, only the default action is applied.

The no form of this command restores the default behavior. At the group and neighbor levels, the default behavior is to inherit the configuration from a higher level. At the instance level, the default behavior is to neither generate nor inject a default route.

Default

no send-default

Parameters

ipv4: Generates and advertises an IPv4 default route (0/0).

ipv6: Generates and advertises an IPv6 default route (::/0).

export-policy: Specifies the name of a route policy, up to 64 characters. Only the route modifications in the matching conditional-expression entry or the default action are applied. These modifications change the attributes of the advertised default routes.

Platforms

All

send-fib-population-packets

Syntax

send-fib-population-packets mode

no send-fib-population-packets

Context

[Tree] (config>service>ies>sub-if>grp-if>srrp send-fib-population-packets)

[Tree] (config>service>vprn>sub-if>grp-if>srrp send-fib-population-packets)

Full Context

configure service ies subscriber-interface group-interface srrp send-fib-population-packets

configure service vprn subscriber-interface group-interface srrp send-fib-population-packets

Description

This command configures the mode used to send Fib population packets. When SRRP becomes master it generates gratuitous ARPs (GARPs) used by the Layer 2 access network to populate the correct SRRP gateway.

The no form of this command disables sending FDB population packets.

Default

send-fib-population-packets all

Parameters

mode

Specifies on which VLANs the gratuitous ARPs are sent.

Values

all: Generates, on SSRP master assignment, the GARPs on all VLANs

out-tag-only: Generates, on SRRP master assignment, the GARPs only on SAPs with unique outer VLAN and lowest VLAN tags

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

send-flush-on-bvpls-failure

Syntax

[no] send-flush-on-bvpls-failure

Context

[Tree] (config>service>vpls>pbb send-flush-on-bvpls-failure)

Full Context

configure service vpls pbb send-flush-on-bvpls-failure

Description

This command enables the generation in the local I-VPLS of an LDP MAC flush-all-from-me following a failure of SAP/the whole endpoint/spoke-SDP in the related B-VPLS. The failure of mesh-SDP in B-VPLS does not generate the I-VPLS MAC flush.

The no form of this command disables the generation of LDP MAC flush in I-VPLS on failure of SAP/endpoint/spoke-SDP in the related B-VPLS.

Default

no send-flush-on-bvpls-failure

Platforms

All

send-flush-on-failure

Syntax

[no] send-flush-on-failure

Context

[Tree] (config>service>vpls send-flush-on-failure)

Full Context

configure service vpls send-flush-on-failure

Description

This command enables sending out flush-all-from-me messages to all LDP peers included in affected VPLS, in the event of physical port failures or "operationally down” events of individual SAPs. This feature provides an LDP-based mechanism for recovering a physical link failure in a dual-homed connection to a VPLS service. This method provides an alternative to RSTP solutions where dual homing redundancy and recovery, in the case of link failure, is resolved by RSTP running between a PE router and CE devices. If the endpoint is configured within the VPLS and send-flush-on-failure is enabled, flush-all-from-me messages will be sent out only when all spoke-SDPs associated with the endpoint go down.

This feature cannot be enabled on management VPLS.

Default

no send-flush-on-failure

Platforms

All

send-idr-after-eap-success

Syntax

[no] send-idr-after-eap-success

Context

[Tree] (config>ipsec>ike-policy send-idr-after-eap-success)

Full Context

configure ipsec ike-policy send-idr-after-eap-success

Description

This command enables the system to add the Identification Responder (IDr) payload in the last IKE authentication response after an Extensible Authentication Protocol (EAP) Success packet is received. When disabled, the system will not include IDr payload.

The no form of this command disables sending the IDr payload in the last IKE.

Default

send-idr-after-eap-success

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

send-imet-ir-on-ndf

Syntax

send-imet-ir-on-ndf

no send-imet-ir-on-ndf

Context

[Tree] (config>service>vpls>bgp-evpn>vxlan send-imet-ir-on-ndf)

Full Context

configure service vpls bgp-evpn vxlan send-imet-ir-on-ndf

Description

This command controls the advertisement of Inclusive Multicast Ethernet Tag (IMET) routes for ingress replication in the case where the PE is Non-DF for a specified network interconnect VXLAN virtual ES. When enabled, the router will advertise IMET-IR routes even if the PE is NDF. This attracts BUM traffic but also speeds up convergence in case of DF failure.

The no form of this command withdraws the advertisement of the IMET-IR route on the network interconnect VXLAN NDF router.

Default

send-imet-ir-on-ndf

Platforms

All

send-orf

Syntax

send-orf [comm-id]

no send-orf [comm-id]

Context

[Tree] (config>router>bgp>group>outbound-route-filtering>extended-community send-orf)

[Tree] (config>router>bgp>group>neighbor>outbound-route-filtering>extended-community send-orf)

[Tree] (config>router>bgp>outbound-route-filtering>extended-community send-orf)

Full Context

configure router bgp group outbound-route-filtering extended-community send-orf

configure router bgp group neighbor outbound-route-filtering extended-community send-orf

configure router bgp outbound-route-filtering extended-community send-orf

Description

This command instructs the router to negotiate the send capability in the BGP outbound route filtering (ORF) negotiation with a peer.

This command also causes the router to send a community filter, prefix filter, or AS path filter configured as an inbound filter on the BGP session to its peer as an ORF Action ADD.

The no form of this command causes the router to remove the send capability in the BGP ORF negotiation with a peer.

The no form also causes the router to send an ORF remove action for a community filter, prefix filter, or AS path filter configured as an inbound filter on the BGP session to its peer.

If the comm-id parameters are not exclusively route target communities then the router will extract appropriate route targets and use those. If, for some reason, the comm-id parameters specified contain no route targets, then the router will not send an ORF.

Default

no send-orf

Parameters

comm-id

Specifies up to 32 community policies, which must consist exclusively of route target extended communities. If it is not specified, then the ORF policy is automatically generated from configured route target lists, accepted client route target ORFs and locally configured route targets.

Values

[target: {ip-address:comm-val | 2byte-asnumber:ext-comm-val | 4byte-asnumber:comm-val}

where:

ip-address — a.b.c.d
comm-val — 0 to 65535
2byte-asnumber — 0 to 65535
ext-comm-val — 0 to 4294967295
4byte-asnumber — 0 to 4294967295

Platforms

All

send-queries

Syntax

[no] send-queries

Context

[Tree] (config>service>vpls>sap>igmp-snooping send-queries)

[Tree] (config>service>vpls>spoke-sdp>igmp-snooping send-queries)

[Tree] (config>service>vpls>sap>mld-snooping send-queries)

[Tree] (config>service>vpls>mesh-sdp>mld-snooping send-queries)

[Tree] (config>service>vpls>mesh-sdp>igmp-snooping send-queries)

[Tree] (config>service>vpls>spoke-sdp>mld-snooping send-queries)

Full Context

configure service vpls sap igmp-snooping send-queries

configure service vpls spoke-sdp igmp-snooping send-queries

configure service vpls sap mld-snooping send-queries

configure service vpls mesh-sdp mld-snooping send-queries

configure service vpls mesh-sdp igmp-snooping send-queries

configure service vpls spoke-sdp mld-snooping send-queries

Description

This command specifies whether to send IGMP general query messages on the SAP or SDP.

When send-queries is configured, all type of queries generate ourselves are of the configured version. If a report of a version higher than the configured version is received, the report will get dropped and a new wrong version counter will get incremented. If send-queries is not configured, the version command has no effect. The version used will be the version of the querier. This implies that, for example, when we have a v2 querier, we will never send out a v3 group or group-source specific query when a host wants to leave a certain group.

If mrouter-port is enabled on this SAP or spoke SDP, the send-queries command parameter cannot be set.

The no form of this command disables the IGMP general query messages.

Default

no send-queries

Platforms

All

send-queries

Syntax

[no] send-queries

Context

[Tree] (config>subscr-mgmt>msap-policy>vpls-only>igmp-snp send-queries)

Full Context

configure subscriber-mgmt msap-policy vpls-only-sap-parameters igmp-snooping send-queries

Description

This command specifies whether to send IGMP general query messages on the managed SAP. When send-queries is configured, all type of queries generated are of the configured version. If a report of a version higher than the configured version is received, the report will get dropped and a new wrong version counter will get incremented.

If send-queries is not configured, the version command has no effect. The version used on that SAP/SDP is the version of the querier. This implies that, for example, when there is a v2 querier, a v3 group or group-source specific query is never sent when a host wants to leave a certain group.

The no form of this command reverts to the default.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

send-queries

Syntax

[no] send-queries

Context

[Tree] (config>service>pw-template>igmp-snooping send-queries)

Full Context

configure service pw-template igmp-snooping send-queries

Description

This command specifies whether to send IGMP general query messages.

When send-queries is configured, all type of queries generated are of the configured version. If a report of a version higher than the configured version is received, the report will get dropped and a new wrong version counter will get incremented.

If send-queries is not configured, the version command has no effect. The version used on that SAP or SDP will be the version of the querier. This implies that, for example, when we have a v2 querier, we will never send out a v3 group or group-source specific query when a host wants to leave a certain group.

Default

no send-queries

Platforms

All

send-refresh

Syntax

send-refresh seconds

no send-refresh

Context

[Tree] (config>service>vpls>proxy-arp send-refresh)

[Tree] (config>service>vpls>proxy-nd send-refresh)

Full Context

configure service vpls proxy-arp send-refresh

configure service vpls proxy-nd send-refresh

Description

If enabled, this command will make the system send a refresh at the configured time. A refresh message is an ARP-request message that uses 0s as sender's IP for the case of a proxy-ARP entry. For proxy-ND entries, a refresh is a regular NS message using the chassis-mac as MAC source-address.

Default

no send-refresh

Parameters

seconds

Specifies the send-refresh in seconds.

Values: 120 to 86400

Platforms

All

send-release

Syntax

[no] send-release

Context

[Tree] (config>service>vprn>if>sap>ipsec-gw>dhcp send-release)

[Tree] (config>service>vprn>if>sap>ipsec-gw>dhcp6 send-release)

[Tree] (config>service>ies>if>sap>ipsec-gw>dhcp6 send-release)

[Tree] (config>service>ies>if>sap>ipsec-gw>dhcp send-release)

Full Context

configure service vprn interface sap ipsec-gw dhcp send-release

configure service vprn interface sap ipsec-gw dhcp6 send-release

configure service ies interface sap ipsec-gw dhcp6 send-release

configure service ies interface sap ipsec-gw dhcp send-release

Description

This command enables the system to send a DHCPv4/v6 release message when the IPsec tunnel is removed.

Default

no send-release

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

send-to-ebgp

Syntax

send-to-ebgp family [ family]

no send-to-ebgp

Context

[Tree] (config>service>vprn>bgp>group>neighbor>link-bandwidth send-to-ebgp)

[Tree] (config>service>vprn>bgp>group>link-bandwidth send-to-ebgp)

Full Context

configure service vprn bgp group neighbor link-bandwidth send-to-ebgp

configure service vprn bgp group link-bandwidth send-to-ebgp

Description

This command configures BGP to allow link-bandwidth extended community to be sent in routes advertised to EBGP peers in the scope of the command, as long the routes belong to one of the listed address families.

The link-bandwidth extended community is encoded as a non-transitive type. This means that by default it should not be attached to any route advertised to an EBGP peer and it should be discarded when received in any route from an EBGP peer. This command overrides the standard behavior.

Up to three families may be configured.

The no form of this command restores the default behavior of stripping the link-bandwidth extended community from any route advertised to an EBGP peer.

Default

no send-to-ebgp

Parameters

family

Specifies the address families for which receiving the link-bandwidth extended community from EBGP peers should be supported.

Values

ipv4 — Adds a link-bandwidth extended community to unlabeled unicast IPv4 routes.

label-ipv4 — Adds a link-bandwidth extended community to labeled-unicast IPv4 routes.

ipv6 — Adds a link-bandwidth extended community to unlabeled unicast IPv6 routes.

Platforms

All

send-to-ebgp

Syntax

send-to-ebgp family [ family]

no send-to-ebgp

Context

[Tree] (config>router>bgp>group>neighbor>link-bandwidth send-to-ebgp)

[Tree] (config>router>bgp>group>link-bandwidth send-to-ebgp)

Full Context

configure router bgp group neighbor link-bandwidth send-to-ebgp

configure router bgp group link-bandwidth send-to-ebgp

Description

Up to six families may be configured.

The no form of this command restores the default behavior of stripping the link-bandwidth extended community from any route advertised to an EBGP peer.

Default

no send-to-ebgp

Parameters

family

Specifies the address families for which receiving the link-bandwidth extended community from EBGP peers should be supported.

Values

ipv4 — Adds a link-bandwidth extended community to unlabeled unicast IPv4 routes.

label-ipv4 — Adds a link-bandwidth extended community to labeled-unicast IPv4 routes.

vpn-ipv4 — Adds a link-bandwidth extended community to IPv4 VPN (SAFI 128) routes.

ipv6 — Adds a link-bandwidth extended community to unlabeled unicast IPv6 routes.

label-ipv6 — Adds a link-bandwidth extended community to labeled-unicast IPv6 routes.

vpn-ipv6 — Adds a link-bandwidth extended community to IPv6 VPN (SAFI 128) routes.

Platforms

All

send-tunnel-encap

Syntax

send-tunnel-encap [mpls] [mplsoudp]

no send-tunnel-encap

Context

[Tree] (config>service>vpls>bgp-evpn>vxlan send-tunnel-encap)

[Tree] (config>service>epipe>bgp-evpn>vxlan send-tunnel-encap)

[Tree] (config>service>vprn>bgp-evpn>mpls send-tunnel-encap)

[Tree] (config>service>vpls>bgp-evpn>mpls send-tunnel-encap)

[Tree] (config>service>epipe>bgp-evpn>mpls send-tunnel-encap)

Full Context

configure service vpls bgp-evpn vxlan send-tunnel-encap

configure service epipe bgp-evpn vxlan send-tunnel-encap

configure service vprn bgp-evpn mpls send-tunnel-encap

configure service vpls bgp-evpn mpls send-tunnel-encap

configure service epipe bgp-evpn mpls send-tunnel-encap

Description

This command configures the encapsulation to be advertised with the EVPN routes for the service. The encapsulation is encoded in RFC 5512-based tunnel encapsulation extended communities.

When used in the bgp-evpn>mpls context, the supported options are none (no send-tunnel-encap), mpls, mplsoudp or both.

When used in the bgp-evpn>vxlan context, the supported options are send-tunnel-encap (the router signals a VXLAN value) or no send-tunnel-encap (no encapsulation extended community is sent).

Default

send-tunnel-encap mpls (in the config>service>vpls>bgp-evpn>mpls context)

send-tunnel-encap (in the config>service>vpls>bgp-evpn>vxlan context)

Parameters

mpls: Specifies the MPLS-over-UDP encapsulation value in the RFC 5512 encapsulation extended community.

mplsoudp: Specifies the MPLS encapsulation value in the RFC 5512 encapsulation extended community.

Platforms

All

send-unrestricted-portal-url

Syntax

[no] send-unrestricted-portal-url

Context

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>dsm send-unrestricted-portal-url)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>dsm send-unrestricted-portal-url)

Full Context

configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt send-unrestricted-portal-url

configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt send-unrestricted-portal-url

Description

This command enables the router to send the special URL indicator urn:ietf:params:capport:unrestricted in DHCP, DHCPv6, and RA messages, to indicate to the client that no captive portal is enabled. This allows the client to disable all portal detection logic, thereby optimizing the user experience.

The no form of this command disables the sending of the special indicator when no captive portal is enabled.

Default

no send-unrestricted-portal-url

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

sender-id

Syntax

sender-id local local-name

sender-id system

no sender-id

Context

[Tree] (config>eth-cfm>system sender-id)

Full Context

configure eth-cfm system sender-id

Description

This command allows the operator to include the configured "system name” (chassis3) or a locally configured value in ETH-CFM PDUs sent from MEPs and MIPs. The operator may only choose one of these options to use for ETH-CFM. MEPs include the sender-id TLV for CCM (not sub second CCM enabled MEPs), LBM/LBR, and LTM/LTR. MIPs include this value in the LBR and LTR PDUs.

Note:

LBR functions reflect all TLVs received in the LBM unchanged, including the SenderID TLV.

Parameters

local-name: Specifies a local alphanumeric string different from the "system name” chassis(3) value that can be used for other means, up to 45 characters.

system: Allows ETH-CFM to use the configured "system name” value as the chassis(3).

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

sensor-group

Syntax

sensor-group name [ create]

no sensor-group name

Context

[Tree] (config>system>telemetry>sensor-groups sensor-group)

Full Context

configure system telemetry sensor-groups sensor-group

Description

Commands in this context configure sensor-related commands.

The no form of this command removes the configuration.

Parameters

name: Specifies the sensor group name, up to 32 characters.

create: Keyword used to create a sensor group.

Platforms

All

sensor-group

Syntax

sensor-group name

no sensor-group

Context

[Tree] (config>system>telemetry>persistent-subscriptions>subscription sensor-group)

Full Context

configure system telemetry persistent-subscriptions subscription sensor-group

Description

This command assigns an existing sensor group to the specified persistent subscription. If no valid paths exist in the sensor group, the configuration is accepted; however, no gRPC connection is established when persistent subscription is activated.

The no form of this command removes the configuration.

Parameters

name: Specifies the sensor group name, up to 32 characters.

Platforms

All

sensor-groups

Syntax

sensor-groups

Context

[Tree] (config>system>telemetry sensor-groups)

Full Context

configure system telemetry sensor-groups

Description

Commands in this context configure a sensor group.

Platforms

All

sequence

Syntax

sequence lower-case-letters

Context

[Tree] (config>test-oam>sath>svc-test>svc-stream>frm-mix sequence)

Full Context

configure test-oam service-activation-testhead service-test service-stream frame-mix sequence

Description

This command configures the frame sequence for the specified service stream by referencing the frame-size-template configuration.

Default

sequence a

Parameters

lower-case-letters: Specifies a string, up to 16 characters, that denotes the sequence of frames to be generated by the service activation testhead using the alphabetical characters in the referenced frame-size-template (for example, a, b, and c).

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

sequence-group

Syntax

sequence-group group

no sequence-group

Context

[Tree] (config>li>x-interfaces>lics>lic>authentication sequence-group)

Full Context

configure li x-interfaces lics lic authentication sequence-group

Description

This command configures the sequence group for the X1 and X2 interfaces.

The no form of this command reverts to the default.

Parameters

group

Specifies the group number.

Values: 2 to 4294967295

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

serial-notify

Syntax

[no] serial-notify

Context

[Tree] (debug>router>rpki-session>packet serial-notify)

Full Context

debug router rpki-session packet serial-notify

Description

This command enables debugging for serial notify RPKI packets.

The no form of this command disables debugging for serial notify RPKI packets.

Platforms

All

serial-query

Syntax

[no] serial-query

Context

[Tree] (debug>router>rpki-session>packet serial-query)

Full Context

debug router rpki-session packet serial-query

Description

This command enables debugging for serial query RPKI packets.

The no form of this command disables debugging for serial query RPKI packets.

Platforms

All

server

Syntax

radius-accounting-server

Context

[Tree] (config>subscr-mgmt>acct-plcy>server server)

Full Context

configure subscriber-mgmt radius-accounting-policy radius-accounting-server server

Description

Commands in this context define RADIUS server attributes under a given session authentication policy.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server server-index address ip-address secret key [hash | hash2 | custom] [port port-num] [coa-only] [pending-requests-limit limit]

no server index

Context

[Tree] (config>subscr-mgmt>auth-plcy>radius-auth-server server)

Full Context

configure subscriber-mgmt authentication-policy radius-authentication-server server

Description

This command adds a RADIUS server and configures the RADIUS server IP address, index, and key values.

Up to sixteen RADIUS servers can be configured at any one time in a RADIUS authentication policy. Only five can be used for authentication, all other servers should be configured as coa-only servers. RADIUS servers are accessed in order from lowest to highest index for authentication or accounting requests until a response from a server is received. A higher indexed server is only queried if no response is received from a lower indexed server (which implies that the server is not available). If a response from a server is received, no other RADIUS servers are queried.

The no form of this command removes the server index from the configuration.

Parameters

server-index

Specifies the index for the RADIUS server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from lowest to highest index.

Values: 1 to 16 (a maximum of 5 authentication servers)

ip-address: Specifies the IP address of the RADIUS server. Two RADIUS servers cannot have the same IP address. An error message is generated if the server address is a duplicate.

key

Specifies the secret key to access the RADIUS server. This secret key must match the password on the RADIUS server.

Values

secret-key: Up to 20 characters.

hash-key: Up to 33 characters.

hash2-ke: Up to 55 characters.

hash: Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

hash2: Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

custom: Specifies the custom encryption to management interface.

port-num

Specifies the UDP port number on which to contact the RADIUS server for authentication.

Values: 1 to 65535

coa-only

Specifies Change-of-Authorization Messages only. Servers that are marked with the coa-only flag will not be used for authentication, but they is able to accept RADIUS CoA messages, independent of the accept-authorization-change setting in the authentication policy.

For authentication purposes, the maximum number of servers is 5. All other servers may only be used as coa-only servers.

limit

Specifies the maximum number of outstanding RADIUS authentication requests for this authentication server.

Values: 1 to 4096

Default: The default value when not configured is 4096

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server ip-address

no server

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host server)

Full Context

configure subscriber-mgmt local-user-db ipoe host server

Description

This command configures the IP address of the DHCP server to relay to.

The configured DHCP server IP address must reference one of the addresses configured under the DHCP CLI context of an IES/VPRN subscriber or group interface.

The no form of this command reverts to the default.

Parameters

ip-address

Specifies the IP address of the DHCP server.

Values: a.b.c.d

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server ip-address

no server

Context

[Tree] (config>service>vprn>sub-if>grp-if>ipv6>dhcp6>relay server)

Full Context

configure service vprn subscriber-interface group-interface ipv6 dhcp6 relay server

Description

This command configures the IPv6 address of the DHCP6 server to relay to.

The configured DHCP6 server IPv6 address must reference one of the addresses configured under the DHCP6 CLI context of an IES/VPRN subscriber or group interface.

The no form of this command reverts to the default.

Parameters

ip-address: Specifies up to eight IPv6 addresses of the DHCP6 server.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server [service service-id] name server-name

no server

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>match-radprox-cache server)

Full Context

configure subscriber-mgmt local-user-db ipoe host match-radius-proxy-cache server

Description

This command specifies the name of radius-proxy-server and optionally id of the service that the radius-proxy-server resides in.

The no form of this command removes the parameters from the configuration.

Parameters

service service-id

Specifies the ID or name of the service.

Values

1 to 214748365

svc-name up to 64 char maximum

name server-name: Specifies the name of radius-proxy-server up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server ipv6z-address [ipv6z-address]

no server [ipv6z-address]

Context

[Tree] (config>service>ies>if>ipv6>dhcp6-relay server)

Full Context

configure service ies interface ipv6 dhcp6-relay server

Description

This command specifies a list of servers where DHCP6 requests are forwarded. The list of servers can be entered as either IP addresses or fully qualified domain names. There must be at least one server specified for DHCP6 relay to work. If there are multiple servers, the request is forwarded to all servers in the list.

The no form of this command reverts to the default.

Parameters

ipv6z-address

Specifies up to eight non-global IPv4 addresses including a zone index as defined by the InetAddressIPv4z textual convention.

Values


ipv6z-address:	x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x: [0 to FFFF]H
	d: [0 to 255]D

Platforms

All

server

Syntax

server server1 [server2]

Context

[Tree] (config>service>ies>sub-if>grp-if>dhcp server)

[Tree] (config>service>ies>if>dhcp server)

[Tree] (config>service>vprn>if>dhcp server)

Full Context

configure service ies subscriber-interface group-interface dhcp server

configure service ies interface dhcp server

configure service vprn interface dhcp server

Description

This command specifies a list of servers where requests are forwarded. The list of servers can be entered as either IP addresses or fully qualified domain names. There must be at least one server specified for DHCP relay to work. If there are multiple servers then the request is forwarded to all servers in the list.

There can be a maximum of 8 DHCP servers configured.

The no form of this command reverts to the default.

Parameters

server: Specifies up to eight DHCP server IP addresses.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

configure service ies subscriber-interface group-interface dhcp server

All

configure service ies interface dhcp server
configure service vprn interface dhcp server

server

Syntax

server server-name

no server

Context

[Tree] (config>service>ies>sub-if>local-address-assignment server)

[Tree] (config>service>vprn>sub-if>local-address-assignment server)

[Tree] (config>service>vprn>sub-if>grp-if>local-address-assignment server)

[Tree] (config>service>ies>sub-if>grp-if>local-address-assignment server)

Full Context

configure service ies subscriber-interface local-address-assignment server

configure service vprn subscriber-interface local-address-assignment server

configure service vprn subscriber-interface group-interface local-address-assignment server

configure service ies subscriber-interface group-interface local-address-assignment server

Description

This command designates a local DHCPv4 server for local pools management where IPv4 addresses for PPPoXv4 clients are allocated without the need for the internal DHCP relay-agent. Those addresses are tied to PPPoX sessions and they are de-allocated when the PPPoX session is terminated.

Parameters

server-name: Specifies the name of the local DHCP server.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server server-index address ip-address secret key [hash | hash2 | custom] [port port] [create]

no server server-index

Context

[Tree] (config>aaa>l2tp-acct-plcy>radius-acct-server server)

Full Context

configure aaa l2tp-accounting-policy radius-accounting-server server

Description

This command adds a RADIUS server and configures the RADIUS server IP address, index, and key values.

Up to five RADIUS servers can be configured at any one time. RADIUS servers are accessed in order from lowest to highest index for authentication requests until a response from a server is received. A higher indexed server is only queried if no response is received from a lower indexed server (which implies that the server is not available). If a response from a server is received, no other RADIUS servers are queried.

The no form of this command removes the server from the configuration.

Parameters

server-index

The index for the RADIUS server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from lowest to highest index.

Values: 1 to 16 (a maximum of 5 accounting servers)

address ip-address: The IP address of the RADIUS server. Two RADIUS servers cannot have the same IP address. An error message is generated if the server address is a duplicate.

secret key

The secret key to access the RADIUS server. This secret key must match the password on the RADIUS server.

Values

secret-key — A string up to 20 characters.

hash-key — A string up to 33 characters.

hash2-key — A string up to 55 characters.

hash: Specifies the key is entered in an encrypted form. If the hash parameter is not used, the key is assumed to be in a non-encrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash parameter specified.

hash2: Specifies the key is entered in a more complex encrypted form. If the hash2 parameter is not used, the less encrypted hash form is assumed.

custom: Specifies the custom encryption to management interface.

port

Specifies the UDP port number on which to contact the RADIUS server for authentication.

Values: 1 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server server-index address ip-address secret key [hash | hash2 | custom] [port port] [create]

no server server-index

Context

[Tree] (config>app-assure>rad-acct-plcy>server server)

Full Context

configure application-assurance radius-accounting-policy radius-accounting-server server

Description

This command adds a RADIUS server and configures the RADIUS server IP address, index, and key values.

The no form of this command removes the server from the configuration.

Parameters

server-index

The index for the RADIUS server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from lowest to highest index.

Values: 1 to 16 (a maximum of 5 accounting servers)

ip-address: The IP address of the RADIUS server. Two RADIUS servers cannot have the same IP address. An error message is generated if the server address is a duplicate.

secret key

The secret key to access the RADIUS server. This secret key must match the password on the RADIUS server.

Values

secret-key — A string up to 20 characters

hash-key — A string up to 33 characters

hash2-key — A string up to 55 characters

hash: Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

hash2: Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

custom: Specifies the custom encryption to management interface.

port

Specifies the UDP port number on which to contact the RADIUS server for authentication.

Values: 1 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server server-name

no server

Context

[Tree] (config>service>ies>sub-if>grp-if>lcl-addr-assign>ipv6 server)

[Tree] (config>service>vprn>sub-if>grp-if>lcl-addr-assign>ipv6 server)

Full Context

configure service ies subscriber-interface group-interface local-address-assignment ipv6 server

configure service vprn subscriber-interface group-interface local-address-assignment ipv6 server

Description

This command designates a local router DHCPv6 server for local pools management where IPv6 prefixes or address for PPPoXv6 clients or IPoEv6 clients are allocated without the need for the internal router DHCP relay-agent. Those addresses are tied to PPPoX or IPoE sessions and they are de-allocated when the PPPoX or IPoE session is terminated.

Parameters

server-name: The name of the local router DHCPv6 server.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server server-index name server-name

no server server-index

Context

[Tree] (config>aaa>radius-srv-plcy>servers server)

Full Context

configure aaa radius-server-policy servers server

Description

This command adds a RADIUS server.

The no form of this command removes a RADIUS server.

Parameters

index

Specifies the index for the RADIUS server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from lowest to highest index.

Values: 1 to 5

server-name: Specifies the server name, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server server-name [address ip-address] [secret key] [hash | hash2| custom] [create]

no server server-name

Context

[Tree] (config>service>vprn>radius-server server)

[Tree] (config>router>radius-server server)

Full Context

configure service vprn radius-server server

configure router radius-server server

Description

This command either specifies an external RADIUS server in the corresponding routing instance or enters configuration context of an existing server. The configured server could be referenced in the radius-server-policy.

The no form of this command removes the parameters from the server configuration.

Parameters

server-name: Specifies the name of the external RADIUS server.

ip-address: Specifies the IPv4 or IPv6 IP address of the external RADIUS server.

key: Specifies the shared secret key of the external RADIUS server, up to 64 characters.

hash: Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

hash2: Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

custom: Specifies the custom encryption to management interface.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server server-name [create] [purpose {[accounting | authentication]}] [wlan-gw-group group-id]

no server server-name

Context

[Tree] (config>router>radius-proxy server)

[Tree] (config>service>vprn>radius-proxy server)

Full Context

configure router radius-proxy server

configure service vprn radius-proxy server

Description

This command creates a RADIUS-proxy server in the corresponding routing instance. The proxy server can be configured for the purpose of proxying authentication or accounting or both.

If a WLAN-GW ISA group is specified, then the RADIUS proxy server is instantiated on the set of ISAs in the specified wlan-gw group. The RADIUS messages from the AP are load-balanced to these ISAs. The ISA that processes the RADIUS message then hashes this message to the ISA that anchors the UE. The hash is based on UE MAC address (required to be present in the calling-station-id attribute) in the RADIUS message.

If the create parameter is not specified, then this command enters configuration context of the specified RADIUS-proxy server.

The no form of this command removes the server-name and parameters from the radius-proxy configuration.

Parameters

server-name: Specifies the name of the RADIUS-proxy server.

create: Specifies that the system will create the specified RADIUS-proxy server.

purpose

Specifies the purpose the RADIUS-proxy server.

Values

accounting — proxy accounting packets

authentication — proxy authentication packets

group-id: Specifies the WLAN-GW ISA group.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server ipv6-address [ ipv6-address]

no server [ipv6-address [ipv6-address]]

Context

[Tree] (config>service>ies>sub-if>wlan-gw>pool-manager>dhcp6-client server)

[Tree] (config>service>vprn>sub-if>wlan-gw>pool-manager>dhcp6-client server)

Full Context

configure service ies subscriber-interface wlan-gw pool-manager dhcpv6-client server

configure service vprn subscriber-interface wlan-gw pool-manager dhcpv6-client server

Description

This specifies the DHCPv6 servers that are used for requesting addresses.

The no form of this command removes the server. This cannot be executed while any DHCPv6 client application is not shut down.

Parameters

ipv6-address: Specifies up to 8 unicast IPv6 addresses of a DHCP6 server.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server index address ip-address secret key [{hash | hash2 | custom}] [port port]

no server index

Context

[Tree] (config>service>vprn>aaa>rmt-srv>tacplus server)

[Tree] (config>system>security>tacplus server)

Full Context

configure service vprn aaa remote-servers tacplus server

configure system security tacplus server

Description

This command adds a TACACS+ server and configures the TACACS+ server IP address, index, and key values.

Up to five TACACS+ servers can be configured at any one time. TACACS+ servers are accessed in order from lowest index to the highest index for authentication requests.

The no form of this command removes the server from the configuration.

Default

No TACACS+ servers are configured.

Parameters

index

Specifies the index for the TACACS+ server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from the lowest index to the highest index.

Values: 1 to 5

ip-address

Specifies the IP address of the TACACS+ server. Two TACACS+ servers cannot have the same IP address. An error message is generated if the server address is a duplicate.

Values


ipv4-address	a.b.c.d (host bits must be 0)
ipv6-address	x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x: [0..FFFF]H
	d: [0..255]D

key

Specifies the secret key, up to 128 characters, for access to the TACACS+ server. This secret key must match the password on the TACACS+ server.

Values: Up to 128 characters in length.

hash: Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

hash2: Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

custom: Specifies the custom encryption to management interface.

port

Specifies the port ID.

Values: 0 to 65535

Platforms

All

server

Syntax

server ipv6-address [ ipv6-address]

no server

Context

[Tree] (config>service>vprn>router-advert>dns-options server)

[Tree] (config>service>vprn>router-advert>if>dns-options server)

Full Context

configure service vprn router-advertisement dns-options server

configure service vprn router-advertisement interface dns-options server

Description

This command specifies the IPv6 DNS servers to include in the RDNSS option in Router Advertisements. When specified at the router advertisement level this applies to all interfaces that have include-dns enabled, unless the interfaces have more specific dns-options configured.

