s Commands – Part I
s-pmsi
s-pmsi
Syntax
s-pmsi [{vpnSrcAddr [vpnGrpAddr]} [mdSrcAddr]]
no s-pmsi
Context
[Tree] (debug>router>pim s-pmsi)
Full Context
debug router pim s-pmsi
Description
This command enables debugging for PIM selective provider multicast service interface.
The no form of this command disables the debugging.
Parameters
- vpnSrcAddr
-
Specifies the VPN source address.
- vpnGrpAddr
-
Specifies the VPN group address.
- mdSrcAddr
-
Specifies the source address of the multicast domain.
Platforms
All
s-tag
s-tag
Syntax
s-tag qtag1 c-tag-range qtag2 [to qtag2]
no s-tag qtag1 c-tag-range qtag2
Context
[Tree] (config>service>system>bgp-evpn>eth-seg>qinq s-tag)
Full Context
configure service system bgp-evpn ethernet-segment qinq s-tag
Description
This command determines the inner VIDs (for a specified outer VID) associated with the virtual Ethernet Segment on a specific qinq port or LAG based on the following:
-
Values *, null, 0 to 4094 are allowed.
-
Any SAP for which the outer and inner service-delimiting qtags match the range is associated with the virtual ES, and only those, for example, SAP 1/1/1:10.* will not match port 1/1/1, s-tag 10 c-tag-range 10 to 100.
-
A maximum of 8 ranges (including the s-tag ranges) are allowed in the qinq context.
-
A c-tag range can be composed of a single qtag.
-
Shutting down the ES is not required before making changes.
-
A qtag included in the s-tag-range command cannot be included in the s-tag qtag of this command.
Not all qtag1 and qtag2 combinations are valid for values 0, *, and null. The following combinations are allowed:
-
s-tag 0 c-tag-range *
-
s-tag * c-tag-range *
-
s-tag * c-tag-range null
-
s-tag null c-tag-range null
-
s-tag X c-tag-range 0 (where: X=1 to 4094)
-
s-tag X c-tag-range * (where: X=1 to 4094)
The no form of the command removes the configured range. Only the first qtag1 value is required to remove the range.
Parameters
- qtag1
-
Specifies the outer VID for the c-tag range.
- qtag2
-
Specifies the inner VID for the c-tag range. When configuring a range of qtags (and not a single value), the second qtag1 value must be greater than the value of the first qtag1.
Platforms
All
s-tag
Syntax
s-tag
Context
[Tree] (config>test-oam>sath>svc-test>svc-stream>frm-payl>eth s-tag)
Full Context
configure test-oam service-activation-testhead service-test service-stream frame-payload ethernet s-tag
Description
Commands in this context configure service VLAN tag (s-tag) information specification.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
s-tag-range
s-tag-range
Syntax
s-tag-range qtag1 [to qtag1]
no s-tag-range qtag1
Context
[Tree] (config>service>system>bgp-evpn>eth-seg>qinq s-tag-range)
Full Context
configure service system bgp-evpn ethernet-segment qinq s-tag-range
Description
This command determines the VIDs associated with the virtual Ethernet Segment on a specific qinq port or LAG based on the following considerations:
-
Values *, 0 to 4094 are allowed.
-
Any SAP for which the service-delimiting qtag matches the range is associated with the virtual ES, and only those, for example, SAP 1/1/1:0.* will not match port 1/1/1, s-tag-range 100.
-
Maximum 8 ranges are allowed in the qinq context.
-
A range can be composed of a single qtag.
-
Shutting down the ES is not required before making changes in the q-tag-range.
The no form of the command removes the configured range. Only the first qtag1 value is required to remove the range.
Parameters
- qtag1
-
Specifies the outer VID. When configuring a range of qtags (and not a single value), the second qtag1 value must be greater than the first qtag1.
Platforms
All
s1-release
s1-release
Syntax
[no] s1-release
Context
[Tree] (config>subscr-mgmt>acct-plcy>triggered-updates>gc s1-release)
Full Context
configure subscriber-mgmt radius-accounting-policy triggered-updates gtp-change s1-release
Description
This command configures the router to send an interim accounting update when an S1 release (idle) procedure is performed.
The no form of the command configures the router not to send an interim accounting update when an S1 release (idle) procedure is performed.
Default
no s1-release
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
s11
s11
s2l-path
s2l-path
Syntax
[no] s2l-path path-name to ip-address
Context
[Tree] (config>router>mpls>lsp>primary-p2mp-instance s2l-path)
Full Context
configure router mpls lsp primary-p2mp-instance s2l-path
Description
This command creates a root-to-leaf (S2L) sub-LSP path for the primary instance of a P2MP LSP. The primary instance of a P2MP LSP is modeled as a set of root-to-leaf (S2L) sub-LSPs. The root, for example, head-end node, triggers signaling using one path message per S2L path. The leaf sub-LSP paths are merged at branching points.
Each S2L sub-LSP is signaled in a separate path message. Each leaf node will respond with its own RESV message. A branch LSR node will forward the path message of each S2L sub-LSP to the downstream LSR without replicating it. It will also forward the RESV message of each S2L sub-LSP to the upstream LSR without merging it with the RESV messages of other S2L sub-LSPs of the same P2MP LSP. The same is done for subsequent refreshes of the path and RESV states.
The S2L paths can be empty paths or can specify a list of explicit hops. The path name must exist and must have been defined using the config>router>mpls>path command. The same path name can be re-used by more than one S2L of the primary P2MP instance. However, the to keyword must have a unique argument per S2L as it corresponds to the address of the egress LER node.
This command is not supported on the 7450 ESS.
Parameters
- path-name
-
Specifies the name of the path which consists of up to 32 alphanumeric characters.
- to ip-address
-
Specifies the IP address of the egress router.
Platforms
All
sa-db
sa-db
Syntax
sa-db [group grpAddr] [source srcAddr] [rp rpAddr]
no sadb
Context
[Tree] (debug>router>msdp sa-db)
Full Context
debug router msdp sa-db
Description
This command enables debugging for MSDP SA requests.
The no form of this command disables the MSDP SA database debugging.
Parameters
- grpAddr
-
Debugs the IP address of the group.
- srcAddr
-
Debugs the source IP address.
- rpAddr
-
Debugs the specified RP address.
Platforms
All
sa-mac
sa-mac
Syntax
sa-mac ieee-address da-mac ieee-address
no sa-mac
Context
[Tree] (config>mirror>mirror-dest>sap>egress>ip-mirror sa-mac)
Full Context
configure mirror mirror-dest sap egress ip-mirror sa-mac
Description
This command configures the source and destination MAC addresses for IP mirroring.
The no form of this command reverts to the default.
Parameters
- sa-mac ieee-address
-
Specifies the source MAC address. Multicast, Broadcast and zeros are not allowed.
- da-mac ieee-address
-
Specifies the destination MAC address. Zeros are not allowed.
Platforms
All
sa-timeout
sa-timeout
Syntax
sa-timeout seconds
no sa-timeout
Context
[Tree] (config>service>vprn>msdp sa-timeout)
Full Context
configure service vprn msdp sa-timeout
Description
This command configures the value for the SA entries in the cache. If these entries are not refreshed within the timeout value, they are removed from the cache. Normally, the entries are refreshed at least once a minute. But under high load with many of MSDP peers, the refresh cycle could be incomplete. A higher timeout value (more then 90) could be useful to prevent instabilities in the MSDP cache.
Default
90
Parameters
- seconds
-
Specifies the time, in seconds, to wait for a response from the peer before declaring the peer unavailable.
Platforms
All
sa-timeout
Syntax
sa-timeout seconds
no sa-timeout
Context
[Tree] (config>router>msdp sa-timeout)
Full Context
configure router msdp sa-timeout
Description
This command configures the timeout interval for the SA entries in the cache. If these entries are not refreshed within the timeout interval, they are removed from the cache. Normally, the entries are refreshed at least once a minute, but under high load with many MSDP peers, the refresh cycle could be incomplete. A higher timeout value (greater than 90) is useful to prevent instabilities in the MSDP cache.
The no form of this command reverts to the default timeout interval of 90 seconds.
Default
no sa-timeout
Parameters
- seconds
-
Specifies the time, in seconds, to wait for a response from the peer before declaring the peer unavailable.
Platforms
All
saa
saa
Syntax
saa
Context
[Tree] (config saa)
Full Context
configure saa
Description
Commands in this context configure the Service Assurance Agent (SAA) tests.
Platforms
All
saa
Syntax
saa test-name [owner test-owner] {start | stop} [no-accounting]
Context
[Tree] (oam saa)
Full Context
oam saa
Description
This command starts or stops an SAA test that is not configured as continuous.
Parameters
- test-name
-
Specifies the name of the SAA test, up to 32 characters. The test name must already be configured in the config>saa>test context.
- test-owner
-
Specifies the owner of an SAA operation, up to 32 characters. If a test-owner value is not specified, the default owner is used.
- start
-
Starts the test. A test cannot be started if the same test is still running.
A test cannot be started if it is in a shut-down state. An error message and log event is generated to indicate a failed attempt to start an SAA test run. A test cannot be started if it is in a continuous state.
- stop
-
Stops a test in progress. A test cannot be stopped if it is not in progress. A log message is generated to indicate that an SAA test run has been aborted. A test cannot be stopped if it is in a continuous state.
- no-accounting
-
Disables the recording results in the accounting policy. When specifying no-accounting the MIB record produced at the end of the test is not added to the accounting file. It uses one of the three MIB rows available for the accounting module for collection.
Platforms
All
saii-type2
saii-type2
Syntax
saii-type2 global-id:node-id:ac-id
no saii-type2
Context
[Tree] (config>service>vpls>spoke-sdp>pw-path-id saii-type2)
[Tree] (config>service>epipe>spoke-sdp>pw-path-id saii-type2)
[Tree] (config>service>cpipe>spoke-sdp>pw-path-id saii-type2)
Full Context
configure service vpls spoke-sdp pw-path-id saii-type2
configure service epipe spoke-sdp pw-path-id saii-type2
configure service cpipe spoke-sdp pw-path-id saii-type2
Description
This command configures the Source Individual Attachment Identifier (SAII) for an MPLS-TP spoke-sdp. If this is configured on a spoke-sdp for which vc-switching is also configured (for example, it is at an S-PE), then the values must match those of the taii-type2 of the mate spoke-sdp.
Parameters
- global-id
-
Specifies the global ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP.
- node-id
-
Specifies the node ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP.
- ac-id
-
Specifies the attachment circuit ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP. If this node is the source of the PW, then the AC ID must be set to a locally unique value.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
saii-type2
Syntax
saii-type2 global-id:prefix:ac-id
no saii-type2
Context
[Tree] (config>service>epipe>spoke-sdp-fec saii-type2)
Full Context
configure service epipe spoke-sdp-fec saii-type2
Description
This command configures the source attachment individual identifier for the spoke-sdp. This is only applicable to FEC129 AII type 2.
Parameters
- global-id
-
A Global ID of this router T-PE. This value must correspond to one of the global_id values configured for a local-prefix under config>service>pw-routing>local-prefix context.
- prefix
-
The prefix on this router T-PE that the spoke-sdp SDP is associated with. This value must correspond to one of the prefixes configured under config>service>pw-routing>local-prefix context.
- ac-id
-
An unsigned integer representing a locally unique identifier for the spoke SDP.
Platforms
All
saii-type2
Syntax
saii-type2 global-id:node-id:ac-id
no saii-type2
Context
[Tree] (config>service>vprn>if>spoke-sdp>pw-path-id saii-type2)
[Tree] (config>service>vprn>red-if>spoke-sdp>pw-path-id saii-type2)
Full Context
configure service vprn interface spoke-sdp pw-path-id saii-type2
configure service vprn redundant-interface spoke-sdp pw-path-id saii-type2
Description
This command configures the source individual attachment identifier (SAII) for an MPLS-TP spoke SDP. If this is configured on a spoke SDP for which vc-switching is also configured (for example, it is at an S-PE), then the values must match those of the taii-type2 of the mate spoke SDP.
Parameters
- global-id
-
Specifies the global ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP.
- node-id
-
Specifies the node ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP.
- ac-id
-
Specifies the attachment circuit ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP. If this node is the source of the PW, then the AC ID must be set to a locally unique value.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service vprn interface spoke-sdp pw-path-id saii-type2
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s
- configure service vprn redundant-interface spoke-sdp pw-path-id saii-type2
saii-type2
Syntax
saii-type2 global-id:node-id:ac-id
no saii-type2
Context
[Tree] (config>mirror>mirror-dest>spoke-sdp>pw-path-id saii-type2)
[Tree] (config>mirror>mirror-dest>remote-src>spoke-sdp>pw-path-id saii-type2)
Full Context
configure mirror mirror-dest spoke-sdp pw-path-id saii-type2
configure mirror mirror-dest remote-source spoke-sdp pw-path-id saii-type2
Description
This command configures the source individual attachment identifier (SAII) for an MPLS-TP spoke SDP. If this is configured on a spoke SDP for which vc-switching is also configured (for example, it is at an S-PE), then the values must match those of the taii-type2 of the mate spoke SDP.
Parameters
- global-id
-
Specifies the global ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP.
- node-id
-
Specifies the node ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP.
- ac-id
-
Specifies the attachment circuit ID at the source PE or T-PE for the MPLS-TP PW for a spoke SDP. If this node is the source of the PW, then the AC ID must be set to a locally unique value.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
same-recipnonce-for-pollreq
same-recipnonce-for-pollreq
Syntax
[no] same-recipnonce-for-pollreq
Context
[Tree] (config>system>security>pki>ca-profile>cmpv2 same-recipnonce-for-pollreq)
Full Context
configure system security pki ca-profile cmpv2 same-recipnonce-for-pollreq
Description
This command enables the system to use same recipNonce as the last CMPv2 response for poll request.
The no form of this command disables the use of the same recipNonce as the last CMPv2 response for poll request.
Default
no same-recipnonce-for-pollreq
Platforms
All
sample-interval
sample-interval
Syntax
sample-interval interval
Context
[Tree] (config>router>rsvp>dbw-accounting sample-interval)
Full Context
configure router rsvp dbw-accounting sample-interval
Description
This command sets the dark bandwidth sample interval to the specified value. Changing this parameter in the course of dark bandwidth accounting restarts the accounting cycle. The user is encouraged to specify values as multiples of 10. Selecting other values may lead to inconsistent estimation of Dark Bandwidth.
Default
sample-interval 30
Parameters
- interval
-
Specifies the sample interval, expressed in seconds.
Platforms
7750 SR, 7750 SR-s, 7950 XRS, VSR
sample-interval
Syntax
sample-interval sample-period
no sample-interval
Context
[Tree] (config>qos>adv-config-policy>child-control>offered-measurement sample-interval)
Full Context
configure qos adv-config-policy child-control offered-measurement sample-interval
Description
This command defines the number of intervening sample periods before a new offered rate is measured and is only applicable when the policy is applied to a policer. By decreasing the sampling interval, the system measures a child’s new offered rate more frequently. Inversely, increasing the sampling interval causes the child’s offered rate to be measured less frequently.
The overall number of offered rate measurements the system attempts within a specified timeframe is not affected by the sample-interval command. If the system is asked to perform offered rate measurements more often on some policers, it takes longer to get to all children.
When this command is not specified or removed, the system evaluates the offered rate of each child after 1 sampling period.
The no form of this command is used to restore the sampling interval default of 1 sample period.
Parameters
- sample-period
-
The sample-periods parameter is specified as a whole number between 1 and 8. The value '1’ represents the fastest sampling rate available and the value '8’ represents the slowest sampling period available.
Platforms
All
sample-interval
Syntax
sample-interval interval
Context
[Tree] (config>system>telemetry>persistent-subscriptions>subscription sample-interval)
Full Context
configure system telemetry persistent-subscriptions subscription sample-interval
Description
This command configures the sample interval for persistent subscription.
This sampling interval only applies when the mode command is set to either target-defined or sample.
Default
sample-interval 10000
Parameters
- interval
-
Specifies the sample interval, in milliseconds.
Platforms
All
sample-multiplier
sample-multiplier
Syntax
sample-multiplier multiplier
Context
[Tree] (config>router>rsvp>dbw-accounting sample-multiplier)
Full Context
configure router rsvp dbw-accounting sample-multiplier
Description
This command sets the dark bandwidth sample interval multiplier to the specified value. Changing this parameter in the course of dark bandwidth accounting restarts the accounting cycle.
Default
sample-multiplier 3
Parameters
- multiplier
-
Specifies the sample interval multiplier, expressed as an integer.
Platforms
7750 SR, 7750 SR-s, 7950 XRS, VSR
sample-profile
sample-profile
Syntax
sample-profile profile-id [create]
no sample-profile profile-id
Context
[Tree] (config cflowd sample-profile)
Full Context
configure cflowd sample-profile
Description
Commands in this context create and define sampling parameters.
The no form of this command removes the associated sample-profile. sample-profile 1 cannot be deleted.
Parameters
- profile-id
-
Specifies the rate profile.
- create
-
Mandatory keyword when creating a sample profile. The create keyword requirement can be enabled or disabled in the environment>create context.
Platforms
All
sample-profile
Syntax
sample-profile sample-profile-id
no sample-profile
Context
[Tree] (config filter ipv6-filter entry sample-profile)
[Tree] (config filter ip-filter entry sample-profile)
Full Context
configure filter ipv6-filter entry sample-profile
configure filter ip-filter entry sample-profile
Description
This command allows traffic matching of an IPv4 or IPv6 filter to be sampled for cflowd processing using a specific sample profile.
This command is only compatible if the associated interface is configured for interface-based sampling and is only supported for ingress sampling.
An IP filter can only specify a single alternate sample profile for cflowd sampling, but that sample profile can be used in multiple entries.
The no form of this command removes the specified sampling profile from the configuration. Cflowd continues to process traffic based on the default or configured interface cflowd sampling profile.
Default
no sample-profile
Parameters
- sample-profile-id
-
Specifies the cflowd sample profile to be used for packets matching this filter entry.
Platforms
All
sample-rate
sample-rate
Syntax
sample-rate [rate]
Context
[Tree] (config>cflowd>sample-profile sample-rate)
Full Context
configure cflowd sample-profile sample-rate
Description
This command defines the cflowd sampling rate for the sample profile ID.
The sample rate indicates that the associated interface samples 1 in N packets for cflowd analysis. Only one rate profile below 1:256 with a specific IOM, IMM, or XMA can be associated.
Default
sample-rate 1000
Parameters
- rate
-
Specifies the rate at which traffic is sampled and forwarded for cflowd analysis.
Platforms
All
sample-window
sample-window
Syntax
sample-window seconds
no sample-window
Context
[Tree] (config>oam-pm>streaming>delay-template sample-window)
Full Context
configure oam-pm streaming delay-template sample-window
Description
This command specifies the sample window duration in seconds for the template. This configuration option represents time over which the average will be calculated and subsequently streamed.
The no form of this command reverts to the default.
Default
sample-window 60
Parameters
- seconds
-
Specifies the sample window duration.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
sample-window
Syntax
sample-window
Context
[Tree] (config>test-oam>link-meas>template sample-window)
Full Context
configure test-oam link-measurement measurement-template sample-window
Description
Commands in this context configure sample window parameters to be used when the measurement-template is assigned to an IP interface. The sample window is the collection of individual probe results, over a defined period.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
sampling
sampling
Syntax
sampling {unicast | multicast} type {acl | interface} [direction { ingress-only | egress-only | both}] [sample-profile [profile-id]]
no sampling {unicast | multicast}
Context
[Tree] (config>service>vprn>nw-if>cflowd-parameters sampling)
[Tree] (config>service>vprn>sub-if>grp-if>cflowd-parameters sampling)
[Tree] (config>service>ies>sub-if>grp-if>cflowd-parameters sampling)
[Tree] (config>service>vprn>if>cflowd-parameters sampling)
[Tree] (config>service>ies>if>cflowd-parameters sampling)
Full Context
configure service vprn network-interface cflowd-parameters sampling
configure service vprn subscriber-interface group-interface cflowd-parameters sampling
configure service ies subscriber-interface group-interface cflowd-parameters sampling
configure service vprn interface cflowd-parameters sampling
configure service ies interface cflowd-parameters sampling
Description
This command enables and configures the cflowd sampling behavior to collect traffic flow samples through a router for analysis.
This command can be used to configure the sampling parameters for unicast and multicast traffic separately. If sampling is not configured for either unicast or multicast traffic, then that type of traffic will not be sampled.
If cflowd is enabled without either egress-only or both keywords specified or with the ingress-only keyword specified, then only ingress sampling is enabled on the associated IP interface.
The no form of this command disables the associated type of traffic sampling.
Parameters
- unicast | multicast
-
Specifies unicast or multicast sampling.
- type
-
Specifies the cflowd sampling type on the specific virtual router interface.
- direction
-
Specifies the direction of the cflowd analysis that is applied to the specified virtual router interface.
- profile-id
-
Defines the sampling rate profile to be associated with this interface.
Platforms
All
- configure service vprn interface cflowd-parameters sampling
- configure service ies interface cflowd-parameters sampling
- configure service vprn network-interface cflowd-parameters sampling
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn subscriber-interface group-interface cflowd-parameters sampling
- configure service ies subscriber-interface group-interface cflowd-parameters sampling
sampling
Syntax
sampling {unicast | multicast} type {acl | interface} [direction { ingress-only | egress-only | both}] [sample-profile profile]
no sampling {unicast | multicast}
Context
[Tree] (config>router>if>cflowd-parameters sampling)
Full Context
configure router interface cflowd-parameters sampling
Description
This command enables and configures the cflowd sampling behavior to collect traffic flow samples through a router for analysis.
This command can be used to configure the sampling parameters for unicast and multicast traffic separately. If sampling is not configured for either unicast or multicast traffic, then that type of traffic will not be sampled.
If cflowd is enabled without either egress-only or both specified or with the ingress-only keyword specified, then only ingress sampling will be enabled on the associated IP interface.
The no form of this command disables the associated type of traffic sampling on the associated interface.
Default
no sampling
Parameters
- unicast
-
Specifies that the sampling command will control the sampling of unicast traffic on the associated interface/SAP.
- multicast
-
Specifies that the sampling command will control the sampling of multicast traffic on the associated interface/SAP.
- type
-
Specifies whether the traffic sampling is based on an acl match, or all traffic entering or exiting the associated interface.
- direction
-
Specifies the direction to collect traffic flow samples.
- profile
-
Specifies the sampling profile to be associated with this interface.
Platforms
All
sampling-rate
sampling-rate
Syntax
sampling-rate sampling-rate
no sampling-rate
Context
[Tree] (config>mirror>mirror-dest sampling-rate)
Full Context
configure mirror mirror-dest sampling-rate
Description
This command configures the packet sampling rate for mirrored traffic and is supported with config and debug mirror sources. The sampling rate is common to all endpoints on a specified line card FP per mirror destination service.
The no form of this command disables the packet sampling rate for mirrored traffic.
Default
no sampling-rate
Parameters
- sampling-rate
-
Specifies the sampling rate.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
sap
sap
Syntax
sap sap-id [split-horizon-group group-name] [create] [capture-sap] [eth-ring ring-index]
sap sap-id [split-horizon-group group-name] [create] [capture-sap] [eth-ring ring-index] leaf-ac
sap sap-id [split-horizon-group group-name] [create] [capture- sap] [eth-ring ring-index] root-leaf-tag leaf-tag leaf-tag
no sap sap-id
Context
[Tree] (config>service>vpls sap)
Full Context
configure service vpls sap
Description
This command creates a Service Access Point (SAP) within a service. A SAP is a combination of port and encapsulation parameters which identifies the service access point on the interface and within the 7450 ESS or 7750 SR. Each SAP must be unique. All SAPs must be explicitly created within a service or on an IP interface.
Enter an existing SAP without the create keyword to edit SAP parameters. The SAP is owned by the service in which it was created.
A SAP can only be associated with a single service. A SAP can only be defined on a port that has been configured as an access port using the configure port port-id ethernet mode access command. Channelized TDM ports are always access ports (TDM applies to the 7750 SR only).
If a port is shut down, all SAPs on that port become operationally down. When a service is shut down, SAPs for the service are not displayed as operationally down although all traffic traversing the service is discarded. The operational state of a SAP is relative to the operational state of the port on which the SAP is defined.
The no form of this command deletes the SAP with the specified port. When a SAP is deleted, all configuration parameters for the SAP are also deleted. For Internet Ethernet Service (IES), the IP interface must be shut down before the SAP on that interface may be removed.
Parameters
- sap-id
-
Specifies the physical port identifier portion of the SAP definition.
- port-id
-
Specifies the physical port ID in the slot/mda/port format.
If the card in the slot has Media Dependent Adapters (MDAs) installed, the port-id must be in the slot_number/MDA_number/port_number [.channel] format. For example 6/2/3 specifies port 3 on MDA 2 in slot 6.
The port-id must reference a valid port type. When the port-id parameter represents SONET/SDH and TDM channels, the port ID must include the channel ID. A period ".” separates the physical port from the channel-id. The port must be configured as an access port.
If the SONET/SDH port is configured as clear-channel then only the port is specified.
- group-name
-
Specifies the name of the split horizon group to which the SAP belongs. This parameter applies to the 7450 ESS or 7750 SR only.
- capture-sap
-
Specifies a capturing SAP in which triggering packets are sent to the CPM. Non-triggering packets captured by the capture SAP are dropped. This parameter applies to the 7450 ESS or 7750 SR only.
- create
-
Keyword used to create a SAP instance. The create keyword requirement can be enabled or disabled in the environment>create context.
- root-leaf-tag
-
Specifies a SAP as a root leaf tag SAP. Only SAPs of the form dot1q (for example, 1/1/1:X) or qinq (for example, 1/1/1:X.Y, 1/1/1:X.*) are supported. The default E-Tree SAP type is a root AC, if root-leaf-tag (or leaf-ac) is not specified at SAP creation. This option is only available when the VPLS is designated as an E-Tree VPLS.
- leaf-tag-vid
-
Specifies to replace the outer SAP-ID for leaf traffic. The leaf tag VID is only significant between peering VPLS but the values must be consistent on each end.
- leaf-ac
-
Specifies a SAP as a leaf access (AC) SAP. The default E-Tree SAP type is root AC if leaf-ac (or root-leaf-tag) is not specified at SAP creation. This option is only available when the VPLS is designated as an E-Tree VPLS.
Platforms
All
sap
Syntax
[no] sap sap-id
Context
[Tree] (config>service>vpls>pbb>backbone-vpls sap)
Full Context
configure service vpls pbb backbone-vpls sap
Description
This command configures attributes of a SAP on the B-VPLS service.
Platforms
All
sap
Syntax
sap sap-id [create] [no-endpoint]
sap sap-id [create] endpoint endpoint-name
no sap sap-id
Context
[Tree] (config>service>ipipe sap)
[Tree] (config>service>epipe sap)
[Tree] (config>service>cpipe sap)
Full Context
configure service ipipe sap
configure service epipe sap
configure service cpipe sap
Description
This command creates a Service Access Point (SAP) within a service. A SAP is a combination of port and encapsulation parameters which identifies the service access point on the interface and within the device. Each SAP must be unique.
All SAPs must be explicitly created. If no SAPs are created within a service or on an IP interface, a SAP will not exist on that object.
Enter an existing SAP without the create keyword to edit SAP parameters. The SAP is owned by the service in which it was created.
A SAP can only be associated with a single service. A SAP can only be defined on a port that has been configured as an access port. Channelized TDM ports are always access ports.
If a port is shutdown, all SAPs on that port become operationally down. When a service is shutdown, SAPs for the service are not displayed as operationally down although all traffic traversing the service will be discarded.
The operational state of a SAP is relative to the operational state of the port on which the SAP is defined.
Ethernet SAPs support null, dot1q, and qinq is supported for all routers.
The no form of this command deletes the SAP with the specified port. When a SAP is deleted, all configuration parameters for the SAP will also be deleted. For Internet Enhanced Service (IES), the IP interface must be shutdown before the SAP on that interface may be removed.
By default, no SAPs are defined.
Parameters
- sap-id
-
Specifies the physical port identifier portion of the SAP.
- port-id
-
Specifies the physical port ID.
If the card in the slot has Media Dependent Adapters (MDAs) installed, the port-id must be in the slot_number/MDA_number/port_number format. For example 6/2/3 specifies port 3 on MDA 2 in slot 6.
The port-id must reference a valid port type. When the port-id parameter represents SONET/SDH and TDM channels, the port ID must include the channel ID. A period ".” separates the physical port from the channel-id. The port must be configured as an access port.
If the SONET/SDH port is configured as clear-channel then only the port is specified.
port-id
slot/mda/port [.channel]
eth-sat-id
esat-id/slot/port
esat
keyword
id
1 to 20
pxc-id
pxc-id.sub-port
pxc
keyword
id
1 to 64
sub-port
a, b
- endpoint
-
Adds a SAP endpoint association.
- no endpoint
-
Removes the association of a SAP or a spoke SDP with an explicit endpoint name.
- create
-
Keyword used to create a SAP instance. The create keyword requirement can be enabled/disabled in the environment>create context.
Platforms
All
- configure service ipipe sap
- configure service epipe sap
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service cpipe sap
Output
The following output is an example of VLL SAP information.
Output Example*A:bksim2801>config>service>apipe>sap$
=================================================================
ATM PVCs, Port 1/1/1
=================================================================
VPI/VCI Owner Type Ing.TD Egr.TD Adm OAM Opr
-----------------------------------------------------------------
2/102 SAP PVC 1 1 up ETE-AIS dn
10/100 SAP PVC 1 1 up ETE-AIS dn
=================================================================
*A:bksim2801#
*A:test>config>service>epipe 200 name "200" customer 1 info detail
=================================================================
sap 1/1/c5/1:200.200 create
no shutdown
exit
sap pw-21:200.200 create
no shutdown
exit
no shutdown
exit
exit
=================================================================
sap
Syntax
sap sap-id [create]
no sap sap-id
Context
[Tree] (config>service>ies sap)
[Tree] (config>service>vprn sap)
[Tree] (config>service>ies>if sap)
[Tree] (config>service>vprn>sub-if>grp-if sap)
[Tree] (config>service>ies>sub-if>grp-if sap)
[Tree] (config>service>vprn>if sap)
Full Context
configure service ies sap
configure service vprn sap
configure service ies interface sap
configure service vprn subscriber-interface group-interface sap
configure service ies subscriber-interface group-interface sap
configure service vprn interface sap
Description
This command creates a Service Access Point (SAP) within a service. A SAP is a combination of port and encapsulation parameters which identifies the service access point on the interface and within the router. Each SAP must be unique.
All SAPs must be explicitly created. If no SAPs are created within a service or on an IP interface, a SAP will not exist on that object.
Enter an existing SAP without the create keyword to edit SAP parameters. The SAP is owned by the service in which it was created.
A SAP can only be associated with a single service. A SAP can only be defined on a port that has been configured as an access port using the configure port port-id ethernet mode access command. For the 7750 SR, channelized TDM ports are always access ports.
If a port is shutdown, all SAPs on that port become operationally down. When a service is shutdown, SAPs for the service are not displayed as operationally down although all traffic traversing the service will be discarded. The operational state of a SAP is relative to the operational state of the port on which the SAP is defined.
Configure an IES interface as a loopback interface by issuing the loopback command instead of the sap sap-id command. The loopback flag cannot be set on an interface where a SAP is already defined and a SAP cannot be defined on a loopback interface.
The no form of this command deletes the SAP with the specified port. When a SAP is deleted, all configuration parameters for the SAP are also deleted. For Internet Enhanced Service (IES), the IP interface must be shutdown before the SAP on that interface may be removed. The no form of this command causes the ptp-hw-assist to be disabled.
Default
No SAPs are defined.
Parameters
- sap-id
-
Specifies the physical port identifier portion of the SAP definition.
- port-id
-
Specifies the physical port ID in the slot/mda/port format.
If the card in the slot has Media Dependent Adapters (MDAs) installed, the port-id must be in the slot_number/MDA_number/port_number format. For example 61/2/3 specifies port 3 on MDA 2 in slot 61.
Table 1. Port ID Syntax null
port-id | lag-id
dot1q
{port-id | lag-id}:{qtag1 | cp-conn-prof-id
qinq
{port-id | lag-id}:{qtag1 | cp-conn-prof-id}.{qtag2 | cp-conn-prof-id}
cp: keyword
conn-prof-id: 1 to 8000
port-id
slot/mda/port [.channel]
eth-sat-id
esat-id/slot/port
esat: keyword
id: 1 to20
pxc-id
psc-id.sub-port
pxc psc-id.sub-port
pxc: keyword
id: 1 to 64
sub-port: a, b
lag-id
lag-id
lag: keyword
id: 1 to 800
qtag1
0 to 4094
qtag2
* | null | 0 to 4094
The port-id must reference a valid port type. When the port-id parameter represents SONET/SDH and TDM channels (7750 SR), the port ID must include the channel ID. A period ".” separates the physical port from the channel-id. The port must be configured as an access port.
If the SONET/SDH port is configured as clear-channel then only the port is specified.
- create
-
Keyword used to create a SAP instance. The create keyword requirement can be enabled/disabled in the environment>create context.
Platforms
All
- configure service vprn sap
- configure service ies interface sap
- configure service ies sap
- configure service vprn interface sap
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface sap
- configure service vprn subscriber-interface group-interface sap
sap
Syntax
sap sap-id [create]
no sap sap-id
Context
[Tree] (config>service>vprn>sub-if>grp-if sap)
Full Context
configure service vprn subscriber-interface group-interface sap
Description
This command creates a SAP for the interface.
The no form of this command removes the SAP.
Parameters
- sap-id
-
Specifies the SAP ID.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sap
Syntax
[no] sap sap-id
Context
[Tree] (debug>service>id>ppp sap)
Full Context
debug service id ppp sap
Description
This command enables PPP debug output for the specified SAP, this command allow multiple instances.
The no form of this command disables debugging.
Parameters
- sap-id
-
Specifies the SAP ID.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sap
Syntax
sap sap-id
no sap
Context
[Tree] (config>service>vpls>site sap)
Full Context
configure service vpls site sap
Description
This command configures a SAP for the site.
The no form of this command removes the SAP ID from the configuration.
Parameters
- sap-id
-
Specifies the physical port identifier portion of the SAP definition
Platforms
All
sap
Syntax
[no] sap sap-id
Context
[Tree] (debug>service>id>mrp sap)
Full Context
debug service id mrp sap
Description
This command filters debug events and only shows events for the particular SAP.
The no form of this command removes the debug filter.
Parameters
- sap-id
-
The SAP ID.
Platforms
All
sap
Syntax
sap sap-id
no sap
Context
[Tree] (config>service>epipe>site sap)
Full Context
configure service epipe site sap
Description
This command configures a SAP for the site.
The no form of this command removes the SAP ID from the configuration.
Parameters
- sap-id
-
Specifies the physical port identifier portion of the SAP definition.
Platforms
All
sap
Syntax
[no] sap sap-id
Context
[Tree] (debug>service>id>stp sap)
[Tree] (debug>service>id sap)
[Tree] (debug>service>id>dhcp sap)
Full Context
debug service id stp sap
debug service id sap
debug service id dhcp sap
Description
This command enables STP debugging for a specific SAP.
The no form of the command disables debugging.
Parameters
- sap-id
-
Specifies the physical port identifier portion of the SAP definition.
Platforms
All
sap
Syntax
sap [split-horizon-group group-name] [create] [capture-sap]
no sap sap-id
Context
[Tree] (config>service>vpls>mac-move>primary-ports sap)
[Tree] (config>service>vpls>mac-move>secondary-ports sap)
Full Context
configure service vpls mac-move primary-ports sap
configure service vpls mac-move secondary-ports sap
Description
This command declares a specified SAP as a primary (or secondary) VPLS port.
Parameters
- sap-id
-
Specifies the physical port identifier portion of the SAP definition
Platforms
All
sap
Syntax
[no] sap sap-id
Context
[Tree] (debug>service>id>arp-host sap)
Full Context
debug service id arp-host sap
Description
This command displays ARP host events for a particular SAP.
Parameters
- sap-id
-
Specifies the physical port identifier portion of the SAP definition.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sap
Syntax
[no] sap sap-id
Context
[Tree] (debug>service>id>igmp-snooping sap)
Full Context
debug service id igmp-snooping sap
Description
This command shows IGMP packets for a specific SAP.
The no form of this command disables the debugging for the SAP.
Platforms
All
sap
Syntax
[no] sap sap-id
Context
[Tree] (debug>service>id>mld sap)
Full Context
debug service id mld-snooping sap
Description
This command shows MLD packets for a specific SAP.
The no form of this command disables the debugging for the SAP.
Platforms
All
sap
Syntax
[no] sap sap-id
Context
[Tree] (debug>service>id>host-connectivity-verify sap)
Full Context
debug service id host-connectivity-verify sap
Description
This command displays Subscriber Host Connectivity Verification (SHCV) events for a particular SAP.
Parameters
- sap-id
-
Specifies the physical port identifier portion of the SAP definition
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sap
Syntax
sap card/mda/aa-svc:vlan [create]
no sap
Context
[Tree] (config>service>vprn>aa-if sap)
Full Context
configure service vprn aa-interface sap
Description
This commands specifies which ISA card and which VLAN is used by a specified AA Interface.
Default
no sap
Parameters
- card/mda/aa-svc:vlan
-
Specifies the AA ISA card slot/port and VLAN information.
- create
-
Keyword used to create the AARP instance.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
sap
Syntax
sap sap-id [create]
no sap sap-id
Context
[Tree] (config>service>vprn>aa-interface sap)
[Tree] (config>service>ies>aa-interface sap)
Full Context
configure service vprn aa-interface sap
configure service ies aa-interface sap
Description
This command configures the AA interface SAP.
Parameters
- sap-id
-
specifies the physical port identifier portion of the SAP definition.
- create
-
creates the SAP instance.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
sap
Syntax
sap sap-id [create] [no-endpoint]
sap sap-id [create] endpoint name
no sap
Context
[Tree] (config>mirror>mirror-dest sap)
Full Context
configure mirror mirror-dest sap
Description
This command creates a service access point (SAP) within a mirror destination service. The SAP is owned by the mirror destination service ID.
The SAP is defined with port and encapsulation parameters to uniquely identify the (mirror) SAP on the interface and within the box. The specified SAP may be defined on an Ethernet access port with a dot1q, null, or q-in-q encapsulation type.
Only one SAP can be created within a mirror-dest service ID. If the defined SAP has not been created on any service within the system, the SAP is created and the context of the CLI will change to the newly created SAP. In addition, the port cannot be a member of a multi-link bundle, APS group or IMA bundle.
If the defined SAP exists in the context of another service ID, mirror-dest or any other type, an error is generated.
Mirror destination SAPs can be created on Ethernet interfaces that have been defined as an access interface. If the interface is defined as network, the SAP creation returns an error.
When the no form of this command is used on a SAP created by a mirror destination service ID, the SAP with the specified port and encapsulation parameters is deleted.
Parameters
- sap-id
-
Specifies the physical port identifier portion of the SAP definition.
- no-endpoint
-
Removes the association of a SAP or a sdp with an explicit endpoint name.
- name
-
Specifies the name of the endpoint associated with the SAP.
Platforms
All
sap
Syntax
sap sap-id {[egress] [ingress]}
no sap sap-id [egress] [ingress]
Context
[Tree] (config>mirror>mirror-source sap)
Full Context
configure mirror mirror-source sap
Description
This command enables mirroring of traffic ingressing or egressing a service access port (SAP). A SAP that is defined within a mirror destination cannot be used in a mirror source. The mirror source SAP referenced by the sap-id is owned by the service ID of the service in which it was created. The SAP is only referenced in the mirror source name for mirroring purposes. The mirror source association does not need to be removed before deleting the SAP from its service ID. If the SAP is deleted from its service ID, the mirror association is removed from the mirror source.
More than one SAP can be associated within a single mirror-source. Each SAP has its own ingress and egress parameter keywords to define which packets are mirrored to the mirror destination.
The SAP must be valid and properly configured. If the associated SAP does not exist, an error occurs and the command will not execute.
The same SAP cannot be associated with multiple mirror source definitions for ingress packets.
The same SAP cannot be associated with multiple mirror source definitions for egress packets.
If a particular SAP is not associated with a mirror source name, then that SAP will not have mirroring enabled for that mirror source.
Note that the ingress and egress options cannot be supported at the same time on a CEM encap-type SAP. The options must be configured in either the ingress or egress contexts (applies to the 7750 SR and 7950 XRS).
The no form of this command disables mirroring for the specified SAP. All mirroring for that SAP on ingress and egress is terminated. Mirroring of packets on the SAP can continue if more specific mirror criteria is configured. If the egress or ingress parameter keywords are specified in the no command, only the ingress or egress mirroring condition is removed.
Parameters
- sap-id
-
Specifies the physical port identifier portion of the SAP definition.
- egress
-
Specifies that packets egressing the SAP should be mirrored. Egress packets are mirrored to the mirror destination after egress packet modification.
- ingress
-
Specifies that packets ingressing the SAP should be mirrored. Ingress packets are mirrored to the mirror destination before the ingress packet modification.
Platforms
All
sap
Syntax
sap sap-id {[ingress] [egress]}
no sap sap-id [ingress] [egress]
Context
[Tree] (config>li>li-source sap)
Full Context
configure li li-source sap
Description
This command creates a service access point (SAP) within an LI configuration. The specified SAP must define a FastE, GigE, or XGigE, or XGigE access port with a dot1q, null, or q-in-q encapsulation type.
When the no form of this command is used on a SAP, the SAP with the specified port and encapsulation parameters is deleted.
Parameters
- sap-id
-
Specifies the physical port identifier portion of the SAP definition.
- egress
-
Specifies that the router perform lawful intercept on egress traffic. Packets egressing the SAP are mirrored to the mirror destination after egress packet modification.
- ingress
-
Specifies that the router perform lawful intercept on ingress traffic. Packets ingressing the SAP are mirrored to the mirror destination before ingress packet modification.
Platforms
All
sap
Syntax
sap sap-id {[egress] [ingress]}
no sap sap-id [egress] [ingress]
Context
[Tree] (debug>mirror-source sap)
Full Context
debug mirror-source sap
Description
This command enables mirroring of traffic ingressing or egressing a service access port (SAP). A SAP that is defined within a mirror destination cannot be used in a mirror source. The mirror source SAP referenced by the sap-id is owned by the service ID of the service in which it was created. The SAP is only referenced in the mirror source name for mirroring purposes. The mirror source association does not need to be removed before deleting the SAP from its service ID. If the SAP is deleted from its service ID, the mirror association is removed from the mirror source.
More than one SAP can be associated within a single mirror-source. Each SAP has its own ingress and egress parameter keywords to define which packets are mirrored to the mirror destination.
The SAP must be valid and properly configured. If the associated SAP does not exist, an error occurs and the command does not execute.
The same SAP cannot be associated with multiple mirror source definitions for ingress packets.
The same SAP cannot be associated with multiple mirror source definitions for egress packets.
If a particular SAP is not associated with a mirror source name, then that SAP does not have mirroring enabled for that mirror source.
Note that the ingress and egress options cannot be supported at the same time on a CEM encap-type SAP. The options must be configured in either the ingress or egress contexts (applies to the 7750 SR and 7950 XRS).
The no form of this command disables mirroring for the specified SAP. All mirroring for that SAP on ingress and egress is terminated. Mirroring of packets on the SAP can continue if more specific mirror criteria is configured. If the egress or ingress parameter keywords are specified in the no command, only the ingress or egress mirroring condition is removed.
Parameters
- sap-id
-
Specifies the physical port identifier portion of the SAP definition.
- egress
-
Specifies that packets egressing the SAP should be mirrored. Egress packets are mirrored to the mirror destination after egress packet modification.
- ingress
-
Specifies that packets ingressing the SAP should be mirrored. Ingress packets are mirrored to the mirror destination before the ingress packet modification.
Platforms
All
sap
Syntax
sap sap-id [create]
no sap sap-id
Context
[Tree] (config>system>satellite>local-forward sap)
Full Context
configure system satellite local-forward sap
Description
This command configures a Service Access Point (SAP) used in satellite local forward instances defined in the system.
The no form of this command removes the satellite access point from the local-forward instance.
Parameters
- eth-sat-id
-
Specifies the satellite access point in the local-forward instance in the esat-id/slot/port format.
- lag-id
-
Specifies the LAG identifier, expressed as an integer,
- qtag1
-
Specifies the qtag value.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
sap
Syntax
sap sap-id
no sap
Context
[Tree] (config>li>li-fltr>li-mac-fltr>entry>match sap)
Full Context
configure li li-filter li-mac-filter entry match sap
Description
This command specifies the QinQ SAP to match from the Epipe or VPLS service, where the s-tag must be a value and the outer-tag must be of type *. This filter match is used in conjunction with match criteria outer-tag where the outer-tag must also be provisioned for the entry match on the QinQ packet to activate.
The match criteria SAP must be an exact match with the QinQ configured on the Epipe or VPLS service. An associated outer-tag must be provisioned to match on the QinQ packet. For example, SAP 1/1/1:1.*, where the outer-tag is “*”, and an outer-tag of 1 would perform LI on 1/1/1:1.1 on a 1/1/1:1.* SAP.
The no form of this command removes the QinQ SAP as the match criterion.
Default
no sap
Parameters
- sap-id
-
Specifies the physical port identifier portion of the SAP definition.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
sap-egress
sap-egress
Syntax
sap-egress {policy-id | policy-name} [create] [name name]
no sap-egress {policy-id | policy-name}
Context
[Tree] (config>qos sap-egress)
Full Context
configure qos sap-egress
Description
This command is used to create or edit a Service Egress QoS policy. The egress policy defines the SLA for service packets as they egress on the SAP.
Policies are templates that can be applied to multiple services as long as the scope of the policy is template. The queues defined in the policy are not instantiated until a policy is applied to a service.
Sap-egress policies determine queue mappings based on ingress DSCP, IP precedence, dot1p, and IPv4 or IPv6 match criteria. Multiple queues can be created per forwarding class and each queue can have different CIR or PIR parameters.
Egress SAP QoS policies allow the definition of queues and the mapping of forwarding classes to those queues. Each queue needs to have a relative CIR for determining its allocation of QoS resources during periods of congestion. A PIR can also be defined that forces a hard limit on the packets transmitted through the queue. When the forwarding class is mapped to the queue, a DSCP, IP precedence, or dot1p value can optionally be specified.
The sap-egress policy with policy-id 1 is the default sap-egress QoS policy and is applied to service egress SAPs when an explicit policy is not specified or removed. The default sap-egress policy cannot be modified or deleted.
By default, all forwarding classes map to queue 1.
Any changes made to an existing policy, using any of the sub-commands, will be applied immediately to all egress SAPs where this policy is applied. For this reason, when many changes are required on a policy, it is highly recommended that the policy be copied to a work area policy-id. That work-in-progress policy can be modified until complete, then written over the original policy-id. Use the config qos copy command to maintain policies in this manner.
The no form of this command deletes the sap-egress policy. A policy cannot be deleted until it is removed from all service SAPs where it is applied. When a sap-egress policy is removed from a SAP, the SAP will revert to the default sap-egress policy-id 1.
Parameters
- policy-id
-
The policy-id uniquely identifies the policy on the router.
- policy-name
-
The policy-name uniquely identifies the policy.
- create
-
Required parameter when creating a SAP QoS egress policy.
- name
-
Configures an optional policy name which adds a name identifier to a specific policy to then use that policy name in configuration references as well as display and use policy names in show commands throughout the system. This helps the service provider or administrator to identify and manage sap-egress policies within the SR OS platforms.
All sap-egress policies are required to assign a policy ID to initially create a policy. However, either the policy ID or the policy name can be used to identify and reference a specific policy once it is initially created.
If a name is not specified at creation time, then SR OS assigns a string version of the policy-id as the name.
Platforms
All
sap-egress
Syntax
sap-egress src-pol dst-pol [overwrite]
Context
[Tree] (config>qos>copy sap-egress)
Full Context
configure qos copy sap-egress
Description
This command copies existing QoS policy entries for a QoS policy-id to another QoS policy-id.
The copy command is a configuration-level maintenance tool used to create new policies using existing policies. It also allows bulk modifications to an existing policy with the use of the overwrite keyword.
Parameters
- overwrite
-
Specifies to replace the existing destination policy. Everything in the existing destination policy will be overwritten with the contents of the source policy. If overwrite is not specified, an error will occur if the destination policy ID exists.
- Example:
-
— SR>config>qos# copy sap-egress 1 1010
— MINOR: CLI Destination "1010" exists use {overwrite}.
— SR>config>qos# copy sap-egress 1 1010 overwrite
- src-pol dst-pol
-
Indicates that the source policy ID and the destination policy ID are SAP egress policy IDs. Specify the source policy ID that the copy command will attempt to copy from and specify the destination policy ID to which the command will copy a duplicate of the policy.
Platforms
All
sap-host-limit
sap-host-limit
Syntax
sap-host-limit max-num-hosts-sap
no sap-host-limit
Context
[Tree] (config>service>ies>sub-if>grp-if>arp-host sap-host-limit)
[Tree] (config>service>vprn>sub-if>grp-if>arp-host sap-host-limit)
Full Context
configure service ies subscriber-interface group-interface arp-host sap-host-limit
configure service vprn subscriber-interface group-interface arp-host sap-host-limit
Description
This command configures the maximum number of ARP hosts per SAP.
The no form of this command reverts to the default.
Default
sap-host-limit 1
Parameters
- max-num-hosts-sap
-
Specifies the maximum number of ARP hosts per SAP allowed on this interface.
Note:The operational maximum value may be smaller because of equipped hardware dependencies.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sap-id
sap-id
Syntax
sap-id sap-id
no sap-id
Context
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>host-ident sap-id)
[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>host-identification sap-id)
Full Context
configure subscriber-mgmt local-user-db ipoe host host-identification sap-id
configure subscriber-mgmt local-user-db ppp host host-identification sap-id
Description
This command specifies the SAP ID to match for a host lookup. When the LUDB is accessed using a DHCPv4 server, the SAP-ID is matched against the Nokia vendor-specific sub-option in DHCP Option 82.
This command is used only when sap-id is configured as one of the match-list parameters.
The no form of this command removes the SAP ID from the configuration.
Parameters
- sap-id
-
Specifies a SAP ID, up to 255 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sap-id
Syntax
[no] sap-id
Context
[Tree] (config>service>vprn>if>dhcp>option>vendor sap-id)
[Tree] (config>subscr-mgmt>msap-policy>vpls-only>dhcp>option>vendor sap-id)
[Tree] (config>service>vpls>sap>dhcp>option>vendor sap-id)
[Tree] (config>service>ies>sub-if>grp-if>dhcp>option>vendor sap-id)
[Tree] (config>service>vprn>sub-if>grp-if>dhcp>option>vendor sap-id)
Full Context
configure service vprn interface dhcp option vendor-specific-option sap-id
configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp option vendor-specific-option sap-id
configure service vpls sap dhcp option vendor-specific-option sap-id
configure service ies subscriber-interface group-interface dhcp option vendor-specific-option sap-id
configure service vprn subscriber-interface group-interface dhcp option vendor-specific-option sap-id
Description
This command enables the sending of the SAP ID in the Nokia vendor-specific sub-option of the DHCP relay packet.
The no form of this command disables the sending of the SAP ID in the Nokia vendor-specific sub-option of the DHCP relay packet.
Platforms
All
- configure service vprn interface dhcp option vendor-specific-option sap-id
- configure service vpls sap dhcp option vendor-specific-option sap-id
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp option vendor-specific-option sap-id
- configure service ies subscriber-interface group-interface dhcp option vendor-specific-option sap-id
- configure service vprn subscriber-interface group-interface dhcp option vendor-specific-option sap-id
sap-id
Syntax
sap-id sap-string
no sap-id
Context
[Tree] (config>service>dynsvc>ladb>user>idx sap-id)
Full Context
configure service dynamic-services local-auth-db user-name index sap-id
Description
This command specifies the dynamic data service SAP that is created. A dynamic service SAP ID uniquely identifies a dynamic data service instance. For a local authenticated dynamic service data trigger, one of the dynamic service SAP IDs must be the data trigger SAP.
The no form of this command removes the sap-id from the configuration.
Parameters
- sap-string
-
Specifies a string representing the dynamic service SAP ID (only SAPs on Ethernet ports and LAGs are valid), up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sap-ingress
sap-ingress
Syntax
sap-ingress {policy-id | policy-name} [create] [name name]
no sap-ingress {policy-id | policy-name}
Context
[Tree] (config>qos sap-ingress)
Full Context
configure qos sap-ingress
Description
This command is used to create or edit the ingress policy. The ingress policy defines the SLA enforcement that service packets receive as they ingress a SAP. SLA enforcement is accomplished through the definition of queues that have Forwarding Class (FC), Fair Information Rate (FIR), Committed Information Rate (CIR), Peak Information Rate (PIR), Committed Burst Size (CBS), and Maximum Burst Size (MBS) characteristics.
Policies in effect are templates that can be applied to multiple services as long as the scope of the policy is template. Queues defined in the policy are not instantiated until they are assigned to at least one forwarding class and a policy is applied to a service SAP.
It is possible that a SAP ingress policy will include the dscp map command, the dot1p map command, and an IP or MAC match criteria. When multiple matches occur for the traffic, the order of precedence will be used to arrive at the final action. The order of precedence is as follows:
-
802.1p bits
-
DSCP
-
IP quintuple or MAC headers
The SAP ingress policy with policy-id 1 is a system-defined policy applied to services when no other policy is explicitly specified. The system SAP ingress policy cannot be modified or deleted. The default SAP ingress policy defines one unicast and one multipoint queue associated with all forwarding classes, with an FIR of zero, a CIR of zero, and a PIR of line rate.
Any changes made to the existing policy, using any of the sub-commands, are applied immediately to all services where this policy is applied. For this reason, when many changes are required on a policy, it is recommended that the policy be copied to a work area policy ID. That work-in-progress policy can be modified until complete, then written over the original policy-id. Use the config>qos>copy command to maintain policies in this manner.
The no form of this command deletes the SAP ingress policy. A policy cannot be deleted until it is removed from all services where it is applied.
Parameters
- policy-id
-
The policy-id uniquely identifies the policy.
- policy-name
-
The policy-name uniquely identifies the policy.
- create
-
Required parameter when creating a SAP QoS ingress policy.
- name name
-
Configures an optional policy name which adds a name identifier to a specific policy to then use that policy name in configuration references as well as display and use policy names in show commands throughout the system. This helps the service provider and administrator to identify and manage sap-ingress policies within the SR OS platforms.
All sap-ingress policies are required to assign a policy ID to initially create a policy. However, either the policy ID or the policy name can be used to identify and reference a specific policy after it is initially created.
If a name is not specified at creation time, then SR OS assigns a string version of the policy-id as the name.
Platforms
All
sap-ingress
Syntax
sap-ingress src-pol dst-pol [overwrite]
Context
[Tree] (config>qos>copy sap-ingress)
Full Context
configure qos copy sap-ingress
Description
This command copies existing QoS policy entries for a QoS policy-id to another QoS policy-id.
The copy command is a configuration-level maintenance tool used to create new policies using existing policies. It also allows bulk modifications to an existing policy with the use of the overwrite keyword.
Parameters
- overwrite
-
Specifies to replace the existing destination policy. Everything in the existing destination policy will be overwritten with the contents of the source policy. If overwrite is not specified, an error will occur if the destination policy ID exists.
- Example:
-
— SR>config>qos# copy sap-egress 1 1010
— MINOR: CLI Destination "1010" exists use {overwrite}.
— SR>config>qos# copy sap-egress 1 1010 overwrite
- src-pol dst-pol
-
Indicates that the source policy ID and the destination policy ID are SAP ingress policy IDs. Specify the source policy ID that the copy command will attempt to copy from and specify the destination policy ID to which the command will copy a duplicate of the policy.
Platforms
All
sap-limit
sap-limit
Syntax
sap-limit [limit]
no sap-limit
Context
[Tree] (config>service>dynsvc>policy sap-limit)
Full Context
configure service dynamic-services dynamic-services-policy sap-limit
Description
This command specifies a limit for the number of dynamic data service instances (SAPs) that can be setup simultaneously using a specific dynamic services policy.
A value of zero (0) means the policy is drained: existing dynamic data services can be modified and torn down but no new dynamic data services can be setup.
Default
sap-limit 1
Parameters
- limit
-
Specifies the number of dynamic data service SAPs that can be setup simultaneously using this dynamic services policy.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sap-parameters
sap-parameters
Syntax
sap-parameters
Context
[Tree] (config>service>ies>sub-if>grp-if sap-parameters)
[Tree] (config>service>vprn>sub-if>grp-if sap-parameters)
Full Context
configure service ies subscriber-interface group-interface sap-parameters
configure service vprn subscriber-interface group-interface sap-parameters
Description
Commands in this context configure parameters that can be applied to automatically-generated internal SAPs.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
sap-session-index
sap-session-index
Syntax
[no] sap-session-index
Context
[Tree] (config>subscr-mgmt>auth-policy>include-radius-attribute sap-session-index)
Full Context
configure subscriber-mgmt authentication-policy include-radius-attribute sap-session-index
Description
This command includes sap-session-index attributes.
The no form of this command excludes sap-session-index attributes.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sap-session-limit
sap-session-limit
Syntax
sap-session-limit sap-session-limit
no sap-session-limit
Context
[Tree] (config>service>vprn>sub-if>grp-if>pppoe sap-session-limit)
[Tree] (config>service>ies>sub-if>grp-if>pppoe sap-session-limit)
Full Context
configure service vprn subscriber-interface group-interface pppoe sap-session-limit
configure service ies subscriber-interface group-interface pppoe sap-session-limit
Description
This command specifies the number of PPPoE hosts per SAP allowed for this group-interface.
The no form of this command reverts to the default.
Default
sap-session-limit 1
Parameters
- sap-session-limit
-
Specifies the number of PPPoE hosts per SAP allowed.
Note:The operational maximum value may be smaller due to equipped hardware dependencies.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sap-session-limit
Syntax
sap-session-limit sap-session-limit
no sap-session-limit
Context
[Tree] (config>service>vprn>sub-if>grp-if>ipoe-session sap-session-limit)
[Tree] (config>service>ies>sub-if>grp-if>ipoe-session sap-session-limit)
Full Context
configure service vprn subscriber-interface group-interface ipoe-session sap-session-limit
configure service ies subscriber-interface group-interface ipoe-session sap-session-limit
Description
This command specifies the number of IPoE sessions per SAP allowed for this group-interface.
The no form of this command reverts to the default.
Default
sap-session-limit 1
Parameters
- sap-session-limit
-
Specifies the number of allowed IPoE sessions.
Note:The operational maximum value may be smaller due to equipped hardware dependencies.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sap-template
sap-template
Syntax
sap-template sap-template
no sap-template
Context
[Tree] (config>service>vpls>wlan-gw sap-template)
Full Context
configure service vpls wlan-gw sap-template
Description
This command specifies the VPLS SAP template that is applied on the internal SAPs created for communication between the VPLS and the ISAs.
The no form of this command removes the SAP template.
Parameters
- sap-template
-
Specifies the existing SAP template to apply. The template is created in the config>service>template context.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
sap-template
Syntax
sap-template name [create]
no sap-template name
Context
[Tree] (config>subscr-mgmt sap-template)
Full Context
configure subscriber-mgmt sap-template
Description
This command configures a template that specifies parameters for automatically generated subscriber SAPs, for example, when creating CUPS sessions. A template with the name "default" is used if no specific name is provided, but this must be manually provisioned.
The no form of this command removes the template.
Parameters
- name
-
Specifies the name of the PFCP association, up to 32 characters.
- create
-
Keyword used to create the SAP template.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sap-template-binding
sap-template-binding
Syntax
sap-template-binding name/id
no sap-template-binding
Context
[Tree] (config>service>vpls>vpls-group sap-template-binding)
Full Context
configure service vpls vpls-group sap-template-binding
Description
This command configures the binding to a SAP template to be used to instantiate SAPs in the data VPLS using as input variables the VLAN IDs generated by the vid-range command.
The no form of this command removes the binding and deletes the related SAP instances. The command will fail if any of the affected VPLS instances have either a provisioned SAP or an active MVRP declaration/registration or if the related vpls-group is in no shutdown state. Any changes to the sap-template-binding require the vpls-group to be in shutdown state. New control SAP additions to the management VPLS are allowed as long as data VPLS instantiations/removals for vpls-groups are not in progress. Control SAPs can be removed at any time generating the removal of related data SAPs from the data VPLS. The shutdown or no shutdown state for the control SAPs does not have any effect on data SAPs instantiated with this command.
Default
no sap-template-binding
Parameters
- name
-
Specifies the name of the VPLS template
- id
-
Specifies the ID of the VPLS template
Platforms
All
saps
saps
Syntax
saps {qset-size size | non-shaper-queues}
Context
[Tree] (config>qos>fp-resource-policy>aggregate-shapers>queue-sets>default-size saps)
Full Context
configure qos fp-resource-policy aggregate-shapers queue-sets default-size saps
Description
This command configures the default queue-set size for SAPs.
Parameters
- size
-
Specifies the size of the queue sets.
- non-shaper-queues
-
Specifies that subscribers will not use hardware aggregate shapers on FPs where the FP resource policy is applied.
Platforms
7750 SR-1, 7750 SR-s
sat-type
sat-type
Syntax
sat-type sat-type [port-template template-name]
no sat-type
Context
[Tree] (config>system>satellite>tdm-sat sat-type)
[Tree] (config>system>satellite>eth-sat sat-type)
Full Context
configure system satellite tdm-sat sat-type
configure system satellite eth-sat sat-type
Description
This command configures the type of satellite variant for the associated satellite chassis.
The no form of the command deletes the sat-type configuration.
Default
no sat-type
Parameters
- sat-type
-
Specifies the satellite type. Configuration of the following variants is supported:
- es24-1gb-sfp
-
Specifies the 24xGE (SFP) + 4x10GE Ethernet satellite.
- es48-1gb-sfp
-
Specifies the 48xGE (SFP) + 4x10GE Ethernet satellite.
- es24-sass-1gb-sfp
-
Specifies the SAS-S 24xGE (SFP) + 4x10GE Ethernet satellite.
- es48-sass-1gb-sfp
-
Specifies the SAS-S 48xGE (SFP) + 4x10GE Ethernet satellite.
- es24-1gb-tx
-
Specifies the 24xGE (copper) + 4x10GE Ethernet satellite.
- es48-1gb-tx
-
Specifies the 48xGE (copper) + 4x10GE Ethernet satellite.
- es24-1gb-tx
-
Specifies the 24-port copper + PoE Ethernet satellite.
- es48-1gb-tx
-
Specifies the 48-port copper + PoE Ethernet satellite.
- es64-10gb-sfpp+4-100gb-cfp4
-
Specifies the 64x10GE + 4x100GE Ethernet satellite.
- es64-10gb-sfpp+4-100gb-qsfp28
-
Specifies the 64x10GE + 4xQSFP28 Ethernet satellite.
- es24-sasmxp-1gb-sfp
-
Specifies the 7210 SAS-Mxp as an ethernet satellite.
- ts4-choc3-sfp
-
Specifies the 4-port OC3 TDM satellite.
- ts4-chstm1-sfp
-
Specifies the 4-port STM1 TDM satellite.
- ts1-choc12-sfp
-
Specifies the 1-port OC12 TDM satellite.
- ts1-chstm4-sfp
-
Specifies the 1-port STM4 TDM satellite.
- template-name
-
Specifies the name for the associated port template.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
- configure system satellite tdm-sat sat-type
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure system satellite eth-sat sat-type
satellite
satellite
Syntax
satellite
Context
[Tree] (config>system satellite)
Full Context
configure system satellite
Description
This command enables the satellite configuration context. Within the satellite context, the administrator can specify the configuration details for a satellite chassis that is hosted by the associated local system.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
satellite
Syntax
satellite
Context
[Tree] (admin satellite)
Full Context
admin satellite
Description
This command performs satellite operations.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
save
save
Syntax
save
Context
[Tree] (config>li save)
Full Context
configure li save
Description
This command is required to save LI configuration parameters.
Platforms
All
save
Syntax
save [cflash-id]
Context
[Tree] (bof save)
Full Context
bof save
Description
This command uses the boot option parameters currently in memory and writes them from the boot option file to the specified compact flash.
The BOF must be located in the root directory of the internal or external compact flash drives local to the system and have the mandatory filename of bof.cfg.
If a location is not specified, the BOF is saved to the default compact flash drive (cf3:) on the active CPM (typically the CPM in slot A, but the CPM in slot B could also be acting as the active CPM). The slot name is not case-sensitive. You can use upper or lowercase "A” or "B”.