Parameters

ipv6-address: Specifies the IPv6 address of the DNS server(s), up to a maximum of four, specified as eight 16-bit hexadecimal pieces.

Platforms

All

server

Syntax

server ip-address[:port] [create]

no server ip-address[:port]

Context

[Tree] (config>app-assure>group>url-filter>icap server)

Full Context

configure application-assurance group url-filter icap server

Description

This command configures the IP address and server port of the ICAP server.

Parameters

ip-address[:port]: Specifies the ICAP server IP address and port.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server ip-address[ip-address] router router-instance

server ip-address [ip-address] service-name service-name

no server

Context

[Tree] (config>service>ies>if>sap>ipsec-gw>dhcp server)

[Tree] (config>service>vprn>if>sap>ipsec-gw>dhcp server)

Full Context

configure service ies interface sap ipsec-gw dhcp server

configure service vprn interface sap ipsec-gw dhcp server

Description

This command specifies up to eight DHCPv4 server addresses for DHCPv4-based address assignment. If multiple server addresses are specified, the first advertised DHCPv4 address received is chosen.

Default

no server

Parameters

ip-address

Specifies up to eight unicast IPv4 addresses.

Values


ipv4-address	a.b.c.d

router-instance

Specifies the router instance ID used to reach the configured server address.

This variant of this command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic). The server ip-address service-name service-name variant can be used in all configuration modes.

Values

{router-name | vprn-svc-id}


vprn-svc-id:	1 to 2147483647
router-name:	router-name is an alias for input only. The router-name gets replaced with an id automatically by SR OS in the configuration).

Default: Base

service-name: Specifies the name of the IES or VPRN service used to reach the configured server address, up to 64 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server ipv6-address[ipv6-address] router router-instance

server ipv6-address [ ipv6-address] service-name service-name

no server

Context

[Tree] (config>service>vprn>if>sap>ipsec-gw>dhcp6 server)

[Tree] (config>service>ies>if>sap>ipsec-gw>dhcp6 server)

Full Context

configure service vprn interface sap ipsec-gw dhcp6 server

configure service ies interface sap ipsec-gw dhcp6 server

Description

This command specifies up to eight DHCPv6 server addresses for DHCPv6-based address assignment. If multiple server addresses are specified, the first advertised DHCPv6 address received is chosen.

Default

no server

Parameters

ipv6-address

Specifies up to eight unicast global unicast IPv6 addresses.

Values


ipv6-address	x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x - [0..FFFF]H
	d - [0..255]D

router-instance

Specifies the router instance ID used to reach the configured server address.

Values

{router-name | vprn-svc-id}


vprn-svc-id:	1 to 2147483647
router-name:	router-name is an alias for input only. The router-name gets replaced with an id automatically by SR OS in the configuration).

Default: Base

service-name: Specifies the name of the IES or VPRN service used to reach the configured server address, up to 64 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server server-index [ create]

no server server-index

Context

[Tree] (config>aaa>isa-radius-plcy>servers server)

Full Context

configure aaa isa-radius-policy servers server

Description

This command adds a RADIUS server and configures the RADIUS server IP address, index, and key values.

The no form of the command removes the server from the configuration.

Parameters

server-index

The index for the RADIUS server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from lowest to highest index.

Values: 1 to 10 (a maximum of 5 accounting servers)

create: Keyword used to create the server index.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server

Context

[Tree] (config>test-oam>twamp server)

Full Context

configure test-oam twamp server

Description

This command configures the node for TWAMP server functionality.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

server

Syntax

server server [server]

Context

[Tree] (config>router>if>dhcp server)

Full Context

configure router interface dhcp server

Description

This command specifies a list of servers where requests will be forwarded. The list of servers can be entered as either IP addresses or fully qualified domain names. There must be at least one server specified for DHCP relay to work. If there are multiple servers then the request is forwarded to all of the servers in the list. There can be a maximum of eight DHCP servers configured.

The flood command is applicable only in the VPLS case. There is a scenario with VPLS where the VPLS node only wants to add Option 82 information to the DHCP request to provider per-subscriber information, but it does not do full DHCP relay. In this case, the server is set to "flood". This means the DHCP request is still a broadcast and is sent through the VPLS domain. A node running at Layer 3 further upstream then can perform the full Layer 3 DHCP relay function.

Default

no server

Parameters

server: Specifies the DHCP server IP address. A maximum of eight servers can be specified in a single statement.

Platforms

All

server

Syntax

server ipv6-address [ipv6-address]

no server

Context

[Tree] (config>router>router-advert>if>dns-options server)

[Tree] (config>router>router-advert>dns-options server)

Full Context

configure router router-advertisement interface dns-options server

configure router router-advertisement dns-options server

Description

Parameters

ipv6-address: Specifies the IPv6 address of the DNS servers as eight 16-bit hexadecimal pieces. A maximum of four ipv6 addresses can be specified in a single statement.

Platforms

All

server

Syntax

server pcp-server-name [create]

no server pcp-server-name

Context

[Tree] (config>router>pcp-server server)

Full Context

configure router pcp-server server

Description

Commands in this context configure a PCP server.

The no form of this command deletes the specified PCP server.

Parameters

pcp-server-name: Specifies the PCP server name, up to 32 characters.

create: Creates a PCP server before entering the context to configure it.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server [routerrouter-instance | service-name service-name] {ip-address | ipv6-address |ptp} [key-id key-id | authentication-keychain keychain-name] [version version] [prefer]

no server [routerrouter-instance | service-name service-name] {ip address | ipv6-address | ptp}

Context

[Tree] (config>system>time>ntp server)

Full Context

configure system time ntp server

Description

This command configures the node to operate in client mode with the NTP server specified in the address field of this command.

If the internal PTP process is used as a source of time for System Time and OAM time then it must be specified as a server for NTP. If PTP is specified, the prefer parameter must be specified. After PTP has established a UTC traceable time from an external grandmaster it is always the source for time into NTP, even if PTP goes into time holdover. PTP applies only to the 7450 ESS and 7750 SR.

Using the internal PTP time source for NTP promotes the internal NTP server to stratum 1 level, which may impact the NTP network topology.

The no form of this command removes the server with the specified address from the configuration.

Parameters

router-instance

Specifies the routing context that contains the interface in the form of router-name or service-id.

Values

router-name — Base | Management

service-id — 1 to 2147483647

Default: Base

service name: Specifies the service name for the VPRN, up to 64 characters. CPM routing instances are not supported.

ip-address

Configures the IPv4 address of an external NTP server.

Values: a.b.c.d

ipv6-address

Configures the IPv6 address of an external NTP server.

Values

x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x: [0 to FFFF] H
d: [0 to 255] D

key-id

Specifies the key ID that identifies the configured authentication key and authentication type used by this node to transmit NTP packets to an NTP server. If an NTP packet is received by this node, the authentication key-id, type, and key value must be valid, otherwise the packet is rejected and an event/trap generated. This is an optional parameter.

Values: 1 to 255

keychain-name: Identifies the keychain name, up to 32 characters.

version

Configures the NTP version number that is expected by this node. This is an optional parameter.

Values: 2 to 4

Default: 4

ptp: Configures the internal PTP process as a time server into the NTP process. The prefer parameter is mandatory with this server option.

prefer: Specifies that, when configuring more than one peer, one remote system can be configured as the preferred peer. When a second peer is configured as preferred, the new entry overrides the old entry.

Platforms

All

server

Syntax

server

Context

[Tree] (config>system>security>ssh>key-re-exchange server)

Full Context

configure system security ssh key-re-exchange server

Description

This command enables the key re-exchange context for the SSH server.

Platforms

All

server

Syntax

server index address ip-address secret key [hash | hash2 | custom] [tls-client-profile profile] [authenticator {md5 | sm3}]

no server index

Context

[Tree] (config>service>vprn>aaa>rmt-srv>radius server)

[Tree] (config>system>security>radius server)

Full Context

configure service vprn aaa remote-servers radius server

configure system security radius server

Description

This command adds a RADIUS server and configures the IP address, index, and key values.

Up to five RADIUS servers can be configured at any one time. For authentication requests, RADIUS servers are accessed in order from the lowest to highest index until a response from a server is received. A higher indexed server is only queried if no response is received from a lower indexed server (which implies that the server is not available). If a response from a server is received, no other RADIUS servers are queried. It is assumed that there are multiple identical servers configured as backups and that the servers do not have redundant data.

The no form of this command removes the server from the configuration.

Default

no server

Parameters

index

Specifies the index for the RADIUS server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from lowest to highest index.

Values: 1 to 5

ip-address

Specifies the IP address of the RADIUS server. Two RADIUS servers cannot have the same IP address. An error message is generated if the server address is a duplicate.

Values


ipv4-address	a.b.c.d (host bits must be 0)
ipv6-address	x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x: [0..FFFF]H
	d: [0..255]D

key: Specifies the secret key to access the RADIUS server, up to 64 characters. This secret key must match the password on the RADIUS server.

hash: Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

hash2: Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

custom: Specifies the custom encryption to management interface.

tls-client-profile: Specifies the TLS profile for the RADIUS server.

profile: Specifies the TLS profile name, up to 32 characters.

md5: Specifies the MD5 hash algorithm for the RADIUS server.

sm3: Specifies the SM3 hash algorithm for the RADIUS server.

Platforms

All

server

Syntax

server server-index [ create]

no server server-index

Context

[Tree] (config>system>security>ldap server)

Full Context

configure system security ldap server

Description

This command configures an LDAP server. Up to five servers can be configured, which can then work in a redundant manner.

The no version of this command removes the server connection.

Parameters

server-index

Specifies a unique LDAP server connection.

Values: 1 to 5

Platforms

All

server

Syntax

server server-indexaddressip-address secret key [hash | hash2 | custom] [auth-port auth-port] [acct-port acct-port] [type server-type]

Context

[Tree] (config>system>security>dot1x>radius-plcy server)

Full Context

configure system security dot1x radius-plcy server

Description

This command adds a Dot1x server and configures the Dot1x server IP address, index, and key values.

Up to five Dot1x servers can be configured at any one time. Dot1x servers are accessed in order from lowest to highest index for authentication requests until a response from a server is received. A higher indexed server is only queried if no response is received from a lower indexed server (which implies that the server is not available). If a response from a server is received, no other Dot1x servers are queried. It is assumed that there are multiple identical servers configured as backups and that the servers do not have redundant data.

The no form of this command removes the server from the configuration.

Default

no server

Parameters

server-index

Specifies the index for the Dot1x server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from lowest to highest index.

Values: 1 to 5

ip-address: Specifies the IP address of the Dot1x server. Two Dot1x servers cannot have the same IP address. An error message is generated if the server address is a duplicate.

key: Specifies the secret key, up to 128 characters, to access the Dot1x server. This secret key must match the password on the Dot1x server.

hash: Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

hash2: Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

custom: Specifies the custom encryption to management interface.

acct-port: Specifies the UDP port number on which to contact the RADIUS server for accounting requests.

auth-port

Specifies a UDP port number to be used as a match criteria.

Values: 1 to 65535

server-type

Specifies the server type.

Values: authorization, accounting, combined

Platforms

All

server

Syntax

[no] server ip-address [ip-address]

Context

[Tree] (config>service>vprn>sub-if>dhcp>offer-selection server)

[Tree] (config>service>ies>sub-if>grp-if>dhcp>offer-selection server)

[Tree] (config>service>vprn>sub-if>grp-if>dhcp>offer-selection server)

Full Context

configure service vprn subscriber-interface dhcp offer-selection server

configure service ies subscriber-interface group-interface dhcp offer-selection server

configure service vprn subscriber-interface group-interface dhcp offer-selection server

Description

This command configures a DHCPv4 server destination for which a discover delay must be configured. Up to eight DHCPv4 server destinations can be configured.

The no form of this command removes the DHCPv4 server destination.

Parameters

ip-address: Specifies the IPv4 address of the DHCP server, in dotted notation a.b.c.d.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

[no] server ipv6-address [ipv6-address]

Context

[Tree] (config>service>vprn>sub-if>grp-if>ipv6>dhcp6>relay>advertise-selection server)

[Tree] (config>service>ies>sub-if>grp-if>ipv6>dhcp6>relay>advertise-selection server)

[Tree] (config>service>vprn>sub-if>ipv6>dhcp6>relay>advertise-selection server)

Full Context

configure service vprn subscriber-interface group-interface ipv6 dhcp6 relay advertise-selection server

configure service ies subscriber-interface group-interface ipv6 dhcp6 relay advertise-selection server

configure service vprn subscriber-interface ipv6 dhcp6 relay advertise-selection server

Description

This command configures a DHCPv6 server destination for which a solicit delay or a preference option value must be configured. Up to eight DHCPv6 server destinations can be configured.

The no form of this command removes the DHCPv6 server destination.

Parameters

ipv6-address

Specifies the IPv6 address of the DHCPv6 server.

Values


ipv6-address:	x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x: [0 to FFFF]H
	d: [0 to 255]D

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server

Syntax

server [ip-address | fqdn] [port port]

no server

Context

[Tree] (config>system>security>pki>est-profile server)

Full Context

configure system security pki est-profile server

Description

Commands in this context configure EST server parameters.

The no form of the command reverts to the default value.

Parameters

ip-address

Specifies the IP address of the server.

Values


ipv4-address	a.b.c.d (host bits must be 0)
ipv6-address	x:x:x:x:x:x:x:x
	x:x:x:x:x:x:d.d.d.d
	x: [0..FFFF]H
	d: [0..255]D

fqdn: Specifies to use the Fully Qualified Domain Name (FQDN) of the EST server, up to 255 characters.

port

Specifies the port number of the EST server.

Values: 1 to 65535

Default: 443

Platforms

All

server

Syntax

server

Context

[Tree] (config>system>security>ssh>authentication-method server)

Full Context

configure system security ssh authentication-method server

Description

Commands in this context configure, at the system level, the authentication method that the SSH server accepts for the session.

Platforms

All

server

Syntax

server

Context

[Tree] (config>system>security>user>ssh-auth-method server)

Full Context

configure system security user ssh-authentication-method server

Description

Commands in this context configure, at the user level, the authentication method accepted by the SSH server for the session. The user-level configuration overrides the system-level configuration.

Platforms

All

server-address

Syntax

server-address server-address[name server-name]

no server-address server-address

Context

[Tree] (config>app-assure>group>dns-ip-cache>dns-match server-address)

Full Context

configure application-assurance group dns-ip-cache dns-match server-address

Description

This command configures a DNS server address. DNS responses from this DNS server are used to populate the dns-ip-cache. Up to 64 server addresses can be configured.

Parameters

server-address

Specifies the IPv4 or IPv6 address of the DNS.

Values


ipv4-address	a.b.c.d[/mask]
		mask - [1 to 32]
ipv6-address	x:x:x:x:x:x:x:x/prefix-length
		x:x:x:x:x:x:d.d.d.d
		x - [0 to FFFF]H
		d - [0 to 255]D
	prefix-length	[1 to 128]

server-name: Specifies an optional server name for a given server address.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server-address

Syntax

server-address {eq | neq}ip-address

server-address {eq | neq} ip-address masked-ip-addressnetmask netmask

server-address {eq | neq} dns-ip-cache dns-ip-cache-name

server-address {eq | neq} ip-prefix-list ip-prefix-list-name

no server-address

Context

[Tree] (config>app-assure>group>policy>app-filter>entry server-address)

Full Context

configure application-assurance group policy app-filter entry server-address

Description

This command configures the server address to use in application definition. The server IP address may be the source or destination, network or subscriber IP address and may include the use of netmasks.

The no form of this command restores the default (removes the server address from application criteria defined by this entry).

Default

no server-address

Parameters

eq: Specifies a comparison operator that the value configured and the value in the flow are equal.

neq: Specifies a comparison operator that the value configured differs from the value in the flow.

ip-address

Specifies a valid unicast address.

Values


ipv4-address	a.b.c.d[/mask]
	mask - [1..32]
ipv6-address	x:x:x:x:x:x:x:x/prefix-length
	x:x:x:x:x:x:d.d.d.d
	x - [0..FFFF]H
	d - [0..255]D
	prefix-length [1..128]

netmask

Specifies an IPv4 or IPv6 address mask.

Values


ipv4-address	a.b.c.d
ipv6-address	x:x:x:x:x:x:x:x (eight 16-bit)
	x:x:x:x:x:x:d.d.d.d
	x - [0..FFFF]H
	d - [0..255]D

masked-ip-address

Specifies a valid unicast IPv4 or IPv6 address.

Values


ipv4-address	a.b.c.d
ipv6-address	x:x:x:x:x:x:x:x (eight 16-bit)
	x:x:x:x:x:x:d.d.d.d
	x - [0..FFFF]H
	d - [0..255]D

dns-ip-cache-name: Specifies a DNS IP cache name, up to 32 characters.

ip-prefix-list-name: Specifies the name of an IP prefix list, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server-address

Syntax

server-address ip-address [version version-number] [normal | preferred]

[interval seconds]

no server-address ip-address

Context

[Tree] (config>system>time>sntp server-address)

Full Context

configure system time sntp server-address

Description

This command creates an SNTP server for unicast client mode.

Parameters

ip-address

Specifies the IP address of the SNTP server.

Values: a.b.c.d

version-number

Specifies the SNTP version supported by this server.

Values: 1 to 3

Default: 3

normal | preferred

Specifies the preference value for this SNTP server. When more than one time-server is configured, one server can have preference over others. The value for that server should be set to preferred. Only one server in the table can be a preferred server.

Default: normal

seconds

Specifies the frequency at which this server is queried.

Values: 64 to 1024

Default: 64

Platforms

All

server-cipher-list

Syntax

server-cipher-list

Context

[Tree] (config>system>security>ssh server-cipher-list)

Full Context

configure system security ssh server-cipher-list

Description

Commands in this context configure a list of allowed ciphers by the SSH server.

Platforms

All

server-cipher-list

Syntax

server-cipher-list name [create]

no server-cipher-list name

Context

[Tree] (config>system>security>tls server-cipher-list)

Full Context

configure system security tls server-cipher-list

Description

This command creates the cipher list that is compared against cipher lists sent by the client to the server in the client hello message. The list contains all ciphers that are supported and desired by SR OS for use in the TLS session. The first common cipher found in both the server and client cipher lists will be chosen. As such, the most desired ciphers should be added at the top of the list.

The no form of the command removes the cipher list.

Parameters

name: Specifies the name of the server cipher list, up to 32 characters in length.

create: Keyword used to create the server cipher list.

Platforms

All

server-group-list

Syntax

server-group-list name [create]

no server-group-list name

Context

[Tree] (config>system>security>tls server-group-list)

Full Context

configure system security tls server-group-list

Description

This command configures a list of TLS 1.3-supported group suite codes that the server sends in a server Hello message.

The no form of this command removes the server group list.

Parameters

name: Specifies the name of the server group list, up to 32 characters.
create: Keyword used to create the server group list.

Platforms

All

server-host-key-list

Syntax

server-host-key-list

Context

[Tree] (config>system>security>ssh server-host-key-list)

Full Context

configure system security ssh server-host-key-list

Description

Commands in this context configure the list of host key algorithms negotiated by the SR OS acting as the SSH server.

Platforms

All

server-id

Syntax

server-id duid-en hex hex-string

server-id duid-en string ascii-string

server-id duid-ll

no server-id

Context

[Tree] (config>service>ies>sub-if>grp-if>ipv6>dhcp6>proxy server-id)

[Tree] (config>router>dhcp6>server server-id)

[Tree] (config>service>vprn>sub-if>grp-if>ipv6>dhcp6>proxy server-id)

[Tree] (config>service>vprn>dhcp6>server server-id)

Full Context

configure service ies subscriber-interface group-interface ipv6 dhcp6 proxy-server server-id

configure router dhcp6 local-dhcp-server server-id

configure service vprn subscriber-interface group-interface ipv6 dhcp6 proxy-server server-id

configure service vprn dhcp6 local-dhcp-server server-id

Description

This command allows the operator to customize the server-id attribute of a DHCPv6 message (such as DHCPv6 advertise and reply). By default, the server-id uses DUID-ll derived from the chassis link layer address. Operators have the option to use a unique identifier by using the duid-en (vendor based on an enterprise number). There is a maximum length associated with the customizable hex-string and ascii-string.

The no form of this command reverts to the default.

Default

server-id duid-ll

Parameters

hex-string

Specifies a DUID system ID in a hex format.

Values: 0x0 to 0xFFFFFFFF (maximum 116 hex nibbles)

ascii-string: Specifies a DUID system ID in an ASCII format, up to 58 characters.

duid-ll: Specifies that the DUID system ID is derived from the system link layer address.

duid-en: Specifies the enterprise number.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server-ip

Syntax

server-ip {eq | neq} ip-address

no server-ip

Context

[Tree] (debug>app-assure>group>traffic-capture>match server-ip)

Full Context

debug application-assurance group traffic-capture match server-ip

Description

This command configures debugging on a servicer IP address.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server-kex-list

Syntax

server-kex-list

Context

[Tree] (config>system>security>ssh server-kex-list)

Full Context

configure system security ssh server-kex-list

Description

This command configures SSH KEX algorithms for SR OS as an SSH server.

An empty list is the default list that the SSH KEX advertises. The default list contains the following:

ecdh-sha2-nistp512

ecdh-sha2-nistp384

ecdh-sha2-nistp256

diffie-hellman-group16-sha512

diffie-hellman-group14-sha256

diffie-hellman-group14-sha1

diffie-hellman-group-exchange-sha1

diffie-hellman-group1-sha1

Platforms

All

server-mac-list

Syntax

server-mac-list

Context

[Tree] (config>system>security>ssh server-mac-list)

Full Context

configure system security ssh server-mac-list

Description

This command allows the user to configure SSH MAC algorithms for SR OS as an SSH server.

Platforms

All

server-policy

Syntax

server-policy policy-name

no server-policy

Context

[Tree] (config>service>dynsvc>acct-2 server-policy)

[Tree] (config>service>dynsvc>acct-1 server-policy)

Full Context

configure service dynamic-services dynamic-services-policy accounting-2 server-policy

configure service dynamic-services dynamic-services-policy accounting-1 server-policy

Description

This command configures the radius server policy to be used for dynamic data services RADIUS accounting.

The no form of this command removes the radius server policy from the configuration. This is only allowed when there are no active dynamic data services referencing this policy.

Parameters

policy-name

Specifies the name of the radius server policy.

Values: Up to 32 characters maximum

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server-policy

Syntax

server-policy policy-name

no server-policy

Context

[Tree] (config>service>dynsvc>plcy>auth server-policy)

Full Context

configure service dynamic-services dynamic-services-policy authentication server-policy

Description

This command configures the RADIUS server policy to be used for RADIUS authentication of data-triggered dynamic services.

Local authentication and RADIUS authentication are mutually exclusive.

The no form of this command removes the server policy from the configuration and disables RADIUS authentication.

Parameters

policy-name: Specifies a RADIUS server policy name, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

server-port

Syntax

server-port {eq | neq | gt | lt} port-num

server-port {eq | neq} range start-port-num end-port-num

server-port {eq} {port-num | rangestart-port-num end-port-num} {first-packet-trusted | first-packet-validate}

server-port {eq | neq} port-list port-list-name

server-port {eq} port-list port-list-name {first-packet-trusted | first-packet-validate}

no server-port

Context

[Tree] (config>app-assure>group>policy>app-filter>entry server-port)

Full Context

configure application-assurance group policy app-filter entry server-port

Description

This command specifies the server TCP or UDP port number to use in the application definition.

The no form of this command restores the default (removes server port number from application criteria defined by this app-filter entry).

Default

no server-port (the server port is not used in the application definition)

Parameters

eq: Specifies that the value configured and the value in the flow are equal.

neq: Specifies that the value configured differs from the value in the flow.

gt: Specifies all port numbers greater than server-port-number match.

lt: Specifies all port numbers less than server-port-number match.

port-list-name: Specifies a named port list containing a set or range of ports.

port-num

Specifies a valid server port number.

Values: 0 to 65535

start-port-num, end-port-num

Specifies the starting or ending port number.

Values: 0 to 65535

Server Port Options:

The following options are available:

No option specified: TCP/UDP port applications with full signature verification:
- AA ensures that other applications that can be identified do not run over a well-known port.
- Application-aware policy applied once signature-based identification completes (likely requiring several packets).
first-packet-validate: TCP/UDP trusted port applications with signature verification:
- Application identified using well known TCP/UDP port based filters and re-identified once signature identification completes.
- AA policy applied from the first packet of a flow while continuing signature-based application identification. Policy re-evaluated once the signature identification completes, allowing to detect improper/unexpected applications on a well-known port.
first-packet-trusted: TCP/UDP trusted port applications - no signature verification:
- Application identified using well known TCP/UDP port based filters only.
- Application Aware policy applied from the first packet of a flow.
- No signature processing assumes operator/customer trusts that no other applications can run on the well-known TCP/UDP port (statistics collected against trusted_tcp or trusted_udp protocol).

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server-port

Syntax

server-port {eq | neq} port-num

no server-port

Context

[Tree] (debug>app-assure>group>traffic-capture>match server-port)

Full Context

debug application-assurance group traffic-capture match server-port

Description

This command configures debugging on a server port.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server-shutdown

Syntax

[no] server-shutdown

Context

[Tree] (config>system>security>ssh server-shutdown)

Full Context

configure system security ssh server-shutdown

Description

This command enables the SSH servers running on the system.

Default

no server-shutdown

Platforms

All

server-signature-list

Syntax

server-signature-list name [create]

no server-signature-list name

Context

[Tree] (config>system>security>tls server-signature-list)

Full Context

configure system security tls server-signature-list

Description

This command configures a list of TLS 1.3-supported signature suite codes for the digital signature that the server sends in a server Hello message.

The no form of this command removes the server signature list.

Parameters

name: Specifies the name of the server signature list, up to 32 characters.
create: Keyword used to create the server signature list.

Platforms

All

server-timeout

Syntax

server-timeout seconds

no server-timeout

Context

[Tree] (config>port>ethernet>dot1x server-timeout)

Full Context

configure port ethernet dot1x server-timeout

Description

This command configures the period during which the router waits for the RADIUS server to respond to its access request message. When this timer expires, the router will re-send the access request message, up to the specified number times.

The no form of this command returns the value to the default.

Default

server-timeout 30

Parameters

seconds

Specifies the server timeout period, in seconds.

Values: 1 to 300

Platforms

All

server-tls-profile

Syntax

server-tls-profile name [create]

no server-tls-profile name

Context

[Tree] (config>system>security>tls server-tls-profile)

Full Context

configure system security tls server-tls-profile

Description

This command creates a TLS server profile. This profile can be used by applications that support TLS for encryption. The applications should not send any PDUs until the TLS handshake has been successful.

The no form of the command removes the TLS server profile.

Parameters

name: Specifies the name of the TLS server profile, up to 32 characters in length.

create: Keyword used to create the TLS server profile.

Platforms

All

server6

Syntax

server6 ipv6-address

no server6

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host server6)

Full Context

configure subscriber-mgmt local-user-db ipoe host server6

Description

This command allows DHCP6 server selection based on the host entry in LUDB.

The configured DHCP6 server IP address must reference one of the v6 addressees configured under the config>service>vprn>sub-if>grp-if>ipv6>dhcpv6>relay or config>service>ies>sub-if>grp-if>ipv6>dhcpv6>relay context.

The no form of this command reverts to the default.

Parameters

ipv6-address

Specifies the retailer service ID.

Values


ipv6-address:	x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x: [0 to FFFF]H
	d: [0 to 255]D

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

servers

Syntax

servers

Context

[Tree] (config>aaa>radius-srv-plcy servers)

Full Context

configure aaa radius-server-policy servers

Description

Commands in this context configure radius-server-policy parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

service

Syntax

service service-id

no service

Context

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>msap-defaults service)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>msap-defaults service)

[Tree] (config>service>vpls>sap>msap-defaults service)

Full Context

configure subscriber-mgmt local-user-db ppp host msap-defaults service

configure subscriber-mgmt local-user-db ipoe host msap-defaults service

configure service vpls sap msap-defaults service

Description

This command sets default service for all subscribers created based on trigger packets received on the given capture SAP in case the corresponding VSA is not included in the RADIUS authentication response. This command is applicable to capture SAP only.

The no form of this command reverts to the default.

Parameters

service-id

Specifies the service ID as an integer or a name.

Values

service-id - 1 to 2147483648

service-name - up to 64 characters

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

configure subscriber-mgmt local-user-db ppp host msap-defaults service
configure subscriber-mgmt local-user-db ipoe host msap-defaults service

All

configure service vpls sap msap-defaults service

service

Syntax

service

Context

[Tree] (config>cflowd>collector>exp-filter>if-list service)

Full Context

configure cflowd collector export-filter interface-list service

Description

Commands in this context configure which service interfaces' flow data is being sent to this collector

Platforms

All

service

Syntax

service service-id preference preference

no service service-id

Context

[Tree] (config>router>dns>redirect-vprn service)

Full Context

configure router dns redirect-vprn service

Description

This command configures the VPRN DNS redirection for the specified service.

The no form of this command removes the service from the VPRN DNS resolution configuration.

Parameters

service-id

Specifies the unique service identification number or string identifying the service in the service domain.

Values

service-id: 1 to 2147483647

svc-name: 64 characters maximum

preference

Specifies the service preference.

Values: 0 to 255

Platforms

All

service

Syntax

[no] service service-id

Context

[Tree] (config>log>services-all-events service)

Full Context

configure log services-all-events service

Description

This command enables access to the entire system-wide set of log events (VPRN and non-VPRN) in the logs configured within the management VPRN specified by the service ID.

The no form of the command enables the display of VPRN events only.

Parameters

service-id

Identifies the VPRN.

Values

{id | svc-name}


id:	1 to 2147483647
svc-name:	up to 64 characters

Platforms

All

service

Syntax

service service-id

service name service-name

no service

Context

[Tree] (config>system>security>pki>ca-profile>ocsp service)

Full Context

configure system security pki ca-profile ocsp service

Description

This command specifies the service or routing instance that used to contact OCSP responder. This applies to OCSP responders that either configured in CLI or defined in AIA extension of the certificate to be verified.

The responder-url will also be resolved by using the DNS server configured in the configured routing instance.

With VPRN services, the system checks whether the specified service ID or service name is an existing VPRN service at the time of CLI configuration. Otherwise the configuration fails.

Parameters

service-id

Specifies an existing service ID to be used in the match criteria.

This variant of this command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic). The service name service-name variant can be used in all configuration modes.

Values: service-id: 1 to 2147483647 base-router: 0

name service-name: Identifies the service, up to 64 characters.

Platforms

All

service-activation-testhead

Syntax

service-activation-testhead service-test service-test-name { start | stop}

Context

[Tree] (oam service-activation-testhead)

Full Context

oam service-activation-testhead

Description

This command start or stops a service activation testhead service test.

Parameters

service-test-name: Specifies a preconfigured service test name, up to 64 characters.

start: Keyword to start a service test. The software allows only one instance of a service test to be run for the specified service-test-name. If the user attempts to start another instance of a service test for the same service-test-name while the current instance is still running, the following error message is displayed: "MINOR: CLI #238 Configuration change failed validation - service test is already executing”.

stop: Keyword to stop a service test. If the user attempts to stop a service test that is already complete, the following error message is displayed: "MINOR: CLI #238 Configuration change failed validation - service test is not executing”.

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

service-activation-testhead

Syntax

service-activation-testhead

Context

[Tree] (config>test-oam service-activation-testhead)

Full Context

configure test-oam service-activation-testhead

Description

Commands in this context configure service activation launch parameters for the testhead function. Service Activation Testhead is supported on FP4 and later platforms.

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

service-carving

Syntax

service-carving

Context

[Tree] (config>service>system>bgp-evpn>eth-seg service-carving)

Full Context

configure service system bgp-evpn ethernet-segment service-carving

Description

Commands in this context configure service-carving in the Ethernet-Segment. The service-carving algorithm determines which PE is the Designated Forwarder (DF) in a specified Ethernet Segment and for a specific service.

Platforms

All

service-context-id

Syntax

service-context-id name

no service-context-id

Context

[Tree] (config>subscr-mgmt>diam-appl-plcy>gy>include-avp service-context-id)

Full Context

configure subscriber-mgmt diameter-application-policy gy include-avp service-context-id

Description

This command configures the value of the service context ID AVP.

The no form of this command returns the command to the default setting.

Parameters

name: Specifies the service context ID AVP value, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

service-id

Syntax

service-id service-id

no service-id

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>host-ident service-id)

Full Context

configure subscriber-mgmt local-user-db ipoe host host-identification service-id

Description

This command specifies the service ID to match for a host lookup. When the LUDB is accessed using a DHCPv4 server, the SAP ID is matched against the Nokia vendor-specific sub-option in DHCP Option 82.

The no form of this command removes the service ID from the configuration.

Parameters

service-id

Specifies an existing service ID or service name.

Values

service-id — 1 to 2147483647

service-name — up to 64 characters

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

service-id

Syntax

[no] service-id

Context

[Tree] (config>service>vpls>sap>dhcp>option>vendor service-id)

[Tree] (config>service>vprn>if>dhcp>option>vendor service-id)

[Tree] (config>service>vprn>sub-if>grp-if>dhcp>option>vendor service-id)

[Tree] (config>subscr-mgmt>msap-policy>vpls-only>dhcp>option>vendor-specific-option service-id)

[Tree] (config>service>ies>sub-if>grp-if>dhcp>option>vendor service-id)

Full Context

configure service vpls sap dhcp option vendor-specific-option service-id

configure service vprn interface dhcp option vendor-specific-option service-id

configure service vprn subscriber-interface group-interface dhcp option vendor-specific-option service-id

configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp option vendor-specific-option service-id

configure service ies subscriber-interface group-interface dhcp option vendor-specific-option service-id

Description

This command enables the sending of the service ID in the Nokia vendor-specific sub-option of the DHCP relay packet.