Command usage:
-
bof save — saves the BOF to the default drive (cf3:) on the active CPM (either in slot A or B)
-
bof save cf3: — saves the BOF to cf3: on the active CPM (either in slot A or B)
To save the BOF to a compact flash drive on the standby CPM (for example, the redundant (standby) CPM is installed in slot B), specify -A or -B option.
Command usage:
-
bof save cf3-A: — saves the BOF to cf3: on CPM in slot A whether it is active or standby
-
bof save cf3-B: — saves the BOF to cf3: on CPM in slot B whether it is active or standby
The slot name is not case-sensitive. You can use upper or lowercase "A” or "B”.
The bof save and show bof commands allow you to save to or read from the compact flash of the standby CPM. Use the show card command to determine the active and standby CPM (A or B).
Default
Saves must be explicitly executed. The BOF is saved to cf3: if a location is not specified.
Parameters
- flash-id
-
Specifies the compact flash ID where the bof.cfg is to be saved.
Platforms
All
save
Syntax
save file-url
Context
[Tree] (candidate save)
Full Context
candidate save
Description
This command saves the current candidate to a file.
Parameters
- file-url
-
Specifies the directory and filename.
Platforms
All
save
Syntax
save [comment comment] [rescue]
Context
[Tree] (admin>rollback save)
Full Context
admin rollback save
Description
If the optional rescue keyword is not used, this command saves a rollback checkpoint at the location and with the filename specified by the rollback-location with a suffix of .rb. The previously saved checkpoints will have their suffixes incremented by one (.rb.1 becomes .rb.2, and so on). If there are already as many checkpoint files as the maximum number supported, then the last checkpoint file is deleted.
If the rescue keyword is used, then this command saves the current operational configuration as a rescue configuration at the location and with the filename specified by the rescue location. The filename will have the suffix .rc appended.
Parameters
- comment-string
-
Specifies a comment, up to 255 characters, that is associated with the checkpoint.
- rescue
-
Saves the rescue checkpoint instead of a normal rollback checkpoint.
Platforms
All
save
Syntax
save [file-url] [detail] [index]
Context
[Tree] (admin save)
Full Context
admin save
Description
This command saves the running configuration to a configuration file. For example:
A:ALA-1>admin# save ftp://test:test@192.168.x.xx/./100.cfg
Saving configuration .........Completed.
By default, the running configuration is saved to the primary configuration file.
Parameters
- file-url
-
Specifies the file URL location to save the configuration file.
- detail
-
Saves both default and non-default configuration parameters.
- index
-
Forces a save of the persistent index file regardless of the persistent status in the BOF file. The index option can also be used to avoid an additional boot required while changing your system to use the persistence indexes.
Platforms
All
save-deterministic-script
save-deterministic-script
Syntax
save-deterministic-script
Context
[Tree] (admin>nat save-deterministic-script)
Full Context
admin nat save-deterministic-script
Description
This command saves the script that calculates Deterministic NAT map entries.
Once the location for the Python deterministic NAT script is configured, the script is generated/updated every time deterministic NAT configuration is modified. However, the script must be manually exported to the remote location. This command triggers the export of the script to a remote location.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
save-when-restricted
save-when-restricted
Syntax
[no] save-when-restricted
Context
[Tree] (config>system>security>user-template save-when-restricted)
[Tree] (config>system>security>user save-when-restricted)
Full Context
configure system security user-template save-when-restricted
configure system security user save-when-restricted
Description
This command specifies whether the system permits configuration save operations for all configuration regions (bof, debug, configure, li) via any management interface (such as CLI and NETCONF) even if restricted-to-home is enabled.
The configuration for a region can be saved with CLI commands such as bof save, admin debug-save, admin save, or configure li save.
The no form of this command denies saving the configuration when restricted-to-home is enabled.
Default
save-when-restricted
Platforms
All
saved-ind-prompt
saved-ind-prompt
Syntax
[no] saved-ind-prompt
Context
[Tree] (environment saved-ind-prompt)
Full Context
environment saved-ind-prompt
Description
This command enables saved indicator in the prompt. When changes are made to the configuration file a "*” appears in the prompt string indicating that the changes have not been saved. When an admin save command is executed the "*” disappears.
*A:ALA-48# admin save
Writing file to ftp://192.0.2.43/./sim48/sim48-config.cfg
Saving configuration .... Completed.
A:ALA-48#
Platforms
All
scaling-profile
scaling-profile
Syntax
scaling-profile scaling-profile-id
Context
[Tree] (config isa nat-group scaling-profile)
Full Context
configure isa nat-group scaling-profile
Description
This command determines profiles for NAT scaling. Lower profile numbers allocate less resources, therefore, supporting lower scaling.
Contact your Nokia representative for more information about NAT scaling figures in each profile.
Default
scaling-profile profile1
Parameters
- scaling-profile-id
-
Specifies the name of the profile, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
sched-class
sched-class
Syntax
sched-class sched-class group name [weight weight]
no sched-class sched-class
Context
[Tree] (config>qos>hw-agg-shap-sched-plcy sched-class)
Full Context
configure qos hw-agg-shaper-scheduler-policy sched-class
Description
This command configures the scheduling class for the hardware aggregate shaper scheduler policy.
The no form of this command removes the scheduling class configuration.
Parameters
- sched-class
-
Specifies the scheduling class ID.
- name
-
Assigns the specified scheduling class to a group within the hardware aggregate shaper scheduler policy.
- weight
-
Specifies the weight for a scheduling class within the specified group.
Platforms
7750 SR-1, 7750 SR-s
sched-class
Syntax
sched-class sched-class
no sched-class
Context
[Tree] (config>qos>sap-egress>queue sched-class)
Full Context
configure qos sap-egress queue sched-class
Description
This command configures the scheduling class for the hardware aggregate shaper scheduler policy.
The no form of this command removes the scheduling class configuration.
Parameters
- sched-class
-
Specifies the scheduling class ID.
Platforms
7750 SR-1, 7750 SR-s
sched-class-elevation
sched-class-elevation
Syntax
sched-class-elevation sched-class sched-class weight weight
no sched-class-elevation sched-class sched-class
Context
[Tree] (config>qos>sap-egress sched-class-elevation)
Full Context
configure qos sap-egress sched-class-elevation
Description
This command configures the scheduling class elevation.
The no form of this command removes the scheduling class elevation configuration.
Parameters
- sched-class
-
Specifies the scheduling class ID.
- weight
-
Specifies the weight for the scheduling class.
Platforms
7750 SR-1, 7750 SR-s
sched-run-min-int
sched-run-min-int
Syntax
sched-run-min-int percent-of-default
no sched-run-min-int
Context
[Tree] (config>card>virt-sched-adj sched-run-min-int)
Full Context
configure card virtual-scheduler-adjustment sched-run-min-int
Description
This command overrides the default minimum time that must elapse before a virtual scheduler may redistribute bandwidth based on changes to the offered rates of member policers or queues. A minimum run interval is enforced to allow a minimum amount of "batching” queue changes before reacting to the changed rates. This minimum interval is beneficial since the periodic function of determining policer or queue offered rates is performed sequentially and the interval allows a number policer and queue rates to be determined before determining the distribution of bandwidth to the policers and queues.
The default minimum scheduler run interval is 0.5 seconds. The sched-run-min-int command uses a percent value to modify the default interval.
The no form of this command restores the default minimum scheduler run interval for all virtual schedulers on the card.
Default
no sched-run-min-int
Parameters
- percent-of-default
-
Specifies that the percent-of-default parameter is required and is used to modify the default minimum scheduler run interval for all virtual schedulers on the card. Defining 100.00 percent is equivalent to removing the override (restoring the default) for the minimum scheduler run interval.
Platforms
All
schedule
schedule
Syntax
[no] schedule schedule-name [owner schedule-owner]
Context
[Tree] (config>system>cron schedule)
Full Context
configure system cron schedule
Description
This command configures the type of schedule to run, including one-time only (oneshot), periodic or calendar-based runs. All runs are determined by month, day of month or weekday, hour, minute and interval (seconds).
The no form of the command removes the context from the configuration.
Parameters
- schedule-name
-
Specifies the name of the schedule. The name can be up to 32 characters.
- schedule-owner
-
Specifies the owner name of the schedule. The name can be up to 32 characters.
Platforms
All
schedule-type
schedule-type
Syntax
schedule-type schedule-type
Context
[Tree] (config>system>security>pki>ca-prof>auto-crl-update schedule-type)
Full Context
configure system security pki ca-profile auto-crl-update schedule-type
Description
This command specifies the schedule type for auto CRL update. The system supports two types:
-
periodic: — The system will download a CRL periodically at the interval configured via the periodic-update-interval command. For example, if the periodic-update-interval is 1 day, then the system will download a CRL every 1 day. The minimal periodic-update-interval is 1 hour.
-
next-update-based — The system will download a CRL at the time = Next_Update_of_existing_CRL minus pre-update-time. For example, if the Next-Update of the existing CRL is 2015-06-30 06:00 and pre-update-time is 1 hour, then the system will start downloading at 2015-06-30, 05:00.
Default
schedule-type next-update-based
Parameters
- schedule-type
-
Specifies the type of time scheduler to update the CRL.
Platforms
All
scheduler
scheduler
Syntax
scheduler scheduler-name rate pir-rate [cir cir-rate]
no scheduler scheduler-name
Context
[Tree] (config>subscr-mgmt>sub-prof>ing>sched scheduler)
[Tree] (config>subscr-mgmt>sub-prof>egr>sched scheduler)
Full Context
configure subscriber-mgmt sub-profile ingress scheduler-policy scheduler
configure subscriber-mgmt sub-profile egress scheduler-policy scheduler
Description
This command provides a way to override parameters of the existing scheduler associated with the egress or ingress scheduler policy. A scheduler defines bandwidth controls that limit each child (other schedulers and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created will have queues or other schedulers defined as child associations. The scheduler can be a child (take bandwidth from a scheduler in a higher tier).
The no form of this command reverts to the default.
Parameters
- scheduler-policy-name
-
Specify an existing scheduler policy name.
- pir-rate
-
Specify the pir-rate, in kilobits, to override the administrative PIR used by the scheduler. When the rate command is executed, a valid PIR setting must be explicitly defined. Fractional values are not allowed and must be specified as a positive integer.
- cir-rate
-
The cir parameter overrides the administrative CIR used by the scheduler. When the rate command is executed, a CIR setting is optional. The sum keyword specifies that the CIR be used as the summed CIR values of the children schedulers or queues. Fractional values are not allowed and must be given as a positive integer.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
scheduler
Syntax
scheduler scheduler-name [create]
no scheduler scheduler-name
Context
[Tree] (config>service>vpls>sap>egress>sched-override scheduler)
Full Context
configure service vpls sap egress scheduler-override scheduler
Description
This command overrides specific attributes of the specified scheduler name.
A scheduler defines a bandwidth control that limits each child (other schedulers, policers and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created has policers, queues or other schedulers defined as child associations. The scheduler can be a child which takes bandwidth from a scheduler in a higher tier. A total of 32 schedulers can be created within a single scheduler policy with no restriction on the distribution between the tiers.
Each scheduler must have a unique name within the context of the scheduler policy; however the same name can be reused in multiple scheduler policies. If scheduler-name already exists within the policy tier level (regardless of the inclusion of the keyword create), the context changes to that scheduler name for the purpose of editing the scheduler parameters. Modifications made to an existing scheduler are executed on all instantiated schedulers created through association with the policy of the edited scheduler. This can cause policers, queues or schedulers to become orphaned (invalid parent association) and adversely affect the ability of the system to enforce service level agreements (SLAs).
If the scheduler-name exists within the policy on a different tier (regardless of the inclusion of the keyword create), an error occurs and the current CLI context does not change.
If the scheduler-name does not exist in this or another tier within the scheduler policy, it is assumed that an attempt is being made to create a scheduler of that name. The success of the command execution is dependent on the following:
-
The maximum number of schedulers has not been configured.
-
The provided scheduler-name is valid.
-
The create keyword is entered with the command if the system is configured to require it (enabled in the environment create command).
When the maximum number of schedulers has been exceeded on the policy, a configuration error occurs and the command does not execute, nor does the CLI context change.
If the provided scheduler-name is invalid according to the criteria below, a name syntax error occurs, the command does not execute, and the CLI context does not change.
The no form of this command removes the scheduler name from the configuration.
Parameters
- scheduler-name
-
Specifies name of the scheduler
- create
-
This optional keyword explicitly specifies that it is acceptable to create a scheduler with the given scheduler-name. If the create keyword is omitted, scheduler-name is not created when the system environment variable create is set to true. This safeguard is meant to avoid accidental creation of system objects (such as schedulers) while attempting to edit an object with a mistyped name or ID. The keyword has no effect when the object already exists.
Platforms
All
scheduler
Syntax
scheduler scheduler-name [create]
no scheduler scheduler-name
Context
[Tree] (config>port>ethernet>access>ing>qgrp>sched-override scheduler)
[Tree] (config>port>ethernet>access>egr>qgrp>sched-override scheduler)
Full Context
configure port ethernet access ingress queue-group scheduler-override scheduler
configure port ethernet access egress queue-group scheduler-override scheduler
Description
This command can be used to override specific attributes of the specified scheduler name. A scheduler defines bandwidth controls that limit each child (other schedulers and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created will have queues or other schedulers defined as child associations. The scheduler can be a child which takes bandwidth from a scheduler in a higher tier. A total of 32 schedulers can be created within a single scheduler policy with no restriction on the distribution between the tiers. The scheduler-name must exist in the applied scheduler policy.
The no form of this command removes the scheduler overrides for the specified scheduler and returns the scheduler’s parent weight and CIR weight, and its PIR and CIR to the values configured in the applied scheduler policy.
Parameters
- scheduler-name
-
Specifies the name of the scheduler.
- create
-
Creates a new scheduler for this port.
Platforms
All
scheduler
Syntax
scheduler scheduler-name [create]
no scheduler scheduler-name
Context
[Tree] (config>service>ipipe>sap>egress>sched-override scheduler)
[Tree] (config>service>ipipe>sap>ingress>sched-override scheduler)
[Tree] (config>service>cpipe>sap>egress>sched-override scheduler)
[Tree] (config>service>cpipe>sap>ingress>sched-override scheduler)
[Tree] (config>service>epipe>sap>egress>sched-override scheduler)
[Tree] (config>service>epipe>sap>ingress>sched-override scheduler)
Full Context
configure service ipipe sap egress scheduler-override scheduler
configure service ipipe sap ingress scheduler-override scheduler
configure service cpipe sap egress scheduler-override scheduler
configure service cpipe sap ingress scheduler-override scheduler
configure service epipe sap egress scheduler-override scheduler
configure service epipe sap ingress scheduler-override scheduler
Description
This command can be used to override specific attributes of the specified scheduler name. A scheduler defines bandwidth controls that limit each child (other schedulers, policers, and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created will have policers, queues or other schedulers defined as child associations. The scheduler can be a child which takes bandwidth from a scheduler in a higher tier. A total of 32 schedulers can be created within a single scheduler policy with no restriction on the distribution between the tiers.
Each scheduler must have a unique name within the context of the scheduler policy; however the same name can be reused in multiple scheduler policies. If scheduler-name already exists within the policy tier level (regardless of the inclusion of the keyword create), the context changes to that scheduler name for the purpose of editing the scheduler parameters. Modifications made to an existing scheduler are executed on all instantiated schedulers created through association with the policy of the edited scheduler. This can cause policers, queues, or schedulers to become orphaned (invalid parent association) and adversely affect the ability of the system to enforce service level agreements (SLAs).
If the scheduler-name exists within the policy on a different tier (regardless of the inclusion of the keyword create), an error occurs and the current CLI context will not change.
If the scheduler-name does not exist in this or another tier within the scheduler policy, it is assumed that an attempt is being made to create a scheduler of that name. The success of the command execution is dependent on the following:
-
The maximum number of schedulers has not been configured.
-
The provided scheduler-name is valid.
-
The create keyword is entered with the command if the system is configured to require it (enabled in the environment create command).
When the maximum number of schedulers has been exceeded on the policy, a configuration error occurs and the command will not execute, nor will the CLI context change.
If the provided scheduler-name is invalid according to the following criteria, a name syntax error will occur, the command will not execute, and the CLI context will not change.
Parameters
- scheduler-name
-
The name of the scheduler. Each scheduler must be explicitly created.
- create
-
This optional keyword explicitly specifies that it is acceptable to create a scheduler with the given scheduler-name. If the create keyword is omitted, scheduler-name is not created when the system environment variable create is set to true. This safeguard is meant to avoid accidental creation of system objects (such as schedulers) while attempting to edit an object with a mistyped name or ID. The keyword has no effect when the object already exists.
Platforms
All
- configure service epipe sap ingress scheduler-override scheduler
- configure service ipipe sap egress scheduler-override scheduler
- configure service epipe sap egress scheduler-override scheduler
- configure service ipipe sap ingress scheduler-override scheduler
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service cpipe sap egress scheduler-override scheduler
- configure service cpipe sap ingress scheduler-override scheduler
scheduler
Syntax
scheduler scheduler-name [create]
no scheduler scheduler-name
Context
[Tree] (config>service>vprn>if>sap>egress>sched-override scheduler)
[Tree] (config>service>vprn>if>sap>ingress>sched-override scheduler)
Full Context
configure service vprn interface sap egress scheduler-override scheduler
configure service vprn interface sap ingress scheduler-override scheduler
Description
This command can be used to override specific attributes of the specified scheduler name.
A scheduler defines a bandwidth controls that limit each child (other schedulers, policers, and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created will have policers, queues, or other schedulers defined as child associations. The scheduler can be a child which takes bandwidth from a scheduler in a higher tier. A total of 32 schedulers can be created within a single scheduler policy with no restriction on the distribution between the tiers.
Each scheduler must have a unique name within the context of the scheduler policy; however the same name can be reused in multiple scheduler policies. If scheduler-name already exists within the policy tier level (regardless of the inclusion of the keyword create), the context changes to that scheduler name for the purpose of editing the scheduler parameters. Modifications made to an existing scheduler are executed on all instantiated schedulers created through association with the policy of the edited scheduler. This can cause queues or schedulers to become orphaned (invalid parent association) and adversely affect the ability of the system to enforce service level agreements (SLAs).
If the scheduler-name exists within the policy on a different tier (regardless of the inclusion of the keyword create), an error occurs and the current CLI context will not change.
If the scheduler-name does not exist in this or another tier within the scheduler policy, it is assumed that an attempt is being made to create a scheduler of that name. The success of the command execution is dependent on the following:
-
The maximum number of schedulers has not been configured.
-
The provided scheduler-name is valid.
-
The create keyword is entered with the command if the system is configured to require it (enabled in the environment create command).
When the maximum number of schedulers has been exceeded on the policy, a configuration error occurs and the command will not execute, nor will the CLI context change.
If the provided scheduler-name is invalid according to the criteria below, a name syntax error will occur, the command will not execute, and the CLI context will not change.
Parameters
- scheduler-name
-
Specifies the name of the scheduler.
- create
-
Specifies that it is acceptable to create a scheduler with the given scheduler-name. If the create keyword is omitted, scheduler-name is not created when the system environment variable create is set to true. This safeguard is meant to avoid accidental creation of system objects (such as schedulers) while attempting to edit an object with a mistyped name or ID. The keyword has no effect when the object already exists.
Platforms
All
scheduler
Syntax
scheduler scheduler-name [create]
no scheduler scheduler-name
Context
[Tree] (config>service>ies>if>sap>egress>sched-override scheduler)
[Tree] (config>service>ies>if>sap>ingress>sched-override scheduler)
Full Context
configure service ies interface sap egress scheduler-override scheduler
configure service ies interface sap ingress scheduler-override scheduler
Description
This command can be used to override specific attributes of the specified scheduler name.
A scheduler defines a bandwidth controls that limit each child (other schedulers, policers, and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created will have policers, queues, or other schedulers defined as child associations. The scheduler can be a child which takes bandwidth from a scheduler in a higher tier. A total of 32 schedulers can be created within a single scheduler policy with no restriction on the distribution between the tiers.
Each scheduler must have a unique name within the context of the scheduler policy; however the same name can be reused in multiple scheduler policies. If scheduler-name already exists within the policy tier level (regardless of the inclusion of the keyword create), the context changes to that scheduler name for the purpose of editing the scheduler parameters. Modifications made to an existing scheduler are executed on all instantiated schedulers created through association with the policy of the edited scheduler. This can cause queues or schedulers to become orphaned (invalid parent association) and adversely affect the ability of the system to enforce service level agreements (SLAs).
If the scheduler-name exists within the policy on a different tier (regardless of the inclusion of the keyword create), an error occurs and the current CLI context will not change.
If the scheduler-name does not exist in this or another tier within the scheduler policy, it is assumed that an attempt is being made to create a scheduler of that name. The success of the command execution is dependent on the following:
-
The maximum number of schedulers has not been configured.
-
The provided scheduler-name is valid.
-
The create keyword is entered with the command if the system is configured to require it (enabled in the environment create command).
When the maximum number of schedulers has been exceeded on the policy, a configuration error occurs and the command will not execute, nor will the CLI context change.
If the provided scheduler-name is invalid according to the criteria below, a name syntax error will occur, the command will not execute, and the CLI context will not change.
Parameters
- scheduler-name
-
The name of the scheduler. Each scheduler must be explicitly created.
- create
-
This optional keyword explicitly specifies that it is acceptable to create a scheduler with the given scheduler-name. If the create keyword is omitted, scheduler-name is not created when the system environment variable create is set to true. This safeguard is meant to avoid accidental creation of system objects (such as schedulers) while attempting to edit an object with a mistyped name or ID. The keyword has no effect when the object already exists.
Platforms
All
scheduler
Syntax
scheduler scheduler-name [create]
no scheduler scheduler-name
Context
[Tree] (config>qos>scheduler-policy>tier scheduler)
Full Context
configure qos scheduler-policy tier scheduler
Description
This command creates a new scheduler or edits an existing scheduler within the scheduler policy tier. A scheduler defines bandwidth controls that limit each child (other schedulers and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created will have queues or other schedulers defined as child associations. The scheduler can be a child which takes bandwidth from a scheduler in a higher tier. A total of 32 schedulers can be created within a single scheduler policy with no restriction on the distribution between the tiers.
Each scheduler must have a unique name within the context of the scheduler policy; however, the same name can be reused in multiple scheduler policies. If scheduler-name already exists within the policy tier level (regardless of the inclusion of the keyword create), the context changes to that scheduler name for the purpose of editing the scheduler parameters. Modifications made to an existing scheduler are executed on all instantiated schedulers created through association with the policy of the edited scheduler. This can cause queues or schedulers to become orphaned (invalid parent association) and adversely affect the ability of the system to enforce SLAs.
If the scheduler-name exists within the policy on a different tier (regardless of the inclusion of the keyword create), an error occurs and the current CLI context will not change.
If the scheduler-name does not exist in this or another tier within the scheduler policy, it is assumed that an attempt is being made to create a scheduler of that name. The success of the command execution is dependent on the following:
-
The maximum number of schedulers has not been configured.
-
The provided scheduler-name is valid.
-
The create keyword is entered with the command if the system is configured to require it (enabled in the environment create command).
When the maximum number of schedulers has been exceeded on the policy, a configuration error occurs, the command will not execute, nor will the CLI context change.
If the provided scheduler-name is invalid according to the criteria below, a name syntax error will occur, the command will not execute, and the CLI context will not change.
Parameters
- scheduler-name
-
Specifies the scheduler name.
- create
-
This optional keyword explicitly specifies that it is acceptable to create a scheduler with the given scheduler-name. If the create keyword is omitted, scheduler-name is not created when the system environment variable create is set to true. This safeguard is meant to avoid accidental creation of system objects (such as schedulers) while attempting to edit an object with a mistyped name or ID. The keyword has no effect when the object already exists.
Platforms
All
scheduler
Syntax
scheduler scheduler-name [create]
no scheduler scheduler-name
Context
[Tree] (config>service>cust>multi-service-site>egress>sched-override scheduler)
[Tree] (config>service>cust>multi-service-site>ingress>sched-override scheduler)
Full Context
configure service customer multi-service-site egress scheduler-override scheduler
configure service customer multi-service-site ingress scheduler-override scheduler
Description
This command override specifics attributes of the specified scheduler name.
A scheduler defines bandwidth controls that limit each child (other schedulers, policers and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created will have policers, queues or other schedulers defined as child associations. The scheduler can be a child which takes bandwidth from a scheduler in a higher tier. A total of 32 schedulers can be created within a single scheduler policy with no restriction on the distribution between the tiers.
Each scheduler must have a unique name within the context of the scheduler policy; however the same name can be reused in multiple scheduler policies. If scheduler-name already exists within the policy tier level (regardless of the inclusion of the keyword create), the context changes to that scheduler name for the purpose of editing the scheduler parameters. Modifications made to an existing scheduler are executed on all instantiated schedulers created through association with the policy of the edited scheduler. This can cause policer, queues or schedulers to become orphaned (invalid parent association) and adversely affect the ability of the system to enforce service level agreements (SLAs).
If the scheduler-name exists within the policy on a different tier (regardless of the inclusion of the keyword create), an error occurs and the current CLI context will not change.
If the scheduler-name does not exist in this or another tier within the scheduler policy, it is assumed that an attempt is being made to create a scheduler of that name. The success of the command execution is dependent on the following:
-
The maximum number of schedulers has not been configured.
-
The provided scheduler-name is valid.
-
The create keyword is entered with the command if the system is configured to require it (enabled in the environment create command).
When the maximum number of schedulers has been exceeded on the policy, a configuration error occurs and the command will not execute, nor will the CLI context change.
If the provided scheduler-name is invalid according to the criteria below, a name syntax error will occur, the command will not execute, and the CLI context will not change.
The no form of the command disables the scheduler override.
Parameters
- scheduler-name
-
Specifies the name of the scheduler.
- create
-
This optional keyword explicitly specifies that it is acceptable to create a scheduler with the given scheduler-name. If the create keyword is omitted, scheduler-name is not created when the system environment variable create is set to true. This safeguard is meant to avoid accidental creation of system objects (such as schedulers) while attempting to edit an object with a mistyped name or ID. The keyword has no effect when the object already exists.
Platforms
All
scheduler
Syntax
scheduler scheduler-name rate pir-rate [cir cir-rate]
no scheduler scheduler-name
Context
[Tree] (config>subscr-mgmt>sla-prof>egress>sched scheduler)
Full Context
configure subscriber-mgmt sla-profile egress scheduler-policy scheduler
Description
This command provides a way to override parameters of the existing scheduler associated with the egress scheduler policy. A scheduler defines bandwidth controls that limit each child (other schedulers and queues) associated with the scheduler. Scheduler objects are created within the hierarchical tiers of the policy. It is assumed that each scheduler created will have queues or other schedulers defined as child associations. The scheduler can be a child (take bandwidth from a scheduler in a higher tier).
The no form of this command reverts to the default.
Parameters
- scheduler-name
-
Specify an existing scheduler policy name up to 32 characters.
- pir-rate
-
Specifies the PIR rate in kb/s. This parameter overrides the administrative PIR used by the scheduler. When the rate command is executed, a valid PIR setting must be explicitly defined. Fractional values are not allowed and must be given as a positive integer.
- cir-rate
-
Specifies the CIR rate in kb/s. This parameter overrides the administrative CIR used by the scheduler. When the rate command is executed, a CIR setting is optional. The sum keyword specifies that the CIR be used as the summed CIR values of the children schedulers or queues. Fractional values are not allowed and must be given as a positive integer.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
scheduler-override
scheduler-override
Syntax
[no] scheduler-override
Context
[Tree] (config>service>vpls>sap>ingress scheduler-override)
[Tree] (config>service>vpls>sap>egress scheduler-override)
Full Context
configure service vpls sap ingress scheduler-override
configure service vpls sap egress scheduler-override
Description
Commands in this context configure the set of attributes whose values have been overridden via management on this virtual scheduler. Clearing a given flag returns the corresponding overridden attribute to the value defined on the SAP's ingress scheduler policy.
The no form of this command removes scheduler parameters from the configuration.
Platforms
All
scheduler-override
Syntax
[no] scheduler-override
Context
[Tree] (config>port>ethernet>access>egr>qgrp scheduler-override)
[Tree] (config>port>ethernet>access>ing>qgrp scheduler-override)
Full Context
configure port ethernet access egress queue-group scheduler-override
configure port ethernet access ingress queue-group scheduler-override
Description
This command specifies the set of attributes whose values have been overridden by management on this virtual scheduler. Clearing a given flag will return the corresponding overridden attribute to the value defined on the ingress or egress queue group template.
The no form of this command removes all of the scheduler overrides and returns the scheduler’s parent weight and CIR weight, and its PIR and CIR to the values configured in the applied scheduler policy.
Platforms
All
scheduler-override
Syntax
[no] scheduler-override
Context
[Tree] (config>service>epipe>sap>ingress scheduler-override)
[Tree] (config>service>cpipe>sap>egress scheduler-override)
[Tree] (config>service>ipipe>sap>ingress scheduler-override)
[Tree] (config>service>ipipe>sap>egress scheduler-override)
[Tree] (config>service>cpipe>sap>ingress scheduler-override)
[Tree] (config>service>epipe>sap>egress scheduler-override)
Full Context
configure service epipe sap ingress scheduler-override
configure service cpipe sap egress scheduler-override
configure service ipipe sap ingress scheduler-override
configure service ipipe sap egress scheduler-override
configure service cpipe sap ingress scheduler-override
configure service epipe sap egress scheduler-override
Description
This command specifies the set of attributes whose values have been overridden by management on this virtual scheduler. Clearing a given flag will return the corresponding overridden attribute to the value defined on the SAP's ingress scheduler policy.
Platforms
All
- configure service ipipe sap ingress scheduler-override
- configure service ipipe sap egress scheduler-override
- configure service epipe sap egress scheduler-override
- configure service epipe sap ingress scheduler-override
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service cpipe sap ingress scheduler-override
- configure service cpipe sap egress scheduler-override
scheduler-override
Syntax
[no] scheduler-override
Context
[Tree] (config>service>ies>if>sap>egress scheduler-override)
[Tree] (config>service>ies>if>sap>ingress scheduler-override)
Full Context
configure service ies interface sap egress scheduler-override
configure service ies interface sap ingress scheduler-override
Description
This command specifies the set of attributes whose values have been overridden via management on this virtual scheduler. Clearing a given flag will return the corresponding overridden attribute to the value defined on the SAP's ingress scheduler policy.
Platforms
All
scheduler-override
Syntax
[no] scheduler-override
Context
[Tree] (config>service>vprn>if>sap>ingress scheduler-override)
[Tree] (config>service>vprn>if>sap>egress scheduler-override)
Full Context
configure service vprn interface sap ingress scheduler-override
configure service vprn interface sap egress scheduler-override
Description
This command specifies the set of attributes whose values have been overridden via management on this virtual scheduler. Clearing a given flag will return the corresponding overridden attribute to the value defined on the SAP's ingress scheduler policy.
Platforms
All
scheduler-override
Syntax
[no] scheduler-override
Context
[Tree] (config>service>cust>multi-service-site>egress scheduler-override)
[Tree] (config>service>cust>multi-service-site>ingress scheduler-override)
Full Context
configure service customer multi-service-site egress scheduler-override
configure service customer multi-service-site ingress scheduler-override
Description
This command specifies the set of attributes whose values have been overridden by management on this virtual scheduler. Clearing a given flag will return the corresponding overridden attribute to the value defined on the SAP's ingress and egress scheduler policy.
The no form of the command disables the override.
Platforms
All
scheduler-parent
scheduler-parent
Syntax
scheduler-parent scheduler-name [weight weight] [level level] [cir-weight cir-weight] [cir-level cir-level]
no scheduler-parent
Context
[Tree] (config>qos>sap-egress>policer scheduler-parent)
Full Context
configure qos sap-egress policer scheduler-parent
Description
This command defines an optional parent scheduler that governs the available bandwidth given to a policer in addition to the PIR setting of the policer. When multiple schedulers, queues, or policers share a child status with the parent scheduler, the weight or level parameters define how this policer contends with the other children for the bandwidth of the parent. This command and the configuration of a SAP policer port-parent or parent arbiter are mutually exclusive.
Multiple schedulers can exist in different scheduler policies with the same scheduler-name; in this command, the associated scheduler-name pertains to a scheduler that should exist on the SAP as the policy is applied and the policer is created. When the policer is created on the SAP, the existence of the scheduler-name is dependent on a scheduler policy containing the scheduler-name being directly applied or indirectly applied (through a multiservice customer site) to the SAP. The policer accepts packets, but is not bandwidth limited by a virtual scheduler or the scheduler hierarchy applied to the SAP. The SAP to which the policer belongs displays an orphan policer status with the SapEgressPolicerMismatch flag in the show service sap-using output. The orphaned state of the policer is automatically cleared when the scheduler-name becomes available on the SAP.
The parent scheduler can be made unavailable by the removal of a scheduler policy or scheduler. When an existing parent scheduler is removed or inoperative, the policer enters the orphaned state. The policer automatically returns to normal operation when the parent scheduler is available again.
The no form of this command removes a child association with a parent scheduler. If a parent association does not currently exist, the command has no effect and no error message is returned. When a parent association has been removed, the former child policer attempts to operate based on its configured rate parameter.
Removing the parent association on the policer within the policy takes effect immediately on all policers using the SAP QoS policy.
Default
no scheduler-parent
Parameters
- scheduler-name
-
Scheduler names are configured in the config>qos>scheduler-policy>tier context. There are no checks performed at the time of definition to ensure that the scheduler-name exists within an existing scheduler policy. For the policer to use the defined scheduler-name, the scheduler must exist on each SAP that the policer is created on. If a scheduler-name does not exist on the SAP, the policer operates in an orphaned state. Each parental association must be explicitly defined.
- weight
-
Defines the relative weight of this policer in comparison with other child policers, queues, and schedulers when competing for bandwidth on the parent scheduler-name at the above-CIR priority level defined by the level parameter.
All weight values from all weighted active policers, queues, and schedulers with a common port parent are added together. Then, each individual active weight is divided by the total to determine the percentage of remaining bandwidth provided to the policer, queue, or scheduler after the higher priority level children have been serviced. A weight is considered to be active when the applicable policer, queue, or scheduler has not reached its maximum rate and still has packets to transmit. All child policers, queues, and schedulers with a weight of 0 are considered to have the lowest priority at the configured level and are not serviced until all non-zero weighted policers, queues, and schedulers at that level are operating at the maximum bandwidth or are idle.
- level
-
Defines the level of hierarchy when compared with other policers, queues, and schedulers when competing for bandwidth on the parent scheduler-name.
Children of the parent scheduler with a lower priority will not receive bandwidth until all children with a higher priority have either reached their maximum bandwidth or are idle. Children with the same level are serviced in relation to their relative weights.
- cir-weight
-
Defines the relative weight of this policer in comparison with other child policers, queues, or schedulers competing for bandwidth on the parent scheduler-name at the within-CIR priority level defined by the cir-level parameter.
All cir-weight values from all weighted active policers, queues, and schedulers with a common parent are added together. Then, each individual active weight is divided by the total to determine the percentage of remaining bandwidth provided to the policer, queue, or scheduler after the higher priority level children have been serviced. A weight is considered to be active when the applicable policer, queue, or scheduler has not reached its maximum rate and still has packets to transmit.
The weight is specified as an integer value from 0 to 100, with 100 being the highest weight. When the cir-weight parameter is set to a value of 0, the policer receives bandwidth only after the other children with a non-zero weight at this level.
- cir-level
-
Defines the level of hierarchy when compared with other policers, queues, and schedulers that the policer uses to receive bandwidth for its within-CIR offered load. If the cir-level parameter is set to a value of 0 (the default value), the policer does not receive bandwidth during the schedulers within-CIR pass and the cir-weight parameter is ignored. If the cir-level parameter is 1 or greater, the cir-weight parameter is used.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-1se, 7750 SR-2s, 7750 SR-2se, 7750 SR-7s, VSR
scheduler-parent
Syntax
scheduler-parent scheduler-name [weight weight] [level level] [cir-weight cir-weight] [cir-level cir-level]
no scheduler-parent
Context
[Tree] (config>qos>sap-ingress>policer scheduler-parent)
Full Context
configure qos sap-ingress policer scheduler-parent
Description
This command defines an optional parent scheduler that governs the available bandwidth given to a policer in addition to the PIR setting of the policer. When multiple schedulers, queues, or policers share a child status with the parent scheduler, the weight or level parameters define how this policer contends with the other children for the bandwidth of the parent. This command and the configuration of a SAP policer scheduler-parent or parent arbiter are mutually exclusive.
Multiple schedulers can exist in different scheduler policies with the same scheduler-name; in this command, the associated scheduler-name pertains to a scheduler that should exist on the SAP as the policy is applied and the policer is created. When the policer is created on the SAP, the existence of the scheduler-name is dependent on a scheduler policy containing the scheduler-name being directly applied or indirectly applied (through a multiservice customer site) to the SAP. The policer accepts packets, but is not bandwidth limited by a virtual scheduler or the scheduler hierarchy applied to the SAP.
The parent scheduler can be made unavailable by the removal of a scheduler policy or scheduler. When an existing parent scheduler is removed or inoperative, the policer enters the orphaned state. The policer automatically returns to normal operation when the parent scheduler is available again.
The no form of this command removes a child association with a parent scheduler. If a parent association does not currently exist, the command has no effect and no error message is returned. When a parent association has been removed, the former child policer attempts to operate based on its configured rate parameter.
Removing the parent association on the policer within the policy takes effect immediately on all policers using the SAP QoS policy.
Default
no scheduler-parent
Parameters
- scheduler-name
-
Scheduler names are configured in the config>qos>scheduler-policy>tier context. There are no checks performed at the time of definition to ensure that the scheduler-name exists within an existing scheduler policy. For the policer to use the defined scheduler-name, the scheduler must exist on each SAP that the policer is created on. If a scheduler-name does not exist on the SAP, the policer operates in an orphaned state. Each parental association must be explicitly defined.
- weight
-
Defines the relative weight of this policer in comparison with other child policers, queues, and schedulers when competing for bandwidth on the parent scheduler-name at the above-CIR priority level defined by the level parameter.
All weight values from all weighted active policers, queues, and schedulers with a common port parent are added together. Then, each individual active weight is divided by the total to determine the percentage of remaining bandwidth provided to the policer, queue, or scheduler after the higher priority level children have been serviced. A weight is considered to be active when the applicable policer, queue, or scheduler has not reached its maximum rate and still has packets to transmit. All child policers, queues, and schedulers with a weight of 0 are considered to have the lowest priority at the configured level and are not serviced until all non-zero weighted policers, queues, and schedulers at that level are operating at the maximum bandwidth or are idle.
- level
-
Defines the level of hierarchy when compared with other policers, queues, and schedulers when competing for bandwidth on the parent scheduler-name.
Children of the parent scheduler with a lower priority will not receive bandwidth until all children with a higher priority have either reached their maximum bandwidth or are idle. Children with the same level are serviced in relation to their relative weights.
- cir-weight
-
Defines the relative weight of this policer in comparison with other child policers, queues, or schedulers competing for bandwidth on the parent scheduler-name at the within-CIR priority level defined by the cir-level parameter.
All cir-weight values from all weighted active policers, queues, and schedulers with a common parent are added together. Then, each individual active weight is divided by the total to determine the percentage of remaining bandwidth provided to the policer, queue, or scheduler after the higher priority level children have been serviced. A weight is considered to be active when the applicable policer, queue, or scheduler has not reached its maximum rate and still has packets to transmit.
The weight is specified as an integer value from 0 to 100, with 100 being the highest weight. When the cir-weight parameter is set to a value of 0, the policer receives bandwidth only after the other children with a non-zero weight at this level.
- cir-level
-
Defines the level of hierarchy when compared with other policers, queues, and schedulers that the policer uses to receive bandwidth for its within-CIR offered load. If the cir-level parameter is set to a value of 0 (the default value), the policer does not receive bandwidth during the schedulers within-CIR pass and the cir-weight parameter is ignored. If the cir-level parameter is 1 or greater, the cir-weight parameter is used.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-1se, 7750 SR-2s, 7750 SR-2se, 7750 SR-7s
scheduler-policy
scheduler-policy
Syntax
scheduler-policy scheduler-policy-name
no scheduler-policy
Context
[Tree] (config>subscr-mgmt>sla-prof>egress scheduler-policy)
Full Context
configure subscriber-mgmt sla-profile egress scheduler-policy
Description
This command specifies a scheduler policy to associate to the sla profile. Scheduler policies are configured in the configure>qos>scheduler>policy context. Each scheduler policy is divided up into groups of schedulers based on the tier each scheduler is created under. A tier is used to give structure to the schedulers within a policy and define rules for parent scheduler associations. The policy defines the hierarchy and operating parameters for virtual schedulers.
The no form of this command removes the scheduler-policy-name from the configuration.
Parameters
- scheduler-policy-name
-
Specifies an existing scheduler policy name up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
scheduler-policy
Syntax
scheduler-policy scheduler-policy-name
no scheduler-policy
Context
[Tree] (config>subscr-mgmt>sub-profile>egress scheduler-policy)
[Tree] (config>subscr-mgmt>sub-profile>ingress scheduler-policy)
Full Context
configure subscriber-mgmt sub-profile egress scheduler-policy
configure subscriber-mgmt sub-profile ingress scheduler-policy
Description
This command specifies a scheduler policy to associate to the subscriber profile. Scheduler policies are configured in the configure>qos>scheduler>policy context. Each scheduler policy is divided up into groups of schedulers based on the tier each scheduler is created under. A tier is used to give structure to the schedulers within a policy and define rules for parent scheduler associations. The policy defines the hierarchy and operating parameters for virtual schedulers.
The no form of this command reverts to the default.
Parameters
- scheduler-policy-name
-
Specify an existing scheduler policy name up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
scheduler-policy
Syntax
scheduler-policy scheduler-policy-name
no scheduler-policy
Context
[Tree] (config>service>ies>sub-if>grp-if>sap>ingress scheduler-policy)
[Tree] (config>service>vprn>sub-if>grp-if>sap>ingress scheduler-policy)
[Tree] (config>service>ies>sap>egress scheduler-policy)
[Tree] (config>service>ies>sub-if>grp-if>sap>egress scheduler-policy)
[Tree] (config>service>ies>sap>ingress scheduler-policy)
[Tree] (config>service>vprn>sub-if>grp-if>sap>egress scheduler-policy)
Full Context
configure service ies subscriber-interface group-interface sap ingress scheduler-policy
configure service vprn subscriber-interface group-interface sap ingress scheduler-policy
configure service ies sap egress scheduler-policy
configure service ies subscriber-interface group-interface sap egress scheduler-policy
configure service ies sap ingress scheduler-policy
configure service vprn subscriber-interface group-interface sap egress scheduler-policy
Description
This command applies an existing scheduler policy to an ingress or egress scheduler used by ingress SAP queues or egress SAP policers and queues associated with this multi-service customer site. The schedulers defined in the scheduler policy can only be created once the customer site has been appropriately assigned to a chassis port, channel or slot. Scheduler policies are defined in the config>qos>scheduler-policy scheduler-policy-name context.
The no form of this command removes the configured ingress or egress scheduler policy from the multi-service customer site. When the policy is removed, the schedulers created due to the policy are removed also making them unavailable for the SAP policers or queues associated with the customer site. Policers and queues that lose their parent scheduler association are deemed to be orphaned and are no longer subject to a virtual scheduler. The SAPs that have policers or queues reliant on the removed schedulers enter into an operational state depicting the orphaned status of one or more policers or queues. When the no form of this command executed, the customer site ingress or egress node will not contain an applied scheduler policy.
Parameters
- scheduler-policy-name:
-
Specifies the scheduler policy name to apply to an existing scheduler policy that was created in the config>qos>scheduler-policy scheduler-policy-name context to create the hierarchy of ingress or egress virtual schedulers. The scheduler names defined within the policy are created and made available to any ingress queues or egress policers and queues created on associated SAPs.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
scheduler-policy
Syntax
scheduler-policy scheduler-policy-name
no scheduler-policy
Context
[Tree] (config>port>ethernet>access>egress>vport scheduler-policy)
Full Context
configure port ethernet access egress vport scheduler-policy
Description
This command specifies a scheduler policy to associate to the Vport. Scheduler policies are configured in the configure>qos>scheduler>policy context. Each scheduler policy is divided up into groups of schedulers based on the tier each scheduler is created under. A tier is used to give structure to the schedulers within a policy and define rules for parent scheduler associations. The policy defines the hierarchy and operating parameters for virtual schedulers.
The no form of this command removes the configured egress scheduler policy from the Vport.
The agg-rate rate, port-scheduler-policy and scheduler-policy commands are mutually exclusive. Changing between the use of a scheduler policy and the use of an agg-rate/port-scheduler-policy involves removing the existing command and applying the new command.
The configuration of a scheduler policy under a Vport is mutually exclusive with the configuration of the egress-rate-modify parameter.
The no form of this command reverts to the default.
Parameters
- scheduler-policy-name
-
Specifies the scheduler-policy-name parameter applies an existing scheduler policy that was created in the config>qos>scheduler-policy scheduler-policy-name context to create the hierarchy of egress virtual schedulers.
Platforms
All
scheduler-policy
Syntax
scheduler-policy scheduler-policy-name
no scheduler-policy
Context
[Tree] (config>service>ies>if>sap>egress scheduler-policy)
[Tree] (config>service>vprn>if>sap>egress scheduler-policy)
[Tree] (config>service>vpls>sap>ingress scheduler-policy)
[Tree] (config>service>vpls>sap>egress scheduler-policy)
[Tree] (config>service>vprn>if>sap>ingress scheduler-policy)
[Tree] (config>service>ies>if>sap>ingress scheduler-policy)
Full Context
configure service ies interface sap egress scheduler-policy
configure service vprn interface sap egress scheduler-policy
configure service vpls sap ingress scheduler-policy
configure service vpls sap egress scheduler-policy
configure service vprn interface sap ingress scheduler-policy
configure service ies interface sap ingress scheduler-policy
Description
This command applies an existing scheduler policy to an ingress or egress scheduler used by SAP queues associated with this multi-service customer site. The schedulers defined in the scheduler policy can only be created once the customer site has been appropriately assigned to a chassis port, channel or slot. Scheduler policies are defined in the config>qos>scheduler-policy scheduler-policy-name context.
The no form of this command removes the configured ingress or egress scheduler policy from the multi-service customer site. When the policy is removed, the schedulers created due to the policy are removed also making them unavailable for the ingress SAP queues and egress SAP policers and queues associated with the customer site. Policers and queues that lose their parent scheduler association are deemed to be orphaned and are no longer subject to a virtual scheduler. The SAPs that have policers or queues reliant on the removed schedulers enter into an operational state depicting the orphaned status of one or more policers or queues. When the no scheduler-policy command is executed, the customer site’s ingress or egress node will not contain an applied scheduler policy.
Parameters
- scheduler-policy-name
-
Specifies that the scheduler-policy-name is applied to an existing scheduler policy that was created in the config>qos>scheduler-policy scheduler-policy-name context to create the hierarchy of ingress or egress virtual schedulers. The scheduler names defined within the policy are created and made available to any ingress or egress queues created on associated SAPs.
Platforms
All
scheduler-policy
Syntax
scheduler-policy scheduler-policy-name
no scheduler-policy
Context
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>egress scheduler-policy)
Full Context
configure service ies subscriber-interface group-interface wlan-gw egress scheduler-policy
Description
This command configures the identifier of the egress scheduler policy associated with each wlan-gw tunnel of this interface.
The no form of this command removes the scheduler policy name from the configuration.
Parameters
- scheduler-policy-name
-
Specifies the identifier of the egress scheduler policy associated with each wlan-gw tunnel of this interface.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
scheduler-policy
Syntax
scheduler-policy scheduler-policy-name
no scheduler-policy
Context
[Tree] (config>port>ethernet>egress>queue-group scheduler-policy)
[Tree] (config>port>ethernet>ingress>queue-group scheduler-policy)
[Tree] (config>port>ethernet>network>egress>queue-group scheduler-policy)
Full Context
configure port ethernet egress queue-group scheduler-policy
configure port ethernet ingress queue-group scheduler-policy
configure port ethernet network egress queue-group scheduler-policy
Description
This command configures a scheduler policy for the egress queue group.
Parameters
- scheduler-policy-name
-
Specifies the scheduler policy name, up to 32 characters.
Platforms
All
scheduler-policy
Syntax
scheduler-policy scheduler-policy-name
no scheduler-policy
Context
[Tree] (config>service>cpipe>sap>egress scheduler-policy)
[Tree] (config>service>ipipe>sap>ingress scheduler-policy)
[Tree] (config>service>ipipe>sap>egress scheduler-policy)
[Tree] (config>service>cpipe>sap>ingress scheduler-policy)
[Tree] (config>service>epipe>sap>egress scheduler-policy)
[Tree] (config>service>epipe>sap>ingress scheduler-policy)
Full Context
configure service cpipe sap egress scheduler-policy
configure service ipipe sap ingress scheduler-policy
configure service ipipe sap egress scheduler-policy
configure service cpipe sap ingress scheduler-policy
configure service epipe sap egress scheduler-policy
configure service epipe sap ingress scheduler-policy
Description
This command applies an existing scheduler policy to an ingress or egress scheduler used by SAP queues associated with this multi-service customer site. The schedulers defined in the scheduler policy can only be created when the customer site has been appropriately assigned to a chassis port, channel or slot. Scheduler policies are defined in the config>qos>scheduler-policy scheduler-policy-name context.
The no form of this command removes the configured ingress or egress scheduler policy from the multi-service customer site. When the policy is removed, the schedulers created due to the policy are removed also making them unavailable for the ingress SAP queues associated with the customer site. Policers or queues that lose their parent scheduler association are deemed to be orphaned and are no longer subject to a virtual scheduler. The SAPs that have policers or queues reliant on the removed schedulers enter into an operational state depicting the orphaned status of one or more policers or queues. When the no scheduler-policy command is executed, the customer site ingress or egress node will not contain an applied scheduler policy.
Parameters
- scheduler-policy-name
-
The scheduler-policy-name parameter applies an existing scheduler policy that was created in the config>qos>scheduler-policy scheduler-policy-name context to create the hierarchy of ingress or egress virtual schedulers. The scheduler names defined within the policy are created and made available to any ingress or egress queues and to egress policers managed by HQoS created on associated SAPs.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service cpipe sap egress scheduler-policy
- configure service cpipe sap ingress scheduler-policy
All
- configure service ipipe sap egress scheduler-policy
- configure service ipipe sap ingress scheduler-policy
- configure service epipe sap egress scheduler-policy
- configure service epipe sap ingress scheduler-policy
scheduler-policy
Syntax
scheduler-policy scheduler-policy-name
no scheduler-policy
Context
[Tree] (config>service>vpls>sap>egress>encap-defined-qos>encap-group scheduler-policy)
Full Context
configure service vpls sap egress encap-defined-qos encap-group scheduler-policy
Description
This command configures the scheduler policy.
Platforms
All
scheduler-policy
Syntax
scheduler-policy scheduler-policy-name [create]
no scheduler-policy scheduler-policy-name
Context
[Tree] (config>qos scheduler-policy)
Full Context
configure qos scheduler-policy
Description
Each scheduler policy is divided up into groups of schedulers based on the tier each scheduler is created under. A tier is used to give structure to the schedulers within a policy and define rules for parent scheduler associations.
The scheduler-policy command creates a scheduler policy or allows editing of an existing policy. The policy defines the hierarchy and operating parameters for virtual schedulers. Creating a policy does not create the schedulers; it only provides a template for the schedulers to be created when the policy is associated with a SAP or multiservice site.
Each scheduler policy must have a unique name within the context of the system. Modifications made to an existing policy are executed on all schedulers that use the policy. This can cause queues or schedulers to become orphaned (invalid parent association) and adversely affect the ability of the system to enforce SLAs.
If a scheduler-policy-name does not exist, it is assumed that an attempt is being made to create a new policy. The success of the command execution is dependent on the following:
-
The maximum number of scheduler policies has not been configured.
-
The provided scheduler-policy-name is valid.
-
The create keyword is entered with the command if the system is configured to require it (enabled in the environment create command).
When the maximum number of scheduler policies has been exceeded, a configuration error occurs, the command will not execute, and the CLI context will not change.
If the provided scheduler-policy-name is invalid according to the criteria below, a name syntax error occurs, the command will not execute, and the CLI context will not change.
Parameters
- scheduler-policy-name
-
The name of the scheduler policy.
Platforms
All
scheduler-policy
Syntax
scheduler-policy scheduler-policy-name
no scheduler-policy
Context
[Tree] (config>service>cust>multi-service-site>ingress scheduler-policy)
[Tree] (config>service>cust>multi-service-site>egress scheduler-policy)
Full Context
configure service customer multi-service-site ingress scheduler-policy
configure service customer multi-service-site egress scheduler-policy
Description
This command applies an existing scheduler policy to an ingress or egress scheduler used by SAP queues or, at egress only, policers associated with this multi-service customer site. The schedulers defined in the scheduler policy can only be created once the customer site has been appropriately assigned to a chassis port, channel or slot. Scheduler policies are defined in the config>qos>scheduler-policy scheduler-policy-name context.
The no form of this command removes the configured ingress or egress scheduler policy from the multi-service customer site. When the policy is removed, the schedulers created due to the policy are removed also making them unavailable for the SAP policers and queues associated with the customer site. Policers and queues that lose their parent scheduler association are deemed to be orphaned and are no longer subject to a virtual scheduler.
The SAPs that have ingress queues reliant on the removed schedulers enter into an operational state depicting the orphaned status of one or more policers and queues. When the no scheduler-policy command is executed, the customer site ingress or egress node will not contain an applied scheduler policy.
Parameters
- scheduler-policy-name
-
Applies an existing scheduler policy that was created in the config>qos>scheduler-policy scheduler-policy-name context to create the hierarchy of ingress or egress virtual schedulers. The scheduler names defined within the policy are created and made available to any ingress or egress queues and egress policers managed by HQoS created on associated SAPs.
Platforms
All
scheduler-policy
Syntax
scheduler-policy src-name dst-name [overwrite]
Context
[Tree] (config>qos>copy scheduler-policy)
Full Context
configure qos copy scheduler-policy
Description
This command copies existing QoS policy entries for a QoS policy to another QoS policy.
The copy command is a configuration-level maintenance tool used to create new policies using existing policies. It also allows bulk modifications to an existing policy with the use of the overwrite keyword.
If overwrite is not specified, an error will occur if the destination policy exists.
Parameters
- src-name dst-name
-
Indicates that the source policy and the destination policy are scheduler policy. Specify the source policy that the copy command will attempt to copy from and specify the destination policy to which the command will copy a duplicate of the policy.
- overwrite
-
Forces the destination policy name to be copied as specified. When forced, everything in the existing destination policy will be completely overwritten with the contents of the source policy.
Platforms
All
scheduling-class
scheduling-class
Syntax
scheduling-class class rate rate
scheduling-class class weight weight-in-group
no scheduling-class class
Context
[Tree] (config>port>ethernet>egress>hs-sched-ovr scheduling-class)
Full Context
configure port ethernet egress hs-scheduler-overrides scheduling-class
Description
This command overrides the scheduling class configuration in the HS scheduler policy applied to the port egress. The scheduling class rate or weight within the WRR group can be overridden.
The no form of this command removes the scheduling class override parameters from the port egress configuration.
Parameters
- class
-
Specifies the scheduling class.
- rate
-
Specifies the explicit maximum frame based bandwidth limit, in megabits per second, for this HS scheduler policy scheduling class. The rate keyword must be followed by either the keyword max or a rate specified in megabits per second.
- weight-in-group
-
Specifies the weight the HS scheduler policy should apply to this scheduling class within the group in which it belongs. The weight-in-group parameter must follow the weight keyword and is used to specify the relative weight of class to the other scheduling classes within the group. Setting the weight will fail if the scheduling class is not currently configured in a group.
Platforms
7750 SR-7/12/12e
scheduling-class
Syntax
scheduling-class class-id
no scheduling-class
Context
[Tree] (config>service>vprn>if>sap scheduling-class)
Full Context
configure service vprn interface sap scheduling-class
Description
This command specifies the scheduling class to use for this SAP.
Parameters
- class-id
-
Specifies the scheduling class to use for this SAP.
Platforms
All
scheduling-class
Syntax
scheduling-class class-id group group-id [weight weight-in-group]
scheduling-class class-id rate rate
no scheduling-class class-id
Context
[Tree] (config>qos>hs-scheduler-policy scheduling-class)
Full Context
configure qos hs-scheduler-policy scheduling-class
Description
This command configures the behavior of a specific scheduling class on all HSQ schedulers associated with the policy. The scheduler-class command performs one of two operations: it configures a maximum rate for the scheduling class or places the scheduling class into the weighted scheduling group. The two operations are mutually exclusive.
By default, none of the scheduling classes are members of the weighted scheduling group and each class is set to a rate limit of max (no rate limit applied).
Specifying Scheduling Class Rate (or Removing the Scheduling Class from Group) — If the scheduling-class command is executed with the rate keyword specified, either max or a specified rate value must follow. If a class-id was previously mapped into the weighted scheduling group, the class is removed from the group. However, if removing the class from the group causes the group to no longer have contiguous class members, the command fails with no effect on the specified class. A "non-contiguous grouping error” is returned. The lowest or highest members within a weighted group must be removed prior to removing the middle members. For example, if scheduling classes 3, 4, and 5 were members of weighted group 1, class 4 cannot be removed first.
This command using the rate keyword also fails when an override for the group weight is in place on the scheduling class within a scheduler associated with the policy. The override expects the class to be associated with a weighted scheduling group and the policy rate definition is attempting to remove the class from the group. An "override mismatch” error is generated, specifying the scheduling object where the override exists.
After a rate has been successfully defined for a scheduling class, the specified rate is automatically updated on all HSQ scheduler instances associated with the scheduling policy. The exception is where the scheduler instance has a local override for the rate on the scheduling class.
Specifying Scheduling Class Weighted Group Membership — If the scheduling-class command is executed with the group keyword specified, the group ID value of 1 must follow. The corresponding optional weight keyword is used to specify the weight of the scheduling class within the group. If weight is not specified, the default weight of 1 is used. If the specified scheduling class is not contiguous with the other scheduling classes in the group, the command fails with no change to the current state of the scheduling class and a "non-contiguous grouping” error is returned, specifying the weighted scheduling group and the current group members.
The scheduling-class command fails using the group keyword when a rate override for the scheduling class exists on an HSQ scheduler instance associated with the policy. The rate override for the scheduling class indicates the class is directly attached to a strict priority level, conflicting with the policy group keyword trying to place the class in the specified group. The command fails without affecting the scheduling class definition on the policy and returns an error specifying the scheduling object where the override exists.
Other Override Constraints — The scheduling overrides cannot change or remove a scheduling class from a policy-defined weighted group membership.
The no form of the command returns the scheduling class represented by class-id to the default behavior. The default behavior for a scheduling class is to not be a member of the weighted scheduling class group and have a rate set to max. The no scheduling-class command fails if the scheduling class is currently a member of the weighted scheduling class group and a weight override is in effect on a scheduling object for the class, in which case an error is returned.
Parameters
- class-id
-
Specifies the scheduling class for HS scheduler policy. The class-id value is a required parameter that specifies which scheduling class the scheduling-class command is acting upon.
- group-id
-
Specifies the group this HS scheduler policy scheduling class belongs to. The group and the rate keywords are mutually exclusive when executing this command. A group ID value of 1 must follow the group keyword. The group keyword removes the class ID from its inherent strict scheduling level and places it into the specified group ID. The associated weight parameter is optional and is used to specify the weight of a class ID within the weighted scheduling class group. Specifying the group parameter while an override for the scheduling class exists for rate causes the scheduling-class command to fail.
- weight-in-group
-
Specifies the weight the HS scheduler policy should apply to this scheduling class within the group in which it belongs. This keyword is optional and must follow the group parameter when specified. The weight-in-group parameter must follow the weight keyword and is used to specify the relative weight of the class-id to the other scheduling classes within the group. If the group is specified without the weight parameter, a default weight of 1 is used.
- rate
-
Specifies the explicit maximum frame-based bandwidth limit, in megabits per second, for this HS scheduler policy scheduling class. The rate and group keywords are mutually exclusive. Either the rate or group keyword must be specified when executing this command. When specified, the rate keyword must be followed by either the keyword max or a rate specified in megabits per second. The specified rate can be overridden at the port Ethernet egress using the scheduler override functions. A newly-created HS scheduler policy defaults each scheduling class to have its rate set to max and the weighted scheduling class group has no members.
Platforms
7750 SR-7/12/12e
schema-path
schema-path
Syntax
schema-path url-string
no schema-path
Context
[Tree] (config>system>management-interface schema-path)
Full Context
configure system management-interface schema-path
Description
This command specifies the schema path where the SR OS YANG modules can be placed by the user before using a <get-schema> request. Nokia recommends that the URL string not exceed 135 characters for the <get-schema> request to work correctly with all schema files.
If this command is not configured, the software upgrade process manages the YANG schema files to ensure the schema files are synchronized with the software image on both the primary and standby CPM.
The no form of this command reverts to the default value.
Default
no schema-path
Parameters
- url-string
-
Specifies the schema path URL up to 180 characters. However, Nokia recommends that the string shall not exceed 135 characters to ensure that the <get-schema> request works properly with all schema files.
Platforms
All
scope
scope
Syntax
scope {exclusive | template}
no scope
Context
[Tree] (config>service>mrp>mrp-policy scope)
Full Context
configure service mrp mrp-policy scope
Description
This command configures the filter policy scope as exclusive or template. If the scope of the policy is template and is applied to one or more services, the scope cannot be changed.
The no form of this command sets the scope of the policy to the default of template.
Default
scope template
Parameters
- exclusive
-
When the scope of a policy is defined as exclusive, the policy can only be applied to a single entity (SAP or SDP). Attempting to assign the policy to a second entity will result in an error message. If the policy is removed from the entity, it will become available for assignment to another entity.
- template
-
When the scope of a policy is defined as template, the policy can be applied to multiple SAPs or network ports.
Platforms
All
scope
Syntax
scope {exclusive | template}
no scope
Context
[Tree] (config>qos>sap-ingress scope)
Full Context
configure qos sap-ingress scope
Description
This command configures the Service Ingress QoS policy scope as exclusive or template.
The policy’s scope cannot be changed if the policy is applied to a service.
The no form of this command sets the scope of the policy to the default of template.
Default
scope template
Parameters
- exclusive
-
When the scope of a policy is defined as exclusive, the policy can only be applied to one SAP. If a policy with an exclusive scope is assigned to a second SAP, an error message is generated. If the policy is removed from the exclusive SAP, it will become available for assignment to another exclusive SAP.
The system default policies cannot be put into the exclusive scope. An error will be generated if scope exclusive is executed in any policies with a policy-id equal to 1.
- template
-
When the scope of a policy is defined as template, the policy can be applied to multiple SAPs on the router.
Default QoS policies are configured with template scopes. An error is generated when the template scope parameter to exclusive scope on default policies is modified.
Platforms
All
scope
Syntax
scope {exclusive | template}
no scope
Context
[Tree] (config>qos>sap-egress scope)
Full Context
configure qos sap-egress scope
Description
Enter the scope of this policy. The scope of the policy cannot be changed if the policy is applied to one or more services.
The no form of this command sets the scope of the policy to the default of template.
Default
scope template
Parameters
- exclusive
-
When the scope of a policy is defined as exclusive, the policy can only be applied to a single SAP. Attempting to assign the policy to a second SAP will result in an error message. If the policy is removed from the exclusive SAP, it will become available for assignment to another exclusive SAP.
The system default policies cannot be put into the exclusive scope. An error will be generated if scope exclusive is executed in any policies with a policy-id equal to 1.
- template
-
When the scope of a policy is defined as template, the policy can be applied to multiple SAPs on the router.
Platforms
All
scope
Syntax
scope {exclusive | template}
no scope
Context
[Tree] (config>qos>network scope)
Full Context
configure qos network scope
Description
This command configures the network policy scope as exclusive or template. The policy’s scope cannot be changed if the policy is applied to an interface.
The no form of this command sets the scope of the policy to the default of template.
Default
scope template
Parameters
- exclusive
-
When the scope of a policy is defined as exclusive, the policy can only be applied to one interface. If a policy with an exclusive scope is assigned to a second interface, an error message is generated. If the policy is removed from the exclusive interface, it will become available for assignment to another exclusive interface.
The system default policies cannot be put into the exclusive scope. An error will be generated if the scope exclusive command is executed in any policies with a policy-id equal to 1.
- template
-
When the scope of a policy is defined as template, the policy can be applied to multiple interfaces on the router.
Default QoS policies are configured with template scopes. An error is generated if the template scope parameter is modified to exclusive scope on default policies.
Platforms
All
scope
Syntax
scope {exclusive | template | embedded | system}
scope {exclusive | template}
no scope
Context
[Tree] (config>filter>mac-filter scope)
[Tree] (config>filter>ipv6-filter scope)
[Tree] (config>filter>ip-exception scope)
[Tree] (config>filter>ip-filter scope)
Full Context
configure filter mac-filter scope
configure filter ipv6-filter scope
configure filter ip-exception scope
configure filter ip-filter scope
Description
This command configures the filter policy scope as exclusive, template, embedded or system.
The scope of the policy cannot be changed when:
-
the scope is template and the policy is applied to one or more services or network interfaces
-
the scope is embedded and the policy is embedded by another policy
Changing the scope to/from system is only allowed when a policy is not active and the policy has no entries configured.
The no form of the command sets the scope of the policy to the default of template.
Default
scope template
Parameters
- exclusive
-
Specifies that the policy can only be applied to a single entity. Attempting to assign the policy to a second entity will result in an error message.
- template
-
Specifies that the policy can be applied to multiple entities.
- embedded
-
Specifies that the policy cannot be applied directly. The policy defines embedded filter rules, which are embedded by other exclusive/template/system filter policies. The embedded scope is supported for IPv4 and IPv6 filter policies only.
- system
-
Specifies that the policy defines system-wide filter rules. To apply system policy rules, activate system filter and chain exclusive/template ACL filter policy to the system filter. The system scope is supported for IPv4 and IPv6 filter policies only.
Platforms
All
- configure filter ipv6-filter scope
- configure filter ip-filter scope
- configure filter mac-filter scope
VSR
- configure filter ip-exception scope
scp
scp
Syntax
scp local-file-url destination-file-url [router router-instance] [force]
scp local-file-url destination-file-url [force] service service-name
Context
[Tree] (file scp)
Full Context
file scp
Description
This command copies a local file to a remote host file system. It uses
ssh
for data transfer, and uses the same authentication
and provides the same security as ssh
. The following prompt
appears:
"Are you sure (y/n)?” The destination must specify a user and a host.
Parameters
- local-file-url
-
Specifies the local source file or directory.
- destination-file-url
-
Specifies the destination file.
- user
-
Specifies the SSH user.
- hostname
-
Specifies the remote host IP address of DNS name.
- file-path
-
Specifies the destination path.
- router-instance
-
Specifies the router name or service ID used to specify the router instance.
- force
-
Forces an immediate copy of the specified file. The command file scp local-file-url destination-file-url [router router-instance] force executes the command without displaying a user prompt message.
- service-name
-
Specifies the service name used to identify the router instance. The service name can be a maximum of 64 characters long.
Platforms
All
scramble
scramble
Syntax
[no] scramble
Context
[Tree] (config>port>tdm>ds3 scramble)
[Tree] (config>port>tdm>e3 scramble)
Full Context
configure port tdm ds3 scramble
configure port tdm e3 scramble
Description
This command enables payload scrambling on channel groups.
Scrambling randomizes the pattern of 1s and 0s carried in a SONET frame. Rearranging or scrambling the pattern prevents continuous strings of all 1s or all 0s and meets the needs of physical layer protocols that rely on sufficient transitions between 1s and 0s to maintain clocking.
The no form of this command disables scrambling.
Default
no scramble
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
scramble
Syntax
[no] scramble
Context
[Tree] (config>port>sonet-sdh>path scramble)
Full Context
configure port sonet-sdh path scramble
Description
This command enables SONET/SDH payload scrambling. Scrambling randomizes the pattern of 1s and 0s carried in a SONET frame. Rearranging or scrambling the pattern prevents continuous strings of all 1s or all 0s and meets the needs of physical layer protocols that rely on sufficient transitions between 1s and 0s to maintain clocking.
For ATM, this command enables or disables ATM cell-level payload scrambling/descrambling using x43+1 polynomial as defined in ITU-T I.432.1. Scrambling is enabled by default for the ATM path/channel. Note that this scrambling is done in addition to SONET/SDH frame scrambling/descrambling, which is always enabled in the framer.
The no form of this command disables scrambling.
Default
no scramble
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
script
script
Syntax
script script
Context
[Tree] (debug>dynsvc>scripts script)
Full Context
debug dynamic-services scripts script
Description
Commands in this context configure dynamic services script debugging for a specific script.
Parameters
- script
-
Specifies the script name.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
script
Syntax
script script-name [owner script-owner]
no script
Context
[Tree] (config>system>script-control>script-policy script)
[Tree] (config>system>script-control script)
Full Context
configure system script-control script-policy script
configure system script-control script
Description
This command is used to configure a script to be run.
The no form of the command removes the script.
Default
no script
Parameters
- script-name
-
Specifies the name of the script. Can be up to 32 characters.
- script-owner
-
Specifies the name of the script owner. Can be up to 32 characters.
The owner is an arbitrary name and not necessarily a user name. Commands in the scripts are not authorized against the owner. The configure system security cli-script authorization x cli-user command determines the user context against which commands in the scripts are authorized.
Platforms
All
script-all-info
script-all-info
Syntax
script-all-info
Context
[Tree] (debug>python>py-script script-all-info)
Full Context
debug python python-script script-all-info
Description
This command enables the script-compile-error, script-export-variables, script-output, script-output-on-error, and script-runtime-error functionalities.
Platforms
All
script-all-info
Syntax
script-all-info
Context
[Tree] (debug>subscr-mgmt>sub-ident-plcy script-all-info)
Full Context
debug subscriber-mgmt sub-ident-policy script-all-info
Description
This command enables the script-compile-error, script-export-variables, script-output, script-output-on-error, and script-runtime-error functionalities.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
script-compile-error
script-compile-error
Syntax
[no] script-compile-error
Context
[Tree] (debug>python>py-script script-compile-error)
Full Context
debug python python-script script-compile-error
Description
This command sends the traceback of the compile error to the logger. The traceback contains detailed information about where and why the compilation fails. The compilation takes place when the CLI user changes the admin state of the Python script from shutdown to no shutdown.
Platforms
All
script-compile-error
Syntax
[no] script-compile-error
Context
[Tree] (debug>subscr-mgmt>sub-ident-plcy script-compile-error)
Full Context
debug subscriber-mgmt sub-ident-policy script-compile-error
Description
This command send the traceback of the compile error to the logger. The traceback contains detailed information about where and why the compilation fails. The compilation takes place when the CLI user changes the admin state of the Python URL from shutdown to no-shutdown.
The no form of this command disables debugging.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
script-control
script-control
Syntax
script-control
Context
[Tree] (config>system script-control)
Full Context
configure system script-control
Description
Commands in this context configure command script parameters.
Platforms
All
script-export-variables
script-export-variables
Syntax
[no] script-export-variables
Context
[Tree] (debug>python>py-script script-export-variables)
Full Context
debug python python-script script-export-variables
Description
This command sends the output variables of the Python script to the logger when the script ran successfully.
Platforms
All
script-export-variables
Syntax
[no] script-export-variables
Context
[Tree] (debug>subscr-mgmt>sub-ident-plcy script-export-variables)
Full Context
debug subscriber-mgmt sub-ident-policy script-export-variables
Description
This command sends the result (the three output variables) of the Python script to the logger when the script ran successfully.
The no form of this command disables debugging.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
script-output
script-output
Syntax
[no] script-output
Context
[Tree] (debug>python>py-script script-output)
Full Context
debug python python-script script-output
Description
This command sends the output (such as from print statements) of the Python script to the logger.
Platforms
All
script-output
Syntax
[no] script-output
Context
[Tree] (debug>subscr-mgmt>sub-ident-plcy script-output)
Full Context
debug subscriber-mgmt sub-ident-policy script-output
Description
This command sends the output (such as from 'print' statements) of the Python script to the logger.
The no form of this command disables debugging.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
script-output-on-error
script-output-on-error
Syntax
[no] script-output-on-error
Context
[Tree] (debug>python>py-script script-output-on-error)
Full Context
debug python python-script script-output-on-error
Description
This command sends the output (such as traceback data) of the Python script to the logger, only when the script fails.
Platforms
All
script-output-on-error
Syntax
[no] script-output-on-error
Context
[Tree] (debug>subscr-mgmt>sub-ident-plcy script-output-on-error)
Full Context
debug subscriber-mgmt sub-ident-policy script-output-on-error
Description
This command sends the output (such as from print statements) of the Python script to the logger, but only when the script fails.
The no form of this command disables debugging.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
script-parameters-1
script-parameters-1
Syntax
script-parameters-1 param-string1
no script-parameters-1
Context
[Tree] (config>service>dynsvc>ladb>user>idx script-parameters-1)
Full Context
configure service dynamic-services local-auth-db user-name index script-parameters-1
Description
This command specifies the first part of parameters as input to the dynamic data service Python script. The concatenation of all four script-parameters strings are passed to the Python script and must be formatted as function-key <dictionary>. The function-key specifies which Python functions is called, and <dictionary> contains the actual parameters in a Python dictionary structure format. The no form of this command removes script-parameters-1 from the configuration.
Parameters
- param-string1
-
Specifies a string representing parameters that are used as input for the dynamic service Python script, up to 250 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
script-parameters-2
script-parameters-2
Syntax
script-parameters-2 param-string2
no script-parameters-2
Context
[Tree] (config>service>dynsvc>ladb>user>idx script-parameters-2)
Full Context
configure service dynamic-services local-auth-db user-name index script-parameters-2
Description
This command specifies the second part of parameters as input to the dynamic data service Python script. The concatenation of all four script-parameters strings are passed to the Python script and must be formatted as function-key <dictionary>. The function-key specifies which Python functions is called, and <dictionary> contains the actual parameters in a Python dictionary structure format. The no form of this command removes the script-parameters-2 from the configuration.
Parameters
- param-string2
-
Specifies a string representing parameters that are used as input for the dynamic service Python script, up to 250 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
script-parameters-3
script-parameters-3
Syntax
script-parameters-3 param-string3
no script-parameters-3
Context
[Tree] (config>service>dynsvc>ladb>user>idx script-parameters-3)
Full Context
configure service dynamic-services local-auth-db user-name index script-parameters-3
Description
This command specifies the third part of parameters as input to the dynamic data service Python script. The concatenation of all four script-parameters strings are passed to the Python script and must be formatted as function-key <dictionary>. The function-key specifies which Python functions is called, and <dictionary> contains the actual parameters in a Python dictionary structure format. The no form of this command removes the script-parameters-3 from the configuration.
Parameters
- param-string3
-
Specifies string representing parameters that are used as input for the dynamic service Python script, up to 250 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
script-parameters-4
script-parameters-4
Syntax
script-parameters-4 param-string4
no script-parameters-4
Context
[Tree] (config>service>dynsvc>ladb>user>idx script-parameters-4)
Full Context
configure service dynamic-services local-auth-db user-name index script-parameters-4
Description
This command specifies the fourth part of parameters as input to the dynamic data service Python script. The concatenation of all four script-parameters strings are passed to the Python script and must be formatted as function-key <dictionary>. The function-key specifies which Python functions is called, and <dictionary> contains the actual parameters in a Python dictionary structure format. The no form of this command removes the script-parameters-4 from the configuration.
Parameters
- param-string4
-
Specifies a string representing parameters that are used as input for the dynamic service Python script, up to 250 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
script-policy
script-policy
Syntax
script-policy name
no script-policy
Context
[Tree] (config>service>dynsvc>policy script-policy)
Full Context
configure service dynamic-services dynamic-services-policy script-policy
Description
This command specifies the radius script policy to be used to setup the dynamic data services. The script-policy configuration cannot be changed when there are active dynamic data services referencing the policy.
The no form of this command removes the script-policy from the configuration. This is only allowed when there are no active dynamic data services referencing this policy.
Parameters
- name
-
Specifies the RADIUS script policy name.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
script-policy
Syntax
script-policy policy-name [owner policy-owner]
no script-policy
Context
[Tree] (config>system>cron>schedule script-policy)
Full Context
configure system cron schedule script-policy
Description
This command is used to configure the CLI script policy.
Parameters
- policy-name
-
Specifies the name of the policy. Can be up to 32 characters.
- policy-owner
-
Specifies the name of the policy owner. Can be up to 32 characters.
The owner is an arbitrary name and not necessarily a user name. Commands in the scripts are not authorized against the owner. The configure system security cli-script authorization x cli-user command determines the user context against which commands in the scripts are authorized.
Platforms
All
script-policy
Syntax
[no] script-policy policy-name [owner policy-owner]
Context
[Tree] (config>system>script-control script-policy)
Full Context
configure system script-control script-policy
Description
This command is used to configure the CLI script policy.
Parameters
- policy-name
-
Specifies the name of the policy, up to 32 characters.
- policy-owner
-
Specifies the name of the policy owner, up to 32 characters.
The owner is an arbitrary name and not necessarily a user name. Commands in the scripts are not authorized against the owner. The configure system security cli-script authorization x cli-user command determines the user context against which commands in the scripts are authorized.
Platforms
All
script-policy
Syntax
script-policy policy-name [owner policy-owner]
no script-policy
Context
[Tree] (config>log>event-handling>handler>action-list>entry script-policy)
Full Context
configure log event-handling handler action-list entry script-policy
Description
This command configures the script policy parameters to use for this EHS handler action-list entry. The associated script is launched when the handler is triggered.
Default
no script-policy
Parameters
- policy-name
-
Specifies the script policy name. Can be up to 32 characters maximum.
- owner policy-owner
-
Specifies the script policy owner. Can be up to 32 characters maximum.
Platforms
All
script-runtime-error
script-runtime-error
Syntax
[no] script-runtime-error
Context
[Tree] (debug>python>py-script script-runtime-error)
Full Context
debug python python-script script-runtime-error
Description
This command generates log information when detecting a script runtime error.
Platforms
All
script-runtime-error
Syntax
[no] script-runtime-error
Context
[Tree] (debug>subscr-mgmt>sub-ident-plcy script-runtime-error)
Full Context
debug subscriber-mgmt sub-ident-policy script-runtime-error
Description
This command sends the traceback of the Python script failure to the logger.
The no form of this command disables debugging.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
script-url
script-url
Syntax
script-url primary-script-url
no script-url
Context
[Tree] (config>aaa>radius-scr-plcy>primary script-url)
Full Context
configure aaa radius-script-policy primary script-url
Description
This command configures the URL of the primary script.
The no form of this command removes the URL from the configuration.
Parameters
- primary-script-url
-
Specifies the URL of the secondary script to change RADIUS attributes of the RADIUS message.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
script-url
Syntax
script-url secondary-script-url
no script-url
Context
[Tree] (config>aaa>radius-scr-plcy>secondary script-url)
Full Context
configure aaa radius-script-policy secondary script-url
Description
Specifies the URL of the secondary script to change RADIUS attributes of the RADIUS message.
The no form of this command removes the URL from the configuration.
Parameters
- secondary-script-url
-
Specifies the URL of the secondary script to change RADIUS attributes of the RADIUS message.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
script-url
Syntax
script-url dhcp-script-url
no script-url
Context
[Tree] (config>subscr-mgmt>sub-ident-pol>primary script-url)
[Tree] (config>subscr-mgmt>sub-ident-pol>tertiary script-url)
[Tree] (config>subscr-mgmt>sub-ident-pol>secondary script-url)
Full Context
configure subscriber-mgmt sub-ident-policy primary script-url
configure subscriber-mgmt sub-ident-policy tertiary script-url
configure subscriber-mgmt sub-ident-policy secondary script-url
Description
This command specifies the URL of the identification scripts.
The no form of this command reverts to the default.
Parameters
- dhcp-primary-script-url
-
Specifies the URL of the primary identification script up to 180 characters.
- dhcp-secondary-script-url
-
Specifies the URL of the secondary identification script up to 180 characters.
- dhcp-tertiary-script-url
-
Specifies the URL of the tertiary identification script up to 180 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
script-url
Syntax
script-url script-url-name
no script-url
Context
[Tree] (config>app-assure>group>http-notif script-url)
Full Context
configure application-assurance group http-notification script-url
Description
This command configures the URL of the script used by the http notification policy.
The no form of this command removes the script URL from the http-notification policy.
Default
no script-url
Parameters
- script-url-name
-
Specifies the string representing the URL of the script used in the http notification policy, up to 255 characters.
- create
-
Keyword to create the script URL.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
scripts
scripts
Syntax
scripts
Context
[Tree] (debug>dynsvc scripts)
Full Context
debug dynamic-services scripts
Description
Commands in this context configure dynamic services script debugging.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
scte35-action
scte35-action
Syntax
scte35-action {forward | drop}
Context
[Tree] (config>service>vprn>video-interface>channel scte35-action)
[Tree] (config>service>ies>video-interface>channel scte35-action)
Full Context
configure service vprn video-interface channel scte35-action
configure service ies video-interface channel scte35-action
Description
This command specifies whether the Society of Cable Telecommunications Engineers 35 (SCTE 35) cue avails in the stream need to be forwarded or not. When specified to forward, SCTE 35 messages will be forwarded downstream. When specified to drop, SCTE 35 messages will not be forwarded downstream. They will be still be processed for local splicing decisions.
Parameters
- forward
-
Forwards SCTE 35 messages downstream.
- drop
-
Drops SCTE 35 messages.
Platforms
7450 ESS, 7750 SR, 7750 SR-s
sctp-filter
sctp-filter
Syntax
sctp-filter sctp-filter-name
no sctp-filter
Context
[Tree] (config>app-assure>group>policy>aqp>entry>action sctp-filter)
Full Context
configure application-assurance group policy app-qos-policy entry action sctp-filter
Description
This command assigns an existing SCTP filter as an action on flows matching this AQP entry.
The no form of this command removes this SCTP filter from actions on flows matching this AQP entry.
Default
no sctp-filter
Parameters
- sctp-filter-name
-
Specifies the name of the existing SCTP filter for this application assurance profile. The sctp-filter-name is configured in the config>app-assure>group[:partition]>sctp-filter context.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
sctp-filter
Syntax
sctp-filter sctp-filter-name
Context
[Tree] (config>app-assure>group>statistics>tca sctp-filter)
Full Context
configure application-assurance group statistics threshold-crossing-alert sctp-filter
Description
This command configures TCA generation for an SCTP filter.
Parameters
- sctp-filter-name
-
Specifies the name of the SCTP filter, up to 32 characters
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
sctp-filter
Syntax
sctp-filter sctp-filter-name [create]
no sctp-filter sctp-filter-name
Context
[Tree] (config>app-assure>group sctp-filter)
Full Context
configure application-assurance group sctp-filter
Description
Commands in this context configure Stream Control Transmission Protocol (SCTP) parameters.
The no form of this command removes this filter.
Parameters
- sctp-filter-name
-
Specifies the SCTP filter name, up to 32 characters.
- create
-
Keyword used to create the SCTP filter.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
sctp-filter-stats
sctp-filter-stats
Syntax
[no] sctp-filter-stats
Context
[Tree] (config>app-assure>group>statistics>aa-admit-deny sctp-filter-stats)
Full Context
configure application-assurance group statistics aa-admit-deny sctp-filter-stats
Description
This command configures whether to include or exclude SCTP filter admit-deny statistics in accounting records.
Default
no sctp-filter-stats
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
sd
sd
Syntax
sd
Context
[Tree] (config>mcast-mgmt>mcast-info-plcy>video-policy>video-if sd)
Full Context
configure mcast-management multicast-info-policy video-policy video-interface sd
Description
Commands in this context configure within a video interface policy the properties relating to requests received by the video interface for Standard Definition (SD) channel requests.
Platforms
7450 ESS, 7750 SR, 7750 SR-s
sd-offset
sd-offset
Syntax
sd-offset offset-value
no sd-offset
Context
[Tree] (config>service>vprn>isis>if>level sd-offset)
Full Context
configure service vprn isis interface level sd-offset
Description
If the pre-FEC error rate of the associated DWDM port crosses the configured sd-threshold, this offset-value is added to the IS-IS interface metric. This parameter is only effective if the interface is associated with a DWDM port and the sd-threshold value is configured under that port.
The no form of this command reverts the offset value to 0.
Default
no sd-offset
Parameters
- offset-value
-
Specifies the amount the interface metric is increased by if the sd-threshold is crossed.
Platforms
All
sd-offset
Syntax
sd-offset sd-offset
no sd-offset
Context
[Tree] (config>router>isis>if>level sd-offset)
Full Context
configure router isis interface level sd-offset
Description
If the pre-FEC error rate of the associated DWDM port crosses the configured sd-threshold, this offset-value is added to the IS-IS interface metric. This parameter is only effective if the interface is associated with a DWDM port and the sd-threshold value is configured under that port.
The no form of this command reverts the offset value to 0.
Default
no sd-offset
Parameters
- sd-offset
-
Specifies the amount the interface metric is increased by if the sd-threshold is crossed.
Platforms
All
sd-threshold
sd-threshold
Syntax
sd-threshold threshold [coefficient coefficient]
Context
[Tree] (config>port>otu sd-threshold)
Full Context
configure port otu sd-threshold
Description
This command defines the error rate at which to declare the signal degrade (SD) condition.
The parameters define an error rate of (coefficient/10) * 10E-threshold. For example, sd-threshold 5 coefficient 20 defines an error rate of (20/10) * 10E-5, or 2 * 10E-5, or 0.000 02.
The SD threshold must be:
-
greater than the SF threshold.
-
5 or higher before setting sf-sd-method to bip8.
The coefficient parameter is only used when sf-sd-method is set to fec. When sf-sd-method is set to bip8, coefficient is considered to have the value of 10.
Parameters
- threshold
-
Specifies the exponent for the SD threshold value.
- coefficient
-
Specifies the coefficient for the SD threshold value.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
sd-threshold
Syntax
sd-threshold errored-frames
no sd-threshold
Context
[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame sd-threshold)
Full Context
configure port ethernet efm-oam link-monitoring errored-frame sd-threshold
Description
The option defines the number of errored frames within the configured window which indicates the port has gone beyond an acceptable error rate and should be considered degraded. This is a first level warning that a port may be suspect. This generates an information log event message only and will be recorded in the Port event index but has no port level actions when the error count is equal to or greater than the threshold. This value must be lower than or equal to the sf-threshold value.
The no value of this option disables the sd-threshold.
Default
no sd-threshold
Parameters
- errored-frames
-
Specifies the number of errored frames within the configured window which indicates the port has become degraded.
Platforms
All
sd-threshold
Syntax
sd-threshold errored-frames
Context
[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame-period sd-threshold)
Full Context
configure port ethernet efm-oam link-monitoring errored-frame-period sd-threshold
Description
The option defines the number of errored frames within the configured window which indicates the port has gone beyond an acceptable error rate and should be considered degraded. This is a first level warning that a port may be suspect. This generates an information log event message only and will be recorded in the Port event index but has no port level actions when the error count is equal to or greater than the threshold. This value must be lower than or equal to the sf-threshold value.
The no value of this option disables the sd-threshold
Default
no sd-threshold
Parameters
- errored-frames
-
Specifies the number of errored frames within the configured window which indicates the port has become degraded.
Platforms
All
sd-threshold
Syntax
sd-threshold errored-frames
no sd-threshold
Context
[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame-seconds sd-threshold)
Full Context
configure port ethernet efm-oam link-monitoring errored-frame-seconds sd-threshold
Description
This command defines the number of errored frame seconds within the configured window which indicates the port has gone beyond an acceptable error rate and should be considered degraded. This is a first level warning that a port may be suspect. This event is raised when the error count is equal to or greater than the configured threshold. This is an information log event message only and will be recorded in the Port event index but has no port level actions. This value must be lower than or equal to the sf-threshold value.
The no version of this command disables the sd-threshold.
Parameters
- errored-frames
-
Specifies the number of errored seconds within the configured window which indicates the port has become degraded.
Platforms
All
sd-threshold
Syntax
sd-threshold errored-symbols
no sd-threshold
Context
[Tree] (config>port>ethernet>efm-oam>link-mon>errored-symbols sd-threshold)
Full Context
configure port ethernet efm-oam link-monitoring errored-symbols sd-threshold
Description
This command defines the number of errored frames within the configured window which indicates the port has gone beyond an acceptable error rate and should be considered degraded. This is a first level warning that a port may be suspect. An event is raised when the error count is equal to or greater than this value. This is an information log event message only and will be recorded in the Port event index but has no port level actions. This value must be lower than or equal to the sf-threshold value. Specific to symbol errors, this value must be configured with the value that indicates anything less is acceptable and the port can be returned to service. If this value is not configured then manual operation is required to return the port to service.
The no value of this option means there is there is no automatic return to service.
Default
no sd-threshold
Parameters
- errored-symbols
-
Specifies the number of errored symbols which indicates the port has become degraded.
Platforms
All
sd-threshold
Syntax
sd-threshold threshold [multiplier multiplier]
no sd-threshold
Context
[Tree] (config>port>ethernet>sym-mon sd-threshold)
Full Context
configure port ethernet symbol-monitor sd-threshold
Description
This command specifies the error rate at which to declare the Signal Degrade condition on an Ethernet interface. The value represents M*10E-N a ratio of symbol errors over total symbols received over W seconds of the sliding window. The symbol errors on the interface are sampled once per second. A default of 10 seconds is used when there is no additional window-size configured. The multiplier keyword is optional. If the multiplier keyword is omitted or no sd-threshold is specified the multiplier will return to the default value of 1.
Default
no sd-threshold
Parameters
- threshold
-
Specifies the rate of symbol errors.
- multiplier
-
Specifies the multiplier used to scale the symbol error ratio.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
sd-threshold
Syntax
sd-threshold threshold [multiplier multiplier]
no sd-threshold
Context
[Tree] (config>port>ethernet>crc-monitor sd-threshold)
Full Context
configure port ethernet crc-monitor sd-threshold
Description
This command specifies the error rate at which to declare the Signal Degrade condition on an Ethernet interface. The value represents M*10E-N a ratio of errored frames over total frames received over W seconds of the sliding window. The CRC errors on the interface are sampled once per second. A default of 10 seconds is used when there is no additional window-size configured. The multiplier keyword is optional. If the multiplier keyword is omitted or no sd-threshold is specified the multiplier will return to the default value of 1.
Default
no sd-threshold
Parameters
- threshold
-
Specifies the threshold value.
- multiplier
-
Specifies the multiplier value.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
sd-threshold-clear
sd-threshold-clear
Syntax
sd-threshold-clear threshold [coefficient coefficient]
Context
[Tree] (config>port>otu sd-threshold-clear)
Full Context
configure port otu sd-threshold-clear
Description
This command defines the signal degrade (SD) threshold clear value.
When the bit error rate falls below this value, the SD condition is cleared. The parameters define an error rate of (coefficient/10) * 10E-threshold. For example, sd-threshold-clear 7 coefficient 10 defines an error rate of (10/10) * 10E-7, or 10E-7, or 0.000 000 1.
This SD threshold clear setting is valid only when sf-sd-method is set to fec.
Parameters
- threshold
-
Specifies the exponent for the SD threshold clear value.
- coefficient
-
Specifies the coefficient for the SD threshold clear value.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
sdp
sdp
Syntax
sdp sdp-id [sync-tag sync-tag] [create]
no sdp sdp-id
Context
[Tree] (config>redundancy>multi-chassis>peer>sync sdp)
Full Context
configure redundancy multi-chassis peer sync sdp
Description
This command specifies the manually configured spoke SDPs to be synchronized with the multi-chassis peer and a synchronization tag to be used while synchronizing these spoke SDPs with the multi-chassis peer.
Manually configured spoke SDPs with the specified sdp-id are synchronized according to the synchronization tag. If synchronization is required only for a subset of the spoke SDPs using the configured SDP, the range sub-command should be used. The range command and the sync-tag parameters are mutually exclusive.
The synchronization of PIM snooping is only supported for manually configured spoke SDPs but is not supported for spoke SDPs configured within an endpoint.
The synchronization of PIM snooping is not supported on any of the following when used with the configured sdp-id:
-
Mesh SDPs
-
Spoke SDPs in non-VPLS services
-
BGP-AD/BGP-VPLS (FEC 129) spoke SDPs
-
Spoke SDPs configured in endpoints
-
Pseudowire SAPs
-
ESM-over-MPLS Pseudowires
Non-existent spoke SDPs may be specified. If these spoke SDPs are created at a later time, then all states on the spoke SDPs are synchronized according to the synchronization tag and the synchronization protocols enabled.
A synchronization tag can be changed by entering the same command with a different synchronization tag. Changing the synchronization tag removes all states relating to the previous synchronization tag for the SDP and a new synchronization tag state is created.
Parameters
- sdp-id
-
Specifies the SDP of the spoke SDPs to be synchronized with the multi-chassis peer.
- sync-tag
-
Specifies a synchronization tag, up to 32 characters, to be used when synchronizing with the multi-chassis peer.
- create
-
Creates the SDP instance. The create keyword requirement can be enabled or disabled in the environment>create context.
Platforms
All
sdp
Syntax
sdp sdp-id
no sdp
Context
[Tree] (config>service>system>bgp-evpn>eth-seg sdp)
Full Context
configure service system bgp-evpn ethernet-segment sdp
Description
This command configures an sdp-id associated to the Ethernet-Segment. If the Ethernet-Segment is configured as all-active, then only a lag or PW port can be associated to the Ethernet-Segment. If the Ethernet-Segment is configured as single-active, then lag, port or sdp can be associated to the Ethernet-Segment. In any case, only one of the four objects can be configured in the Ethernet-Segment. A specified SDP can be part of only one Ethernet-Segment. Only user-configured SDPs can be added to an Ethernet-Segment.
Default
no sdp
Parameters
- sdp-id
-
Specifies the IP address.
Platforms
All
sdp
Syntax
[no] sdp sdp-id:vc-id
Context
[Tree] (config>service>vpls>pbb>backbone-vpls sdp)
Full Context
configure service vpls pbb backbone-vpls sdp
Description
This command configures attributes of a SDP binding on the B-VPLS service.
Parameters
- sdp-id
-
Specifies the SDP ID.
- vc-id
-
Specifies the VC ID.
Platforms
All
sdp
Syntax
[no] sdp sdp-id:vc-id
Context
[Tree] (debug>service>id>mrp sdp)
Full Context
debug service id mrp sdp
Description
This command filters debug events and only shows events for the particular SDP.
The no form of this command removes the debug filter.
Parameters
- sdp-id
-
Specifies the SDP ID for which to display information
- vc-id
-
Displays information about the virtual circuit identifier.
Platforms
All
sdp
Syntax
[no] sdp sdp-id:vc-id
Context
[Tree] (debug>service>id sdp)
[Tree] (debug>service>id>stp sdp)
[Tree] (debug>service>id>dhcp sdp)
Full Context
debug service id sdp
debug service id stp sdp
debug service id dhcp sdp
Description
This command enables STP debugging for a specific SDP.
The no form of the command disables debugging.
Parameters
- sdp-id:vc-id
-
Specifies the SDP ID and VC ID.
Platforms
All
sdp
Syntax
[no] sdp sdp-id:vc-id
Context
[Tree] (debug>service>id>igmp-snooping sdp)
Full Context
debug service id igmp-snooping sdp
Description
This command shows IGMP packets for a specific SDP.
The no form of this command disables the debugging for the SDP.
Parameters
- sdp-id
-
Displays only IGMP snooping entries associated with the specified mesh SDP or spoke-SDP. For a spoke-SDP, the VC ID must be specified, for a mesh SDP, the VC ID is optional.
- vc-id
-
Displays information for the specified virtual circuit ID on the SDP ID
Platforms
All
sdp
Syntax
[no] sdp sdp-id:vc-id
Context
[Tree] (debug>service>id>mld sdp)
Full Context
debug service id mld-snooping sdp
Description
This command shows MLD packets for a specific SDP.
The no form of this command disables the debugging for the SDP.
Parameters
- sdp-id
-
Displays only MLD entries associated with the specified mesh SDP or spoke-SDP
- vc-id
-
Displays information for the specified virtual circuit ID on the SDP ID
Platforms
All
sdp
Syntax
sdp sdp-id [delivery-type] [create]
no sdp sdp-id
Context
[Tree] (config>service sdp)
Full Context
configure service sdp
Description
This command creates or edits a service destination point (SDP). SDPs must be explicitly configured.
An SDP is a logical mechanism that ties a far-end router to a particular service without having to specifically define far-end SAPs. Each SDP represents a method to reach another router.
One method is IP Generic Router Encapsulation (GRE), which has no state in the core of the network. GRE does not specify a specific path to the far-end router. A GRE-based SDP uses the underlying IGP routing table to find the best next hop to the far-end router.
The second method is Multi-Protocol Label Switching (MPLS) encapsulation. A router supports both signaled and non-signaled Label Switched Paths (LSPs) through the network. Non-signaled paths are defined at each hop through the network. Signaled paths are communicated by protocol from end-to-end using Resource Reservation Protocol (RSVP). Paths may be manually defined or a constraint-based routing protocol (such as OSPF-TE or CSPF) can be used to determine the best path with specific constraints. An LDP LSP can also be used for an SDP when the encapsulation is MPLS. The use of an LDP LSP type or an RSVP/Static LSP type are mutually exclusive except when the mixed-lsp option is enabled on the SDP.
Segment routing is another MPLS tunnel type and is used to allow service binding to an SR tunnel programmed in TTM by OSPF or IS-IS. The SDP of type sr-isis or sr-ospf can be used with the far-end option. The tunnel-far-end option is not supported. In addition, the mixed-lsp-mode option does not support the sr-isis and sr-ospf tunnel types.
L2TPv3-over-IPv6 transport is also an option for 7750 SR and 7950 XR Ethernet Pipe (Epipe) Services. Like GRE, L2TPv3 is stateless in the core of the network, as well as on the service nodes as the L2TPv3 control plane functionality is disabled for this SDP type. A unique source and destination IPv6 address combined with TX and RX Cookie values are used to ensure that the SDP is bound to the correct service.
SDPs are created and then bound to services. Many services may be bound to a single SDP. The operational and administrative state of the SDP controls the state of the SDP binding to the service.
If the sdp-id does not exist, a new SDP is created. When creating an SDP, either the gre, mpls, or l2tpv3 keyword must be specified. SDPs are created in the admin down state (shutdown) and the no shutdown command must be executed once all relevant parameters are defined and before the SDP can be used.
If sdp-id exists, the current CLI context is changed to that SDP for editing and modification. For editing an existing SDP, neither the gre, mpls, or l2tpv3 keyword is specified. If a keyword is specified for an existing sdp-id, an error is generated and the context of the CLI will not be changed to the specified sdp-id.
The no form of this command deletes the specified SDP. Before an SDP can be deleted, it must be administratively down (shutdown) and not bound to any services. If the specified SDP is bound to a service, the no sdp command will fail generating an error message specifying the first bound service found during the deletion process. If the specified sdp-id does not exist an error will be generated.
Parameters
- sdp-id
-
Specifies the SDP identifier.
- gre
-
Specifies the SDP will use GRE to reach the far-end router. The GRE encapsulation of the MPLS service packet uses the base 4-byte header as per RFC 2890. The optional fields Checksum (plus Reserved field), Key, and Sequence Number are not inserted. Only one GRE SDP can be created to a given destination address. Multiple GRE SDPs to a single destination address serve no purpose as the path taken to reach the far end is determined by the IGP which will be the same for all SDPs to a given destination and there is no bandwidth reservation in GRE tunnels.
- mpls
-
Specifies the SDP will use MPLS encapsulation and one or more LSP tunnels to reach the far-end device. Multiple MPLS SDPs may be created to a given destination device. Multiple MPLS SDPs to a single destination device are helpful when they use divergent paths.
- l2tpv3
-
Specifies the SDP will use L2TPv3-over-IPv6 encapsulation for the 7750 SR or 7950 XRS. One SDP is created per service, regardless of whether the far-end node is common or not. Unique local and far-end addresses are configured for every L2TPv3 SDP type. The local address must exist on the local node.
- eth-gre-bridged
-
Configures the SDP as an L2oGRE tunnel that is terminated on an FPE-based PW port. Only the end-points of such a tunnel (the far-end IPv4/IPv6 address or local-end IPv4/IPv6 address) are allowed to be configured under this SDP.
Platforms
All
sdp-exclude
sdp-exclude
Syntax
[no] sdp-exclude group-name
Context
[Tree] (config>service>pw-template sdp-exclude)
Full Context
configure service pw-template sdp-exclude
Description
This command configures SDP admin group constraints for a pseudowire template.
The admin group name must have been configured or the command is failed. The user can execute the command multiple times to include or exclude more than one admin group. The sdp-include and sdp-exclude commands can only be used with the use-provisioned-sdp or prefer-provisioned-sdp options. If the same group name is included and excluded within the same pseudowire template, only the exclude option will be enforced.
Any changes made to the admin group sdp-include and sdp-exclude constraints will only be reflected in existing spoke-sdps after the following command has been executed:
tools>perform>service>eval-pw-template>allow-service-impact
When the service is bound to the pseudowire template, the SDP selection rules will enforce the admin group constraints specified in the sdp-include and sdp-exclude commands.
In the SDP selection process, all provisioned SDPs with the correct far-end IP address, the correct tunnel-far-end IP address, and the correct service label signaling are considered. The SDP with the lowest admin metric is selected. If more than one SDP with the same lowest metric are found then the SDP with the highest sdp-id is selected. The type of SDP, GRE or MPLS (BGP/RSVP/LDP) is not a criterion in this selection.
The selection rule with SDP admin groups is modified such that the following admin-group constraints are applied upfront to prune SDPs that do not comply:
-
if one or more sdp-include statement is part of the PW template, then an SDP that is a member of one or more of the included groups will be considered. With the sdp-include statement, there is no preference for an SDP that belongs to all included groups versus one that belongs to one or fewer of the included groups. All SDPs satisfying the admin-group constraint will be considered and the selection above based on the lowest metric and highest sdp-id is applied.
-
if one or more sdp-exclude statement is part of the PW template, then an sdp that is a member of any of the excluded groups will not be considered.
SDP admin group constraints can be configured on all router services that makes use of the pseudowire template (BGP-AD VPLS service, BGP-VPLS service, and FEC129 VLL service). In the latter case, only support at a T-PE node is provided.
The no form of this command removes the SDP admin group constraints from the pseudowire template.
Parameters
- group-name
-
Specifies the name of the SDP admin group. A maximum of 32 characters can be entered.
Platforms
All
sdp-group
sdp-group
Syntax
sdp-group
Context
[Tree] (config>service sdp-group)
Full Context
configure service sdp-group
Description
This command configures the SDP membership in admin groups.
The user can enter a maximum of one (1) admin group name at once. The user can execute the command multiple times to add membership to more than one admin group. The admin group name must have been configured or the command is failed. Admin groups are supported on an SDP of type GRE and of type MPLS (BGP/RSVP/LDP). They are also supported on an SDP with the mixed-lsp-mode option enabled.
The no form of this command removes this SDP membership to the specified admin group.
Platforms
All
sdp-id-range
sdp-id-range
Syntax
sdp-id-range from id to id
no sdp-id-range
Context
[Tree] (config>fwd-path-ext sdp-id-range)
Full Context
configure fwd-path-ext sdp-id-range
Description
This command reserves an SDP ID range used by the FPE based PW-Port and VXLAN termination applications.
Each configured FPE based PW-Port is associated with two internal SDPs (one in each direction) whose id(s) are allocated from the configured sdp-id-range.
When the FPE is associated to VXLAN termination, an internal SDP is allocated from the configured sdp-id-range and is used for R-VPLS services that terminate VXLAN IPv6. A spoke-sdp per VXLAN IPv6 R-VPLS service is created on that SDP for egress processing of the packets. Sdp-id-range cannot be modified if any of its IDs are currently in use.
Default
no sdp-id-range
Parameters
- from id
-
Specifies the start of the SDP ID range (inclusive).
- to id
-
Specifies the end of the SDP ID range.
Platforms
All
sdp-include
sdp-include
Syntax
[no] sdp-include group-name
Context
[Tree] (config>service>pw-template sdp-include)
Full Context
configure service pw-template sdp-include
Description
This command configures SDP admin group constraints for a pseudowire template.
The admin group name must have been configured or the command is failed. The user can execute the command multiple times to include or exclude more than one admin group. The sdp-include and sdp-exclude commands can only be used with the use-provisioned-sdp or prefer-provisioned-sdp options. If the same group name is included and excluded within the same pseudowire template, only the exclude option will be enforced.
Any changes made to the admin group sdp-include and sdp-exclude constraints will only be reflected in existing spoke-sdps after the following command has been executed:
tools>perform>service>eval-pw-template>allow-service-impact
When the service is bound to the pseudowire template, the SDP selection rules will enforce the admin group constraints specified in the sdp-include and sdp-exclude commands.
In the SDP selection process, all provisioned SDPs with the correct far-end IP address, the correct tunnel-far-end IP address, and the correct service label signaling are considered. The SDP with the lowest admin metric is selected. If more than one SDP with the same lowest metric are found then the SDP with the highest sdp-id is selected. The type of SDP, GRE or MPLS (BGP/RSVP/LDP) is not a criterion in this selection.
The selection rule with SDP admin groups is modified such that the following admin-group constraints are applied upfront to prune SDPs that do not comply:
-
if one or more sdp-include statement is part of the PW template, then an SDP that is a member of one or more of the included groups will be considered. With the sdp-include statement, there is no preference for an SDP that belongs to all included groups versus one that belongs to one or fewer of the included groups. All SDPs satisfying the admin-group constraint will be considered and the selection above based on the lowest metric and highest sdp-id is applied.
-
if one or more sdp-exclude statement is part of the PW template, then an sdp that is a member of any of the excluded groups will not be considered.
SDP admin group constraints can be configured on all router services that make use of the pseudowire template (BGP-AD VPLS service, BGP-VPLS service, and FEC129 VLL service). In the latter case, only support at a T-PE node is provided.
The no form of this command removes the SDP admin group constraints from the pseudowire template.
Parameters
- group-name
-
Specifies the name of the SDP admin group. A maximum of 32 characters can be entered.
Platforms
All
sdp-mtu
sdp-mtu
Syntax
sdp-mtu orig-sdp-id size-inc start-octets end-octets [step step-size] [timeout timeout] [interval interval]
Context
[Tree] (oam sdp-mtu)
Full Context
oam sdp-mtu
Description
Performs MTU Path tests on an SDP to determine the largest path-mtu supported on an SDP. The size-inc parameter can be used to easily determine the path-mtu of a given SDP-ID. The forwarding class is assumed to be Best-Effort Out-of-Profile. The message reply is returned with IP/GRE encapsulation from the far-end router. OAM request messages sent within an IP/GRE SDP must have the 'DF’ IP header bit set to 1 to prevent message fragmentation.
To terminate an sdp-mtu in progress, use the CLI break sequence <Ctrl-C>.
Parameters
- orig-sdp-id
-
Specifies the sdp-id to be used by sdp-ping, expressed as a decimal integer. The far-end address of the specified sdp-id is the expected responder-id within each reply received. The specified sdp-id defines the encapsulation of the SDP tunnel encapsulation used to reach the far end. This can be IP/GRE or MPLS. If orig-sdp-id is invalid or administratively down or unavailable, the SDP echo request message is not sent and an appropriate error message is displayed (once the interval timer expires, sdp-ping attempts to send the next request, if required).
- start-octets
-
Specifies the beginning size in octets of the first message sent for an incremental MTU test, expressed as a decimal integer.
- end-octets
-
Specifies the ending size in octets of the last message sent for an incremental MTU test, expressed as a decimal integer. The specified value must be greater than start-octets.
- step-size
-
Specifies the number of octets to increment the message size request for each message sent for an incremental MTU test, expressed as a decimal integer. The next size message is not sent until a reply is received or three messages have timed out at the current size.
If the incremented size exceeds the end-octets value, no more messages are sent.
- timeout
-
Specifies the timeout parameter in seconds, expressed as a decimal integer. This value is used to override the default timeout value and is the amount of time that the router waits for a message reply after sending the message request. Upon the expiration of the message time out, the requesting router assumes that the message response is not received. A request timeout message is displayed by the CLI for each message request sent that expires. Any response received after the request times out is silently discarded.
- interval
-
Specifies the interval parameter in seconds, expressed as a decimal integer. This parameter is used to override the default request message send interval and defines the minimum amount of time that must expire before the next message request is sent.
If the interval is set to 1 second, and the timeout value is set to 10 seconds, then the maximum time between message requests is 10 seconds and the minimum is 1 second. This depends upon the receipt of a message reply corresponding to the outstanding message request.
Platforms
All
Output
Output Example: SDP MTU Path Test*A:Dut-A# oam sdp-mtu 1201 size-inc 512 3072 step 256
Size Sent Response
----------------------------
512 . Success
768 . Success
1024 . Success
1280 . Success
1536 . Success
1792 . Success
2048 . Success
2304 . Success
2560 . Success
2816 . Success
3072 . Success
Maximum Response Size: 3072
*A:Dut-A#
sdp-ping
sdp-ping
Syntax
sdp-ping orig-sdp-id [resp-sdp resp-sdp-id] [fc fc-name [profile { in | out}]] [size octets] [count send-count] [timeout timeout] [interval interval]
Context
[Tree] (config>saa>test>type sdp-ping)
[Tree] (oam sdp-ping)
Full Context
configure saa test type sdp-ping
oam sdp-ping
Description
This command tests SDPs for uni-directional or round trip connectivity and performs SDP MTU Path tests.
The sdp-ping command accepts an originating SDP-ID and an optional responding SDP-ID. The size, number of requests sent, message time-out and message send interval can be specified. All sdp-ping requests and replies are sent with PLP OAM-Label encapsulation, as a service-id is not specified.
For round trip connectivity testing, the resp-sdp keyword must be specified. If resp-sdp is not specified, a uni-directional SDP test is performed.
To terminate an sdp-ping in progress, use the CLI break sequence <Ctrl-C>.
An sdp-ping response message indicates the result of the sdp-ping message request. When multiple response messages apply to a single SDP echo request/reply sequence, the response message with the highest precedence is displayed. sdp-ping Response Messages shows the response messages sorted by precedence.
Result of Request |
Displayed Response Message |
Precedence |
---|---|---|
Request time out without reply |
Request Timeout |
1 |
Request not sent due to non-existent orig-sdp-id |
Orig-SDP Non-Existent |
2 |
Request not sent due to administratively down orig-sdp-id |
Orig-SDP Admin-Down |
3 |
Request not sent due to operationally down orig-sdp-id |
Orig-SDP Oper-Down |
4 |
Request terminated by user before reply or time out |
Request Terminated |
5 |
Reply received, invalid origination-id |
Far End: Originator-ID Invalid |
6 |
Reply received, invalid responder-id |
Far End: Responder-ID Error |
7 |
Reply received, non-existent resp-sdp-id |
Far End: Resp-SDP Non-Existent |
8 |
Reply received, invalid resp-sdp-id |
Far End: Resp-SDP Invalid |
9 |
Reply received, resp-sdp-id down (admin or oper) |
Far-end: Resp-SDP Down |
10 |
Reply received, No Error |
Success |
11 |
Parameters
- orig-sdp-id
-
Specifies the SDP ID to be used by sdp-ping, expressed as a decimal integer. The far-end address of the specified SDP-ID is the expected responder-id within each reply received. The specified SDP-ID defines the encapsulation of the SDP tunnel encapsulation used to reach the far end. This can be IP/GRE or MPLS. If orig-sdp-id is invalid or administratively down or unavailable for some reason, the SDP Echo Request message is not sent and an appropriate error message is displayed (once the interval timer expires, sdp-ping attempts to send the next request if required).
- resp-sdp-id
-
Specifies the return SDP-ID to be used by the far-end router for the message reply for round trip SDP connectivity testing. If resp-sdp-id does not exist on the far-end router, terminates on another router different than the originating router, or another issue prevents the far-end router from using resp-sdp-id, the SDP echo reply is sent using generic IP/GRE OAM encapsulation. The received forwarding class (as mapped on the ingress network interface for the far end) defines the forwarding class encapsulation for the reply message.
- fc-name
-
Specifies the parameter to be used to indicate the forwarding class of the SDP encapsulation. The actual forwarding class encoding is controlled by the network egress DSCP or LSP-EXP mappings.
The DSCP or LSP-EXP mappings on the receive network interface controls the mapping back to the internal forwarding class used by the far-end router that receives the message request. The egress mappings of the egress network interface on the far-end router controls the forwarding class markings on the return reply message.
The DSCP or LSP-EXP mappings on the receive network interface controls the mapping of the message reply at the originating router. This is displayed in the response message output upon receipt of the message reply.
- profile {in | out}
-
Specifies the profile state of the SDP encapsulation.
- octets
-
Specifies the size parameter in octets. This parameter is used to override the default message size for the sdp-ping request. Changing the message size is a method of checking the ability of an SDP to support a path-mtu. The size of the message does not include the SDP encapsulation, VC-Label (if applied) or any DLC headers or trailers.
When the OAM message request is encapsulated in an IP/GRE SDP, the IP 'DF’ (Do Not Fragment) bit is set. If any segment of the path between the sender and receiver cannot handle the message size, the message is discarded. MPLS LSPs are not expected to fragment the message either, as the message contained in the LSP is not an IP packet.
- send-count
-
Specifies the number of messages to send. The count parameter is used to override the default number of message requests sent. Each message request must either time out or receive a reply before the next message request is sent. The message interval value must have expired before the next message request is sent.
- timeout
-
Specifies the time, in seconds, used to override the default timeout value and is the amount of time that the router waits for a message reply after sending the last probe for a specific test. Upon the expiration of time out, the test is marked complete and no more packets is processed for any of those request probes.
- interval
-
Specifies the time, in seconds, used to override the default request message send interval and defines the minimum amount of time that must expire before the next message request is sent.
Platforms
All
Output
Single Response Round Trip Connectivity Test Output ExampleA:router1> sdp-ping 10 resp-sdp 22 fc ef
Request Result: Sent - Reply Received
RTT:30ms
Err SDP-ID Info Local Remote
__ SDP-ID: 10 22
__ Administrative State: Up Up
__ Operative State: Up Up
__ Path MTU 4470 4470
__ Response SDP Used: Yes
Err System IP Interface Info
Local Interface Name: "ESR-System-IP-Interface (Up to 32 chars)…"
__ Local IP Interface State: Up
__ Local IP Address: 10.10.10.11
__ IP Address Expected By Remote: 10.10.10.11
__ Expected Remote IP Address: 10.10.10.10
__ Actual Remote IP Address: 10.10.10.10
Err FC Mapping Info Local Remote
__ Forwarding Class Assured Assured
__ Profile In In
Multiple Response Connectivity Tests — When the connectivity test count is greater than one (1), a single line is displayed per SDP echo request send attempt.
The request number is a sequential number starting with 1 and ending with the last request sent, incrementing by one (1) for each request. This should not be confused with the message-id contained in each request and reply message.
A response message indicates the result of the message request. Following the response message is the round trip time value. If any reply is received, the round trip time is displayed.
After the last reply has been received or response timed out, a total is displayed for all messages sent and all replies received. A maximum, minimum and average round trip time is also displayed. Error response and timed out requests do not apply towards the average round trip time.
Multiple Response Round Trip Connectivity Test Output ExampleA:router1> sdp-ping 6 resp-sdp 101size 1514 count 5
Request Response RTT
---------- ---------- -------
1 Success 10ms
2 Success 15ms
3 Success 10ms
4 Success 20ms
5 Success 5ms
Sent: 5 Received: 5
Min: 5ms Max: 20ms Avg: 12ms
seamless-bfd
seamless-bfd
Syntax
seamless-bfd
Context
[Tree] (config>bfd seamless-bfd)
Full Context
configure bfd seamless-bfd
Description
This command specifies the context for the configuration of a seamless BFD reflector.
Platforms
All
seamless-bfd
Syntax
seamless-bfd
Context
[Tree] (config>router>bfd seamless-bfd)
Full Context
configure router bfd seamless-bfd
Description
This command specifies the context for the configuration of seamless BFD initiator parameters that are global to this router.
The no form of this command removes the context.
Platforms
All
search
search
Syntax
search base-dn
no search
Context
[Tree] (config>system>security>ldap>server search)
Full Context
configure system security ldap server search
Description
This command configures the LDAP search command. The search base-dn tells the server which part of the external directory tree to search. The search DN uses the same LDAP attribute as root-dn. For example, to search a public-key for an SSH generated for a Nokia vendor, one might use "dc=public-key,dc=nokia,dc=com”.
The no version of this command removes the search DN; as such, no search is possible on the LDAP server.
Parameters
- base-dn
-
Specifies the base domain name used in the search, up to 512 characters.
Platforms
All
secondary
secondary
Syntax
secondary
Context
[Tree] (config>aaa>radius-scr-plcy secondary)
Full Context
configure aaa radius-script-policy secondary
Description
Commands in this context configure a secondary script.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
secondary
Syntax
secondary
Context
[Tree] (config>subscr-mgmt>sub-ident-pol secondary)
Full Context
configure subscriber-mgmt sub-ident-policy secondary
Description
Commands in this context configure secondary identification script parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
secondary
Syntax
secondary ip-address[/mask] [netmask ] [broadcast {all-ones | host-ones}] [igp-inhibit] [track-srrp srrp-instance]
no secondary ip-address[/mask]
Context
[Tree] (config>service>ies>if secondary)
Full Context
configure service ies interface secondary
Description
This command assigns a secondary IP address or IP subnet/broadcast address format to the interface.
The no form of this command reverts to the default.
Parameters
- ip-address
-
The IP address of the IP interface. The ip-address portion of the address command specifies the IP host address that is used by the IP interface within the subnet. This address must be unique within the subnet and specified in dotted decimal notation. Allowed values are IP addresses in the range 1.0.0.0 – 223.255.255.255 (with support of /31 subnets).
- mask
-
The subnet mask in dotted decimal notation. When the IP prefix is not specified in CIDR notation, a space separates the ip-address from a traditional dotted decimal mask. The mask parameter indicates the complete mask that is used in a logical and function to derive the local subnet of the IP address. Allowed values are dotted decimal addresses in the range 128.0.0.0 – 255.255.255.254.
Note:A mask of 255.255.255.255 is reserved for system IP addresses.
- netmask
-
Specifies a string of 0s and 1s that mask or screen out the network part of an IP address so that only the host computer part of the address remains.
- broadcast
-
Overrides the default broadcast address used by the IP interface when sourcing IP broadcasts on the IP interface. If no broadcast format is specified for the IP address, the default value is host-ones which indicates a subnet broadcast address. Use this parameter to change the broadcast address to all-ones or revert back to a broadcast address of host-ones.
The broadcast format on an IP interface can be specified when the IP address is assigned or changed.
This parameter does not affect the type of broadcasts that can be received by the IP interface. A host sending either the local broadcast (all-ones) or the valid subnet broadcast address (host-ones) is received by the IP interface. (Default: host-ones)
- all-ones
-
Specifies the broadcast address used by the IP interface for this IP address is 255.255.255.255, also known as the local broadcast.
- host-ones
-
Specifies that the broadcast address used by the IP interface for this IP address is the subnet broadcast address. This is an IP address that corresponds to the local subnet described by the ip-address and the mask-length or mask with all the host bits set to binary one. This is the default broadcast address used by an IP interface. The broadcast parameter within the address command does not have a negate feature, which is usually used to revert a parameter to the default value. To change the broadcast type to host-ones after being changed to all-ones, the address command must be executed with the broadcast parameter defined.
- igp-inhibit
-
Signals that the given secondary IP interface should not be recognized as a local interface by the running IGP. For OSPF and IS-IS, this means that the specified secondary IP interfaces are not injected and used as passive interfaces and are not advertised as internal IP interfaces into the IGP’s link state database. For RIP, this means that these secondary IP interfaces do not source RIP updates.
- track-srrp srrp-instance
-
Specifies the SRRP instance ID that this interface route needs to track.
Platforms
All
secondary
Syntax
secondary ip-address[/mask] [ netmask] [broadcast {all-ones | host-ones}] [igp-inhibit] [ track-srrp srrp-instance]
no secondary ip-address[/mask]
Context
[Tree] (config>service>vprn>if secondary)
[Tree] (config>service>vprn>nw-if secondary)
Full Context
configure service vprn interface secondary
configure service vprn network-interface secondary
Description
This command assigns a secondary IP address to the interface. Up to 16 total primary and secondary IPv4 and IPv6 addresses can be assigned to network interfaces, and up to 256 to access interfaces. Each address can be configured in an IP address, IP subnet or broadcast address format.
Configurations must not exceed 16 secondary IP addresses when IPsec, GRE, L2TPv3, or IP in IP protocols are active on an access interface.
Parameters
- ip-address
-
The IP address of the IP interface. The ip-address portion of the address command specifies the IP host address that will be used by the IP interface within the subnet. This address must be unique within the subnet and specified in dotted decimal notation. Allowed values are IP addresses in the range 1.0.0.0 – 223.255.255.255 (with support of /31 subnets).
- mask
-
The subnet mask in dotted decimal notation. When the IP prefix is not specified in CIDR notation, a space separates the ip-address from a traditional dotted decimal mask. The mask parameter indicates the complete mask that will be used in a logical 'AND’ function to derive the local subnet of the IP address. Allowed values are dotted decimal addresses in the range 128.0.0.0 – 255.255.255.254. A mask of 255.255.255.255 is reserved for system IP addresses.
- netmask
-
Specifies a string of 0s and 1s that mask or screen out the network part of an IP address so that only the host computer part of the address remains.
- broadcast
-
The optional broadcast parameter overrides the default broadcast address used by the IP interface when sourcing IP broadcasts on the IP interface. If no broadcast format is specified for the IP address, the default value is host-ones which indicates a subnet broadcast address. Use this parameter to change the broadcast address to all-ones or revert back to a broadcast address of host-ones.
The broadcast format on an IP interface can be specified when the IP address is assigned or changed. This parameter does not affect the type of broadcasts that can be received by the IP interface. A host sending either the local broadcast (all-ones) or the valid subnet broadcast address (host-ones) will be received by the IP interface. (Default: host-ones)
- all-ones
-
The all-ones keyword following the broadcast parameter specifies the broadcast address used by the IP interface for this IP address will be 255.255.255.255, also known as the local broadcast.
- host-ones
-
The host-ones keyword following the broadcast parameter specifies that the broadcast address used by the IP interface for this IP address will be the subnet broadcast address. This is an IP address that corresponds to the local subnet described by the ip-address and the mask-length or mask with all the host bits set to binary one. This is the default used by an IP interface.
The broadcast parameter within the address command does not have a negate feature, which is usually used to revert a parameter to the default value. To change the broadcast type to host-ones after being changed to all-ones, the address command must be executed with the broadcast parameter defined.
- igp-inhibit
-
The optional igp-inhibit parameter signals that the given secondary IP interface should not be recognized as a local interface by the running IGP. For OSPF and IS-IS, this means that the specified secondary IP interfaces will not be injected and used as passive interfaces and will not be advertised as internal IP interfaces into the IGP’s link state database. For RIP, this means that these secondary IP interfaces will not source RIP updates.
- track-srrp srrp-instance
-
Specifies the SRRP instance ID that this interface route needs to track.
Platforms
All
secondary
Syntax
[no] secondary path-name
Context
[Tree] (config>router>mpls>lsp secondary)
Full Context
configure router mpls lsp secondary
Description
This command specifies an alternative path that the LSP uses if the primary path is not available. This command is optional and is not required if the config router mpls lsp lsp-name primary path-name command is specified. After the switch over from the primary to the secondary, the system continuously tries to revert to the primary path. The switch back to the primary path is based on the retry-timer interval.
For RSVP-TE LSPs, up to eight secondary paths can be specified (or seven if a primary is configured). For SR-TE LSPs, up to three paths of any type (with a maximum of one primary) can be configured. By default, a secondary path is non-standby unless the standby keyword is configured. All non-standby secondary paths are considered equal and the first available path is used.
The system does not switch among secondary paths. The system starts the signaling (RSVP-TE) or programming (SR-TE) of all non-standby secondary paths at the same time. Retry counters are maintained for each unsuccessful attempt. After the retry limit is reached on a path, the system does not attempt to signal the path and administratively shuts down the path. The first successfully established non-standby secondary path is made the active path for the LSP.
The no form of this command removes the association between this path-name and lsp-name. All specific configurations for this association are deleted. The secondary path must be shut down prior to deleting it. The no secondary path-name command does not result in any action except a warning message on the console indicating that the secondary path is administratively up.
Parameters
- path-name
-
Specifies the case-sensitive alphanumeric name label for the LSP path, up to 64 characters.
Platforms
All
secondary
Syntax
secondary {ip-address/mask | ip-address netmask} [broadcast {all-ones | host-ones}] [igp-inhibit] [ track-srrp srrp-instance]
no secondary {ip-address/mask | ip-address netmask}
Context
[Tree] (config>router>if secondary)
Full Context
configure router interface secondary
Description
This command assigns additional IP addresses to the interface. Up to 16 total primary and secondary IPv4 and IPv6 addresses can be assigned to network interfaces, and up to 256 to access interfaces. Each address can be configured in an IP address, IP subnet, or broadcast address format.
Configurations must not exceed 16 secondary IP addresses when IPsec, GRE, L2TPv3, or IP in IP protocols are active on an access interface.
Parameters
- ip-address
-
Specifies the IP address of the IP interface. The ip-address portion of the address command specifies the IP host address that will be used by the IP interface within the subnet. This address must be unique within the subnet and specified in dotted decimal notation.
- /
-
The forward slash is a parameter delimiter that separates the ip-address portion of the IP address from the mask that defines the scope of the local subnet. No spaces are allowed between the ip-addr, the "/” and the mask-length parameter. If a forward slash does not immediately follow the ip-addr, a dotted decimal mask must follow the prefix.
- mask
-
Specifies the subnet mask length when the IP prefix is specified in CIDR notation. When the IP prefix is specified in CIDR notation, a forward slash (/) separates the ip-address from the mask parameter. The mask parameter indicates the number of bits used for the network portion of the IP address; the remainder of the IP address is used to determine the host portion of the IP address. Allowed values are integers in the range 1 to 32. A mask length of 32 is reserved for system IP addresses.
- netmask
-
Specifies the subnet mask in dotted decimal notation. When the IP prefix is not specified in CIDR notation, a space separates the ip-address from a traditional dotted decimal mask. The mask parameter indicates the complete mask that will be used in a logical 'AND’ function to derive the local subnet of the IP address. A mask of 255.255.255.255 is reserved for system IP addresses.
- broadcast
-
The optional broadcast parameter overrides the default broadcast address used by the IP interface when sourcing IP broadcasts on the IP interface. If no broadcast format is specified for the IP address, the default value is host-ones, which indicates a subnet broadcast address. Use this parameter to change the broadcast address to all-ones or revert back to a broadcast address of host-ones.
The broadcast parameter within the address command does not have a negate feature, which is usually used to revert a parameter to the default value. To change the broadcast type to host-ones after being changed to all-ones, the address command must be executed with the broadcast parameter defined.
The broadcast format on an IP interface can be specified when the IP address is assigned or changed.
This parameter does not affect the type of broadcasts that can be received by the IP interface. A host sending either the local broadcast (all-ones) or the valid subnet broadcast address (host-ones) will be received by the IP interface.
- all-ones
-
The all-ones keyword following the broadcast parameter specifies that the broadcast address used by the IP interface for this IP address will be 255.255.255.255, also known as the local broadcast.
- host-ones
-
The host-ones keyword following the broadcast parameter specifies that the broadcast address used by the IP interface for this IP address will be the subnet broadcast address. This is an IP address that corresponds to the local subnet described by the ip-address and the mask with all the host bits set to binary 1. This is the default broadcast address used by an IP interface.
- igp-inhibit
-
The secondary IP address should not be recognized as a local interface by the running IGP.
- srrp-instance
-
Specifies the SRRP instance ID that this interface route needs to track.
Platforms
All
secondary-config
secondary-config
Syntax
secondary-config file-url
no secondary-config
Context
[Tree] (bof secondary-config)
Full Context
bof secondary-config
Description
This command specifies the name and location of the secondary configuration file.
The system attempts to use the configuration as specified in secondary-config if the primary config cannot be located. If the secondary-config file cannot be located, the system attempts to obtain the configuration from the location specified in the tertiary-config.
Note that if an error in the configuration file is encountered, the boot process aborts.
The no form of this command removes the secondary-config configuration.
Parameters
- file-url
-
Specifies the secondary configuration file location, expressed as a file URL.