The no form of this command disables the sending of the service ID in the Nokia vendor-specific sub-option of the DHCP relay packet.

Platforms

All

configure service vprn interface dhcp option vendor-specific-option service-id
configure service vpls sap dhcp option vendor-specific-option service-id

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

configure service ies subscriber-interface group-interface dhcp option vendor-specific-option service-id
configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp option vendor-specific-option service-id
configure service vprn subscriber-interface group-interface dhcp option vendor-specific-option service-id

service-id

Syntax

[no] service-id

Context

[Tree] (config>router>if>dhcp>option>vendor-specific-option service-id)

Full Context

configure router interface dhcp option vendor-specific-option service-id

Description

This command enables the sending of the service ID in the Nokia vendor-specific sub-option of the DHCP relay packet.

The no form of this command disables the sending of the service ID in the Nokia vendor-specific sub-option of the DHCP relay packet.

Default

no service-id

Platforms

All

service-id

Syntax

service-id service-id

no service-id

Context

[Tree] (config>redundancy>mc>peer>mcr>l3-ring>ibc service-id)

[Tree] (config>redundancy>mc>peer>mcr>ring>ibc service-id)

Full Context

configure redundancy multi-chassis peer mc-ring l3-ring in-band-control-path service-id

configure redundancy multi-chassis peer mc-ring ring in-band-control-path service-id

Description

This command specifies the service ID if the interface used for the inband control connection belongs to a VPRN service. If not specified, the service-id is zero and the interface must belong to the Base router. This command supersedes the configuration of a service name.

The no form of this command removes the service ID from the IBC configuration.

Parameters

service-id

Specifies a service ID or an existing service name.

Values: 1 to 214748364 - Only supported in 'classic' configuration-mode (configure>system>management-interface>configuration-mode classic)

Platforms

All

service-id

Syntax

service-id service-id

no service-id

Context

[Tree] (config>redundancy>mc>peer>mcr>l3-ring>node>cv service-id)

[Tree] (config>redundancy>mc>peer>mcr>node>cv service-id)

Full Context

configure redundancy multi-chassis peer mc-ring l3-ring ring-node connectivity-verify service-id

configure redundancy multi-chassis peer mc-ring ring ring-node connectivity-verify service-id

Description

This command specifies the service ID of the SAP used for the ring-node connectivity verification of this ring node. This command supersedes the configuration of a service name.

The no form of the command removes the service ID from the CV configuration.

Default

no service-id

Parameters

service-id

Specifies the service ID or an existing service name.

Values: 1 to 2147483647- Only supported in "classic” configuration mode (configure system management-interface configuration-mode classic)

Platforms

All

service-id

Syntax

service-id

Context

[Tree] (config>service>system>bgp-evpn>eth-seg service-id)

Full Context

configure service system bgp-evpn ethernet-segment service-id

Description

This command enables the service-id context within the virtual ethernet-segment configuration.

Platforms

All

service-id-lag-hashing

Syntax

[no] service-id-lag-hashing

Context

[Tree] (config>system>load-balancing service-id-lag-hashing)

Full Context

configure system load-balancing service-id-lag-hashing

Description

This command enables enhanced VLL LAG service ID hashing. This command improves the LAG spraying of VLL service packets and is applied only when both ECMP and LAG hashing are performed by the same router. By default, the ECMP interface and LAG link for all packets on the VLL service are selected based on a direct modulo operation of the service ID. This command enhances distribution and hashes the service ID prior to the LAG link modulo operation when an ECMP link modulo operation is performed.

The no form of the command preserves the default behavior of VLL LAG service ID hashing.

Default

no service-id-lag-hashing

Platforms

All

service-id-range

Syntax

service-id-range start service-id end service-id

no service-id-range

Context

[Tree] (config>service>md-auto-id service-id-range)

Full Context

configure service md-auto-id service-id-range

Description

This command specifies the range of IDs used by SR OS to automatically assign an ID to services that are created in model-driven interfaces without an ID explicitly specified by the user or client.

A service created with an explicitly-specified ID cannot use an ID in this range. In the classic CLI and SNMP, the ID range cannot be changed while objects exist inside the previous or new range. In MD interfaces, the range can be changed, which causes any previously existing objects in the previous ID range to be deleted and re-created using a new ID in the new range.

The no form of this command removes the range values.

See the config>service md-auto-id command for further details.

Default

no service-id-range

Parameters

start service-id

Specifies the lower value of the ID range. The value must be less than or equal to the end value.

Values: 1 to 2147483647

end service-id

Specifies the upper value of the ID range. The value must be greater than or equal to the start value.

Values: 1 to 2147483647

Platforms

All

service-mtu

Syntax

service-mtu octets

no service-mtu

Context

[Tree] (config>service>template>vpls-template service-mtu)

[Tree] (config>service>vpls service-mtu)

Full Context

configure service template vpls-template service-mtu

configure service vpls service-mtu

Description

This command configures the service payload (Maximum Transmission Unit – MTU), in bytes, for the service. This MTU value overrides the service-type default MTU. The service-mtu defines the payload capabilities of the service. It is used by the system to validate the SAP and SDP binding’s operational state within the service.

The service MTU and a SAP’s service delineation encapsulation overhead (4 bytes for a dot1q tag) is used to derive the required MTU of the physical port or channel on which the SAP was created. If the required payload is larger than the port or channel MTU, then the SAP will be placed in an inoperative state. If the required MTU is equal to or less than the port or channel MTU, the SAP will be able to transition to the operative state.

When binding an SDP to a service, the service MTU is compared to the path MTU associated with the SDP. The path MTU can be administratively defined in the context of the SDP. The default or administrative path MTU can be dynamically reduced due to the MTU capabilities discovered by the tunneling mechanism of the SDP or the egress interface MTU capabilities based on the next hop in the tunnel path. If the service MTU is larger than the path MTU, the SDP binding for the service will be placed in an inoperative state. If the service MTU is equal to or less than the path MTU, then the SDP binding will be placed in an operational state.

If a service MTU, port or channel MTU, or path MTU is dynamically or administratively modified, then all associated SAP and SDP binding operational states are automatically re-evaluated.

For i-VPLS and Epipes bound to a b-VPLS, the service-mtu must be at least 18 bytes smaller than the b-VPLS service MTU to accommodate the PBB header.

The no form of this command returns the default service-mtu for the indicated service type to the default value.

Default

service-mtu 1514

Parameters

octets

The following table displays MTU values for specific VC types.

Table 1. MTU Values
VC-Type	Example Service MTU	Advertised MTU
Ethernet	1514	1500
Ethernet (with preserved dot1q)	1518	1504
VPLS	1514	1500
VPLS (with preserved dot1q)	1518	1504
VLAN (dot1p transparent to MTU value)	1514	1500
VLAN (qinq with preserved bottom qtag)	1518	1504

The size of the MTU in octets, expressed as a decimal integer

Values: 1 to 9194

Platforms

All

service-mtu

Syntax

service-mtu octets

no service-mtu

Context

[Tree] (config>service>cpipe service-mtu)

[Tree] (config>service>ipipe service-mtu)

[Tree] (config>service>epipe service-mtu)

Full Context

configure service cpipe service-mtu

configure service ipipe service-mtu

configure service epipe service-mtu

Description

This command configures the service payload in bytes, for the service. The configured Maximum Transmission Unit (MTU) value overrides the service-type default MTU. The service-mtu command defines the payload capabilities of the service. It is used by the system to validate the operational state of the SAP and SDP binding within the service.

The service MTU and a SAP’s service delineation encapsulation overhead (4 bytes for a dot1q tag) is used to derive the required MTU of the physical port or channel on which the SAP was created. If the required payload is larger than the port or channel MTU, the SAP is placed in an inoperative state. If the required MTU is equal to or less than the port or channel MTU, the SAP transitions to the operative state.

When binding an SDP to a service, the service MTU is compared to the path MTU associated with the SDP. The path MTU can be administratively defined in the context of the SDP. The default or administrative path MTU can be dynamically reduced due to the MTU capabilities discovered by the tunneling mechanism of the SDP or the egress interface MTU capabilities based on the next hop in the tunnel path. If the service MTU is larger than the path MTU, the SDP binding for the service is placed in an inoperative state. If the service MTU is equal to or less than the path MTU, the SDP binding is placed in an operational state.

If a service MTU, port or channel MTU, or path MTU is dynamically or administratively modified, all associated SAP and SDP binding operational states are automatically reevaluated.

Binding operational states are automatically reevaluated.

For I-VPLS and Epipes bound to a B-VPLS, the service MTU must be at least 18 bytes smaller than the B-VPLS service MTU to accommodate the PBB header.

Because this connects a Layer 2 to a Layer 3 service, adjust the service MTU under the Epipe service. The MTU that is advertised from the Epipe side is service MTU minus EtherHeaderSize.

Note:

In the configure>service>epipe context, the adv-service-mtu command can be used to override the configured MTU value used in T-LDP signaling to the far-end of an Epipe spoke-sdp. The adv-service-mtu command is also used to validate the value signaled by the far-end PE. For more information, see adv-service-mtu command.

The no form of this command returns the default service-mtu for the indicated service type to the default value.

By default, if no service-mtu is configured, the MTU value is (1514 - 14) = 1500.

Default

no service-mtu 1508 (for Apipe, Fpipe)

no service-mtu 1500 (for Ipipe)

no service-mtu 1524 (for Epipe)

MTU Values lists the MTU values for specific VC types.

Table 2. MTU Values
SAP VC-Type	Example: Service MTU	Advertised MTU
Ethernet	1514	1500
Ethernet (with preserved dot1q)	1518	1504
VPLS	1514	1500
VPLS (with preserved dot1q)	1518	1504
VLAN (dot1p transparent to MTU value)	1514	1500
VLAN (qinq with preserved bottom qtag)	1518	1504

Parameters

octets

Specifies the MTU size in octets, expressed as a decimal integer.

Values

1 to 9782

1 to 9800 (for Epipe only)

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

configure service cpipe service-mtu

All

configure service ipipe service-mtu
configure service epipe service-mtu

service-name

Syntax

service-name service-name

no service-name

Context

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>host-ident service-name)

Full Context

configure subscriber-mgmt local-user-db ppp host host-identification service-name

Description

This command specifies the service name tag in PADI and/or PADR packets to match for PPPoE hosts.

Note:

This command is only used when service-name is configured as one of the match-list parameters.

The no form of this command removes the service-name from the configuration.

Parameters

service-name: Specifies a PPPoE service name, up to 255 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

service-name

Syntax

service-name service-name

no service-name

Context

[Tree] (config>redundancy>mc>peer>mcr>ring>ibc service-name)

[Tree] (config>redundancy>mc>peer>mc>l3-ring>ibc service-name)

Full Context

configure redundancy multi-chassis peer mc-ring ring in-band-control-path service-name

configure redundancy multi-chassis peer multi-chassis l3-ring ibc service-name

Description

This command specifies the service name if the interface used for the inband control connection belongs to a VPRN service. If not specified the interface must belong to the Base router. This command supersedes the configuration of a service ID.

The no form of this command removes the service name from the IBC configuration.

Default

no service-name

Parameters

service-name: Specifies the service name, up to 64 characters.

Platforms

All

service-name

Syntax

service-name service-name

no service-name

Context

[Tree] (config>redundancy>mc>peer>mcr>node>cv service-name)

[Tree] (config>redundancy>mc>peer>mcr>l3-ring>cv service-name)

Full Context

configure redundancy multi-chassis peer mc-ring ring ring-node connectivity-verify service-name

configure redundancy multi-chassis peer mc-ring l3-ring ring-node connectivity-verify service-name

Description

This command specifies the service name of the SAP used for ring-node connectivity verification of this ring node. This command supersedes the configuration of a service ID.

The no form of this command removes the service name from the CV configuration.

Default

no service-name

Parameters

service-name: Specifies a service name, up to 64 characters.

Platforms

All

service-range

Syntax

service-range service-id service-id

no service-range

Context

[Tree] (config>service>dynsvc service-range)

Full Context

configure service dynamic-services service-range

Description

This command specifies the service ID range that is reserved for dynamic data service creation. The range cannot overlap with existing static configured services. Once configured with active dynamic services in the range, the service range can only be extended at the end.

The no form of this command removes the service-range from the configuration. This is only allowed when there are no active dynamic data services.

When no service-range is specified, the setup of dynamic data services fails.

Parameters

service-id

Specifies the start and end service IDs to define the service range for dynamic services.

Values: 1 to 2147483647

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

service-range

Syntax

service-range svc-id [to svc-id]

no service-range svc-id

Context

[Tree] (config>service>system>bgp-evpn>eth-seg>service-id service-range)

Full Context

configure service system bgp-evpn ethernet-segment service-id service-range

Description

This command associates a specified service range to a virtual ES, along with the network-interconnect-vxlan command. Up to eight service ranges per VXLAN instance can be configured, where the ranges may overlap. The service range may be configured before the service.

The no form of this command removes the association of the service range to the virtual ES for the configured VXLAN instance.

Parameters

svc-id

Specifies which service range will be associated with the virtual Ethernet Segment.

Values: 1 to 2147483647

Platforms

All

service-range

Syntax

service-range startid-endid [start-vlan-id startvid]

no service-range

Context

[Tree] (config>service>vpls>vpls-group service-range)

Full Context

configure service vpls vpls-group service-range

Description

This command configures the service ID and implicitly the VLAN ID ranges to be used as input variables for related VPLS and SAP templates to pre-provision "data” VPLS instances and related SAPs using the service ID specified in the command. If the start-vlan-id is not specified then the service-range values are used for vlan-ids. The data SAPs will be instantiated on all the ports used to specify SAP instances under the related control VPLS.

Modifications of the service id and vlan ranges are allowed with the following restrictions.

service-range increase can be achieved in two ways:
- Allowed when vpls-group is in shutdown state
- By creating a new vpls-group
service-range decrease can be achieved in two ways:
- Allowed when vpls-group is in shutdown state; when shutdown command is executed the associated service instances are deleted.
- Allowed when vpls-group is in no shutdown state and has completed successfully instantiating services.
- In both cases, only the services that do not have user configured SAPs will be deleted. Otherwise the above commands are rejected. Existing declarations or registrations do not prevent service deletion.
start-vlan-id change can be achieved in two ways:
- Allowed when vpls-group is in shutdown state
- At the time of range decrease by increasing the start-vlan-id which can be done when vpls-group is in no shutdown state and has completed successfully instantiating services

The no form of this command removes the specified ranges and deletes the pre-provisioned VPLS instances and related SAPs. The command will fail if any of the VPLS instances in the affected ranges have a provisioned SAP.

Default

no service-range

Parameters

startid-endid

Specifies the range of service IDs

Values: 1 to 2147483647

startvid

Specifies the starting VLAN ID; it provides a way to set aside a service ID range that is not the same as the VLAN range and allows for multiple MVRP control-VPLSs to control same VLAN range on different ports.

Values: 1 to 4094

Platforms

All

service-request

Syntax

[no] service-request

Context

[Tree] (config>subscr-mgmt>acct-plcy>triggered-updates>gc service-request)

Full Context

configure subscriber-mgmt radius-accounting-policy triggered-updates gtp-change service-request

Description

This command configures the router to send an interim accounting update when a service request (reactivation) procedure is performed.

The no form of the command configures the router not to send an interim accounting update when a service request (reactivation) procedure is performed.

Default

no service-request

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

service-request

Syntax

[no] service-request

Context

[Tree] (config>system>security>tacplus service-request)

[Tree] (config>service>vprn>aaa>remote-servers>tacplus service-request)

Full Context

configure system security tacplus service-request

configure service vprn aaa remote-servers tacplus service-request

Description

This command enables Nokia services to be requested from the TACACS+ server.

The no form of this command disables Nokia services from being requested from the TACACS+ server.

Default

no service-request

Platforms

All

service-stream

Syntax

service-stream stream-id [create]

no service-stream stream-id

Context

[Tree] (config>test-oam>sath>svc-test service-stream)

Full Context

configure test-oam service-activation-testhead service-test service-stream

Description

This command configures a service stream profile for the specified service test.

A service test must be in a shutdown state before a new service stream can be configured or before parameters can be modified on an existing stream. All active tests that reference the specified service test must be stopped before running the shutdown command.

The no form of this command removes the specified profile.

Parameters

stream-id

Specifies an identifier for the service stream profile.

Values: 1 to 8

create: Mandatory keyword to instantiate the template.

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

service-stream-completion-notification

Syntax

[no] service-stream-completion-notification

Context

[Tree] (config>test-oam>sath>svc-test>svc-stream service-stream-completion-notification)

Full Context

configure test-oam service-activation-testhead service-test service-stream service-stream-completion-notification

Description

This command enables the test completion notification for a service stream.

The no form of this command disables the test completion notification for a service stream.

Default

no service-stream-completion-notification

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

service-test

Syntax

service-test name [create]

no service-test

Context

[Tree] (config>test-oam>sath service-test)

Full Context

configure test-oam service-activation-testhead service-test

Description

This command creates a service test. Commands in this context configure the service test parameters.

The service test must be in the shutdown state before any commands under the service-test context can be configured or modified. If the service test is in the no shutdown state, command parameters cannot be modified.

The no form of this command removes the service test.

Parameters

name: Specifies a name, up to 64 characters, for the service test profile.

create: Mandatory keyword to instantiate the template.

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

service-test-completion-notification

Syntax

[no] service-test-completion-notification

Context

[Tree] (config>test-oam>sath>svc-test service-test-completion-notification)

Full Context

configure test-oam service-activation-testhead service-test service-test-completion-notification

Description

This command enables the test completion notification for a service test.

The no form of this command disables the service test completion notification.

Default

no service-test-completion-notification

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

services-all-events

Syntax

services-all-events

Context

[Tree] (config>log services-all-events)

Full Context

configure log services-all-events

Description

Commands in this context control which log events are present in VPRN logs.

By default, the event streams for VPRN logs contain only events that are associated with the particular VPRN.

Access to the entire system-wide set of events (VPRN and non-VPRN) can be enabled using the services-all-events command.

Platforms

All

serving-network

Syntax

serving-network mcc mcc-value mnc mnc-value

no serving-network

Context

[Tree] (config>subscr-mgmt>gtp serving-network)

Full Context

configure subscriber-mgmt gtp serving-network

Description

This command configures the Operator Identifier part (MCC and MNC) of the APN.

The no form of this command removes the values from the profile.

Default

no serving-network

Parameters

mcc-value

Specifies the Mobile Country Code (MCC) portion of the Serving Network.

Values: 3 digits

mnc-value

Specifies the Mobile Network Code (MNC) portion of the Serving Network.

Values: 2 or 3 digits

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

session

Syntax

session

Context

[Tree] (config>isa>video-group>watermark session)

Full Context

configure isa video-group watermark session

Description

Commands in this context configure watermark parameters based on the session.

Platforms

7450 ESS, 7750 SR, 7750 SR-s

session

Syntax

session session-name [test-family [ ethernet | ip | mpls] [session-type {proactive | on-demand}] create]

no session session-name

Context

[Tree] (config>oam-pm session)

Full Context

configure oam-pm session

Description

This command creates the individual session containers that houses the test specific configuration parameters. Since this session context provides only a container abstract to house the individual test functions, it cannot be shut down. Individual tests sessions within the container may be shut down. No values, parameters, or configuration within this context may be changed if any individual test is active. Changes may only be made when all tests within the context are shut down. The only exception to this is the description value.

The no form of this command deletes the session.

Parameters

session-name: Specifies the session name, up to 32 characters.

test-family

Indicates the type family and sets the context for the individual parameters.

Values

ethernet — Specifies that the test is based on the Ethernet layer.

ip — Specifies that the test is based on the IP layer.

mpls — Specifies that the test is based on the MPLS layer.

session-type

Specifies how to set the Type bit in the Flags byte, and influences how different test criteria may be applied to the individual test. Not all test families carry this information in the PDU.

Values

proactive — Sets the type to always on, with an immediate start and no stop.

on-demand — Sets the type to on-demand, with an immediate start and no stop, or a stop based on the offset.

Default: proactive

create: Creates the PM session.

Platforms

All

session-accounting

Syntax

session-accounting [interim-update] [host-update]

no session-accounting

Context

[Tree] (config>subscr-mgmt>acct-plcy session-accounting)

Full Context

configure subscriber-mgmt radius-accounting-policy session-accounting

Description

This command enables per session accounting mode. In per session accounting mode, the acct-session-id is generated per session. This acct-session-id is uniformly included in all accounting messages (START/INTERIM-UPDATE/STOP) and it can be included in RADIUS Access-Request message.

This accounting mode of operation can be used only in PPPoE environment with dual-stack host in which case both hosts (IPv4 and IPv6) are considered part of the same session. In addition to regular interim-updates, triggered interim-updates are sent by a host joining or leaving the session.

When an IPv4/v6 address is allocated, or released from a dual-stack host, a triggered interim-update message is immediately sent. This triggered interim-update message reflects the change in the IP address. The triggered interim-update has no effect on the interval at which the regular interim updates are scheduled.

Accounting counters are based on the queue counters and as such are aggregated for all host sharing the queues within an sla-profile instance.

CoA and LI is supported based on the acct-session-id of the session.

The no form of this command reverts to the default.

Parameters

interim-update: Specifies to enable interim updates. Without this keyword only START and STOP accounting messages are generated when the session is established or terminated. This is equivalent to a time-based accounting where only the duration of the session is required.

host-update: Indicates that host updates messages are sent. INTERIM-UPDATE messages can be generated (volume based accounting) by selecting this keyword.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

session-assign-method

Syntax

session-assign-method {weighted | weighted-random}

no session-assign-method

Context

[Tree] (config>service>vprn>l2tp session-assign-method)

[Tree] (config>router>l2tp session-assign-method)

Full Context

configure service vprn l2tp session-assign-method

configure router l2tp session-assign-method

Description

This command configures the session assignment method.

The no form of this command reverts to the default value.

Default

no session-assign-method

Parameters

weighted: Specifies that the sessions are shared between the available tunnels. If necessary, new tunnels are set up until the maximum number is reached. The distribution aims at an equal ratio of the actual number of sessions to the maximum number of sessions.

weighted-random: Enhances the weighted algorithm such that when there are multiple tunnels with an equal number of sessions (equal weight), LAC randomly selects a tunnel.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

session-assign-method

Syntax

session-assign-method {existing-first | weighted | weighted-random}

no session-assign-method

Context

[Tree] (config>service>vprn>l2tp>group session-assign-method)

[Tree] (config>router>l2tp>group session-assign-method)

Full Context

configure service vprn l2tp group session-assign-method

configure router l2tp group session-assign-method

Description

This command specifies how new sessions are assigned to one of the set of suitable tunnels that are available or could be made available.

The no form of this command reverts to the default value.

Default

session-assign-method existing-first

Parameters

existing-first: Specifies that all new sessions are placed by preference in the existing tunnels.

weighted: Specifies that the sessions are shared between the available tunnels. If necessary, new tunnels are set up until the maximum number is reached. The distribution aims at an equal ratio of the actual number of sessions to the maximum number of sessions.

weighted-random: Enhances the weighted algorithm such that when there are multiple tunnels with an equal number of sessions (equal weight), LAC randomly selects a tunnel.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

session-filter

Syntax

session-filter session-filter-name

no session-filter

Context

[Tree] (config>app-assure>group>policy>aqp>entry>action session-filter)

Full Context

configure application-assurance group policy app-qos-policy entry action session-filter

Description

This command specifies the Application-Assurance session filter that will be evaluated. If no session filters are specified then no session filters will be evaluated.

Default

no session-filter

Parameters

session-filter-name: Specifies the session filter to be applied.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-filter

Syntax

session-filter session-filter-name [create]

no session-filter session-filter-name

Context

[Tree] (config>app-assure>group session-filter)

Full Context

configure application-assurance group session-filter

Description

This command creates a session filter.

Parameters

session-filter-name: Creates a session filter name up to 32 characters.

create: Keyword used to create the session filter.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-filter

Syntax

session-filter session-filter-name

Context

[Tree] (config>app-assure>group>statistics>tca session-filter)

Full Context

configure application-assurance group statistics threshold-crossing-alert session-filter

Description

This command configures TCA generation for a session filter.

Parameters

session-filter-name: Specifies the name of the session filter, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-filter-stats

Syntax

[no] session-filter-stats

Context

[Tree] (config>app-assure>group>statistics>aa-admit-deny session-filter-stats)

Full Context

configure application-assurance group statistics aa-admit-deny session-filter-stats

Description

This command configures whether to include or exclude session filter admit-deny statistics in accounting records.

Default

no session-filter-stats

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-hold-time

Syntax

session-hold-time remaining-lease-time

session-hold-time seconds

no session-hold-time

Context

[Tree] (config>subscr-mgmt>gtp>peer-profile session-hold-time)

Full Context

configure subscriber-mgmt gtp peer-profile session-hold-time

Description

This command configures, in seconds, the time that a GTP session context is held after the corresponding UE is disconnected. If the same UE re-connects to this system before this time has elapsed, its GTP session context is re-used. When the timer expires, the GTP session context is cleared.

The no form of this command reverts to the default.

Default

session-hold-time 30

Parameters

remaining-lease-time: Specifies that the timer is equal to the UE’s DHCP remaining lease time.

seconds

Specifies the time, in seconds, to hold a GTP session after its UE is disconnected.

Values: 0 to 3600

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-id

Syntax

session-id session-id

no session-id

Context

[Tree] (config>li>li-source>nat>l2-aware-sub session-id)

[Tree] (config>li>li-source>nat>nat64-lsn-sub session-id)

[Tree] (config>li>li-source>nat>dslite-lsn-sub session-id)

[Tree] (config>li>li-source>nat>classic-lsn-sub session-id)

[Tree] (config>li>li-source>nat>ethernet-header session-id)

Full Context

configure li li-source nat l2-aware-sub session-id

configure li li-source nat nat64-lsn-sub session-id

configure li li-source nat dslite-lsn-sub session-id

configure li li-source nat classic-lsn-sub session-id

configure li li-source nat ethernet-header session-id

Description

This command configures the session ID that is inserted into the packet header for all mirrored packets of the associated LI source entry. This session ID can be used (for example by a downstream LI gateway) to identify the particular LI session to which the packet belongs.

The session ID is only valid and used for mirror services that are configured with ip-udp-shim routable encapsulation (config>mirror>mirror-dest>encap>ip-gre-shim).

For all types of li-source entries (filter, nat, sap, or subscriber), when the mirror service is configured with ip-udp-shim routable encapsulation, a session-id field (as part of the routable encapsulation) is always present in the mirrored packets. If there is no session-id configured for an li-source entry, then the default value is inserted. When a mirror service is configured with ip-gre routable encapsulation, no session-id is inserted and none should be specified against the li-source entries.

The no form of this command removes the session-id from the configuration which results in the default value being used.

Default

no session-id (an id of 0, or no id)

Parameters

session-id

Specifies the value to insert into the header of the mirrored packets.

Values: 1 to 4,294,967,295 (32b)

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-id

Syntax

session-id [session-id]

no session-id

Context

[Tree] (config>li>li-source>wlan-gw session-id)

Full Context

configure li li-source wlan-gw session-id

Description

This command configures the session ID inserted in the packet header for all mirrored packets of the associated li-source. When the mirror-service is configured with the ip-udp-shim routable encapsulation, session-id field (as part of the routable encapsulation) is always present in the mirrored packets. The session-id can be used by the LIG to identify a particular LI session to which the packet belongs.

Parameters

session-id

Specifies the session ID inserted in the LI header.

Values: 1 to 4294967295

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-id

Syntax

session-id session-id

no session-id

Context

[Tree] (config>test-oam>build-packet>header>l2tp session-id)

[Tree] (debug>oam>build-packet>packet>field-override>header>l2tp session-id)

Full Context

configure test-oam build-packet header l2tp session-id

debug oam build-packet packet field-override header l2tp session-id

Description

This command defines the session ID to be used in the L2TP header.

The no form of this command removes the session ID value.

Default

session-id 0

Parameters

session-id

Specifies the L2TP session ID to be used in the L2TP header.

Values: 0 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

session-id-format

Syntax

session-id-format {description | number}

no session-id-format

Context

[Tree] (config>subscr-mgmt>acct-plcy session-id-format)

Full Context

configure subscriber-mgmt radius-accounting-policy session-id-format

Description

This command specifies the format for the acct-session-id attribute used in RADIUS accounting requests.

The no form of this command reverts to the default.

Default

session-id-format description

Parameters

description: Specifies to use a string containing following information: <subscriber>@<sap-id>@<SLA-profile>_<creation-time>

number: Specifies to use a unique number generated by the OS to identify a given session.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

session-key

Syntax

session-key sap mac [cid] [rid]

no session-key

Context

[Tree] (config>subscr-mgmt>ipoe-plcy session-key)

Full Context

configure subscriber-mgmt ipoe-session-policy session-key

Description

This command configures the key to logically group subscriber hosts that belong to the same dual stack end device in an IPoE session.

The SAP and MAC address are always part of the IPoE session key. Optionally the Circuit-Id/Interface-Id or Remote-Id can be added to the session key.

The no form of this command reverts to the default.

Default

session-key sap mac

Parameters

sap: Includes the SAP as part of the IPoE session key. The sap parameter is mandatory and cannot be removed from the key.

mac: Includes the MAC address as part of the IPoE session key. The mac parameter is mandatory and cannot be removed from the key.

cid: Optionally adds the DHCPv4 Relay Agent Circuit-Id (Option 82, sub Option 1) and DHCPv6 Interface-Id (Option 18) field to the IPoE session key.

rid

Optionally adds the DHCPv4 Relay Agent Remote-Id (Option 82, sub Option 2) and DHCPv6 Remote-Id (Option 37) field to the IPoE session key. For DHCPv6, the enterprise number is excluded from the key.

sap and mac are mandatory parameters while cid and rid are optional and mutually exclusive. Valid IPoE session key parameters are: sap mac, sap mac cid and sap mac rid.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

session-limit

Syntax

session-limit session-limit

session-limit unlimited

no session-limit

Context

[Tree] (config>router>l2tp>group>tunnel session-limit)

[Tree] (config>service>vprn>l2tp>group session-limit)

[Tree] (config>router>l2tp>group session-limit)

[Tree] (config>router>l2tp session-limit)

[Tree] (config>service>vprn>l2tp>group>tunnel session-limit)

[Tree] (config>service>vprn>l2tp session-limit)

Full Context

configure router l2tp group tunnel session-limit

configure service vprn l2tp group session-limit

configure router l2tp group session-limit

configure router l2tp session-limit

configure service vprn l2tp group tunnel session-limit

configure service vprn l2tp session-limit

Description

This command configures the session limit.

This command configures the L2TP session limit for the router. The value controls how many L2TP sessions will be allowed within a given context (system, group, tunnel).

L2TP is connection-oriented. The L2TP Network Server (LNS) and LAC maintain state for each call that is initiated or answered by an LAC. An L2TP session is created between the LAC and LNS when an end-to-end PPP connection is established between a remote system and the LNS. Datagrams related to the PPP connection are sent over the tunnel between the LAC and LNS. There is a one-to-one relationship between established L2TP sessions and their associated calls.

The no form of this command removes the value from the configuration.

Default

no session-limit

Parameters

session-limit

Specifies the allowed number of sessions within the given context.

Values: 1 to 131071

unlimited: Specifies to use the maximum number of sessions available.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

session-limit

Syntax

session-limit session-limit

no session-limit

Context

[Tree] (config>service>ies>sub-if>grp-if>pppoe session-limit)

[Tree] (config>service>vprn>sub-if>pppoe session-limit)

[Tree] (config>service>ies>sub-if>pppoe session-limit)

[Tree] (config>service>vprn>sub-if>grp-if>pppoe session-limit)

Full Context

configure service ies subscriber-interface group-interface pppoe session-limit

configure service vprn subscriber-interface pppoe session-limit

configure service ies subscriber-interface pppoe session-limit

configure service vprn subscriber-interface group-interface pppoe session-limit

Description

This command specifies the number of PPPoE hosts allowed for this group interface.

The no form of this command reverts to the default.

Default

session-limit 1

Parameters

session-limit

Specifies the number of PPPoE hosts allowed.

Note:

The operational maximum value may be smaller due to equipped hardware dependencies.

Values

1 to 131071

1 to 262143 (retail subscriber interface)

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

session-limit

Syntax

session-limit session-limit

no session-limit

Context

[Tree] (config>service>vprn>sub-if>grp-if>ipoe-session session-limit)

[Tree] (config>service>ies>sub-if>ipoe-session session-limit)

[Tree] (config>service>vprn>sub-if>ipoe-session session-limit)

[Tree] (config>service>ies>sub-if>grp-if>ipoe-session session-limit)

Full Context

configure service vprn subscriber-interface group-interface ipoe-session session-limit

configure service ies subscriber-interface ipoe-session session-limit

configure service vprn subscriber-interface ipoe-session session-limit

configure service ies subscriber-interface group-interface ipoe-session session-limit

Description

This command specifies the number of IPoE sessions allowed for this group interface or retail subscriber interface.

The no form of this command reverts to the default.

Default

session-limit 1

Parameters

session-limit

Specifies the number of allowed IPoE sessions.