Platforms
All
secondary-dns
secondary-dns
Syntax
secondary-dns ip-address
no secondary-dns
Context
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>dhcp secondary-dns)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>dhcp secondary-dns)
Full Context
configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range dhcp secondary-dns
configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range dhcp secondary-dns
Description
This command configures the secondary DNS address to be returned via DHCP on WLAN-GW ISA.
The no form of this command reverts to the default.
Parameters
- ip-address
-
Specifies the secondary DNS address.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
secondary-dns
Syntax
secondary-dns ip-address
no secondary-dns
Context
[Tree] (config>service>vprn>dns secondary-dns)
Full Context
configure service vprn dns secondary-dns
Description
This command configures the secondary DNS server for DNS name resolution. The secondary DNS server is used only if the primary DNS server does not respond.
DNS name resolution can be used when executing ping, traceroute, and service-ping, and also when defining file URLs. DNS name resolution is not supported when DNS names are embedded in configuration files.
The no form of this command removes the secondary DNS server from the configuration.
Default
no secondary-dns — No secondary DNS server is configured.
Parameters
- ip-address
-
The IP or IPv6 address of the secondary DNS server.
Platforms
All
secondary-dns
Syntax
secondary-dns ip-address
no secondary-dns [ip-address]
Context
[Tree] (bof secondary-dns)
Full Context
bof secondary-dns
Description
This command configures the secondary DNS server for DNS name resolution. The secondary DNS server is used only if the primary DNS server does not respond.
DNS name resolution can be used when executing ping, traceroute, and service-ping, and also when defining file URLs. DNS name resolution is not supported when DNS names are embedded in configuration files.
The no form of this command removes the secondary DNS server from the configuration.
Default
no secondary-dns
Parameters
- ip-address
-
Specifies the IP or IPv6 address of the secondary DNS server.
Platforms
All
secondary-fast-retry-timer
secondary-fast-retry-timer
Syntax
secondary-fast-retry-timer seconds
no secondary-fast-retry-timer
Context
[Tree] (config>router>mpls secondary-fast-retry-timer)
Full Context
configure router mpls secondary-fast-retry-timer
Description
This command specifies the value used as the fast retry timer for a secondary path. If the first attempt to set up a secondary path fails due to a path error, the fast retry timer will be started for the secondary path so that the path can be retried sooner. If the next attempt also fails, further retries for the path will use the configured value for LSP retry timer.
If retry-timer for the LSP is configured to be less than the MPLS secondary-fast-retry-timer, all retries for the secondary path will use the LSP retry-timer.
The no form of this command reverts to the default.
Default
no secondary-fast-retry-timer
Parameters
- seconds
-
Specifies the value (in seconds), used as the fast retry timer for a secondary path
Platforms
All
secondary-image
secondary-image
Syntax
secondary-image file-url
no secondary-image
Context
[Tree] (bof secondary-image)
Full Context
bof secondary-image
Description
This command specifies the secondary directory location for runtime image file loading.
The system attempts to load all runtime image files configured in the primary-image first. If this fails, the system attempts to load the runtime images from the location configured in the secondary-image. If the secondary image load fails, the tertiary image specified in tertiary-image is used.
All runtime image files (*.tim files) must be located in the same directory.
The no form of this command removes the secondary-image configuration.
Parameters
- file-url
-
Specifies the file URL; can be either local (this CPM) or a remote FTP server.
Platforms
All
secondary-ip-address
secondary-ip-address
Syntax
secondary-ip-address ipv4-address
no secondary-ip-address
Context
[Tree] (config>router>bgp>orr>location secondary-ip-address)
Full Context
configure router bgp optimal-route-reflection location secondary-ip-address
Description
This command specifies the secondary IP address of a reference location used for BGP optimal route reflection. Up to three IPv4 addresses and three IPv6 addresses can be specified per location.
If the TE DB is unable to find a node in its topology database that matches the primary address, then the TE DB tries to find a node with the matching secondary address. If this attempt also fails, the TE DB then tries to find a node with the matching tertiary address.
The IP addresses specified for a location should be topologically "close” to a set of clients that should all receive the same optimal path for that location.
The no form of this command removes the secondary IP address information.
Default
no secondary-ip-address
Parameters
- ipv4-address
-
Specifies the secondary IPv4 address of a location, expressed in dotted decimal notation.
Platforms
All
secondary-ipv6-address
secondary-ipv6-address
Syntax
secondary-ipv6-address ipv6-address
no secondary-ipv6-address
Context
[Tree] (config>router>bgp>orr>location secondary-ipv6-address)
Full Context
configure router bgp optimal-route-reflection location secondary-ipv6-address
Description
This command specifies the secondary IPv6 address of a reference location used for BGP optimal route reflection. Up to three IPv4 addresses and three IPv6 addresses can be specified per location.
If the TE DB is unable find a node in its topology database that matches a primary address of the location, then it tries to find a node matching a secondary address. If this attempt also fails, the TE DB tries to find a node matching a tertiary address.
The IP addresses specified for a location should be topologically "close” to a set of clients that should all receive the same optimal path for that location.
The no form of this command removes the secondary IPv6 address information.
Default
no secondary-ipv6-address
Parameters
- ipv6-address
-
Specifies the secondary IPv6 address of a location.
Platforms
All
secondary-location
secondary-location
Syntax
secondary-location file-url
no secondary-location
Context
[Tree] (config>system>software-repository secondary-location)
Full Context
configure system software-repository secondary-location
Description
This command configures the secondary location for the files in the software repository. See the software-repository command description for more information.
The no form of the command removes the secondary location.
Parameters
- file-url
-
Specifies the secondary location to be used to access the files in the software repository.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
secondary-nbns
secondary-nbns
Syntax
secondary-nbns ip-address
no secondary-nbns
Context
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>dhcp secondary-nbns)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>dhcp secondary-nbns)
Full Context
configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range dhcp secondary-nbns
configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range dhcp secondary-nbns
Description
This command configures the secondary NBNS address to be returned via DHCP on WLAN-GW ISA.
The no form of this command reverts to the default.
Parameters
- ip-address
-
Specifies the secondary NBNS address.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
secondary-path
secondary-path
Syntax
secondary-path
Context
[Tree] (config>mcast-mgmt>bw-plcy>t2-paths secondary-path)
Full Context
configure mcast-management bandwidth-policy t2-paths secondary-path
Description
Commands in this context configure secondary path queue parameters. This command overrides the default path limit for the secondary path, which is one of the three ingress multicast paths into the switch fabric.
Platforms
7450 ESS, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-7/12/12e, 7750 SR-s, 7950 XRS, VSR
secondary-ports
secondary-ports
Syntax
secondary-ports
Context
[Tree] (config>service>vpls>mac-move secondary-ports)
[Tree] (config>service>template>vpls-template>mac-move secondary-ports)
Full Context
configure service vpls mac-move secondary-ports
configure service template vpls-template mac-move secondary-ports
Description
This command opens configuration context for defining secondary vpls-ports. VPLS ports that were declared as primary prior to the execution of this command will be moved from primary port-level to secondary port-level. Changing a port to the tertiary level can only be done by first removing it from the primary port-level.
Platforms
All
secondary-retry-limit
secondary-retry-limit
Syntax
secondary-retry-limit {number | infinite}
no secondary-retry-limit
Context
[Tree] (config>router>mpls>lsp>auto-bandwidth>use-last-adj-bw secondary-retry-limit)
Full Context
configure router mpls lsp auto-bandwidth use-last-adj-bw secondary-retry-limit
Description
This command configures the maximum number of retry attempts for secondary paths. After each successful attempt, the counter is reset to zero.
When the specified number is reached, no more attempts are made and the path is put into the shutdown state.
A value of 0 or infinite means that the system will retry forever.
The no form of this command reverts to the default.
Default
no secondary-retry-limit
Parameters
- number
-
Specifies the number of retries.
- infinite
-
Specifies a retry limit of infinity.
Platforms
All
secondary-shaper-hashing
secondary-shaper-hashing
Syntax
[no] secondary-shaper-hashing
Context
[Tree] (config>subscr-mgmt>sub-prof secondary-shaper-hashing)
Full Context
configure subscriber-mgmt sub-profile secondary-shaper-hashing
Description
This command enables LAG secondary shaper ID hashing. With this feature enabled, secondary shaper ID hashing can span multiple forwarding complexes on egress LAG. The default is to perform secondary shaper ID hashing on egress and requires all active LAG members to be on the same forwarding complex.
The no form of this command enables the default behavior.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
secondary-url
secondary-url
Syntax
secondary-url url
no secondary-url
Context
[Tree] (config>python>py-script secondary-url)
Full Context
configure python python-script secondary-url
Description
This command specifies the location of secondary Python script. The system supports three locations for each Python-script. Users can store scripts file on either a local CF card or a FTP server.
The no form of this command removes the URL.
Parameters
- url
-
Specifies the secondary URL of the Python script, up to 180 characters, either a local CF card URL or a FTP server URL.
Platforms
All
seconds
seconds
Syntax
seconds
Context
[Tree] (config>test-oam>sath>svc-test>dur>perf seconds)
[Tree] (config>test-oam>sath>svc-test>dur>cir-pir seconds)
[Tree] (config>test-oam>sath>svc-test>dur>policing seconds)
[Tree] (config>test-oam>sath>svc-test>dur>cir seconds)
Full Context
configure test-oam service-activation-testhead service-test test-duration performance seconds
configure test-oam service-activation-testhead service-test test-duration cir-pir seconds
configure test-oam service-activation-testhead service-test test-duration policing seconds
configure test-oam service-activation-testhead service-test test-duration cir seconds
Description
This command configures the seconds portion of the overall duration of a CIR, CIR-PIR, performance, or policing test.
Parameters
- seconds
-
Specifies the number of seconds to run the test. This parameter applies to all test types.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
secret
secret
Syntax
secret secret [hash | hash2 | custom]
no secret
Context
[Tree] (config>router>wpp>portals>portal secret)
[Tree] (config>service>vprn>wpp>portals>portal secret)
Full Context
configure router wpp portals portal secret
configure service vprn wpp portals portal secret
Description
This command configures the secret that is used by WPPv2 to authenticate the messages between portal and BRAS.
The no form of this command removes the secret and hash from the configuration.
Parameters
- secret
-
Specifies the secret key to access the server, up to 64 characters.
- hash
-
Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- hash2
-
Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- custom
-
Specifies the custom encryption to management interface.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
secret
Syntax
secret secret [hash | hash2 | custom]
no secret
Context
[Tree] (config>router>radius-proxy>server secret)
[Tree] (config>service>vprn>radius-proxy>server secret)
Full Context
configure router radius-proxy server secret
configure service vprn radius-proxy server secret
Description
This command configures the shared secret key. The RADIUS client must have the same key to communicate with the RADIUS-proxy server.
The no form of this command removes the parameters from the configuration.
Parameters
- secret key
-
Specifies the secret key up to 64 characters to access the RADIUS server. This secret key must match the password on the RADIUS server.
- hash
-
Specifies that the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- hash2
-
Specifies that the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- custom
-
Specifies the custom encryption to management interface.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
secret
Syntax
secret secret-key | hash-key [hash | hash2 | custom]
no secret
Context
[Tree] (config>aaa>isa-radius-plcy>servers>server secret)
Full Context
configure aaa isa-radius-policy servers server secret
Description
This command configures the secret key to access the RADIUS server. This secret key must match the password on the RADIUS server.
Default
no secret
Parameters
- hash
-
Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- hash2
-
Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- custom
-
Specifies the custom encryption to management interface.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
section-trace
section-trace
Syntax
section-trace {increment-z0 | byte value | string string}
Context
[Tree] (config>port>sonet-sdh section-trace)
Full Context
configure port sonet-sdh section-trace
Description
This command configures the section trace bytes in the SONET section header to inter-operate with some older versions of ADMs or regenerators that require an incrementing STM ID. You can explicitly configure an incrementing STM value rather than a static one in the SDH overhead by specifying the z0-increment.
This command is supported on TDM satellite.
Default
section-trace byte 0x1
Parameters
- increment-z0
-
Configures an incrementing STM ID instead of a static value.
- value
-
Sets values in SONET header bytes.
- string
-
Specifies a text string that identifies the section. The string can be a maximum of 16 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
secure-boot
secure-boot
Syntax
secure-boot
Context
[Tree] (admin>system>security secure-boot)
Full Context
admin system security secure-boot
Description
Commands in this context administratively provision secure boot.
Platforms
7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-s, 7950 XRS-20e
secure-nd
secure-nd
Syntax
[no] secure-nd
Context
[Tree] (config>service>ies>if>ipv6 secure-nd)
Full Context
configure service ies interface ipv6 secure-nd
Description
This command enables Secure Neighbor Discovery (SeND) on the IPv6 interface.
The no form of this command reverts to the default and disabled SeND.
Platforms
All
secure-nd
Syntax
[no] secure-nd
Context
[Tree] (config>service>vprn>if>ipv6 secure-nd)
Full Context
configure service vprn interface ipv6 secure-nd
Description
This command enables Secure Neighbor Discovery (SeND) on the IPv6 interface.
The no form of this command reverts to the default and disabled SeND.
Platforms
All
secure-nd
Syntax
[no] secure-nd
Context
[Tree] (config>router>if>ipv6 secure-nd)
Full Context
configure router interface ipv6 secure-nd
Description
This command enables Secure Neighbor Discovery (SeND) on the IPv6 interface.
The no form of this command reverts to the default and disabled SeND.
Platforms
All
secure-nd-export
secure-nd-export
Syntax
secure-nd-export
Context
[Tree] (admin>certificate secure-nd-export)
Full Context
admin certificate secure-nd-export
Description
This command exports IPv6 Secure Neighbor Discovery (SeND) certificates to the file cf[1..3]:\system-pki\secureNdKey in PKCS #7 DER format.
Platforms
All
secure-nd-import
secure-nd-import
Syntax
secure-nd-import input url-string format input-format [password password] [key-rollover]
Context
[Tree] (admin>certificate secure-nd-import)
Full Context
admin certificate secure-nd-import
Description
This command imports IPv6 Secure Neighbor Discovery (SeND) certificates from a file, and saves them to cf[1..3]:\system-pki\secureNdKey in PKCS #7 DER format.
Parameters
- url-string
-
Specifies the name of an input file up to 99 characters.
- input-format
-
Specifies the input file format.
- password
-
Specifies the password to decrypt the input file if it is an encrypted PKCS#12 file.
Platforms
All
security
security
Syntax
security
Context
[Tree] (config>system security)
Full Context
configure system security
Description
Commands in this context configure a number of central security settings, such as DDoS protection, users, authorization profiles, and certificates. Access to these commands should be restricted to highly trusted users and device administrators.
Platforms
All
security-association
security-association
Syntax
security-association security-entry-id authentication-key hex-string encryption-key hex-string spi spi transform transform-id direction direction
no security-association security-entry-id direction direction
Context
[Tree] (config>service>vprn>if>sap>ipsec-tunnel>manual-keying security-association)
[Tree] (config>service>ies>if>ipsec>ipsec-tunnel>manual-keying security-association)
[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel>manual-keying security-association)
[Tree] (config>router>if>ipsec>ipsec-tunnel>manual-keying security-association)
Full Context
configure service vprn interface sap ipsec-tunnel manual-keying security-association
configure service ies interface ipsec ipsec-tunnel manual-keying security-association
configure service vprn interface ipsec ipsec-tunnel manual-keying security-association
configure router interface ipsec ipsec-tunnel manual-keying security-association
Description
This command configures the information required for manual keying SA creation.
The no form of this command removes the security-association parameters from the configuration.
Parameters
- security-entry-id
-
Specifies the ID of an SA entry.
- authentication-key hex-string
-
Specifies an authentication key.
- encryption-key hex-string
-
Specifies the key used for the encryption algorithm.
- spi spi
-
Specifies the Security Parameter Index (SPI) used to look up the instruction to verify and decrypt the incoming IPsec packets when the direction is inbound. When the direction is outbound, the SPI that will be used in the encoding of the outgoing packets. The remote node can use this SPI to lookup the instruction to verify and decrypt the packet.
- transform transform-id
-
Specifies the transform entry that will be used by this SA entry. This object should be specified for all the entries created which are manual SAs. If the value is dynamic, then this value is irrelevant and will be zero.
- direction
-
Specifies the direction of an IPsec tunnel.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn interface sap ipsec-tunnel manual-keying security-association
VSR
- configure service vprn interface ipsec ipsec-tunnel manual-keying security-association
- configure router interface ipsec ipsec-tunnel manual-keying security-association
- configure service ies interface ipsec ipsec-tunnel manual-keying security-association
security-association
Syntax
security-association spi spi authentication-key authentication-key encryption-key encryption-key [crypto]
no security-association spi spi
Context
[Tree] (config>grp-encryp>encryp-keygrp security-association)
Full Context
configure group-encryption encryption-keygroup security-association
Description
This command is used to create a security association for a specific SPI value in a key group. The command is also used to enter the authentication and encryption key values for the security association, or to delete a security association.
The SPI value used for the security association is a node-wide unique value, meaning that no two security associations in any key group on the node may share the same SPI value.
Keys are entered in cleartext. After configuration, they are never displayed in their original, cleartext form. Keys are displayed in an encrypted form, which is indicated by the system-appended crypto keyword when an info or an admin>save command is run. For security reasons, keys encrypted on one node are not usable on other nodes (that is, keys are not exchangeable between nodes).
The no form of the command removes the security association and related key values from the list of security associations for the key group. If the no form of the command is attempted using the same SPI value that is configured for active-outbound-sa, then a warning is issued and the command is blocked. If the no form of the command is attempted on the last SPI in the key group and the key group is configured on a service, then the command is blocked.
Parameters
- spi
-
Specifies the SPI ID of the SPI being referenced for the security association.
- authentication-key
-
Specifies the authentication key for the SPI, in hexadecimal format. The number of characters in the hexadecimal string must be 64 or 128, depending on whether the authentication algorithm is set to sha256 or sha512, respectively.
- encryption-key
-
Specifies the encryption key for the SPI, in hexadecimal format. The number of characters in the hexadecimal string must be 32 or 64, depending on whether the encryption algorithm is set to aes128 or aes256, respectively.
- crypto
-
Displays the keys showing on the CLI info display in an encrypted form.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
security-param-index
security-param-index
Syntax
security-param-index security-parameter-index
no security-param-index
Context
[Tree] (debug>oam>build-packet>packet>field-override>header>ipsec-auth security-param-index)
[Tree] (config>test-oam>build-packet>header>ipsec-auth security-param-index)
Full Context
debug oam build-packet packet field-override header ipsec-auth security-param-index
configure test-oam build-packet header ipsec-auth security-param-index
Description
This command defines the security index to be used in the IPsec header. This same context can be used for IPv4 and IPv6 packets.
The no form of this command removes the security parameter index value.
Default
security-param-index 1
Parameters
- security-parameter-index
-
Specifies the IPsec security parameter index to be used in the IPsec header.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
security-parameter
security-parameter
Syntax
security-parameter sec
no security-parameter
Context
[Tree] (config>service>ies>if>ipv6>secure-nd security-parameter)
Full Context
configure service ies interface ipv6 secure-nd security-parameter
Description
This command configures the security parameter used in the generation of a Cryptographically Generated Address (CGA).
Parameters
- sec
-
Specifies the security parameter.
Platforms
All
security-parameter
Syntax
security-parameter sec
[no] security-parameter
Context
[Tree] (config>service>vprn>if>send security-parameter)
Full Context
configure service vprn interface ipv6 secure-nd security-parameter
Description
This command configures the security parameter used in the generation of a Cryptographically Generated Address (CGA).
Parameters
- sec
-
Specifies the security parameter.
Platforms
All
security-parameter
Syntax
security-parameter sec
no security-parameter
Context
[Tree] (config>router>if>ipv6>secure-nd security-parameter)
Full Context
configure router interface ipv6 secure-nd security-parameter
Description
This command configures the security parameter used in the generation of a Cryptographically Generated Address (CGA).
Parameters
- sec
-
Specifies the security parameter.
Platforms
All
security-policy
security-policy
Syntax
security-policy security-policy-id [create]
no security-policy security-policy-id
Context
[Tree] (config>router>ipsec security-policy)
[Tree] (config>service>vprn>ipsec security-policy)
Full Context
configure router ipsec security-policy
configure service vprn ipsec security-policy
Description
This command configures a security policy to use for an IPsec tunnel.
The no form of this command removes the security policy ID from the configuration.
Parameters
- security-policy-id
-
specifies a value to be assigned to a security policy.
- create
-
Keyword used to create the security policy instance. The create keyword requirement can be enabled or disabled in the environment>create context.
Platforms
VSR
- configure router ipsec security-policy
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn ipsec security-policy
security-policy
Syntax
security-policy security-policy-id [strict-match]
no security-policy
Context
[Tree] (config>router>if>ipsec>ipsec-tunnel security-policy)
[Tree] (config>service>vprn>if>sap>ipsec-tunnel security-policy)
[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel security-policy)
[Tree] (config>service>ies>if>ipsec>ipsec-tunnel security-policy)
Full Context
configure router interface ipsec ipsec-tunnel security-policy
configure service vprn interface sap ipsec-tunnel security-policy
configure service vprn interface ipsec ipsec-tunnel security-policy
configure service ies interface ipsec ipsec-tunnel security-policy
Description
This command configures an IPsec security policy. The policy may then be associated with static IPsec tunnels defined in the same routing instance.
With strict-match parameter enabled, when a CREATE_CHILD exchange request is received for a static IPsec tunnel, and this request is not a re-key request, then ISA matches the received TSi and TSr with the configured security policy. This can be a match only when a received TS (in TSi or TSr) address range matches exactly with the subnet in a security policy entry.
If there is no match, then the setup fails, and TS_UNACCEPTABLE is sent.
If there is a match, but there is an existing CHILD_SA for the matched security policy, then the setup fails, and NO_PROPOSAL_CHOSEN.
If there is a match, and there is not CHILD_SA for the matched entry, then the subnet is sent in the matched security-policy entry as TSi and TSr, and the CHILD_SA is created.
Default
no security-policy
Parameters
- security-policy-id
-
Specifies the IPsec security policy entry that the tunnel will use.
- strict-match
-
Enables strict match of security-policy entry.
Platforms
VSR
- configure service vprn interface ipsec ipsec-tunnel security-policy
- configure service ies interface ipsec ipsec-tunnel security-policy
- configure router interface ipsec ipsec-tunnel security-policy
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn interface sap ipsec-tunnel security-policy
security-termination-policy
security-termination-policy
Syntax
security-termination-policy policy
no security-termination-policy
Context
[Tree] (config>anysec>tnl-enc>enc-grp security-termination-policy)
Full Context
configure anysec tunnel-encryption encryption-group security-termination-policy
Description
This command configures the local security termination policy parameters.
The no form of this command removes the security termination policy.
Default
no security-termination-policy
Parameters
- policy
-
Specifies the local security termination policy name, up to 32 characters.
- create
-
Keyword used to create the security termination policy.
Platforms
7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se
security-termination-policy
Syntax
security-termination-policy policy [create]
no security-termination-policy policy
Context
[Tree] (config>anysec>tnl-enc security-termination-policy)
Full Context
configure anysec tunnel-encryption security-termination-policy
Description
Commands in this context configure the security termination policy that identifies the set of attributes for locally terminating tunnels for this encryption group.
The no form of this command removes the security termination policy.
Default
no security-termination-policy
Parameters
- policy
-
Specifies the local security termination policy name, up to 32 characters.
Platforms
7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se
seen-ip-radius-acct-policy
seen-ip-radius-acct-policy
Syntax
seen-ip-radius-acct-policy rad-acct-plcy-name
no seen-ip-radius-acct-policy
Context
[Tree] (config>app-assure>group>transit-ip-policy>radius seen-ip-radius-acct-policy)
Full Context
configure application-assurance group transit-ip-policy radius seen-ip-radius-acct-policy
Description
This command refers to a RADIUS accounting-policy to enable seen-IP notification.
The no form of this command removes the policy.
Default
no seen-ip-radius-acct-policy
Parameters
- rad-acct-plcy-name
-
Specifies the RADIUS accounting policy name, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
segment
segment
Syntax
segment [segment-id] [create]
no segment segment-id
Context
[Tree] (conf>router>segment-routing>sr-policies>policy>seg-list segment)
Full Context
configure router segment-routing sr-policies static-policy segment-list segment
Description
This command creates the context to configure a segment inside a segment-list of a statically-defined segment routing policy candidate path.
A segment list of a statically-defined SR policy candidate path of type sr-mpls can only accept a segment of type mpls-label.
A segment list of a statically-defined SR policy candidate path of type srv6 can only accept a segment of type srv6-sid. However, you can mix SRv6 segments derived from both classic SRv6 and micro-segment SRv6 locators.
The no form of this command deletes the segment context.
Default
no segment
Parameters
- segment-id
-
Specifies the segment ID number.
- create
-
Keyword used to create the list.
Platforms
All
segment-list
segment-list
Syntax
segment-list segment-list
no segment-list
Context
[Tree] (config>saa>test>type-multi-line>lsp-trace>sr-policy segment-list)
[Tree] (config>saa>test>type-multi-line>lsp-ping>sr-policy segment-list)
Full Context
configure saa test type-multi-line lsp-trace sr-policy segment-list
configure saa test type-multi-line lsp-ping sr-policy segment-list
Description
This command configures the segment list ID.
The no form of this command removes the configuration.
Parameters
- segment-list
-
Specifies the segment list number.
Platforms
All
segment-list
Syntax
segment-list [1..32] [create]
no segment-list list
Context
[Tree] (conf>router>segment-routing>sr-policies>policy segment-list)
Full Context
configure router segment-routing sr-policies static-policy segment-list
Description
This command creates the context to configure a segment list for the statically-defined segment routing policy candidate path.
Up to 32 segment lists are supported per policy.
The no form of this command deletes the segment list.
Parameters
- create
-
Keyword used to create the segment list.
Platforms
All
segment-routing
segment-routing
Syntax
segment-routing
Context
[Tree] (config>router>bgp segment-routing)
Full Context
configure router bgp segment-routing
Description
Commands in this context configure options related to BGP segment routing (prefix SID support).
Platforms
All
segment-routing
Syntax
segment-routing
no segment-routing
Context
[Tree] (config>router>isis segment-routing)
Full Context
configure router isis segment-routing
Description
Commands in this context configure segment routing parameters within a given IGP instance.
Segment routing adds to IS-IS and OSPF routing protocols the ability to perform shortest path routing and source routing using the concept of abstract segment. A segment can represent a local prefix of a node, a specific adjacency of the node (interface or next-hop), a service context, or a specific explicit path over the network. For each segment, the IGP advertises an identifier referred to as Segment ID (SID).
When segment routing is used together with MPLS data plane, the SID is a standard MPLS label. A router forwarding a packet using segment routing will thus push one or more MPLS labels.
Segment routing using MPLS labels can be used in both shortest path routing applications and in traffic engineering applications. This feature implements the shortest path forwarding application.
After segment routing is successfully enabled in the IS-IS or OSPF instance, the router will perform the following operations:
-
Advertise the Segment Routing Capability Sub-TLV to routers in all areas/levels of this IGP instance. However, only neighbors with which it established an adjacency interprets the SID or label range information and use it for calculating the label to swap to or push for a given resolved prefix SID.
-
Advertise the assigned index for each configured node SID in the new prefix SID sub-TLV with the N-flag (node-SID flag) set. Then the segment routing module programs the incoming label map (ILM) with a pop operation for each local node SID in the data path.
-
Assign and advertise automatically an adjacency SID label for each formed adjacency over a network IP interface in the new adjacency SID sub-TLV. The segment routing module programs the incoming label map (ILM) with a pop operation, in effect with a swap to an implicit null label operation, for each advertised adjacency SID.
-
Resolve received prefixes and if a prefix SID sub-TLV exists, the Segment Routing module programs the ILM with a swap operation and also an LTN with a push operation both pointing to the primary/LFA NHLFE. An SR tunnel is also added to the TTM.
When the user enables segment routing in a given IGP instance, the main SPF and LFA SPF are computed normally and the primary next-hop and LFA backup next-hop for a received prefix are added to RTM without the label information advertised in the prefix SID sub-TLV.
Platforms
All
segment-routing
Syntax
[no] segment-routing
Context
[Tree] (config>router>ospf3 segment-routing)
[Tree] (config>router>ospf segment-routing)
Full Context
configure router ospf3 segment-routing
configure router ospf segment-routing
Description
Commands in this context configure segment routing parameters within an IGP instance.
Segment routing adds to IS-IS, OSPF, or OSPF3 routing protocols the ability to perform shortest path routing and source routing using the concept of abstract segment. A segment can represent a local prefix of a node, a specific adjacency of the node (interface or next hop), a service context, or a specific explicit path over the network. For each segment, the IGP advertises an identifier referred to as a segment ID (SID).
When segment routing is used together with the MPLS data plane, the SID is a standard MPLS label. A router forwarding a packet using segment routing will thus push one or more MPLS labels.
Segment routing using MPLS labels can be used in both shortest path routing applications and traffic engineering applications. This feature implements the shortest path forwarding application.
After segment routing is successfully enabled in the IS-IS, OSPF, or OSPF3 instance, the router will perform the following operations:
-
Advertise the Segment Routing Capability sub-TLV to routers in all areas or levels of the IGP instance. However, only neighbors with which the IGP instance established an adjacency will interpret the SID and label range information and use it for calculating the label to swap to or push for a particular resolved prefix SID.
-
Advertise the assigned index for each configured node SID in the new prefix SID sub-TLV with the N-flag (node SID flag) set. The segment routing module then programs the incoming label map (ILM) with a pop operation for each local node SID in the data path.
-
Automatically assign and advertise an adjacency SID label for each formed adjacency over a network IP interface in the new adjacency SID sub-TLV. The segment routing module programs the incoming label map (ILM) with a pop operation, in effect with a swap to an implicit null label operation, for each advertised adjacency SID.
-
Resolve received prefixes, and if a prefix SID sub-TLV exists, the segment routing module programs the ILM with a swap operation and programs an LSP ID to NHLFE (LTN) with a push operation, both pointing to the primary/LFA NHLFE. An SR tunnel is also added to the TTM.
When the user enables segment routing in an IGP instance, the main SPF and LFA SPF are computed normally and the primary next hop and LFA backup next hop for a received prefix are added to the RTM without the label information advertised in the prefix SID sub-TLV.
Platforms
All
segment-routing
Syntax
segment-routing
Context
[Tree] (config>router segment-routing)
Full Context
configure router segment-routing
Description
This command creates a context to configure protocol-independent parameters relating to segment routing.
Platforms
All
segment-routing-mpls
segment-routing-mpls
Syntax
segment-routing-mpls
Context
[Tree] (config>router>p2mp-sr-tree>replication-segment segment-routing-mpls)
Full Context
configure router p2mp-sr-tree replication-segment segment-routing-mpls
Description
Commands in this context configure the SR-MPLS parameters of the P2MP tree.
Platforms
All
segment-routing-v6
segment-routing-v6
Syntax
[no] segment-routing-v6
Context
[Tree] (conf>router>segment-routing>sr-policies>policy segment-routing-v6)
Full Context
configure router segment-routing sr-policies static-policy segment-routing-v6
Description
Commands in this context configure parameters of an SRv6 policy.
The no form of this command removes the configuration.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
segment-routing-v6
Syntax
[no] segment-routing-v6
Context
[Tree] (config>router>segment-routing segment-routing-v6)
Full Context
configure router segment-routing segment-routing-v6
Description
Commands in this context configure global SRv6 parameters.
The no form of this command deletes the context.
Default
no segment-routing-v6
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
segment-routing-v6
Syntax
[no] segment-routing-v6
Context
[Tree] (config>router>isis segment-routing-v6)
Full Context
configure router isis segment-routing-v6
Description
Commands in this context configure SRv6 parameters specific to this IS-IS instance.
This context has its own shutdown command.The config>router>segment-routing>shutdown command only applies to SR-MPLS and does not impact this context.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
segment-routing-v6
Syntax
[no] segment-routing-v6 [bgp bgp-instance]
Context
[Tree] (config>service>vprn>bgp-ipvpn segment-routing-v6)
[Tree] (config>service>vprn>bgp-evpn segment-routing-v6)
Full Context
configure service vprn bgp-ipvpn segment-routing-v6
configure service vprn bgp-evpn segment-routing-v6
Description
Commands in this context configure SRv6 parameters specific to this BGP-IPVPN or BGP-EVPN instance.
The no form of this command deletes the context.
Default
no segment-routing-v6
Parameters
- bgp bgp-instance
-
Specifies the BGP instance. If this parameter is not specified, the value of "1" is used by default.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
segment-routing-v6
Syntax
[no] segment-routing-v6
Context
[Tree] (config>router>bgp segment-routing-v6)
Full Context
configure router bgp segment-routing-v6
Description
Commands in this context configure SRv6 parameters specific to this BGP instance.
The no form of this command deletes the context.
Default
no segment-routing-v6
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
segment-routing-v6
Syntax
[no] segment-routing-v6
Context
[Tree] (config>router>bgp>group>neighbor segment-routing-v6)
[Tree] (config>router>bgp>group segment-routing-v6)
Full Context
configure router bgp group neighbor segment-routing-v6
configure router bgp group segment-routing-v6
Description
Commands in this context configure SRv6 parameters.
The no form of this command deletes the context.
When configuring this command at the neighbor level, by default, the neighbor inherits route advertisement options from its BGP peer group. However, after this command is configured, there is no inheritance of any route advertisement options from the group level.
Default
no segment-routing-v6
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
segment-routing-v6
Syntax
segment-routing-v6 instance [create]
no segment-routing-v6 instance
Context
[Tree] (config>service>vprn segment-routing-v6)
[Tree] (config>service>vpls segment-routing-v6)
Full Context
configure service vprn segment-routing-v6
configure service vpls segment-routing-v6
Description
Commands in this context configure the SRv6 instance that is used in the service.
The no form of this command removes the configured SRv6 instance.
Parameters
- instance
-
Specifies the SRv6 instance number enabled in the service.
- create
-
Keyword used to create the SRv6 instance. The create keyword requirement can be enabled or disabled in the environment>create context.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
segment-routing-v6
Syntax
segment-routing-v6 instance [create]
no segment-routing-v6 instance
Context
[Tree] (config>service>epipe segment-routing-v6)
Full Context
configure service epipe segment-routing-v6
Description
Commands in this context configure the SRv6 instance that is used in the service.
The no form of this command removes the configured SRv6 instance.
Parameters
- instance
-
Specifies the SRv6 instance number enabled in the service.
- create
-
Keyword used to create the SRv6 instance. The create keyword requirement can be enabled or disabled in the environment>create context.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
segment-routing-v6
Syntax
segment-routing-v6 [bgp bgp-instance][srv6-instance srv6-instance][default-locator name] [create]
no segment-routing-v6 [bgp bgp-instance]
Context
[Tree] (config>service>vpls>bgp-evpn segment-routing-v6)
[Tree] (config>service>epipe>bgp-evpn segment-routing-v6)
Full Context
configure service vpls bgp-evpn segment-routing-v6
configure service epipe bgp-evpn segment-routing-v6
Description
Commands in this context configure the SRv6 instance that is used in the service.
The no form of this command removes the configured SRv6 instance.
Parameters
- bgp-instance
-
Specifies the SRv6 instance that is configured in the service and associated to an EVPN control plane.
- srv6-instance
-
Specifies the SRv6 instance ID that exists in the service and is associated to a BGP EVPN control plane.
- default-locator
-
Keyword that refers to a regular or micro-segment locator that exists in the service SRv6 instance and is used as the default locator for the service.
- name
-
Specifies a locator that exists in the service SRv6 instance and is used as the default locator for the service, up to 64 characters.
- create
-
Keyword used to create the SRv6 instance. The create keyword requirement can be enabled or disabled in the environment>create context.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
sel-mcast-advertisement
sel-mcast-advertisement
Syntax
[no] sel-mcast-advertisement
Context
[Tree] (config>service>vpls>bgp-evpn sel-mcast-advertisement)
Full Context
configure service vpls bgp-evpn sel-mcast-advertisement
Description
This command enables the advertisement of BGP EVPN Selective Multicast Ethernet Tag (SMET) routes.
The no form of this command disables the advertisement of BGP EVPN SMET routes.
Default
no sel-mcast-advertisement
Platforms
All
selection-criteria
selection-criteria
Syntax
selection-criteria [best-port | highest-count | highest-weight] [slave-to-partner] [ subgroup-hold-time hold-time]
no selection-criteria
Context
[Tree] (config>lag selection-criteria)
Full Context
configure lag selection-criteria
Description
This command specifies which selection criteria should be used to select the active sub-group. If there is a tie for highest-count or highest-weight, the LAG will prefer the port with the lowest priority. If that does not break the tie, the currently active subgroup will stay active (that is, non-revertive behavior).
The no form of this command reverts to the default value.
Default
selection-criteria highest-count
Parameters
- highest-count
-
Selects a sub-group with the highest number of eligible members as an active sub-group (not applicable to "power-off” mode of operations).
- highest-weight
-
Selects a sub-group with the highest aggregate weight as an active subgroup (not applicable to "power-off” mode of operations). Aggregate weight is calculated as the sum of (65535 - port priority) all ports within a sub-group.
- best-port
-
Selects a sub-group containing the port with highest priority port as an active subgroup. In case of equal port priorities, the sub-group containing the port with the lowest port-id is chosen.
- slave-to-partner
-
The slave-to-partner keyword specifies that it, together with the selection criteria, should be used to select the active sub-group. An eligible member is a LAG-member link which can potentially become active. This means it is operationally up (not disabled) for use by the remote side. The slave-to-partner keyword can be used to control whether or not this latter condition is taken into account.
- hold-time
-
Applicable with LACP enabled. Specifies the optional delay timer for switching to a newly selected active sub-group from the existing active sub-group. The timer delay applies only if the existing sub-group remains operationally up.
Platforms
All
selective
selective
Syntax
selective
Context
[Tree] (config>service>vprn>mvpn>provider-tunnel selective)
[Tree] (config>service>vpls>provider-tunnel selective)
Full Context
configure service vprn mvpn provider-tunnel selective
configure service vpls provider-tunnel selective
Description
Commands in this context specify selective provider tunnel parameters.
Platforms
All
selective
Syntax
selective
Context
[Tree] (config>router>gtm>provider-tunnel selective)
Full Context
configure router gtm provider-tunnel selective
Description
Commands in this context configure selective provider tunnel parameters.
Platforms
All
selective-label-ip
selective-label-ip
Syntax
selective-label-ip {no-install | route-table-install-only}
no selective-label-ip
Context
[Tree] (config>router>bgp selective-label-ip)
Full Context
configure router bgp selective-label-ip
Description
This command configures selective-label-ip for the BGP level.
The no-install option conserves labeled route table space on BGP-LU next-hop-self route reflectors. This option causes BGP-LU routes to be reflected downstream via the ABR with the next-hop-self update. BGP-LU routes are not installed to local MPLS tables or routing tables for use by local services.
The default no form of this command installs BGP-LU routes to the datapath for local services and makes them available to the RTM for IP next-hop selection.
Default
no selective-label-ip
Parameters
- no-install
- Specifies that BGP-LU routes are not installed to local MPLS tables or routing tables.
- route-table-install-only
- Specifies the installation of BGP-LU routes to the RTM. BGP-LU routes are not installed to local MPLS tables for use by local services.
Platforms
All
selective-label-ip-prioritization
selective-label-ip-prioritization
Syntax
[no] selective-label-ip-prioritization
Context
[Tree] (config>router>bgp selective-label-ip-prioritization)
Full Context
configure router bgp selective-label-ip-prioritization
Description
This command enables selective-label IP prioritization for BGP labeled IPv4 and IPv6 routes.
When this command is configured, every received labeled IPv4 and IPv6 route that is potentially usable by a local service is automatically prioritized for fast control plane reconvergence. When the reachability of a BGP next-hop changes, these labeled IPv4 and IPv6 routes are updated into the route table first, along with other routes manually tagged as high priority by import policies.
A /32 or /128 labeled unicast route (and associated BGP-LU tunnel) is determined to be potentially usable by a local service if one of the following conditions is met:
-
the route matches the far-end address of a user-provisioned SDP of an Layer 2 service and the SDP is configured to use BGP tunnels as transport
-
the route matches the BGP next-hop address of a BGP-EVPN or IP VPN route, and this VPN route is either imported into a local service or readvertised by the router acting as a next-hop-self route-reflector or a model-B ASBR
The no form of this command disables selective-label IP prioritization for BGP.
Default
no selective-label-ip-prioritization
Platforms
All
selective-label-ipv4-install
selective-label-ipv4-install
Syntax
[no] selective-label-ipv4-install
Context
[Tree] (config>router>bgp>group>neighbor selective-label-ipv4-install)
[Tree] (config>router>bgp>group selective-label-ipv4-install)
[Tree] (config>router>bgp selective-label-ipv4-install)
Full Context
configure router bgp group neighbor selective-label-ipv4-install
configure router bgp group selective-label-ipv4-install
configure router bgp selective-label-ipv4-install
Description
This command enables selective download for BGP label-ipv4 routes.
When this command is configured so that it applies to a BGP session, label-ipv4 routes received on this session are marked as invalid if they are not needed for any eligible service. A /32 label-ipv4 route is determined to be required if one of the following applies:
-
It matches the far-end address of a manually configured or auto-created SDP Layer 2 VLL or VPLS service and the SDP is configured to use BGP tunnels as transport.
-
It matches the IPv4 BGP next hop of a BGP-EVPN route and this EVPN route is either imported into a VPLS service or re-advertised by the router acting as a next-hop-self route-reflector or a model-B ASBR.
-
It matches the IPv4 BGP next hop of a VPN-IPv4 route and this VPN-IP route is either imported into a VPRN service or re-advertised by the router acting as a next-hop-self route-reflector or a model-B ASBR.
-
It matches the IPv4 address in the IPv4-mapped IPv6 address of a VPN IPv6 route and this VPN-IP route is either imported into a VPRN service or re-advertised by the router acting as a next-hop-self route-reflector or a model-B ASBR.
The no form of this command at the top (config>router>bgp) level disables the selective installation functionality. The no form of this command at the group or neighbor level causes the setting to be inherited from a higher level configuration.
Default
no selective-label-ipv4-install
Platforms
All
selective-learned-fdb
selective-learned-fdb
Syntax
[no] selective-learned-fdb
Context
[Tree] (config>service>vpls selective-learned-fdb)
Full Context
configure service vpls selective-learned-fdb
Description
This command determines which line cards FDB entries are allocated on for MAC addresses in the VPLS service in which the command is configured.
By default, FDB entries for MAC addresses in VPLS services are allocated on all line cards in the system. Enabling selective-learned-fdb causes FDB entries to be allocated only on the line cards on which the service has a configured object, which includes all line cards:
-
on which a SAP is configured
-
which have ports configured in a LAG SAP
-
which have ports configured in an Ethernet tunnel SAP
-
which have ports configured on a network interface (which also may be on a LAG) when the service has a mesh or spoke-SDP, VXLAN or EVPN-MPLS configured
Only MAC addresses with a type "L” or "Evpn” in the show output displaying the FDB can be allocated selectively, unless a MAC address configured as a conditional static MAC address is learned dynamically on an object other than its monitored object; this can be displayed with type "L” or "Evpn” but is allocated as global because of the conditional static MAC configuration.
The no form of this command returns the FDB MAC address entry allocation mode to its default where FDB entries for MAC addresses are allocated on all line cards in the system.
Default
no selective-learned-fdb
Platforms
All
send
send
Syntax
send {broadcast | multicast | none | version-1 | both}
no send
Context
[Tree] (config>service>vprn>ripng>group>neighbor send)
[Tree] (config>service>vprn>ripng send)
[Tree] (config>service>vprn>rip>group>neighbor send)
[Tree] (config>service>vprn>rip send)
[Tree] (config>service>vprn>ripng>group send)
[Tree] (config>service>vprn>rip>group send)
Full Context
configure service vprn ripng group neighbor send
configure service vprn ripng send
configure service vprn rip group neighbor send
configure service vprn rip send
configure service vprn ripng group send
configure service vprn rip group send
Description
This command configures the type of RIP messages sent to RIP neighbors. This control can be issued at the global, group or interface level. The default behavior sends RIPv2 messages with the multicast (224.0.0.9) destination address.
If version-1 is specified, the router only listens for and accepts packets sent to the broadcast address.
The no form of this command resets the type of messages sent back to the default value.
Default
no send
Parameters
- broadcast
-
Send RIPv2 formatted messages to the broadcast address.
- multicast
-
Send RIPv2 formatted messages to the multicast address.
- none
-
Do not send any RIP messages (i.e. silent listener).
- version-1
-
Send RIPv1 formatted messages to the broadcast address.
- both
-
Send both RIP v1 & RIP v2 updates to the broadcast address.
Platforms
All
send
Syntax
send
Context
[Tree] (config>system>security>keychain>direction>uni send)
Full Context
configure system security keychain direction uni send
Description
This command specifies the send nodal context to sign TCP segments that are being sent by the router to another device.
Platforms
All
send
Syntax
send option-number
no send
Context
[Tree] (config>system>security>keychain>tcp-option-number send)
Full Context
configure system security keychain tcp-option-number send
Description
This command configures the TCP option number accepted in TCP packets sent.
Default
send 254
Parameters
- option-number
-
Specifies an enumerated integer that indicates the TCP option number to be used in the TCP header.
Platforms
All
send
Syntax
send {broadcast | multicast | none | version-1}
no send
Context
[Tree] (config>router>rip>group>neighbor send)
[Tree] (config>router>rip send)
[Tree] (config>router>rip>group send)
Full Context
configure router rip group neighbor send
configure router rip send
configure router rip group send
Description
This command specifies the type of RIP messages sent to RIP neighbors.
If version-1 is specified, the router need only listen for and accept packets sent to the broadcast address.
This control can be issued at the global, group or interface level.
The no form of the command reverts to the default value.
Default
send version-1
Parameters
- broadcast
-
Specifies send RIPv2 formatted messages to the broadcast address.
- multicast
-
Specifies send RIPv2 formatted messages to the multicast address.
- none
-
Specifies not to send any RIP messages (i.e. silent listener).
- version-1
-
Specifies send RIPv1 formatted messages to the broadcast address.
Platforms
All
send
Syntax
send {none | ripng | unicast}
no send
Context
[Tree] (config>router>ripng>group send)
[Tree] (config>router>ripng>group>neighbor send)
[Tree] (config>router>ripng send)
Full Context
configure router ripng group send
configure router ripng group neighbor send
configure router ripng send
Description
This command specifies if RIPng are sent to RIP neighbors or not and what type of IPv6 address is to be used to deliver the messages.
This control can be issued at the global, group or interface level.
The no form of the command reverts to the default value.
Default
send ripng
Parameters
- ripng
-
Specifies RIPng messages to be sent to the standard multicast address (FF02::9).
- none
-
Specifies not to send any RIPng messages (i.e. silent listener).
- unicast
-
Specifies to send RIPng updates as unicast messages to the defined unicast address configured through the unicast-address command. This option is only allowed within the neighbor context.
Platforms
All
send-accounting-response
send-accounting-response
Syntax
[no] send-accounting-response
Context
[Tree] (config>service>vprn>radius-proxy>server send-accounting-response)
[Tree] (config>router>radius-proxy>server send-accounting-response)
Full Context
configure service vprn radius-proxy server send-accounting-response
configure router radius-proxy server send-accounting-response
Description
This command results in the system to always generate RADIUS accounting-response to acknowledge RADIUS accounting-request received from the RADIUS client.
The no form of this command disables the command.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
send-acct-stop-on-fail
send-acct-stop-on-fail
Syntax
send-acct-stop-on-fail {[on-request-failure] [on-reject] [on-accept-failure]}
no send-acct-stop-on-fail
Context
[Tree] (config>subscr-mgmt>auth-policy send-acct-stop-on-fail)
Full Context
configure subscriber-mgmt authentication-policy send-acct-stop-on-fail
Description
This command activates the reporting of RADIUS authentication failures of a PPPoE session to a RADIUS accounting server with an Accounting Stop message.
Three failure categories can be enabled separately:
-
on-request-failure: All failure conditions between the sending of an Access-Request and the reception of an Access-Accept or Access-Reject.
-
on-reject:
-
on-accept-failure: All failure conditions that appear after receiving an Access-Accept and before successful instantiation of the host or session.
The RADIUS accounting policy to be used for sending the Accounting Stop messages must be obtained prior to RADIUS authentication via local user database pre-authentication.
The no form of this command reverts to the default.
Parameters
- on-request-failure
-
Specifies that an accounting stop message is sent when a RADIUS Access-Request message could not be sent (for example, there is no server configured, or timeout).
- on-reject
-
Specifies that an accounting stop message is sent when an Access-Reject is received.
- on-accept-failure
-
Specifies that an accounting stop message is sent a failure occurred after the reception of a RADIUS Access-Accept message (such as a duplicate IP address).
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
send-bvpls-evpn-flush
send-bvpls-evpn-flush
Syntax
[no] send-bvpls-evpn-flush
Context
[Tree] (config>service>vpls>pbb send-bvpls-evpn-flush)
Full Context
configure service vpls pbb send-bvpls-evpn-flush
Description
This command triggers ISID-based C-MAC flush signaling in the PBB-EVPN. When the command is enabled in an I-VPLS service, a B-MAC/ISID route is sent for the I-VPLS ISID.
Default
no send-bvpls-evpn-flush
Platforms
All
send-bvpls-flush
send-bvpls-flush
Syntax
send-bvpls-flush {[all-but-mine] [all-from-me]}
no send-bvpls-flush
Context
[Tree] (config>service>vpls>pbb send-bvpls-flush)
Full Context
configure service vpls pbb send-bvpls-flush
Description
This command enables generation of LDP MAC withdrawal "flush-all-from-me” in the B-VPLS domain when the following triggers occur in the related IVPLS:
-
MC-LAG failure
-
Failure of a local SAP
-
Failure of a local pseudowire/SDP binding
A failure means transition of link SAP/pseudowire to either down or standby status.
This command does not require send-flush-on-failure in B-VPLS to be enabled on an IVPLS trigger to send an MAC flush into the BVPLS.
Default
no send-bvpls-flush
Parameters
- all-but-mine
-
Specifies to send an LDP flush all-but-mine and also sent into the B-VPLS. Both parameters can be set together.
- all-from-me
-
Specifies to send an LDP flush-all-from and when STP initiates a flush, it is sent into the B-VPLS using LDP MAC flush all-from-me. Both parameters can be set together.
Platforms
All
send-chain
send-chain
Syntax
[no] send-chain
Context
[Tree] (config>ipsec>cert-profile>entry send-chain)
Full Context
configure ipsec cert-profile entry send-chain
Description
Commands in this context configure the send-chain in the cert-profile entry.
The configuration of this command is optional, by default system will only send the certificate specified by cert command in the selected entry to the peer. This command allows system to send additional CA certificates to the peer. These additional CA certificates must be in the certificate chain of the certificate specified by the cert command in the same entry.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
send-chain
Syntax
[no] send-chain
Context
[Tree] (config>system>security>tls>cert-profile>entry send-chain)
Full Context
configure system security tls cert-profile entry send-chain
Description
This command enables the sending of certificate authority (CA) certificates, and enters the context to configure send-chain information.
By default, the system only sends the TLS server certificate or TLS client certificate specified by the cert command. If CA certificates are to be sent using send-chain, they must be in the chain of certificates specified by the config>system>security>pki>ca-profile command. The specification of the send-chain is not necessary for a working TLS profile if the TLS peer has the CA certificate used to sign the server or client certificate in its own trust anchor.
For example, given a TLS client running on SR OS, the ROOT CA certificate resides on the TLS server, but the subsequent SUB-CA certificate needed to complete the chain resides within SR OS. The send-chain command allows these SUB-CA certificates to be sent from SR OS to the peer to be authenticated using the ROOT CA certificate that resides on the peer.
The no form of the command disables the send-chain.
Default
no send-chain
Platforms
All
send-count
send-count
Syntax
send-count send-count
no send-count
Context
[Tree] (config>saa>test>type-multi-line>lsp-ping send-count)
[Tree] (config>saa>test>type-multi-line>lsp-ping>sr-policy send-count)
Full Context
configure saa test type-multi-line lsp-ping send-count
configure saa test type-multi-line lsp-ping sr-policy send-count
Description
This command configures the number of messages to send. The send-count value is used to override the default number of message requests sent. Each message request must either time out or receive a reply before the next message request is sent. The message interval value must be expired before the next message request is sent.
The no form of this command reverts to the default value.
Default
send-count 1
Parameters
- send-count
-
Specifies the send count in number of packets.
Platforms
All
send-default
send-default
Syntax
send-default [ipv4] [ ipv6] [export-policy export-policy]
no send-default
Context
[Tree] (config>router>bgp send-default)
[Tree] (config>router>bgp>group send-default)
[Tree] (config>router>bgp>group>neighbor send-default)
Full Context
configure router bgp send-default
configure router bgp group send-default
configure router bgp group neighbor send-default
Description
This command enables the advertisement of a default route. When this command is configured to apply to an IBGP or EBGP session, the default route for IPv4 or IPv6 is automatically added to the Adj_RIB-OUT of that peer. The advertised default routes are unrelated to any default routes installed in the FIB of the local router.
If a BGP export policy allows an active default route in the FIB of the local router to be advertised and conflict with this command, the artificially generated default route overrides the advertisement of the installed default route.
The artificially generated default route is not matched by BGP export policies. To modify its attributes or decide whether it should be advertised (based on a conditional expression), a route policy must be created and referenced by the export-policy parameter. Only conditional entries with an action and no from or to criteria are parsed. If there are no such entries, only the default action is applied.
The no form of this command restores the default behavior. At the group and neighbor levels, the default behavior is to inherit the configuration from a higher level. At the instance level, the default behavior is to neither generate nor inject a default route.
Default
no send-default
Parameters
- ipv4
-
Generates and advertises an IPv4 default route (0/0).
- ipv6
-
Generates and advertises an IPv6 default route (::/0).
- export-policy
-
Specifies the name of a route policy, up to 64 characters. Only the route modifications in the matching conditional-expression entry or the default action are applied. These modifications change the attributes of the advertised default routes.
Platforms
All
send-fib-population-packets
send-fib-population-packets
Syntax
send-fib-population-packets mode
no send-fib-population-packets
Context
[Tree] (config>service>ies>sub-if>grp-if>srrp send-fib-population-packets)
[Tree] (config>service>vprn>sub-if>grp-if>srrp send-fib-population-packets)
Full Context
configure service ies subscriber-interface group-interface srrp send-fib-population-packets
configure service vprn subscriber-interface group-interface srrp send-fib-population-packets
Description
This command configures the mode used to send Fib population packets. When SRRP becomes master it generates gratuitous ARPs (GARPs) used by the Layer 2 access network to populate the correct SRRP gateway.
The no form of this command disables sending FDB population packets.
Default
send-fib-population-packets all
Parameters
- mode
-
Specifies on which VLANs the gratuitous ARPs are sent.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
send-flush-on-bvpls-failure
send-flush-on-bvpls-failure
Syntax
[no] send-flush-on-bvpls-failure
Context
[Tree] (config>service>vpls>pbb send-flush-on-bvpls-failure)
Full Context
configure service vpls pbb send-flush-on-bvpls-failure
Description
This command enables the generation in the local I-VPLS of an LDP MAC flush-all-from-me following a failure of SAP/the whole endpoint/spoke-SDP in the related B-VPLS. The failure of mesh-SDP in B-VPLS does not generate the I-VPLS MAC flush.
The no form of this command disables the generation of LDP MAC flush in I-VPLS on failure of SAP/endpoint/spoke-SDP in the related B-VPLS.
Default
no send-flush-on-bvpls-failure
Platforms
All
send-flush-on-failure
send-flush-on-failure
Syntax
[no] send-flush-on-failure
Context
[Tree] (config>service>vpls send-flush-on-failure)
Full Context
configure service vpls send-flush-on-failure
Description
This command enables sending out flush-all-from-me messages to all LDP peers included in affected VPLS, in the event of physical port failures or "operationally down” events of individual SAPs. This feature provides an LDP-based mechanism for recovering a physical link failure in a dual-homed connection to a VPLS service. This method provides an alternative to RSTP solutions where dual homing redundancy and recovery, in the case of link failure, is resolved by RSTP running between a PE router and CE devices. If the endpoint is configured within the VPLS and send-flush-on-failure is enabled, flush-all-from-me messages will be sent out only when all spoke-SDPs associated with the endpoint go down.
This feature cannot be enabled on management VPLS.
Default
no send-flush-on-failure
Platforms
All
send-idr-after-eap-success
send-idr-after-eap-success
Syntax
[no] send-idr-after-eap-success
Context
[Tree] (config>ipsec>ike-policy send-idr-after-eap-success)
Full Context
configure ipsec ike-policy send-idr-after-eap-success
Description
This command enables the system to add the Identification Responder (IDr) payload in the last IKE authentication response after an Extensible Authentication Protocol (EAP) Success packet is received. When disabled, the system will not include IDr payload.
The no form of this command disables sending the IDr payload in the last IKE.
Default
send-idr-after-eap-success
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
send-imet-ir-on-ndf
send-imet-ir-on-ndf
Syntax
send-imet-ir-on-ndf
no send-imet-ir-on-ndf
Context
[Tree] (config>service>vpls>bgp-evpn>vxlan send-imet-ir-on-ndf)
Full Context
configure service vpls bgp-evpn vxlan send-imet-ir-on-ndf
Description
This command controls the advertisement of Inclusive Multicast Ethernet Tag (IMET) routes for ingress replication in the case where the PE is Non-DF for a specified network interconnect VXLAN virtual ES. When enabled, the router will advertise IMET-IR routes even if the PE is NDF. This attracts BUM traffic but also speeds up convergence in case of DF failure.
The no form of this command withdraws the advertisement of the IMET-IR route on the network interconnect VXLAN NDF router.
Default
send-imet-ir-on-ndf
Platforms
All
send-orf
send-orf
Syntax
send-orf [comm-id]
no send-orf [comm-id]
Context
[Tree] (config>router>bgp>group>neighbor>outbound-route-filtering>extended-community send-orf)
[Tree] (config>router>bgp>outbound-route-filtering>extended-community send-orf)
[Tree] (config>router>bgp>group>outbound-route-filtering>extended-community send-orf)
Full Context
configure router bgp group neighbor outbound-route-filtering extended-community send-orf
configure router bgp outbound-route-filtering extended-community send-orf
configure router bgp group outbound-route-filtering extended-community send-orf
Description
This command instructs the router to negotiate the send capability in the BGP outbound route filtering (ORF) negotiation with a peer.
This command also causes the router to send a community filter, prefix filter, or AS path filter configured as an inbound filter on the BGP session to its peer as an ORF Action ADD.
The no form of this command causes the router to remove the send capability in the BGP ORF negotiation with a peer.
The no form also causes the router to send an ORF remove action for a community filter, prefix filter, or AS path filter configured as an inbound filter on the BGP session to its peer.
If the comm-id parameters are not exclusively route target communities then the router will extract appropriate route targets and use those. If, for some reason, the comm-id parameters specified contain no route targets, then the router will not send an ORF.
Default
no send-orf
Parameters
- comm-id
-
Specifies up to 32 community policies, which must consist exclusively of route target extended communities. If it is not specified, then the ORF policy is automatically generated from configured route target lists, accepted client route target ORFs and locally configured route targets.
Platforms
All
send-queries
send-queries
Syntax
[no] send-queries
Context
[Tree] (config>service>vpls>spoke-sdp>mld-snooping send-queries)
[Tree] (config>service>vpls>mesh-sdp>igmp-snooping send-queries)
[Tree] (config>service>vpls>mesh-sdp>mld-snooping send-queries)
[Tree] (config>service>vpls>sap>igmp-snooping send-queries)
[Tree] (config>service>vpls>spoke-sdp>igmp-snooping send-queries)
[Tree] (config>service>vpls>sap>mld-snooping send-queries)
Full Context
configure service vpls spoke-sdp mld-snooping send-queries
configure service vpls mesh-sdp igmp-snooping send-queries
configure service vpls mesh-sdp mld-snooping send-queries
configure service vpls sap igmp-snooping send-queries
configure service vpls spoke-sdp igmp-snooping send-queries
configure service vpls sap mld-snooping send-queries
Description
This command specifies whether to send IGMP general query messages on the SAP or SDP.
When send-queries is configured, all type of queries generate ourselves are of the configured version. If a report of a version higher than the configured version is received, the report will get dropped and a new wrong version counter will get incremented. If send-queries is not configured, the version command has no effect. The version used will be the version of the querier. This implies that, for example, when we have a v2 querier, we will never send out a v3 group or group-source specific query when a host wants to leave a certain group.
If mrouter-port is enabled on this SAP or spoke SDP, the send-queries command parameter cannot be set.
The no form of this command disables the IGMP general query messages.
Default
no send-queries
Platforms
All
send-queries
Syntax
[no] send-queries
Context
[Tree] (config>subscr-mgmt>msap-policy>vpls-only>igmp-snp send-queries)
Full Context
configure subscriber-mgmt msap-policy vpls-only-sap-parameters igmp-snooping send-queries
Description
This command specifies whether to send IGMP general query messages on the managed SAP. When send-queries is configured, all type of queries generated are of the configured version. If a report of a version higher than the configured version is received, the report will get dropped and a new wrong version counter will get incremented.
If send-queries is not configured, the version command has no effect. The version used on that SAP/SDP is the version of the querier. This implies that, for example, when there is a v2 querier, a v3 group or group-source specific query is never sent when a host wants to leave a certain group.
The no form of this command reverts to the default.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
send-queries
Syntax
[no] send-queries
Context
[Tree] (config>service>pw-template>igmp-snooping send-queries)
Full Context
configure service pw-template igmp-snooping send-queries
Description
This command specifies whether to send IGMP general query messages.
When send-queries is configured, all type of queries generated are of the configured version. If a report of a version higher than the configured version is received, the report will get dropped and a new wrong version counter will get incremented.
If send-queries is not configured, the version command has no effect. The version used on that SAP or SDP will be the version of the querier. This implies that, for example, when we have a v2 querier, we will never send out a v3 group or group-source specific query when a host wants to leave a certain group.
Default
no send-queries
Platforms
All
send-refresh
send-refresh
Syntax
send-refresh seconds
no send-refresh
Context
[Tree] (config>service>vpls>proxy-nd send-refresh)
[Tree] (config>service>vpls>proxy-arp send-refresh)
Full Context
configure service vpls proxy-nd send-refresh
configure service vpls proxy-arp send-refresh
Description
If enabled, this command will make the system send a refresh at the configured time. A refresh message is an ARP-request message that uses 0s as sender's IP for the case of a proxy-ARP entry. For proxy-ND entries, a refresh is a regular NS message using the chassis-mac as MAC source-address.
Default
no send-refresh
Parameters
- seconds
-
Specifies the send-refresh in seconds.
Platforms
All
send-release
send-release
Syntax
[no] send-release
Context
[Tree] (config>service>ies>if>sap>ipsec-gw>dhcp send-release)
[Tree] (config>service>ies>if>sap>ipsec-gw>dhcp6 send-release)
[Tree] (config>service>vprn>if>sap>ipsec-gw>dhcp send-release)
[Tree] (config>service>vprn>if>sap>ipsec-gw>dhcp6 send-release)
Full Context
configure service ies interface sap ipsec-gw dhcp send-release
configure service ies interface sap ipsec-gw dhcp6 send-release
configure service vprn interface sap ipsec-gw dhcp send-release
configure service vprn interface sap ipsec-gw dhcp6 send-release
Description
This command enables the system to send a DHCPv4/v6 release message when the IPsec tunnel is removed.
Default
no send-release
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
send-to-ebgp
send-to-ebgp
Syntax
send-to-ebgp family [ family]
no send-to-ebgp
Context
[Tree] (config>service>vprn>bgp>group>neighbor>link-bandwidth send-to-ebgp)
[Tree] (config>service>vprn>bgp>group>link-bandwidth send-to-ebgp)
Full Context
configure service vprn bgp group neighbor link-bandwidth send-to-ebgp
configure service vprn bgp group link-bandwidth send-to-ebgp
Description
This command configures BGP to allow link-bandwidth extended community to be sent in routes advertised to EBGP peers in the scope of the command, as long the routes belong to one of the listed address families.
The link-bandwidth extended community is encoded as a non-transitive type. This means that by default it should not be attached to any route advertised to an EBGP peer and it should be discarded when received in any route from an EBGP peer. This command overrides the standard behavior.
Up to three families may be configured.
The no form of this command restores the default behavior of stripping the link-bandwidth extended community from any route advertised to an EBGP peer.
Default
no send-to-ebgp
Parameters
- family
-
Specifies the address families for which receiving the link-bandwidth extended community from EBGP peers should be supported.
Platforms
All
send-to-ebgp
Syntax
send-to-ebgp family [ family]
no send-to-ebgp
Context
[Tree] (config>router>bgp>group>link-bandwidth send-to-ebgp)
[Tree] (config>router>bgp>group>neighbor>link-bandwidth send-to-ebgp)
Full Context
configure router bgp group link-bandwidth send-to-ebgp
configure router bgp group neighbor link-bandwidth send-to-ebgp
Description
This command configures BGP to allow link-bandwidth extended community to be sent in routes advertised to EBGP peers in the scope of the command, as long the routes belong to one of the listed address families.
The link-bandwidth extended community is encoded as a non-transitive type. This means that by default it should not be attached to any route advertised to an EBGP peer and it should be discarded when received in any route from an EBGP peer. This command overrides the standard behavior.
Up to six families may be configured.
The no form of this command restores the default behavior of stripping the link-bandwidth extended community from any route advertised to an EBGP peer.
Default
no send-to-ebgp
Parameters
- family
-
Specifies the address families for which receiving the link-bandwidth extended community from EBGP peers should be supported.
Platforms
All
send-tunnel-encap
send-tunnel-encap
Syntax
send-tunnel-encap [mpls] [mplsoudp]
no send-tunnel-encap
Context
[Tree] (config>service>vprn>bgp-evpn>mpls send-tunnel-encap)
[Tree] (config>service>vpls>bgp-evpn>vxlan send-tunnel-encap)
[Tree] (config>service>epipe>bgp-evpn>mpls send-tunnel-encap)
[Tree] (config>service>epipe>bgp-evpn>vxlan send-tunnel-encap)
[Tree] (config>service>vpls>bgp-evpn>mpls send-tunnel-encap)
Full Context
configure service vprn bgp-evpn mpls send-tunnel-encap
configure service vpls bgp-evpn vxlan send-tunnel-encap
configure service epipe bgp-evpn mpls send-tunnel-encap
configure service epipe bgp-evpn vxlan send-tunnel-encap
configure service vpls bgp-evpn mpls send-tunnel-encap
Description
This command configures the encapsulation to be advertised with the EVPN routes for the service. The encapsulation is encoded in RFC 5512-based tunnel encapsulation extended communities.
When used in the bgp-evpn>mpls context, the supported options are none (no send-tunnel-encap), mpls, mplsoudp or both.
When used in the bgp-evpn>vxlan context, the supported options are send-tunnel-encap (the router signals a VXLAN value) or no send-tunnel-encap (no encapsulation extended community is sent).
Default
send-tunnel-encap mpls (in the config>service>vpls>bgp-evpn>mpls context)
send-tunnel-encap (in the config>service>vpls>bgp-evpn>vxlan context)
Parameters
- mpls
-
Specifies the MPLS-over-UDP encapsulation value in the RFC 5512 encapsulation extended community.
- mplsoudp
-
Specifies the MPLS encapsulation value in the RFC 5512 encapsulation extended community.
Platforms
All
send-unrestricted-portal-url
send-unrestricted-portal-url
Syntax
[no] send-unrestricted-portal-url
Context
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>dsm send-unrestricted-portal-url)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>dsm send-unrestricted-portal-url)
Full Context
configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt send-unrestricted-portal-url
configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt send-unrestricted-portal-url
Description
This command enables the router to send the special URL indicator urn:ietf:params:capport:unrestricted in DHCP, DHCPv6, and RA messages, to indicate to the client that no captive portal is enabled. This allows the client to disable all portal detection logic, thereby optimizing the user experience.
The no form of this command disables the sending of the special indicator when no captive portal is enabled.
Default
no send-unrestricted-portal-url
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
sender-id
sender-id
Syntax
sender-id local local-name
sender-id system
no sender-id
Context
[Tree] (config>eth-cfm>system sender-id)
Full Context
configure eth-cfm system sender-id
Description
This command allows the operator to include the configured "system name” (chassis3) or a locally configured value in ETH-CFM PDUs sent from MEPs and MIPs. The operator may only choose one of these options to use for ETH-CFM. MEPs include the sender-id TLV for CCM (not sub second CCM enabled MEPs), LBM/LBR, and LTM/LTR. MIPs include this value in the LBR and LTR PDUs.
LBR functions reflect all TLVs received in the LBM unchanged, including the SenderID TLV.
Parameters
- local-name
-
Specifies a local alphanumeric string different from the "system name” chassis(3) value that can be used for other means, up to 45 characters.
- system
-
Allows ETH-CFM to use the configured "system name” value as the chassis(3).
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
sensor-group
sensor-group
Syntax
sensor-group name [ create]
no sensor-group name
Context
[Tree] (config>system>telemetry>sensor-groups sensor-group)
Full Context
configure system telemetry sensor-groups sensor-group
Description
Commands in this context configure sensor-related commands.
The no form of this command removes the configuration.
Parameters
- name
-
Specifies the sensor group name, up to 32 characters.
- create
-
Keyword used to create a sensor group.
Platforms
All
sensor-group
Syntax
sensor-group name
no sensor-group
Context
[Tree] (config>system>telemetry>persistent-subscriptions>subscription sensor-group)
Full Context
configure system telemetry persistent-subscriptions subscription sensor-group
Description
This command assigns an existing sensor group to the specified persistent subscription. If no valid paths exist in the sensor group, the configuration is accepted; however, no gRPC connection is established when persistent subscription is activated.
The no form of this command removes the configuration.
Parameters
- name
-
Specifies the sensor group name, up to 32 characters.
Platforms
All
sensor-groups
sensor-groups
Syntax
sensor-groups
Context
[Tree] (config>system>telemetry sensor-groups)
Full Context
configure system telemetry sensor-groups
Description
Commands in this context configure a sensor group.
Platforms
All
sequence
sequence
Syntax
sequence lower-case-letters
Context
[Tree] (config>test-oam>sath>svc-test>svc-stream>frm-mix sequence)
Full Context
configure test-oam service-activation-testhead service-test service-stream frame-mix sequence
Description
This command configures the frame sequence for the specified service stream by referencing the frame-size-template configuration.
Default
sequence a
Parameters
- lower-case-letters
-
Specifies a string, up to 16 characters, that denotes the sequence of frames to be generated by the service activation testhead using the alphabetical characters in the referenced frame-size-template (for example, a, b, and c).
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
sequence-group
sequence-group
Syntax
sequence-group group
no sequence-group
Context
[Tree] (config>li>x-interfaces>lics>lic>authentication sequence-group)
Full Context
configure li x-interfaces lics lic authentication sequence-group
Description
This command configures the sequence group for the X1 and X2 interfaces.
The no form of this command reverts to the default.
Parameters
- group
-
Specifies the group number.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
serial-notify
serial-notify
Syntax
[no] serial-notify
Context
[Tree] (debug>router>rpki-session>packet serial-notify)
Full Context
debug router rpki-session packet serial-notify
Description
This command enables debugging for serial notify RPKI packets.
The no form of this command disables debugging for serial notify RPKI packets.
Platforms
All
serial-query
serial-query
Syntax
[no] serial-query
Context
[Tree] (debug>router>rpki-session>packet serial-query)
Full Context
debug router rpki-session packet serial-query
Description
This command enables debugging for serial query RPKI packets.
The no form of this command disables debugging for serial query RPKI packets.
Platforms
All
server
server
Syntax
radius-accounting-server
Context
[Tree] (config>subscr-mgmt>acct-plcy>server server)
Full Context
configure subscriber-mgmt radius-accounting-policy radius-accounting-server server
Description
Commands in this context define RADIUS server attributes under a given session authentication policy.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server server-index address ip-address secret key [hash | hash2 | custom] [port port-num] [coa-only] [pending-requests-limit limit]
no server index
Context
[Tree] (config>subscr-mgmt>auth-plcy>radius-auth-server server)
Full Context
configure subscriber-mgmt authentication-policy radius-authentication-server server
Description
This command adds a RADIUS server and configures the RADIUS server IP address, index, and key values.
Up to sixteen RADIUS servers can be configured at any one time in a RADIUS authentication policy. Only five can be used for authentication, all other servers should be configured as coa-only servers. RADIUS servers are accessed in order from lowest to highest index for authentication or accounting requests until a response from a server is received. A higher indexed server is only queried if no response is received from a lower indexed server (which implies that the server is not available). If a response from a server is received, no other RADIUS servers are queried.
The no form of this command removes the server index from the configuration.
Parameters
- server-index
-
Specifies the index for the RADIUS server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from lowest to highest index.
- ip-address
-
Specifies the IP address of the RADIUS server. Two RADIUS servers cannot have the same IP address. An error message is generated if the server address is a duplicate.
- key
-
Specifies the secret key to access the RADIUS server. This secret key must match the password on the RADIUS server.
- hash
-
Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- hash2
-
Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- custom
-
Specifies the custom encryption to management interface.
- port-num
-
Specifies the UDP port number on which to contact the RADIUS server for authentication.
- coa-only
-
Specifies Change-of-Authorization Messages only. Servers that are marked with the coa-only flag will not be used for authentication, but they is able to accept RADIUS CoA messages, independent of the accept-authorization-change setting in the authentication policy.
For authentication purposes, the maximum number of servers is 5. All other servers may only be used as coa-only servers.
- limit
-
Specifies the maximum number of outstanding RADIUS authentication requests for this authentication server.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server ip-address
no server
Context
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host server)
Full Context
configure subscriber-mgmt local-user-db ipoe host server
Description
This command configures the IP address of the DHCP server to relay to.
The configured DHCP server IP address must reference one of the addresses configured under the DHCP CLI context of an IES/VPRN subscriber or group interface.
The no form of this command reverts to the default.
Parameters
- ip-address
-
Specifies the IP address of the DHCP server.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server ip-address
no server
Context
[Tree] (config>service>vprn>sub-if>grp-if>ipv6>dhcp6>relay server)
Full Context
configure service vprn subscriber-interface group-interface ipv6 dhcp6 relay server
Description
This command configures the IPv6 address of the DHCP6 server to relay to.
The configured DHCP6 server IPv6 address must reference one of the addresses configured under the DHCP6 CLI context of an IES/VPRN subscriber or group interface.
The no form of this command reverts to the default.
Parameters
- ip-address
-
Specifies up to eight IPv6 addresses of the DHCP6 server.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server [service service-id] name server-name
no server
Context
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>match-radprox-cache server)
Full Context
configure subscriber-mgmt local-user-db ipoe host match-radius-proxy-cache server
Description
This command specifies the name of radius-proxy-server and optionally id of the service that the radius-proxy-server resides in.
The no form of this command removes the parameters from the configuration.
Parameters
- service service-id
-
Specifies the ID or name of the service.
- name server-name
-
Specifies the name of radius-proxy-server up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server ipv6z-address [ipv6z-address]
no server [ipv6z-address]
Context
[Tree] (config>service>ies>if>ipv6>dhcp6-relay server)
Full Context
configure service ies interface ipv6 dhcp6-relay server
Description
This command specifies a list of servers where DHCP6 requests are forwarded. The list of servers can be entered as either IP addresses or fully qualified domain names. There must be at least one server specified for DHCP6 relay to work. If there are multiple servers, the request is forwarded to all servers in the list.
The no form of this command reverts to the default.
Parameters
- ipv6z-address
-
Specifies up to eight non-global IPv4 addresses including a zone index as defined by the InetAddressIPv4z textual convention.
Platforms
All
server
Syntax
server server1 [server2]
Context
[Tree] (config>service>ies>if>dhcp server)
[Tree] (config>service>ies>sub-if>grp-if>dhcp server)
[Tree] (config>service>vprn>if>dhcp server)
Full Context
configure service ies interface dhcp server
configure service ies subscriber-interface group-interface dhcp server
configure service vprn interface dhcp server
Description
This command specifies a list of servers where requests are forwarded. The list of servers can be entered as either IP addresses or fully qualified domain names. There must be at least one server specified for DHCP relay to work. If there are multiple servers then the request is forwarded to all servers in the list.
There can be a maximum of 8 DHCP servers configured.
The no form of this command reverts to the default.
Parameters
- server
-
Specifies up to eight DHCP server IP addresses.
Platforms
All
- configure service vprn interface dhcp server
- configure service ies interface dhcp server
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface dhcp server
server
Syntax
server server-name
no server
Context
[Tree] (config>service>ies>sub-if>grp-if>local-address-assignment server)
[Tree] (config>service>ies>sub-if>local-address-assignment server)
[Tree] (config>service>vprn>sub-if>grp-if>local-address-assignment server)
[Tree] (config>service>vprn>sub-if>local-address-assignment server)
Full Context
configure service ies subscriber-interface group-interface local-address-assignment server
configure service ies subscriber-interface local-address-assignment server
configure service vprn subscriber-interface group-interface local-address-assignment server
configure service vprn subscriber-interface local-address-assignment server
Description
This command designates a local DHCPv4 server for local pools management where IPv4 addresses for PPPoXv4 clients are allocated without the need for the internal DHCP relay-agent. Those addresses are tied to PPPoX sessions and they are de-allocated when the PPPoX session is terminated.
Parameters
- server-name
-
Specifies the name of the local DHCP server.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server server-index address ip-address secret key [hash | hash2 | custom] [port port] [create]
no server server-index
Context
[Tree] (config>aaa>l2tp-acct-plcy>radius-acct-server server)
Full Context
configure aaa l2tp-accounting-policy radius-accounting-server server
Description
This command adds a RADIUS server and configures the RADIUS server IP address, index, and key values.
Up to five RADIUS servers can be configured at any one time. RADIUS servers are accessed in order from lowest to highest index for authentication requests until a response from a server is received. A higher indexed server is only queried if no response is received from a lower indexed server (which implies that the server is not available). If a response from a server is received, no other RADIUS servers are queried.
The no form of this command removes the server from the configuration.
Parameters
- server-index
-
The index for the RADIUS server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from lowest to highest index.
- address ip-address
-
The IP address of the RADIUS server. Two RADIUS servers cannot have the same IP address. An error message is generated if the server address is a duplicate.
- secret key
-
The secret key to access the RADIUS server. This secret key must match the password on the RADIUS server.
- hash
-
Specifies the key is entered in an encrypted form. If the hash parameter is not used, the key is assumed to be in a non-encrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash parameter specified.
- hash2
-
Specifies the key is entered in a more complex encrypted form. If the hash2 parameter is not used, the less encrypted hash form is assumed.
- custom
-
Specifies the custom encryption to management interface.
- port
-
Specifies the UDP port number on which to contact the RADIUS server for authentication.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server server-index address ip-address secret key [hash | hash2 | custom] [port port] [create]
no server server-index
Context
[Tree] (config>app-assure>rad-acct-plcy>server server)
Full Context
configure application-assurance radius-accounting-policy radius-accounting-server server
Description
This command adds a RADIUS server and configures the RADIUS server IP address, index, and key values.
Up to five RADIUS servers can be configured at any one time. RADIUS servers are accessed in order from lowest to highest index for authentication requests until a response from a server is received. A higher indexed server is only queried if no response is received from a lower indexed server (which implies that the server is not available). If a response from a server is received, no other RADIUS servers are queried.
The no form of this command removes the server from the configuration.
Parameters
- server-index
-
The index for the RADIUS server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from lowest to highest index.
- ip-address
-
The IP address of the RADIUS server. Two RADIUS servers cannot have the same IP address. An error message is generated if the server address is a duplicate.
- secret key
-
The secret key to access the RADIUS server. This secret key must match the password on the RADIUS server.
- hash
-
Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- hash2
-
Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- custom
-
Specifies the custom encryption to management interface.
- port
-
Specifies the UDP port number on which to contact the RADIUS server for authentication.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server server-name
no server
Context
[Tree] (config>service>ies>sub-if>grp-if>lcl-addr-assign>ipv6 server)
[Tree] (config>service>vprn>sub-if>grp-if>lcl-addr-assign>ipv6 server)
Full Context
configure service ies subscriber-interface group-interface local-address-assignment ipv6 server
configure service vprn subscriber-interface group-interface local-address-assignment ipv6 server
Description
This command designates a local router DHCPv6 server for local pools management where IPv6 prefixes or address for PPPoXv6 clients or IPoEv6 clients are allocated without the need for the internal router DHCP relay-agent. Those addresses are tied to PPPoX or IPoE sessions and they are de-allocated when the PPPoX or IPoE session is terminated.
Parameters
- server-name
-
The name of the local router DHCPv6 server.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server server-index name server-name
no server server-index
Context
[Tree] (config>aaa>radius-srv-plcy>servers server)
Full Context
configure aaa radius-server-policy servers server
Description
This command adds a RADIUS server.
The no form of this command removes a RADIUS server.
Parameters
- index
-
Specifies the index for the RADIUS server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from lowest to highest index.
- server-name
-
Specifies the server name, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server server-name [address ip-address] [secret key] [hash | hash2| custom] [create]
no server server-name
Context
[Tree] (config>service>vprn>radius-server server)
[Tree] (config>router>radius-server server)
Full Context
configure service vprn radius-server server
configure router radius-server server
Description
This command either specifies an external RADIUS server in the corresponding routing instance or enters configuration context of an existing server. The configured server could be referenced in the radius-server-policy.
The no form of this command removes the parameters from the server configuration.
Parameters
- server-name
-
Specifies the name of the external RADIUS server.
- ip-address
-
Specifies the IPv4 or IPv6 IP address of the external RADIUS server.
- key
-
Specifies the shared secret key of the external RADIUS server, up to 64 characters.
- hash
-
Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- hash2
-
Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- custom
-
Specifies the custom encryption to management interface.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server server-name [create] [purpose {[accounting | authentication]}] [wlan-gw-group group-id]
no server server-name
Context
[Tree] (config>service>vprn>radius-proxy server)
[Tree] (config>router>radius-proxy server)
Full Context
configure service vprn radius-proxy server
configure router radius-proxy server
Description
This command creates a RADIUS-proxy server in the corresponding routing instance. The proxy server can be configured for the purpose of proxying authentication or accounting or both.
If a WLAN-GW ISA group is specified, then the RADIUS proxy server is instantiated on the set of ISAs in the specified wlan-gw group. The RADIUS messages from the AP are load-balanced to these ISAs. The ISA that processes the RADIUS message then hashes this message to the ISA that anchors the UE. The hash is based on UE MAC address (required to be present in the calling-station-id attribute) in the RADIUS message.
If the create parameter is not specified, then this command enters configuration context of the specified RADIUS-proxy server.
The no form of this command removes the server-name and parameters from the radius-proxy configuration.
Parameters
- server-name
-
Specifies the name of the RADIUS-proxy server.
- create
-
Specifies that the system will create the specified RADIUS-proxy server.
- purpose
-
Specifies the purpose the RADIUS-proxy server.
- group-id
-
Specifies the WLAN-GW ISA group.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server ipv6-address [ ipv6-address]
no server [ipv6-address [ipv6-address]]
Context
[Tree] (config>service>ies>sub-if>wlan-gw>pool-manager>dhcp6-client server)
[Tree] (config>service>vprn>sub-if>wlan-gw>pool-manager>dhcp6-client server)
Full Context
configure service ies subscriber-interface wlan-gw pool-manager dhcpv6-client server
configure service vprn subscriber-interface wlan-gw pool-manager dhcpv6-client server
Description
This specifies the DHCPv6 servers that are used for requesting addresses.
The no form of this command removes the server. This cannot be executed while any DHCPv6 client application is not shut down.
Parameters
- ipv6-address
-
Specifies up to 8 unicast IPv6 addresses of a DHCP6 server.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server index address ip-address secret key [{hash | hash2 | custom}] [port port]
no server index
Context
[Tree] (config>service>vprn>aaa>rmt-srv>tacplus server)
Full Context
configure service vprn aaa remote-servers tacplus server
Description
This command adds a TACACS+ server and configures the TACACS+ server IP address, index, and key values.
Up to five TACACS+ servers can be configured at any one time. TACACS+ servers are accessed in order from lowest index to the highest index for authentication requests.
The no form of this command removes the server from the configuration.
Default
No TACACS+ servers are configured.
Parameters
- index
-
Specifies the index for the TACACS+ server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from the lowest index to the highest index.
- ip-address
-
Specifies the IP address of the TACACS+ server. Two TACACS+ servers cannot have the same IP address. An error message is generated if the server address is a duplicate.
- key
-
Specifies the secret key, up to 128 characters, for access to the TACACS+ server. This secret key must match the password on the TACACS+ server.
- hash
-
Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- hash2
-
Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- custom
-
Specifies the custom encryption to management interface.
- port
-
Specifies the port ID.
Platforms
All
server
Syntax
server ipv6-address [ ipv6-address]
no server
Context
[Tree] (config>service>vprn>router-advert>if>dns-options server)
[Tree] (config>service>vprn>router-advert>dns-options server)
Full Context
configure service vprn router-advertisement interface dns-options server
configure service vprn router-advertisement dns-options server
Description
This command specifies the IPv6 DNS servers to include in the RDNSS option in Router Advertisements. When specified at the router advertisement level this applies to all interfaces that have include-dns enabled, unless the interfaces have more specific dns-options configured.
Parameters
- ipv6-address
-
Specifies the IPv6 address of the DNS server(s), up to a maximum of four, specified as eight 16-bit hexadecimal pieces.
Platforms
All
server
Syntax
server ip-address[:port] [create]
no server ip-address[:port]
Context
[Tree] (config>app-assure>group>url-filter>icap server)
Full Context
configure application-assurance group url-filter icap server
Description
This command configures the IP address and server port of the ICAP server.
Parameters
- ip-address[:port]
-
Specifies the ICAP server IP address and port.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server ip-address [ip-address] router router-instance
server ip-address [ip-address] service-name service-name
no server
Context
[Tree] (config>service>vprn>if>sap>ipsec-gw>dhcp server)
[Tree] (config>service>ies>if>sap>ipsec-gw>dhcp server)
Full Context
configure service vprn interface sap ipsec-gw dhcp server
configure service ies interface sap ipsec-gw dhcp server
Description
This command specifies up to eight DHCPv4 server addresses for DHCPv4-based address assignment. If multiple server addresses are specified, the first advertised DHCPv4 address received is chosen.
Default
no server
Parameters
- ip-address
-
Specifies up to eight unicast IPv4 addresses.
- router-instance
-
Specifies the router instance ID used to reach the configured server address.
This variant of this command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic). The server ip-address service-name service-name variant can be used in all configuration modes.
- service-name
-
Specifies the name of the IES or VPRN service used to reach the configured server address, up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server ipv6-address [ipv6-address] router router-instance
server ipv6-address [ ipv6-address] service-name service-name
no server
Context
[Tree] (config>service>vprn>if>sap>ipsec-gw>dhcp6 server)
[Tree] (config>service>ies>if>sap>ipsec-gw>dhcp6 server)
Full Context
configure service vprn interface sap ipsec-gw dhcp6 server
configure service ies interface sap ipsec-gw dhcp6 server
Description
This command specifies up to eight DHCPv6 server addresses for DHCPv6-based address assignment. If multiple server addresses are specified, the first advertised DHCPv6 address received is chosen.
Default
no server
Parameters
- ipv6-address
-
Specifies up to eight unicast global unicast IPv6 addresses.
- router-instance
-
Specifies the router instance ID used to reach the configured server address.
This variant of this command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic). The server ip-address service-name service-name variant can be used in all configuration modes.
- service-name
-
Specifies the name of the IES or VPRN service used to reach the configured server address, up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server server-index [ create]
no server server-index
Context
[Tree] (config>aaa>isa-radius-plcy>servers server)
Full Context
configure aaa isa-radius-policy servers server
Description
This command adds a RADIUS server and configures the RADIUS server IP address, index, and key values.
Up to five RADIUS servers can be configured at any one time. RADIUS servers are accessed in order from lowest to highest index for authentication requests until a response from a server is received. A higher indexed server is only queried if no response is received from a lower indexed server (which implies that the server is not available). If a response from a server is received, no other RADIUS servers are queried.
The no form of the command removes the server from the configuration.
Parameters
- server-index
-
The index for the RADIUS server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from lowest to highest index.
- create
-
Keyword used to create the server index.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server
Context
[Tree] (config>test-oam>twamp server)
Full Context
configure test-oam twamp server
Description
This command configures the node for TWAMP server functionality.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
server
Syntax
server server [server]
Context
[Tree] (config>router>if>dhcp server)
Full Context
configure router interface dhcp server
Description
This command specifies a list of servers where requests will be forwarded. The list of servers can be entered as either IP addresses or fully qualified domain names. There must be at least one server specified for DHCP relay to work. If there are multiple servers then the request is forwarded to all of the servers in the list. There can be a maximum of eight DHCP servers configured.
The flood command is applicable only in the VPLS case. There is a scenario with VPLS where the VPLS node only wants to add Option 82 information to the DHCP request to provider per-subscriber information, but it does not do full DHCP relay. In this case, the server is set to "flood". This means the DHCP request is still a broadcast and is sent through the VPLS domain. A node running at Layer 3 further upstream then can perform the full Layer 3 DHCP relay function.
Default
no server
Parameters
- server
-
Specifies the DHCP server IP address. A maximum of eight servers can be specified in a single statement.
Platforms
All
server
Syntax
server ipv6-address [ipv6-address]
no server
Context
[Tree] (config>router>router-advert>if>dns-options server)
[Tree] (config>router>router-advert>dns-options server)
Full Context
configure router router-advertisement interface dns-options server
configure router router-advertisement dns-options server
Description
This command specifies the IPv6 DNS servers to include in the RDNSS option in Router Advertisements. When specified at the router advertisement level this applies to all interfaces that have include-dns enabled, unless the interfaces have more specific dns-options configured.
Parameters
- ipv6-address
-
Specifies the IPv6 address of the DNS servers as eight 16-bit hexadecimal pieces. A maximum of four ipv6 addresses can be specified in a single statement.
Platforms
All
server
Syntax
server pcp-server-name [create]
no server pcp-server-name
Context
[Tree] (config>router>pcp-server server)
Full Context
configure router pcp-server server
Description
Commands in this context configure a PCP server.
The no form of this command deletes the specified PCP server.
Parameters
- pcp-server-name
-
Specifies the PCP server name, up to 32 characters.
- create
-
Creates a PCP server before entering the context to configure it.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server [router router-instance | service-name service-name] {ip-address | ipv6-address | ptp} [key-id key-id | authentication-keychain keychain-name] [version version] [prefer]
no server [router router-instance | service-name service-name] {ip address | ipv6-address | ptp}
Context
[Tree] (config>system>time>ntp server)
Full Context
configure system time ntp server
Description
This command configures the node to operate in client mode with the NTP server specified in the address field of this command.
If the internal PTP process is used as a source of time for System Time and OAM time then it must be specified as a server for NTP. If PTP is specified, the prefer parameter must be specified. After PTP has established a UTC traceable time from an external grandmaster it is always the source for time into NTP, even if PTP goes into time holdover. PTP applies only to the 7450 ESS and 7750 SR.
Using the internal PTP time source for NTP promotes the internal NTP server to stratum 1 level, which may impact the NTP network topology.
The no form of this command removes the server with the specified address from the configuration.
Parameters
- router-instance
-
Specifies the routing context that contains the interface in the form of router-name or service-id.
- service name
-
Specifies the service name for the VPRN, up to 64 characters. CPM routing instances are not supported.
- ip-address
-
Configures the IPv4 address of an external NTP server.
- ipv6-address
-
Configures the IPv6 address of an external NTP server.
- key-id
-
Specifies the key ID that identifies the configured authentication key and authentication type used by this node to transmit NTP packets to an NTP server. If an NTP packet is received by this node, the authentication key-id, type, and key value must be valid, otherwise the packet is rejected and an event/trap generated. This is an optional parameter.
- keychain-name
-
Identifies the keychain name, up to 32 characters.
- version
-
Configures the NTP version number that is expected by this node. This is an optional parameter.
- ptp
-
Configures the internal PTP process as a time server into the NTP process. The prefer parameter is mandatory with this server option.
- prefer
-
Specifies that, when configuring more than one peer, one remote system can be configured as the preferred peer. When a second peer is configured as preferred, the new entry overrides the old entry.
Platforms
All
server
Syntax
server
Context
[Tree] (config>system>security>ssh>key-re-exchange server)
Full Context
configure system security ssh key-re-exchange server
Description
This command enables the key re-exchange context for the SSH server.
Platforms
All
server
Syntax
server index address ip-address secret key [hash | hash2 | custom] [tls-client-profile profile] [authenticator {md5 | sm3}]
no server index
Context
[Tree] (config>service>vprn>aaa>rmt-srv>radius server)
[Tree] (config>system>security>radius server)
Full Context
configure service vprn aaa remote-servers radius server
configure system security radius server
Description
This command adds a RADIUS server and configures the IP address, index, and key values.
Up to five RADIUS servers can be configured at any one time. For authentication requests, RADIUS servers are accessed in order from the lowest to highest index until a response from a server is received. A higher indexed server is only queried if no response is received from a lower indexed server (which implies that the server is not available). If a response from a server is received, no other RADIUS servers are queried. It is assumed that there are multiple identical servers configured as backups and that the servers do not have redundant data.
The no form of this command removes the server from the configuration.
Default
no server
Parameters
- index
-
Specifies the index for the RADIUS server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from lowest to highest index.
- ip-address
-
Specifies the IP address of the RADIUS server. Two RADIUS servers cannot have the same IP address. An error message is generated if the server address is a duplicate.
- key
-
Specifies the secret key to access the RADIUS server, up to 64 characters. This secret key must match the password on the RADIUS server.
- hash
-
Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- hash2
-
Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- custom
-
Specifies the custom encryption to management interface.
- tls-client-profile
-
Specifies the TLS profile for the RADIUS server.
- profile
-
Specifies the TLS profile name, up to 32 characters.
- md5
-
Specifies the MD5 hash algorithm for the RADIUS server.
- sm3
-
Specifies the SM3 hash algorithm for the RADIUS server.
Platforms
All
server
Syntax
server index address ip-address secret key [hash | hash2 | custom] [port port]
no server index
Context
[Tree] (config>system>security>tacplus server)
Full Context
configure system security tacplus server
Description
This command adds a TACACS+ server and configures the TACACS+ server IP address, index, and key values.
Up to five TACACS+ servers can be configured at any one time. TACACS+ servers are accessed in order from lowest index to the highest index for authentication requests.
The no form of this command removes the server from the configuration.
Parameters
- index
-
Specifies the index for the TACACS+ server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from the lowest index to the highest index.
- ip-address
-
Specifies the IP address of the TACACS+ server. Two TACACS+ servers cannot have the same IP address. An error message is generated if the server address is a duplicate.
- key
-
Specifies the secret key, up to 128 characters, to access the TACACS+ server. This secret key must match the password on the TACACS+ server.
- hash
-
Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- hash2
-
Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- custom
-
Specifies the custom encryption to management interface.
- port
-
Specifies the port ID.
Platforms
All
server
Syntax
server server-index [ create]
no server server-index
Context
[Tree] (config>system>security>ldap server)
Full Context
configure system security ldap server
Description
This command configures an LDAP server. Up to five servers can be configured, which can then work in a redundant manner.
The no version of this command removes the server connection.
Parameters
- server-index
-
Specifies a unique LDAP server connection.
Platforms
All
server
Syntax
server server-index address ip-address secret key [hash | hash2 | custom] [auth-port auth-port] [acct-port acct-port] [type server-type]
Context
[Tree] (config>system>security>dot1x>radius-plcy server)
Full Context
configure system security dot1x radius-plcy server
Description
This command adds a Dot1x server and configures the Dot1x server IP address, index, and key values.
Up to five Dot1x servers can be configured at any one time. Dot1x servers are accessed in order from lowest to highest index for authentication requests until a response from a server is received. A higher indexed server is only queried if no response is received from a lower indexed server (which implies that the server is not available). If a response from a server is received, no other Dot1x servers are queried. It is assumed that there are multiple identical servers configured as backups and that the servers do not have redundant data.
The no form of this command removes the server from the configuration.
Default
no server
Parameters
- server-index
-
Specifies the index for the Dot1x server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from lowest to highest index.
- ip-address
-
Specifies the IP address of the Dot1x server. Two Dot1x servers cannot have the same IP address. An error message is generated if the server address is a duplicate.
- key
-
Specifies the secret key, up to 128 characters, to access the Dot1x server. This secret key must match the password on the Dot1x server.
- hash
-
Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- hash2
-
Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, cleartext form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- custom
-
Specifies the custom encryption to management interface.
- acct-port
-
Specifies the UDP port number on which to contact the RADIUS server for accounting requests.
- auth-port
-
Specifies a UDP port number to be used as a match criteria.
- server-type
-
Specifies the server type.
Platforms
All
server
Syntax
[no] server ip-address [ip-address]
Context
[Tree] (config>service>ies>sub-if>grp-if>dhcp>offer-selection server)
[Tree] (config>service>vprn>sub-if>grp-if>dhcp>offer-selection server)
[Tree] (config>service>vprn>sub-if>dhcp>offer-selection server)
Full Context
configure service ies subscriber-interface group-interface dhcp offer-selection server
configure service vprn subscriber-interface group-interface dhcp offer-selection server
configure service vprn subscriber-interface dhcp offer-selection server
Description
This command configures a DHCPv4 server destination for which a discover delay must be configured. Up to eight DHCPv4 server destinations can be configured.
The no form of this command removes the DHCPv4 server destination.
Parameters
- ip-address
-
Specifies the IPv4 address of the DHCP server, in dotted notation a.b.c.d.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
[no] server ipv6-address [ipv6-address]
Context
[Tree] (config>service>vprn>sub-if>grp-if>ipv6>dhcp6>relay>advertise-selection server)
[Tree] (config>service>ies>sub-if>grp-if>ipv6>dhcp6>relay>advertise-selection server)
[Tree] (config>service>vprn>sub-if>ipv6>dhcp6>relay>advertise-selection server)
Full Context
configure service vprn subscriber-interface group-interface ipv6 dhcp6 relay advertise-selection server
configure service ies subscriber-interface group-interface ipv6 dhcp6 relay advertise-selection server
configure service vprn subscriber-interface ipv6 dhcp6 relay advertise-selection server
Description
This command configures a DHCPv6 server destination for which a solicit delay or a preference option value must be configured. Up to eight DHCPv6 server destinations can be configured.
The no form of this command removes the DHCPv6 server destination.
Parameters
- ipv6-address
-
Specifies the IPv6 address of the DHCPv6 server.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server
Syntax
server [ip-address | fqdn] [port port]
no server
Context
[Tree] (config>system>security>pki>est-profile server)
Full Context
configure system security pki est-profile server
Description
Commands in this context configure EST server parameters.
The no form of the command reverts to the default value.
Parameters
- ip-address
-
Specifies the IP address of the server.
- fqdn
-
Specifies to use the Fully Qualified Domain Name (FQDN) of the EST server, up to 255 characters.
- port
-
Specifies the port number of the EST server.
Platforms
All
server
Syntax
server
Context
[Tree] (config>system>security>ssh>authentication-method server)
Full Context
configure system security ssh authentication-method server
Description
Commands in this context configure, at the system level, the authentication method that the SSH server accepts for the session.
Platforms
All
server
Syntax
server
Context
[Tree] (config>system>security>user>ssh-auth-method server)
Full Context
configure system security user ssh-authentication-method server
Description
Commands in this context configure, at the user level, the authentication method accepted by the SSH server for the session. The user-level configuration overrides the system-level configuration.
Platforms
All
server-address
server-address
Syntax
server-address server-address [name server-name]
no server-address server-address
Context
[Tree] (config>app-assure>group>dns-ip-cache>dns-match server-address)
Full Context
configure application-assurance group dns-ip-cache dns-match server-address
Description
7
This command configures a DNS server address. DNS responses from this DNS server are used to populate the dns-ip-cache. Up to 64 server addresses can be configured.
Parameters
- server-address
-
Specifies the IPv4 or IPv6 address of the DNS.
- server-name
-
Specifies an optional server name for a given server address.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
server-address
Syntax
server-address {eq | neq} ip-address
server-address {eq | neq} ip-address masked-ip-address netmask netmask
server-address {eq | neq} dns-ip-cache dns-ip-cache-name
server-address {eq | neq} ip-prefix-list ip-prefix-list-name
no server-address
Context
[Tree] (config>app-assure>group>policy>app-filter>entry server-address)
Full Context
configure application-assurance group policy app-filter entry server-address
Description
This command configures the server address to use in application definition. The server IP address may be the source or destination, network or subscriber IP address and may include the use of netmasks.
The no form of this command restores the default (removes the server address from application criteria defined by this entry).
Default
no server-address
Parameters
- eq
-
Specifies a comparison operator that the value configured and the value in the flow are equal.
- neq
-
Specifies a comparison operator that the value configured differs from the value in the flow.
- ip-address
-
Specifies a valid unicast address.
- netmask
-
Specifies an IPv4 or IPv6 address mask.
- masked-ip-address
-
Specifies a valid unicast IPv4 or IPv6 address.
- dns-ip-cache-name
-
Specifies a DNS IP cache name, up to 32 characters.
- ip-prefix-list-name
-
Specifies the name of an IP prefix list, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
server-address
Syntax
server-address ip-address [version version-number] [normal | preferred]
[interval seconds]
no server-address ip-address
Context
[Tree] (config>system>time>sntp server-address)
Full Context
configure system time sntp server-address
Description
This command creates an SNTP server for unicast client mode.
Parameters
- ip-address
-
Specifies the IP address of the SNTP server.
- version-number
-
Specifies the SNTP version supported by this server.
- normal | preferred
-
Specifies the preference value for this SNTP server. When more than one time-server is configured, one server can have preference over others. The value for that server should be set to preferred. Only one server in the table can be a preferred server.
- seconds
-
Specifies the frequency at which this server is queried.
Platforms
All
server-cipher-list
server-cipher-list
Syntax
server-cipher-list
Context
[Tree] (config>system>security>ssh server-cipher-list)
Full Context
configure system security ssh server-cipher-list
Description
Commands in this context configure a list of allowed ciphers by the SSH server.
Platforms
All
server-cipher-list
Syntax
server-cipher-list name [create]
no server-cipher-list name
Context
[Tree] (config>system>security>tls server-cipher-list)
Full Context
configure system security tls server-cipher-list
Description
This command creates the cipher list that is compared against cipher lists sent by the client to the server in the client hello message. The list contains all ciphers that are supported and desired by SR OS for use in the TLS session. The first common cipher found in both the server and client cipher lists will be chosen. As such, the most desired ciphers should be added at the top of the list.
The no form of the command removes the cipher list.
Parameters
- name
-
Specifies the name of the server cipher list, up to 32 characters in length.
- create
-
Keyword used to create the server cipher list.
Platforms
All
server-group-list
server-group-list
Syntax
server-group-list name [create]
no server-group-list name
Context
[Tree] (config>system>security>tls server-group-list)
Full Context
configure system security tls server-group-list
Description
This command configures a list of TLS 1.3-supported group suite codes that the server sends in a server Hello message.
The no form of this command removes the server group list.
Parameters
- name
-
Specifies the name of the server group list, up to 32 characters.
- create
-
Keyword used to create the server group list.
Platforms
All
server-id
server-id
Syntax
server-id duid-en hex hex-string
server-id duid-en string ascii-string
server-id duid-ll
no server-id
Context
[Tree] (config>router>dhcp6>server server-id)
[Tree] (config>service>vprn>sub-if>grp-if>ipv6>dhcp6>proxy server-id)
[Tree] (config>service>ies>sub-if>grp-if>ipv6>dhcp6>proxy server-id)
[Tree] (config>service>vprn>dhcp6>server server-id)
Full Context
configure router dhcp6 local-dhcp-server server-id
configure service vprn subscriber-interface group-interface ipv6 dhcp6 proxy-server server-id
configure service ies subscriber-interface group-interface ipv6 dhcp6 proxy-server server-id
configure service vprn dhcp6 local-dhcp-server server-id
Description
This command allows the operator to customize the server-id attribute of a DHCPv6 message (such as DHCPv6 advertise and reply). By default, the server-id uses DUID-ll derived from the chassis link layer address. Operators have the option to use a unique identifier by using the duid-en (vendor based on an enterprise number). There is a maximum length associated with the customizable hex-string and ascii-string.
The no form of this command reverts to the default.
Default
server-id duid-ll
Parameters
- hex-string
-
Specifies a DUID system ID in a hex format.
- ascii-string
-
Specifies a DUID system ID in an ASCII format, up to 58 characters.
- duid-ll
-
Specifies that the DUID system ID is derived from the system link layer address.
- duid-en
-
Specifies the enterprise number.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server-ip
server-ip
Syntax
server-ip {eq | neq} ip-address
no server-ip
Context
[Tree] (debug>app-assure>group>traffic-capture>match server-ip)
Full Context
debug application-assurance group traffic-capture match server-ip
Description
This command configures debugging on a servicer IP address.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
server-kex-list
server-kex-list
Syntax
server-kex-list
Context
[Tree] (config>system>security>ssh server-kex-list)
Full Context
configure system security ssh server-kex-list
Description
This command allows the user to configure SSH KEX algorithms for SR OS as an SSH server.
An empty list is the default list that the SSH KEX advertises. The default list contains the following:
diffie-hellman-group16-sha512
diffie-hellman-group14-sha256
diffie-hellman-group14-sha1
diffie-hellman-group1-sha1
Platforms
All
server-mac-list
server-mac-list
Syntax
server-mac-list
Context
[Tree] (config>system>security>ssh server-mac-list)
Full Context
configure system security ssh server-mac-list
Description
This command allows the user to configure SSH MAC algorithms for SR OS as an SSH server.
Platforms
All
server-policy
server-policy
Syntax
server-policy policy-name
no server-policy
Context
[Tree] (config>service>dynsvc>acct-2 server-policy)
[Tree] (config>service>dynsvc>acct-1 server-policy)
Full Context
configure service dynamic-services dynamic-services-policy accounting-2 server-policy
configure service dynamic-services dynamic-services-policy accounting-1 server-policy
Description
This command configures the radius server policy to be used for dynamic data services RADIUS accounting.
The no form of this command removes the radius server policy from the configuration. This is only allowed when there are no active dynamic data services referencing this policy.
Parameters
- policy-name
-
Specifies the name of the radius server policy.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server-policy
Syntax
server-policy policy-name
no server-policy
Context
[Tree] (config>service>dynsvc>plcy>auth server-policy)
Full Context
configure service dynamic-services dynamic-services-policy authentication server-policy
Description
This command configures the RADIUS server policy to be used for RADIUS authentication of data-triggered dynamic services.
Local authentication and RADIUS authentication are mutually exclusive.
The no form of this command removes the server policy from the configuration and disables RADIUS authentication.
Parameters
- policy-name
-
Specifies a RADIUS server policy name, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
server-port
server-port
Syntax
server-port {eq | neq | gt | lt} port-num
server-port {eq | neq} range start-port-num end-port-num
server-port {eq} {port-num | range start-port-num end-port-num} {first-packet-trusted | first-packet-validate}
server-port {eq | neq} port-list port-list-name
server-port {eq} port-list port-list-name {first-packet-trusted | first-packet-validate}
no server-port
Context
[Tree] (config>app-assure>group>policy>app-filter>entry server-port)
Full Context
configure application-assurance group policy app-filter entry server-port
Description
This command specifies the server TCP or UDP port number to use in the application definition.
The no form of this command restores the default (removes server port number from application criteria defined by this app-filter entry).
Default
no server-port (the server port is not used in the application definition)
Parameters
- eq
-
Specifies that the value configured and the value in the flow are equal.
- neq
-
Specifies that the value configured differs from the value in the flow.
- gt
-
Specifies all port numbers greater than server-port-number match.
- lt
-
Specifies all port numbers less than server-port-number match.
- port-list-name
-
Specifies a named port list containing a set or range of ports.
- port-num
-
Specifies a valid server port number.
- start-port-num, end-port-num
-
Specifies the starting or ending port number.
- Server Port Options:
-
The following options are available:
-
No option specified: TCP/UDP port applications with full signature verification:
-
AA ensures that other applications that can be identified do not run over a well-known port.
-
Application-aware policy applied once signature-based identification completes (likely requiring several packets).
-
-
first-packet-validate: TCP/UDP trusted port applications with signature verification:
-
Application identified using well known TCP/UDP port based filters and re-identified once signature identification completes.
-
AA policy applied from the first packet of a flow while continuing signature-based application identification. Policy re-evaluated once the signature identification completes, allowing to detect improper/unexpected applications on a well-known port.
-
-
first-packet-trusted: TCP/UDP trusted port applications - no signature verification:
-
Application identified using well known TCP/UDP port based filters only.
-
Application Aware policy applied from the first packet of a flow.
-
No signature processing assumes operator/customer trusts that no other applications can run on the well-known TCP/UDP port (statistics collected against trusted_tcp or trusted_udp protocol).
-
-
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
server-port
Syntax
server-port {eq | neq} port-num
no server-port
Context
[Tree] (debug>app-assure>group>traffic-capture>match server-port)
Full Context
debug application-assurance group traffic-capture match server-port
Description
This command configures debugging on a server port.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
server-shutdown
server-shutdown
Syntax
[no] server-shutdown
Context
[Tree] (config>system>security>ssh server-shutdown)
Full Context
configure system security ssh server-shutdown
Description
This command enables the SSH servers running on the system.
Default
no server-shutdown
Platforms
All
server-signature-list
server-signature-list
Syntax
server-signature-list name [create]
no server-signature-list name
Context
[Tree] (config>system>security>tls server-signature-list)
Full Context
configure system security tls server-signature-list
Description
This command configures a list of TLS 1.3-supported signature suite codes for the digital signature that the server sends in a server Hello message.
The no form of this command removes the server signature list.
Parameters
- name
-
Specifies the name of the server signature list, up to 32 characters.
- create
-
Keyword used to create the server signature list.
Platforms
All
server-timeout
server-timeout
Syntax
server-timeout seconds
no server-timeout
Context
[Tree] (config>port>ethernet>dot1x server-timeout)
Full Context
configure port ethernet dot1x server-timeout
Description
This command configures the period during which the router waits for the RADIUS server to respond to its access request message. When this timer expires, the router will re-send the access request message, up to the specified number times.
The no form of this command returns the value to the default.
Default
server-timeout 30
Parameters
- seconds
-
Specifies the server timeout period, in seconds.
Platforms
All
server-tls-profile
server-tls-profile
Syntax
server-tls-profile name [create]
no server-tls-profile name
Context
[Tree] (config system security tls server-tls-profile)
Full Context
configure system security tls server-tls-profile
Description
This command creates a TLS server profile. This profile can be used by applications that support TLS for encryption. The applications should not send any PDUs until the TLS handshake has been successful.
The no form of the command removes the TLS server profile.
Parameters
- name
-
Specifies the name of the TLS server profile, up to 32 characters in length.
- create
-
Keyword used to create the TLS server profile.
Platforms
All
server6
server6
Syntax
server6 ipv6-address
no server6
Context
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host server6)
Full Context
configure subscriber-mgmt local-user-db ipoe host server6
Description
This command allows DHCP6 server selection based on the host entry in LUDB.
The configured DHCP6 server IP address must reference one of the v6 addressees configured under the config>service>vprn>sub-if>grp-if>ipv6>dhcpv6>relay or config>service>ies>sub-if>grp-if>ipv6>dhcpv6>relay context.
The no form of this command reverts to the default.
Parameters
- ipv6-address
-
Specifies the retailer service ID.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
servers
servers
Syntax
servers
Context
[Tree] (config>aaa>radius-srv-plcy servers)
Full Context
configure aaa radius-server-policy servers
Description
Commands in this context configure radius-server-policy parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
service
service
Syntax
service service-id
no service
Context
[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>msap-defaults service)
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>msap-defaults service)
[Tree] (config>service>vpls>sap>msap-defaults service)
Full Context
configure subscriber-mgmt local-user-db ppp host msap-defaults service
configure subscriber-mgmt local-user-db ipoe host msap-defaults service
configure service vpls sap msap-defaults service
Description
This command sets default service for all subscribers created based on trigger packets received on the given capture SAP in case the corresponding VSA is not included in the RADIUS authentication response. This command is applicable to capture SAP only.
The no form of this command reverts to the default.
Parameters
- service-id
-
Specifies the service ID as an integer or a name.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure subscriber-mgmt local-user-db ipoe host msap-defaults service
- configure subscriber-mgmt local-user-db ppp host msap-defaults service
All
- configure service vpls sap msap-defaults service
service
Syntax
service
Context
[Tree] (config>cflowd>collector>exp-filter>if-list service)
Full Context
configure cflowd collector export-filter interface-list service
Description
Commands in this context configure which service interfaces' flow data is being sent to this collector
Platforms
All
service
Syntax
service service-id preference preference
no service service-id
Context
[Tree] (config>router>dns>redirect-vprn service)
Full Context
configure router dns redirect-vprn service
Description
This command configures the VPRN DNS redirection for the specified service.
The no form of this command removes the service from the VPRN DNS resolution configuration.
Parameters
- service-id
-
Specifies the unique service identification number or string identifying the service in the service domain.
- preference
-
Specifies the service preference.
Platforms
All
service
Syntax
[no] service service-id
Context
[Tree] (config>log>services-all-events service)
Full Context
configure log services-all-events service
Description
This command enables access to the entire system-wide set of log events (VPRN and non-VPRN) in the logs configured within the management VPRN specified by the service ID.
The no form of the command enables the display of VPRN events only.
Parameters
- service-id
-
Identifies the VPRN.
Platforms
All
service
Syntax
service service-id
service name service-name
no service
Context
[Tree] (config>system>security>pki>ca-profile>ocsp service)
Full Context
configure system security pki ca-profile ocsp service
Description
This command specifies the service or routing instance that used to contact OCSP responder. This applies to OCSP responders that either configured in CLI or defined in AIA extension of the certificate to be verified.
The responder-url will also be resolved by using the DNS server configured in the configured routing instance.
With VPRN services, the system checks whether the specified service ID or service name is an existing VPRN service at the time of CLI configuration. Otherwise the configuration fails.
Parameters
- service-id
-
Specifies an existing service ID to be used in the match criteria.
This variant of this command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic). The service name service-name variant can be used in all configuration modes.
- name service-name
-
Identifies the service, up to 64 characters.
Platforms
All
service-activation-testhead
service-activation-testhead
Syntax
service-activation-testhead service-test service-test-name { start | stop}
Context
[Tree] (oam service-activation-testhead)
Full Context
oam service-activation-testhead
Description
This command start or stops a service activation testhead service test.
Parameters
- service-test-name
-
Specifies a preconfigured service test name, up to 64 characters.
- start
-
Keyword to start a service test. The software allows only one instance of a service test to be run for the specified service-test-name. If the user attempts to start another instance of a service test for the same service-test-name while the current instance is still running, the following error message is displayed: "MINOR: CLI #238 Configuration change failed validation - service test is already executing”.
- stop
-
Keyword to stop a service test. If the user attempts to stop a service test that is already complete, the following error message is displayed: "MINOR: CLI #238 Configuration change failed validation - service test is not executing”.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
service-activation-testhead
Syntax
service-activation-testhead
Context
[Tree] (config>test-oam service-activation-testhead)
Full Context
configure test-oam service-activation-testhead
Description
Commands in this context configure service activation launch parameters for the testhead function. Service Activation Testhead is supported on FP4 and later platforms.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
service-carving
service-carving
Syntax
service-carving
Context
[Tree] (config>service>system>bgp-evpn>eth-seg service-carving)
Full Context
configure service system bgp-evpn ethernet-segment service-carving
Description
Commands in this context configure service-carving in the Ethernet-Segment. The service-carving algorithm determines which PE is the Designated Forwarder (DF) in a specified Ethernet Segment and for a specific service.
Platforms
All
service-context-id
service-context-id
Syntax
service-context-id name
no service-context-id
Context
[Tree] (config>subscr-mgmt>diam-appl-plcy>gy>include-avp service-context-id)
Full Context
configure subscriber-mgmt diameter-application-policy gy include-avp service-context-id
Description
This command configures the value of the service context ID AVP.
The no form of this command returns the command to the default setting.
Parameters
- name
-
Specifies the service context ID AVP value, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
service-id
service-id
Syntax
service-id service-id
no service-id
Context
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>host-ident service-id)
Full Context
configure subscriber-mgmt local-user-db ipoe host host-identification service-id
Description
This command specifies the service ID to match for a host lookup. When the LUDB is accessed using a DHCPv4 server, the SAP ID is matched against the Nokia vendor-specific sub-option in DHCP Option 82.
The no form of this command removes the service ID from the configuration.
Parameters
- service-id
-
Specifies an existing service ID or service name.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
service-id
Syntax
[no] service-id
Context
[Tree] (config>subscr-mgmt>msap-policy>vpls-only>dhcp>option>vendor-specific-option service-id)
[Tree] (config>service>ies>sub-if>grp-if>dhcp>option>vendor service-id)
[Tree] (config>service>vpls>sap>dhcp>option>vendor service-id)
[Tree] (config>service>vprn>sub-if>grp-if>dhcp>option>vendor service-id)
[Tree] (config>service>vprn>if>dhcp>option>vendor service-id)
Full Context
configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp option vendor-specific-option service-id
configure service ies subscriber-interface group-interface dhcp option vendor-specific-option service-id
configure service vpls sap dhcp option vendor-specific-option service-id
configure service vprn subscriber-interface group-interface dhcp option vendor-specific-option service-id
configure service vprn interface dhcp option vendor-specific-option service-id
Description
This command enables the sending of the service ID in the Nokia vendor-specific sub-option of the DHCP relay packet.
The no form of this command disables the sending of the service ID in the Nokia vendor-specific sub-option of the DHCP relay packet.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface dhcp option vendor-specific-option service-id
- configure service vprn subscriber-interface group-interface dhcp option vendor-specific-option service-id
- configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp option vendor-specific-option service-id
All
- configure service vprn interface dhcp option vendor-specific-option service-id
- configure service vpls sap dhcp option vendor-specific-option service-id
service-id
Syntax
[no] service-id
Context
[Tree] (config>router>if>dhcp>option>vendor-specific-option service-id)
Full Context
configure router interface dhcp option vendor-specific-option service-id
Description
This command enables the sending of the service ID in the Nokia vendor-specific sub-option of the DHCP relay packet.
The no form of this command disables the sending of the service ID in the Nokia vendor-specific sub-option of the DHCP relay packet.
Default
no service-id
Platforms
All
service-id
Syntax
service-id service-id
no service-id
Context
[Tree] (config>redundancy>mc>peer>mcr>l3-ring>ibc service-id)
[Tree] (config>redundancy>mc>peer>mcr>ring>ibc service-id)
Full Context
configure redundancy multi-chassis peer mc-ring l3-ring in-band-control-path service-id
configure redundancy multi-chassis peer mc-ring ring in-band-control-path service-id
Description
This command specifies the service ID if the interface used for the inband control connection belongs to a VPRN service. If not specified, the service-id is zero and the interface must belong to the Base router. This command supersedes the configuration of a service name.
The no form of this command removes the service ID from the IBC configuration.
Parameters
- service-id
-
Specifies a service ID or an existing service name.
Platforms
All
service-id
Syntax
service-id service-id
no service-id
Context
[Tree] (config>redundancy>mc>peer>mcr>l3-ring>node>cv service-id)
[Tree] (config>redundancy>mc>peer>mcr>node>cv service-id)
Full Context
configure redundancy multi-chassis peer mc-ring l3-ring ring-node connectivity-verify service-id
configure redundancy multi-chassis peer mc-ring ring ring-node connectivity-verify service-id
Description
This command specifies the service ID of the SAP used for the ring-node connectivity verification of this ring node. This command supersedes the configuration of a service name.
The no form of the command removes the service ID from the CV configuration.
Default
no service-id
Parameters
- service-id
-
Specifies the service ID or an existing service name.
Platforms
All
service-id
Syntax
service-id
Context
[Tree] (config>service>system>bgp-evpn>eth-seg service-id)
Full Context
configure service system bgp-evpn ethernet-segment service-id
Description
This command enables the service-id context within the virtual ethernet-segment configuration.
Platforms
All
service-id-lag-hashing
service-id-lag-hashing
Syntax
[no] service-id-lag-hashing
Context
[Tree] (config>system>load-balancing service-id-lag-hashing)
Full Context
configure system load-balancing service-id-lag-hashing
Description
This command enables enhanced VLL LAG service ID hashing. This command improves the LAG spraying of VLL service packets and is applied only when both ECMP and LAG hashing are performed by the same router. By default, the ECMP interface and LAG link for all packets on the VLL service are selected based on a direct modulo operation of the service ID. This command enhances distribution and hashes the service ID prior to the LAG link modulo operation when an ECMP link modulo operation is performed.
The no form of the command preserves the default behavior of VLL LAG service ID hashing.
Default
no service-id-lag-hashing
Platforms
All
service-id-range
service-id-range
Syntax
service-id-range start service-id end service-id
no service-id-range
Context
[Tree] (config>service>md-auto-id service-id-range)
Full Context
configure service md-auto-id service-id-range
Description
This command specifies the range of IDs used by SR OS to automatically assign an ID to services that are created in model-driven interfaces without an ID explicitly specified by the user or client.
A service created with an explicitly-specified ID cannot use an ID in this range. In the classic CLI and SNMP, the ID range cannot be changed while objects exist inside the previous or new range. In MD interfaces, the range can be changed, which causes any previously existing objects in the previous ID range to be deleted and re-created using a new ID in the new range.
The no form of this command removes the range values.
See the config>service md-auto-id command for further details.
Default
no service-id-range
Parameters
- start service-id
-
Specifies the lower value of the ID range. The value must be less than or equal to the end value.
- end service-id
-
Specifies the upper value of the ID range. The value must be greater than or equal to the start value.
Platforms
All
service-mtu
service-mtu
Syntax
service-mtu octets
no service-mtu
Context
[Tree] (config>service>template>vpls-template service-mtu)
[Tree] (config>service>vpls service-mtu)
Full Context
configure service template vpls-template service-mtu
configure service vpls service-mtu
Description
This command configures the service payload (Maximum Transmission Unit – MTU), in bytes, for the service. This MTU value overrides the service-type default MTU. The service-mtu defines the payload capabilities of the service. It is used by the system to validate the SAP and SDP binding’s operational state within the service.
The service MTU and a SAP’s service delineation encapsulation overhead (4 bytes for a dot1q tag) is used to derive the required MTU of the physical port or channel on which the SAP was created. If the required payload is larger than the port or channel MTU, then the SAP will be placed in an inoperative state. If the required MTU is equal to or less than the port or channel MTU, the SAP will be able to transition to the operative state.
When binding an SDP to a service, the service MTU is compared to the path MTU associated with the SDP. The path MTU can be administratively defined in the context of the SDP. The default or administrative path MTU can be dynamically reduced due to the MTU capabilities discovered by the tunneling mechanism of the SDP or the egress interface MTU capabilities based on the next hop in the tunnel path. If the service MTU is larger than the path MTU, the SDP binding for the service will be placed in an inoperative state. If the service MTU is equal to or less than the path MTU, then the SDP binding will be placed in an operational state.
If a service MTU, port or channel MTU, or path MTU is dynamically or administratively modified, then all associated SAP and SDP binding operational states are automatically re-evaluated.
For i-VPLS and Epipes bound to a b-VPLS, the service-mtu must be at least 18 bytes smaller than the b-VPLS service MTU to accommodate the PBB header.
The no form of this command returns the default service-mtu for the indicated service type to the default value.
Default
service-mtu 1514
Parameters
- octets
-
The following table displays MTU values for specific VC types.
Table 3. MTU Values VC-Type
Example Service MTU
Advertised MTU
Ethernet
1514
1500
Ethernet (with preserved dot1q)
1518
1504
VPLS
1514
1500
VPLS (with preserved dot1q)
1518
1504
VLAN (dot1p transparent to MTU value)
1514
1500
VLAN (qinq with preserved bottom qtag)
1518
1504
The size of the MTU in octets, expressed as a decimal integer
Platforms
All
service-mtu
Syntax
service-mtu octets
no service-mtu
Context
[Tree] (config>service>cpipe service-mtu)
[Tree] (config>service>epipe service-mtu)
[Tree] (config>service>ipipe service-mtu)
Full Context
configure service cpipe service-mtu
configure service epipe service-mtu
configure service ipipe service-mtu
Description
This command configures the service payload in bytes, for the service. The configured Maximum Transmission Unit (MTU) value overrides the service-type default MTU. The service-mtu command defines the payload capabilities of the service. It is used by the system to validate the operational state of the SAP and SDP binding within the service.
The service MTU and a SAP’s service delineation encapsulation overhead (4 bytes for a dot1q tag) is used to derive the required MTU of the physical port or channel on which the SAP was created. If the required payload is larger than the port or channel MTU, the SAP is placed in an inoperative state. If the required MTU is equal to or less than the port or channel MTU, the SAP transitions to the operative state.
When binding an SDP to a service, the service MTU is compared to the path MTU associated with the SDP. The path MTU can be administratively defined in the context of the SDP. The default or administrative path MTU can be dynamically reduced due to the MTU capabilities discovered by the tunneling mechanism of the SDP or the egress interface MTU capabilities based on the next hop in the tunnel path. If the service MTU is larger than the path MTU, the SDP binding for the service is placed in an inoperative state. If the service MTU is equal to or less than the path MTU, the SDP binding is placed in an operational state.
If a service MTU, port or channel MTU, or path MTU is dynamically or administratively modified, all associated SAP and SDP binding operational states are automatically reevaluated.
Binding operational states are automatically reevaluated.
For I-VPLS and Epipes bound to a B-VPLS, the service MTU must be at least 18 bytes smaller than the B-VPLS service MTU to accommodate the PBB header.
Because this connects a Layer 2 to a Layer 3 service, adjust the service MTU under the Epipe service. The MTU that is advertised from the Epipe side is service MTU minus EtherHeaderSize.
In the configure>service>epipe context, the adv-service-mtu command can be used to override the configured MTU value used in T-LDP signaling to the far-end of an Epipe spoke-sdp. The adv-service-mtu command is also used to validate the value signaled by the far-end PE. For more information, see adv-service-mtu command.
The no form of this command returns the default service-mtu for the indicated service type to the default value.
By default, if no service-mtu is configured, the MTU value is (1514 - 14) = 1500.
Default
no service-mtu 1508 (for Apipe, Fpipe)
no service-mtu 1500 (for Ipipe)
no service-mtu 1524 (for Epipe)
MTU Values lists the MTU values for specific VC types.
SAP VC-Type |
Example: Service MTU |
Advertised MTU |
---|---|---|
Ethernet |
1514 |
1500 |
Ethernet (with preserved dot1q) |
1518 |
1504 |
VPLS |
1514 |
1500 |
VPLS (with preserved dot1q) |
1518 |
1504 |
VLAN (dot1p transparent to MTU value) |
1514 |
1500 |
VLAN (qinq with preserved bottom qtag) |
1518 |
1504 |
Parameters
- octets
-
Specifies the MTU size in octets, expressed as a decimal integer.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service cpipe service-mtu
All
- configure service ipipe service-mtu
- configure service epipe service-mtu
service-name
service-name
Syntax
service-name service-name
no service-name
Context
[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>host-ident service-name)
Full Context
configure subscriber-mgmt local-user-db ppp host host-identification service-name
Description
This command specifies the service name tag in PADI and/or PADR packets to match for PPPoE hosts.
This command is only used when service-name is configured as one of the match-list parameters.
The no form of this command removes the service-name from the configuration.
Parameters
- service-name
-
Specifies a PPPoE service name, up to 255 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
service-name
Syntax
service-name service-name
no service-name
Context
[Tree] (config>redundancy>mc>peer>mc>l3-ring>ibc service-name)
[Tree] (config>redundancy>mc>peer>mcr>ring>ibc service-name)
Full Context
configure redundancy multi-chassis peer multi-chassis l3-ring ibc service-name
configure redundancy multi-chassis peer mc-ring ring in-band-control-path service-name
Description
This command specifies the service name if the interface used for the inband control connection belongs to a VPRN service. If not specified the interface must belong to the Base router. This command supersedes the configuration of a service ID.
The no form of this command removes the service name from the IBC configuration.
Default
no service-name
Parameters
- service-name
-
Specifies the service name, up to 64 characters.
Platforms
All
service-name
Syntax
service-name service-name
no service-name
Context
[Tree] (config>redundancy>mc>peer>mcr>l3-ring>cv service-name)
[Tree] (config>redundancy>mc>peer>mcr>node>cv service-name)
Full Context
configure redundancy multi-chassis peer mc-ring l3-ring ring-node connectivity-verify service-name
configure redundancy multi-chassis peer mc-ring ring ring-node connectivity-verify service-name
Description
This command specifies the service name of the SAP used for ring-node connectivity verification of this ring node. This command supersedes the configuration of a service ID.
The no form of this command removes the service name from the CV configuration.