Note:

The operational maximum value may be smaller due to equipped hardware dependencies.

Values

1 to 131071

1 to 500000 (retail subscriber interface)

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

session-limit

Syntax

session-limit limit

Context

[Tree] (config>li>x-interfaces>x3 session-limit)

Full Context

configure li x-interfaces x3 session-limit

Description

This command configures the number of X3 sessions that the system should initiate to the LIC.

The no form of this command reverts to the default.

Default

session-limit 32

Parameters

limit

Specifies the session limit.

Values: 1 to 32

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

session-limits

Syntax

session-limits

Context

[Tree] (config>isa>wlan-gw-group>nat session-limits)

Full Context

configure isa wlan-gw-group nat session-limits

Description

Commands in this context configure session limits for the ISA WLAN gateway NAT group.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-limits

Syntax

session-limits

Context

[Tree] (config>isa>nat-group session-limits)

Full Context

configure isa nat-group session-limits

Description

Commands in this context configure session limits for the ISA NAT group.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-limits

Syntax

session-limits

Context

[Tree] (config>service>nat>firewall-policy session-limits)

[Tree] (config>service>nat>up-nat-policy session-limits)

[Tree] (config>service>nat>nat-policy session-limits)

Full Context

configure service nat firewall-policy session-limits

configure service nat up-nat-policy session-limits

configure service nat nat-policy session-limits

Description

Commands in this context configure session limits for the NAT policy.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

configure service nat firewall-policy session-limits

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

configure service nat nat-policy session-limits
configure service nat up-nat-policy session-limits

session-limits

Syntax

[no] session-limits

Context

[Tree] (config>subscr-mgmt>sub-profile session-limits)

[Tree] (config>subscr-mgmt>sla-profile session-limits)

Full Context

configure subscriber-mgmt sub-profile session-limits

configure subscriber-mgmt sla-profile session-limits

Description

Commands in this context configure session limits per SLA profile instance or per subscriber.

The no form of this command removes the configuration.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

session-messages

Syntax

[no] session-messages

Context

[Tree] (debug>diam>application>policy session-messages)

Full Context

debug diameter application policy session-messages

Description

This command debugs session messages.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

session-optimized-stop

Syntax

[no] session-optimized-stop

Context

[Tree] (config>subscr-mgmt>sub-prof>rad-acct session-optimized-stop)

Full Context

configure subscriber-mgmt sub-profile radius-accounting session-optimized-stop

Description

This command optimizes a RADIUS Accounting Stop message for a PPPoE session termination (specifically for session accounting mode when the host update is enabled). By default when a PPPoE session terminates, the system removes a dual stack host in sequence, one host at a time. Therefore, the system will generate a RADIUS accounting interim for each host termination until only the final host is left. The final host will generate a final accounting stop message. Enabling this command will trigger a single Stop RADIUS accounting message and include information of all hosts without the host updates.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

session-parameters

Syntax

session-parameters

Context

[Tree] (config>router>ldp session-parameters)

Full Context

configure router ldp session-parameters

Description

Commands in this context configure peer specific parameters.

Platforms

All

session-qer

Syntax

session-qer

Context

[Tree] (config>subscr-mgmt>sla-prof>pfcp session-qer)

Full Context

configure subscriber-mgmt sla-profile pfcp-mappings session-qer

Description

Commands in this context configure the mapping of the GBR/MBR IEs present in a per-session QER without a QER correlation ID. A QER that contains a QER correlation ID does not use the QER mapping because it is assumed not to be a per-session construct.If a signaled PFCP QER rate applies to all data-plane rules, it is interpreted as the session QER rate and is mapped to the QoS overrides in the configuration. Examples of such QER rates are APN-AMBR for 4G FWA sessions and session-AMBR for 5G FWA sessions.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-sender-type

Syntax

session-sender-type {twamp-light | stamp}

Context

[Tree] (config>oam-pm>session>ip>twamp-light session-sender-type)

Full Context

configure oam-pm session ip twamp-light session-sender-type

Description

This command configures the type of test packet format to transmit.

Default

session-sender-type twamp-light

Parameters

twamp-light: Specifies TWAMP-Light transmission, packet formatting, and packet processing. TWAMP-Light test packets do not allow TLVs.
stamp: Specifies STAMP transmission, packet formatting, and packet processing. STAMP test packets support TLVs.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

session-time

Syntax

[no] session-time

Context

[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes session-time)

Full Context

configure aaa isa-radius-policy acct-include-attributes session-time

Description

This command enables the inclusion of the session-time attributes.

The no form of the command excludes session-time attributes.

Default

no session-time

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-timeout

Syntax

session-timeout timeout

no session-timeout

Context

[Tree] (config>subscr-mgmt>ppp-policy session-timeout)

Full Context

configure subscriber-mgmt ppp-policy session-timeout

Description

This command defines the time before the PPP session is terminated.

A RADIUS specified session-timeout (attribute [27] Session-Timeout) overrides the CLI configured value.

The no form of this command reverts to the default.

Parameters

timeout

Specifies the session timeout in seconds.

Values: 1 to 31104000

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

session-timeout

Syntax

session-timeout timeout

no session-timeout

Context

[Tree] (config>subscr-mgmt>ipoe-plcy session-timeout)

Full Context

configure subscriber-mgmt ipoe-session-policy session-timeout

Description

This command defines the time in seconds between 1 second and 360 days before the IPoE session is disconnected. The default value is unlimited session timeout.

The no form of this command reverts to the default.

Parameters

timeout

Specifies the session timeout in seconds.

Values: 1 to 31104000

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

set-time

Syntax

set-time date time

Context

[Tree] (admin set-time)

Full Context

admin set-time

Description

This command sets the local system time.

The time entered should be accurate for the time zone configured for the system. The system will convert the local time to UTC before saving to the system clock which is always set to UTC. This command does not take into account any daylight saving offset if defined.

If SNTP or NTP is enabled (no shutdown) then this command cannot be used.

Parameters

date

Specifies the local date and time accurate to the minute in the YYYY/MM/DD format.

Values

YYYY is the four-digit year

MM is the two-digit month

DD is the two-digit date

time

Specifies the time (accurate to the second) in the hh:mm[:ss] format. If no seconds value is entered, the seconds are reset to :00.

Values: hh is the two-digit hour in 24 hour format (00=midnight, 12=noon)mm is the two-digit minute

Default: 0

Platforms

All

set-tos

Syntax

set-tos [0..255]

no set-tos

Context

[Tree] (config>router>nat>inside>nat64 set-tos)

[Tree] (config>service>vprn>nat>inside>nat64 set-tos)

Full Context

configure router nat inside nat64 set-tos

configure service vprn nat inside nat64 set-tos

Description

This command specifies the value of the IPv4 ToS field. When enabled, the NAT64 node ignores IPv6 traffic-class and sets IPv4 ToS to the supplied ToS value in the translated IPv4 packet.

The no form of the command reverts to the default.

Default

set-tos 0

Parameters

[0..255]: Sets the IPv4 ToS to a fixed value the IPv6 Traffic Class and set the IPv4 ToS to a fixed value and ignores the IPv6 traffic class.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

setup-timeout

Syntax

setup-timeout access-accept timeout

no setup-timeout

Context

[Tree] (config>service>dynsvc>timers setup-timeout)

Full Context

configure service dynamic-services timers setup-timeout

Description

This command specifies the time that dynamic data services setup requests from a RADIUS Access-Accept are hold in an internal work queue waiting to be processed. If after the timeout, the dynamic data service setup request is still in the queue (meaning it is not setup), then the dynamic service setup request is removed from the queue and the setup fails.

The no form of this command reverts to the default value of 30 seconds.

Default

no setup-timeout

Parameters

timeout

Specifies the setup-timeout, in seconds, for setup requests of dynamic services received via Access-Accept.

Values: 2 to 3600

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

severity

Syntax

severity {eq | neq | lt | lte | gt | gte} severity-level

no severity

Context

[Tree] (config>service>vprn>log>filter>entry>match severity)

Full Context

configure service vprn log filter entry match severity

Description

This command adds an event severity level as a match criterion. Only one severity command can be entered per event filter entry. The latest severity command overwrites the previous command.

The no form of this command removes the severity match criterion.

Default

no severity

Parameters

eq | neq | lt | lte | gt | gte

Specifies the type of match. Valid operators are listed below.

Values

Table 3. Valid Operators
Operator	Notes
eq	equal to
neq	not equal to
lt	less than
lte	less than or equal to
gt	greater than
gte	greater than or equal to

severity-name

The ITU severity level name. Severity Levels lists severity names and corresponding numbers per ITU standards M.3100 X.733 & X.21 severity levels.

Table 4. Severity Levels
Severity Number	Severity Name
1	cleared
2	indeterminate (info)
3	critical
4	major
5	minor
6	warning

Values: cleared, intermediate, critical, major, minor, warning

Platforms

All

severity

Syntax

severity syslog-severity

Context

[Tree] (config>app-assure>group>evt-log>syslog severity)

Full Context

configure application-assurance group event-log syslog severity

Description

This command configures the syslog message severity level threshold.

Default

severity info

Parameters

syslog-severity

Specifies the severity level for the syslog message.

Values: emergency, alert, critical, error, warning, notice, info, debug

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

severity

Syntax

severity {eq | neq | lt | lte | gt | gte} severity-level

no severity

Context

[Tree] (config>log>filter>entry>match severity)

Full Context

configure log filter entry match severity

Description

This command adds an event severity level as a match criterion. Only one severity command can be entered per event filter entry. The latest severity command overwrites the previous command.

The no form of this command removes the severity match criterion.

Parameters

eq | neq | lt | lte | gt | gte

Specifies the match type. Valid operators are listed in Valid Operators.

Table 5. Valid Operators
Operator	Notes
eq	equal to
neq	not equal to
lt	less than
lte	less than or equal to
gt	greater than
gte	greater than or equal to

severity-name

Specifies the ITU severity level name. ITU Severity Information lists severity names and corresponding numbers per ITU standards M.3100 X.733 & X.21 severity levels.

Table 6. ITU Severity Information
Severity Number	Severity Name
1	cleared
2	indeterminate (info)
3	critical
4	major
5	minor
6	warning

Values: cleared, intermediate, critical, major, minor, warning

Platforms

All

severity-level

Syntax

severity-level syslog-level

Context

[Tree] (config>service>nat>syslog>syslog-export-policy severity-level)

Full Context

configure service nat syslog syslog-export-policy severity-level

Description

This command configures the severity level.

For more information, refer to the 7450 ESS, 7750 SR, 7950 XRS, and VSR System Management Guide. The config>log>syslog>level hierarchy also applies to this context.

Default

severity-level info

Parameters

syslog-level

Specifies the severity level.

Values: emergency, alert, critical, error, warning, notice, info, debug

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sf-offset

Syntax

sf-offset offset-value

no sf-offset

Context

[Tree] (config>service>vprn>isis>if>level sf-offset)

Full Context

configure service vprn isis interface level sf-offset

Description

If the pre-FEC error rate of the associated DWDM port crosses the configured sf-threshold, this offset-value is added to the IS-IS interface metric. This parameter is only effective if the interface is associated with a DWDM port and the sf-threshold value is configured under that port.

The no form of this command reverts the offset value to 0.

Default

no sf-offset

Parameters

offset-value

Specifies the amount the interface metric is increased by if the sf-threshold is crossed.

Values: 0 to 16777215

Platforms

All

sf-offset

Syntax

sf-offset offset-value

no sf-offset

Context

[Tree] (config>router>isis>if>level sf-offset)

Full Context

configure router isis interface level sf-offset

Description

The no form of this command reverts the offset value to 0.

Default

no sf-offset

Parameters

offset-value

Specifies the amount the interface metric is increased by if the sf-threshold is crossed.

Values: 0 to 16777215

Platforms

All

sf-sd-method

Syntax

sf-sd-method {bip8 | fec}

Context

[Tree] (config>port>otu sf-sd-method)

Full Context

configure port otu sf-sd-method

Description

This command specifies the method used to determine the signal failure (SF) and signal degrade (SD) alarms. When the bip8 method is selected, the SM-BIP8 errors are used. When the fec method is selected, the FEC corrected bits are used.

The following rules must be followed:

The port’s OTU must be enabled to set or change the sf-sd-method.
The FEC mode must be enhanced or g709 before setting sf-sd-method to fec.
The SF threshold must be 5 or higher before setting sf-sd-method to bip8.

Default

sf-sd-method fec

Parameters

bip8: Specifies that SM-BIP8 errors are used to declare the presence of the SF and SD conditions.

fec: Specifies that FEC corrected bit errors are used to declare the presence of the SF and SD conditions.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

sf-threshold

Syntax

sf-threshold threshold [multiplier multiplier]

no sf-threshold

Context

[Tree] (config>esa>crc-monitor sf-threshold)

Full Context

configure esa crc-monitor sf-threshold

Description

This command configures the error rate at which to declare the signal failure (SF) condition on an Ethernet interface. The value represents M*10E-N, errored frames over total frames received over W seconds of the sliding window. The CRC errors on the interface are sampled once per second. A default of 10 seconds is used when no additional window-size is configured. If you omit the multiplier value or configure no sf-threshold, the multiplier returns to the default value of 1.

Note: Crossing the configured signal failure (SF) threshold causes the router ESA port to enter an operational state of down when the router side detects the SF, or the port is shut down when the ESA detects the SF, which triggers redundancy for all configured ISA groups.

The no form of this command removes the configuration.

Default

no sf-threshold

Parameters

threshold

Specifies the SF threshold.

Values: 1 to 9

multiplier

Specifies the SF multiplier.

Values: 1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s

sf-threshold

Syntax

sf-threshold threshold [coefficient coefficient]

Context

[Tree] (config>port>otu sf-threshold)

Full Context

configure port otu sf-threshold

Description

This command defines the error rate at which to declare the signal failure (SF) condition.

The parameters define an error rate of (coefficient/10) * 10E-threshold. For example, sf-threshold 5 coefficient 20 defines an error rate of (20/10) * 10E-5, or 2 * 10E-5, or 0.000 02.

The SF threshold must be the following:

less than the SD threshold
5 or higher before setting sf-sd-method to bip8

The coefficient parameter is only used when sf-sd-method is set to fec. When sf-sd-method is set to bip8, coefficient is considered to have the value of 10.

Parameters

threshold

Specifies the exponent for the SF threshold value.

Values

3 to 6 when sf-sd-method is bip8

3 to 8 when sf-sd-method is fec

Default: 5

coefficient

Specifies the coefficient for the SF threshold value.

Values: 10 to 99

Default: 10

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

sf-threshold

Syntax

sf-threshold errored-frames

Context

[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame sf-threshold)

Full Context

configure port ethernet efm-oam link-monitoring errored-frame sf-threshold

Description

The option defines the number of frame errors within the configured window which indicates the port has exceeded an acceptable error rate. A log event will be raised, and the port will be taken out of service by default. Configuration options exist to take additional actions when the error rate exceeds the threshold. These actions are defined using the local-sf-action configuration. This event can only be cleared through manual intervention that affects the state of the port.

Parameters

errored-frames

The number of errored frames within the configured window which indicates the port has become unusable.

Values: 1 to 1000000

Default: 1

Platforms

All

sf-threshold

Syntax

sf-threshold errored-frames

Context

[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame-period sf-threshold)

Full Context

configure port ethernet efm-oam link-monitoring errored-frame-period sf-threshold

Description

This command defines the number of frame errors within the configured window which indicates the port has exceeded an acceptable error rate. A log event will be raised, and the port will be taken out of service by default. Configuration options exist to take additional actions when the error rate exceeds the threshold. These actions are defined using the local-sf-action configuration. This event can only be cleared through manual intervention that affects the state of the port.

Default

sf-threshold 1

Parameters

errored-frames

Specifies the number of errored frames within the configured window which indicates the port has become unusable.

Values: 1 to 1000000

Platforms

All

sf-threshold

Syntax

sf-threshold errored-seconds

Context

[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame-seconds sf-threshold)

Full Context

configure port ethernet efm-oam link-monitoring errored-frame-seconds sf-threshold

Description

This command defines the number of errors seconds within the configured window which indicates the port has exceeded an acceptable error rate. A log event will be raised, and the port will be taken out of service by default. Configuration options exist to take additional actions when the error rate exceeds the threshold. These actions are defined using the local-sf-action configuration. This event can only be cleared through manual intervention that affects the state of the port.

Parameters

errored-seconds

Specifies the number of errored seconds within the configured window which indicates the port has become unusable.

Values: 1 to 900

Platforms

All

sf-threshold

Syntax

sf-threshold errored-symbols

Context

[Tree] (config>port>ethernet>efm-oam>link-mon>errored-symbols sf-threshold)

Full Context

configure port ethernet efm-oam link-monitoring errored-symbols sf-threshold

Description

This command defines the number of symbol errors within the configured window which indicates the port has exceeded an acceptable error rate. A log event will be raised, and the port will be taken out of service by default. Configuration options exist to take additional actions when the error rate exceeds the threshold. These actions are defined using the local-sf-action configuration.

Parameters

errored-symbols

Specifies the number of errored-symbols which indicates the port has become unusable.

Values: 1 to 1000000

Platforms

All

sf-threshold

Syntax

sf-threshold threshold [multiplier multiplier]

no sf-threshold

Context

[Tree] (config>port>ethernet>sym-mon sf-threshold)

Full Context

configure port ethernet symbol-monitor sf-threshold

Description

This command specifies the error rate at which to declare the Signal Fail condition on an Ethernet interface. The value represents M*10E-N symbol errors over total symbols received over W seconds of the sliding window. The symbol errors on the interface are sampled once per second. A default of 10 seconds is used when there is no additional window-size configured. The multiplier keyword is optional. If the multiplier keyword is omitted or no sf-threshold is specified, the multiplier will return to the default value of 1.

Default

no sf-threshold

Parameters

threshold

Specifies the rate of symbol errors.

Values: 1 to 9

multiplier

Specifies the multiplier used to scale the symbol error ratio.

Values: 1 to 9

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

sf-threshold

Syntax

sf-threshold threshold[multiplier multiplier]

no sf-threshold

Context

[Tree] (config>port>ethernet>crc-monitor sf-threshold)

Full Context

configure port ethernet crc-monitor sf-threshold

Description

This command specifies the error rate at which to declare the Signal Fail condition on an Ethernet interface. The value represents M*10E-N errored frames over total frames received over W seconds of the sliding window. The CRC errors on the interface are sampled once per second. A default of 10 seconds is used when there is no additional window-size configured. The multiplier keyword is optional. If the multiplier keyword is omitted or no sf-threshold is specified the multiplier will return to the default value of 1.

Default

no sf-threshold

Parameters

threshold

Specifies the threshold value.

Values: 1 to 9

multiplier

Specifies the multiplier value.

Values: 1 to 9

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

sf-threshold-clear

Syntax

sf-threshold-clear threshold [coefficient coefficient]

Context

[Tree] (config>port>otu sf-threshold-clear)

Full Context

configure port otu sf-threshold-clear

Description

This command defines the signal failure (SF) threshold clear value.

When the bit error rate falls below this value, the SF condition is cleared. The parameters define an error rate of (coefficient/10) * 10E-threshold. For example, sf-threshold-clear 7 coefficient 10 defines an error rate of (10/10) * 10E-7, or 10E-7, or 0.000 000 1.

This SF threshold clear setting is valid only when sf-sd-method is set to fec.

Parameters

threshold

Specifies the exponent for the SF threshold clear value.

Values: 3 to 9

Default: 6

coefficient

Specifies the coefficient for the SF threshold clear value.

Values: 10 to 99

Default: 10

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

sflow

Syntax

[no] sflow

Context

[Tree] (config>port>ethernet sflow)

Full Context

configure port ethernet sflow

Description

This command enables sFlow data collection for a port and its SAPs that support sFlow data collection.

The no form of this of this command disables sFlow.

Default

no sflow

Platforms

7750 SR, 7750 SR-s, 7950 XRS

sflow

Syntax

sflow

Context

[Tree] (config sflow)

Full Context

configure sflow

Description

Commands in this context configure sflow agent parameters.

Platforms

7750 SR, 7750 SR-s, 7950 XRS

sfm

Syntax

sfm sfm-name

no sfm sfm-name

Context

[Tree] (config sfm)

Full Context

configure sfm

Description

Commands in this context configure the specified SFM.

The no form of this command removes the SFM configuration for the specified SFM.

Parameters

sfm-name

Specifies the SFM identifier.

Values: 1 to 4

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-2s, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s, 7950 XRS

sfm-loss-threshold

Syntax

sfm-loss-threshold num-sfm

no sfm-loss-threshold

Context

[Tree] (config>system>switch-fabric sfm-loss-threshold)

Full Context

configure system switch-fabric sfm-loss-threshold

Description

This command sets the number of SFMs that are permitted to fail before the system goes into SFM overload state. This command is only applicable on the 7750 SR-7s and the 7750 SR-14s. Users can select the SFM limit based on the number possible for the system minus one. For the 7750 SR-7s this is a value of 3 and for the 7750 SR-14s this is a value of 7.

For networks that can accommodate more SFM failures than the default value, this command allows the selection of the number of SFMs to fail prior to the system going into SFM overload state.

The no form of this command reverts the threshold to the default value.

Default

7750 SR-7s: sfm-loss-threshold 1

7750 SR-14s: sfm-loss-threshold 2

Parameters

num-sfm

Specifies the number of SFMs permitted to fail before SFM overload state.

Values: 1 to 7

Platforms

7750 SR-7s, 7750 SR-14s

sfm-type

Syntax

sfm-type sfm-type

no sfm sfm-type

Context

[Tree] (config>sfm sfm-type)

Full Context

configure sfm sfm-type

Description

This command provisions the SFM.

The no form of this command deprovisions the SFM.

Default

no sfm sfm-type

Parameters

sfm-type

Specifies the SFM card type.

Values: Depending on the SR hardware platform.

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-2s, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s, 7950 XRS

sg

Syntax

sg [group grp-addr [source src-addr]]

no sg

Context

[Tree] (debug>service>id>video-interface sg)

Full Context

debug service id video-interface sg

Description

This command enables channel debugging.

Parameters

group grp-addr: Specifies the multicast channel address.

source src-addr: Specifies the source address.

Platforms

7450 ESS, 7750 SR, 7750 SR-s

sgsn-mcc-mnc

Syntax

[no] sgsn-mcc-mnc

Context

[Tree] (config>subscr-mgmt>diam-appl-plcy>gx>include-avp sgsn-mcc-mnc)

Full Context

configure subscriber-mgmt diameter-application-policy gx include-avp sgsn-mcc-mnc

Description

This command enables the inclusion of the 3GPP-SGSN-MCC-MNC AVP, which contains the MCC and MNC as configured under configure subscriber-mgmt gtp serving-network.

The no form of this command disables the inclusion of the AVP.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

sgt-qos

Syntax

sgt-qos

Context

[Tree] (config>router sgt-qos)

[Tree] (config>service>vprn sgt-qos)

Full Context

configure router sgt-qos

configure service vprn sgt-qos

Description

Commands in this context configure DSCP/dot1p remarking for self-generated traffic.

Platforms

All

shallow-inspection

Syntax

[no] shallow-inspection

Context

[Tree] (config>app-assure>group shallow-inspection)

Full Context

configure application-assurance group shallow-inspection

Description

This command disables all Layer 7 signature-based flow inspection.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sham-link

Syntax

sham-link ip-int-name ip-address

Context

[Tree] (config>service>vprn>ospf>area sham-link)

Full Context

configure service vprn ospf area sham-link

Description

This command is similar to a virtual link with the exception that metric must be included in order to distinguish the cost between the MPLS-VPRN link and the backdoor.

Parameters

ip-int-name: The local interface name used for the sham-link. This is a mandatory parameter and interface names must be unique within the group of defined IP interfaces for config>router>if, config>service>ies>if and config>service>vprn>if commands. An interface name cannot be in the form of an IP address. Interface names can be any string up to 32 characters composed of printable, 7-bit ASCII characters. If the string contains special characters, the entire string must be enclosed between double quotes. If the IP interface name does not exist or does not have an IP address configured, an error message will be returned.

ip-address: The IP address of the sham-link neighbor in IP address dotted decimal notation. This parameter is the remote peer of the sham link’s IP address used to set up the sham-link. This is a mandatory parameter and must be a valid IP address.

Platforms

All

sham-neighbor

Syntax

sham-neighbor [ip-address]

no sham-neighbor

Context

[Tree] (debug>router>ospf sham-neighbor)

Full Context

debug router ospf sham-neighbor

Description

This command enables debugging of the OSPFv2 sham-link neighbor.

Parameters

ip-address: Debugs the sham-link neighbor identified by this IP address.

Platforms

All

shape-multi-client-only

Syntax

[no] shape-multi-client-only

Context

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>egress shape-multi-client-only)

Full Context

configure service ies subscriber-interface group-interface wlan-gw egress shape-multi-client-only

Description

This command enables the egress shaping is only enabled for a wlan-gw tunnel while there are multiple UE (User Equipment) using it.

The no form of this command disables the egress shaping.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

shaper

Syntax

[no] shaper

Context

[Tree] (config>service>sdp>binding>pw-port>egress shaper)

Full Context

configure service sdp binding pw-port egress shaper

Description

This command enables the egress shaping option for use by a pseudowire port.

The no form of the command disables the egress shaping option.

Default

no shaper

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

shaper

Syntax

[no] shaper

Context

[Tree] (config>service>epipe>pw-port>egress shaper)

Full Context

configure service epipe pw-port egress shaper

Description

Commands in this context configure PW-port shaper parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

shaping

Syntax

shaping {per-retailer | per-tunnel}

no shaping

Context

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>egress shaping)

Full Context

configure service ies subscriber-interface group-interface wlan-gw egress shaping

Description

This command configures the granularity of the egress shaping for wlan-gw on this group interface.

The no form of this command removes the parameter from the configuration.

Parameters

per-tunnel: Specifies that a separate shaper is applied to each wlan-gw tunnel.

per-retailer: Specifies that a separate shaper is applied to each retailer Mobile Network Operator's fraction of the wlan-gw tunnel payload.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

shared-circuit-id

Syntax

[no] shared-circuit-id

Context

[Tree] (config>service>vprn>sub-if>grp-if shared-circuit-id)

[Tree] (config>service>ies>sub-if>grp-if shared-circuit-id)

Full Context

configure service vprn subscriber-interface group-interface shared-circuit-id

configure service ies subscriber-interface group-interface shared-circuit-id

Description

If configured, circuit-id in DHCPv4 Option82 is used to authenticate DHCPv6. If DHCPv6 is received before DHCPv4, it is dropped. Also, a SLAAC host is created based on DHCPv4 authentication if RADIUS returns IPv6 framed-prefix. The IPv6oE host is deleted if the linked IPv4oE host is deleted due to DHCP release or lease time-out. The linkage between IPv4 and IPv6 is based on SAP and MAC address. The sharing of circuit-id from DHCPv4 for authentication of DHCPv6 (or SLAAC) allows 7750 SR to work around lack of support for LDRA on access nodes.

The no form of this command reverts to the default.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shared-policer

Syntax

[no] shared-policer

Context

[Tree] (config>filter>ipv6-filter shared-policer)

[Tree] (config>filter>ip-filter shared-policer)

Full Context

configure filter ipv6-filter shared-policer

configure filter ip-filter shared-policer

Description

When enabled and when the filter policy is configured on a LAG endpoint, the system programs the policer rates in the filter policy per line card FP of the LAG based on the number of active ports in the LAG for each FP.When disabled and when the filter policy is configured on a LAG endpoint, the system programs the same policer rate on each line card FP of the LAG.

The no form of this command disables the configuration.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, 7950 XRS

shared-pool-in-use

Syntax

shared-pool-in-use percentage

no shared-pool-in-use

Context

[Tree] (config>port>network>egress>pool>monitor-depth>alarm shared-pool-in-use)

[Tree] (config>card>fp>ingress>network>pool>monitor-depth>alarm shared-pool-in-use)

[Tree] (config>port>access>egress>pool>monitor-depth>alarm shared-pool-in-use)

[Tree] (config>port>access>ingress>pool>monitor-depth>alarm shared-pool-in-use)

Full Context

configure port network egress pool monitor-pool-depth alarm-thresholds shared-pool-in-use

configure card fp ingress network pool monitor-pool-depth alarm-thresholds shared-pool-in-use

configure port access egress pool monitor-pool-depth alarm-thresholds shared-pool-in-use

configure port access ingress pool monitor-pool-depth alarm-thresholds shared-pool-in-use

Description

This command configures the threshold for the shared pool in use.

A tmnxSharedPoolUseThreshExcd trap is generated when the shared pool usage exceeds this threshold percentage. When the usage returns below the threshold percentage, the tmnxSharedPoolUseThreshNotExcd trap is generated

The no form of this command removes the threshold on which to alarm.

Default

no shared-pool-in-use

Parameters

percentage

Specifies the shared pool in-use alarm threshold.

Values: 0.01 to 100.00

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

shared-queue

Syntax

shared-queue policy-name [create]

no shared-queue policy-name

Context

[Tree] (config>qos shared-queue)

Full Context

configure qos shared-queue

Description

Commands in this context modify the QoS default shared-queue policy.

Parameters

policy-name

The name of the default shared-queue policy.

Values: default

Platforms

All

shared-queue

Syntax

shared-queue src-name dst-name [overwrite]

Context

[Tree] (config>qos>copy shared-queue)

Full Context

configure qos copy shared-queue

Description

This command copies an existing shared-queue to another shared-queue. The copy command is a configuration level maintenance tool used to create new entries using an existing mapping policy name. If overwrite is not specified, an error occurs if the destination policy exists.

Parameters

src-name: Specifies the existing source shared-queue, up to 32 characters, from which the copy command attempts to copy.

dst-name: Specifies the destination shared-queue, up to 32 characters, to which the copy command attempts to copy.

overwrite

Use this parameter when the shared-queue dst-name already exists. If it does, everything in the existing destination shared-queue dst-name is completely overwritten with the contents of the shared-queue src-name. The overwrite parameter must be specified or else the following error message is returned:

MINOR: CLI Destination "sqtest10" exists - use {overwrite}.

If overwrite is specified, the function of copying from source to destination occurs in a "break before make” manner and therefore should be handled with care.

Platforms

All

shared-radius-filter-wmark

Syntax

shared-radius-filter-wmark low low-watermark high high-watermark

no shared-radius-filter-wmark

Context

[Tree] (config>filter>ip-filter shared-radius-filter-wmark)

[Tree] (config>filter>ipv6-filter shared-radius-filter-wmark)

Full Context

configure filter ip-filter shared-radius-filter-wmark

configure filter ipv6-filter shared-radius-filter-wmark

Description

This command configures the low and high watermark for the number of RADIUS shared filters reporting

Default

no shared-radius-filter-wmark

Parameters

low-watermark

Specifies the utilization of the filter ranges for filter entry insertion, at which a table full alarm will be raised by the agent.

Values: 0 to 8000

high-watermark

Specifies the utilization of the filter ranges for filter entry insertion, at which a table full alarm will be cleared by the agent.

Values: 1 to 8000

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shared-resources

Syntax

shared-resources

Context

[Tree] (config>isa>aa-grp shared-resources)

Full Context

configure isa application-assurance-group shared-resources

Description

Commands in this context configure the shared resources pool.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

shcv-policy

Syntax

shcv-policy name [create]

no shcv-policy name

Context

[Tree] (config>subscr-mgmt shcv-policy)

Full Context

configure subscriber-mgmt shcv-policy

Description

This command configures a Subscriber Host Connectivity Verification (SHCV) policy. An SHCV policy can be applied to both the subscriber management group interface and VPLS instances. All SHCV-related features inside a group interface and a VPLS service follows the configuration specified in the SHCV policy. The SHCV policy and the SHCV configuration on a group interface are mutually exclusive. Only one can be applied to the group interface.

The no form of this command removes the policy name from the configuration.

Parameters

name: Specifies the name of the SHCV policy, up to 32 characters.

create: Keyword required to create the configuration context.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shcv-policy

Syntax

shcv-policy name

no shcv-policy

Context

[Tree] (config>service>vprn>sub-if>grp-if shcv-policy)

[Tree] (config>service>ies>sub-if>grp-if shcv-policy)

Full Context

configure service vprn subscriber-interface group-interface shcv-policy

configure service ies subscriber-interface group-interface shcv-policy

Description

This command references the SHCV policy to be used for both IPv4 and IPv6 subscriber hosts. The policy name must already exist in the config>subscr-mgmt context.

The no form of this command removes the policy name from the service configuration.

Parameters

name: Specifies an existing SHCV policy name up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shcv-policy-ipv4

Syntax

shcv-policy-ipv4 name

no shcv-policy-ipv4

Context

[Tree] (config>service>vprn>if shcv-policy-ipv4)

[Tree] (config>service>ies>if shcv-policy-ipv4)

[Tree] (config>service>vprn>sub-if>grp-if shcv-policy-ipv4)

[Tree] (config>service>vpls shcv-policy-ipv4)

[Tree] (config>service>ies>sub-if>grp-if shcv-policy-ipv4)

[Tree] (config>service>vpls>sap shcv-policy-ipv4)

Full Context

configure service vprn interface shcv-policy-ipv4

configure service ies interface shcv-policy-ipv4

configure service vprn subscriber-interface group-interface shcv-policy-ipv4

configure service vpls shcv-policy-ipv4

configure service ies subscriber-interface group-interface shcv-policy-ipv4

configure service vpls sap shcv-policy-ipv4

Description

This command specifies the Subscriber Host Connectivity Verification (SHCV) policy to be used exclusive for IPv4 subscriber hosts. The shcv-policy name must already exist in the config>subscr-mgmt context.