Default
no service-name
Parameters
- service-name
-
Specifies a service name, up to 64 characters.
Platforms
All
service-range
service-range
Syntax
service-range service-id service-id
no service-range
Context
[Tree] (config>service>dynsvc service-range)
Full Context
configure service dynamic-services service-range
Description
This command specifies the service ID range that is reserved for dynamic data service creation. The range cannot overlap with existing static configured services. Once configured with active dynamic services in the range, the service range can only be extended at the end.
The no form of this command removes the service-range from the configuration. This is only allowed when there are no active dynamic data services.
When no service-range is specified, the setup of dynamic data services fails.
Parameters
- service-id
-
Specifies the start and end service IDs to define the service range for dynamic services.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
service-range
Syntax
service-range svc-id [to svc-id]
no service-range svc-id
Context
[Tree] (config>service>system>bgp-evpn>eth-seg>service-id service-range)
Full Context
configure service system bgp-evpn ethernet-segment service-id service-range
Description
This command associates a specified service range to a virtual ES, along with the network-interconnect-vxlan command. Up to eight service ranges per VXLAN instance can be configured, where the ranges may overlap. The service range may be configured before the service.
The no form of this command removes the association of the service range to the virtual ES for the configured VXLAN instance.
Parameters
- svc-id
-
Specifies which service range will be associated with the virtual Ethernet Segment.
Platforms
All
service-range
Syntax
service-range startid-endid [start-vlan-id startvid]
no service-range
Context
[Tree] (config>service>vpls>vpls-group service-range)
Full Context
configure service vpls vpls-group service-range
Description
This command configures the service ID and implicitly the VLAN ID ranges to be used as input variables for related VPLS and SAP templates to pre-provision "data” VPLS instances and related SAPs using the service ID specified in the command. If the start-vlan-id is not specified then the service-range values are used for vlan-ids. The data SAPs will be instantiated on all the ports used to specify SAP instances under the related control VPLS.
Modifications of the service id and vlan ranges are allowed with the following restrictions.
-
service-range increase can be achieved in two ways:
-
Allowed when vpls-group is in shutdown state
-
By creating a new vpls-group
-
-
service-range decrease can be achieved in two ways:
-
Allowed when vpls-group is in shutdown state; when shutdown command is executed the associated service instances are deleted.
-
Allowed when vpls-group is in no shutdown state and has completed successfully instantiating services.
-
In both cases, only the services that do not have user configured SAPs will be deleted. Otherwise the above commands are rejected. Existing declarations or registrations do not prevent service deletion.
-
-
start-vlan-id change can be achieved in two ways:
-
Allowed when vpls-group is in shutdown state
-
At the time of range decrease by increasing the start-vlan-id which can be done when vpls-group is in no shutdown state and has completed successfully instantiating services
-
The no form of this command removes the specified ranges and deletes the pre-provisioned VPLS instances and related SAPs. The command will fail if any of the VPLS instances in the affected ranges have a provisioned SAP.
Default
no service-range
Parameters
- startid-endid
-
Specifies the range of service IDs
- startvid
-
Specifies the starting VLAN ID; it provides a way to set aside a service ID range that is not the same as the VLAN range and allows for multiple MVRP control-VPLSs to control same VLAN range on different ports.
Platforms
All
service-request
service-request
Syntax
[no] service-request
Context
[Tree] (config>subscr-mgmt>acct-plcy>triggered-updates>gc service-request)
Full Context
configure subscriber-mgmt radius-accounting-policy triggered-updates gtp-change service-request
Description
This command configures the router to send an interim accounting update when a service request (reactivation) procedure is performed.
The no form of the command configures the router not to send an interim accounting update when a service request (reactivation) procedure is performed.
Default
no service-request
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
service-stream
service-stream
Syntax
service-stream stream-id [create]
no service-stream stream-id
Context
[Tree] (config>test-oam>sath>svc-test service-stream)
Full Context
configure test-oam service-activation-testhead service-test service-stream
Description
This command configures a service stream profile for the specified service test.
A service test must be in a shutdown state before a new service stream can be configured or before parameters can be modified on an existing stream. All active tests that reference the specified service test must be stopped before running the shutdown command.
The no form of this command removes the specified profile.
Parameters
- stream-id
-
Specifies an identifier for the service stream profile.
- create
-
Mandatory keyword to instantiate the template.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
service-stream-completion-notification
service-stream-completion-notification
Syntax
[no] service-stream-completion-notification
Context
[Tree] (config>test-oam>sath>svc-test>svc-stream service-stream-completion-notification)
Full Context
configure test-oam service-activation-testhead service-test service-stream service-stream-completion-notification
Description
This command enables the test completion notification for a service stream.
The no form of this command disables the test completion notification for a service stream.
Default
no service-stream-completion-notification
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
service-test
service-test
Syntax
service-test name [create]
no service-test
Context
[Tree] (config>test-oam>sath service-test)
Full Context
configure test-oam service-activation-testhead service-test
Description
This command creates a service test. Commands in this context configure the service test parameters.
The service test must be in the shutdown state before any commands under the service-test context can be configured or modified. If the service test is in the no shutdown state, command parameters cannot be modified.
The no form of this command removes the service test.
Parameters
- name
-
Specifies a name, up to 64 characters, for the service test profile.
- create
-
Mandatory keyword to instantiate the template.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
service-test-completion-notification
service-test-completion-notification
Syntax
[no] service-test-completion-notification
Context
[Tree] (config>test-oam>sath>svc-test service-test-completion-notification)
Full Context
configure test-oam service-activation-testhead service-test service-test-completion-notification
Description
This command enables the test completion notification for a service test.
The no form of this command disables the service test completion notification.
Default
no service-test-completion-notification
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
services-all-events
services-all-events
Syntax
services-all-events
Context
[Tree] (config>log services-all-events)
Full Context
configure log services-all-events
Description
Commands in this context control which log events are present in VPRN logs.
By default, the event streams for VPRN logs contain only events that are associated with the particular VPRN.
Access to the entire system-wide set of events (VPRN and non-VPRN) can be enabled using the services-all-events command.
Platforms
All
serving-network
serving-network
Syntax
serving-network mcc mcc-value mnc mnc-value
no serving-network
Context
[Tree] (config>subscr-mgmt>gtp serving-network)
Full Context
configure subscriber-mgmt gtp serving-network
Description
This command configures the Operator Identifier part (MCC and MNC) of the APN.
The no form of this command removes the values from the profile.
Default
no serving-network
Parameters
- mcc-value
-
Specifies the Mobile Country Code (MCC) portion of the Serving Network.
- mnc-value
-
Specifies the Mobile Network Code (MNC) portion of the Serving Network.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
session
session
Syntax
session
Context
[Tree] (config>isa>video-group>watermark session)
Full Context
configure isa video-group watermark session
Description
Commands in this context configure watermark parameters based on the session.
Platforms
7450 ESS, 7750 SR, 7750 SR-s
session
Syntax
session session-name [test-family [ ethernet | ip | mpls] [session-type {proactive | on-demand}] create]
no session session-name
Context
[Tree] (config>oam-pm session)
Full Context
configure oam-pm session
Description
This command creates the individual session containers that houses the test specific configuration parameters. Since this session context provides only a container abstract to house the individual test functions, it cannot be shut down. Individual tests sessions within the container may be shut down. No values, parameters, or configuration within this context may be changed if any individual test is active. Changes may only be made when all tests within the context are shut down. The only exception to this is the description value.
The no form of this command deletes the session.
Parameters
- session-name
-
Specifies the session name, up to 32 characters.
- test-family
-
Indicates the type family and sets the context for the individual parameters.
- session-type
-
Specifies how to set the Type bit in the Flags byte, and influences how different test criteria may be applied to the individual test. Not all test families carry this information in the PDU.
- create
-
Creates the PM session.
Platforms
All
session-accounting
session-accounting
Syntax
session-accounting [interim-update] [host-update]
no session-accounting
Context
[Tree] (config>subscr-mgmt>acct-plcy session-accounting)
Full Context
configure subscriber-mgmt radius-accounting-policy session-accounting
Description
This command enables per session accounting mode. In per session accounting mode, the acct-session-id is generated per session. This acct-session-id is uniformly included in all accounting messages (START/INTERIM-UPDATE/STOP) and it can be included in RADIUS Access-Request message.
This accounting mode of operation can be used only in PPPoE environment with dual-stack host in which case both hosts (IPv4 and IPv6) are considered part of the same session. In addition to regular interim-updates, triggered interim-updates are sent by a host joining or leaving the session.
When an IPv4/v6 address is allocated, or released from a dual-stack host, a triggered interim-update message is immediately sent. This triggered interim-update message reflects the change in the IP address. The triggered interim-update has no effect on the interval at which the regular interim updates are scheduled.
Accounting counters are based on the queue counters and as such are aggregated for all host sharing the queues within an sla-profile instance.
CoA and LI is supported based on the acct-session-id of the session.
The no form of this command reverts to the default.
Parameters
- interim-update
-
Specifies to enable interim updates. Without this keyword only START and STOP accounting messages are generated when the session is established or terminated. This is equivalent to a time-based accounting where only the duration of the session is required.
- host-update
-
Indicates that host updates messages are sent. INTERIM-UPDATE messages can be generated (volume based accounting) by selecting this keyword.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
session-assign-method
session-assign-method
Syntax
session-assign-method {weighted | weighted-random}
no session-assign-method
Context
[Tree] (config>service>vprn>l2tp session-assign-method)
[Tree] (config>router>l2tp session-assign-method)
Full Context
configure service vprn l2tp session-assign-method
configure router l2tp session-assign-method
Description
This command configures the session assignment method.
The no form of this command reverts to the default value.
Default
no session-assign-method
Parameters
- weighted
-
Specifies that the sessions are shared between the available tunnels. If necessary, new tunnels are set up until the maximum number is reached. The distribution aims at an equal ratio of the actual number of sessions to the maximum number of sessions.
- weighted-random
-
Enhances the weighted algorithm such that when there are multiple tunnels with an equal number of sessions (equal weight), LAC randomly selects a tunnel.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
session-assign-method
Syntax
session-assign-method {existing-first | weighted | weighted-random}
no session-assign-method
Context
[Tree] (config>service>vprn>l2tp>group session-assign-method)
[Tree] (config>router>l2tp>group session-assign-method)
Full Context
configure service vprn l2tp group session-assign-method
configure router l2tp group session-assign-method
Description
This command specifies how new sessions are assigned to one of the set of suitable tunnels that are available or could be made available.
The no form of this command reverts to the default value.
Default
session-assign-method existing-first
Parameters
- existing-first
-
Specifies that all new sessions are placed by preference in the existing tunnels.
- weighted
-
Specifies that the sessions are shared between the available tunnels. If necessary, new tunnels are set up until the maximum number is reached. The distribution aims at an equal ratio of the actual number of sessions to the maximum number of sessions.
- weighted-random
-
Enhances the weighted algorithm such that when there are multiple tunnels with an equal number of sessions (equal weight), LAC randomly selects a tunnel.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
session-filter
session-filter
Syntax
session-filter session-filter-name
no session-filter
Context
[Tree] (config>app-assure>group>policy>aqp>entry>action session-filter)
Full Context
configure application-assurance group policy app-qos-policy entry action session-filter
Description
This command specifies the Application-Assurance session filter that will be evaluated. If no session filters are specified then no session filters will be evaluated.
Default
no session-filter
Parameters
- session-filter-name
-
Specifies the session filter to be applied.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
session-filter
Syntax
session-filter session-filter-name [create]
no session-filter session-filter-name
Context
[Tree] (config>app-assure>group session-filter)
Full Context
configure application-assurance group session-filter
Description
This command creates a session filter.
Parameters
- session-filter-name
-
Creates a session filter name up to 32 characters.
- create
-
Keyword used to create the session filter.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
session-filter
Syntax
session-filter session-filter-name
Context
[Tree] (config>app-assure>group>statistics>tca session-filter)
Full Context
configure application-assurance group statistics threshold-crossing-alert session-filter
Description
This command configures TCA generation for a session filter.
Parameters
- session-filter-name
-
Specifies the name of the session filter, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
session-filter-stats
session-filter-stats
Syntax
[no] session-filter-stats
Context
[Tree] (config>app-assure>group>statistics>aa-admit-deny session-filter-stats)
Full Context
configure application-assurance group statistics aa-admit-deny session-filter-stats
Description
This command configures whether to include or exclude session filter admit-deny statistics in accounting records.
Default
no session-filter-stats
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
session-hold-time
session-hold-time
Syntax
session-hold-time remaining-lease-time
session-hold-time seconds
no session-hold-time
Context
[Tree] (config>subscr-mgmt>gtp>peer-profile session-hold-time)
Full Context
configure subscriber-mgmt gtp peer-profile session-hold-time
Description
This command configures, in seconds, the time that a GTP session context is held after the corresponding UE is disconnected. If the same UE re-connects to this system before this time has elapsed, its GTP session context is re-used. When the timer expires, the GTP session context is cleared.
The no form of this command reverts to the default.
Default
session-hold-time 30
Parameters
- remaining-lease-time
-
Specifies that the timer is equal to the UE’s DHCP remaining lease time.
- seconds
-
Specifies the time, in seconds, to hold a GTP session after its UE is disconnected.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
session-id
session-id
Syntax
session-id session-id
no session-id
Context
[Tree] (config>li>li-source>nat>dslite-lsn-sub session-id)
[Tree] (config>li>li-source>nat>nat64-lsn-sub session-id)
[Tree] (config>li>li-source>nat>ethernet-header session-id)
[Tree] (config>li>li-source>nat>classic-lsn-sub session-id)
[Tree] (config>li>li-source>nat>l2-aware-sub session-id)
Full Context
configure li li-source nat dslite-lsn-sub session-id
configure li li-source nat nat64-lsn-sub session-id
configure li li-source nat ethernet-header session-id
configure li li-source nat classic-lsn-sub session-id
configure li li-source nat l2-aware-sub session-id
Description
This command configures the session ID that is inserted into the packet header for all mirrored packets of the associated LI source entry. This session ID can be used (for example by a downstream LI gateway) to identify the particular LI session to which the packet belongs.
The session ID is only valid and used for mirror services that are configured with ip-udp-shim routable encapsulation (config>mirror>mirror-dest>encap>ip-gre-shim).
For all types of li-source entries (filter, nat, sap, or subscriber), when the mirror service is configured with ip-udp-shim routable encapsulation, a session-id field (as part of the routable encapsulation) is always present in the mirrored packets. If there is no session-id configured for an li-source entry, then the default value is inserted. When a mirror service is configured with ip-gre routable encapsulation, no session-id is inserted and none should be specified against the li-source entries.
The no form of this command removes the session-id from the configuration which results in the default value being used.
Default
no session-id (an id of 0, or no id)
Parameters
- session-id
-
Specifies the value to insert into the header of the mirrored packets.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
session-id
Syntax
session-id [session-id]
no session-id
Context
[Tree] (config>li>li-source>wlan-gw session-id)
Full Context
configure li li-source wlan-gw session-id
Description
This command configures the session ID inserted in the packet header for all mirrored packets of the associated li-source. When the mirror-service is configured with the ip-udp-shim routable encapsulation, session-id field (as part of the routable encapsulation) is always present in the mirrored packets. The session-id can be used by the LIG to identify a particular LI session to which the packet belongs.
Parameters
- session-id
-
Specifies the session ID inserted in the LI header.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
session-id
Syntax
session-id session-id
no session-id
Context
[Tree] (debug>oam>build-packet>packet>field-override>header>l2tp session-id)
[Tree] (config>test-oam>build-packet>header>l2tp session-id)
Full Context
debug oam build-packet packet field-override header l2tp session-id
configure test-oam build-packet header l2tp session-id
Description
This command defines the session ID to be used in the L2TP header.
The no form of this command removes the session ID value.
Default
session-id 0
Parameters
- session-id
-
Specifies the L2TP session ID to be used in the L2TP header.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
session-id-format
session-id-format
Syntax
session-id-format {description | number}
no session-id-format
Context
[Tree] (config>subscr-mgmt>acct-plcy session-id-format)
Full Context
configure subscriber-mgmt radius-accounting-policy session-id-format
Description
This command specifies the format for the acct-session-id attribute used in RADIUS accounting requests.
The no form of this command reverts to the default.
Default
session-id-format description
Parameters
- description
-
Specifies to use a string containing following information: <subscriber>@<sap-id>@<SLA-profile>_<creation-time>
- number
-
Specifies to use a unique number generated by the OS to identify a given session.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
session-key
session-key
Syntax
session-key sap mac [cid] [rid]
no session-key
Context
[Tree] (config>subscr-mgmt>ipoe-plcy session-key)
Full Context
configure subscriber-mgmt ipoe-session-policy session-key
Description
This command configures the key to logically group subscriber hosts that belong to the same dual stack end device in an IPoE session.
The SAP and MAC address are always part of the IPoE session key. Optionally the Circuit-Id/Interface-Id or Remote-Id can be added to the session key.
The no form of this command reverts to the default.
Default
session-key sap mac
Parameters
- sap
-
Includes the SAP as part of the IPoE session key. The sap parameter is mandatory and cannot be removed from the key.
- mac
-
Includes the MAC address as part of the IPoE session key. The mac parameter is mandatory and cannot be removed from the key.
- cid
-
Optionally adds the DHCPv4 Relay Agent Circuit-Id (Option 82, sub Option 1) and DHCPv6 Interface-Id (Option 18) field to the IPoE session key.
- rid
-
Optionally adds the DHCPv4 Relay Agent Remote-Id (Option 82, sub Option 2) and DHCPv6 Remote-Id (Option 37) field to the IPoE session key. For DHCPv6, the enterprise number is excluded from the key.
sap and mac are mandatory parameters while cid and rid are optional and mutually exclusive. Valid IPoE session key parameters are: sap mac, sap mac cid and sap mac rid.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
session-limit
session-limit
Syntax
session-limit session-limit
session-limit unlimited
no session-limit
Context
[Tree] (config>service>vprn>l2tp>group session-limit)
[Tree] (config>service>vprn>l2tp>group>tunnel session-limit)
[Tree] (config>router>l2tp>group session-limit)
[Tree] (config>router>l2tp session-limit)
[Tree] (config>service>vprn>l2tp session-limit)
[Tree] (config>router>l2tp>group>tunnel session-limit)
Full Context
configure service vprn l2tp group session-limit
configure service vprn l2tp group tunnel session-limit
configure router l2tp group session-limit
configure router l2tp session-limit
configure service vprn l2tp session-limit
configure router l2tp group tunnel session-limit
Description
This command configures the session limit.
This command configures the L2TP session limit for the router. The value controls how many L2TP sessions will be allowed within a given context (system, group, tunnel).
L2TP is connection-oriented. The L2TP Network Server (LNS) and LAC maintain state for each call that is initiated or answered by an LAC. An L2TP session is created between the LAC and LNS when an end-to-end PPP connection is established between a remote system and the LNS. Datagrams related to the PPP connection are sent over the tunnel between the LAC and LNS. There is a one-to-one relationship between established L2TP sessions and their associated calls.
The no form of this command removes the value from the configuration.
Default
no session-limit
Parameters
- session-limit
-
Specifies the allowed number of sessions within the given context.
- unlimited
-
Specifies to use the maximum number of sessions available.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
session-limit
Syntax
session-limit session-limit
no session-limit
Context
[Tree] (config>service>vprn>sub-if>grp-if>pppoe session-limit)
[Tree] (config>service>ies>sub-if>grp-if>pppoe session-limit)
[Tree] (config>service>ies>sub-if>pppoe session-limit)
[Tree] (config>service>vprn>sub-if>pppoe session-limit)
Full Context
configure service vprn subscriber-interface group-interface pppoe session-limit
configure service ies subscriber-interface group-interface pppoe session-limit
configure service ies subscriber-interface pppoe session-limit
configure service vprn subscriber-interface pppoe session-limit
Description
This command specifies the number of PPPoE hosts allowed for this group interface.
The no form of this command reverts to the default.
Default
session-limit 1
Parameters
- session-limit
-
Specifies the number of PPPoE hosts allowed.
Note:The operational maximum value may be smaller due to equipped hardware dependencies.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
session-limit
Syntax
session-limit session-limit
no session-limit
Context
[Tree] (config>service>vprn>sub-if>ipoe-session session-limit)
[Tree] (config>service>ies>sub-if>grp-if>ipoe-session session-limit)
[Tree] (config>service>ies>sub-if>ipoe-session session-limit)
[Tree] (config>service>vprn>sub-if>grp-if>ipoe-session session-limit)
Full Context
configure service vprn subscriber-interface ipoe-session session-limit
configure service ies subscriber-interface group-interface ipoe-session session-limit
configure service ies subscriber-interface ipoe-session session-limit
configure service vprn subscriber-interface group-interface ipoe-session session-limit
Description
This command specifies the number of IPoE sessions allowed for this group interface or retail subscriber interface.
The no form of this command reverts to the default.
Default
session-limit 1
Parameters
- session-limit
-
Specifies the number of allowed IPoE sessions.
Note:The operational maximum value may be smaller due to equipped hardware dependencies.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
session-limit
Syntax
session-limit limit
Context
[Tree] (config>li>x-interfaces>x3 session-limit)
Full Context
configure li x-interfaces x3 session-limit
Description
This command configures the number of X3 sessions that the system should initiate to the LIC.
The no form of this command reverts to the default.
Default
session-limit 32
Parameters
- limit
-
Specifies the session limit.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
session-limits
session-limits
Syntax
session-limits
Context
[Tree] (config>isa>wlan-gw-group>nat session-limits)
Full Context
configure isa wlan-gw-group nat session-limits
Description
Commands in this context configure session limits for the ISA WLAN gateway NAT group.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
session-limits
Syntax
session-limits
Context
[Tree] (config>isa>nat-group session-limits)
Full Context
configure isa nat-group session-limits
Description
Commands in this context configure session limits for the ISA NAT group.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
session-limits
Syntax
session-limits
Context
[Tree] (config>service>nat>up-nat-policy session-limits)
[Tree] (config>service>nat>firewall-policy session-limits)
[Tree] (config>service>nat>nat-policy session-limits)
Full Context
configure service nat up-nat-policy session-limits
configure service nat firewall-policy session-limits
configure service nat nat-policy session-limits
Description
Commands in this context configure session limits for the NAT policy.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service nat nat-policy session-limits
- configure service nat up-nat-policy session-limits
7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service nat firewall-policy session-limits
session-limits
Syntax
[no] session-limits
Context
[Tree] (config>subscr-mgmt>sub-profile session-limits)
[Tree] (config>subscr-mgmt>sla-profile session-limits)
Full Context
configure subscriber-mgmt sub-profile session-limits
configure subscriber-mgmt sla-profile session-limits
Description
Commands in this context configure session limits per SLA profile instance or per subscriber.
The no form of this command removes the configuration.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
session-messages
session-messages
Syntax
[no] session-messages
Context
[Tree] (debug>diam>application>policy session-messages)
Full Context
debug diameter application policy session-messages
Description
This command debugs session messages.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
session-optimized-stop
session-optimized-stop
Syntax
[no] session-optimized-stop
Context
[Tree] (config>subscr-mgmt>sub-prof>rad-acct session-optimized-stop)
Full Context
configure subscriber-mgmt sub-profile radius-accounting session-optimized-stop
Description
This command optimizes a RADIUS Accounting Stop message for a PPPoE session termination (specifically for session accounting mode when the host update is enabled). By default when a PPPoE session terminates, the system removes a dual stack host in sequence, one host at a time. Therefore, the system will generate a RADIUS accounting interim for each host termination until only the final host is left. The final host will generate a final accounting stop message. Enabling this command will trigger a single Stop RADIUS accounting message and include information of all hosts without the host updates.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
session-parameters
session-parameters
Syntax
session-parameters
Context
[Tree] (config>router>ldp session-parameters)
Full Context
configure router ldp session-parameters
Description
Commands in this context configure peer specific parameters.
Platforms
All
session-qer
session-qer
Syntax
session-qer
Context
[Tree] (config>subscr-mgmt>sla-prof>pfcp session-qer)
Full Context
configure subscriber-mgmt sla-profile pfcp-mappings session-qer
Description
Commands in this context configure the mapping of the GBR/MBR IEs present in a per-session QER without a QER correlation ID. A QER that contains a QER correlation ID does not use the QER mapping because it is assumed not to be a per-session construct.If a signaled PFCP QER rate applies to all data-plane rules, it is interpreted as the session QER rate and is mapped to the QoS overrides in the configuration. Examples of such QER rates are APN-AMBR for 4G FWA sessions and session-AMBR for 5G FWA sessions.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
session-sender-type
session-sender-type
Syntax
session-sender-type {twamp-light | stamp}
Context
[Tree] (config>oam-pm>session>ip>twamp-light session-sender-type)
Full Context
configure oam-pm session ip twamp-light session-sender-type
Description
This command configures the type of test packet format to transmit.
Default
session-sender-type twamp-light
Parameters
- twamp-light
- Specifies TWAMP-Light transmission, packet formatting, and packet processing. TWAMP-Light test packets do not allow TLVs.
- stamp
- Specifies STAMP transmission, packet formatting, and packet processing. STAMP test packets support TLVs.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
session-time
session-time
Syntax
[no] session-time
Context
[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes session-time)
Full Context
configure aaa isa-radius-policy acct-include-attributes session-time
Description
This command enables the inclusion of the session-time attributes.
The no form of the command excludes session-time attributes.
Default
no session-time
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
session-timeout
session-timeout
Syntax
session-timeout timeout
no session-timeout
Context
[Tree] (config>subscr-mgmt>ppp-policy session-timeout)
Full Context
configure subscriber-mgmt ppp-policy session-timeout
Description
This command defines the time before the PPP session is terminated.
A RADIUS specified session-timeout (attribute [27] Session-Timeout) overrides the CLI configured value.
The no form of this command reverts to the default.
Parameters
- timeout
-
Specifies the session timeout in seconds.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
session-timeout
Syntax
session-timeout timeout
no session-timeout
Context
[Tree] (config>subscr-mgmt>ipoe-plcy session-timeout)
Full Context
configure subscriber-mgmt ipoe-session-policy session-timeout
Description
This command defines the time in seconds between 1 second and 360 days before the IPoE session is disconnected. The default value is unlimited session timeout.
The no form of this command reverts to the default.
Parameters
- timeout
-
Specifies the session timeout in seconds.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
set-time
set-time
Syntax
set-time date time
Context
[Tree] (admin set-time)
Full Context
admin set-time
Description
This command sets the local system time.
The time entered should be accurate for the time zone configured for the system. The system will convert the local time to UTC before saving to the system clock which is always set to UTC. This command does not take into account any daylight saving offset if defined.
If SNTP or NTP is enabled (no shutdown) then this command cannot be used.
Parameters
- date
-
Specifies the local date and time accurate to the minute in the YYYY/MM/DD format.
- time
-
Specifies the time (accurate to the second) in the hh:mm[:ss] format. If no seconds value is entered, the seconds are reset to :00.
Platforms
All
set-tos
set-tos
Syntax
set-tos [0..255]
no set-tos
Context
[Tree] (config>router>nat>inside>nat64 set-tos)
[Tree] (config>service>vprn>nat>inside>nat64 set-tos)
Full Context
configure router nat inside nat64 set-tos
configure service vprn nat inside nat64 set-tos
Description
This command specifies the value of the IPv4 ToS field. When enabled, the NAT64 node ignores IPv6 traffic-class and sets IPv4 ToS to the supplied ToS value in the translated IPv4 packet.
The no form of the command reverts to the default.
Default
set-tos 0
Parameters
- [0..255]
-
Sets the IPv4 ToS to a fixed value the IPv6 Traffic Class and set the IPv4 ToS to a fixed value and ignores the IPv6 traffic class.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
setup-timeout
setup-timeout
Syntax
setup-timeout access-accept timeout
no setup-timeout
Context
[Tree] (config>service>dynsvc>timers setup-timeout)
Full Context
configure service dynamic-services timers setup-timeout
Description
This command specifies the time that dynamic data services setup requests from a RADIUS Access-Accept are hold in an internal work queue waiting to be processed. If after the timeout, the dynamic data service setup request is still in the queue (meaning it is not setup), then the dynamic service setup request is removed from the queue and the setup fails.
The no form of this command reverts to the default value of 30 seconds.
Default
no setup-timeout
Parameters
- timeout
-
Specifies the setup-timeout, in seconds, for setup requests of dynamic services received via Access-Accept.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
severity
severity
Syntax
severity {eq | neq | lt | lte | gt | gte} severity-level
no severity
Context
[Tree] (config>service>vprn>log>filter>entry>match severity)
Full Context
configure service vprn log filter entry match severity
Description
This command adds an event severity level as a match criterion. Only one severity command can be entered per event filter entry. The latest severity command overwrites the previous command.
The no form of this command removes the severity match criterion.
Default
no severity
Parameters
- eq | neq | lt | lte | gt | gte
-
Specifies the type of match. Valid operators are listed below.
- severity-name
-
The ITU severity level name. Severity Levels lists severity names and corresponding numbers per ITU standards M.3100 X.733 & X.21 severity levels.
Table 6. Severity Levels Severity Number
Severity Name
1
cleared
2
indeterminate (info)
3
critical
4
major
5
minor
6
warning
Platforms
All
severity
Syntax
severity syslog-severity
Context
[Tree] (config>app-assure>group>evt-log>syslog severity)
Full Context
configure application-assurance group event-log syslog severity
Description
This command configures the syslog message severity level threshold.
Default
severity info
Parameters
- syslog-severity
-
Specifies the severity level for the syslog message.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
severity
Syntax
severity {eq | neq | lt | lte | gt | gte} severity-level
no severity
Context
[Tree] (config>log>filter>entry>match severity)
Full Context
configure log filter entry match severity
Description
This command adds an event severity level as a match criterion. Only one severity command can be entered per event filter entry. The latest severity command overwrites the previous command.
The no form of this command removes the severity match criterion.
Parameters
- eq | neq | lt | lte | gt | gte
-
Specifies the match type. Valid operators are listed in Valid Operators.
Table 7. Valid Operators Operator
Notes
eq
equal to
neq
not equal to
lt
less than
lte
less than or equal to
gt
greater than
gte
greater than or equal to
- severity-name
-
Specifies the ITU severity level name. ITU Severity Information lists severity names and corresponding numbers per ITU standards M.3100 X.733 & X.21 severity levels.
Table 8. ITU Severity Information Severity Number
Severity Name
1
cleared
2
indeterminate (info)
3
critical
4
major
5
minor
6
warning
Platforms
All
severity-level
severity-level
Syntax
severity-level syslog-level
Context
[Tree] (config>service>nat>syslog>syslog-export-policy severity-level)
Full Context
configure service nat syslog syslog-export-policy severity-level
Description
This command configures the severity level.
For more information, refer to the 7450 ESS, 7750 SR, 7950 XRS, and VSR System Management Guide. The config>log>syslog>level hierarchy also applies to this context.
Default
severity-level info
Parameters
- syslog-level
-
Specifies the severity level.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
sf-offset
sf-offset
Syntax
sf-offset offset-value
no sf-offset
Context
[Tree] (config>service>vprn>isis>if>level sf-offset)
Full Context
configure service vprn isis interface level sf-offset
Description
If the pre-FEC error rate of the associated DWDM port crosses the configured sf-threshold, this offset-value is added to the IS-IS interface metric. This parameter is only effective if the interface is associated with a DWDM port and the sf-threshold value is configured under that port.
The no form of this command reverts the offset value to 0.
Default
no sf-offset
Parameters
- offset-value
-
Specifies the amount the interface metric is increased by if the sf-threshold is crossed.
Platforms
All
sf-offset
Syntax
sf-offset offset-value
no sf-offset
Context
[Tree] (config>router>isis>if>level sf-offset)
Full Context
configure router isis interface level sf-offset
Description
If the pre-FEC error rate of the associated DWDM port crosses the configured sf-threshold, this offset-value is added to the IS-IS interface metric. This parameter is only effective if the interface is associated with a DWDM port and the sf-threshold value is configured under that port.
The no form of this command reverts the offset value to 0.
Default
no sf-offset
Parameters
- offset-value
-
Specifies the amount the interface metric is increased by if the sf-threshold is crossed.
Platforms
All
sf-sd-method
sf-sd-method
Syntax
sf-sd-method {bip8 | fec}
Context
[Tree] (config>port>otu sf-sd-method)
Full Context
configure port otu sf-sd-method
Description
This command specifies the method used to determine the signal failure (SF) and signal degrade (SD) alarms. When the bip8 method is selected, the SM-BIP8 errors are used. When the fec method is selected, the FEC corrected bits are used.
The following rules must be followed:
-
The port’s OTU must be enabled to set or change the sf-sd-method.
-
The FEC mode must be enhanced or g709 before setting sf-sd-method to fec.
-
The SF threshold must be 5 or higher before setting sf-sd-method to bip8.
Default
sf-sd-method fec
Parameters
- bip8
-
Specifies that SM-BIP8 errors are used to declare the presence of the SF and SD conditions.
- fec
-
Specifies that FEC corrected bit errors are used to declare the presence of the SF and SD conditions.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
sf-threshold
sf-threshold
Syntax
sf-threshold threshold [coefficient coefficient]
Context
[Tree] (config>port>otu sf-threshold)
Full Context
configure port otu sf-threshold
Description
This command defines the error rate at which to declare the signal failure (SF) condition.
The parameters define an error rate of (coefficient/10) * 10E-threshold. For example, sf-threshold 5 coefficient 20 defines an error rate of (20/10) * 10E-5, or 2 * 10E-5, or 0.000 02.
The SF threshold must be the following:
-
less than the SD threshold
-
5 or higher before setting sf-sd-method to bip8
The coefficient parameter is only used when sf-sd-method is set to fec. When sf-sd-method is set to bip8, coefficient is considered to have the value of 10.
Parameters
- threshold
-
Specifies the exponent for the SF threshold value.
- coefficient
-
Specifies the coefficient for the SF threshold value.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
sf-threshold
Syntax
sf-threshold errored-frames
Context
[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame sf-threshold)
Full Context
configure port ethernet efm-oam link-monitoring errored-frame sf-threshold
Description
The option defines the number of frame errors within the configured window which indicates the port has exceeded an acceptable error rate. A log event will be raised, and the port will be taken out of service by default. Configuration options exist to take additional actions when the error rate exceeds the threshold. These actions are defined using the local-sf-action configuration. This event can only be cleared through manual intervention that affects the state of the port.
Parameters
- errored-frames
-
The number of errored frames within the configured window which indicates the port has become unusable.
Platforms
All
sf-threshold
Syntax
sf-threshold errored-frames
Context
[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame-period sf-threshold)
Full Context
configure port ethernet efm-oam link-monitoring errored-frame-period sf-threshold
Description
This command defines the number of frame errors within the configured window which indicates the port has exceeded an acceptable error rate. A log event will be raised, and the port will be taken out of service by default. Configuration options exist to take additional actions when the error rate exceeds the threshold. These actions are defined using the local-sf-action configuration. This event can only be cleared through manual intervention that affects the state of the port.
Default
sf-threshold 1
Parameters
- errored-frames
-
Specifies the number of errored frames within the configured window which indicates the port has become unusable.
Platforms
All
sf-threshold
Syntax
sf-threshold errored-seconds
Context
[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame-seconds sf-threshold)
Full Context
configure port ethernet efm-oam link-monitoring errored-frame-seconds sf-threshold
Description
This command defines the number of errors seconds within the configured window which indicates the port has exceeded an acceptable error rate. A log event will be raised, and the port will be taken out of service by default. Configuration options exist to take additional actions when the error rate exceeds the threshold. These actions are defined using the local-sf-action configuration. This event can only be cleared through manual intervention that affects the state of the port.
Parameters
- errored-seconds
-
Specifies the number of errored seconds within the configured window which indicates the port has become unusable.
Platforms
All
sf-threshold
Syntax
sf-threshold errored-symbols
Context
[Tree] (config>port>ethernet>efm-oam>link-mon>errored-symbols sf-threshold)
Full Context
configure port ethernet efm-oam link-monitoring errored-symbols sf-threshold
Description
This command defines the number of symbol errors within the configured window which indicates the port has exceeded an acceptable error rate. A log event will be raised, and the port will be taken out of service by default. Configuration options exist to take additional actions when the error rate exceeds the threshold. These actions are defined using the local-sf-action configuration.
Parameters
- errored-symbols
-
Specifies the number of errored-symbols which indicates the port has become unusable.
Platforms
All
sf-threshold
Syntax
sf-threshold threshold [multiplier multiplier]
no sf-threshold
Context
[Tree] (config>port>ethernet>sym-mon sf-threshold)
Full Context
configure port ethernet symbol-monitor sf-threshold
Description
This command specifies the error rate at which to declare the Signal Fail condition on an Ethernet interface. The value represents M*10E-N symbol errors over total symbols received over W seconds of the sliding window. The symbol errors on the interface are sampled once per second. A default of 10 seconds is used when there is no additional window-size configured. The multiplier keyword is optional. If the multiplier keyword is omitted or no sf-threshold is specified, the multiplier will return to the default value of 1.
Default
no sf-threshold
Parameters
- threshold
-
Specifies the rate of symbol errors.
- multiplier
-
Specifies the multiplier used to scale the symbol error ratio.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
sf-threshold
Syntax
sf-threshold threshold [multiplier multiplier]
no sf-threshold
Context
[Tree] (config>port>ethernet>crc-monitor sf-threshold)
Full Context
configure port ethernet crc-monitor sf-threshold
Description
This command specifies the error rate at which to declare the Signal Fail condition on an Ethernet interface. The value represents M*10E-N errored frames over total frames received over W seconds of the sliding window. The CRC errors on the interface are sampled once per second. A default of 10 seconds is used when there is no additional window-size configured. The multiplier keyword is optional. If the multiplier keyword is omitted or no sf-threshold is specified the multiplier will return to the default value of 1.
Default
no sf-threshold
Parameters
- threshold
-
Specifies the threshold value.
- multiplier
-
Specifies the multiplier value.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
sf-threshold-clear
sf-threshold-clear
Syntax
sf-threshold-clear threshold [coefficient coefficient]
Context
[Tree] (config>port>otu sf-threshold-clear)
Full Context
configure port otu sf-threshold-clear
Description
This command defines the signal failure (SF) threshold clear value.
When the bit error rate falls below this value, the SF condition is cleared. The parameters define an error rate of (coefficient/10) * 10E-threshold. For example, sf-threshold-clear 7 coefficient 10 defines an error rate of (10/10) * 10E-7, or 10E-7, or 0.000 000 1.
This SF threshold clear setting is valid only when sf-sd-method is set to fec.
Parameters
- threshold
-
Specifies the exponent for the SF threshold clear value.
- coefficient
-
Specifies the coefficient for the SF threshold clear value.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
sflow
sflow
Syntax
[no] sflow
Context
[Tree] (config>port>ethernet sflow)
Full Context
configure port ethernet sflow
Description
This command enables sFlow data collection for a port and its SAPs that support sFlow data collection.
The no form of this of this command disables sFlow.
Default
no sflow
Platforms
7750 SR, 7750 SR-s, 7950 XRS
sflow
Syntax
sflow
Context
[Tree] (config sflow)
Full Context
configure sflow
Description
Commands in this context configure sflow agent parameters.
Platforms
7750 SR, 7750 SR-s, 7950 XRS
sfm
sfm
Syntax
sfm sfm-name
no sfm sfm-name
Context
[Tree] (config sfm)
Full Context
configure sfm
Description
Commands in this context configure the specified SFM.
The no form of this command removes the SFM configuration for the specified SFM.
Parameters
- sfm-name
-
Specifies the SFM identifier.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-2s, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s, 7950 XRS
sfm-loss-threshold
sfm-loss-threshold
Syntax
sfm-loss-threshold num-sfm
no sfm-loss-threshold
Context
[Tree] (config>system>switch-fabric sfm-loss-threshold)
Full Context
configure system switch-fabric sfm-loss-threshold
Description
This command sets the number of SFMs that are permitted to fail before the system goes into SFM overload state. This command is only applicable on the 7750 SR-7s and the 7750 SR-14s. Users can select the SFM limit based on the number possible for the system minus one. For the 7750 SR-7s this is a value of 3 and for the 7750 SR-14s this is a value of 7.
For networks that can accommodate more SFM failures than the default value, this command allows the selection of the number of SFMs to fail prior to the system going into SFM overload state.
The no form of this command reverts the threshold to the default value.
Default
7750 SR-7s: sfm-loss-threshold 1
7750 SR-14s: sfm-loss-threshold 2
Parameters
- num-sfm
-
Specifies the number of SFMs permitted to fail before SFM overload state.
Platforms
7750 SR-7s, 7750 SR-14s
sfm-type
sfm-type
Syntax
sfm-type sfm-type
no sfm sfm-type
Context
[Tree] (config>sfm sfm-type)
Full Context
configure sfm sfm-type
Description
This command provisions the SFM.
The no form of this command deprovisions the SFM.
Default
no sfm sfm-type
Parameters
- sfm-type
-
Specifies the SFM card type.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-2s, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s, 7950 XRS
sg
sg
Syntax
sg [group grp-addr [source src-addr]]
no sg
Context
[Tree] (debug>service>id>video-interface sg)
Full Context
debug service id video-interface sg
Description
This command enables channel debugging.
Parameters
- group grp-addr
-
Specifies the multicast channel address.
- source src-addr
-
Specifies the source address.
Platforms
7450 ESS, 7750 SR, 7750 SR-s
sgsn-mcc-mnc
sgsn-mcc-mnc
Syntax
[no] sgsn-mcc-mnc
Context
[Tree] (config>subscr-mgmt>diam-appl-plcy>gx>include-avp sgsn-mcc-mnc)
Full Context
configure subscriber-mgmt diameter-application-policy gx include-avp sgsn-mcc-mnc
Description
This command enables the inclusion of the 3GPP-SGSN-MCC-MNC AVP, which contains the MCC and MNC as configured under configure subscriber-mgmt gtp serving-network.
The no form of this command disables the inclusion of the AVP.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
sgt-qos
sgt-qos
shallow-inspection
shallow-inspection
Syntax
[no] shallow-inspection
Context
[Tree] (config>app-assure>group shallow-inspection)
Full Context
configure application-assurance group shallow-inspection
Description
This command disables all Layer 7 signature-based flow inspection.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
sham-link
sham-link
Syntax
sham-link ip-int-name ip-address
Context
[Tree] (config>service>vprn>ospf>area sham-link)
Full Context
configure service vprn ospf area sham-link
Description
This command is similar to a virtual link with the exception that metric must be included in order to distinguish the cost between the MPLS-VPRN link and the backdoor.
Parameters
- ip-int-name
-
The local interface name used for the sham-link. This is a mandatory parameter and interface names must be unique within the group of defined IP interfaces for config>router>if, config>service>ies>if and config>service>vprn>if commands. An interface name cannot be in the form of an IP address. Interface names can be any string up to 32 characters composed of printable, 7-bit ASCII characters. If the string contains special characters, the entire string must be enclosed between double quotes. If the IP interface name does not exist or does not have an IP address configured, an error message will be returned.
- ip-address
-
The IP address of the sham-link neighbor in IP address dotted decimal notation. This parameter is the remote peer of the sham link’s IP address used to set up the sham-link. This is a mandatory parameter and must be a valid IP address.
Platforms
All
sham-neighbor
sham-neighbor
Syntax
sham-neighbor [ip-address]
no sham-neighbor
Context
[Tree] (debug>router>ospf sham-neighbor)
Full Context
debug router ospf sham-neighbor
Description
This command enables debugging of the OSPFv2 sham-link neighbor.
Parameters
- ip-address
-
Debugs the sham-link neighbor identified by this IP address.
Platforms
All
shape-multi-client-only
shape-multi-client-only
Syntax
[no] shape-multi-client-only
Context
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>egress shape-multi-client-only)
Full Context
configure service ies subscriber-interface group-interface wlan-gw egress shape-multi-client-only
Description
This command enables the egress shaping is only enabled for a wlan-gw tunnel while there are multiple UE (User Equipment) using it.
The no form of this command disables the egress shaping.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
shaper
shaper
Syntax
[no] shaper
Context
[Tree] (config>service>sdp>binding>pw-port>egress shaper)
Full Context
configure service sdp binding pw-port egress shaper
Description
This command enables the egress shaping option for use by a pseudowire port.
The no form of the command disables the egress shaping option.
Default
no shaper
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
shaper
Syntax
[no] shaper
Context
[Tree] (config>service>epipe>pw-port>egress shaper)
Full Context
configure service epipe pw-port egress shaper
Description
Commands in this context configure PW-port shaper parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
shaping
shaping
Syntax
shaping {per-retailer | per-tunnel}
no shaping
Context
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>egress shaping)
Full Context
configure service ies subscriber-interface group-interface wlan-gw egress shaping
Description
This command configures the granularity of the egress shaping for wlan-gw on this group interface.
The no form of this command removes the parameter from the configuration.
Parameters
- per-tunnel
-
Specifies that a separate shaper is applied to each wlan-gw tunnel.
- per-retailer
-
Specifies that a separate shaper is applied to each retailer Mobile Network Operator's fraction of the wlan-gw tunnel payload.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
shared-circuit-id
shared-circuit-id
Syntax
[no] shared-circuit-id
Context
[Tree] (config>service>vprn>sub-if>grp-if shared-circuit-id)
[Tree] (config>service>ies>sub-if>grp-if shared-circuit-id)
Full Context
configure service vprn subscriber-interface group-interface shared-circuit-id
configure service ies subscriber-interface group-interface shared-circuit-id
Description
If configured, circuit-id in DHCPv4 Option82 is used to authenticate DHCPv6. If DHCPv6 is received before DHCPv4, it is dropped. Also, a SLAAC host is created based on DHCPv4 authentication if RADIUS returns IPv6 framed-prefix. The IPv6oE host is deleted if the linked IPv4oE host is deleted due to DHCP release or lease time-out. The linkage between IPv4 and IPv6 is based on SAP and MAC address. The sharing of circuit-id from DHCPv4 for authentication of DHCPv6 (or SLAAC) allows 7750 SR to work around lack of support for LDRA on access nodes.
The no form of this command reverts to the default.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shared-policer
shared-policer
Syntax
[no] shared-policer
Context
[Tree] (config>filter>ip-filter shared-policer)
[Tree] (config>filter>ipv6-filter shared-policer)
Full Context
configure filter ip-filter shared-policer
configure filter ipv6-filter shared-policer
Description
When enabled and when the filter policy is configured on a LAG endpoint, the system programs the policer rates in the filter policy per line card FP of the LAG based on the number of active ports in the LAG for each FP.When disabled and when the filter policy is configured on a LAG endpoint, the system programs the same policer rate on each line card FP of the LAG.
The no form of this command disables the configuration.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, 7950 XRS
shared-pool-in-use
shared-pool-in-use
Syntax
shared-pool-in-use percentage
no shared-pool-in-use
Context
[Tree] (config>port>network>egress>pool>monitor-depth>alarm shared-pool-in-use)
[Tree] (config>port>access>egress>pool>monitor-depth>alarm shared-pool-in-use)
[Tree] (config>card>fp>ingress>network>pool>monitor-depth>alarm shared-pool-in-use)
[Tree] (config>port>access>ingress>pool>monitor-depth>alarm shared-pool-in-use)
Full Context
configure port network egress pool monitor-pool-depth alarm-thresholds shared-pool-in-use
configure port access egress pool monitor-pool-depth alarm-thresholds shared-pool-in-use
configure card fp ingress network pool monitor-pool-depth alarm-thresholds shared-pool-in-use
configure port access ingress pool monitor-pool-depth alarm-thresholds shared-pool-in-use
Description
This command configures the threshold for the shared pool in use.
A tmnxSharedPoolUseThreshExcd trap is generated when the shared pool usage exceeds this threshold percentage. When the usage returns below the threshold percentage, the tmnxSharedPoolUseThreshNotExcd trap is generated
The no form of this command removes the threshold on which to alarm.
Default
no shared-pool-in-use
Parameters
- percentage
-
Specifies the shared pool in-use alarm threshold.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
shared-queue
shared-queue
Syntax
shared-queue policy-name [create]
no shared-queue policy-name
Context
[Tree] (config>qos shared-queue)
Full Context
configure qos shared-queue
Description
Commands in this context modify the QoS default shared-queue policy.
Parameters
- policy-name
-
The name of the default shared-queue policy.
Platforms
All
shared-queue
Syntax
shared-queue src-name dst-name [overwrite]
Context
[Tree] (config>qos>copy shared-queue)
Full Context
configure qos copy shared-queue
Description
This command copies an existing shared-queue to another shared-queue. The copy command is a configuration level maintenance tool used to create new entries using an existing mapping policy name. If overwrite is not specified, an error occurs if the destination policy exists.
Parameters
- src-name
-
Specifies the existing source shared-queue, up to 32 characters, from which the copy command attempts to copy.
- dst-name
-
Specifies the destination shared-queue, up to 32 characters, to which the copy command attempts to copy.
- overwrite
-
Use this parameter when the shared-queue dst-name already exists. If it does, everything in the existing destination shared-queue dst-name is completely overwritten with the contents of the shared-queue src-name. The overwrite parameter must be specified or else the following error message is returned:
MINOR: CLI Destination "sqtest10" exists - use {overwrite}.
If overwrite is specified, the function of copying from source to destination occurs in a "break before make” manner and therefore should be handled with care.
Platforms
All
shared-radius-filter-wmark
shared-radius-filter-wmark
Syntax
shared-radius-filter-wmark low low-watermark high high-watermark
no shared-radius-filter-wmark
Context
[Tree] (config>filter>ipv6-filter shared-radius-filter-wmark)
[Tree] (config>filter>ip-filter shared-radius-filter-wmark)
Full Context
configure filter ipv6-filter shared-radius-filter-wmark
configure filter ip-filter shared-radius-filter-wmark
Description
This command configures the low and high watermark for the number of RADIUS shared filters reporting
Default
no shared-radius-filter-wmark
Parameters
- low-watermark
-
Specifies the utilization of the filter ranges for filter entry insertion, at which a table full alarm will be raised by the agent.
- high-watermark
-
Specifies the utilization of the filter ranges for filter entry insertion, at which a table full alarm will be cleared by the agent.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shared-resources
shared-resources
Syntax
shared-resources
Context
[Tree] (config>isa>aa-grp shared-resources)
Full Context
configure isa application-assurance-group shared-resources
Description
Commands in this context configure the shared resources pool.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
shcv-policy
shcv-policy
Syntax
shcv-policy name [create]
no shcv-policy name
Context
[Tree] (config>subscr-mgmt shcv-policy)
Full Context
configure subscriber-mgmt shcv-policy
Description
This command configures a Subscriber Host Connectivity Verification (SHCV) policy. An SHCV policy can be applied to both the subscriber management group interface and VPLS instances. All SHCV-related features inside a group interface and a VPLS service follows the configuration specified in the SHCV policy. The SHCV policy and the SHCV configuration on a group interface are mutually exclusive. Only one can be applied to the group interface.
The no form of this command removes the policy name from the configuration.
Parameters
- name
-
Specifies the name of the SHCV policy, up to 32 characters.
- create
-
Keyword required to create the configuration context.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shcv-policy
Syntax
shcv-policy name
no shcv-policy
Context
[Tree] (config>service>vprn>sub-if>grp-if shcv-policy)
[Tree] (config>service>ies>sub-if>grp-if shcv-policy)
Full Context
configure service vprn subscriber-interface group-interface shcv-policy
configure service ies subscriber-interface group-interface shcv-policy
Description
This command references the SHCV policy to be used for both IPv4 and IPv6 subscriber hosts. The policy name must already exist in the config>subscr-mgmt context.
The no form of this command removes the policy name from the service configuration.
Parameters
- name
-
Specifies an existing SHCV policy name up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shcv-policy-ipv4
shcv-policy-ipv4
Syntax
shcv-policy-ipv4 name
no shcv-policy-ipv4
Context
[Tree] (config>service>vpls>sap shcv-policy-ipv4)
[Tree] (config>service>vprn>sub-if>grp-if shcv-policy-ipv4)
[Tree] (config>service>vprn>if shcv-policy-ipv4)
[Tree] (config>service>ies>if shcv-policy-ipv4)
[Tree] (config>service>vpls shcv-policy-ipv4)
[Tree] (config>service>ies>sub-if>grp-if shcv-policy-ipv4)
Full Context
configure service vpls sap shcv-policy-ipv4
configure service vprn subscriber-interface group-interface shcv-policy-ipv4
configure service vprn interface shcv-policy-ipv4
configure service ies interface shcv-policy-ipv4
configure service vpls shcv-policy-ipv4
configure service ies subscriber-interface group-interface shcv-policy-ipv4
Description
This command specifies the Subscriber Host Connectivity Verification (SHCV) policy to be used exclusive for IPv4 subscriber hosts. The shcv-policy name must already exist in the config>subscr-mgmt context.
The no form of this command removes the policy name from the service configuration.
Parameters
- name
-
Specifies an existing SHCV policy name up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shcv-policy-ipv6
shcv-policy-ipv6
Syntax
shcv-policy-ipv6 name
no shcv-policy-ipv6
Context
[Tree] (config>service>vprn>sub-if>grp-if shcv-policy-ipv6)
[Tree] (config>service>vprn>if shcv-policy-ipv6)
[Tree] (config>service>ies>if shcv-policy-ipv6)
[Tree] (config>service>ies>sub-if>grp-if shcv-policy-ipv6)
Full Context
configure service vprn subscriber-interface group-interface shcv-policy-ipv6
configure service vprn interface shcv-policy-ipv6
configure service ies interface shcv-policy-ipv6
configure service ies subscriber-interface group-interface shcv-policy-ipv6
Description
This command references the Subscriber Host Connectivity Verification (SHCV) policy to be used exclusive for IPv6 subscriber hosts. The policy name must already exist in the config>subscr-mgmt context.
The no form of this command removes the policy name from the service configuration.
Parameters
- name
-
Specifies an existing SHCV policy name up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface shcv-policy-ipv6
- configure service vprn subscriber-interface group-interface shcv-policy-ipv6
All
- configure service vprn interface shcv-policy-ipv6
- configure service ies interface shcv-policy-ipv6
shell
shell
Syntax
shell -password password
no shell
Context
[Tree] (environment shell)
Full Context
environment shell
Description
This command enables and disables the shell.
Parameters
- password
-
Specifies the password to enter the shell, up to 256 characters.
Platforms
All
short-duration-flow-count
short-duration-flow-count
Syntax
[no] short-duration-flow-count
Context
[Tree] (config>log>acct-policy>cr>aa>aa-sub-cntr short-duration-flow-count)
Full Context
configure log accounting-policy custom-record aa-specific aa-sub-counters short-duration-flow-count
Description
This command includes the short duration flow count in the AA subscriber's custom record. This command only applies to the 7750 SR.
The no form of this command excludes the short duration flow count.
Default
no short-duration-flow-count
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
short-sequence-numbers
short-sequence-numbers
Syntax
[no] short-sequence-numbers
Context
[Tree] (config>router>l2tp>group>mlppp short-sequence-numbers)
[Tree] (config>subscr-mgmt>ppp-policy>mlppp short-sequence-numbers)
[Tree] (config>router>l2tp>group>tunnel>mlppp short-sequence-numbers)
[Tree] (config>service>vprn>l2tp>group>mlppp short-sequence-numbers)
[Tree] (config>service>vprn>l2tp>group>tunnel>mlppp short-sequence-numbers)
Full Context
configure router l2tp group mlppp short-sequence-numbers
configure subscriber-mgmt ppp-policy mlppp short-sequence-numbers
configure router l2tp group tunnel mlppp short-sequence-numbers
configure service vprn l2tp group mlppp short-sequence-numbers
configure service vprn l2tp group tunnel mlppp short-sequence-numbers
Description
This command enables a peer request to send short sequence numbers. This command is applicable to LAC and LNS. By default, MLPPPoX negotiates 24bit long sequence numbers. This command allows this to be changed to shorter, 12-bit sequence numbers.
The no form of this command reverts to the default.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s
shortcut-local-ttl-propagate
shortcut-local-ttl-propagate
Syntax
[no] shortcut-local-ttl-propagate
Context
[Tree] (config>router>mpls shortcut-local-ttl-propagate)
[Tree] (config>router>ldp shortcut-local-ttl-propagate)
Full Context
configure router mpls shortcut-local-ttl-propagate
configure router ldp shortcut-local-ttl-propagate
Description
This command configures the TTL handling of locally generated packets for all LSP shortcuts originating on this ingress LER. It applies to all LDP or RSVP LSPs that are used to resolve static routes, BGP routes, and IGP routes.
The user can enable or disable the propagation of the TTL from the header of an IP packet into the header of the resulting MPLS packet independently for local and transit packets forwarded over an LSP shortcut.
Local IP packets include ICMP Ping, traceroute, and OAM packets, that are destined to a route that is resolved to the LSP shortcut. Transit IP packets are all IP packets received on any IES interface and destined to a route that is resolved to the LSP shortcut
By default, the feature propagates the TTL from the header of locally generated IP packets into the label stack of the resulting MPLS packets forwarded over the LSP shortcut. This is referred to as Uniform mode.
When the no form of this command is enabled, TTL propagation is disabled on all locally generated IP packets, including ICMP Ping, traceroute, and OAM packets, that are destined to a route that is resolved to the LSP shortcut. In this case, a TTL of 255 is programmed onto the pushed label stack. This is referred to as Pipe mode.
Default
shortcut-local-ttl-propagate
Platforms
All
shortcut-transit-ttl-propagate
shortcut-transit-ttl-propagate
Syntax
[no] shortcut-transit-ttl-propagate
Context
[Tree] (config>router>ldp shortcut-transit-ttl-propagate)
[Tree] (config>router>mpls shortcut-transit-ttl-propagate)
Full Context
configure router ldp shortcut-transit-ttl-propagate
configure router mpls shortcut-transit-ttl-propagate
Description
This command configures the TTL handling of transit packets for all LSP shortcuts originating on this ingress LER. It applies to all LDP or RSVP LSPs that are used to resolve static routes, BGP routes, and IGP routes.
The user can enable or disable the propagation of the TTL from the header of an IP packet into the header of the resulting MPLS packet independently for local and transit packets forwarded over an LSP shortcut.
By default, the feature propagates the TTL from the header of transit IP packets into the label stack of the resulting MPLS packets forwarded over the LSP shortcut. This is referred to as Uniform mode.
When the no form of the command is enabled, TTL propagation is disabled on all transit IP packets received on any IES interface and destined to a route that is resolved to the LSP shortcut. In this case, a TTL of 255 is programmed onto the pushed label stack. This is referred to as Pipe mode.
Default
shortcut-transit-ttl-propagate
Platforms
All
shortcut-tunnel
shortcut-tunnel
Syntax
shortcut-tunnel
Context
[Tree] (config>router>bgp>next-hop-resolution shortcut-tunnel)
Full Context
configure router bgp next-hop-resolution shortcut-tunnel
Description
This command creates the context to configure the tunnel types that can be used to resolve unlabeled IPv4 and IPv6 BGP routes.
The following tunnel types are supported for resolving IPv4 routes and IPv6 routes with IPv4-mapped IPv6 next-hop addresses: bgp, ldp, rsvp, sr-isis, sr-ospf, sr-policy and sr-te. In this context:
-
bgp — refers to IPv4 tunnels created by receiving BGP label-unicast IPv4 routes for /32 IPv4 prefixes.
-
ldp — refers to /32 and shorter length LDP FEC prefixes imported into the tunnel table. For IPv4 NLRI, BGP selects the LDP FEC that is the longest-prefix-match (LPM) of the BGP next-hop address. For IPv6 NLRI, BGP selects the /32 FEC that is an exact match of the BGP next-hop address.
-
rsvp — refers to RSVP tunnels in the tunnel table to IPv4 destinations. This option allows BGP to use the best metric RSVP LSP to the address of the BGP next-hop. This address can correspond to the system interface or to another loopback interface of the remote BGP router. In the case of multiple RSVP LSPs with the same lowest metric, BGP selects the LSP with the lowest tunnel id.
-
sr-isis — refers to segment routing tunnels (shortest path) to IPv4 destinations reachable by the IS-IS protocol. This option allows BGP to use the segment routing tunnel in the tunnel table submitted by the lowest preference IS-IS instance or (in case of a tie) the lowest numbered IS-IS instance.
-
sr-ospf — refers to segment routing tunnels (shortest path) to IPv4 destinations reachable by the OSPF protocol. This option allows BGP to use the segment routing tunnel in the tunnel table submitted by the lowest preference OSPF instance or (in case of a tie) the lowest numbered OSPF instance.
-
sr-policy — refers to segment routing policies with an IPv4 endpoint that are statically configured in the local router or learned through BGP routes (AFI 1/SAFI 73). For BGP to resolve the next hop of an unlabeled IPv4 or IPv6 route using a segment routing policy the highest numbered color extended community attached to the IPv4 or IPv6 route must match the color of the segment routing policy.
-
sr-te — refers to traffic engineered (TE) segment routing tunnels. This option allows BGP to use the best metric SR-TE tunnel to the address of the BGP next-hop. In the case of multiple SR-TE tunnels with the same lowest metric, BGP selects the tunnel with the lowest tunnel id.
-
udp — refers to MPLSoUDPoIPv4 tunnels set up by action of the BGP import policies.
The following tunnel types are supported for resolving IPv6 routes with IPv6 next-hops that are not IPv4-mapped IPv6 addresses: ldp, sr-isis, and sr-policy. In this context:
-
ldp — refers to /128 LDP FEC prefixes in the tunnel table. BGP selects the /128 FEC that is an exact match of the BGP next-hop address.
-
sr-isis — refers to segment routing tunnels (shortest path) to IPv6 destinations reachable by the IS-IS protocol. This option allows BGP to use the segment routing tunnel in the tunnel table submitted by the lowest preference IS-IS instance or (in case of a tie) the lowest numbered IS-IS instance.
-
sr-policy — refers to segment routing policies with a null IPv4 endpoint (0.0.0.0) that are statically configured in the local router or learned through BGP routes (AFI 1/SAFI 73). For BGP to resolve the next hop of an IPv6 route using a segment routing policy the highest numbered color extended community attached to the IPv6 route must match the color of the segment routing policy and its color bits must be set to '01' or '10'.
Platforms
All
show-ipsec-keys
show-ipsec-keys
Syntax
[no] show-ipsec-keys
Context
[Tree] (config>ipsec show-ipsec-keys)
Full Context
configure ipsec show-ipsec-keys
Description
This command enables user to optionally include IKE-SA or CHILD-SA keys in the output of debug ipsec or admin ipsec display-key.
The no form of this command disallows the user from including keys in the output.
Default
no show-ipsec-keys
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
show-request
show-request
Syntax
show-request [ca ca-profile-name]
Context
[Tree] (admin>certificate>cmpv2 show-request)
Full Context
admin certificate cmpv2 show-request
Description
This command displays current the CMPv2 pending request toward the specified CA. If there is no pending request, the last pending request is displayed including the status (success/fail/rejected) and the receive time of last CMPv2 message from server.
The following information is included in the output:
-
Request type, original input parameter (password is not displayed), checkAfter and reason in of last PollRepContent, time of original command input.
Parameters
- ca-profile-name
-
Specifies a ca-profile name, up to 32 characters. If not specified, the system will display pending requests of all ca-profiles.
Platforms
All
shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (conf>sys>sat>eth-sat>sync-if>ref2 shutdown)
[Tree] (config>system>sync-if-timing>gnss shutdown)
[Tree] (config>system>switch-fabric>failure-recovery shutdown)
[Tree] (config>system>cron>sched shutdown)
[Tree] (config>eth-tunnel>path shutdown)
[Tree] (config>system>grpc-tunnel>tunnel>handler shutdown)
[Tree] (config>system>satellite>local-forward>sap shutdown)
[Tree] (config>router>mpls>static-lsp shutdown)
[Tree] (config>system>satellite>port-template shutdown)
[Tree] (config>system>grpc-tunnel>tunnel shutdown)
[Tree] (config>system>sync-if-timing>ref1 shutdown)
[Tree] (config>system>persistence>subscriber-mgmt shutdown)
[Tree] (config>system>ptp>ptsf>monitor shutdown)
[Tree] (config>system>script-control>script shutdown)
[Tree] (config>system>persistence>dhcp-server shutdown)
[Tree] (config>app-assure>group>policy>chrg-fltr>entry shutdown)
[Tree] (config>li>x-interfaces shutdown)
[Tree] (config>service>vpls>sap>dhcp6>ldra shutdown)
[Tree] (config>system>telemetry>persistent-subscriptions>subscription shutdown)
[Tree] (config>router>mpls>fwd-policies>fwd-policy>egress-statistics shutdown)
[Tree] (config>system>persistence>nat-port-forward shutdown)
[Tree] (config>service>epipe>nat-outside shutdown)
[Tree] (config>router>mpls>fwd-policies>fwd-policy>ingress-statistics shutdown)
[Tree] (conf>sys>sat>eth-sat>sync-if>ref1 shutdown)
[Tree] (config>system>lldp shutdown)
[Tree] (config>system>ptp>alternate-profile shutdown)
[Tree] (config>test-oam>mpls-dm shutdown)
[Tree] (config>router>fad>flex-algo shutdown)
[Tree] (config>system>grpc-tunnel>destination-group>tcp-keepalive shutdown)
[Tree] (config>system>telemetry>notification-bundling shutdown)
[Tree] (config>system>sync-if-timing>synce shutdown)
[Tree] (config>eth-tunnel shutdown)
[Tree] (config>oam-pm>streaming>delay-template shutdown)
[Tree] (config>system>sync-if-timing>bits>input shutdown)
[Tree] (config>subscr-mgmt>diam-appl-plcy>gy>efh shutdown)
[Tree] (config>system>time>ntp shutdown)
[Tree] (config>system>telemetry>destination-group>tcp-keepalive shutdown)
[Tree] (config>system>script-control>script-policy shutdown)
[Tree] (config>system>sync-if-timing>ref2 shutdown)
[Tree] (config>system>persistence>app-assure shutdown)
[Tree] (config>system>persistence>python-policy-cache shutdown)
[Tree] (config>system>time>sntp shutdown)
[Tree] (config>system>sync-if-timing>ptp shutdown)
[Tree] (config>system>sync-if-timing>bits>output shutdown)
Full Context
configure system satellite eth-sat sync-if-timing ref2 shutdown
configure system sync-if-timing gnss shutdown
configure system switch-fabric failure-recovery shutdown
configure system cron schedule shutdown
configure eth-tunnel path shutdown
configure system grpc-tunnel tunnel handler shutdown
configure system satellite local-forward sap shutdown
configure router mpls static-lsp shutdown
configure system satellite port-template shutdown
configure system grpc-tunnel tunnel shutdown
configure system sync-if-timing ref1 shutdown
configure system persistence subscriber-mgmt shutdown
configure system ptp ptsf monitor-ptsf-unusable shutdown
configure system script-control script shutdown
configure system persistence dhcp-server shutdown
configure application-assurance group policy charging-filter entry shutdown
configure li x-interfaces shutdown
configure service vpls sap dhcp6 ldra shutdown
configure system telemetry persistent-subscriptions subscription shutdown
configure router mpls forwarding-policies forwarding-policy egress-statistics shutdown
configure system persistence nat-port-forward shutdown
configure service epipe nat-outside shutdown
configure router mpls forwarding-policies forwarding-policy ingress-statistics shutdown
configure system satellite eth-sat sync-if-timing ref1 shutdown
configure system lldp shutdown
configure system ptp alternate-profile shutdown
configure test-oam mpls-dm shutdown
configure router flexible-algorithm-definitions flex-algo shutdown
configure system grpc-tunnel destination-group tcp-keepalive shutdown
configure system telemetry notification-bundling shutdown
configure system sync-if-timing synce shutdown
configure eth-tunnel shutdown
configure oam-pm streaming delay-template shutdown
configure system sync-if-timing bits input shutdown
configure subscriber-mgmt diameter-application-policy gy extended-failure-handling shutdown
configure system time ntp shutdown
configure system telemetry destination-group tcp-keepalive shutdown
configure system script-control script-policy shutdown
configure system sync-if-timing ref2 shutdown
configure system persistence application-assurance shutdown
configure system persistence python-policy-cache shutdown
configure system time sntp shutdown
configure system sync-if-timing ptp shutdown
configure system sync-if-timing bits output shutdown
Description
This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
The no form of this command places the entity into an administratively enabled state.
Default
shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure system satellite port-template shutdown
- configure system sync-if-timing bits input shutdown
- configure system satellite eth-sat sync-if-timing ref1 shutdown
- configure eth-tunnel path shutdown
- configure test-oam mpls-dm shutdown
- configure system sync-if-timing ptp shutdown
- configure eth-tunnel shutdown
- configure system sync-if-timing ref2 shutdown
- configure system satellite eth-sat sync-if-timing ref2 shutdown
- configure system ptp ptsf monitor-ptsf-unusable shutdown
- configure system ptp alternate-profile shutdown
- configure system sync-if-timing synce shutdown
- configure system sync-if-timing bits output shutdown
- configure oam-pm streaming delay-template shutdown
- configure system sync-if-timing ref1 shutdown
- configure li x-interfaces shutdown
- configure system satellite local-forward sap shutdown
7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se, 7750 SR-2se
- configure system sync-if-timing gnss shutdown
7450 ESS, 7750 SR-7, 7750 SR-12e, 7950 XRS
- configure system switch-fabric failure-recovery shutdown
All
- configure system grpc-tunnel tunnel handler shutdown
- configure system lldp shutdown
- configure router flexible-algorithm-definitions flex-algo shutdown
- configure system telemetry notification-bundling shutdown
- configure service vpls sap dhcp6 ldra shutdown
- configure system script-control script-policy shutdown
- configure system grpc-tunnel destination-group tcp-keepalive shutdown
- configure system time sntp shutdown
- configure system persistence python-policy-cache shutdown
- configure system grpc-tunnel tunnel shutdown
- configure system cron schedule shutdown
- configure router mpls forwarding-policies forwarding-policy ingress-statistics shutdown
- configure system telemetry destination-group tcp-keepalive shutdown
- configure system time ntp shutdown
- configure router mpls forwarding-policies forwarding-policy egress-statistics shutdown
- configure router mpls static-lsp shutdown
- configure system telemetry persistent-subscriptions subscription shutdown
- configure system script-control script shutdown
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure system persistence dhcp-server shutdown
- configure subscriber-mgmt diameter-application-policy gy extended-failure-handling shutdown
- configure system persistence subscriber-mgmt shutdown
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure application-assurance group policy charging-filter entry shutdown
- configure service epipe nat-outside shutdown
- configure system persistence application-assurance shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>vprn>sub-if>wlan-gw>pool-mgr>dhcp6-client>slaac shutdown)
[Tree] (config>router>msdp>group>peer shutdown)
[Tree] (config>router>pim>rp>bsr-candidate shutdown)
[Tree] (config>router>origin-validation>rpki-session shutdown)
[Tree] (config>router>msdp>peer shutdown)
[Tree] (config>router>mld shutdown)
[Tree] (config>router>mpls>mpls-tp>transit-path shutdown)
[Tree] (config>service>vprn>mvpn>provider-tunnel>selective>bier shutdown)
[Tree] (config>router>static-route-entry>next-hop shutdown)
[Tree] (config>service>vprn>radius-proxy>server shutdown)
[Tree] (config>router>static-route-entry>black-hole shutdown)
[Tree] (config>router>mcac>policy>bundle shutdown)
[Tree] (config>service>ies>sub-if>wlan-gw>pool-mgr>dhcp6-client>dhcpv4-nat shutdown)
[Tree] (config>cflowd>collector shutdown)
[Tree] (config>router>igmp shutdown)
[Tree] (config>service>vprn>video-interface shutdown)
[Tree] (config>router>mld>if shutdown)
[Tree] (config>router>radius-proxy>server shutdown)
[Tree] (config>service>vprn>sub-if>wlan-gw>pool-mgr>dhcp6-client>dhcpv4-nat shutdown)
[Tree] (config>router>mtrace2 shutdown)
[Tree] (config>router>igmp>tunnel-interface shutdown)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>vlan-ranges>range>vrgw>brg shutdown)
[Tree] (config>router>pim shutdown)
[Tree] (config>router>static-route-entry>indirect shutdown)
[Tree] (config>router>pim>rp>ipv6>rp-candidate shutdown)
[Tree] (config>router>msdp shutdown)
[Tree] (config>router>mcac>if-policy shutdown)
[Tree] (config>router>if shutdown)
[Tree] (config>service>ies>sub-if>wlan-gw>pool-mgr>dhcp6-client>slaac shutdown)
[Tree] (config>router>pim>rp>ipv6>embedded-rp shutdown)
[Tree] (config>service>vprn>mvpn>provider-tunnel>inclusive>bier shutdown)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw shutdown)
[Tree] (config>router>igmp>interface>mcac>mc-constraints shutdown)
[Tree] (config>cflowd shutdown)
[Tree] (config>router>radius-proxy>server>cache shutdown)
[Tree] (config>isa>video-group shutdown)
[Tree] (config>service>ies>video-interface shutdown)
[Tree] (config>router>pim>interface>mcac>mc-constraints shutdown)
[Tree] (config>router>msdp>group shutdown)
[Tree] (config>service>vprn>mvpn>pt>selective>rsvp shutdown)
[Tree] (config>service>vprn>mvpn>pt>inclusive>rsvp>lsp-template shutdown)
[Tree] (config>router>radius-proxy>cache shutdown)
[Tree] (config>router>igmp>if shutdown)
[Tree] (config>system>management-interface>cli>md-cli>environment>progress-indicator shutdown)
[Tree] (config>router>igmp>group-interface shutdown)
[Tree] (config>service>vprn>mvpn>pt>inclusive>mldp shutdown)
[Tree] (config>router>pim>interface shutdown)
[Tree] (config>service>ies>sub-if>grp-if>brg shutdown)
[Tree] (config>router>if>eth-cfm>mep shutdown)
[Tree] (config>router>mld>grp-if>mcac>mc-constraints shutdown)
[Tree] (config>service>vprn>radius-proxy>server>cache shutdown)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>brg shutdown)
[Tree] (config>aaa>radius-scr-plcy>primary shutdown)
[Tree] (config>aaa>radius-scr-plcy>secondary shutdown)
[Tree] (config>service>vprn>mvpn>pt>selective>mldp shutdown)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>brg shutdown)
[Tree] (config>router>mld>group-interface shutdown)
[Tree] (config>service>ies>sub-if>wlan-gw>pool-mgr>dhcp6-client>ia-na shutdown)
[Tree] (config>service>vprn>sub-if>grp-if>brg shutdown)
[Tree] (config>router>pim>rp>ipv6>bsr-candidate shutdown)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw shutdown)
[Tree] (config>service>vpls>provider-tunnel>selective shutdown)
[Tree] (config>router>pim>rp>rp-candidate shutdown)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>vlan-ranges>range>vrgw>brg shutdown)
[Tree] (config>service>vprn>sub-if>wlan-gw>pool-mgr>dhcp6-client>ia-na shutdown)
Full Context
configure service vprn subscriber-interface wlan-gw pool-mgr dhcp6-client slaac shutdown
configure router msdp group peer shutdown
configure router pim rp bsr-candidate shutdown
configure router origin-validation rpki-session shutdown
configure router msdp peer shutdown
configure router mld shutdown
configure router mpls mpls-tp transit-path shutdown
configure service vprn mvpn provider-tunnel selective bier shutdown
configure router static-route-entry next-hop shutdown
configure service vprn radius-proxy server shutdown
configure router static-route-entry black-hole shutdown
configure router mcac policy bundle shutdown
configure service ies subscriber-interface wlan-gw pool-mgr dhcp6-client dhcpv4-nat shutdown
configure cflowd collector shutdown
configure router igmp shutdown
configure service vprn video-interface shutdown
configure router mld interface shutdown
configure router radius-proxy server shutdown
configure service vprn subscriber-interface wlan-gw pool-mgr dhcp6-client dhcpv4-nat shutdown
configure router mtrace2 shutdown
configure router igmp tunnel-interface shutdown
configure service ies subscriber-interface group-interface wlan-gw vlan-ranges range vrgw brg shutdown
configure router pim shutdown
configure router static-route-entry indirect shutdown
configure router pim rp ipv6 rp-candidate shutdown
configure router msdp shutdown
configure router mcac if-policy shutdown
configure router interface shutdown
configure service ies subscriber-interface wlan-gw pool-mgr dhcp6-client slaac shutdown
configure router pim rp ipv6 embedded-rp shutdown
configure service vprn mvpn provider-tunnel inclusive bier shutdown
configure service vprn subscriber-interface group-interface wlan-gw shutdown
configure router igmp interface mcac mc-constraints shutdown
configure cflowd shutdown
configure router radius-proxy server cache shutdown
configure isa video-group shutdown
configure service ies video-interface shutdown
configure router pim interface mcac mc-constraints shutdown
configure router msdp group shutdown
configure service vprn mvpn provider-tunnel selective rsvp shutdown
configure service vprn mvpn pt inclusive rsvp lsp-template shutdown
configure router radius-proxy cache shutdown
configure router igmp interface shutdown
configure system management-interface cli md-cli environment progress-indicator shutdown
configure router igmp group-interface shutdown
configure service vprn mvpn provider-tunnel inclusive mldp shutdown
configure router pim interface shutdown
configure service ies subscriber-interface group-interface brg shutdown
configure router interface eth-cfm mep shutdown
configure router mld group-interface mcac mc-constraints shutdown
configure service vprn radius-proxy server cache shutdown
configure service vprn subscriber-interface group-interface wlan-gw ranges range brg shutdown
configure aaa radius-script-policy primary shutdown
configure aaa radius-script-policy secondary shutdown
configure service vprn mvpn provider-tunnel selective mldp shutdown
configure service ies subscriber-interface group-interface wlan-gw ranges range brg shutdown
configure router mld group-interface shutdown
configure service ies subscriber-interface wlan-gw pool-mgr dhcp6-client ia-na shutdown
configure service vprn subscriber-interface group-interface brg shutdown
configure router pim rp ipv6 bsr-candidate shutdown
configure service ies subscriber-interface group-interface wlan-gw shutdown
configure service vpls provider-tunnel selective shutdown
configure router pim rp rp-candidate shutdown
configure service vprn subscriber-interface group-interface wlan-gw vlan-ranges range vrgw brg shutdown
configure service vprn subscriber-interface wlan-gw pool-mgr dhcp6-client ia-na shutdown
Description
This command administratively disables the entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. Many entities must be explicitly enabled using the no shutdown command. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
Unlike other commands and parameters where the default state is not indicated in the configuration file, shutdown and no shutdown are always indicated in system-generated configuration files.
The no form of this command places the entity into an administratively enabled state.
Default
no shutdown
Platforms
All
- configure router mld interface shutdown
- configure service vprn mvpn provider-tunnel inclusive bier shutdown
- configure router pim rp ipv6 bsr-candidate shutdown
- configure router msdp shutdown
- configure router static-route-entry next-hop shutdown
- configure service vpls provider-tunnel selective shutdown
- configure router pim rp bsr-candidate shutdown
- configure service vprn mvpn provider-tunnel selective mldp shutdown
- configure router static-route-entry black-hole shutdown
- configure router mtrace2 shutdown
- configure router mld shutdown
- configure router igmp interface shutdown
- configure system management-interface cli md-cli environment progress-indicator shutdown
- configure router origin-validation rpki-session shutdown
- configure router pim rp ipv6 rp-candidate shutdown
- configure router mcac if-policy shutdown
- configure router igmp shutdown
- configure router interface shutdown
- configure router mcac policy bundle shutdown
- configure service vprn mvpn provider-tunnel selective bier shutdown
- configure router pim rp ipv6 embedded-rp shutdown
- configure router msdp peer shutdown
- configure router pim rp rp-candidate shutdown
- configure router pim interface mcac mc-constraints shutdown
- configure router msdp group shutdown
- configure router msdp group peer shutdown
- configure cflowd shutdown
- configure router igmp tunnel-interface shutdown
- configure router igmp interface mcac mc-constraints shutdown
- configure router static-route-entry indirect shutdown
- configure service vprn mvpn provider-tunnel inclusive mldp shutdown
- configure cflowd collector shutdown
- configure router pim interface shutdown
- configure router pim shutdown
- configure service vprn mvpn provider-tunnel selective rsvp shutdown
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure router mpls mpls-tp transit-path shutdown
- configure router interface eth-cfm mep shutdown
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure aaa radius-script-policy primary shutdown
- configure aaa radius-script-policy secondary shutdown
- configure router mld group-interface mcac mc-constraints shutdown
- configure service vprn subscriber-interface group-interface brg shutdown
- configure router mld group-interface shutdown
- configure service vprn radius-proxy server shutdown
- configure router radius-proxy server shutdown
- configure router radius-proxy server cache shutdown
- configure router igmp group-interface shutdown
- configure service vprn radius-proxy server cache shutdown
- configure service ies subscriber-interface group-interface brg shutdown
7450 ESS, 7750 SR, 7750 SR-s
- configure service vprn video-interface shutdown
- configure service ies video-interface shutdown
- configure isa video-group shutdown
7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface wlan-gw shutdown
- configure service vprn subscriber-interface group-interface wlan-gw shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>subscr-mgmt>shcv-policy>trigger shutdown)
Full Context
configure subscriber-mgmt shcv-policy trigger shutdown
Description
This command administratively disables the SHCV triggers.
The no form of this command administratively enables the the SHCV triggers.
Default
no shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>subscr-mgmt>shcv-policy>periodic shutdown)
Full Context
configure subscriber-mgmt shcv-policy periodic shutdown
Description
This command administratively disables the periodic connectivity verification.
The no form of this command administratively enables the periodic connectivity verification.
Default
no shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>vprn>sub-if>grp-if>ipoe-session shutdown)
[Tree] (config>service>ies>sub-if>grp-if>ipoe-session shutdown)
[Tree] (config>service>vpls>sap>ipoe-session shutdown)
Full Context
configure service vprn subscriber-interface group-interface ipoe-session shutdown
configure service ies subscriber-interface group-interface ipoe-session shutdown
configure service vpls sap ipoe-session shutdown
Description
The shutdown command enables or disables IPoE session management on a group interface or capture SAP.
A shutdown of the IPoE session CLI hierarchy on a group-interface clears all active IPoE sessions on that interface, resulting in a deletion of all corresponding subscriber hosts.
On wlan-gw group interfaces it is not possible to disable an IPoE session.
The no form of this command reverts to the default.
Default
shutdown
no shutdown on wlan-gw group interfaces
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt shutdown)
[Tree] (config>service>ies>if>vrrp shutdown)
[Tree] (config>service>ies>sub-if>grp-if>sap>static-host shutdown)
[Tree] (config>service>ies>sub-if>grp-if shutdown)
[Tree] (config>service>ies>sub-if>grp-if>pppoe shutdown)
[Tree] (config>service>ies>sub-if>grp-if>ipv6>router-advertisements shutdown)
[Tree] (config>service>ies>aarp-interface shutdown)
[Tree] (config>service>ies>if>spoke-sdp>control-channel-status shutdown)
[Tree] (config>service>ies>if>sap>eth-cfm shutdown)
[Tree] (config>service>ies>sub-if>dhcp shutdown)
[Tree] (config>service>ies>if>dhcp shutdown)
[Tree] (config>service>ies>sub-if>grp-if>dhcp shutdown)
[Tree] (config>service>ies>sub-if>grp-if>ipv6>dhcp6>proxy-server shutdown)
[Tree] (config>service>ies>if>spoke-sdp shutdown)
[Tree] (config>service>ies>aarp-interface>spoke-sdp shutdown)
[Tree] (config>service>ies>if>sap>static-host shutdown)
[Tree] (config>service>ies>if shutdown)
[Tree] (config>service>ies shutdown)
[Tree] (config>service>ies>sub-if>grp-if>sap shutdown)
[Tree] (config>service>ies>redundant-interface shutdown)
[Tree] (config>service>ies>if>dhcp>proxy-server shutdown)
Full Context
configure service ies subscriber-interface group-interface sap sub-sla-mgmt shutdown
configure service ies interface vrrp shutdown
configure service ies subscriber-interface group-interface sap static-host shutdown
configure service ies subscriber-interface group-interface shutdown
configure service ies subscriber-interface group-interface pppoe shutdown
configure service ies subscriber-interface group-interface ipv6 router-advertisements shutdown
configure service ies aarp-interface shutdown
configure service ies interface spoke-sdp control-channel-status shutdown
configure service ies interface sap eth-cfm shutdown
configure service ies subscriber-interface dhcp shutdown
configure service ies interface dhcp shutdown
configure service ies subscriber-interface group-interface dhcp shutdown
configure service ies subscriber-interface group-interface ipv6 dhcp6 proxy-server shutdown
configure service ies interface spoke-sdp shutdown
configure service ies aarp-interface spoke-sdp shutdown
configure service ies interface sap static-host shutdown
configure service ies interface shutdown
configure service ies shutdown
configure service ies subscriber-interface group-interface sap shutdown
configure service ies redundant-interface shutdown
configure service ies interface dhcp proxy-server shutdown
Description
This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
Services are created in the administratively down (shutdown) state. When a no shutdown command is entered, the service becomes administratively up and then tries to enter the operationally up state. Default administrative states for services and service entities is described below in Special Cases.
The no form of this command places the entity into an administratively enabled state.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface shutdown
- configure service ies subscriber-interface group-interface pppoe shutdown
- configure service ies subscriber-interface dhcp shutdown
- configure service ies redundant-interface shutdown
- configure service ies subscriber-interface group-interface sap sub-sla-mgmt shutdown
- configure service ies subscriber-interface group-interface dhcp shutdown
- configure service ies subscriber-interface group-interface ipv6 router-advertisements shutdown
- configure service ies subscriber-interface group-interface sap shutdown
- configure service ies interface sap static-host shutdown
- configure service ies subscriber-interface group-interface sap static-host shutdown
- configure service ies subscriber-interface group-interface ipv6 dhcp6 proxy-server shutdown
All
- configure service ies interface dhcp proxy-server shutdown
- configure service ies interface dhcp shutdown
- configure service ies interface vrrp shutdown
- configure service ies interface spoke-sdp shutdown
- configure service ies shutdown
- configure service ies interface shutdown
- configure service ies interface spoke-sdp control-channel-status shutdown
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service ies aarp-interface spoke-sdp shutdown
- configure service ies aarp-interface shutdown
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service ies interface sap eth-cfm shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>ies>sub-if>grp-if>wpp shutdown)
[Tree] (config>service>vprn>sub-if>grp-if shutdown)
[Tree] (config>service>vprn>sub-if>grp-if>data-trigger shutdown)
[Tree] (config>service>ies>sub-if>grp-if>data-trigger shutdown)
[Tree] (config>service>vprn>redundant-interface shutdown)
[Tree] (config>redundancy>multi-chassis>peer shutdown)
[Tree] (config>service>vprn>sub-if>grp-if>wpp shutdown)
[Tree] (config>service>vprn>sub-if>grp-if>wpp>portals shutdown)
[Tree] (config>service>vprn>sub-if>grp-if>gtp-parameters shutdown)
[Tree] (config>service>ies>sub-if>grp-if>srrp shutdown)
[Tree] (config>service>vpls>gsmp>group shutdown)
[Tree] (config>subscr-mgmt>sub-ident-pol>secondary shutdown)
[Tree] (config>service>vprn>subscriber-interface shutdown)
[Tree] (config>redundancy>multi-chassis>peer>mc-lag shutdown)
[Tree] (config>service>ies>sub-if>grp-if>gtp-parameters shutdown)
[Tree] (config>subscr-mgmt>sub-ident-pol>primary shutdown)
[Tree] (config>aaa>wpp>portal-groups>portal-group shutdown)
[Tree] (config>subscr-mgmt>sub-ident-pol>tertiary shutdown)
[Tree] (config>aaa>diam>node>peer shutdown)
[Tree] (config>service>ies>subscriber-interface shutdown)
[Tree] (config>redundancy>multi-chassis>peer>sync shutdown)
[Tree] (config>aaa>route-downloader shutdown)
[Tree] (config>service>vprn>sub-if>grp-if>srrp shutdown)
[Tree] (config>service>vprn>red-if>spoke-sdp shutdown)
[Tree] (config>subscr-mgmt>sub-mcac-policy shutdown)
[Tree] (config>service>vpls>gsmp>group>neighbor shutdown)
[Tree] (config>service>vpls>sap>sub-sla-mgmt shutdown)
[Tree] (config>service>ies>sub-if>grp-if>arp-host shutdown)
[Tree] (config>service>vpls>gsmp shutdown)
Full Context
configure service ies subscriber-interface group-interface wpp shutdown
configure service vprn subscriber-interface group-interface shutdown
configure service vprn subscriber-interface group-interface data-trigger shutdown
configure service ies subscriber-interface group-interface data-trigger shutdown
configure service vprn redundant-interface shutdown
configure redundancy multi-chassis peer shutdown
configure service vprn subscriber-interface group-interface wpp shutdown
configure service vprn subscriber-interface group-interface wpp portals shutdown
configure service vprn subscriber-interface group-interface gtp-parameters shutdown
configure service ies subscriber-interface group-interface srrp shutdown
configure service vpls gsmp group shutdown
configure subscriber-mgmt sub-ident-policy secondary shutdown
configure service vprn subscriber-interface shutdown
configure redundancy multi-chassis peer mc-lag shutdown
configure service ies subscriber-interface group-interface gtp-parameters shutdown
configure subscriber-mgmt sub-ident-policy primary shutdown
configure aaa wpp portal-groups portal-group shutdown
configure subscriber-mgmt sub-ident-policy tertiary shutdown
configure aaa diameter node peer shutdown
configure service ies subscriber-interface shutdown
configure redundancy multi-chassis peer sync shutdown
configure aaa route-downloader shutdown
configure service vprn subscriber-interface group-interface srrp shutdown
configure service vprn redundant-interface spoke-sdp shutdown
configure subscriber-mgmt sub-mcac-policy shutdown
configure service vpls gsmp group neighbor shutdown
configure service vpls sap sub-sla-mgmt shutdown
configure service ies subscriber-interface group-interface arp-host shutdown
configure service vpls gsmp shutdown
Description
The shutdown command administratively disables the entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. Many entities must be explicitly enabled using the no shutdown command.
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they can be deleted.
Unlike other commands and parameters where the default state is not indicated in the configuration file, shutdown and no shutdown are always indicated in system generated configuration files.
Shutting down a subscriber interface on a 7750 SR will operationally shut down all child group interfaces and SAPs. Shutting down a group interface on a 7750 SR will operationally shut down all SAPs that are part of that group-interface.
The no form of this command puts an entity into the administratively enabled state.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn subscriber-interface group-interface shutdown
- configure service vprn subscriber-interface group-interface srrp shutdown
- configure service vprn subscriber-interface group-interface wpp shutdown
- configure aaa route-downloader shutdown
- configure service vpls sap sub-sla-mgmt shutdown
- configure subscriber-mgmt sub-ident-policy tertiary shutdown
- configure aaa diameter node peer shutdown
- configure service vprn redundant-interface shutdown
- configure subscriber-mgmt sub-ident-policy secondary shutdown
- configure service ies subscriber-interface group-interface srrp shutdown
- configure service ies subscriber-interface group-interface data-trigger shutdown
- configure service ies subscriber-interface shutdown
- configure service ies subscriber-interface group-interface wpp shutdown
- configure service vprn subscriber-interface group-interface data-trigger shutdown
- configure service vprn subscriber-interface shutdown
- configure service vprn redundant-interface spoke-sdp shutdown
- configure service ies subscriber-interface group-interface arp-host shutdown
- configure aaa wpp portal-groups portal-group shutdown
- configure subscriber-mgmt sub-ident-policy primary shutdown
All
- configure service vpls gsmp group shutdown
- configure redundancy multi-chassis peer mc-lag shutdown
- configure service vpls gsmp shutdown
- configure redundancy multi-chassis peer sync shutdown
- configure redundancy multi-chassis peer shutdown
- configure service vpls gsmp group neighbor shutdown
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s
- configure subscriber-mgmt sub-mcac-policy shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>vprn>rip>group shutdown)
[Tree] (config>service>vprn>red-if>spoke-sdp>control-channel-status shutdown)
[Tree] (config>service>vprn>igmp>if shutdown)
[Tree] (config>service>vprn>aarp-interface shutdown)
[Tree] (config>service>vprn>igmp-trk shutdown)
[Tree] (config>service>vprn>mld>grp-if>mcac>mc-constraints shutdown)
[Tree] (config>service>vprn>if>sap>static-host shutdown)
[Tree] (config>service>vprn>ospf3>area>virtual-link shutdown)
[Tree] (config>service>vprn>ospf shutdown)
[Tree] (config>service>vprn>l2tp>tunnel shutdown)
[Tree] (config>service>vprn>pim>if>mcac>mc-constraints shutdown)
[Tree] (config>service>vprn>bgp-ipvpn>srv6 shutdown)
[Tree] (config>service>vprn>log>log-id shutdown)
[Tree] (config>service>vprn>pim shutdown)
[Tree] (config>service>vprn>pim>rp>ipv6>rp-candidate shutdown)
[Tree] (config>service>vprn>pim>rp>ipv6>bsr-candidate shutdown)
[Tree] (config>service>vprn>ospf>area>sham-link shutdown)
[Tree] (config>service>vprn>mvpn>provider-tunnel>inclusive>pim shutdown)
[Tree] (config>service>vprn>pim>if shutdown)
[Tree] (config>service>vprn>msdp>group>peer shutdown)
[Tree] (config>service>vprn>bgp-evpn>mpls shutdown)
[Tree] (config>service>vprn>gsmp>group>neighbor shutdown)
[Tree] (config>service>vprn>bgp>group>neighbor shutdown)
[Tree] (config>service>vprn>ospf3>area>if shutdown)
[Tree] (config>service>vprn>isis>if shutdown)
[Tree] (config>service>vprn>l2tp shutdown)
[Tree] (config>service>vprn>msdp>group shutdown)
[Tree] (config>service>vprn>if>sap>ipsec-tunnel shutdown)
[Tree] (config>service>vprn>bgp>group shutdown)
[Tree] (config>service>vprn>l2tpv3 shutdown)
[Tree] (config>service>vprn>igmp shutdown)
[Tree] (config>service>vprn>igmp>if>mcac>mc-constraints shutdown)
[Tree] (config>service>vprn>bgp shutdown)
[Tree] (config>service>vprn shutdown)
[Tree] (config>service>vprn>if>ipv6>vrrp shutdown)
[Tree] (config>service>vprn>isis shutdown)
[Tree] (config>service>vprn>igmp>grp-if>mcac>mc-constraints shutdown)
[Tree] (config>service>vprn>if>sap shutdown)
[Tree] (config>service>vprn>ospf>area>virtual-link shutdown)
[Tree] (config>service>vprn>pim>rp>ipv6>embedded-rp shutdown)
[Tree] (config>service>vprn>rip>group>neighbor shutdown)
[Tree] (config>service>vprn>msdp shutdown)
[Tree] (config>service>vprn>nw-if>eth-cfm>mep shutdown)
[Tree] (config>service>vprn>nw-if shutdown)
[Tree] (config>service>vprn>aarp-interface>spoke-sdp shutdown)
[Tree] (config>service>vprn>red-if>spoke-sdp shutdown)
[Tree] (config>service>vprn>red-if shutdown)
[Tree] (config>service>vprn>msdp>peer shutdown)
[Tree] (config>service>vprn>if>vrrp shutdown)
[Tree] (config>service>vprn>ospf>area>if shutdown)
[Tree] (config>service>vprn>aaa>rmt-srv>radius shutdown)
[Tree] (config>service>vprn>rip shutdown)
[Tree] (config>service>vprn>ospf3 shutdown)
[Tree] (config>service>vprn>bgp-ipvpn>mpls shutdown)
[Tree] (config>service>vprn>gsmp shutdown)
[Tree] (config>service>vprn>igmp>if>mcac shutdown)
[Tree] (config>service>vprn>gsmp>group shutdown)
[Tree] (config>service>vprn>router-advert>if shutdown)
[Tree] (config>service>vprn>pim>rp>bsr-candidate shutdown)
[Tree] (config>service>vprn>if shutdown)
[Tree] (config>service>vprn>ntp shutdown)
[Tree] (config>service>vprn>mld>if>mcac>mc-constraints shutdown)
Full Context
configure service vprn rip group shutdown
configure service vprn redundant-interface spoke-sdp control-channel-status shutdown
configure service vprn igmp interface shutdown
configure service vprn aarp-interface shutdown
configure service vprn igmp-host-tracking shutdown
configure service vprn mld group-interface mcac mc-constraints shutdown
configure service vprn interface sap static-host shutdown
configure service vprn ospf3 area virtual-link shutdown
configure service vprn ospf shutdown
configure service vprn l2tp tunnel shutdown
configure service vprn pim interface mcac mc-constraints shutdown
configure service vprn bgp-ipvpn segment-routing-v6 shutdown
configure service vprn log log-id shutdown
configure service vprn pim shutdown
configure service vprn pim rp ipv6 rp-candidate shutdown
configure service vprn pim rp ipv6 bsr-candidate shutdown
configure service vprn ospf area sham-link shutdown
configure service vprn mvpn provider-tunnel inclusive pim shutdown
configure service vprn pim interface shutdown
configure service vprn msdp group peer shutdown
configure service vprn bgp-evpn mpls shutdown
configure service vprn gsmp group neighbor shutdown
configure service vprn bgp group neighbor shutdown
configure service vprn ospf3 area interface shutdown
configure service vprn isis interface shutdown
configure service vprn l2tp shutdown
configure service vprn msdp group shutdown
configure service vprn interface sap ipsec-tunnel shutdown
configure service vprn bgp group shutdown
configure service vprn l2tpv3 shutdown
configure service vprn igmp shutdown
configure service vprn igmp interface mcac mc-constraints shutdown
configure service vprn bgp shutdown
configure service vprn shutdown
configure service vprn interface ipv6 vrrp shutdown
configure service vprn isis shutdown
configure service vprn igmp group-interface mcac mc-constraints shutdown
configure service vprn interface sap shutdown
configure service vprn ospf area virtual-link shutdown
configure service vprn pim rp ipv6 embedded-rp shutdown
configure service vprn rip group neighbor shutdown
configure service vprn msdp shutdown
configure service vprn nw-if eth-cfm mep shutdown
configure service vprn network-interface shutdown
configure service vprn aarp-interface spoke-sdp shutdown
configure service vprn redundant-interface spoke-sdp shutdown
configure service vprn redundant-interface shutdown
configure service vprn msdp peer shutdown
configure service vprn interface vrrp shutdown
configure service vprn ospf area interface shutdown
configure service vprn aaa remote-servers radius shutdown
configure service vprn rip shutdown
configure service vprn ospf3 shutdown
configure service vprn bgp-ipvpn mpls shutdown
configure service vprn gsmp shutdown
configure service vprn igmp interface mcac shutdown
configure service vprn gsmp group shutdown
configure service vprn router-advertisement interface shutdown
configure service vprn pim rp bsr-candidate shutdown
configure service vprn interface shutdown
configure service vprn ntp shutdown
configure service vprn mld interface mcac mc-constraints shutdown
Description
This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
Services are created in the administratively down (shutdown) state. When a no shutdown command is entered, the service becomes administratively up and then tries to enter the operationally up state. Default administrative states for services and service entities is described below in Special Cases.
The no form of this command places the entity into an administratively enabled state.
If the AS number was previously changed, the BGP AS number inherits the new value.
Platforms
All
- configure service vprn bgp shutdown
- configure service vprn ospf3 area virtual-link shutdown
- configure service vprn ospf3 shutdown
- configure service vprn interface vrrp shutdown
- configure service vprn ospf area virtual-link shutdown
- configure service vprn igmp shutdown
- configure service vprn ospf area sham-link shutdown
- configure service vprn msdp group peer shutdown
- configure service vprn igmp interface mcac shutdown
- configure service vprn gsmp group neighbor shutdown
- configure service vprn pim rp ipv6 embedded-rp shutdown
- configure service vprn isis interface shutdown
- configure service vprn bgp group neighbor shutdown
- configure service vprn ospf shutdown
- configure service vprn pim interface shutdown
- configure service vprn interface ipv6 vrrp shutdown
- configure service vprn ospf area interface shutdown
- configure service vprn network-interface shutdown
- configure service vprn interface sap shutdown
- configure service vprn log log-id shutdown
- configure service vprn mvpn provider-tunnel inclusive pim shutdown
- configure service vprn igmp interface mcac mc-constraints shutdown
- configure service vprn gsmp group shutdown
- configure service vprn pim shutdown
- configure service vprn msdp shutdown
- configure service vprn mld interface mcac mc-constraints shutdown
- configure service vprn pim rp ipv6 rp-candidate shutdown
- configure service vprn igmp interface shutdown
- configure service vprn interface shutdown
- configure service vprn shutdown
- configure service vprn bgp-ipvpn mpls shutdown
- configure service vprn gsmp shutdown
- configure service vprn router-advertisement interface shutdown
- configure service vprn bgp group shutdown
- configure service vprn pim rp bsr-candidate shutdown
- configure service vprn ntp shutdown
- configure service vprn aaa remote-servers radius shutdown
- configure service vprn isis shutdown
- configure service vprn pim rp ipv6 bsr-candidate shutdown
- configure service vprn msdp peer shutdown
- configure service vprn rip shutdown
- configure service vprn bgp-evpn mpls shutdown
- configure service vprn ospf3 area interface shutdown
- configure service vprn msdp group shutdown
- configure service vprn rip group neighbor shutdown
- configure service vprn rip group shutdown
- configure service vprn pim interface mcac mc-constraints shutdown
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn igmp-host-tracking shutdown
- configure service vprn redundant-interface spoke-sdp control-channel-status shutdown
- configure service vprn interface sap static-host shutdown
- configure service vprn redundant-interface shutdown
- configure service vprn mld group-interface mcac mc-constraints shutdown
- configure service vprn igmp group-interface mcac mc-constraints shutdown
- configure service vprn redundant-interface spoke-sdp shutdown
- configure service vprn l2tp shutdown
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn aarp-interface shutdown
- configure service vprn aarp-interface spoke-sdp shutdown
- configure service vprn interface sap ipsec-tunnel shutdown
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
- configure service vprn bgp-ipvpn segment-routing-v6 shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>vprn shutdown)
[Tree] (config>service>vpls>sap>arp-host shutdown)
[Tree] (config>service>vpls>spoke-sdp shutdown)
[Tree] (config>service>vpls>sap shutdown)
[Tree] (config>service>ies>if>sap shutdown)
[Tree] (config>service>vpls>mesh-sdp shutdown)
[Tree] (config>service>vpls>wlan-gw shutdown)
[Tree] (config>service>vpls shutdown)
Full Context
configure service vprn shutdown
configure service vpls sap arp-host shutdown
configure service vpls spoke-sdp shutdown
configure service vpls sap shutdown
configure service ies interface sap shutdown
configure service vpls mesh-sdp shutdown
configure service vpls wlan-gw shutdown
configure service vpls shutdown
Description
This command administratively disables the entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. Many entities must be explicitly enabled using the no shutdown command. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
Unlike other commands and parameters where the default state is not indicated in the configuration file, shutdown and no shutdown are always indicated in system-generated configuration files.
Default administrative states for services and service entities is described below in Special Cases.
The no form of this command places the entity into an administratively enabled state.
Platforms
All
- configure service vpls sap shutdown
- configure service vpls mesh-sdp shutdown
- configure service vpls spoke-sdp shutdown
- configure service ies interface sap shutdown
- configure service vprn shutdown
- configure service vpls shutdown
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service vpls sap arp-host shutdown
7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service vpls wlan-gw shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>vpls>sap>dhcp>proxy shutdown)
[Tree] (config>service>vpls>interface shutdown)
[Tree] (config>service>vpls>mac-notification shutdown)
[Tree] (config>service>vpls>spoke-sdp shutdown)
[Tree] (config>service>vpls>sap>spb shutdown)
[Tree] (config>service>vpls>mld-snooping>mvr shutdown)
[Tree] (config>service>vpls>bind>evpn-mcast-gateway shutdown)
[Tree] (config>service>vpls>mrp>mvrp shutdown)
[Tree] (config>service>vpls>mesh-sdp>eth-cfm>mep shutdown)
[Tree] (config>service>vpls>sap>l2tpv3-session shutdown)
[Tree] (config>service>vpls>igmp-snooping>mvr shutdown)
[Tree] (config>service>vpls>mrp shutdown)
[Tree] (config>service>vpls>sap>mld-snooping>mcac>mc-constraints shutdown)
[Tree] (config>service>vpls>mld-snooping shutdown)
[Tree] (config>service>vpls>spoke-sdp>stp shutdown)
[Tree] (config>service>vpls>sap>igmp-snooping>mcac>mc-constraints shutdown)
[Tree] (config>service>vpls>spoke-sdp>eth-cfm>mep shutdown)
[Tree] (config>service>vpls>sap>eth-cfm>mep shutdown)
[Tree] (config>service>vpls>spb>level shutdown)
[Tree] (config>service>vpls>spoke-sdp>spb shutdown)
[Tree] (config>service>vpls>igmp-snooping shutdown)
[Tree] (config>service>vpls>bgp-ad shutdown)
[Tree] (config>service>vpls>mac-move shutdown)
[Tree] (config>service>vpls>eth-cfm>mep shutdown)
[Tree] (config>service>vpls>stp shutdown)
[Tree] (config>service>vpls>sap>stp shutdown)
Full Context
configure service vpls sap dhcp proxy-server shutdown
configure service vpls interface shutdown
configure service vpls mac-notification shutdown
configure service vpls spoke-sdp shutdown
configure service vpls sap spb shutdown
configure service vpls mld-snooping mvr shutdown
configure service vpls allow-ip-int-bind evpn-mcast-gateway shutdown
configure service vpls mrp mvrp shutdown
configure service vpls mesh-sdp eth-cfm mep shutdown
configure service vpls sap l2tpv3-session shutdown
configure service vpls igmp-snooping mvr shutdown
configure service vpls mrp shutdown
configure service vpls sap mld-snooping mcac mc-constraints shutdown
configure service vpls mld-snooping shutdown
configure service vpls spoke-sdp stp shutdown
configure service vpls sap igmp-snooping mcac mc-constraints shutdown
configure service vpls spoke-sdp eth-cfm mep shutdown
configure service vpls sap eth-cfm mep shutdown
configure service vpls spb level shutdown
configure service vpls spoke-sdp spb shutdown
configure service vpls igmp-snooping shutdown
configure service vpls bgp-ad shutdown
configure service vpls mac-move shutdown
configure service vpls eth-cfm mep shutdown
configure service vpls stp shutdown
configure service vpls sap stp shutdown
Description
This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
Services are created in the administratively down (shutdown) state. When a no shutdown command is entered, the service becomes administratively up and then tries to enter the operationally up state. Default administrative states for services and service entities is described below in Special Cases.
The no form of this command places the entity into an administratively enabled state.
Platforms
All
- configure service vpls mld-snooping shutdown
- configure service vpls spb level shutdown
- configure service vpls spoke-sdp shutdown
- configure service vpls allow-ip-int-bind evpn-mcast-gateway shutdown
- configure service vpls spoke-sdp stp shutdown
- configure service vpls interface shutdown
- configure service vpls sap l2tpv3-session shutdown
- configure service vpls igmp-snooping shutdown
- configure service vpls sap spb shutdown
- configure service vpls spoke-sdp spb shutdown
- configure service vpls mrp shutdown
- configure service vpls mrp mvrp shutdown
- configure service vpls mac-move shutdown
- configure service vpls stp shutdown
- configure service vpls mac-notification shutdown
- configure service vpls sap igmp-snooping mcac mc-constraints shutdown
- configure service vpls igmp-snooping mvr shutdown
- configure service vpls sap mld-snooping mcac mc-constraints shutdown
- configure service vpls sap dhcp proxy-server shutdown
- configure service vpls mld-snooping mvr shutdown
- configure service vpls bgp-ad shutdown
- configure service vpls sap stp shutdown
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service vpls mesh-sdp eth-cfm mep shutdown
- configure service vpls sap eth-cfm mep shutdown
- configure service vpls eth-cfm mep shutdown
- configure service vpls spoke-sdp eth-cfm mep shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>vpls>spb shutdown)
[Tree] (config>service>vpls>mrp>mmrp shutdown)
[Tree] (config>service>vpls>spoke-sdp>spb shutdown)
Full Context
configure service vpls spb shutdown
configure service vpls mrp mmrp shutdown
configure service vpls spoke-sdp spb shutdown
Description
This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.
The operational state of the entity is disabled as well as the operational state of any entities contained within.
The no form of this command administratively enables an entity.
SPB Interface — In the config>service>vpls>spb> context, the command disables the IS-IS interface. By default, the IS-IS interface is disabled (shutdown).
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>vprn>sub-if>grp-if>pppoe shutdown)
Full Context
configure service vprn subscriber-interface group-interface pppoe shutdown
Description
This command administratively disables the entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. Many entities must be explicitly enabled using the no shutdown command. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
The no form of this command places the entity into an administratively enabled state.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>port>tdm>e3 shutdown)
[Tree] (config>redundancy>multi-chassis>peer>mc-ipsec>domain shutdown)
[Tree] (config>card>xiom shutdown)
[Tree] (config>port>ethernet>dampening shutdown)
[Tree] (config>port>sonet-sdh>path shutdown)
[Tree] (config>lag>eth-cfm>mep shutdown)
[Tree] (config>card shutdown)
[Tree] (config>redundancy>multi-chassis>ipsec-domain shutdown)
[Tree] (config>port>ethernet>efm-oam shutdown)
[Tree] (config>port>tdm>e1>channel-group shutdown)
[Tree] (config>port>tdm>ds3 shutdown)
[Tree] (config>port>tdm>ds1 shutdown)
[Tree] (config>redundancy>mc>peer>mcr>ring shutdown)
[Tree] (config>redundancy>mc>peer>mcr>node>cv shutdown)
[Tree] (config>card>xiom>mda shutdown)
[Tree] (config>card>fp>ingress>mcast-path-management shutdown)
[Tree] (config>port>ethernet>symbol-monitor shutdown)
[Tree] (config>card>mda shutdown)
[Tree] (config>port>ethernet>dwl shutdown)
[Tree] (config>port>ethernet shutdown)
[Tree] (config>port>ethernet>ssm shutdown)
[Tree] (config>port>tdm>ds1>channel-group shutdown)
[Tree] (config>port shutdown)
[Tree] (config>port>tdm>e1 shutdown)
[Tree] (config>port-xc>pxc shutdown)
[Tree] (config>redundancy>mc>peer>mcr shutdown)
[Tree] (config>port>ethernet>eth-cfm>mep shutdown)
[Tree] (config>lag shutdown)
[Tree] (config>redundancy>multi-chassis>peer>mc-ep shutdown)
[Tree] (config>port>otu shutdown)
Full Context
configure port tdm e3 shutdown
configure redundancy multi-chassis peer mc-ipsec domain shutdown
configure card xiom shutdown
configure port ethernet dampening shutdown
configure port sonet-sdh path shutdown
configure lag eth-cfm mep shutdown
configure card shutdown
configure redundancy multi-chassis ipsec-domain shutdown
configure port ethernet efm-oam shutdown
configure port tdm e1 channel-group shutdown
configure port tdm ds3 shutdown
configure port tdm ds1 shutdown
configure redundancy multi-chassis peer mc-ring ring shutdown
configure redundancy multi-chassis peer mc-ring ring ring-node connectivity-verify shutdown
configure card xiom mda shutdown
configure card fp ingress mcast-path-management shutdown
configure port ethernet symbol-monitor shutdown
configure card mda shutdown
configure port ethernet down-when-looped shutdown
configure port ethernet shutdown
configure port ethernet ssm shutdown
configure port tdm ds1 channel-group shutdown
configure port shutdown
configure port tdm e1 shutdown
configure port-xc pxc shutdown
configure redundancy multi-chassis peer mc-ring shutdown
configure port ethernet eth-cfm mep shutdown
configure lag shutdown
configure redundancy multi-chassis peer mc-endpoint shutdown
configure port otu shutdown
Description
This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.
The operational state of the entity is disabled as well as the operational state of any entities contained within.
This command is supported on TDM satellite.
The no form of this command administratively enables an entity.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
- configure port tdm ds1 shutdown
- configure port tdm e3 shutdown
- configure port tdm ds3 shutdown
- configure port tdm ds1 channel-group shutdown
- configure port tdm e1 channel-group shutdown
- configure port tdm e1 shutdown
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure redundancy multi-chassis peer mc-ipsec domain shutdown
- configure redundancy multi-chassis ipsec-domain shutdown
7750 SR-1s, 7750 SR-2s, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s
- configure card xiom shutdown
- configure card xiom mda shutdown
All
- configure port ethernet shutdown
- configure port ethernet efm-oam shutdown
- configure port shutdown
- configure redundancy multi-chassis peer mc-ring ring shutdown
- configure lag shutdown
- configure card mda shutdown
- configure redundancy multi-chassis peer mc-ring shutdown
- configure port ethernet ssm shutdown
- configure redundancy multi-chassis peer mc-ring ring ring-node connectivity-verify shutdown
- configure port-xc pxc shutdown
- configure redundancy multi-chassis peer mc-endpoint shutdown
- configure port ethernet down-when-looped shutdown
- configure port ethernet dampening shutdown
- configure card shutdown
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure port otu shutdown
- configure port ethernet symbol-monitor shutdown
- configure port sonet-sdh path shutdown
- configure port ethernet eth-cfm mep shutdown
- configure lag eth-cfm mep shutdown
7450 ESS, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-7/12/12e, 7750 SR-s, 7950 XRS, VSR
- configure card fp ingress mcast-path-management shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>mcast-mgmt>mcast-rprt-dest shutdown)
Full Context
configure mcast-management mcast-reporting-dest shutdown
Description
This command administratively disables the entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. Many entities must be explicitly enabled using the no shutdown command. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
The no form of this command places the entity into an administratively enabled state.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>python>python-script shutdown)
[Tree] (config>python>py-policy>cache shutdown)
Full Context
configure python python-script shutdown
configure python python-policy cache shutdown
Description
Shutting down a Python script triggers the system to load and compile the script from the configured location(s). Since the system supports three locations, the primary, secondary and tertiary, the system will try to load the Python script in that order.
Shutting down a Python script will disable the Python script and cause the corresponding packet to pass through without any modification.
The no form of this command enables the cache or policy script.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>vpls>sap>dyn-svc shutdown)
Full Context
configure service vpls sap dynamic-services shutdown
Description
This command disables or enables data-triggered dynamic services on this capture-sap.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>dynsvc>ladb shutdown)
Full Context
configure service dynamic-services local-auth-db shutdown
Description
This command disables or enables the local authentication database. When disabled, the database cannot be used for authentication.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>dynsvc>ladb>user shutdown)
Full Context
configure service dynamic-services local-auth-db user-name shutdown
Description
This command disables or enables a user name entry in the local authentication database. When disabled, the entry is not matched.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>subscr-mgmt>svlan-statistics shutdown)
Full Context
configure subscriber-mgmt svlan-statistics shutdown
Description
This command administratively disables the entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. Many entities must be explicitly enabled using the no shutdown command. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
Unlike other commands and parameters where the default state is not indicated in the configuration file, shutdown and no shutdown are always indicated in system-generated configuration files.
The no form of this command places the entity into an administratively enabled state.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>subscr-mgmt>isa-svc-chain>evpn shutdown)
[Tree] (config>subscr-mgmt>isa-svc-chain>vas-filter shutdown)
Full Context
configure subscriber-mgmt isa-service-chaining evpn shutdown
configure subscriber-mgmt isa-service-chaining vas-filter shutdown
Description
This command administratively disables the entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. Many entities must be explicitly enabled using the no shutdown command. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
Unlike other commands and parameters where the default state is not indicated in the configuration file, shutdown and no shutdown are always indicated in system-generated configuration files.
The no form of this command puts an entity into the administratively enabled state.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>subscr-mgmt>diam-appl-plcy>gy>ccrt-replay shutdown)
[Tree] (config>subscr-mgmt>diam-appl-plcy>gx>ccrt-replay shutdown)
Full Context
configure subscriber-mgmt diameter-application-policy gy ccrt-replay shutdown
configure subscriber-mgmt diameter-application-policy gx ccrt-replay shutdown
Description
This command, enables or disables the CCR-T replay function for all Gx or Gy sessions that belong to the diameter application policy. Sessions in CCR-T replay are dropped when ccrt-replay is shut down.
The no form of this command enables the CCR-T replay function.
Default
shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>ies>sub-if>grp-if>ipv6>rtr-sol shutdown)
Full Context
configure service ies subscriber-interface group-interface ipv6 router-solicit shutdown
Description
This command enables SLAAC triggered host creation.
The no form of this command disables SLAAC triggered host creation.
Default
no shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>mpls>lsp-history shutdown)
Full Context
configure router mpls lsp-history shutdown
Description
This command enables the collection of up to the last 100 significant events for each RSVP-TE and SR-TE LSP.
A shutdown of the lsp-history pauses the collection of events, but does not remove previously collected events from memory.
The no form of this command disables the collection of significant events for LSPs.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>aaa>radius-srv-plcy>servers>health-check>test-account shutdown)
Full Context
configure aaa radius-server-policy servers health-check test-account shutdown
Description
This command disables the test account that probes the RADIUS server.
The no form of this command enables the capability.
Default
shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
shutdown sap-id [create]
no shutdown sap-id
Context
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>l2-access-points>l2-ap shutdown)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>l2-access-points>l2-ap shutdown)
Full Context
configure service vprn subscriber-interface group-interface wlan-gw l2-access-points l2-ap shutdown
configure service ies subscriber-interface group-interface wlan-gw l2-access-points l2-ap shutdown
Description
This command administratively enables this SAP to begin accepting Layer 2 packets for WIFI offloading.
The no form of this command disables this SAP.
Default
shutdown
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>subscr-mgmt>pfcp-association shutdown)
Full Context
configure subscriber-mgmt pfcp-association shutdown
Description
This command administratively enables or disables the PFCP association.
When administratively enabled, the system will try to maintain an active PFCP association with the configured peer. While no association is established, it will continue to retry setting up the association using the association-setup-retry configuration.
Shutting down a subscriber interface on a 7750 SR operationally shuts down all child group interfaces and SAPs. Shutting down a group interface on a 7750 SR operationally shuts down all SAPs that are part of that group interface.
Default
shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (cfg>sys>pwr-mgmt>peq shutdown)
Full Context
configure system power-management peq shutdown
Description
This command administratively enables/disables the APEQ.
Platforms
7750 SR-12e, 7950 XRS
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>card>fp>egress>wred-queue-control shutdown)
Full Context
configure card fp egress wred-queue-control shutdown
Description
This command enables or disables egress WRED queue support on the forwarding plane. By default, WRED queue support is disabled (shutdown). While disabled, the various wred-queue-control commands may be executed on the forwarding plane and SAP egress QoS policies and egress queue group templates with wred-queue enabled may be applied to egress SAPs and port, respectively. The forwarding plane will allocate WRED pools to the WRED queues and the appropriate WRED mega-pool size and CBS reserve size will be calculated, but the WRED mega-pool will be empty and all buffers will be allocated to the default mega-pool. Each WRED queue will be mapped to its appropriate default pool.
Once the no shutdown command is executed, the calculated WRED mega-pool buffers will be moved from the default mega-pool to the WRED mega-pool. The WRED mega-pool CBS reserve size will be applied and each egress WRED queue will be moved from its default mega-pool buffer pool to its WRED pool within the WRED mega-pool hierarchy.
The no form of this command enables WRED queuing on an egress forwarding plane.
Default
shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>anysec>tnl-enc>enc-grp>peer shutdown)
Full Context
configure anysec tunnel-encryption encryption-group peer shutdown
Description
This command shuts down the ANYsec and encryption to the peer.
The no form of this command enables ANYsec and encryption to the peer.
Default
shutdown
Platforms
7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>anysec>tnl-enc>enc-grp shutdown)
Full Context
configure anysec tunnel-encryption encryption-group shutdown
Description
This command shuts down the ANYsec on the encryption group.
The no form of this command enables ANYsec and encryption for the encryption group.
Default
shutdown
Platforms
7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>anysec>tnl-enc>sec-term-pol shutdown)
Full Context
configure anysec tunnel-encryption security-termination-policy shutdown
Description
This command places the tunnel in an operationally down state and causes traffic to drop. However, ANYsec remains enabled.
The no form of this command places the tunnel in an operationally up state.
Default
shutdown
Platforms
7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>port>ethernet>efm-oam>link-monitoring shutdown)
Full Context
configure port ethernet efm-oam link-monitoring shutdown
Description
This command enables the link monitoring function. Issuing a no shutdown will start the process. Issuing a shutdown will clear any previously established negative conditions that were a result of the link monitoring process on this port and all collected data. This also controls the advertising capabilities.
The no form of this command activates the link monitoring function.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame-period shutdown)
[Tree] (config>port>ethernet>efm-oam>link-mon>errored-symbols shutdown)
[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame-seconds shutdown)
[Tree] (config>port>ethernet>efm-oam>link-mon>errored-frame shutdown)
Full Context
configure port ethernet efm-oam link-monitoring errored-frame-period shutdown
configure port ethernet efm-oam link-monitoring errored-symbols shutdown
configure port ethernet efm-oam link-monitoring errored-frame-seconds shutdown
configure port ethernet efm-oam link-monitoring errored-frame shutdown
Description
This command enables or disables the local counting, thresholding and actions associated with this type of local monitor. Peer received errors are not controlled by this command. Reaction to peer messaging is defined in the peer-rdi-rx hierarchy.
The no form of this command activates the local monitoring function and actions for the event.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>port>ethernet>dot1x>macsec>sub-port shutdown)
Full Context
configure port ethernet dot1x macsec sub-port shutdown
Description
This command shuts down the MACsec under this sub-port specifically, including MKA negotiation. In the shutdown state, this port is not MACsec capable and all PDUs will be transmitted and expected without encryption and authentication.
The no form of this command puts the port in MACsec-enabled mode. A valid CA, different than any other CA configured on any other sub-port of this port and also a max-peer value larger than 0 must be configured. In MACsec-enabled mode, packets are sent in cleartext until the MKA session is up, and if the rx-must-be-encrypted is set on the port, all incoming packets with no MACsec encapsulations are dropped.
Default
shutdown
Platforms
All
shutdown
Syntax
shutdown
no shutdown
Context
[Tree] (config>lag>bfd>family shutdown)
Full Context
configure lag bfd family shutdown
Description
This command disables micro BFD sessions for this address family.
The no form of this command re-enables micro BFD sessions for this address family.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>eth-ring>path shutdown)
[Tree] (config>service>sdp>keep-alive shutdown)
[Tree] (config>service>pw-routing>hop shutdown)
[Tree] (config>service>sdp>class-forwarding shutdown)
[Tree] (config>eth-tunnel>path>eth-cfm>mep shutdown)
[Tree] (config>service>pw-template>stp shutdown)
[Tree] (config>service>sdp>binding>pw-port shutdown)
[Tree] (config>service>sdp shutdown)
Full Context
configure eth-ring path shutdown
configure service sdp keep-alive shutdown
configure service pw-routing hop shutdown
configure service sdp class-forwarding shutdown
configure eth-tunnel path eth-cfm mep shutdown
configure service pw-template stp shutdown
configure service sdp binding pw-port shutdown
configure service sdp shutdown
Description
This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
Services are created in the administratively down (shutdown) state. When a no shutdown command is entered, the service becomes administratively up and then tries to enter the operationally up state. Default administrative states for services and service entities is described below in Special Cases.
The no form of this command places the entity into an administratively enabled state.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service sdp binding pw-port shutdown
- configure eth-ring path shutdown
- configure eth-tunnel path eth-cfm mep shutdown
All
- configure service sdp class-forwarding shutdown
- configure service sdp keep-alive shutdown
- configure service pw-template stp shutdown
- configure service sdp shutdown
shutdown
Syntax
shutdown
[no] shutdown
Context
[Tree] (config>service>epipe>bgp-evpn>mpls shutdown)
[Tree] (config>service>vpls>bgp-evpn>vxlan shutdown)
[Tree] (config>service>epipe>bgp-evpn>srv6 shutdown)
[Tree] (config>service>vpls>bgp-evpn>mpls shutdown)
[Tree] (config>service>epipe>bgp-evpn>vxlan shutdown)
[Tree] (config>service>vpls>bgp-evpn>srv6 shutdown)
Full Context
configure service epipe bgp-evpn mpls shutdown
configure service vpls bgp-evpn vxlan shutdown
configure service epipe bgp-evpn segment-routing-v6 shutdown
configure service vpls bgp-evpn mpls shutdown
configure service epipe bgp-evpn vxlan shutdown
configure service vpls bgp-evpn segment-routing-v6 shutdown
Description
This command controls the administrative state of EVPN-MPLS, EVPN-VXLAN, or EVPN-SRv6 in the service.
Platforms
All
- configure service epipe bgp-evpn mpls shutdown
- configure service epipe bgp-evpn vxlan shutdown
- configure service vpls bgp-evpn vxlan shutdown
- configure service vpls bgp-evpn mpls shutdown
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
- configure service epipe bgp-evpn segment-routing-v6 shutdown
- configure service vpls bgp-evpn segment-routing-v6 shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>vpls>provider-tunnel>inclusive shutdown)
Full Context
configure service vpls provider-tunnel inclusive shutdown
Description
This command administratively enables and disables the service.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>vpls>proxy-nd shutdown)
[Tree] (config>service>vpls>proxy-arp shutdown)
Full Context
configure service vpls proxy-nd shutdown
configure service vpls proxy-arp shutdown
Description
This command enables and disables the proxy-ARP and proxy-nd functionality. ARP/GARP/ND messages will be snooped and redirected to the CPM for lookup in the proxy-ARP/proxy-ND table. The proxy-ARP/proxy-ND table is populated with IP->MAC pairs received from different sources (EVPN, static, dynamic). When the shutdown command is issued, it flushes the dynamic/EVPN dup proxy-ARP/proxy-ND table entries and instructs the system to stop snooping ARP/ND frames. All the static entries are kept in the table as inactive, regardless of their previous Status.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>system>bgp-evpn>eth-seg shutdown)
Full Context
configure service system bgp-evpn ethernet-segment shutdown
Description
This command changes the administrative status of the Ethernet-Segment.
The user can do no shutdown only when esi, multi-homing and lag/port/sdp are configured. If the Ethernet-Segment or the corresponding lag/port/sdp shutdown, the Ethernet-Segment route and the AD per-ES routes will be withdrawn. No changes are allowed when the Ethernet-Segment is no shutdown.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>ipipe>sap shutdown)
[Tree] (config>service>ipipe shutdown)
[Tree] (config>service>ipipe>spoke-sdp shutdown)
[Tree] (config>service>epipe>pw-port shutdown)
[Tree] (config>service>epipe>spoke-sdp shutdown)
[Tree] (config>service>epipe>sap>l2tpv3-session shutdown)
[Tree] (config>service>epipe>site shutdown)
[Tree] (config>service>cpipe shutdown)
[Tree] (config>service>epipe>spoke-sdp>eth-cfm>mep shutdown)
[Tree] (config>service>epipe>sap shutdown)
[Tree] (config>service>epipe>sap>eth-cfm>mep shutdown)
[Tree] (config>service>cpipe>sap shutdown)
[Tree] (config>service>cpipe>spoke-sdp shutdown)
[Tree] (config>service>epipe shutdown)
Full Context
configure service ipipe sap shutdown
configure service ipipe shutdown
configure service ipipe spoke-sdp shutdown
configure service epipe pw-port shutdown
configure service epipe spoke-sdp shutdown
configure service epipe sap l2tpv3-session shutdown
configure service epipe site shutdown
configure service cpipe shutdown
configure service epipe spoke-sdp eth-cfm mep shutdown
configure service epipe sap shutdown
configure service epipe sap eth-cfm mep shutdown
configure service cpipe sap shutdown
configure service cpipe spoke-sdp shutdown
configure service epipe shutdown
Description
This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
Services are created in the administratively down (shutdown) state. When a no shutdown command is entered, the service becomes administratively up and then tries to enter the operationally up state. Default administrative states for services and service entities is described as follows in Special Cases.
The no form of this command places the entity into an administratively enabled state.
Platforms
All
- configure service ipipe sap shutdown
- configure service epipe shutdown
- configure service ipipe shutdown
- configure service epipe sap shutdown
- configure service epipe spoke-sdp shutdown
- configure service epipe pw-port shutdown
- configure service epipe site shutdown
- configure service ipipe spoke-sdp shutdown
- configure service epipe sap l2tpv3-session shutdown
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service epipe spoke-sdp eth-cfm mep shutdown
- configure service cpipe shutdown
- configure service epipe sap eth-cfm mep shutdown
- configure service cpipe sap shutdown
- configure service cpipe spoke-sdp shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>epipe>bgp-vpws shutdown)
Full Context
configure service epipe bgp-vpws shutdown
Description
This command administratively enables/disables the local BGP VPWS instance. On de-activation an MP-UNREACH-NLRI is sent for the local NLRI.
The no form of this command enables the BGP VPWS addressing and the related BGP advertisement. The associated BGP VPWS MP-REACH-NLRI will be advertised in an update message and the corresponding received NLRIs must be considered to instantiate the data plane.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>vpls>bgp-vpls shutdown)
Full Context
configure service vpls bgp-vpls shutdown
Description
This command administratively enables/disables the local BGP VPLS instance. On de-activation an MP-UNREACH-NLRI must be sent for the local NLRI.
The no form of this command enables the BGP VPLS addressing and the related BGP advertisement. The associated BGP VPLS MP-REACH-NLRI will be advertised in an update message and the corresponding received NLRIs must be considered to instantiate the data plane. RT, RD usage: same as in the BGP AD solution, if the values are not configured here, the value of the VPLS-id from under the bgp-ad node is used. If VPLS-id value is not configured either the MH site cannot be activated – i.e. no shutdown returns an error. Same applies if a pseudowire template is not specified under the BGP node.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>ies>if>ipv6>secure-nd shutdown)
Full Context
configure service ies interface ipv6 secure-nd shutdown
Description
This command enables or disables Secure Neighbor Discovery (SeND) on the interface.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>vprn>aaa>rmt-srv>tacplus shutdown)
Full Context
configure service vprn aaa remote-servers tacplus shutdown
Description
This command administratively disables the TACACS+ protocol operation. Shutting down the protocol does not remove or change the configuration other than the administrative state.
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
The no form of this command administratively enables the protocol which is the default state.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>vprn>static-route-entry>next-hop shutdown)
[Tree] (config>service>vprn>static-route-entry>ipsec-tunnel shutdown)
[Tree] (config>service>vprn>static-route-entry>grt shutdown)
[Tree] (config>service>vprn>static-route-entry>black-hole shutdown)
[Tree] (config>service>vprn>static-route-entry>indirect shutdown)
Full Context
configure service vprn static-route-entry next-hop shutdown
configure service vprn static-route-entry ipsec-tunnel shutdown
configure service vprn static-route-entry grt shutdown
configure service vprn static-route-entry black-hole shutdown
configure service vprn static-route-entry indirect shutdown
Description
This command causes the static route to be placed in an administratively down state and removed from the active route-table
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>vprn>if>send shutdown)
Full Context
configure service vprn interface ipv6 secure-nd shutdown
Description
This command enables or disables Secure Neighbor Discovery (SeND) on the interface.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>ldp>if-params>if>ipv4 shutdown)
[Tree] (config>router>ldp>if-params>if>ipv6 shutdown)
[Tree] (config>router>ldp>targ-session>peer shutdown)
[Tree] (config>router>ldp shutdown)
[Tree] (config>router>ldp>if-params>if shutdown)
[Tree] (config>router>ldp>aggregate-prefix-match shutdown)
[Tree] (config>router>ldp>egr-stats>fec-prefix shutdown)
[Tree] (config>router>ldp>targ-session>peer-template shutdown)
Full Context
configure router ldp interface-parameters interface ipv4 shutdown
configure router ldp interface-parameters interface ipv6 shutdown
configure router ldp targeted-session peer shutdown
configure router ldp shutdown
configure router ldp interface-parameters interface shutdown
configure router ldp aggregate-prefix-match shutdown
configure router ldp egress-statistics fec-prefix shutdown
configure router ldp targeted-session peer-template shutdown
Description
This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted. For an LDP interface, the shutdown command exists under the main interface context and under each of the interface IPv4 and IPv6 contexts.
-
shutdown under the interface context brings down both IPv4 and IPv6 Hello adjacencies and stops Hello transmission in both contexts.
-
shutdown under the interface IPv4 or IPv6 contexts brings down the Hello adjacency and stops Hello transmission in that context only.
The user can also delete the entire IPv4 or IPv6 context under the interface with the no ipv4 or no ipv6 command which in addition to bringing down the Hello adjacency will delete the configuration.
The no form of this command administratively enables an entity.
Unlike other commands and parameters where the default state is not indicated in the configuration file, the shutdown and no shutdown states are always indicated in system generated configuration files.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>ldp>targeted-session>auto-tx>ipv4 shutdown)
[Tree] (config>router>ldp>targeted-session>auto-rx>ipv4 shutdown)
Full Context
configure router ldp targeted-session auto-tx ipv4 shutdown
configure router ldp targeted-session auto-rx ipv4 shutdown
Description
This command administratively disables the capabilities associated with automatically sending targeted Hello messages through the auto-tx command or processing targeted Hello messages through the auto-rx command.
The no form of this command administratively enables the capabilities associated with the auto-tx and auto-rx commands.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>mpls>ingr-stats>p2p-template-lsp shutdown)
[Tree] (config>router>mpls>lsp>primary-p2mp-instance shutdown)
[Tree] (config>router>mpls>lsp-template>egress-statistics shutdown)
[Tree] (config>router>mpls>lsp>secondary shutdown)
[Tree] (config>router>mpls>ingr-stats>p2mp-template-lsp shutdown)
[Tree] (config>router>mpls>lsp>egress-statistics shutdown)
[Tree] (config>router>mpls>interface shutdown)
[Tree] (config>router>mpls>lsp>primary shutdown)
[Tree] (config>router>mpls shutdown)
Full Context
configure router mpls ingress-statistics p2p-template-lsp shutdown
configure router mpls lsp primary-p2mp-instance shutdown
configure router mpls lsp-template egress-statistics shutdown
configure router mpls lsp secondary shutdown
configure router mpls ingress-statistics p2mp-template-lsp shutdown
configure router mpls lsp egress-statistics shutdown
configure router mpls interface shutdown
configure router mpls lsp primary shutdown
configure router mpls shutdown
Description
This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.
The config>router>mpls>ingr-stats>p2mp-template-lsp> shutdown command is supported on the 7750 SR, 7950 XRS, and with VPLS only on the 7450 ESS.
The config>router>mpls>lsp>primary-p2mp-instance> shutdown is not supported on the 7450 ESS.
MPLS is not enabled by default and must be explicitly enabled (no shutdown).
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
The no form of this command places the entity into an administratively enabled state.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>mpls>pce-initiated-lsp>sr-te shutdown)
Full Context
configure router mpls pce-initiated-lsp sr-te shutdown
Description
This command administratively enables or disables the sr-te context for PCE initiated LSPs. A shutdown of the sr-te context under pce-initiated-lsp causes an error to be generated for new PCInitate messages, and existing PCE-initiated LSPs are taken to the oper-down state.
The no form of this command administratively enables the sr-te context for PCE initiated LSP.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>mpls>if>label-map shutdown)
Full Context
configure router mpls interface label-map shutdown
Description
This command disables the label map definition. This drops all packets that match the specified in-label specified in the label-map in-label command.
The no form of this command administratively enables the defined label map action.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>mpls>lsp shutdown)
[Tree] (config>router>mpls>lsp-template shutdown)
Full Context
configure router mpls lsp shutdown
configure router mpls lsp-template shutdown
Description
This command disables the existing LSP including the primary and any standby secondary paths.
To shutdown only the primary enter the config router mpls lsp lsp-name primary path-name shutdown command.
To shutdown a specific standby secondary enter the config router mpls lsp lsp-name secondary path-name shutdown command. The existing configuration of the LSP is preserved.
Use the no form of this command to restart the LSP. LSPs are created in a shutdown state. Use this command to administratively bring up the LSP.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>rib-api>mpls shutdown)
Full Context
configure router rib-api mpls shutdown
Description
This command disables the programming of tunnel and label FIB entries by the RIB-API gRPC service. It causes all existing tunnel and label FIB entries to be de-programmed from the data path, but they remain in the control plane database.
The no form of this command enables the programming of tunnel and label FIB entries by the RIB-API gRPC service.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>mpls>path shutdown)
Full Context
configure router mpls path shutdown
Description
This command disables the existing LSPs using this path. All services using these LSPs are affected. Binding information, however, is retained in those LSPs. Paths are created in the shutdown state.
The no form of this command administratively enables the path. All LSPs, where this path is defined as primary or defined as standby secondary, are (re)established.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>pcep>pce shutdown)
[Tree] (config>router>pcep>pcc shutdown)
Full Context
configure router pcep pce shutdown
configure router pcep pcc shutdown
Description
This command administratively disables the PCC or PCE process.
The following PCE parameters can only be modified when the PCEP session is shut down:
-
local-address
-
keepalive
-
dead-timer
The unknown-message-rate PCE parameter can be modified without shutting down the PCEP session.
The following PCC parameters can only be modified when the PCEP session is shut down:
-
local-address
-
keepalive
-
dead-timer
-
peer
The following PCC parameters can be modified without shutting down the PCEP session:
-
report-path-constraints
-
unknown-message-rate
Default
shutdown
Platforms
VSR-NRC
- configure router pcep pce shutdown
All
- configure router pcep pcc shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>rsvp shutdown)
[Tree] (config>router>rsvp>interface shutdown)
Full Context
configure router rsvp shutdown
configure router rsvp interface shutdown
Description
This command disables the RSVP protocol instance or the RSVP-related functions for the interface. The RSVP configuration information associated with this interface is retained. When RSVP is administratively disabled, all the RSVP sessions are torn down. The existing configuration is retained.
The no form of this command administratively enables RSVP on the interface.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>mpls>fwd-policies>fwd-policy>nh-grp shutdown)
Full Context
configure router mpls forwarding-policies forwarding-policy next-hop-group shutdown
Description
This command shuts down an NHG entry in a forwarding policy.
When an NHG is shut down, it is removed from the data path entry of the forwarding policy.
The no form of this command brings up an NHG entry in a forwarding policy.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>mpls>fwd-policies>fwd-policy shutdown)
Full Context
configure router mpls forwarding-policies forwarding-policy shutdown
Description
This command shuts down the forwarding policy.
The no form of this command enables the forwarding policy.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>mpls>fwd-policies shutdown)
Full Context
configure router mpls forwarding-policies shutdown
Description
This command shuts down the forwarding-policies context; causing all forwarding policies to be removed from the data path, however they remain in the MPLS forwarding database.
The no form of this command enables the forwarding-policies context.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>app-assure>group>cflowd>tcp-perf shutdown)
[Tree] (config>app-assure>group>aa-sub-cong shutdown)
[Tree] (config>app-assure>group>url-list shutdown)
[Tree] (config>app-assure>group>statistics>protocol shutdown)
[Tree] (config>app-assure>group>transit-ip-policy>transit-auto-create shutdown)
[Tree] (config>app-assure>group>event-log shutdown)
[Tree] (config>app-assure>group>cflowd>collector shutdown)
[Tree] (config>app-assure>group>cflowd>volume shutdown)
[Tree] (config>app-assure>group>policer>tod-override shutdown)
[Tree] (config>app-assure>group>cflowd>comp shutdown)
[Tree] (config>service>ies>aa-interface shutdown)
[Tree] (config>app-assure>group>policy>custom-protocol shutdown)
[Tree] (config>app-assure>group>transit-ip-policy>dhcp shutdown)
[Tree] (config>app-assure>group>http-notification shutdown)
[Tree] (config>app-assure>group>transit-ip-policy>radius shutdown)
[Tree] (config>app-assure>group>cflowd>tcp-perf>template>dynamic-fields shutdown)
[Tree] (config>app-assure>group>cflowd>comp>template>dynamic-fields shutdown)
[Tree] (config>app-assure>group>gtp shutdown)
[Tree] (config>app-assure>group>url-filter shutdown)
[Tree] (config>app-assure>protocol shutdown)
[Tree] (config>app-assure>group>certificate-profile shutdown)
[Tree] (config>app-assure>group>cflowd shutdown)
[Tree] (config>app-assure>group>tethering-detection shutdown)
[Tree] (config>app-assure>aarp shutdown)
[Tree] (config>app-assure>group>policy>app-filter>entry shutdown)
[Tree] (config>app-assure>group>http-error-redirect shutdown)
[Tree] (config>app-assure>group>dns-ip-cache shutdown)
[Tree] (config>isa>aa-grp shutdown)
[Tree] (config>app-assure>group>cflowd>volume>template>dynamic-fields shutdown)
[Tree] (config>app-assure>group>http-redirect shutdown)
[Tree] (config>service>vprn>aa-interface shutdown)
[Tree] (config>app-assure>group>url-filter>icap>server shutdown)
[Tree] (config>app-assure>group>wap1x shutdown)
[Tree] (config>service>vprn>aa-interface>sap shutdown)
[Tree] (config>app-assure>group>policy>app-qos-policy>entry shutdown)
[Tree] (config>service>ies>aa-interface>sap shutdown)
[Tree] (config>app-assure>group>http-enrich shutdown)
Full Context
configure application-assurance group cflowd tcp-performance shutdown
configure application-assurance group aa-sub-congestion-detection shutdown
configure application-assurance group url-list shutdown
configure application-assurance group statistics protocol shutdown
configure application-assurance group transit-ip-policy transit-auto-create shutdown
configure application-assurance group event-log shutdown
configure application-assurance group cflowd collector shutdown
configure application-assurance group cflowd volume shutdown
configure application-assurance group policer tod-override shutdown
configure application-assurance group cflowd comprehensive shutdown
configure service ies aa-interface shutdown
configure application-assurance group policy custom-protocol shutdown
configure application-assurance group transit-ip-policy dhcp shutdown
configure application-assurance group http-notification shutdown
configure application-assurance group transit-ip-policy radius shutdown
configure application-assurance group cflowd tcp-performance template dynamic-fields shutdown
configure application-assurance group cflowd comprehensive template dynamic-fields shutdown
configure application-assurance group gtp shutdown
configure application-assurance group url-filter shutdown
configure application-assurance protocol shutdown
configure application-assurance group certificate-profile shutdown
configure application-assurance group cflowd shutdown
configure application-assurance group tethering-detection shutdown
configure application-assurance aarp shutdown
configure application-assurance group policy app-filter entry shutdown
configure application-assurance group http-error-redirect shutdown
configure application-assurance group dns-ip-cache shutdown
configure isa application-assurance-group shutdown
configure application-assurance group cflowd volume template dynamic-fields shutdown
configure application-assurance group http-redirect shutdown
configure service vprn aa-interface shutdown
configure application-assurance group url-filter icap server shutdown
configure application-assurance group wap1x shutdown
configure service vprn aa-interface sap shutdown
configure application-assurance group policy app-qos-policy entry shutdown
configure service ies aa-interface sap shutdown
configure application-assurance group http-enrich shutdown
Description
This command administratively disables the entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. Many entities must be explicitly enabled using the no shutdown command.
The shutdown command administratively disables an entity. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>ies>if>sap>ipsec-gw>lcl-addr-assign shutdown)
[Tree] (config>service>ies>if>ipsec>ipsec-tunnel shutdown)
[Tree] (config>ipsec>client-db shutdown)
[Tree] (config>service>ies>if>sap>ipsec-gw shutdown)
[Tree] (config>service>ies>if>sap>ipsec-gw>dhcp shutdown)
[Tree] (config>service>vprn>if>sap>ipsec-gw>lcl-addr-assign shutdown)
[Tree] (config>service>vprn>if>sap>ipsec-gw>dhcp6 shutdown)
[Tree] (config>service>vprn>if>sap>ipsec-gw shutdown)
[Tree] (config>redundancy>multi-chassis>peer>mc-ipsec>tunnel-group shutdown)
[Tree] (config>ipsec>client-db>client shutdown)
[Tree] (config>service>ies>if>sap>ip-tunnel shutdown)
[Tree] (config>service>ies>if>sap>ipsec-gw>dhcp6 shutdown)
[Tree] (config>isa>tunnel-grp shutdown)
[Tree] (config>isa>aa-grp shutdown)
[Tree] (config>service>vprn>if>sap>ip-tunnel shutdown)
[Tree] (config>ipsec>cert-profile shutdown)
[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel shutdown)
[Tree] (config>service>vprn>if>sap>ipsec-gw>dhcp shutdown)
Full Context
configure service ies interface sap ipsec-gw local-address-assignment shutdown
configure service ies interface ipsec ipsec-tunnel shutdown
configure ipsec client-db shutdown
configure service ies interface sap ipsec-gw shutdown
configure service ies interface sap ipsec-gw dhcp shutdown
configure service vprn interface sap ipsec-gw local-address-assignment shutdown
configure service vprn interface sap ipsec-gw dhcp6 shutdown
configure service vprn interface sap ipsec-gw shutdown
configure redundancy multi-chassis peer mc-ipsec tunnel-group shutdown
configure ipsec client-db client shutdown
configure service ies interface sap ip-tunnel shutdown
configure service ies interface sap ipsec-gw dhcp6 shutdown
configure isa tunnel-group shutdown
configure isa application-assurance-group shutdown
configure service vprn interface sap ip-tunnel shutdown
configure ipsec cert-profile shutdown
configure service vprn interface ipsec ipsec-tunnel shutdown
configure service vprn interface sap ipsec-gw dhcp shutdown
Description
This command administratively disables the entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. Many entities must be explicitly enabled using the no shutdown command.
The shutdown command administratively disables an entity. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn interface sap ipsec-gw local-address-assignment shutdown
- configure redundancy multi-chassis peer mc-ipsec tunnel-group shutdown
- configure isa application-assurance-group shutdown
- configure ipsec client-db shutdown
- configure isa tunnel-group shutdown
- configure service ies interface sap ipsec-gw local-address-assignment shutdown
- configure service vprn interface sap ipsec-gw dhcp6 shutdown
- configure service ies interface sap ipsec-gw dhcp6 shutdown
- configure service ies interface sap ipsec-gw shutdown
- configure ipsec cert-profile shutdown
- configure service vprn interface sap ipsec-gw dhcp shutdown
- configure service ies interface sap ipsec-gw dhcp shutdown
- configure ipsec client-db client shutdown
- configure service vprn interface sap ipsec-gw shutdown
VSR
- configure service ies interface ipsec ipsec-tunnel shutdown
- configure service vprn interface ipsec ipsec-tunnel shutdown
All
- configure service vprn interface sap ip-tunnel shutdown
- configure service ies interface sap ip-tunnel shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>app-assure>group>transit-ip>diameter shutdown)
Full Context
configure application-assurance group transit-ip-policy diameter shutdown
Description
This command removes all transit AA subscribers created via Diameter on this transit AA subscriber IP policy and clears all corresponding Diameter sessions.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>isa>aa-grp>overload-sub-quarantine shutdown)
Full Context
configure isa application-assurance-group overload-sub-quarantine shutdown
Description
This command disables the overload subscriber detection algorithm in the ISA group for the purpose of quarantining an overloaded subscriber. It is possible to manually quarantine an AA subscriber even when this command is disabled (shutdown).
The no form of this command enables the overload subscriber detection algorithm in the ISA group. When enabled, each ISA monitors the traffic on a continuous basis to identify AA subscribers that occupy more than their fair share of ISA resources and need to be quarantined.
Default
shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (debug>app-assure>group>traffic-capture shutdown)
Full Context
debug application-assurance group traffic-capture shutdown
Description
This command administratively disables traffic capture.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (debug>app-assure>group>http-host-recorder shutdown)
[Tree] (debug>app-assure>group>port-recorder shutdown)
Full Context
debug application-assurance group http-host-recorder shutdown
debug application-assurance group port-recorder shutdown
Description
This commands allows to stop or start the http-host-recorder. To reset the recorded values execute shutdown followed by no shutdown.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>esa shutdown)
[Tree] (config>esa>vm shutdown)
Full Context
configure esa shutdown
configure esa vm shutdown
Description
This command administratively disables the instance. The operational state of the instance is disabled, as well as the operational state of any entities contained within. When disabled, the instance does not change, reset, or remove any configuration settings or statistics.
The no form of this command administratively enables the instance.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>security>pki>ca-prof>auto-crl-update shutdown)
Full Context
configure system security pki ca-profile auto-crl-update shutdown
Description
This command disables the auto CRL update.
The no form of this command enables an auto CRL update. Upon no shutdown, if the configured CRL file does not exist, is invalid or is expired or if the schedule-type is next-update-based and current time passed (Next-Update_of_existing_CRL - pre-update-time), then system will start downloading CRL right away.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>isa>lns-group shutdown)
Full Context
configure isa lns-group shutdown
Description
This command administratively disables the entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. Many entities must be explicitly enabled using the no shutdown command.
The shutdown command administratively disables an entity. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>nat>inside>sub-ident shutdown)
[Tree] (config>router>firewall>domain shutdown)
[Tree] (config>router>nat>outside>pool>address-range shutdown)
[Tree] (config>service>vprn>nat>outside>pool shutdown)
[Tree] (config>service>vprn>nat>inside>nat64 shutdown)
[Tree] (config>aaa>isa-radius-plcy>servers>server shutdown)
[Tree] (config>router>nat>inside>deterministic>address-map shutdown)
[Tree] (config>router>nat>inside>redundancy>subscriber-identification shutdown)
[Tree] (config>service>vprn>mtrace2 shutdown)
[Tree] (config>router>nat>outside>pool shutdown)
[Tree] (config>service>ipfix>ipfix-export-policy>collector shutdown)
[Tree] (config>router>nat>outside>pool>redundancy shutdown)
[Tree] (config>router>nat>inside>nat64 shutdown)
[Tree] (config>router>nat>inside>dual-stack-lite shutdown)
[Tree] (config>service>vprn>nat>inside>deterministic>address-map shutdown)
[Tree] (config>service>vprn>nat>outside>pool>address-range shutdown)
[Tree] (config>service>vprn>nat>outside>pool>redundancy shutdown)
[Tree] (config>isa>nat-group shutdown)
Full Context
configure router nat inside subscriber-identification shutdown
configure router firewall domain shutdown
configure router nat outside pool address-range shutdown
configure service vprn nat outside pool shutdown
configure service vprn nat inside nat64 shutdown
configure aaa isa-radius-policy servers server shutdown
configure router nat inside deterministic address-map shutdown
configure router nat inside redundancy subscriber-identification shutdown
configure service vprn mtrace2 shutdown
configure router nat outside pool shutdown
configure service ipfix ipfix-export-policy collector shutdown
configure router nat outside pool redundancy shutdown
configure router nat inside nat64 shutdown
configure router nat inside dual-stack-lite shutdown
configure service vprn nat inside deterministic address-map shutdown
configure service vprn nat outside pool address-range shutdown
configure service vprn nat outside pool redundancy shutdown
configure isa nat-group shutdown
Description
This command administratively disables the entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. Many entities must be explicitly enabled using the no shutdown command.
The shutdown command administratively disables an entity. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure router nat outside pool shutdown
- configure router nat inside dual-stack-lite shutdown
- configure router nat outside pool redundancy shutdown
- configure router nat outside pool address-range shutdown
- configure router nat inside deterministic address-map shutdown
- configure service vprn nat outside pool redundancy shutdown
- configure router nat inside nat64 shutdown
- configure service vprn nat inside nat64 shutdown
- configure router nat inside subscriber-identification shutdown
- configure aaa isa-radius-policy servers server shutdown
- configure service vprn nat inside deterministic address-map shutdown
- configure isa nat-group shutdown
- configure service vprn nat outside pool address-range shutdown
- configure service vprn nat outside pool shutdown
7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure router firewall domain shutdown
All
- configure service ipfix ipfix-export-policy collector shutdown
- configure service vprn mtrace2 shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>nat>map-domain>mapping-rule shutdown)
Full Context
configure service nat map-domain mapping-rule shutdown
Description
This command enables or disables a rule within a MAP domain. A MAP rule can be enabled (no shutdown) only when all parameters within the rule are defined. Disabling a rule within an instantiated MAP domain will withdraw the rule IPv4 routes and disable forwarding for the rule.
Interactions:
config>service>vprn>nat>map>map-domain domain-name
config>service>router>nat>map>map-domain domain-name
Shutdown of an instantiated MAP rule disables the rule (the rule routes will be withdrawn and forwarding will be disabled).
Default
shutdown
Platforms
VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>nat>map-domain shutdown)
Full Context
configure service nat map-domain shutdown
Description
This command enables or disables a MAP domain. A MAP domain can be enabled (no shutdown) only when the DMR prefix is configured. Disabling an instantiated domain will withdraw all routes associated with it.
Interactions:
config>service>vprn>nat>map>map-domain domain-name
config>service>router>nat>map>map-domain domain-name
Shutdown of a MAP domain template disables the instantiated MAP domain (the routes will be withdrawn and forwarding will be disabled).
Default
shutdown
Platforms
VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>bier>template shutdown)
[Tree] (config>router>bier shutdown)
Full Context
configure router bier template shutdown
configure router bier shutdown
Description
This command shuts down BIER or a BIER template.
The no form of this command enables BIER or the BIER template.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>gtm>provider-tunnel>selective>rsvp shutdown)
[Tree] (config>router>gtm>provider-tunnel>inclusive>rsvp shutdown)
Full Context
configure router gtm provider-tunnel selective rsvp shutdown
configure router gtm provider-tunnel inclusive rsvp shutdown
Description
This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
Services are created in the administratively down (shutdown) state. When a no shutdown command is entered, the service becomes administratively up and then tries to enter the operationally up state.
The no form of this command places the entity into an administratively enabled state.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>p2mp-sr-tree>p2mp-policy>candidate-path shutdown)
[Tree] (config>service>vprn>mvpn>pt>inclusive>p2mp-sr shutdown)
[Tree] (config>router>p2mp-sr-tree>replication-segment>sr-mpls>downstream-nodes shutdown)
[Tree] (config>service>vprn>mvpn>pt>selective>multistream-spmsi shutdown)
[Tree] (config>router>p2mp-sr-tree shutdown)
[Tree] (config>router>p2mp-sr-tree>replication-segment shutdown)
[Tree] (config>service>vprn>mvpn>pt>selective>p2mp-sr shutdown)
[Tree] (config>router>p2mp-sr-tree>p2mp-policy shutdown)
Full Context
configure router p2mp-sr-tree p2mp-policy candidate-path shutdown
configure service vprn mvpn provider-tunnel inclusive p2mp-sr shutdown
configure router p2mp-sr-tree replication-segment segment-routing-mpls downstream-nodes shutdown
configure service vprn mvpn provider-tunnel selective multistream-spmsi shutdown
configure router p2mp-sr-tree shutdown
configure router p2mp-sr-tree replication-segment shutdown
configure service vprn mvpn provider-tunnel selective p2mp-sr shutdown
configure router p2mp-sr-tree p2mp-policy shutdown
Description
This command administratively disables an entity for the P2MP SR tree. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.
When the operational state of an entity is disabled, the operational state of any entities contained within are also disabled. Many objects must be shut down before they may be deleted.
Services are created in the administratively down (shutdown) state. When a no shutdown command is entered, the service becomes administratively up, then attempts to enter the operationally up state.
The no form of this command places the entity into an administratively enabled state.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>vprn>ip-mirror-interface shutdown)
[Tree] (config>service>vprn>ip-mirror-interface>spoke-sdp shutdown)
[Tree] (config>service>ies>if>ping-template shutdown)
[Tree] (config>service>vprn>if>ping-template shutdown)
[Tree] (config>mirror>mirror-source shutdown)
[Tree] (config>li>li-source shutdown)
[Tree] (config>li>log>log-id shutdown)
[Tree] (config>mirror>mirror-dest shutdown)
[Tree] (config>mirror>mirror-dest>spoke-sdp>egress shutdown)
Full Context
configure service vprn ip-mirror-interface shutdown
configure service vprn ip-mirror-interface spoke-sdp shutdown
configure service ies interface ping-template shutdown
configure service vprn interface ping-template shutdown
configure mirror mirror-source shutdown
configure li li-source shutdown
configure li log log-id shutdown
configure mirror mirror-dest shutdown
configure mirror mirror-dest spoke-sdp egress shutdown
Description
The shutdown command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. Many entities must be explicitly enabled using the no shutdown command.
The shutdown command administratively disables an entity. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
Unlike other commands and parameters where the default state is not indicated in the configuration file, shutdown and no shutdown are always indicated in system generated configuration files.
The no form of this command puts an entity into the administratively enabled state.
Default
See Special Cases below.
Platforms
All
- configure li log log-id shutdown
- configure mirror mirror-dest spoke-sdp egress shutdown
- configure mirror mirror-source shutdown
- configure service vprn ip-mirror-interface shutdown
- configure mirror mirror-dest shutdown
- configure li li-source shutdown
- configure service vprn ip-mirror-interface spoke-sdp shutdown
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service vprn interface ping-template shutdown
- configure service ies interface ping-template shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (debug>mirror-source shutdown)
Full Context
debug mirror-source shutdown
Description
This command enables mirror source debugging.
The no form of this command clears mirror source information.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>test-oam>ldp-treetrace shutdown)
[Tree] (config>oam-pm>session>ethernet>lmm shutdown)
[Tree] (config>oam-pm>bin-group shutdown)
[Tree] (config>oam-pm>session>ip>twamp-light shutdown)
[Tree] (config>oam-pm>session>ethernet>slm shutdown)
[Tree] (config>oam-pm>session>ethernet>lmm>availability shutdown)
[Tree] (config>test-oam>twamp>server shutdown)
[Tree] (config>oam-pm>session>measurement-interval>event-mon shutdown)
[Tree] (config>saa>test shutdown)
[Tree] (config>test-oam>twamp>server>prefix shutdown)
[Tree] (config>oam-pm>session>ethernet>dmm shutdown)
Full Context
configure test-oam ldp-treetrace shutdown
configure oam-pm session ethernet lmm shutdown
configure oam-pm bin-group shutdown
configure oam-pm session ip twamp-light shutdown
configure oam-pm session ethernet slm shutdown
configure oam-pm session ethernet lmm availability shutdown
configure test-oam twamp server shutdown
configure oam-pm session measurement-interval event-mon shutdown
configure saa test shutdown
configure test-oam twamp server prefix shutdown
configure oam-pm session ethernet dmm shutdown
Description
This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
Entities are created in the administratively down (shutdown) state. When a no shutdown command is entered, the entity becomes administratively up and then tries to enter the operationally up state.
The no form of this command administratively enables the entity.
Platforms
All
- configure oam-pm session ethernet slm shutdown
- configure oam-pm session ethernet lmm availability shutdown
- configure test-oam ldp-treetrace shutdown
- configure oam-pm session ethernet dmm shutdown
- configure saa test shutdown
- configure oam-pm bin-group shutdown
- configure oam-pm session ethernet lmm shutdown
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure test-oam twamp server prefix shutdown
- configure test-oam twamp server shutdown
- configure oam-pm session ip twamp-light shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>twamp-light>reflector shutdown)
[Tree] (config>service>vprn>twamp-light>reflector shutdown)
Full Context
configure router twamp-light reflector shutdown
configure service vprn twamp-light reflector shutdown
Description
This command disables or enables TWAMP Light functionality within the context where the configuration exists, either the base router instance or the service. Enabling the base router context enables the IES prefix list since the IES service uses the configuration under the base router instance.
The no form of this command allows the router instance or the service to accept TWAMP Light packets for processing.
Default
shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>bfd>seamless-bfd>reflector shutdown)
Full Context
configure bfd seamless-bfd reflector shutdown
Description
This command specifies the administrative state of the seamless BFD reflector.
The no form of this command administratively enables the reflector. A discriminator must be configured before the no shutdown command is invoked.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>qos>slope-policy>exceed-slope shutdown)
[Tree] (config>qos>slope-policy>high-slope shutdown)
[Tree] (config>qos>slope-policy>low-slope shutdown)
[Tree] (config>qos>slope-policy>highplus-slope shutdown)
Full Context
configure qos slope-policy exceed-slope shutdown
configure qos slope-policy high-slope shutdown
configure qos slope-policy low-slope shutdown
configure qos slope-policy highplus-slope shutdown
Description
This command enables or disables the administrative status of the Random Early Detection slope.
By default, all slopes are shutdown and have to be explicitly enabled (no shutdown).
The no form of this command administratively enables the RED slope.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>filter>redirect-policy shutdown)
[Tree] (config>filter>redirect-policy>destination shutdown)
[Tree] (config>filter>log>summary shutdown)
Full Context
configure filter redirect-policy shutdown
configure filter redirect-policy destination shutdown
configure filter log summary shutdown
Description
Administratively enables/disabled (AdminUp/AdminDown) an entity. Downing an entity does not change, reset or remove any configuration settings or statistics. Many objects must be shutdown before they may be deleted.
The shutdown command administratively downs an entity. Administratively downing an entity changes the operational state of the entity to down.
Unlike other commands and parameters where the default state will not be indicated in the configuration file, shutdown and no shutdown are always indicated in system generated configuration files.
The no form of the command puts an entity into the administratively enabled state.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>if>ipv6>secure-nd shutdown)
Full Context
configure router interface ipv6 secure-nd shutdown
Description
This command enables or disables Secure Neighbor Discovery (SeND) on the interface.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>pcp-server>server shutdown)
Full Context
configure router pcp-server server shutdown
Description
This command administratively enables the PCP server.
The no form of this command administratively disables the PCP server.
Default
shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>open-flow>of-switch shutdown)
Full Context
configure open-flow of-switch shutdown
Description
This command administratively enables or disables the OpenFlow switch instance. Disabling the switch purges all flowtable entries.
Default
shutdown
Platforms
VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>if>ipv6>vrrp shutdown)
[Tree] (config>vrrp>policy shutdown)
[Tree] (config>router>if>vrrp shutdown)
Full Context
configure router interface ipv6 vrrp shutdown
configure vrrp policy shutdown
configure router interface vrrp shutdown
Description
This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
The no form of this command administratively enables an entity.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown [active] [standby]
[no] shutdown [cflash-id]
Context
[Tree] (file shutdown)
Full Context
file shutdown
Description
This command shuts down (unmounts) the specified CPM(s).
Use the no shutdown [active] [standby] command to enable one or both CPM.
Use the no shutdown [cflash-id] command to enable a compact flash (cf1:, cf2:, or cf3:) on the CPM/CCM. The no shutdown command can be issued for a specific slot when no compact flash is present. When a flash card is installed in the slot, the card will be activated upon detection.
In redundant systems, use the no shutdown command on cf3: on both SF/CPMs or CCMs in order to facilitate synchronization. See the config>redundancy synchronize command.
The shutdown command must be issued prior to removing a flash card. If no parameters are specified, then the drive referred to by the current working directory will be shut down.
LED Status Indicators
LED Status Indicators lists the possible states for the compact flash and their LED status indicators.
State |
Description |
---|---|
Operational |
If a compact flash is present in a drive and operational (no shutdown), the respective LED is lit green. The LED flickers when the compact flash is accessed. Note: Do not remove the compact flash during a read/write operation. |
Flash defective |
If a compact flash is defective, the respective LED blinks amber to reflect the error condition and a trap is raised. |
Flash drive shut down |
When the compact flash drive is shut down and a compact flash present, the LED is lit amber. In this state, the compact flash can be ejected. |
No compact flash present, drive shut down |
If no compact flash is present and the drive is shut down the LED is unlit. |
No compact flash present, drive enabled |
If no compact flash is present and the drive is not shut down the LED is unlit. |
Ejecting a compact flash |
The compact flash drive should be shut down before ejecting a compact flash card. The LED should turn to solid (not blinking) amber. This is the only mode to safely remove the flash card. If a compact flash drive is not shut down before a compact flash is ejected, the LED blinks amber for approximately 5 seconds before shutting off. |
The shutdown or no shutdown state is not saved in the configuration file. Following a reboot all compact flash drives are in their default state.
Default
no shutdown
Parameters
- cflash-id
-
Specifies the compact flash slot ID to be shut down or enabled. If cflash-id is specified, the drive is shut down or enabled. If no cflash-id is specified, the drive referred to by the current working directory is assumed. If a slot number is not specified, then the active CPM is assumed.
- active
-
Specifies that all drives on the active CPM are shutdown or enabled.
- standby
-
Specifies that all drives on the standby CPM are shutdown or enabled.
When both active and standby keywords are specified, then all drives on both CPM are shutdown.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>satellite>eth-sat shutdown)
[Tree] (config>system>satellite>tdm-sat shutdown)
Full Context
configure system satellite eth-sat shutdown
configure system satellite tdm-sat shutdown
Description
This command disables the associated satellite.
If the associated satellite is active, the satellite will not be reset but all satellite client ports will be shut down.
If the satellite is not active but attempts to associate with the host, the satellite chassis will be brought up according to the satellite configuration but all client ports will be shut down.
The no form of this command removes the shutdown state and all client ports on active satellites will be brought back up.
Default
shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure system satellite eth-sat shutdown
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
- configure system satellite tdm-sat shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>alarm-contact-input shutdown)
Full Context
configure system alarm-contact-input shutdown
Description
This command disables tracking of state changes associated with the alarm contact input. The system does not generate or clear the alarms for the alarm contact input while tracking is disabled. The system clears existing alarms when the shutdown command is executed.
The no form of this command enables tracking of state changes associated with the alarm contact input.
Default
shutdown
Platforms
7750 SR-a
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>ptp>peer shutdown)
Full Context
configure system ptp peer shutdown
Description
This command disables or enables a specific PTP peer. Shutting down a peer sends cancel unicast negotiation messages on any established unicast sessions. When shutdown, all received packets from the peer are ignored.
If the clock-type is ordinary slave or boundary, and PTP is no shutdown, the last enabled peer cannot be shutdown. This prevents the user from having PTP enabled without any peer configured and enabled.
Default
no shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>ptp>port shutdown)
Full Context
configure system ptp port shutdown
Description
This command disables or enables a specific PTP port. When shutdown, all PTP Ethernet messages are dropped on the IOM They will not be counted in the PTP message statistics. No PTP packets are transmitted by the node toward this port.
If the clock-type is ordinary slave or boundary, and PTP is no shutdown, the last enabled port or peer cannot be shutdown. This prevents the user from having PTP enabled without any means to synchronize the local clock to a parent clock.
Default
no shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>management-interface>remote-management>manager shutdown)
[Tree] (config>system>management-interface>remote-management shutdown)
Full Context
configure system management-interface remote-management manager shutdown
configure system management-interface remote-management shutdown
Description
This command administratively disables remote management.
The no form of this command administratively enables remote management.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>alarms shutdown)
Full Context
configure system alarms shutdown
Description
This command enables or disables the Facility Alarm functionality. When enabled, the Facility Alarm sub-system tracks active and cleared facility alarms and controls the Alarm LEDs on the CPMs. When Facility Alarm functionality is enabled, the alarms are viewed using the show system alarms command(s).
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>log>event-handling>handler>action-list>entry shutdown)
[Tree] (config>log>event-trigger>event>trigger-entry shutdown)
[Tree] (config>log>log-id shutdown)
[Tree] (config>log>event-handling>handler shutdown)
[Tree] (config>log>accounting-policy shutdown)
[Tree] (config>log>event-trigger>event shutdown)
Full Context
configure log event-handling handler action-list entry shutdown
configure log event-trigger event trigger-entry shutdown
configure log log-id shutdown
configure log event-handling handler shutdown
configure log accounting-policy shutdown
configure log event-trigger event shutdown
Description
This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
The no form of this command administratively enables an entity.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>netconf>listen shutdown)
Full Context
configure system netconf listen shutdown
Description
This command disables the NETCONF server. The shutdown command is blocked if there are any active NETCONF sessions. Use the admin disconnect command to disconnect all NETCONF sessions before shutting down the NETCONF service.
The no form of this command enables the NETCONF server.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>security>mgmt-access-filter>ipv6-filter shutdown)
[Tree] (config>system>security>keychain shutdown)
[Tree] (config>system>security>keychain>direction>uni>send>entry shutdown)
[Tree] (config>system>security>keychain>direction>bi>entry shutdown)
[Tree] (cfg>sys>sec>cpm>mac-filter>entry shutdown)
[Tree] (config>system>security>mgmt-access-filter>ip-filter shutdown)
[Tree] (config>sys>sec>cpm>ip-filter shutdown)
[Tree] (config>system>security>dot1x>radius-plcy shutdown)
[Tree] (config>system>security>dot1x shutdown)
[Tree] (config>system>security>keychain>direction>uni>receive>entry shutdown)
[Tree] (config>sys>sec>cpm>ipv6-filter shutdown)
Full Context
configure system security management-access-filter ipv6-filter shutdown
configure system security keychain shutdown
configure system security keychain direction uni send entry shutdown
configure system security keychain direction bi entry shutdown
configure system security cpm-filter mac-filter entry shutdown
configure system security management-access-filter ip-filter shutdown
configure system security cpm-filter ip-filter shutdown
configure system security dot1x radius-plcy shutdown
configure system security dot1x shutdown
configure system security keychain direction uni receive entry shutdown
configure system security cpm-filter ipv6-filter shutdown
Description
This command administratively disables the entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. Many entities must be explicitly enabled using the no shutdown command. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
The no form of this command puts an entity into the administratively enabled state.
Default
no shutdown
Platforms
All
- configure system security management-access-filter ip-filter shutdown
- configure system security keychain shutdown
- configure system security keychain direction uni send entry shutdown
- configure system security dot1x shutdown
- configure system security management-access-filter ipv6-filter shutdown
- configure system security keychain direction bi entry shutdown
- configure system security keychain direction uni receive entry shutdown
- configure system security dot1x radius-plcy shutdown
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure system security cpm-filter ip-filter shutdown
- configure system security cpm-filter mac-filter entry shutdown
- configure system security cpm-filter ipv6-filter shutdown
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>security>pki>ca-profile shutdown)
Full Context
configure system security pki ca-profile shutdown
Description
Use this command to enable or disable the ca-profile. The system verifies the configured cert-file and crl-file. If the verification fails, then the no shutdown command fails.
The ca-profile in a shutdown state cannot be used in certificate authentication.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>security>ssh>key-re-exchange>client shutdown)
[Tree] (config>system>security>ssh>key-re-exchange>server shutdown)
Full Context
configure system security ssh key-re-exchange client shutdown
configure system security ssh key-re-exchange server shutdown
Description
This command stops the key exchange. It sets the minutes and bytes to infinity so there will not be any key exchange during the PDU transmission.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>security>tacplus shutdown)
Full Context
configure system security tacplus shutdown
Description
This command administratively disables the TACACS+ protocol operation. Shutting down the protocol does not remove or change the configuration other than the administrative state.
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
The no form of this command administratively enables the protocol which is the default state.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>security>ldap>server shutdown)
[Tree] (config>system>security>ldap shutdown)
Full Context
configure system security ldap server shutdown
configure system security ldap shutdown
Description
In the ldap context, this command enables or disabled LDAP protocol operations.
In the server context, this command enables or disables the LDAP server. To perform no shutdown, an LDAP server address is required. To change the address, the user first needs to shut down the server.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>grpc>gnmi shutdown)
Full Context
configure system grpc gnmi shutdown
Description
This command stops the gNMI service.
The no form of this command starts the gNMI service.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>grpc>rib-api shutdown)
Full Context
configure system grpc rib-api shutdown
Description
This command stops the RibApi gRPC service, deletes all programmed RIB entries (stale and non-stale), but does not close the TCP connections.
The no form of this command restarts the RibApi gRPC service.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>grpc shutdown)
Full Context
configure system grpc shutdown
Description
This command stops the gRPC server. This closes all of the associated TCP connections and immediately purges all RIB entries that were programmed using the RibApi Service.
The shutdown command is not blocked if there are active gRPC sessions. Shutting down gRPC will terminate all active gRPC sessions.
The no form of this command starts the gRPC server.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>grpc>tcp-keepalive shutdown)
Full Context
configure system grpc tcp-keepalive shutdown
Description
This command stops the TCP keepalives from being sent to all gRPC clients.
The no form of this command restarts the sending of TCP keepalives to all gRPC clients.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>snmp>streaming shutdown)
Full Context
configure system snmp streaming shutdown
Description
This command administratively disables proprietary SNMP request/response bundling and TCP-based transport mechanism for optimizing network management of the router nodes.
The no form of the command administratively re-enables SNMP request/response bundling and TCP-based transport mechanism.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>snmp shutdown)
Full Context
configure system snmp shutdown
Description
This command administratively disables SNMP agent operations. System management can then only be performed using the command line interface (CLI). Shutting down SNMP does not remove or change configuration parameters other than the administrative state. This command does not prevent the agent from sending SNMP notifications to any configured SNMP trap destinations. SNMP trap destinations are configured under the config>log>snmp-trap-group context.
This command is automatically invoked in the event of a reboot when the processing of the configuration file fails to complete or when an SNMP persistent index file fails while the bof persist on command is enabled.
The no form of the command administratively enables SNMP which is the default state.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>security>tls>cert-profile shutdown)
Full Context
configure system security tls cert-profile shutdown
Description
This command disables the certificate profile. When the certificate profile is disabled, it will not be sent to the TLS server.
The no form of the command enables the certificate profile and allows it to be sent to the TLS server.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>system>security>tls>server-tls-profile shutdown)
[Tree] (config>system>security>tls>client-tls-profile shutdown)
Full Context
configure system security tls server-tls-profile shutdown
configure system security tls client-tls-profile shutdown
Description
This command administratively enables or disables the TLS profile. If the TLS profile is shut down, the TLS operational status will be down. Therefore, if the TLS profile is shut down, any application using TLS should not attempt to send any PDUs.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>vprn>bgp>monitor shutdown)
[Tree] (config>service>vprn>bgp>group>monitor shutdown)
[Tree] (config>bmp shutdown)
[Tree] (config>router>bgp>group>neighbor shutdown)
[Tree] (config>service>vprn>bgp>group>neighbor>monitor shutdown)
[Tree] (config>router>bgp>monitor shutdown)
[Tree] (config>bmp>station>connection>tcp-keepalive shutdown)
[Tree] (config>router>bgp shutdown)
[Tree] (config>router>bgp>group shutdown)
[Tree] (config>router>bgp>segment-routing shutdown)
[Tree] (config>bmp>station shutdown)
[Tree] (config>router>bgp>group>neighbor>monitor shutdown)
[Tree] (config>router>bgp>group>monitor shutdown)
Full Context
configure service vprn bgp monitor shutdown
configure service vprn bgp group monitor shutdown
configure bmp shutdown
configure router bgp group neighbor shutdown
configure service vprn bgp group neighbor monitor shutdown
configure router bgp monitor shutdown
configure bmp station connection tcp-keepalive shutdown
configure router bgp shutdown
configure router bgp group shutdown
configure router bgp segment-routing shutdown
configure bmp station shutdown
configure router bgp group neighbor monitor shutdown
configure router bgp group monitor shutdown
Description
This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
The no form of this command administratively enables an entity.
Unlike other commands and parameters where the default state is not indicated in the configuration file, the shutdown and no shutdown states are always indicated in system generated configuration files.
Default administrative states for services and service entities are described in Special Cases.
The no form of this command places an entity in an administratively enabled state.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>isis>igp-shortcut shutdown)
[Tree] (config>router>isis>segm-rtng>mapping-server shutdown)
[Tree] (config>router>isis>segment-routing shutdown)
[Tree] (config>router>isis>if>level shutdown)
[Tree] (config>router>isis>interface shutdown)
[Tree] (config>router>isis shutdown)
[Tree] (config>router>isis>level>bier shutdown)
Full Context
configure router isis igp-shortcut shutdown
configure router isis segment-routing mapping-server shutdown
configure router isis segment-routing shutdown
configure router isis interface level shutdown
configure router isis interface shutdown
configure router isis shutdown
configure router isis level bier shutdown
Description
This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics.
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
The no form of this command administratively enables an entity.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>isis>flex-algos shutdown)
Full Context
configure router isis flexible-algorithms shutdown
Description
This command enables IS-IS flexible algorithms. If it is enabled with the no shutdown command the router starts supporting the flexible algorithms IGP LSDB extensions. Flexible algorithm IGP LSDB extensions are by default not enabled.
The no form of this command enables the router to support flexible algorithms.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>ospf>flex-algos shutdown)
Full Context
configure router ospf flexible-algorithms shutdown
Description
This command enables OSPFv2 flexible algorithms. If no shutdown is configured, the router enables support for the flexible algorithms IGP LSDB extensions. Flexible algorithm IGP LSDB extensions are disabled by default.
The no form of this command enables the router to support flexible algorithms.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>ospf>segm-rtng shutdown)
[Tree] (config>router>ospf>area>bier shutdown)
[Tree] (config>router>ospf shutdown)
[Tree] (config>router>ospf>igp-shortcut shutdown)
[Tree] (config>router>ospf3>area>virtual-link shutdown)
[Tree] (config>router>ospf>area>virtual-link shutdown)
[Tree] (config>router>ospf3>area>interface shutdown)
[Tree] (config>router>ospf3 shutdown)
[Tree] (config>router>ospf>segm-rtng>mapping-server shutdown)
Full Context
configure router ospf segment-routing shutdown
configure router ospf area bier shutdown
configure router ospf shutdown
configure router ospf igp-shortcut shutdown
configure router ospf3 area virtual-link shutdown
configure router ospf area virtual-link shutdown
configure router ospf3 area interface shutdown
configure router ospf3 shutdown
configure router ospf segment-routing mapping-server shutdown
Description
The shutdown command administratively disables the entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. The operational state of the entity is disabled as well as the operational state of any entities contained within.
Many objects must be shut down before they may be deleted. Many entities must be explicitly enabled using the no shutdown command.
Unlike other commands and parameters where the default state is not indicated in the configuration file, shutdown and no shutdown are always indicated in system generated configuration files.
The no form of this command puts an entity into the administratively enabled state.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>ripng>group shutdown)
[Tree] (config>router>ripng shutdown)
[Tree] (config>router>rip>group>neighbor shutdown)
[Tree] (config>router>ripng>group>neighbor shutdown)
[Tree] (config>router>rip>group shutdown)
[Tree] (config>router>rip shutdown)
Full Context
configure router ripng group shutdown
configure router ripng shutdown
configure router rip group neighbor shutdown
configure router ripng group neighbor shutdown
configure router rip group shutdown
configure router rip shutdown
Description
This command administratively disables an entity. Downing an entity does not change, reset or remove any configuration settings or statistics. Many objects must be shutdown before they may be deleted.
The shutdown command administratively downs an entity. Administratively downing an entity changes the operational state of the entity to down and the operational state of any entities contained within the administratively down entity.
Unlike other commands and parameters where the default state will not be indicated in the configuration file, shutdown and no shutdown are always indicated in system generated configuration files.
The no form of the command puts an entity into the administratively enabled state.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>segment-routing>maintenance-policy shutdown)
Full Context
configure router segment-routing maintenance-policy shutdown
Description
This command deactivates all segment routing policies and removes the associated entries from the forwarding plane of the router.
The no form of this command enables all segment routing policies so that they can be revalidated and reinstalled as necessary.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>segment-routing>sr-policies>egress-statistics shutdown)
[Tree] (config>router>segment-routing>sr-policies>ingress-statistics shutdown)
Full Context
configure router segment-routing sr-policies egress-statistics shutdown
configure router segment-routing sr-policies ingress-statistics shutdown
Description
This command administratively disables the collection of egress or ingress statistics for all segment routing policies.
The no form of this command administratively enables the collection of egress or ingress statistics for all segment routing policies.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>segment-routing>sr-policies shutdown)
Full Context
configure router segment-routing sr-policies shutdown
Description
This command deactivates all segment routing policies and removes the associated entries from the forwarding plane of the router.
It is necessary to execute this shutdown if you want to make a change to the reserved-label-block reference.
The no form of this command enables all segment routing policies so that they can be revalidated and reinstalled as necessary.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (conf>router>segment-routing>sr-policies>policy>seg-list shutdown)
Full Context
configure router segment-routing sr-policies static-policy segment-list shutdown
Description
This command deactivates a segment-list. If this is done on an active policy with more than one segment list, then traffic forwarded by the policy will be diverted to the remaining segment-lists.
The no form of this command enables the segment list so that it can be validated and installed as necessary.
Default
shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (conf>router>segment-routing>sr-policies>policy shutdown)
Full Context
configure router segment-routing sr-policies static-policy shutdown
Description
This command deactivates the associated static policy and causes another policy for the same (color, endpoint) combination to be promoted as the active path, assuming there is another valid policy.
It is necessary to execute this shutdown if you want to make critical configuration changes to the static policy.
The no form of this command enables the static policy so that it can be validated and installed as necessary.
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>service>vprn>sub-if>grp-if>ipv6>dhcp6>relay>lease-split shutdown)
[Tree] (config>service>ies>sub-if>ipv6>dhcp6>relay>lease-split shutdown)
[Tree] (config>service>vprn>sub-if>ipv6>dhcp6>relay>lease-split shutdown)
[Tree] (config>service>ies>sub-if>grp-if>ipv6>dhcp6>relay>lease-split shutdown)
Full Context
configure service vprn subscriber-interface group-interface ipv6 dhcp6 relay lease-split shutdown
configure service ies subscriber-interface ipv6 dhcp6 relay lease-split shutdown
configure service vprn subscriber-interface ipv6 dhcp6 relay lease-split shutdown
configure service ies subscriber-interface group-interface ipv6 dhcp6 relay lease-split shutdown
Description
This command administratively disables DHCPv6 lease split on the interface.
The no form of this command administratively enables lease split.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>port>ethernet>dot1x>per-host-authentication shutdown)
Full Context
configure port ethernet dot1x per-host-authentication shutdown
Description
This command administratively configures per-host authentication on the port.
The no form of this command administratively enables per-host authentication on the port.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>port>ethernet>dot1x shutdown)
Full Context
configure port ethernet dot1x shutdown
Description
This command administratively configures the 802.1x functionality (consisting of packet extraction and processing on the CPM) on the port.
The no form of this command administratively enables the 802.1x functionality on the port.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>sfm shutdown)
Full Context
configure sfm shutdown
Description
This command administratively disables the SFM.
The no form of this command administratively enables the SFM.
Default
no shutdown
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-2s, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s, 7950 XRS
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>segment-routing>srv6>locator shutdown)
[Tree] (config>router>isis>srv6 shutdown)
Full Context
configure router segment-routing segment-routing-v6 locator shutdown
configure router isis segment-routing-v6 shutdown
Description
This command administratively disables the SRv6 context in a ISIS instance or a SRv6 locator.
The no form of this command enables the SRv6 context in a ISIS instance or a SRv6 locator.
Default
shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (conf>router>sr>srv6>ms>block shutdown)
[Tree] (conf>router>segment-routing>srv6>micro-segment-locator shutdown)
Full Context
configure router segment-routing segment-routing-v6 micro-segment block shutdown
configure router segment-routing segment-routing-v6 micro-segment-locator shutdown
Description
This command administratively disables the block or micro-segment locator.
The no form of this command enables the block or micro-segment locator.
Default
shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>bgp>egress-peer-engineering shutdown)
Full Context
configure router bgp egress-peer-engineering shutdown
Description
This command administratively enables or disables BGP-EPE. If enabled, peer node SIDs and peer adjacency SIDs are advertised in BGP-LS.
The no form of this command places the entity into an administratively enabled state and prevents peer node SIDs and peer adjacency SIDs from being advertised in BGP-LS.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>bgp>group>egress-engineering shutdown)
Full Context
configure router bgp group egress-engineering shutdown
Description
This command administratively enables or disable egress engineering on a BGP neighbor or group of neighbors.
If this command is enabled along with the egress-peer-engineering command in BGP, SIDs in the form of MPLS labels are allocated for the segments toward the neighbor and to all links (adjacencies). These adjacencies are then advertised in BGP LS.
The no form of this command places the entity into an administratively enabled state.
Default
no shutdown
Platforms
All
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>subscr-mgmt>sis shutdown)
Full Context
configure subscriber-mgmt subscriber-interface-statistics shutdown
Description
This command disables the collection of aggregate subscriber interface statistics.
The no form of this command enables subscriber interface statistics collection.
Default
shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>subscr-mgmt>gis shutdown)
Full Context
configure subscriber-mgmt group-interface-statistics shutdown
Description
This command disables the collection of aggregate group interface statistics.
The no form of this command enables group interface statistics collection.
Default
shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>test-oam>link-meas>template shutdown)
Full Context
configure test-oam link-measurement measurement-template shutdown
Description
This command administratively enables and disables the measurement template. The measurement-template can be referenced even if it is disabled. The template must be administratively enabled to transmit probes on any associated IP interface. The template configuration can be modified even if it is administratively enabled. The template can be administratively disabled even if interfaces are actively registered with the template. When the template configuration is modified, all registered IP interfaces start from the initial state and enter a first reporting scenario. This is true even if the template is administratively disabled and enabled, and no configuration changes are made.
The no form of this command disables the measurement template.
Default
shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>router>if>if-attr>delay>dyn>twamp>ipv6 shutdown)
[Tree] (config>router>if>if-attr>delay>dyn>twamp>ipv4 shutdown)
Full Context
configure router interface if-attribute delay dynamic twamp-light ipv6 shutdown
configure router interface if-attribute delay dynamic twamp-light ipv4 shutdown
Description
This command enables and disables the TWAMP Light IPv4 or IPv6 protocol. Only one protocol, IPv4 or IPv6, can be enabled at any time. Attempting to enable both protocols is rejected.
The no form of this command administratively disables the IPv4 or IPv6 protocol.
Default
shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>test-oam>link-meas>template>twl>ipv6-dest-disc shutdown)
Full Context
configure test-oam link-measurement measurement-template twamp-light ipv6-destination-discovery shutdown
Description
This command administratively disables IPv6 destination address discovery.
The no form of this command administratively enables IPv6 destination address discovery.
Default
shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>app-assure>group>ip-id-asst shutdown)
Full Context
configure application-assurance group ip-identification-assist shutdown
Description
This command administratively disables the IP identification assist feature.
The no form of this command enables the IP identification assist feature.
Default
no shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>test-oam>sath>svc-test shutdown)
[Tree] (config>test-oam>sath>svc-test>svc-stream shutdown)
Full Context
configure test-oam service-activation-testhead service-test shutdown
configure test-oam service-activation-testhead service-test service-stream shutdown
Description
This command disables the specified service test or stream.
The service test must be in the shutdown state before any commands under the service-test context can be configured or modified. If the service test is in the no shutdown state, command parameters cannot be modified.
The no form of this command enables the service test or stream.
Default
no shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
shutdown
Syntax
[no] shutdown
Context
[Tree] (config>port>ethernet>ptp-timestamping shutdown)
[Tree] (config>lag>ptp-timestamping shutdown)
Full Context
configure port ethernet ptp-timestamping shutdown
configure lag ptp-timestamping shutdown
Description
This command administratively disables the ingress 1588 port-based timestamping filter.
The no form of this command administratively enables the filter. The filter can be administratively enabled only if at least one IP address is specified using the ipv4-address or ipv6-address command in the ptp-timestamping context.
Default
shutdown
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
sid
sid
Syntax
sid label value
Context
[Tree] (config>router>ospf>segm-rtng>adjacency-set sid)
[Tree] (config>router>isis>segm-rtng>adjacency-set sid)
Full Context
configure router ospf segment-routing adjacency-set sid
configure router isis segment-routing adjacency-set sid
Description
This command allows a static SID value to be assigned to an adjacency set in IS-IS or OSPF segment routing.
The label option specifies the value is assigned to an MPLS label.
The no form of this command removes the adjacency SID.
Parameters
- label value
-
Specifies the value of adjacency SID label.
Platforms
All
sid-action
sid-action
Syntax
sid-action action
no sid-action
Context
[Tree] (config>router>p2mp-sr-tree>replication-segment>sr-mpls sid-action)
Full Context
configure router p2mp-sr-tree replication-segment segment-routing-mpls sid-action
Description
This command configures the SID action to take for the replication segment of the P2MP SR tree.
The no form of this command removes the SID action.
Default
no sid-action
Parameters
- action
-
Specifies the name of the SID action.
Platforms
All
sid-allocation
sid-allocation
Syntax
sid-allocation {sequential | random}
no sid-allocation
Context
[Tree] (config>subscr-mgmt>ppp-policy sid-allocation)
Full Context
configure subscriber-mgmt ppp-policy sid-allocation
Description
This command configures the method for allocating the PPPoE session ID.
For both sequential and random options, the session ID range is 1 to 8191.
The no form of this command reverts to the default.
Default
sid-allocation sequential
Parameters
- sequential
-
Specifies for PPPoE sessions with the same client MAC address and active on the same SAP, to allocate the session ID in sequential order starting with
ID = 1.
- random
-
Specifies for PPPoE sessions with the same client MAC address and active on the same SAP, to allocate a unique session ID in random order.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sid-length
sid-length
Syntax
sid-length sid-length
Context
[Tree] (conf>router>sr>srv6>micro-segment sid-length)
Full Context
configure router segment-routing segment-routing-v6 micro-segment sid-length
Description
This command configures the length of the micro-segments.
Default
sid-length 16
Parameters
- sid-length
-
Specifies the length of micro-segments, in bits.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
sid-map
sid-map
Syntax
sid-map node-sid {index value [range value]} prefix {{ip-address/mask} | {ip-address} {netmask}} [ set-flags {s}] [level { 1 | 2 | 1/2}] [clear-n-flag]
no sid-map node-sid index value
Context
[Tree] (config>router>isis>segm-rtng>mapping-server sid-map)
Full Context
configure router isis segment-routing mapping-server sid-map
Description
This command configures the Segment Routing mapping server database in IS-IS.
The user enters the node SID index for one or a range of prefixes by specifying the first index value and optionally a range value can be entered. The default value for the range option is 1. Only the first prefix in a consecutive range of prefixes must be entered. The user can enter the first prefix with a mask lower than 32 and the SID or label binding TLV is advertised, but the routers will not resolve these prefix SIDs and will generate a trap.
By setting the S-flag, the user can indicate to the IS-IS routers in the rest of the network that the flooding scope of the SID or label binding TLV is the entire domain. In that case, a router receiving the TLV advertisement should leak it between ISIS levels. If leaked from level 2 to level 1, the D-flag must be set and once set the TLV cannot be leaked back into level 2. Otherwise, the S-flag is clear by default and the TLV must not be leaked by routers that receive the mapping server advertisement.
Note that the SR OS does not leak this TLV between IS-IS instances and does not support the multi-topology SID/Label Binding TLV format.
In addition, the user can specify the mapping server own flooding scope for the generated SID or label binding TLV using the level option. This option allows the user to narrow the flooding scope configured under the router IS-IS level-capability for a one or more SID or label binding TLVs if required. The default flooding scope of the mapping server is Layer 1 or Layer 2, which can be narrowed by the value configured under the router IS-IS level-capability.
The A-flag and M-flag are not supported by the mapping server feature. The mapping client ignores the flags.
Each time a prefix or a range of prefixes is configured in the SR mapping database in any routing instance, the router issues for this prefix or range of prefixes, a prefix-SID sub-TLV within a ISIS SID or label binding TLV in that instance. The flooding scope of the TLV from the mapping server is determined as explained above. No further check of the reachability of that prefix in the mapping server route table is performed. Additionally, no check is performed if the SID index is a duplicate of an existing prefix in the local IGP instance database or if the SID index is out of range with the local SRGB.
The no form of this command deletes the range of node SIDs beginning with the specified index value.
Parameters
- index
-
Specifies the node SID index for the IS-IS prefix that is advertised in a SID/Label Binding TLV.
- value
-
Specifies the node SID range for the IS-IS prefix that is advertised in a SID/Label Binding TLV.
- ip-address/mask
-
Specifies the IP address and mask.
- ip-address netmask
-
Specifies the IP address netmask.
- set-flags
-
Specifies the flooding scope of the SID/Label binding TLV.
- level {1 | 2| 1/2}
-
Configures the mapping server own flooding scope for the generated SID/Label binding TLV.
- clear-n-flag
-
Specifies whether the node-sid flag (N-flag) should be cleared in a SID Label Binding TLV.
Platforms
All
sid-map
Syntax
sid-map node-sid index index-value [range range-value] prefix ip-address/mask [netmask]
sid-map node-sid index index-value [range range-value] prefix ip-address/mask [netmask] scope {area area-id | as}
no sid-map node-sid index index-value
Context
[Tree] (config>router>ospf>segm-rtng>mapping-server sid-map)
Full Context
configure router ospf segment-routing mapping-server sid-map
Description
This command configures the Segment Routing mapping server database in OSPF.
The user enters the node SID index for one or a range of prefixes by specifying the first index value and optionally a range value. The default value for the range option is 1. Only the first prefix in a consecutive range of prefixes must be entered. If the user enters the first prefix with a mask lower than 32, the OSPF Extended Prefix Range TLV is advertised but a router which receives it will not resolve SID and instead originates a trap.
The user specifies the mapping server own flooding scope for the generated OSPF Extended Prefix Range TLV using the scope option. There is no default value. If the scope is a specific area, then the TLV is flooded only in that area.
An ABR that propagates an intra-area OSPF Extended Prefix Range TLV flooded by the mapping server in that area into other areas, sets the inter-