The no form of this command removes the policy name from the service configuration.

Parameters

name: Specifies an existing SHCV policy name up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shcv-policy-ipv6

Syntax

shcv-policy-ipv6 name

no shcv-policy-ipv6

Context

[Tree] (config>service>vprn>sub-if>grp-if shcv-policy-ipv6)

[Tree] (config>service>ies>if shcv-policy-ipv6)

[Tree] (config>service>ies>sub-if>grp-if shcv-policy-ipv6)

[Tree] (config>service>vprn>if shcv-policy-ipv6)

Full Context

configure service vprn subscriber-interface group-interface shcv-policy-ipv6

configure service ies interface shcv-policy-ipv6

configure service ies subscriber-interface group-interface shcv-policy-ipv6

configure service vprn interface shcv-policy-ipv6

Description

This command references the Subscriber Host Connectivity Verification (SHCV) policy to be used exclusive for IPv6 subscriber hosts. The policy name must already exist in the config>subscr-mgmt context.

The no form of this command removes the policy name from the service configuration.

Parameters

name: Specifies an existing SHCV policy name up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

configure service vprn subscriber-interface group-interface shcv-policy-ipv6
configure service ies subscriber-interface group-interface shcv-policy-ipv6

All

configure service vprn interface shcv-policy-ipv6
configure service ies interface shcv-policy-ipv6

shell

Syntax

shell -password password

no shell

Context

[Tree] (environment shell)

Full Context

environment shell

Description

This command allows Nokia technical support to access the shell commands. shell commands are used only by Nokia technical support for troubleshooting.

The no form of this command disables the shell commands.

Parameters

password: Specifies the password to access the shell commands, up to 256 characters.

Platforms

All

short-duration-flow-count

Syntax

[no] short-duration-flow-count

Context

[Tree] (config>log>acct-policy>cr>aa>aa-sub-cntr short-duration-flow-count)

Full Context

configure log accounting-policy custom-record aa-specific aa-sub-counters short-duration-flow-count

Description

This command includes the short duration flow count in the AA subscriber's custom record. This command only applies to the 7750 SR.

The no form of this command excludes the short duration flow count.

Default

no short-duration-flow-count

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

short-sequence-numbers

Syntax

[no] short-sequence-numbers

Context

[Tree] (config>service>vprn>l2tp>group>mlppp short-sequence-numbers)

[Tree] (config>subscr-mgmt>ppp-policy>mlppp short-sequence-numbers)

[Tree] (config>router>l2tp>group>mlppp short-sequence-numbers)

[Tree] (config>router>l2tp>group>tunnel>mlppp short-sequence-numbers)

[Tree] (config>service>vprn>l2tp>group>tunnel>mlppp short-sequence-numbers)

Full Context

configure service vprn l2tp group mlppp short-sequence-numbers

configure subscriber-mgmt ppp-policy mlppp short-sequence-numbers

configure router l2tp group mlppp short-sequence-numbers

configure router l2tp group tunnel mlppp short-sequence-numbers

configure service vprn l2tp group tunnel mlppp short-sequence-numbers

Description

This command enables a peer request to send short sequence numbers. This command is applicable to LAC and LNS. By default, MLPPPoX negotiates 24bit long sequence numbers. This command allows this to be changed to shorter, 12-bit sequence numbers.

The no form of this command reverts to the default.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s

shortcut-local-ttl-propagate

Syntax

[no] shortcut-local-ttl-propagate

Context

[Tree] (config>router>ldp shortcut-local-ttl-propagate)

[Tree] (config>router>mpls shortcut-local-ttl-propagate)

Full Context

configure router ldp shortcut-local-ttl-propagate

configure router mpls shortcut-local-ttl-propagate

Description

This command configures the TTL handling of locally generated packets for all LSP shortcuts originating on this ingress LER. It applies to all LDP or RSVP LSPs that are used to resolve static routes, BGP routes, and IGP routes.

The user can enable or disable the propagation of the TTL from the header of an IP packet into the header of the resulting MPLS packet independently for local and transit packets forwarded over an LSP shortcut.

Local IP packets include ICMP Ping, traceroute, and OAM packets, that are destined to a route that is resolved to the LSP shortcut. Transit IP packets are all IP packets received on any IES interface and destined to a route that is resolved to the LSP shortcut

By default, the feature propagates the TTL from the header of locally generated IP packets into the label stack of the resulting MPLS packets forwarded over the LSP shortcut. This is referred to as Uniform mode.

When the no form of this command is enabled, TTL propagation is disabled on all locally generated IP packets, including ICMP Ping, traceroute, and OAM packets, that are destined to a route that is resolved to the LSP shortcut. In this case, a TTL of 255 is programmed onto the pushed label stack. This is referred to as Pipe mode.

Default

shortcut-local-ttl-propagate

Platforms

All

shortcut-transit-ttl-propagate

Syntax

[no] shortcut-transit-ttl-propagate

Context

[Tree] (config>router>mpls shortcut-transit-ttl-propagate)

[Tree] (config>router>ldp shortcut-transit-ttl-propagate)

Full Context

configure router mpls shortcut-transit-ttl-propagate

configure router ldp shortcut-transit-ttl-propagate

Description

This command configures the TTL handling of transit packets for all LSP shortcuts originating on this ingress LER. It applies to all LDP or RSVP LSPs that are used to resolve static routes, BGP routes, and IGP routes.

By default, the feature propagates the TTL from the header of transit IP packets into the label stack of the resulting MPLS packets forwarded over the LSP shortcut. This is referred to as Uniform mode.

When the no form of the command is enabled, TTL propagation is disabled on all transit IP packets received on any IES interface and destined to a route that is resolved to the LSP shortcut. In this case, a TTL of 255 is programmed onto the pushed label stack. This is referred to as Pipe mode.

Default

shortcut-transit-ttl-propagate

Platforms

All

shortcut-tunnel

Syntax

shortcut-tunnel

Context

[Tree] (config>router>bgp>next-hop-resolution shortcut-tunnel)

Full Context

configure router bgp next-hop-resolution shortcut-tunnel

Description

This command creates the context to configure the tunnel types that can be used to resolve unlabeled IPv4 and IPv6 BGP routes.

The following tunnel types are supported for resolving IPv4 routes and IPv6 routes with IPv4-mapped IPv6 next-hop addresses: bgp, ldp, rsvp, sr-isis, sr-ospf, sr-policy and sr-te. In this context:

bgp — refers to IPv4 tunnels created by receiving BGP label-unicast IPv4 routes for /32 IPv4 prefixes.
ldp — refers to /32 and shorter length LDP FEC prefixes imported into the tunnel table. For IPv4 NLRI, BGP selects the LDP FEC that is the longest-prefix-match (LPM) of the BGP next-hop address. For IPv6 NLRI, BGP selects the /32 FEC that is an exact match of the BGP next-hop address.
rsvp — refers to RSVP tunnels in the tunnel table to IPv4 destinations. This option allows BGP to use the best metric RSVP LSP to the address of the BGP next-hop. This address can correspond to the system interface or to another loopback interface of the remote BGP router. In the case of multiple RSVP LSPs with the same lowest metric, BGP selects the LSP with the lowest tunnel id.
sr-isis — refers to segment routing tunnels (shortest path) to IPv4 destinations reachable by the IS-IS protocol. This option allows BGP to use the segment routing tunnel in the tunnel table submitted by the lowest preference IS-IS instance or (in case of a tie) the lowest numbered IS-IS instance.
sr-ospf — refers to segment routing tunnels (shortest path) to IPv4 destinations reachable by the OSPF protocol. This option allows BGP to use the segment routing tunnel in the tunnel table submitted by the lowest preference OSPF instance or (in case of a tie) the lowest numbered OSPF instance.
sr-policy — refers to segment routing policies with an IPv4 endpoint that are statically configured in the local router or learned through BGP routes (AFI 1/SAFI 73). For BGP to resolve the next hop of an unlabeled IPv4 or IPv6 route using a segment routing policy the highest numbered color extended community attached to the IPv4 or IPv6 route must match the color of the segment routing policy.
sr-te — refers to traffic engineered (TE) segment routing tunnels. This option allows BGP to use the best metric SR-TE tunnel to the address of the BGP next-hop. In the case of multiple SR-TE tunnels with the same lowest metric, BGP selects the tunnel with the lowest tunnel id.
udp — refers to MPLSoUDPoIPv4 tunnels set up by action of the BGP import policies.

The following tunnel types are supported for resolving IPv6 routes with IPv6 next-hops that are not IPv4-mapped IPv6 addresses: ldp, sr-isis, and sr-policy. In this context:

ldp — refers to /128 LDP FEC prefixes in the tunnel table. BGP selects the /128 FEC that is an exact match of the BGP next-hop address.
sr-isis — refers to segment routing tunnels (shortest path) to IPv6 destinations reachable by the IS-IS protocol. This option allows BGP to use the segment routing tunnel in the tunnel table submitted by the lowest preference IS-IS instance or (in case of a tie) the lowest numbered IS-IS instance.
sr-policy — refers to segment routing policies with a null IPv4 endpoint (0.0.0.0) that are statically configured in the local router or learned through BGP routes (AFI 1/SAFI 73). For BGP to resolve the next hop of an IPv6 route using a segment routing policy the highest numbered color extended community attached to the IPv6 route must match the color of the segment routing policy and its color bits must be set to '01' or '10'.

Platforms

All

show-ipsec-keys

Syntax

[no] show-ipsec-keys

Context

[Tree] (config>ipsec show-ipsec-keys)

Full Context

configure ipsec show-ipsec-keys

Description

This command enables user to optionally include IKE-SA or CHILD-SA keys in the output of debug ipsec or admin ipsec display-key.

The no form of this command disallows the user from including keys in the output.

Default

no show-ipsec-keys

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

show-request

Syntax

show-request [ca ca-profile-name]

Context

[Tree] (admin>certificate>cmpv2 show-request)

Full Context

admin certificate cmpv2 show-request

Description

This command displays current the CMPv2 pending request toward the specified CA. If there is no pending request, the last pending request is displayed including the status (success/fail/rejected) and the receive time of last CMPv2 message from server.

The following information is included in the output:

Request type, original input parameter (password is not displayed), checkAfter and reason in of last PollRepContent, time of original command input.

Parameters

ca-profile-name: Specifies a ca-profile name, up to 32 characters. If not specified, the system will display pending requests of all ca-profiles.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>satellite>local-forward>sap shutdown)

[Tree] (config>system>grpc-tunnel>tunnel shutdown)

[Tree] (conf>sys>sat>eth-sat>sync-if>ref2 shutdown)

[Tree] (config>system>cron>sched shutdown)

[Tree] (config>system>grpc-tunnel>tunnel>handler shutdown)

[Tree] (config>li>x-interfaces shutdown)

[Tree] (config>router>mpls>fwd-policies>fwd-policy>egress-statistics shutdown)

[Tree] (config>system>script-control>script shutdown)

[Tree] (config>system>time>sntp shutdown)

[Tree] (config>test-oam>mpls-dm shutdown)

[Tree] (config>system>lldp shutdown)

[Tree] (config>system>telemetry>notification-bundling shutdown)

[Tree] (config>eth-tunnel shutdown)

[Tree] (config>system>persistence>nat-port-forward shutdown)

[Tree] (config>system>persistence>subscriber-mgmt shutdown)

[Tree] (config>system>satellite>port-template shutdown)

[Tree] (config>system>switch-fabric>failure-recovery shutdown)

[Tree] (config>oam-pm>streaming>delay-template shutdown)

[Tree] (config>system>ptp>alternate-profile shutdown)

[Tree] (config>router>fad>flex-algo shutdown)

[Tree] (config>system>sync-if-timing>ptp shutdown)

[Tree] (config>service>epipe>nat-outside shutdown)

[Tree] (config>system>persistence>python-policy-cache shutdown)

[Tree] (config>system>sync-if-timing>bits>input shutdown)

[Tree] (config>app-assure>group>policy>chrg-fltr>entry shutdown)

[Tree] (config>system>sync-if-timing>ref1 shutdown)

[Tree] (config>eth-tunnel>path shutdown)

[Tree] (config>subscr-mgmt>diam-appl-plcy>gy>efh shutdown)

[Tree] (config>service>vpls>sap>dhcp6>ldra shutdown)

[Tree] (config>router>mpls>static-lsp shutdown)

[Tree] (config>system>ptp>ptsf>monitor shutdown)

[Tree] (config>system>telemetry>destination-group>tcp-keepalive shutdown)

[Tree] (config>system>sync-if-timing>synce shutdown)

[Tree] (config>system>time>ntp shutdown)

[Tree] (config>system>script-control>script-policy shutdown)

[Tree] (config>router>mpls>fwd-policies>fwd-policy>ingress-statistics shutdown)

[Tree] (config>system>sync-if-timing>bits>output shutdown)

[Tree] (config>system>sync-if-timing>gnss shutdown)

[Tree] (config>system>grpc-tunnel>destination-group>tcp-keepalive shutdown)

[Tree] (conf>sys>sat>eth-sat>sync-if>ref1 shutdown)

[Tree] (config>system>telemetry>persistent-subscriptions>subscription shutdown)

[Tree] (config>test-oam>lag-meas>template shutdown)

[Tree] (config>system>sync-if-timing>ref2 shutdown)

[Tree] (config>isa>map-t-group shutdown)

[Tree] (config>system>persistence>dhcp-server shutdown)

[Tree] (config>system>persistence>app-assure shutdown)

Full Context

configure system satellite local-forward sap shutdown

configure system grpc-tunnel tunnel shutdown

configure system satellite eth-sat sync-if-timing ref2 shutdown

configure system cron schedule shutdown

configure system grpc-tunnel tunnel handler shutdown

configure li x-interfaces shutdown

configure router mpls forwarding-policies forwarding-policy egress-statistics shutdown

configure system script-control script shutdown

configure system time sntp shutdown

configure test-oam mpls-dm shutdown

configure system lldp shutdown

configure system telemetry notification-bundling shutdown

configure eth-tunnel shutdown

configure system persistence nat-port-forward shutdown

configure system persistence subscriber-mgmt shutdown

configure system satellite port-template shutdown

configure system switch-fabric failure-recovery shutdown

configure oam-pm streaming delay-template shutdown

configure system ptp alternate-profile shutdown

configure router flexible-algorithm-definitions flex-algo shutdown

configure system sync-if-timing ptp shutdown

configure service epipe nat-outside shutdown

configure system persistence python-policy-cache shutdown

configure system sync-if-timing bits input shutdown

configure application-assurance group policy charging-filter entry shutdown

configure system sync-if-timing ref1 shutdown

configure eth-tunnel path shutdown

configure subscriber-mgmt diameter-application-policy gy extended-failure-handling shutdown

configure service vpls sap dhcp6 ldra shutdown

configure router mpls static-lsp shutdown

configure system ptp ptsf monitor-ptsf-unusable shutdown

configure system telemetry destination-group tcp-keepalive shutdown

configure system sync-if-timing synce shutdown

configure system time ntp shutdown

configure system script-control script-policy shutdown

configure router mpls forwarding-policies forwarding-policy ingress-statistics shutdown

configure system sync-if-timing bits output shutdown

configure system sync-if-timing gnss shutdown

configure system grpc-tunnel destination-group tcp-keepalive shutdown

configure system satellite eth-sat sync-if-timing ref1 shutdown

configure system telemetry persistent-subscriptions subscription shutdown

configure test-oam lag-ip-measurement lag-ip-measurement-template shutdown

configure system sync-if-timing ref2 shutdown

configure isa map-t-group shutdown

configure system persistence dhcp-server shutdown

configure system persistence application-assurance shutdown

Description

This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.

The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.

The no form of this command places the entity into an administratively enabled state.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

configure system sync-if-timing ptp shutdown
configure oam-pm streaming delay-template shutdown
configure system sync-if-timing synce shutdown
configure system sync-if-timing ref1 shutdown
configure test-oam lag-ip-measurement lag-ip-measurement-template shutdown
configure system satellite eth-sat sync-if-timing ref1 shutdown
configure system sync-if-timing ref2 shutdown
configure system sync-if-timing bits input shutdown
configure system satellite eth-sat sync-if-timing ref2 shutdown
configure system satellite local-forward sap shutdown
configure eth-tunnel shutdown
configure li x-interfaces shutdown
configure system satellite port-template shutdown
configure eth-tunnel path shutdown
configure system ptp ptsf monitor-ptsf-unusable shutdown
configure system sync-if-timing bits output shutdown
configure test-oam mpls-dm shutdown
configure system ptp alternate-profile shutdown

All

configure system grpc-tunnel tunnel shutdown
configure system time ntp shutdown
configure router mpls forwarding-policies forwarding-policy egress-statistics shutdown
configure router flexible-algorithm-definitions flex-algo shutdown
configure router mpls static-lsp shutdown
configure system lldp shutdown
configure system telemetry persistent-subscriptions subscription shutdown
configure system script-control script shutdown
configure service vpls sap dhcp6 ldra shutdown
configure system script-control script-policy shutdown
configure system time sntp shutdown
configure system grpc-tunnel destination-group tcp-keepalive shutdown
configure system grpc-tunnel tunnel handler shutdown
configure system telemetry notification-bundling shutdown
configure system persistence python-policy-cache shutdown
configure system cron schedule shutdown
configure router mpls forwarding-policies forwarding-policy ingress-statistics shutdown
configure system telemetry destination-group tcp-keepalive shutdown

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

configure system persistence subscriber-mgmt shutdown
configure system persistence dhcp-server shutdown
configure subscriber-mgmt diameter-application-policy gy extended-failure-handling shutdown

7450 ESS, 7750 SR-7, 7750 SR-12e, 7950 XRS

configure system switch-fabric failure-recovery shutdown

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

configure application-assurance group policy charging-filter entry shutdown
configure service epipe nat-outside shutdown
configure system persistence application-assurance shutdown

7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se, 7750 SR-2se

configure system sync-if-timing gnss shutdown

7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s

configure isa map-t-group shutdown

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>vlan-ranges>range>vrgw>brg shutdown)

[Tree] (config>router>mld>group-interface shutdown)

[Tree] (config>router>igmp>interface>mcac>mc-constraints shutdown)

[Tree] (config>router>mld shutdown)

[Tree] (config>router>radius-proxy>server>cache shutdown)

[Tree] (config>service>ies>sub-if>wlan-gw>pool-mgr>dhcp6-client>slaac shutdown)

[Tree] (config>service>ies>sub-if>wlan-gw>pool-mgr>dhcp6-client>ia-na shutdown)

[Tree] (config>isa>video-group shutdown)

[Tree] (config>router>mcac>policy>bundle shutdown)

[Tree] (config>aaa>radius-scr-plcy>primary shutdown)

[Tree] (config>system>management-interface>cli>md-cli>environment>progress-indicator shutdown)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw shutdown)

[Tree] (config>service>vpls>provider-tunnel>selective shutdown)

[Tree] (config>router>pim>interface shutdown)

[Tree] (config>service>vprn>radius-proxy>server shutdown)

[Tree] (config>aaa>radius-scr-plcy>secondary shutdown)

[Tree] (config>router>pim>rp>bsr-candidate shutdown)

[Tree] (config>router>if shutdown)

[Tree] (config>service>vprn>sub-if>wlan-gw>pool-mgr>dhcp6-client>ia-na shutdown)

[Tree] (config>router>msdp>group shutdown)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw shutdown)

[Tree] (config>service>ies>sub-if>grp-if>brg shutdown)

[Tree] (config>service>vprn>mvpn>pt>inclusive>rsvp>lsp-template shutdown)

[Tree] (config>router>pim>interface>mcac>mc-constraints shutdown)

[Tree] (config>router>mcac>if-policy shutdown)

[Tree] (config>router>pim shutdown)

[Tree] (config>router>origin-validation>rpki-session shutdown)

[Tree] (config>router>mld>grp-if>mcac>mc-constraints shutdown)

[Tree] (config>service>vprn>radius-proxy>server>cache shutdown)

[Tree] (config>router>static-route-entry>indirect shutdown)

[Tree] (config>router>msdp>group>peer shutdown)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>brg shutdown)

[Tree] (config>router>radius-proxy>server shutdown)

[Tree] (config>router>pim>rp>rp-candidate shutdown)

[Tree] (config>router>msdp>peer shutdown)

[Tree] (config>router>igmp>tunnel-interface shutdown)

[Tree] (config>router>pim>rp>ipv6>rp-candidate shutdown)

[Tree] (config>cflowd shutdown)

[Tree] (config>router>msdp shutdown)

[Tree] (config>service>ies>video-interface shutdown)

[Tree] (config>router>pim>rp>ipv6>embedded-rp shutdown)

[Tree] (config>service>vprn>sub-if>grp-if>brg shutdown)

[Tree] (config>router>mpls>mpls-tp>transit-path shutdown)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>vlan-ranges>range>vrgw>brg shutdown)

[Tree] (config>service>vprn>mvpn>pt>selective>mldp shutdown)

[Tree] (config>router>igmp>group-interface shutdown)

[Tree] (config>router>mld>if shutdown)

[Tree] (config>router>static-route-entry>next-hop shutdown)

[Tree] (config>router>igmp shutdown)

[Tree] (config>router>igmp>if shutdown)

[Tree] (config>service>vprn>video-interface shutdown)

[Tree] (config>service>vprn>sub-if>wlan-gw>pool-mgr>dhcp6-client>dhcpv4-nat shutdown)

[Tree] (config>router>pim>rp>ipv6>bsr-candidate shutdown)

[Tree] (config>router>if>eth-cfm>mep shutdown)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>brg shutdown)

[Tree] (config>router>mtrace2 shutdown)

[Tree] (config>service>vprn>mvpn>provider-tunnel>selective>bier shutdown)

[Tree] (config>service>vprn>mvpn>pt>selective>rsvp shutdown)

[Tree] (config>service>vprn>mvpn>pt>inclusive>mldp shutdown)

[Tree] (config>service>ies>sub-if>wlan-gw>pool-mgr>dhcp6-client>dhcpv4-nat shutdown)

[Tree] (config>router>static-route-entry>black-hole shutdown)

[Tree] (config>service>vprn>sub-if>wlan-gw>pool-mgr>dhcp6-client>slaac shutdown)

[Tree] (config>router>radius-proxy>cache shutdown)

[Tree] (config>cflowd>collector shutdown)

[Tree] (config>service>vprn>mvpn>provider-tunnel>inclusive>bier shutdown)

Full Context

configure service ies subscriber-interface group-interface wlan-gw vlan-ranges range vrgw brg shutdown

configure router mld group-interface shutdown

configure router igmp interface mcac mc-constraints shutdown

configure router mld shutdown

configure router radius-proxy server cache shutdown

configure service ies subscriber-interface wlan-gw pool-mgr dhcp6-client slaac shutdown

configure service ies subscriber-interface wlan-gw pool-mgr dhcp6-client ia-na shutdown

configure isa video-group shutdown

configure router mcac policy bundle shutdown

configure aaa radius-script-policy primary shutdown

configure system management-interface cli md-cli environment progress-indicator shutdown

configure service vprn subscriber-interface group-interface wlan-gw shutdown

configure service vpls provider-tunnel selective shutdown

configure router pim interface shutdown

configure service vprn radius-proxy server shutdown

configure aaa radius-script-policy secondary shutdown

configure router pim rp bsr-candidate shutdown

configure router interface shutdown

configure service vprn subscriber-interface wlan-gw pool-mgr dhcp6-client ia-na shutdown

configure router msdp group shutdown

configure service ies subscriber-interface group-interface wlan-gw shutdown

configure service ies subscriber-interface group-interface brg shutdown

configure service vprn mvpn pt inclusive rsvp lsp-template shutdown

configure router pim interface mcac mc-constraints shutdown

configure router mcac if-policy shutdown

configure router pim shutdown

configure router origin-validation rpki-session shutdown

configure router mld group-interface mcac mc-constraints shutdown

configure service vprn radius-proxy server cache shutdown

configure router static-route-entry indirect shutdown

configure router msdp group peer shutdown

configure service ies subscriber-interface group-interface wlan-gw ranges range brg shutdown

configure router radius-proxy server shutdown

configure router pim rp rp-candidate shutdown

configure router msdp peer shutdown

configure router igmp tunnel-interface shutdown

configure router pim rp ipv6 rp-candidate shutdown

configure cflowd shutdown

configure router msdp shutdown

configure service ies video-interface shutdown

configure router pim rp ipv6 embedded-rp shutdown

configure service vprn subscriber-interface group-interface brg shutdown

configure router mpls mpls-tp transit-path shutdown

configure service vprn subscriber-interface group-interface wlan-gw vlan-ranges range vrgw brg shutdown

configure service vprn mvpn provider-tunnel selective mldp shutdown

configure router igmp group-interface shutdown

configure router mld interface shutdown

configure router static-route-entry next-hop shutdown

configure router igmp shutdown

configure router igmp interface shutdown

configure service vprn video-interface shutdown

configure service vprn subscriber-interface wlan-gw pool-mgr dhcp6-client dhcpv4-nat shutdown

configure router pim rp ipv6 bsr-candidate shutdown

configure router interface eth-cfm mep shutdown

configure service vprn subscriber-interface group-interface wlan-gw ranges range brg shutdown

configure router mtrace2 shutdown

configure service vprn mvpn provider-tunnel selective bier shutdown

configure service vprn mvpn provider-tunnel selective rsvp shutdown

configure service vprn mvpn provider-tunnel inclusive mldp shutdown

configure service ies subscriber-interface wlan-gw pool-mgr dhcp6-client dhcpv4-nat shutdown

configure router static-route-entry black-hole shutdown

configure service vprn subscriber-interface wlan-gw pool-mgr dhcp6-client slaac shutdown

configure router radius-proxy cache shutdown

configure cflowd collector shutdown

configure service vprn mvpn provider-tunnel inclusive bier shutdown

Description

This command administratively disables the entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. Many entities must be explicitly enabled using the no shutdown command. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.

Unlike other commands and parameters where the default state is not indicated in the configuration file, shutdown and no shutdown are always indicated in system-generated configuration files.

The no form of this command places the entity into an administratively enabled state.

Default

no shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

configure service vprn radius-proxy server cache shutdown
configure aaa radius-script-policy secondary shutdown
configure router radius-proxy server shutdown
configure router radius-proxy server cache shutdown
configure router mld group-interface mcac mc-constraints shutdown
configure router igmp group-interface shutdown
configure service ies subscriber-interface group-interface brg shutdown
configure service vprn subscriber-interface group-interface brg shutdown
configure router mld group-interface shutdown
configure service vprn radius-proxy server shutdown
configure aaa radius-script-policy primary shutdown

All

configure router pim interface shutdown
configure router static-route-entry black-hole shutdown
configure router mld interface shutdown
configure router mtrace2 shutdown
configure router mcac if-policy shutdown
configure service vprn mvpn provider-tunnel inclusive bier shutdown
configure router msdp shutdown
configure router pim shutdown
configure service vpls provider-tunnel selective shutdown
configure router interface shutdown
configure router pim rp ipv6 embedded-rp shutdown
configure service vprn mvpn provider-tunnel selective rsvp shutdown
configure router pim rp ipv6 bsr-candidate shutdown
configure system management-interface cli md-cli environment progress-indicator shutdown
configure router origin-validation rpki-session shutdown
configure router pim rp ipv6 rp-candidate shutdown
configure router msdp peer shutdown
configure router mld shutdown
configure router igmp interface shutdown
configure router pim rp bsr-candidate shutdown
configure cflowd collector shutdown
configure service vprn mvpn provider-tunnel inclusive mldp shutdown
configure router msdp group peer shutdown
configure service vprn mvpn provider-tunnel selective bier shutdown
configure router mcac policy bundle shutdown
configure router igmp tunnel-interface shutdown
configure router pim rp rp-candidate shutdown
configure router igmp interface mcac mc-constraints shutdown
configure router msdp group shutdown
configure router igmp shutdown
configure router static-route-entry indirect shutdown
configure cflowd shutdown
configure router static-route-entry next-hop shutdown
configure service vprn mvpn provider-tunnel selective mldp shutdown
configure router pim interface mcac mc-constraints shutdown

7450 ESS, 7750 SR, 7750 SR-s

configure isa video-group shutdown
configure service ies video-interface shutdown
configure service vprn video-interface shutdown

7750 SR, 7750 SR-e, 7750 SR-s, VSR

configure service ies subscriber-interface group-interface wlan-gw shutdown
configure service vprn subscriber-interface group-interface wlan-gw shutdown

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

configure router interface eth-cfm mep shutdown
configure router mpls mpls-tp transit-path shutdown

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>subscr-mgmt>shcv-policy>trigger shutdown)

Full Context

configure subscriber-mgmt shcv-policy trigger shutdown

Description

This command administratively disables the SHCV triggers.

The no form of this command administratively enables the the SHCV triggers.

Default

no shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>subscr-mgmt>shcv-policy>periodic shutdown)

Full Context

configure subscriber-mgmt shcv-policy periodic shutdown

Description

This command administratively disables the periodic connectivity verification.

The no form of this command administratively enables the periodic connectivity verification.

Default

no shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>ies>sub-if>grp-if>ipoe-session shutdown)

[Tree] (config>service>vpls>sap>ipoe-session shutdown)

[Tree] (config>service>vprn>sub-if>grp-if>ipoe-session shutdown)

Full Context

configure service ies subscriber-interface group-interface ipoe-session shutdown

configure service vpls sap ipoe-session shutdown

configure service vprn subscriber-interface group-interface ipoe-session shutdown

Description

The shutdown command enables or disables IPoE session management on a group interface or capture SAP.

A shutdown of the IPoE session CLI hierarchy on a group-interface clears all active IPoE sessions on that interface, resulting in a deletion of all corresponding subscriber hosts.

On wlan-gw group interfaces it is not possible to disable an IPoE session.

The no form of this command reverts to the default.

Default

shutdown

no shutdown on wlan-gw group interfaces

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>ies>aarp-interface shutdown)

[Tree] (config>service>ies>if>sap>static-host shutdown)

[Tree] (config>service>ies>if>sap>eth-cfm shutdown)

[Tree] (config>service>ies>sub-if>grp-if shutdown)

[Tree] (config>service>ies>if>spoke-sdp>control-channel-status shutdown)

[Tree] (config>service>ies>aarp-interface>spoke-sdp shutdown)

[Tree] (config>service>ies>if>spoke-sdp shutdown)

[Tree] (config>service>ies>sub-if>grp-if>dhcp shutdown)

[Tree] (config>service>ies>if>dhcp shutdown)

[Tree] (config>service>ies>redundant-interface shutdown)

[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt shutdown)

[Tree] (config>service>ies>if>dhcp>proxy-server shutdown)

[Tree] (config>service>ies>sub-if>dhcp shutdown)

[Tree] (config>service>ies>sub-if>grp-if>ipv6>router-advertisements shutdown)

[Tree] (config>service>ies>sub-if>grp-if>pppoe shutdown)

[Tree] (config>service>ies shutdown)

[Tree] (config>service>ies>sub-if>grp-if>sap shutdown)

[Tree] (config>service>ies>sub-if>grp-if>ipv6>dhcp6>proxy-server shutdown)

[Tree] (config>service>ies>sub-if>grp-if>sap>static-host shutdown)

[Tree] (config>service>ies>if shutdown)

[Tree] (config>service>ies>if>vrrp shutdown)

Full Context

configure service ies aarp-interface shutdown

configure service ies interface sap static-host shutdown

configure service ies interface sap eth-cfm shutdown

configure service ies subscriber-interface group-interface shutdown

configure service ies interface spoke-sdp control-channel-status shutdown

configure service ies aarp-interface spoke-sdp shutdown

configure service ies interface spoke-sdp shutdown

configure service ies subscriber-interface group-interface dhcp shutdown

configure service ies interface dhcp shutdown

configure service ies redundant-interface shutdown

configure service ies subscriber-interface group-interface sap sub-sla-mgmt shutdown

configure service ies interface dhcp proxy-server shutdown

configure service ies subscriber-interface dhcp shutdown

configure service ies subscriber-interface group-interface ipv6 router-advertisements shutdown

configure service ies subscriber-interface group-interface pppoe shutdown

configure service ies shutdown

configure service ies subscriber-interface group-interface sap shutdown

configure service ies subscriber-interface group-interface ipv6 dhcp6 proxy-server shutdown

configure service ies subscriber-interface group-interface sap static-host shutdown

configure service ies interface shutdown

configure service ies interface vrrp shutdown

Description

This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.

Services are created in the administratively down (shutdown) state. When a no shutdown command is entered, the service becomes administratively up and then tries to enter the operationally up state. Default administrative states for services and service entities is described below in Special Cases.

The no form of this command places the entity into an administratively enabled state.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

configure service ies aarp-interface spoke-sdp shutdown
configure service ies aarp-interface shutdown

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

configure service ies interface sap static-host shutdown
configure service ies redundant-interface shutdown
configure service ies subscriber-interface group-interface ipv6 router-advertisements shutdown
configure service ies subscriber-interface group-interface pppoe shutdown
configure service ies subscriber-interface dhcp shutdown
configure service ies subscriber-interface group-interface sap static-host shutdown
configure service ies subscriber-interface group-interface sap shutdown
configure service ies subscriber-interface group-interface sap sub-sla-mgmt shutdown
configure service ies subscriber-interface group-interface shutdown
configure service ies subscriber-interface group-interface ipv6 dhcp6 proxy-server shutdown
configure service ies subscriber-interface group-interface dhcp shutdown

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

configure service ies interface sap eth-cfm shutdown

All

configure service ies interface spoke-sdp control-channel-status shutdown
configure service ies interface dhcp shutdown
configure service ies interface shutdown
configure service ies shutdown
configure service ies interface spoke-sdp shutdown
configure service ies interface vrrp shutdown
configure service ies interface dhcp proxy-server shutdown

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>aaa>diam>node>peer shutdown)

[Tree] (config>redundancy>multi-chassis>peer shutdown)

[Tree] (config>service>vprn>subscriber-interface shutdown)

[Tree] (config>subscr-mgmt>sub-mcac-policy shutdown)

[Tree] (config>aaa>wpp>portal-groups>portal-group shutdown)

[Tree] (config>service>vprn>sub-if>grp-if shutdown)

[Tree] (config>service>vprn>red-if>spoke-sdp shutdown)

[Tree] (config>service>ies>sub-if>grp-if>data-trigger shutdown)

[Tree] (config>service>vprn>sub-if>grp-if>data-trigger shutdown)

[Tree] (config>service>ies>sub-if>grp-if>srrp shutdown)

[Tree] (config>redundancy>multi-chassis>peer>mc-lag shutdown)

[Tree] (config>service>vprn>redundant-interface shutdown)

[Tree] (config>service>vpls>gsmp shutdown)

[Tree] (config>service>vprn>sub-if>grp-if>wpp>portals shutdown)

[Tree] (config>service>ies>sub-if>grp-if>arp-host shutdown)

[Tree] (config>redundancy>multi-chassis>peer>sync shutdown)

[Tree] (config>service>ies>sub-if>grp-if>gtp-parameters shutdown)

[Tree] (config>service>ies>sub-if>grp-if>wpp shutdown)

[Tree] (config>service>vpls>sap>sub-sla-mgmt shutdown)

[Tree] (config>aaa>route-downloader shutdown)

[Tree] (config>service>vpls>gsmp>group shutdown)

[Tree] (config>service>vprn>sub-if>grp-if>gtp-parameters shutdown)

[Tree] (config>service>vprn>sub-if>grp-if>srrp shutdown)

[Tree] (config>subscr-mgmt>sub-ident-pol>tertiary shutdown)

[Tree] (config>subscr-mgmt>sub-ident-pol>secondary shutdown)

[Tree] (config>service>ies>subscriber-interface shutdown)

[Tree] (config>subscr-mgmt>sub-ident-pol>primary shutdown)

[Tree] (config>service>vprn>sub-if>grp-if>wpp shutdown)

[Tree] (config>service>vpls>gsmp>group>neighbor shutdown)

Full Context

configure aaa diameter node peer shutdown

configure redundancy multi-chassis peer shutdown

configure service vprn subscriber-interface shutdown

configure subscriber-mgmt sub-mcac-policy shutdown

configure aaa wpp portal-groups portal-group shutdown

configure service vprn subscriber-interface group-interface shutdown

configure service vprn redundant-interface spoke-sdp shutdown

configure service ies subscriber-interface group-interface data-trigger shutdown

configure service vprn subscriber-interface group-interface data-trigger shutdown

configure service ies subscriber-interface group-interface srrp shutdown

configure redundancy multi-chassis peer mc-lag shutdown

configure service vprn redundant-interface shutdown

configure service vpls gsmp shutdown

configure service vprn subscriber-interface group-interface wpp portals shutdown

configure service ies subscriber-interface group-interface arp-host shutdown

configure redundancy multi-chassis peer sync shutdown

configure service ies subscriber-interface group-interface gtp-parameters shutdown

configure service ies subscriber-interface group-interface wpp shutdown

configure service vpls sap sub-sla-mgmt shutdown

configure aaa route-downloader shutdown

configure service vpls gsmp group shutdown

configure service vprn subscriber-interface group-interface gtp-parameters shutdown

configure service vprn subscriber-interface group-interface srrp shutdown

configure subscriber-mgmt sub-ident-policy tertiary shutdown

configure subscriber-mgmt sub-ident-policy secondary shutdown

configure service ies subscriber-interface shutdown

configure subscriber-mgmt sub-ident-policy primary shutdown

configure service vprn subscriber-interface group-interface wpp shutdown

configure service vpls gsmp group neighbor shutdown

Description

The shutdown command administratively disables the entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. Many entities must be explicitly enabled using the no shutdown command.

The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they can be deleted.

Unlike other commands and parameters where the default state is not indicated in the configuration file, shutdown and no shutdown are always indicated in system generated configuration files.

Shutting down a subscriber interface on a 7750 SR will operationally shut down all child group interfaces and SAPs. Shutting down a group interface on a 7750 SR will operationally shut down all SAPs that are part of that group-interface.

The no form of this command puts an entity into the administratively enabled state.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

configure service ies subscriber-interface group-interface wpp shutdown
configure service vprn subscriber-interface group-interface wpp shutdown
configure service vprn subscriber-interface group-interface data-trigger shutdown
configure service vpls sap sub-sla-mgmt shutdown
configure service vprn subscriber-interface group-interface srrp shutdown
configure subscriber-mgmt sub-ident-policy secondary shutdown
configure aaa route-downloader shutdown
configure service ies subscriber-interface group-interface srrp shutdown
configure service ies subscriber-interface group-interface data-trigger shutdown
configure service vprn subscriber-interface group-interface shutdown
configure service vprn redundant-interface spoke-sdp shutdown
configure service ies subscriber-interface group-interface arp-host shutdown
configure service vprn redundant-interface shutdown
configure subscriber-mgmt sub-ident-policy tertiary shutdown
configure service ies subscriber-interface shutdown
configure subscriber-mgmt sub-ident-policy primary shutdown
configure service vprn subscriber-interface shutdown
configure aaa wpp portal-groups portal-group shutdown
configure aaa diameter node peer shutdown

All

configure redundancy multi-chassis peer mc-lag shutdown
configure service vpls gsmp shutdown
configure redundancy multi-chassis peer sync shutdown
configure redundancy multi-chassis peer shutdown
configure service vpls gsmp group shutdown
configure service vpls gsmp group neighbor shutdown

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s

configure subscriber-mgmt sub-mcac-policy shutdown

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>vprn>ntp shutdown)

[Tree] (config>service>vprn>red-if>spoke-sdp>control-channel-status shutdown)

[Tree] (config>service>vprn>isis>if shutdown)

[Tree] (config>service>vprn>igmp shutdown)

[Tree] (config>service>vprn>ospf3>area>if shutdown)

[Tree] (config>service>vprn>red-if shutdown)

[Tree] (config>service>vprn>msdp shutdown)

[Tree] (config>service>vprn>bgp>group>neighbor shutdown)

[Tree] (config>service>vprn>pim shutdown)

[Tree] (config>service>vprn shutdown)

[Tree] (config>service>vprn>bgp-ipvpn>srv6 shutdown)

[Tree] (config>service>vprn>msdp>group>peer shutdown)

[Tree] (config>service>vprn>red-if>spoke-sdp shutdown)

[Tree] (config>service>vprn>log>log-id shutdown)

[Tree] (config>service>vprn>igmp-trk shutdown)

[Tree] (config>service>vprn>pim>if shutdown)

[Tree] (config>service>vprn>aaa>rmt-srv>radius shutdown)

[Tree] (config>service>vprn>rip>group shutdown)

[Tree] (config>service>vprn>if>vrrp shutdown)

[Tree] (config>service>vprn>nw-if>eth-cfm>mep shutdown)

[Tree] (config>service>vprn>igmp>if shutdown)

[Tree] (config>service>vprn>aarp-interface>spoke-sdp shutdown)

[Tree] (config>service>vprn>ospf3>area>virtual-link shutdown)

[Tree] (config>service>vprn>if>ipv6>vrrp shutdown)

[Tree] (config>service>vprn>l2tpv3 shutdown)

[Tree] (config>service>vprn>aarp-interface shutdown)

[Tree] (config>service>vprn>ospf>area>sham-link shutdown)

[Tree] (config>service>vprn>nw-if shutdown)

[Tree] (config>service>vprn>if>sap>static-host shutdown)

[Tree] (config>service>vprn>ospf shutdown)

[Tree] (config>service>vprn>bgp shutdown)

[Tree] (config>service>vprn>isis shutdown)

[Tree] (config>service>vprn>igmp>if>mcac>mc-constraints shutdown)

[Tree] (config>service>vprn>igmp>if>mcac shutdown)

[Tree] (config>service>vprn>l2tp>tunnel shutdown)

[Tree] (config>service>vprn>igmp>grp-if>mcac>mc-constraints shutdown)

[Tree] (config>service>vprn>bgp-ipvpn>mpls shutdown)

[Tree] (config>service>vprn>bgp>group shutdown)

[Tree] (config>service>vprn>mld>grp-if>mcac>mc-constraints shutdown)

[Tree] (config>service>vprn>mvpn>provider-tunnel>inclusive>pim shutdown)

[Tree] (config>service>vprn>router-advert>if shutdown)

[Tree] (config>service>vprn>gsmp>group shutdown)

[Tree] (config>service>vprn>gsmp>group>neighbor shutdown)

[Tree] (config>service>vprn>if shutdown)

[Tree] (config>service>vprn>rip shutdown)

[Tree] (config>service>vprn>if>sap>ipsec-tunnel shutdown)

[Tree] (config>service>vprn>pim>if>mcac>mc-constraints shutdown)

[Tree] (config>service>vprn>msdp>peer shutdown)

[Tree] (config>service>vprn>ospf>area>virtual-link shutdown)

[Tree] (config>service>vprn>gsmp shutdown)

[Tree] (config>service>vprn>bgp-evpn>mpls shutdown)

[Tree] (config>service>vprn>pim>rp>bsr-candidate shutdown)

[Tree] (config>service>vprn>mld>if>mcac>mc-constraints shutdown)

[Tree] (config>service>vprn>pim>rp>ipv6>rp-candidate shutdown)

[Tree] (config>service>vprn>msdp>group shutdown)

[Tree] (config>service>vprn>pim>rp>ipv6>bsr-candidate shutdown)

[Tree] (config>service>vprn>if>sap shutdown)

[Tree] (config>service>vprn>rip>group>neighbor shutdown)

[Tree] (config>service>vprn>ospf>area>if shutdown)

[Tree] (config>service>vprn>bgp-evpn>vxlan shutdown)

[Tree] (config>service>vprn>l2tp shutdown)

[Tree] (config>system>security>radius shutdown)

[Tree] (config>service>vprn>ospf3 shutdown)

[Tree] (config>service>vprn>pim>rp>ipv6>embedded-rp shutdown)

Full Context

configure service vprn ntp shutdown

configure service vprn redundant-interface spoke-sdp control-channel-status shutdown

configure service vprn isis interface shutdown

configure service vprn igmp shutdown

configure service vprn ospf3 area interface shutdown

configure service vprn redundant-interface shutdown

configure service vprn msdp shutdown

configure service vprn bgp group neighbor shutdown

configure service vprn pim shutdown

configure service vprn shutdown

configure service vprn bgp-ipvpn segment-routing-v6 shutdown

configure service vprn msdp group peer shutdown

configure service vprn redundant-interface spoke-sdp shutdown

configure service vprn log log-id shutdown

configure service vprn igmp-host-tracking shutdown

configure service vprn pim interface shutdown

configure service vprn aaa remote-servers radius shutdown

configure service vprn rip group shutdown

configure service vprn interface vrrp shutdown

configure service vprn nw-if eth-cfm mep shutdown

configure service vprn igmp interface shutdown

configure service vprn aarp-interface spoke-sdp shutdown

configure service vprn ospf3 area virtual-link shutdown

configure service vprn interface ipv6 vrrp shutdown

configure service vprn l2tpv3 shutdown

configure service vprn aarp-interface shutdown

configure service vprn ospf area sham-link shutdown

configure service vprn network-interface shutdown

configure service vprn interface sap static-host shutdown

configure service vprn ospf shutdown

configure service vprn bgp shutdown

configure service vprn isis shutdown

configure service vprn igmp interface mcac mc-constraints shutdown

configure service vprn igmp interface mcac shutdown

configure service vprn l2tp tunnel shutdown

configure service vprn igmp group-interface mcac mc-constraints shutdown

configure service vprn bgp-ipvpn mpls shutdown

configure service vprn bgp group shutdown

configure service vprn mld group-interface mcac mc-constraints shutdown

configure service vprn mvpn provider-tunnel inclusive pim shutdown

configure service vprn router-advertisement interface shutdown

configure service vprn gsmp group shutdown

configure service vprn gsmp group neighbor shutdown

configure service vprn interface shutdown

configure service vprn rip shutdown

configure service vprn interface sap ipsec-tunnel shutdown

configure service vprn pim interface mcac mc-constraints shutdown

configure service vprn msdp peer shutdown

configure service vprn ospf area virtual-link shutdown

configure service vprn gsmp shutdown

configure service vprn bgp-evpn mpls shutdown

configure service vprn pim rp bsr-candidate shutdown

configure service vprn mld interface mcac mc-constraints shutdown

configure service vprn pim rp ipv6 rp-candidate shutdown

configure service vprn msdp group shutdown

configure service vprn pim rp ipv6 bsr-candidate shutdown

configure service vprn interface sap shutdown

configure service vprn rip group neighbor shutdown

configure service vprn ospf area interface shutdown

configure service vprn bgp-evpn vxlan shutdown

configure service vprn l2tp shutdown

configure system security radius shutdown

configure service vprn ospf3 shutdown

configure service vprn pim rp ipv6 embedded-rp shutdown

Description

This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.

The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.

The no form of this command places the entity into an administratively enabled state.

If the AS number was previously changed, the BGP AS number inherits the new value.

Platforms

All

configure service vprn mvpn provider-tunnel inclusive pim shutdown
configure service vprn ospf shutdown
configure service vprn msdp group shutdown
configure service vprn rip group shutdown
configure service vprn interface sap shutdown
configure service vprn igmp interface mcac mc-constraints shutdown
configure service vprn aaa remote-servers radius shutdown
configure service vprn ospf3 area virtual-link shutdown
configure service vprn ntp shutdown
configure service vprn msdp group peer shutdown
configure service vprn igmp interface shutdown
configure service vprn pim rp ipv6 embedded-rp shutdown
configure service vprn interface ipv6 vrrp shutdown
configure service vprn ospf area virtual-link shutdown
configure service vprn msdp peer shutdown
configure system security radius shutdown
configure service vprn shutdown
configure service vprn ospf3 area interface shutdown
configure service vprn isis interface shutdown
configure service vprn pim shutdown
configure service vprn log log-id shutdown
configure service vprn ospf area sham-link shutdown
configure service vprn rip group neighbor shutdown
configure service vprn gsmp shutdown
configure service vprn igmp shutdown
configure service vprn mld interface mcac mc-constraints shutdown
configure service vprn msdp shutdown
configure service vprn ospf3 shutdown
configure service vprn router-advertisement interface shutdown
configure service vprn bgp-evpn mpls shutdown
configure service vprn igmp interface mcac shutdown
configure service vprn ospf area interface shutdown
configure service vprn gsmp group shutdown
configure service vprn bgp shutdown
configure service vprn bgp group shutdown
configure service vprn pim interface mcac mc-constraints shutdown
configure service vprn pim rp bsr-candidate shutdown
configure service vprn bgp group neighbor shutdown
configure service vprn network-interface shutdown
configure service vprn bgp-ipvpn mpls shutdown
configure service vprn isis shutdown
configure service vprn pim rp ipv6 bsr-candidate shutdown
configure service vprn interface shutdown
configure service vprn gsmp group neighbor shutdown
configure service vprn rip shutdown
configure service vprn pim rp ipv6 rp-candidate shutdown
configure service vprn pim interface shutdown
configure service vprn interface vrrp shutdown

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

configure service vprn mld group-interface mcac mc-constraints shutdown
configure service vprn igmp-host-tracking shutdown
configure service vprn l2tp shutdown
configure service vprn redundant-interface spoke-sdp control-channel-status shutdown
configure service vprn redundant-interface spoke-sdp shutdown
configure service vprn igmp group-interface mcac mc-constraints shutdown
configure service vprn interface sap static-host shutdown
configure service vprn redundant-interface shutdown

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

configure service vprn bgp-ipvpn segment-routing-v6 shutdown

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

configure service vprn aarp-interface shutdown
configure service vprn aarp-interface spoke-sdp shutdown
configure service vprn interface sap ipsec-tunnel shutdown

7750 SR-1, 7750 SR-s

configure service vprn bgp-evpn vxlan shutdown

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>vpls>sap>arp-host shutdown)

[Tree] (config>service>vpls>sap shutdown)

[Tree] (config>service>vpls>spoke-sdp shutdown)

[Tree] (config>service>vpls>mesh-sdp shutdown)

[Tree] (config>service>ies>if>sap shutdown)

[Tree] (config>service>vprn shutdown)

[Tree] (config>service>vpls shutdown)

[Tree] (config>service>vpls>wlan-gw shutdown)

Full Context

configure service vpls sap arp-host shutdown

configure service vpls sap shutdown

configure service vpls spoke-sdp shutdown

configure service vpls mesh-sdp shutdown

configure service ies interface sap shutdown

configure service vprn shutdown

configure service vpls shutdown

configure service vpls wlan-gw shutdown

Description

Unlike other commands and parameters where the default state is not indicated in the configuration file, shutdown and no shutdown are always indicated in system-generated configuration files.

Default administrative states for services and service entities is described below in Special Cases.

The no form of this command places the entity into an administratively enabled state.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

configure service vpls sap arp-host shutdown

All

configure service vpls mesh-sdp shutdown
configure service ies interface sap shutdown
configure service vpls shutdown
configure service vprn shutdown
configure service vpls spoke-sdp shutdown
configure service vpls sap shutdown

7750 SR, 7750 SR-e, 7750 SR-s, VSR

configure service vpls wlan-gw shutdown

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>vpls>mrp shutdown)

[Tree] (config>service>vpls>sap>eth-cfm>mep shutdown)

[Tree] (config>service>vpls>sap>spb shutdown)

[Tree] (config>service>vpls>spb>level shutdown)

[Tree] (config>service>vpls>mld-snooping>mvr shutdown)

[Tree] (config>service>vpls>sap>l2tpv3-session shutdown)

[Tree] (config>service>vpls>mac-notification shutdown)

[Tree] (config>service>vpls>igmp-snooping shutdown)

[Tree] (config>service>vpls>spoke-sdp>spb shutdown)

[Tree] (config>service>vpls>spoke-sdp>stp shutdown)

[Tree] (config>service>vpls>spoke-sdp>eth-cfm>mep shutdown)

[Tree] (config>service>vpls>mrp>mvrp shutdown)

[Tree] (config>service>vpls>mac-move shutdown)

[Tree] (config>service>vpls>eth-cfm>mep shutdown)

[Tree] (config>service>vpls>spoke-sdp shutdown)

[Tree] (config>service>vpls>mld-snooping shutdown)

[Tree] (config>service>vpls>igmp-snooping>mvr shutdown)

[Tree] (config>service>vpls>bgp-ad shutdown)

[Tree] (config>service>vpls>mesh-sdp>eth-cfm>mep shutdown)

[Tree] (config>service>vpls>sap>igmp-snooping>mcac>mc-constraints shutdown)

[Tree] (config>service>vpls>sap>mld-snooping>mcac>mc-constraints shutdown)

[Tree] (config>service>vpls>sap>stp shutdown)

[Tree] (config>service>vpls>bind>evpn-mcast-gateway shutdown)

[Tree] (config>service>vpls>sap>dhcp>proxy shutdown)

[Tree] (config>service>vpls>interface shutdown)

[Tree] (config>service>vpls>stp shutdown)

Full Context

configure service vpls mrp shutdown

configure service vpls sap eth-cfm mep shutdown

configure service vpls sap spb shutdown

configure service vpls spb level shutdown

configure service vpls mld-snooping mvr shutdown

configure service vpls sap l2tpv3-session shutdown

configure service vpls mac-notification shutdown

configure service vpls igmp-snooping shutdown

configure service vpls spoke-sdp spb shutdown

configure service vpls spoke-sdp stp shutdown

configure service vpls spoke-sdp eth-cfm mep shutdown

configure service vpls mrp mvrp shutdown

configure service vpls mac-move shutdown

configure service vpls eth-cfm mep shutdown

configure service vpls spoke-sdp shutdown

configure service vpls mld-snooping shutdown

configure service vpls igmp-snooping mvr shutdown

configure service vpls bgp-ad shutdown

configure service vpls mesh-sdp eth-cfm mep shutdown

configure service vpls sap igmp-snooping mcac mc-constraints shutdown

configure service vpls sap mld-snooping mcac mc-constraints shutdown

configure service vpls sap stp shutdown

configure service vpls allow-ip-int-bind evpn-mcast-gateway shutdown

configure service vpls sap dhcp proxy-server shutdown

configure service vpls interface shutdown

configure service vpls stp shutdown

Description

This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.

The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.

The no form of this command places the entity into an administratively enabled state.

Platforms

All

configure service vpls allow-ip-int-bind evpn-mcast-gateway shutdown
configure service vpls bgp-ad shutdown
configure service vpls igmp-snooping mvr shutdown
configure service vpls spoke-sdp spb shutdown
configure service vpls sap dhcp proxy-server shutdown
configure service vpls spoke-sdp stp shutdown
configure service vpls sap stp shutdown
configure service vpls mrp mvrp shutdown
configure service vpls spoke-sdp shutdown
configure service vpls stp shutdown
configure service vpls mrp shutdown
configure service vpls interface shutdown
configure service vpls mld-snooping shutdown
configure service vpls sap igmp-snooping mcac mc-constraints shutdown
configure service vpls mac-notification shutdown
configure service vpls mld-snooping mvr shutdown
configure service vpls mac-move shutdown
configure service vpls sap spb shutdown
configure service vpls sap mld-snooping mcac mc-constraints shutdown
configure service vpls sap l2tpv3-session shutdown
configure service vpls igmp-snooping shutdown
configure service vpls spb level shutdown

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

configure service vpls spoke-sdp eth-cfm mep shutdown
configure service vpls sap eth-cfm mep shutdown
configure service vpls mesh-sdp eth-cfm mep shutdown
configure service vpls eth-cfm mep shutdown

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>vpls>spoke-sdp>spb shutdown)

[Tree] (config>service>vpls>spb shutdown)

[Tree] (config>service>vpls>mrp>mmrp shutdown)

Full Context

configure service vpls spoke-sdp spb shutdown

configure service vpls spb shutdown

configure service vpls mrp mmrp shutdown

Description

This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.

The operational state of the entity is disabled as well as the operational state of any entities contained within.

The no form of this command administratively enables an entity.

SPB Interface — In the config>service>vpls>spb> context, the command disables the IS-IS interface. By default, the IS-IS interface is disabled (shutdown).

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>vprn>sub-if>grp-if>pppoe shutdown)

Full Context

configure service vprn subscriber-interface group-interface pppoe shutdown

Description

The no form of this command places the entity into an administratively enabled state.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>card>xiom shutdown)

[Tree] (config>redundancy>mc>peer>mcr>node>cv shutdown)

[Tree] (config>port>tdm>e3 shutdown)

[Tree] (config>port>ethernet>symbol-monitor shutdown)

[Tree] (config>lag>eth-cfm>mep shutdown)

[Tree] (config>card>xiom>mda shutdown)

[Tree] (config>card>mda shutdown)

[Tree] (config>port>tdm>e1 shutdown)

[Tree] (config>port-xc>pxc shutdown)

[Tree] (config>port>tdm>e1>channel-group shutdown)

[Tree] (config>port>tdm>ds3 shutdown)

[Tree] (config>redundancy>multi-chassis>peer>mc-ep shutdown)

[Tree] (config>port>tdm>ds1 shutdown)

[Tree] (config>redundancy>multi-chassis>peer>mc-ipsec>domain shutdown)

[Tree] (config>port>tdm>ds1>channel-group shutdown)

[Tree] (config>port>ethernet>ssm shutdown)

[Tree] (config>port>ethernet>eth-cfm>mep shutdown)

[Tree] (config>port>ethernet shutdown)

[Tree] (config>card>fp>ingress>mcast-path-management shutdown)

[Tree] (config>card shutdown)

[Tree] (config>port>otu shutdown)

[Tree] (config>port>ethernet>efm-oam shutdown)

[Tree] (config>lag shutdown)

[Tree] (config>port shutdown)

[Tree] (config>port>ethernet>dwl shutdown)

[Tree] (config>redundancy>mc>peer>mcr shutdown)

[Tree] (config>port>ethernet>dampening shutdown)

[Tree] (config>port>sonet-sdh>path shutdown)

[Tree] (config>redundancy>multi-chassis>ipsec-domain shutdown)

[Tree] (config>redundancy>mc>peer>mcr>ring shutdown)

Full Context

configure card xiom shutdown

configure redundancy multi-chassis peer mc-ring ring ring-node connectivity-verify shutdown

configure port tdm e3 shutdown

configure port ethernet symbol-monitor shutdown

configure lag eth-cfm mep shutdown

configure card xiom mda shutdown

configure card mda shutdown

configure port tdm e1 shutdown

configure port-xc pxc shutdown

configure port tdm e1 channel-group shutdown

configure port tdm ds3 shutdown

configure redundancy multi-chassis peer mc-endpoint shutdown

configure port tdm ds1 shutdown

configure redundancy multi-chassis peer mc-ipsec domain shutdown

configure port tdm ds1 channel-group shutdown

configure port ethernet ssm shutdown

configure port ethernet eth-cfm mep shutdown

configure port ethernet shutdown

configure card fp ingress mcast-path-management shutdown

configure card shutdown

configure port otu shutdown

configure port ethernet efm-oam shutdown

configure lag shutdown

configure port shutdown

configure port ethernet down-when-looped shutdown

configure redundancy multi-chassis peer mc-ring shutdown

configure port ethernet dampening shutdown

configure port sonet-sdh path shutdown

configure redundancy multi-chassis ipsec-domain shutdown

configure redundancy multi-chassis peer mc-ring ring shutdown

Description

This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.

The operational state of the entity is disabled as well as the operational state of any entities contained within.

This command is supported on TDM satellite.

The no form of this command administratively enables an entity.

Platforms

7750 SR-1s, 7750 SR-2s, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s

configure card xiom shutdown
configure card xiom mda shutdown

All

configure redundancy multi-chassis peer mc-ring ring ring-node connectivity-verify shutdown
configure card shutdown
configure lag shutdown
configure port shutdown
configure port-xc pxc shutdown
configure redundancy multi-chassis peer mc-endpoint shutdown
configure redundancy multi-chassis peer mc-ring ring shutdown
configure port ethernet dampening shutdown
configure card mda shutdown
configure port ethernet efm-oam shutdown
configure port ethernet ssm shutdown
configure redundancy multi-chassis peer mc-ring shutdown
configure port ethernet down-when-looped shutdown
configure port ethernet shutdown

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

configure port tdm e1 shutdown
configure port tdm e3 shutdown
configure port tdm ds3 shutdown
configure port tdm ds1 channel-group shutdown
configure port tdm e1 channel-group shutdown
configure port tdm ds1 shutdown

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

configure port ethernet symbol-monitor shutdown
configure port sonet-sdh path shutdown
configure port otu shutdown
configure lag eth-cfm mep shutdown
configure port ethernet eth-cfm mep shutdown

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

configure redundancy multi-chassis peer mc-ipsec domain shutdown
configure redundancy multi-chassis ipsec-domain shutdown

7450 ESS, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-7/12/12e, 7750 SR-s, 7950 XRS, VSR

configure card fp ingress mcast-path-management shutdown

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>mcast-mgmt>mcast-rprt-dest shutdown)

Full Context

configure mcast-management mcast-reporting-dest shutdown

Description

The no form of this command places the entity into an administratively enabled state.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>python>python-script shutdown)

[Tree] (config>python>py-policy>cache shutdown)

Full Context

configure python python-script shutdown

configure python python-policy cache shutdown

Description

Shutting down a Python script triggers the system to load and compile the script from the configured location(s). Since the system supports three locations, the primary, secondary and tertiary, the system will try to load the Python script in that order.

Shutting down a Python script will disable the Python script and cause the corresponding packet to pass through without any modification.

The no form of this command enables the cache or policy script.

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>vpls>sap>dyn-svc shutdown)

Full Context

configure service vpls sap dynamic-services shutdown

Description

This command disables or enables data-triggered dynamic services on this capture-sap.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>dynsvc>ladb shutdown)

Full Context

configure service dynamic-services local-auth-db shutdown

Description

This command disables or enables the local authentication database. When disabled, the database cannot be used for authentication.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>dynsvc>ladb>user shutdown)

Full Context

configure service dynamic-services local-auth-db user-name shutdown

Description

This command disables or enables a user name entry in the local authentication database. When disabled, the entry is not matched.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>subscr-mgmt>svlan-statistics shutdown)

Full Context

configure subscriber-mgmt svlan-statistics shutdown

Description

Unlike other commands and parameters where the default state is not indicated in the configuration file, shutdown and no shutdown are always indicated in system-generated configuration files.

The no form of this command places the entity into an administratively enabled state.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>subscr-mgmt>isa-svc-chain>evpn shutdown)

[Tree] (config>subscr-mgmt>isa-svc-chain>vas-filter shutdown)

Full Context

configure subscriber-mgmt isa-service-chaining evpn shutdown

configure subscriber-mgmt isa-service-chaining vas-filter shutdown

Description

This command administratively disables the entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. Many entities must be explicitly enabled using the no shutdown command. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.

Unlike other commands and parameters where the default state is not indicated in the configuration file, shutdown and no shutdown are always indicated in system-generated configuration files.

The no form of this command puts an entity into the administratively enabled state.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>subscr-mgmt>diam-appl-plcy>gy>ccrt-replay shutdown)

[Tree] (config>subscr-mgmt>diam-appl-plcy>gx>ccrt-replay shutdown)

Full Context

configure subscriber-mgmt diameter-application-policy gy ccrt-replay shutdown

configure subscriber-mgmt diameter-application-policy gx ccrt-replay shutdown

Description

This command, enables or disables the CCR-T replay function for all Gx or Gy sessions that belong to the diameter application policy. Sessions in CCR-T replay are dropped when ccrt-replay is shut down.

The no form of this command enables the CCR-T replay function.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>ies>sub-if>grp-if>ipv6>rtr-sol shutdown)

Full Context

configure service ies subscriber-interface group-interface ipv6 router-solicit shutdown

Description

This command enables SLAAC triggered host creation.

The no form of this command disables SLAAC triggered host creation.

Default

no shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>mpls>lsp-history shutdown)

Full Context

configure router mpls lsp-history shutdown

Description

This command enables the collection of up to the last 100 significant events for each RSVP-TE and SR-TE LSP.

A shutdown of the lsp-history pauses the collection of events, but does not remove previously collected events from memory.

The no form of this command disables the collection of significant events for LSPs.

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>aaa>radius-srv-plcy>servers>health-check>test-account shutdown)

Full Context

configure aaa radius-server-policy servers health-check test-account shutdown

Description

This command disables the test account that probes the RADIUS server.

The no form of this command enables the capability.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

shutdown sap-id [create]

no shutdown sap-id

Context

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>l2-access-points>l2-ap shutdown)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>l2-access-points>l2-ap shutdown)

Full Context

configure service ies subscriber-interface group-interface wlan-gw l2-access-points l2-ap shutdown

configure service vprn subscriber-interface group-interface wlan-gw l2-access-points l2-ap shutdown

Description

This command administratively enables this SAP to begin accepting Layer 2 packets for WIFI offloading.

The no form of this command disables this SAP.

Default

shutdown

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>subscr-mgmt>pfcp-association shutdown)

Full Context

configure subscriber-mgmt pfcp-association shutdown

Description

This command administratively enables or disables the PFCP association.

When administratively enabled, the system will try to maintain an active PFCP association with the configured peer. While no association is established, it will continue to retry setting up the association using the association-setup-retry configuration.

Shutting down a subscriber interface on a 7750 SR operationally shuts down all child group interfaces and SAPs. Shutting down a group interface on a 7750 SR operationally shuts down all SAPs that are part of that group interface.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (cfg>sys>pwr-mgmt>peq shutdown)

Full Context

configure system power-management peq shutdown

Description

This command administratively enables/disables the APEQ.

Platforms

7750 SR-12e, 7950 XRS

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>card>fp>egress>wred-queue-control shutdown)

Full Context

configure card fp egress wred-queue-control shutdown

Description

This command enables or disables egress WRED queue support on the forwarding plane. By default, WRED queue support is disabled (shutdown). While disabled, the various wred-queue-control commands may be executed on the forwarding plane and SAP egress QoS policies and egress queue group templates with wred-queue enabled may be applied to egress SAPs and port, respectively. The forwarding plane will allocate WRED pools to the WRED queues and the appropriate WRED mega-pool size and CBS reserve size will be calculated, but the WRED mega-pool will be empty and all buffers will be allocated to the default mega-pool. Each WRED queue will be mapped to its appropriate default pool.

Once the no shutdown command is executed, the calculated WRED mega-pool buffers will be moved from the default mega-pool to the WRED mega-pool. The WRED mega-pool CBS reserve size will be applied and each egress WRED queue will be moved from its default mega-pool buffer pool to its WRED pool within the WRED mega-pool hierarchy.

The no form of this command enables WRED queuing on an egress forwarding plane.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>anysec>tnl-enc>enc-grp>peer shutdown)

Full Context

configure anysec tunnel-encryption encryption-group peer shutdown

Description

This command shuts down the ANYsec and encryption to the peer.

Note: When ANYsec is shutdown to the peer, clear traffic is forwarded on the LSP to the peer.

The no form of this command enables ANYsec and encryption to the peer.

Default

shutdown

Platforms

7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>anysec>tnl-enc>enc-grp shutdown)

Full Context

configure anysec tunnel-encryption encryption-group shutdown

Description

This command shuts down the ANYsec on the encryption group.

CAUTION: Clear traffic is forwarded on all the LSPs in the encryption group.

The no form of this command enables ANYsec and encryption for the encryption group.

Default

shutdown

Platforms

7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>anysec>tnl-enc>sec-term-pol shutdown)

Full Context

configure anysec tunnel-encryption security-termination-policy shutdown

Description

This command places the tunnel in an operationally down state and causes traffic to drop. However, ANYsec remains enabled.

The no form of this command places the tunnel in an operationally up state.

Default

shutdown

Platforms

7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>port>ethernet>efm-oam>link-monitoring shutdown)

Full Context

configure port ethernet efm-oam link-monitoring shutdown

Description

This command enables the link monitoring function. Issuing a no shutdown will start the process. Issuing a shutdown will clear any previously established negative conditions that were a result of the link monitoring process on this port and all collected data. This also controls the advertising capabilities.

The no form of this command activates the link monitoring function.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame-seconds shutdown)

[Tree] (config>port>ethernet>efm-oam>link-mon>errored-symbols shutdown)

[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame-period shutdown)

[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame shutdown)

Full Context

configure port ethernet efm-oam link-monitoring errored-frame-seconds shutdown

configure port ethernet efm-oam link-monitoring errored-symbols shutdown

configure port ethernet efm-oam link-monitoring errored-frame-period shutdown

configure port ethernet efm-oam link-monitoring errored-frame shutdown

Description

This command enables or disables the local counting, thresholding and actions associated with this type of local monitor. Peer received errors are not controlled by this command. Reaction to peer messaging is defined in the peer-rdi-rx hierarchy.

The no form of this command activates the local monitoring function and actions for the event.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>port>ethernet>dot1x>macsec>sub-port shutdown)

Full Context

configure port ethernet dot1x macsec sub-port shutdown

Description

This command shuts down the MACsec under this sub-port specifically, including MKA negotiation. In the shutdown state, this port is not MACsec capable and all PDUs will be transmitted and expected without encryption and authentication.

The no form of this command puts the port in MACsec-enabled mode. A valid CA, different than any other CA configured on any other sub-port of this port and also a max-peer value larger than 0 must be configured. In MACsec-enabled mode, packets are sent in cleartext until the MKA session is up, and if the rx-must-be-encrypted is set on the port, all incoming packets with no MACsec encapsulations are dropped.

Default

shutdown

Platforms

All

shutdown

Syntax

shutdown

no shutdown

Context

[Tree] (config>lag>bfd>family shutdown)

Full Context

configure lag bfd family shutdown

Description

This command disables micro BFD sessions for this address family.

The no form of this command re-enables micro BFD sessions for this address family.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>sdp>binding>pw-port shutdown)

[Tree] (config>service>sdp>class-forwarding shutdown)

[Tree] (config>service>sdp shutdown)

[Tree] (config>service>pw-template>stp shutdown)

[Tree] (config>service>sdp>keep-alive shutdown)

[Tree] (config>service>pw-routing>hop shutdown)

[Tree] (config>eth-tunnel>path>eth-cfm>mep shutdown)

[Tree] (config>eth-ring>path shutdown)

Full Context

configure service sdp binding pw-port shutdown

configure service sdp class-forwarding shutdown

configure service sdp shutdown

configure service pw-template stp shutdown

configure service sdp keep-alive shutdown

configure service pw-routing hop shutdown

configure eth-tunnel path eth-cfm mep shutdown

configure eth-ring path shutdown

Description

This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.

The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.

The no form of this command places the entity into an administratively enabled state.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

configure service sdp binding pw-port shutdown
configure eth-ring path shutdown
configure eth-tunnel path eth-cfm mep shutdown

All

configure service pw-template stp shutdown
configure service sdp class-forwarding shutdown
configure service sdp shutdown
configure service sdp keep-alive shutdown

shutdown

Syntax

shutdown

[no] shutdown

Context

[Tree] (config>service>vpls>bgp-evpn>vxlan shutdown)

[Tree] (config>service>epipe>bgp-evpn>srv6 shutdown)

[Tree] (config>service>epipe>bgp-evpn>mpls shutdown)

[Tree] (config>service>epipe>bgp-evpn>vxlan shutdown)

[Tree] (config>service>vpls>bgp-evpn>mpls shutdown)

[Tree] (config>service>vpls>bgp-evpn>srv6 shutdown)

Full Context

configure service vpls bgp-evpn vxlan shutdown

configure service epipe bgp-evpn segment-routing-v6 shutdown

configure service epipe bgp-evpn mpls shutdown

configure service epipe bgp-evpn vxlan shutdown

configure service vpls bgp-evpn mpls shutdown

configure service vpls bgp-evpn segment-routing-v6 shutdown

Description

This command controls the administrative state of EVPN-MPLS, EVPN-VXLAN, or EVPN-SRv6 in the service.

Platforms

All

configure service epipe bgp-evpn mpls shutdown
configure service vpls bgp-evpn mpls shutdown
configure service vpls bgp-evpn vxlan shutdown
configure service epipe bgp-evpn vxlan shutdown

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

configure service vpls bgp-evpn segment-routing-v6 shutdown
configure service epipe bgp-evpn segment-routing-v6 shutdown

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>vpls>provider-tunnel>inclusive shutdown)

Full Context

configure service vpls provider-tunnel inclusive shutdown

Description

This command administratively enables and disables the service.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>vpls>proxy-arp shutdown)

[Tree] (config>service>vpls>proxy-nd shutdown)

Full Context

configure service vpls proxy-arp shutdown

configure service vpls proxy-nd shutdown

Description

This command enables and disables the proxy-ARP and proxy-nd functionality. ARP/GARP/ND messages will be snooped and redirected to the CPM for lookup in the proxy-ARP/proxy-ND table. The proxy-ARP/proxy-ND table is populated with IP->MAC pairs received from different sources (EVPN, static, dynamic). When the shutdown command is issued, it flushes the dynamic/EVPN dup proxy-ARP/proxy-ND table entries and instructs the system to stop snooping ARP/ND frames. All the static entries are kept in the table as inactive, regardless of their previous Status.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>system>bgp-evpn>eth-seg shutdown)

Full Context

configure service system bgp-evpn ethernet-segment shutdown

Description

This command changes the administrative status of the Ethernet-Segment.

The user can do no shutdown only when esi, multi-homing and lag/port/sdp are configured. If the Ethernet-Segment or the corresponding lag/port/sdp shutdown, the Ethernet-Segment route and the AD per-ES routes will be withdrawn. No changes are allowed when the Ethernet-Segment is no shutdown.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>epipe>site shutdown)

[Tree] (config>service>epipe>spoke-sdp>eth-cfm>mep shutdown)

[Tree] (config>service>epipe>spoke-sdp shutdown)

[Tree] (config>service>ipipe>spoke-sdp shutdown)

[Tree] (config>service>cpipe shutdown)

[Tree] (config>service>epipe shutdown)

[Tree] (config>service>cpipe>sap shutdown)

[Tree] (config>service>cpipe>spoke-sdp shutdown)

[Tree] (config>service>epipe>sap>l2tpv3-session shutdown)

[Tree] (config>service>epipe>sap>eth-cfm>mep shutdown)

[Tree] (config>service>epipe>sap shutdown)

[Tree] (config>service>ipipe shutdown)

[Tree] (config>service>epipe>pw-port shutdown)

[Tree] (config>service>ipipe>sap shutdown)

Full Context

configure service epipe site shutdown

configure service epipe spoke-sdp eth-cfm mep shutdown

configure service epipe spoke-sdp shutdown

configure service ipipe spoke-sdp shutdown

configure service cpipe shutdown

configure service epipe shutdown

configure service cpipe sap shutdown

configure service cpipe spoke-sdp shutdown

configure service epipe sap l2tpv3-session shutdown

configure service epipe sap eth-cfm mep shutdown

configure service epipe sap shutdown

configure service ipipe shutdown

configure service epipe pw-port shutdown

configure service ipipe sap shutdown

Description

This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.

The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.

The no form of this command places the entity into an administratively enabled state.

Platforms

All

configure service epipe sap shutdown
configure service ipipe sap shutdown
configure service epipe spoke-sdp shutdown
configure service epipe shutdown
configure service epipe sap l2tpv3-session shutdown
configure service ipipe spoke-sdp shutdown
configure service epipe pw-port shutdown
configure service ipipe shutdown
configure service epipe site shutdown

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

configure service cpipe spoke-sdp shutdown
configure service cpipe sap shutdown
configure service epipe spoke-sdp eth-cfm mep shutdown
configure service epipe sap eth-cfm mep shutdown
configure service cpipe shutdown

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>epipe>bgp-vpws shutdown)

Full Context

configure service epipe bgp-vpws shutdown

Description

This command administratively enables/disables the local BGP VPWS instance. On de-activation an MP-UNREACH-NLRI is sent for the local NLRI.

The no form of this command enables the BGP VPWS addressing and the related BGP advertisement. The associated BGP VPWS MP-REACH-NLRI will be advertised in an update message and the corresponding received NLRIs must be considered to instantiate the data plane.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>vpls>bgp-vpls shutdown)

Full Context

configure service vpls bgp-vpls shutdown

Description

This command administratively enables/disables the local BGP VPLS instance. On de-activation an MP-UNREACH-NLRI must be sent for the local NLRI.

The no form of this command enables the BGP VPLS addressing and the related BGP advertisement. The associated BGP VPLS MP-REACH-NLRI will be advertised in an update message and the corresponding received NLRIs must be considered to instantiate the data plane. RT, RD usage: same as in the BGP AD solution, if the values are not configured here, the value of the VPLS-id from under the bgp-ad node is used. If VPLS-id value is not configured either the MH site cannot be activated – i.e. no shutdown returns an error. Same applies if a pseudowire template is not specified under the BGP node.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>ies>if>ipv6>secure-nd shutdown)

Full Context

configure service ies interface ipv6 secure-nd shutdown

Description

This command enables or disables Secure Neighbor Discovery (SeND) on the interface.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>vprn>aaa>rmt-srv>tacplus shutdown)

[Tree] (config>system>security>tacplus shutdown)

Full Context

configure service vprn aaa remote-servers tacplus shutdown

configure system security tacplus shutdown

Description

This command administratively disables the TACACS+ protocol operation. Shutting down the protocol does not remove or change the configuration other than the administrative state.

The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.

The no form of this command administratively enables the protocol which is the default state.

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>vprn>static-route-entry>black-hole shutdown)

[Tree] (config>service>vprn>static-route-entry>indirect shutdown)

[Tree] (config>service>vprn>static-route-entry>grt shutdown)

[Tree] (config>service>vprn>static-route-entry>ipsec-tunnel shutdown)

[Tree] (config>service>vprn>static-route-entry>next-hop shutdown)

Full Context

configure service vprn static-route-entry black-hole shutdown

configure service vprn static-route-entry indirect shutdown

configure service vprn static-route-entry grt shutdown

configure service vprn static-route-entry ipsec-tunnel shutdown

configure service vprn static-route-entry next-hop shutdown

Description

This command causes the static route to be placed in an administratively down state and removed from the active route-table

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>vprn>if>send shutdown)

Full Context

configure service vprn interface ipv6 secure-nd shutdown

Description

This command enables or disables Secure Neighbor Discovery (SeND) on the interface.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>ldp>egr-stats>fec-prefix shutdown)

[Tree] (config>router>ldp>aggregate-prefix-match shutdown)

[Tree] (config>router>ldp>if-params>if>ipv6 shutdown)

[Tree] (config>router>ldp>targ-session>peer-template shutdown)

[Tree] (config>router>ldp>if-params>if>ipv4 shutdown)

[Tree] (config>router>ldp shutdown)

[Tree] (config>router>ldp>if-params>if shutdown)

[Tree] (config>router>ldp>targ-session>peer shutdown)

Full Context

configure router ldp egress-statistics fec-prefix shutdown

configure router ldp aggregate-prefix-match shutdown

configure router ldp interface-parameters interface ipv6 shutdown

configure router ldp targeted-session peer-template shutdown

configure router ldp interface-parameters interface ipv4 shutdown

configure router ldp shutdown

configure router ldp interface-parameters interface shutdown

configure router ldp targeted-session peer shutdown

Description

This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.

The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted. For an LDP interface, the shutdown command exists under the main interface context and under each of the interface IPv4 and IPv6 contexts.

shutdown under the interface context brings down both IPv4 and IPv6 Hello adjacencies and stops Hello transmission in both contexts.
shutdown under the interface IPv4 or IPv6 contexts brings down the Hello adjacency and stops Hello transmission in that context only.

The user can also delete the entire IPv4 or IPv6 context under the interface with the no ipv4 or no ipv6 command which in addition to bringing down the Hello adjacency will delete the configuration.

The no form of this command administratively enables an entity.

Unlike other commands and parameters where the default state is not indicated in the configuration file, the shutdown and no shutdown states are always indicated in system generated configuration files.

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>ldp>targeted-session>auto-rx>ipv4 shutdown)

[Tree] (config>router>ldp>targeted-session>auto-tx>ipv4 shutdown)

Full Context

configure router ldp targeted-session auto-rx ipv4 shutdown

configure router ldp targeted-session auto-tx ipv4 shutdown

Description

This command administratively disables the capabilities associated with automatically sending targeted Hello messages through the auto-tx command or processing targeted Hello messages through the auto-rx command.

The no form of this command administratively enables the capabilities associated with the auto-tx and auto-rx commands.

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>mpls>ingr-stats>p2p-template-lsp shutdown)

[Tree] (config>router>mpls shutdown)

[Tree] (config>router>mpls>lsp>primary shutdown)

[Tree] (config>router>mpls>lsp-template>egress-statistics shutdown)

[Tree] (config>router>mpls>lsp>egress-statistics shutdown)

[Tree] (config>router>mpls>lsp>primary-p2mp-instance shutdown)

[Tree] (config>router>mpls>interface shutdown)

[Tree] (config>router>mpls>lsp>secondary shutdown)

[Tree] (config>router>mpls>ingr-stats>p2mp-template-lsp shutdown)

Full Context

configure router mpls ingress-statistics p2p-template-lsp shutdown

configure router mpls shutdown

configure router mpls lsp primary shutdown

configure router mpls lsp-template egress-statistics shutdown

configure router mpls lsp egress-statistics shutdown

configure router mpls lsp primary-p2mp-instance shutdown

configure router mpls interface shutdown

configure router mpls lsp secondary shutdown

configure router mpls ingress-statistics p2mp-template-lsp shutdown

Description

This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.

The config>router>mpls>ingr-stats>p2mp-template-lsp> shutdown command is supported on the 7750 SR, 7950 XRS, and with VPLS only on the 7450 ESS.

The config>router>mpls>lsp>primary-p2mp-instance> shutdown is not supported on the 7450 ESS.

MPLS is not enabled by default and must be explicitly enabled (no shutdown).

The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.

The no form of this command places the entity into an administratively enabled state.

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>mpls>pce-initiated-lsp>sr-te shutdown)

Full Context

configure router mpls pce-initiated-lsp sr-te shutdown

Description

This command administratively enables or disables the sr-te context for PCE initiated LSPs. A shutdown of the sr-te context under pce-initiated-lsp causes an error to be generated for new PCInitate messages, and existing PCE-initiated LSPs are taken to the oper-down state.

The no form of this command administratively enables the sr-te context for PCE initiated LSP.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>mpls>if>label-map shutdown)

Full Context

configure router mpls interface label-map shutdown

Description

This command disables the label map definition. This drops all packets that match the specified in-label specified in the label-map in-label command.

The no form of this command administratively enables the defined label map action.

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>mpls>lsp-template shutdown)

[Tree] (config>router>mpls>lsp shutdown)

Full Context

configure router mpls lsp-template shutdown

configure router mpls lsp shutdown

Description

This command disables the existing LSP including the primary and any standby secondary paths.

To shutdown only the primary enter the config router mpls lsp lsp-name primary path-name shutdown command.

To shutdown a specific standby secondary enter the config router mpls lsp lsp-name secondary path-name shutdown command. The existing configuration of the LSP is preserved.

Use the no form of this command to restart the LSP. LSPs are created in a shutdown state. Use this command to administratively bring up the LSP.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>rib-api>mpls shutdown)

Full Context

configure router rib-api mpls shutdown

Description

This command disables the programming of tunnel and label FIB entries by the RIB-API gRPC service. It causes all existing tunnel and label FIB entries to be de-programmed from the data path, but they remain in the control plane database.

The no form of this command enables the programming of tunnel and label FIB entries by the RIB-API gRPC service.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>mpls>path shutdown)

Full Context

configure router mpls path shutdown

Description

This command disables the existing LSPs using this path. All services using these LSPs are affected. Binding information, however, is retained in those LSPs. Paths are created in the shutdown state.

The no form of this command administratively enables the path. All LSPs, where this path is defined as primary or defined as standby secondary, are (re)established.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>pcep>pcc shutdown)

[Tree] (config>router>pcep>pce shutdown)

Full Context

configure router pcep pcc shutdown

configure router pcep pce shutdown

Description

This command administratively disables the PCC or PCE process.

The following PCE parameters can only be modified when the PCEP session is shut down:

local-address
keepalive
dead-timer

The unknown-message-rate PCE parameter can be modified without shutting down the PCEP session.

The following PCC parameters can only be modified when the PCEP session is shut down:

local-address
keepalive
dead-timer
peer

The following PCC parameters can be modified without shutting down the PCEP session:

report-path-constraints
unknown-message-rate

Default

shutdown

Platforms

All

configure router pcep pcc shutdown

VSR-NRC

configure router pcep pce shutdown

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>rsvp>interface shutdown)

[Tree] (config>router>rsvp shutdown)

Full Context

configure router rsvp interface shutdown

configure router rsvp shutdown

Description

This command disables the RSVP protocol instance or the RSVP-related functions for the interface. The RSVP configuration information associated with this interface is retained. When RSVP is administratively disabled, all the RSVP sessions are torn down. The existing configuration is retained.

The no form of this command administratively enables RSVP on the interface.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>mpls>fwd-policies>fwd-policy>nh-grp shutdown)

Full Context

configure router mpls forwarding-policies forwarding-policy next-hop-group shutdown

Description

This command shuts down an NHG entry in a forwarding policy.

When an NHG is shut down, it is removed from the data path entry of the forwarding policy.

The no form of this command brings up an NHG entry in a forwarding policy.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>mpls>fwd-policies>fwd-policy shutdown)

Full Context

configure router mpls forwarding-policies forwarding-policy shutdown

Description

This command shuts down the forwarding policy.

The no form of this command enables the forwarding policy.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>mpls>fwd-policies shutdown)

Full Context

configure router mpls forwarding-policies shutdown

Description

This command shuts down the forwarding-policies context; causing all forwarding policies to be removed from the data path, however they remain in the MPLS forwarding database.

The no form of this command enables the forwarding-policies context.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>app-assure>group>policer>tod-override shutdown)

[Tree] (config>app-assure>group>http-notification shutdown)

[Tree] (config>app-assure>group>transit-ip-policy>dhcp shutdown)

[Tree] (config>app-assure>group>cflowd>tcp-perf shutdown)

[Tree] (config>app-assure>group>http-enrich shutdown)

[Tree] (config>service>vprn>aa-interface shutdown)

[Tree] (config>app-assure>group>url-filter shutdown)

[Tree] (config>app-assure>aarp shutdown)

[Tree] (config>app-assure>group>cflowd>comp>template>dynamic-fields shutdown)

[Tree] (config>app-assure>group>certificate-profile shutdown)

[Tree] (config>service>ies>aa-interface>sap shutdown)

[Tree] (config>app-assure>group>statistics>protocol shutdown)

[Tree] (config>app-assure>protocol shutdown)

[Tree] (config>app-assure>group>cflowd>comp shutdown)

[Tree] (config>app-assure>group>aa-sub-cong shutdown)

[Tree] (config>app-assure>group>cflowd>volume shutdown)

[Tree] (config>app-assure>group>cflowd shutdown)

[Tree] (config>app-assure>group>tethering-detection shutdown)

[Tree] (config>app-assure>group>transit-ip-policy>radius shutdown)

[Tree] (config>isa>aa-grp shutdown)

[Tree] (config>app-assure>group>cflowd>volume>template>dynamic-fields shutdown)

[Tree] (config>app-assure>group>wap1x shutdown)

[Tree] (config>app-assure>group>cflowd>tcp-perf>template>dynamic-fields shutdown)

[Tree] (config>app-assure>group>policy>custom-protocol shutdown)

[Tree] (config>service>vprn>aa-interface>sap shutdown)

[Tree] (config>app-assure>group>url-filter>icap>server shutdown)

[Tree] (config>app-assure>group>gtp shutdown)

[Tree] (config>app-assure>group>url-list shutdown)

[Tree] (config>service>ies>aa-interface shutdown)

[Tree] (config>app-assure>group>cflowd>collector shutdown)

[Tree] (config>app-assure>group>policy>app-filter>entry shutdown)

[Tree] (config>app-assure>group>transit-ip-policy>transit-auto-create shutdown)

[Tree] (config>app-assure>group>http-redirect shutdown)

[Tree] (config>app-assure>group>event-log shutdown)

[Tree] (config>app-assure>group>policy>app-qos-policy>entry shutdown)

[Tree] (config>app-assure>group>http-error-redirect shutdown)

[Tree] (config>app-assure>group>dns-ip-cache shutdown)

Full Context

configure application-assurance group policer tod-override shutdown

configure application-assurance group http-notification shutdown

configure application-assurance group transit-ip-policy dhcp shutdown

configure application-assurance group cflowd tcp-performance shutdown

configure application-assurance group http-enrich shutdown

configure service vprn aa-interface shutdown

configure application-assurance group url-filter shutdown

configure application-assurance aarp shutdown

configure application-assurance group cflowd comprehensive template dynamic-fields shutdown

configure application-assurance group certificate-profile shutdown

configure service ies aa-interface sap shutdown

configure application-assurance group statistics protocol shutdown

configure application-assurance protocol shutdown

configure application-assurance group cflowd comprehensive shutdown

configure application-assurance group aa-sub-congestion-detection shutdown

configure application-assurance group cflowd volume shutdown

configure application-assurance group cflowd shutdown

configure application-assurance group tethering-detection shutdown

configure application-assurance group transit-ip-policy radius shutdown

configure isa application-assurance-group shutdown

configure application-assurance group cflowd volume template dynamic-fields shutdown

configure application-assurance group wap1x shutdown

configure application-assurance group cflowd tcp-performance template dynamic-fields shutdown

configure application-assurance group policy custom-protocol shutdown

configure service vprn aa-interface sap shutdown

configure application-assurance group url-filter icap server shutdown

configure application-assurance group gtp shutdown

configure application-assurance group url-list shutdown

configure service ies aa-interface shutdown

configure application-assurance group cflowd collector shutdown

configure application-assurance group policy app-filter entry shutdown

configure application-assurance group transit-ip-policy transit-auto-create shutdown

configure application-assurance group http-redirect shutdown

configure application-assurance group event-log shutdown

configure application-assurance group policy app-qos-policy entry shutdown

configure application-assurance group http-error-redirect shutdown

configure application-assurance group dns-ip-cache shutdown

Description

The shutdown command administratively disables an entity. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>isa>aa-grp shutdown)

[Tree] (config>isa>tunnel-grp shutdown)

[Tree] (config>service>ies>if>sap>ip-tunnel shutdown)

[Tree] (config>ipsec>cert-profile shutdown)

[Tree] (config>service>vprn>if>sap>ipsec-gw shutdown)

[Tree] (config>ipsec>client-db shutdown)

[Tree] (config>service>ies>if>ipsec>ipsec-tunnel shutdown)

[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel shutdown)

[Tree] (config>service>vprn>if>sap>ip-tunnel shutdown)

[Tree] (config>service>ies>if>sap>ipsec-gw>lcl-addr-assign shutdown)

[Tree] (config>service>ies>if>sap>ipsec-gw shutdown)

[Tree] (config>service>ies>if>sap>ipsec-gw>dhcp6 shutdown)

[Tree] (config>ipsec>client-db>client shutdown)

[Tree] (config>service>vprn>if>sap>ipsec-gw>dhcp6 shutdown)

[Tree] (config>redundancy>multi-chassis>peer>mc-ipsec>tunnel-group shutdown)

[Tree] (config>service>vprn>if>sap>ipsec-gw>dhcp shutdown)

[Tree] (config>service>vprn>if>sap>ipsec-gw>lcl-addr-assign shutdown)

[Tree] (config>service>ies>if>sap>ipsec-gw>dhcp shutdown)

Full Context

configure isa application-assurance-group shutdown

configure isa tunnel-group shutdown

configure service ies interface sap ip-tunnel shutdown

configure ipsec cert-profile shutdown

configure service vprn interface sap ipsec-gw shutdown

configure ipsec client-db shutdown

configure service ies interface ipsec ipsec-tunnel shutdown

configure service vprn interface ipsec ipsec-tunnel shutdown

configure service vprn interface sap ip-tunnel shutdown

configure service ies interface sap ipsec-gw local-address-assignment shutdown

configure service ies interface sap ipsec-gw shutdown

configure service ies interface sap ipsec-gw dhcp6 shutdown

configure ipsec client-db client shutdown

configure service vprn interface sap ipsec-gw dhcp6 shutdown

configure redundancy multi-chassis peer mc-ipsec tunnel-group shutdown

configure service vprn interface sap ipsec-gw dhcp shutdown

configure service vprn interface sap ipsec-gw local-address-assignment shutdown

configure service ies interface sap ipsec-gw dhcp shutdown

Description

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

configure service vprn interface sap ipsec-gw local-address-assignment shutdown
configure service ies interface sap ipsec-gw local-address-assignment shutdown
configure isa application-assurance-group shutdown
configure service vprn interface sap ipsec-gw dhcp shutdown
configure ipsec cert-profile shutdown
configure service ies interface sap ipsec-gw dhcp6 shutdown
configure service vprn interface sap ipsec-gw dhcp6 shutdown
configure redundancy multi-chassis peer mc-ipsec tunnel-group shutdown
configure ipsec client-db shutdown
configure service vprn interface sap ipsec-gw shutdown
configure service ies interface sap ipsec-gw dhcp shutdown
configure service ies interface sap ipsec-gw shutdown
configure ipsec client-db client shutdown
configure isa tunnel-group shutdown

All

configure service vprn interface sap ip-tunnel shutdown
configure service ies interface sap ip-tunnel shutdown

VSR

configure service vprn interface ipsec ipsec-tunnel shutdown
configure service ies interface ipsec ipsec-tunnel shutdown

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>app-assure>group>transit-ip>diameter shutdown)

Full Context

configure application-assurance group transit-ip-policy diameter shutdown

Description

This command removes all transit AA subscribers created via Diameter on this transit AA subscriber IP policy and clears all corresponding Diameter sessions.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>isa>aa-grp>overload-sub-quarantine shutdown)

Full Context

configure isa application-assurance-group overload-sub-quarantine shutdown

Description

This command disables the overload subscriber detection algorithm in the ISA group for the purpose of quarantining an overloaded subscriber. It is possible to manually quarantine an AA subscriber even when this command is disabled (shutdown).

The no form of this command enables the overload subscriber detection algorithm in the ISA group. When enabled, each ISA monitors the traffic on a continuous basis to identify AA subscribers that occupy more than their fair share of ISA resources and need to be quarantined.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (debug>app-assure>group>traffic-capture shutdown)

Full Context

debug application-assurance group traffic-capture shutdown

Description

This command administratively disables traffic capture.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (debug>app-assure>group>http-host-recorder shutdown)

[Tree] (debug>app-assure>group>port-recorder shutdown)

Full Context

debug application-assurance group http-host-recorder shutdown

debug application-assurance group port-recorder shutdown

Description

This commands allows to stop or start the http-host-recorder. To reset the recorded values execute shutdown followed by no shutdown.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>esa>vm shutdown)

[Tree] (config>esa shutdown)

Full Context

configure esa vm shutdown

configure esa shutdown

Description

This command administratively disables the instance. The operational state of the instance is disabled, as well as the operational state of any entities contained within. When disabled, the instance does not change, reset, or remove any configuration settings or statistics.

The no form of this command administratively enables the instance.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>security>pki>ca-prof>auto-crl-update shutdown)

Full Context

configure system security pki ca-profile auto-crl-update shutdown

Description

This command disables the auto CRL update.

The no form of this command enables an auto CRL update. Upon no shutdown, if the configured CRL file does not exist, is invalid or is expired or if the schedule-type is next-update-based and current time passed (Next-Update_of_existing_CRL - pre-update-time), then system will start downloading CRL right away.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>isa>lns-group shutdown)

Full Context

configure isa lns-group shutdown

Description

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>isa>nat-group shutdown)

[Tree] (config>router>nat>outside>pool>address-range shutdown)

[Tree] (config>service>vprn>nat>inside>deterministic>address-map shutdown)

[Tree] (config>service>vprn>nat>outside>pool>redundancy shutdown)

[Tree] (config>service>ipfix>ipfix-export-policy>collector shutdown)

[Tree] (config>service>vprn>nat>outside>pool>address-range shutdown)

[Tree] (config>aaa>isa-radius-plcy>servers>server shutdown)

[Tree] (config>router>nat>inside>deterministic>address-map shutdown)

[Tree] (config>router>firewall>domain shutdown)

[Tree] (config>router>nat>outside>pool>redundancy shutdown)

[Tree] (config>service>vprn>mtrace2 shutdown)

[Tree] (config>router>nat>inside>sub-ident shutdown)

[Tree] (config>router>nat>inside>redundancy>subscriber-identification shutdown)

[Tree] (config>service>vprn>nat>inside>nat64 shutdown)

[Tree] (config>router>nat>inside>dual-stack-lite shutdown)

[Tree] (config>router>nat>outside>pool shutdown)

[Tree] (config>service>vprn>nat>outside>pool shutdown)

[Tree] (config>router>nat>inside>nat64 shutdown)

Full Context

configure isa nat-group shutdown

configure router nat outside pool address-range shutdown

configure service vprn nat inside deterministic address-map shutdown

configure service vprn nat outside pool redundancy shutdown

configure service ipfix ipfix-export-policy collector shutdown

configure service vprn nat outside pool address-range shutdown

configure aaa isa-radius-policy servers server shutdown

configure router nat inside deterministic address-map shutdown

configure router firewall domain shutdown

configure router nat outside pool redundancy shutdown

configure service vprn mtrace2 shutdown

configure router nat inside subscriber-identification shutdown

configure router nat inside redundancy subscriber-identification shutdown

configure service vprn nat inside nat64 shutdown

configure router nat inside dual-stack-lite shutdown

configure router nat outside pool shutdown

configure service vprn nat outside pool shutdown

configure router nat inside nat64 shutdown

Description

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

configure service vprn nat outside pool shutdown
configure router nat outside pool address-range shutdown
configure router nat outside pool shutdown
configure service vprn nat outside pool redundancy shutdown
configure router nat inside nat64 shutdown
configure router nat inside subscriber-identification shutdown
configure service vprn nat inside deterministic address-map shutdown
configure router nat outside pool redundancy shutdown
configure service vprn nat inside nat64 shutdown
configure router nat inside dual-stack-lite shutdown
configure isa nat-group shutdown
configure router nat inside deterministic address-map shutdown
configure aaa isa-radius-policy servers server shutdown
configure service vprn nat outside pool address-range shutdown

All

configure service vprn mtrace2 shutdown
configure service ipfix ipfix-export-policy collector shutdown

7750 SR, 7750 SR-e, 7750 SR-s, VSR

configure router firewall domain shutdown

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>nat>map-domain>mapping-rule shutdown)

Full Context

configure service nat map-domain mapping-rule shutdown

Description

This command enables or disables a rule within a MAP domain. A MAP rule can be enabled (no shutdown) only when all parameters within the rule are defined. Disabling a rule within an instantiated MAP domain will withdraw the rule IPv4 routes and disable forwarding for the rule.

Interactions:

config>service>vprn>nat>map>map-domain domain-name

config>service>router>nat>map>map-domain domain-name

Shutdown of an instantiated MAP rule disables the rule (the rule routes will be withdrawn and forwarding will be disabled).

Default

shutdown

Platforms

7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>nat>map-domain shutdown)

Full Context

configure service nat map-domain shutdown

Description

This command enables or disables a MAP domain. A MAP domain can be enabled (no shutdown) only when the DMR prefix is configured. Disabling an instantiated domain will withdraw all routes associated with it.

Interactions:

config>service>vprn>nat>map>map-domain domain-name

config>service>router>nat>map>map-domain domain-name

Shutdown of a MAP domain template disables the instantiated MAP domain (the routes will be withdrawn and forwarding will be disabled).

Default

shutdown

Platforms

7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>bier>template shutdown)

[Tree] (config>router>bier shutdown)

Full Context

configure router bier template shutdown

configure router bier shutdown

Description

This command shuts down BIER or a BIER template.

The no form of this command enables BIER or the BIER template.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>gtm>provider-tunnel>inclusive>rsvp shutdown)

[Tree] (config>router>gtm>provider-tunnel>selective>rsvp shutdown)

Full Context

configure router gtm provider-tunnel inclusive rsvp shutdown

configure router gtm provider-tunnel selective rsvp shutdown

Description

This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.

The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.

The no form of this command places the entity into an administratively enabled state.

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>p2mp-sr-tree>replication-segment shutdown)

[Tree] (config>router>p2mp-sr-tree>p2mp-policy>candidate-path shutdown)

[Tree] (config>service>vprn>mvpn>pt>selective>p2mp-sr shutdown)

[Tree] (config>router>p2mp-sr-tree shutdown)

[Tree] (config>router>p2mp-sr-tree>p2mp-policy shutdown)

[Tree] (config>service>vprn>mvpn>pt>inclusive>p2mp-sr shutdown)

[Tree] (config>service>vprn>mvpn>pt>selective>multistream-spmsi shutdown)

[Tree] (config>router>p2mp-sr-tree>replication-segment>sr-mpls>downstream-nodes shutdown)

Full Context

configure router p2mp-sr-tree replication-segment shutdown

configure router p2mp-sr-tree p2mp-policy candidate-path shutdown

configure service vprn mvpn provider-tunnel selective p2mp-sr shutdown

configure router p2mp-sr-tree shutdown

configure router p2mp-sr-tree p2mp-policy shutdown

configure service vprn mvpn provider-tunnel inclusive p2mp-sr shutdown

configure service vprn mvpn provider-tunnel selective multistream-spmsi shutdown

configure router p2mp-sr-tree replication-segment segment-routing-mpls downstream-nodes shutdown

Description

This command administratively disables an entity for the P2MP SR tree. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.

When the operational state of an entity is disabled, the operational state of any entities contained within are also disabled. Many objects must be shut down before they may be deleted.

Services are created in the administratively down (shutdown) state. When a no shutdown command is entered, the service becomes administratively up, then attempts to enter the operationally up state.

The no form of this command places the entity into an administratively enabled state.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>mirror>mirror-dest>spoke-sdp>egress shutdown)

[Tree] (config>li>li-source shutdown)

[Tree] (config>service>vprn>ip-mirror-interface>spoke-sdp shutdown)

[Tree] (config>service>vprn>ip-mirror-interface shutdown)

[Tree] (config>mirror>mirror-source shutdown)

[Tree] (config>service>vprn>if>ping-template shutdown)

[Tree] (config>mirror>mirror-dest shutdown)

[Tree] (config>li>log>log-id shutdown)

[Tree] (config>service>ies>if>ping-template shutdown)

Full Context

configure mirror mirror-dest spoke-sdp egress shutdown

configure li li-source shutdown

configure service vprn ip-mirror-interface spoke-sdp shutdown

configure service vprn ip-mirror-interface shutdown

configure mirror mirror-source shutdown

configure service vprn interface ping-template shutdown

configure mirror mirror-dest shutdown

configure li log log-id shutdown

configure service ies interface ping-template shutdown

Description

The shutdown command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. Many entities must be explicitly enabled using the no shutdown command.

Unlike other commands and parameters where the default state is not indicated in the configuration file, shutdown and no shutdown are always indicated in system generated configuration files.

The no form of this command puts an entity into the administratively enabled state.

Default

See Special Cases below.

Platforms

All

configure service vprn ip-mirror-interface shutdown
configure mirror mirror-dest shutdown
configure li log log-id shutdown
configure mirror mirror-source shutdown
configure mirror mirror-dest spoke-sdp egress shutdown
configure li li-source shutdown
configure service vprn ip-mirror-interface spoke-sdp shutdown

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

configure service ies interface ping-template shutdown
configure service vprn interface ping-template shutdown

shutdown

Syntax

[no] shutdown

Context

[Tree] (debug>mirror-source shutdown)

Full Context

debug mirror-source shutdown

Description

This command enables mirror source debugging.

The no form of this command clears mirror source information.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>oam-pm>bin-group shutdown)

[Tree] (config>saa>test shutdown)

[Tree] (config>test-oam>twamp>server>prefix shutdown)

[Tree] (config>oam-pm>session>ethernet>lmm>availability shutdown)

[Tree] (config>oam-pm>session>ethernet>slm shutdown)

[Tree] (config>oam-pm>session>ethernet>lmm shutdown)

[Tree] (config>oam-pm>session>measurement-interval>event-mon shutdown)

[Tree] (config>oam-pm>session>ip>twamp-light shutdown)

[Tree] (config>test-oam>twamp>server shutdown)

[Tree] (config>test-oam>ldp-treetrace shutdown)

[Tree] (config>oam-pm>session>ethernet>dmm shutdown)

Full Context

configure oam-pm bin-group shutdown

configure saa test shutdown

configure test-oam twamp server prefix shutdown

configure oam-pm session ethernet lmm availability shutdown

configure oam-pm session ethernet slm shutdown

configure oam-pm session ethernet lmm shutdown

configure oam-pm session measurement-interval event-mon shutdown

configure oam-pm session ip twamp-light shutdown

configure test-oam twamp server shutdown

configure test-oam ldp-treetrace shutdown

configure oam-pm session ethernet dmm shutdown

Description

This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.

The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.

Entities are created in the administratively down (shutdown) state. When a no shutdown command is entered, the entity becomes administratively up and then tries to enter the operationally up state.

The no form of this command administratively enables the entity.

Platforms

All

configure saa test shutdown
configure oam-pm bin-group shutdown
configure oam-pm session ethernet dmm shutdown
configure test-oam ldp-treetrace shutdown
configure oam-pm session ethernet lmm availability shutdown
configure oam-pm session ethernet slm shutdown
configure oam-pm session ethernet lmm shutdown

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

configure test-oam twamp server shutdown
configure test-oam twamp server prefix shutdown
configure oam-pm session ip twamp-light shutdown

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>twamp-light>reflector shutdown)

[Tree] (config>service>vprn>twamp-light>reflector shutdown)

Full Context

configure router twamp-light reflector shutdown

configure service vprn twamp-light reflector shutdown

Description

This command disables or enables TWAMP Light functionality within the context where the configuration exists, either the base router instance or the service. Enabling the base router context enables the IES prefix list since the IES service uses the configuration under the base router instance.

The no form of this command allows the router instance or the service to accept TWAMP Light packets for processing.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>bfd>seamless-bfd>reflector shutdown)

Full Context

configure bfd seamless-bfd reflector shutdown

Description

This command specifies the administrative state of the seamless BFD reflector.

The no form of this command administratively enables the reflector. A discriminator must be configured before the no shutdown command is invoked.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>qos>slope-policy>low-slope shutdown)

[Tree] (config>qos>slope-policy>exceed-slope shutdown)

[Tree] (config>qos>slope-policy>highplus-slope shutdown)

[Tree] (config>qos>slope-policy>high-slope shutdown)

Full Context

configure qos slope-policy low-slope shutdown

configure qos slope-policy exceed-slope shutdown

configure qos slope-policy highplus-slope shutdown

configure qos slope-policy high-slope shutdown

Description

This command enables or disables the administrative status of the Random Early Detection slope.

By default, all slopes are shutdown and have to be explicitly enabled (no shutdown).

The no form of this command administratively enables the RED slope.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>filter>redirect-policy>destination shutdown)

[Tree] (config>filter>redirect-policy shutdown)

[Tree] (config>filter>log>summary shutdown)

Full Context

configure filter redirect-policy destination shutdown

configure filter redirect-policy shutdown

configure filter log summary shutdown

Description

Administratively enables/disabled (AdminUp/AdminDown) an entity. Downing an entity does not change, reset or remove any configuration settings or statistics. Many objects must be shutdown before they may be deleted.

The shutdown command administratively downs an entity. Administratively downing an entity changes the operational state of the entity to down.

Unlike other commands and parameters where the default state will not be indicated in the configuration file, shutdown and no shutdown are always indicated in system generated configuration files.

The no form of the command puts an entity into the administratively enabled state.

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>if>ipv6>secure-nd shutdown)

Full Context

configure router interface ipv6 secure-nd shutdown

Description

This command enables or disables Secure Neighbor Discovery (SeND) on the interface.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>pcp-server>server shutdown)

Full Context

configure router pcp-server server shutdown

Description

This command administratively enables the PCP server.

The no form of this command administratively disables the PCP server.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>open-flow>of-switch shutdown)

Full Context

configure open-flow of-switch shutdown

Description

This command administratively enables or disables the OpenFlow switch instance. Disabling the switch purges all flowtable entries.

Default

shutdown

Platforms

VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>vrrp>policy shutdown)

[Tree] (config>router>if>ipv6>vrrp shutdown)

[Tree] (config>router>if>vrrp shutdown)

Full Context

configure vrrp policy shutdown

configure router interface ipv6 vrrp shutdown

configure router interface vrrp shutdown

Description

This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.

The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.

The no form of this command administratively enables an entity.

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown [active] [standby]

[no] shutdown [cflash-id]

Context

[Tree] (file shutdown)

Full Context

file shutdown

Description

This command shuts down (unmounts) the specified CPM(s).

Use the no shutdown [active] [standby] command to enable one or both CPM.

Use the no shutdown [cflash-id] command to enable a compact flash (cf1:, cf2:, or cf3:) on the CPM/CCM. The no shutdown command can be issued for a specific slot when no compact flash is present. When a flash card is installed in the slot, the card will be activated upon detection.

In redundant systems, use the no shutdown command on cf3: on both SF/CPMs or CCMs in order to facilitate synchronization. See the config>redundancy synchronize command.

Note:

The shutdown command must be issued prior to removing a flash card. If no parameters are specified, then the drive referred to by the current working directory will be shut down.

LED Status Indicators

LED Status Indicators lists the possible states for the compact flash and their LED status indicators.

Table 7. LED Status Indicators
State	Description
Operational	If a compact flash is present in a drive and operational (no shutdown), the respective LED is lit green. The LED flickers when the compact flash is accessed. Note: Do not remove the compact flash during a read/write operation.
Flash defective	If a compact flash is defective, the respective LED blinks amber to reflect the error condition and a trap is raised.
Flash drive shut down	When the compact flash drive is shut down and a compact flash present, the LED is lit amber. In this state, the compact flash can be ejected.
No compact flash present, drive shut down	If no compact flash is present and the drive is shut down the LED is unlit.
No compact flash present, drive enabled	If no compact flash is present and the drive is not shut down the LED is unlit.
Ejecting a compact flash	The compact flash drive should be shut down before ejecting a compact flash card. The LED should turn to solid (not blinking) amber. This is the only mode to safely remove the flash card. If a compact flash drive is not shut down before a compact flash is ejected, the LED blinks amber for approximately 5 seconds before shutting off.

The shutdown or no shutdown state is not saved in the configuration file. Following a reboot all compact flash drives are in their default state.

Default

no shutdown

Parameters

cflash-id

Specifies the compact flash slot ID to be shut down or enabled. If cflash-id is specified, the drive is shut down or enabled. If no cflash-id is specified, the drive referred to by the current working directory is assumed. If a slot number is not specified, then the active CPM is assumed.

Values: cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:

Default: the current compact flash device

active: Specifies that all drives on the active CPM are shutdown or enabled.

standby

Specifies that all drives on the standby CPM are shutdown or enabled.

When both active and standby keywords are specified, then all drives on both CPM are shutdown.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>satellite>eth-sat shutdown)

[Tree] (config>system>satellite>tdm-sat shutdown)

Full Context

configure system satellite eth-sat shutdown

configure system satellite tdm-sat shutdown

Description

This command disables the associated satellite.

If the associated satellite is active, the satellite will not be reset but all satellite client ports will be shut down.

If the satellite is not active but attempts to associate with the host, the satellite chassis will be brought up according to the satellite configuration but all client ports will be shut down.

The no form of this command removes the shutdown state and all client ports on active satellites will be brought back up.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

configure system satellite eth-sat shutdown

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

configure system satellite tdm-sat shutdown

shutdown

Syntax

[no] shutdown

Context

[Tree] (conf>sys>sat>eth-sat>ptp-ip shutdown)

Full Context

configure system satellite eth-sat ptp-ip shutdown

Description

This command administratively disables the PTP over IP transparent clock functionality.

The no form of this command administratively enables the PTP over IP transparent clock functionality.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>alarm-contact-input shutdown)

Full Context

configure system alarm-contact-input shutdown

Description

This command disables tracking of state changes associated with the alarm contact input. The system does not generate or clear the alarms for the alarm contact input while tracking is disabled. The system clears existing alarms when the shutdown command is executed.

The no form of this command enables tracking of state changes associated with the alarm contact input.

Default

shutdown

Platforms

7750 SR-a

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>ptp>peer shutdown)

Full Context

configure system ptp peer shutdown

Description

This command disables or enables a specific PTP peer. Shutting down a peer sends cancel unicast negotiation messages on any established unicast sessions. When shutdown, all received packets from the peer are ignored.

If the clock-type is ordinary slave or boundary, and PTP is no shutdown, the last enabled peer cannot be shutdown. This prevents the user from having PTP enabled without any peer configured and enabled.

Default

no shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>ptp>port shutdown)

Full Context

configure system ptp port shutdown

Description

This command disables or enables a specific PTP port. When shutdown, all PTP Ethernet messages are dropped on the IOM They will not be counted in the PTP message statistics. No PTP packets are transmitted by the node toward this port.

If the clock-type is ordinary slave or boundary, and PTP is no shutdown, the last enabled port or peer cannot be shutdown. This prevents the user from having PTP enabled without any means to synchronize the local clock to a parent clock.

Default

no shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>management-interface>remote-management shutdown)

[Tree] (config>system>management-interface>remote-management>manager shutdown)

Full Context

configure system management-interface remote-management shutdown

configure system management-interface remote-management manager shutdown

Description

This command administratively disables remote management.

The no form of this command administratively enables remote management.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>alarms shutdown)

Full Context

configure system alarms shutdown

Description

This command enables or disables the Facility Alarm functionality. When enabled, the Facility Alarm sub-system tracks active and cleared facility alarms and controls the Alarm LEDs on the CPMs. When Facility Alarm functionality is enabled, the alarms are viewed using the show system alarms command(s).

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>log>event-handling>handler shutdown)

[Tree] (config>log>event-handling>handler>action-list>entry shutdown)

[Tree] (config>log>accounting-policy shutdown)

[Tree] (config>log>event-trigger>event shutdown)

[Tree] (config>log>event-trigger>event>trigger-entry shutdown)

[Tree] (config>log>log-id shutdown)

Full Context

configure log event-handling handler shutdown

configure log event-handling handler action-list entry shutdown

configure log accounting-policy shutdown

configure log event-trigger event shutdown

configure log event-trigger event trigger-entry shutdown

configure log log-id shutdown

Description

The no form of this command administratively enables an entity.

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>netconf>listen shutdown)

Full Context

configure system netconf listen shutdown

Description

This command disables the NETCONF server. The shutdown command is blocked if there are any active NETCONF sessions. Use the admin disconnect command to disconnect all NETCONF sessions before shutting down the NETCONF service.

The no form of this command enables the NETCONF server.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>sys>sec>cpm>ip-filter shutdown)

[Tree] (config>system>security>mgmt-access-filter>ipv6-filter shutdown)

[Tree] (config>system>security>keychain>direction>uni>receive>entry shutdown)

[Tree] (cfg>sys>sec>cpm>mac-filter>entry shutdown)

[Tree] (config>system>security>keychain>direction>uni>send>entry shutdown)

[Tree] (config>system>security>mgmt-access-filter>ip-filter shutdown)

[Tree] (config>system>security>keychain>direction>bi>entry shutdown)

[Tree] (config>system>security>dot1x shutdown)

[Tree] (config>sys>sec>cpm>ipv6-filter shutdown)

[Tree] (config>system>security>dot1x>radius-plcy shutdown)

[Tree] (config>system>security>keychain shutdown)

Full Context

configure system security cpm-filter ip-filter shutdown

configure system security management-access-filter ipv6-filter shutdown

configure system security keychain direction uni receive entry shutdown

configure system security cpm-filter mac-filter entry shutdown

configure system security keychain direction uni send entry shutdown

configure system security management-access-filter ip-filter shutdown

configure system security keychain direction bi entry shutdown

configure system security dot1x shutdown

configure system security cpm-filter ipv6-filter shutdown

configure system security dot1x radius-plcy shutdown

configure system security keychain shutdown

Description

The no form of this command puts an entity into the administratively enabled state.

Default

no shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

configure system security cpm-filter mac-filter entry shutdown
configure system security cpm-filter ipv6-filter shutdown
configure system security cpm-filter ip-filter shutdown

All

configure system security keychain direction uni receive entry shutdown
configure system security keychain shutdown
configure system security keychain direction bi entry shutdown
configure system security dot1x shutdown
configure system security dot1x radius-plcy shutdown
configure system security management-access-filter ip-filter shutdown
configure system security management-access-filter ipv6-filter shutdown
configure system security keychain direction uni send entry shutdown

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>security>pki>ca-profile shutdown)

Full Context

configure system security pki ca-profile shutdown

Description

Use this command to enable or disable the ca-profile. The system verifies the configured cert-file and crl-file. If the verification fails, then the no shutdown command fails.

The ca-profile in a shutdown state cannot be used in certificate authentication.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>security>ssh>key-re-exchange>client shutdown)

[Tree] (config>system>security>ssh>key-re-exchange>server shutdown)

Full Context

configure system security ssh key-re-exchange client shutdown

configure system security ssh key-re-exchange server shutdown

Description

This command stops the key exchange. It sets the minutes and bytes to infinity so there will not be any key exchange during the PDU transmission.

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>security>ldap>server shutdown)

[Tree] (config>system>security>ldap shutdown)

Full Context

configure system security ldap server shutdown

configure system security ldap shutdown

Description

In the ldap context, this command enables or disabled LDAP protocol operations.

In the server context, this command enables or disables the LDAP server. To perform no shutdown, an LDAP server address is required. To change the address, the user first needs to shut down the server.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>grpc>gnmi shutdown)

Full Context

configure system grpc gnmi shutdown

Description

This command stops the gNMI service.

The no form of this command starts the gNMI service.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>grpc>rib-api shutdown)

Full Context

configure system grpc rib-api shutdown

Description

This command stops the RibApi gRPC service, deletes all programmed RIB entries (stale and non-stale), but does not close the TCP connections.

The no form of this command restarts the RibApi gRPC service.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>grpc shutdown)

Full Context

configure system grpc shutdown

Description

This command stops the gRPC server. This closes all of the associated TCP connections and immediately purges all RIB entries that were programmed using the RibApi Service.

The shutdown command is not blocked if there are active gRPC sessions. Shutting down gRPC will terminate all active gRPC sessions.

The no form of this command starts the gRPC server.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>grpc>tcp-keepalive shutdown)

Full Context

configure system grpc tcp-keepalive shutdown

Description

This command stops the TCP keepalives from being sent to all gRPC clients.

The no form of this command restarts the sending of TCP keepalives to all gRPC clients.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>snmp>streaming shutdown)

Full Context

configure system snmp streaming shutdown

Description

This command administratively disables proprietary SNMP request/response bundling and TCP-based transport mechanism for optimizing network management of the router nodes.

The no form of the command administratively re-enables SNMP request/response bundling and TCP-based transport mechanism.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>snmp shutdown)

Full Context

configure system snmp shutdown

Description

This command administratively disables SNMP agent operations. System management can then only be performed using the command line interface (CLI). Shutting down SNMP does not remove or change configuration parameters other than the administrative state. This command does not prevent the agent from sending SNMP notifications to any configured SNMP trap destinations. SNMP trap destinations are configured under the config>log>snmp-trap-group context.

This command is automatically invoked in the event of a reboot when the processing of the configuration file fails to complete or when an SNMP persistent index file fails while the bof persist on command is enabled.

The no form of the command administratively enables SNMP which is the default state.

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>security>tls>cert-profile shutdown)

Full Context

configure system security tls cert-profile shutdown

Description

This command disables the certificate profile. When the certificate profile is disabled, it will not be sent to the TLS server.

The no form of the command enables the certificate profile and allows it to be sent to the TLS server.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>system>security>tls>client-tls-profile shutdown)

[Tree] (config>system>security>tls>server-tls-profile shutdown)

Full Context

configure system security tls client-tls-profile shutdown

configure system security tls server-tls-profile shutdown

Description

This command administratively enables or disables the TLS profile. If the TLS profile is shut down, the TLS operational status will be down. Therefore, if the TLS profile is shut down, any application using TLS should not attempt to send any PDUs.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>bmp>station shutdown)

[Tree] (config>service>vprn>bgp>group>neighbor>monitor shutdown)

[Tree] (config>router>bgp shutdown)

[Tree] (config>bmp>station>connection>tcp-keepalive shutdown)

[Tree] (config>router>bgp>group shutdown)

[Tree] (config>router>bgp>segment-routing shutdown)

[Tree] (config>router>bgp>group>neighbor>monitor shutdown)

[Tree] (config>router>bgp>group>neighbor shutdown)

[Tree] (config>service>vprn>bgp>group>monitor shutdown)

[Tree] (config>router>bgp>monitor shutdown)

[Tree] (config>bmp shutdown)

[Tree] (config>router>bgp>group>monitor shutdown)

[Tree] (config>service>vprn>bgp>monitor shutdown)

Full Context

configure bmp station shutdown

configure service vprn bgp group neighbor monitor shutdown

configure router bgp shutdown

configure bmp station connection tcp-keepalive shutdown

configure router bgp group shutdown

configure router bgp segment-routing shutdown

configure router bgp group neighbor monitor shutdown

configure router bgp group neighbor shutdown

configure service vprn bgp group monitor shutdown

configure router bgp monitor shutdown

configure bmp shutdown

configure router bgp group monitor shutdown

configure service vprn bgp monitor shutdown

Description

This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.

The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.

The no form of this command administratively enables an entity.

Default administrative states for services and service entities are described in Special Cases.

The no form of this command places an entity in an administratively enabled state.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>isis>interface shutdown)

[Tree] (config>router>isis shutdown)

[Tree] (config>router>isis>igp-shortcut shutdown)

[Tree] (config>router>isis>if>level shutdown)

[Tree] (config>router>isis>segm-rtng>mapping-server shutdown)

[Tree] (config>router>isis>segment-routing shutdown)

[Tree] (config>router>isis>level>bier shutdown)

Full Context

configure router isis interface shutdown

configure router isis shutdown

configure router isis igp-shortcut shutdown

configure router isis interface level shutdown

configure router isis segment-routing mapping-server shutdown

configure router isis segment-routing shutdown

configure router isis level bier shutdown

Description

This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.

The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.

The no form of this command administratively enables an entity.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>isis>flex-algos shutdown)

Full Context

configure router isis flexible-algorithms shutdown

Description

This command enables IS-IS flexible algorithms. If it is enabled with the no shutdown command the router starts supporting the flexible algorithms IGP LSDB extensions. Flexible algorithm IGP LSDB extensions are by default not enabled.

The no form of this command enables the router to support flexible algorithms.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>ospf>flex-algos shutdown)

Full Context

configure router ospf flexible-algorithms shutdown

Description

This command enables OSPFv2 flexible algorithms. If no shutdown is configured, the router enables support for the flexible algorithms IGP LSDB extensions. Flexible algorithm IGP LSDB extensions are disabled by default.

The no form of this command enables the router to support flexible algorithms.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>ospf3>area>virtual-link shutdown)

[Tree] (config>router>ospf>segm-rtng shutdown)

[Tree] (config>router>ospf3>area>interface shutdown)

[Tree] (config>router>ospf3 shutdown)

[Tree] (config>router>ospf>area>bier shutdown)

[Tree] (config>router>ospf shutdown)

[Tree] (config>router>ospf>area>virtual-link shutdown)

[Tree] (config>router>ospf>igp-shortcut shutdown)

[Tree] (config>router>ospf>segm-rtng>mapping-server shutdown)

Full Context

configure router ospf3 area virtual-link shutdown

configure router ospf segment-routing shutdown

configure router ospf3 area interface shutdown

configure router ospf3 shutdown

configure router ospf area bier shutdown

configure router ospf shutdown

configure router ospf area virtual-link shutdown

configure router ospf igp-shortcut shutdown

configure router ospf segment-routing mapping-server shutdown

Description

The shutdown command administratively disables the entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. The operational state of the entity is disabled as well as the operational state of any entities contained within.

Many objects must be shut down before they may be deleted. Many entities must be explicitly enabled using the no shutdown command.

Unlike other commands and parameters where the default state is not indicated in the configuration file, shutdown and no shutdown are always indicated in system generated configuration files.

The no form of this command puts an entity into the administratively enabled state.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>rip>group>neighbor shutdown)

[Tree] (config>router>rip>group shutdown)

[Tree] (config>router>ripng shutdown)

[Tree] (config>router>ripng>group shutdown)

[Tree] (config>router>rip shutdown)

[Tree] (config>router>ripng>group>neighbor shutdown)

Full Context

configure router rip group neighbor shutdown

configure router rip group shutdown

configure router ripng shutdown

configure router ripng group shutdown

configure router rip shutdown

configure router ripng group neighbor shutdown

Description

This command administratively disables an entity. Downing an entity does not change, reset or remove any configuration settings or statistics. Many objects must be shutdown before they may be deleted.

The shutdown command administratively downs an entity. Administratively downing an entity changes the operational state of the entity to down and the operational state of any entities contained within the administratively down entity.

The no form of the command puts an entity into the administratively enabled state.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>segment-routing>maintenance-policy shutdown)

Full Context

configure router segment-routing maintenance-policy shutdown

Description

This command deactivates all segment routing policies and removes the associated entries from the forwarding plane of the router.

The no form of this command enables all segment routing policies so that they can be revalidated and reinstalled as necessary.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>segment-routing>sr-policies>ingress-statistics shutdown)

[Tree] (config>router>segment-routing>sr-policies>egress-statistics shutdown)

Full Context

configure router segment-routing sr-policies ingress-statistics shutdown

configure router segment-routing sr-policies egress-statistics shutdown

Description

This command administratively disables the collection of egress or ingress statistics for all segment routing policies.

The no form of this command administratively enables the collection of egress or ingress statistics for all segment routing policies.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>segment-routing>sr-policies shutdown)

Full Context

configure router segment-routing sr-policies shutdown

Description

This command deactivates all segment routing policies and removes the associated entries from the forwarding plane of the router.

It is necessary to execute this shutdown if you want to make a change to the reserved-label-block reference.

The no form of this command enables all segment routing policies so that they can be revalidated and reinstalled as necessary.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (conf>router>segment-routing>sr-policies>policy>seg-list shutdown)

Full Context

configure router segment-routing sr-policies static-policy segment-list shutdown

Description

This command deactivates a segment-list. If this is done on an active policy with more than one segment list, then traffic forwarded by the policy will be diverted to the remaining segment-lists.

The no form of this command enables the segment list so that it can be validated and installed as necessary.

Default

shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (conf>router>segment-routing>sr-policies>policy shutdown)

Full Context

configure router segment-routing sr-policies static-policy shutdown

Description

This command deactivates the associated static policy and causes another policy for the same (color, endpoint) combination to be promoted as the active path, assuming there is another valid policy.

It is necessary to execute this shutdown if you want to make critical configuration changes to the static policy.

The no form of this command enables the static policy so that it can be validated and installed as necessary.

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>service>ies>sub-if>grp-if>ipv6>dhcp6>relay>lease-split shutdown)

[Tree] (config>service>vprn>sub-if>ipv6>dhcp6>relay>lease-split shutdown)

[Tree] (config>service>ies>sub-if>ipv6>dhcp6>relay>lease-split shutdown)

[Tree] (config>service>vprn>sub-if>grp-if>ipv6>dhcp6>relay>lease-split shutdown)

Full Context

configure service ies subscriber-interface group-interface ipv6 dhcp6 relay lease-split shutdown

configure service vprn subscriber-interface ipv6 dhcp6 relay lease-split shutdown

configure service ies subscriber-interface ipv6 dhcp6 relay lease-split shutdown

configure service vprn subscriber-interface group-interface ipv6 dhcp6 relay lease-split shutdown

Description

This command administratively disables DHCPv6 lease split on the interface.

The no form of this command administratively enables lease split.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>port>ethernet>dot1x>per-host-authentication shutdown)

Full Context

configure port ethernet dot1x per-host-authentication shutdown

Description

This command administratively configures per-host authentication on the port.

The no form of this command administratively enables per-host authentication on the port.

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>port>ethernet>dot1x shutdown)

Full Context

configure port ethernet dot1x shutdown

Description

This command administratively configures the 802.1x functionality (consisting of packet extraction and processing on the CPM) on the port.

The no form of this command administratively enables the 802.1x functionality on the port.

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>sfm shutdown)

Full Context

configure sfm shutdown

Description

This command administratively disables the SFM.

The no form of this command administratively enables the SFM.

Default

no shutdown

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-2s, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s, 7950 XRS

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>segment-routing>srv6>locator shutdown)

[Tree] (config>router>isis>srv6 shutdown)

Full Context

configure router segment-routing segment-routing-v6 locator shutdown

configure router isis segment-routing-v6 shutdown

Description

This command administratively disables the SRv6 context in a ISIS instance or a SRv6 locator.

The no form of this command enables the SRv6 context in a ISIS instance or a SRv6 locator.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (conf>router>sr>srv6>ms>block shutdown)

[Tree] (conf>router>segment-routing>srv6>micro-segment-locator shutdown)

Full Context

configure router segment-routing segment-routing-v6 micro-segment block shutdown

configure router segment-routing segment-routing-v6 micro-segment-locator shutdown

Description

This command administratively disables the block or micro-segment locator.

The no form of this command enables the block or micro-segment locator.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>bgp>egress-peer-engineering shutdown)

Full Context

configure router bgp egress-peer-engineering shutdown

Description

This command administratively enables or disables BGP-EPE. If enabled, peer node SIDs and peer adjacency SIDs are advertised in BGP-LS.

The no form of this command places the entity into an administratively enabled state and prevents peer node SIDs and peer adjacency SIDs from being advertised in BGP-LS.

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>bgp>group>egress-engineering shutdown)

Full Context

configure router bgp group egress-engineering shutdown

Description

This command administratively enables or disable egress engineering on a BGP neighbor or group of neighbors.

If this command is enabled along with the egress-peer-engineering command in BGP, SIDs in the form of MPLS labels are allocated for the segments toward the neighbor and to all links (adjacencies). These adjacencies are then advertised in BGP LS.

The no form of this command places the entity into an administratively enabled state.

Default

no shutdown

Platforms

All

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>subscr-mgmt>sis shutdown)

Full Context

configure subscriber-mgmt subscriber-interface-statistics shutdown

Description

This command disables the collection of aggregate subscriber interface statistics.

The no form of this command enables subscriber interface statistics collection.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>subscr-mgmt>gis shutdown)

Full Context

configure subscriber-mgmt group-interface-statistics shutdown

Description

This command disables the collection of aggregate group interface statistics.

The no form of this command enables group interface statistics collection.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>test-oam>link-meas>template shutdown)

Full Context

configure test-oam link-measurement measurement-template shutdown

Description

This command administratively enables and disables the measurement template. The measurement-template can be referenced even if it is disabled. The template must be administratively enabled to transmit probes on any associated IP interface. The template configuration can be modified even if it is administratively enabled. The template can be administratively disabled even if interfaces are actively registered with the template. When the template configuration is modified, all registered IP interfaces start from the initial state and enter a first reporting scenario. This is true even if the template is administratively disabled and enabled, and no configuration changes are made.

The no form of this command disables the measurement template.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>router>if>if-attr>delay>dyn>twamp>ipv6 shutdown)

[Tree] (config>router>if>if-attr>delay>dyn>twamp>ipv4 shutdown)

Full Context

configure router interface if-attribute delay dynamic twamp-light ipv6 shutdown

configure router interface if-attribute delay dynamic twamp-light ipv4 shutdown

Description

This command enables and disables the TWAMP Light IPv4 or IPv6 protocol. Only one protocol, IPv4 or IPv6, can be enabled at any time. Attempting to enable both protocols is rejected.

The no form of this command administratively disables the IPv4 or IPv6 protocol.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>test-oam>link-meas>template>twl>ipv6-dest-disc shutdown)

Full Context

configure test-oam link-measurement measurement-template twamp-light ipv6-destination-discovery shutdown

Description

This command administratively disables IPv6 destination address discovery.

The no form of this command administratively enables IPv6 destination address discovery.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>app-assure>group>ip-id-asst shutdown)

Full Context

configure application-assurance group ip-identification-assist shutdown

Description

This command administratively disables the IP identification assist feature.

The no form of this command enables the IP identification assist feature.

Default

no shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>test-oam>sath>svc-test>svc-stream shutdown)

[Tree] (config>test-oam>sath>svc-test shutdown)

Full Context

configure test-oam service-activation-testhead service-test service-stream shutdown

configure test-oam service-activation-testhead service-test shutdown

Description

This command disables the specified service test or stream.

The no form of this command enables the service test or stream.

Default

no shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

shutdown

Syntax

[no] shutdown

Context

[Tree] (config>lag>ptp-timestamping shutdown)

[Tree] (config>port>ethernet>ptp-timestamping shutdown)

Full Context

configure lag ptp-timestamping shutdown

configure port ethernet ptp-timestamping shutdown

Description

This command administratively disables the ingress 1588 port-based timestamping filter.

The no form of this command administratively enables the filter. The filter can be administratively enabled only if at least one IP address is specified using the ipv4-address or ipv6-address command in the ptp-timestamping context.

Default

shutdown

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS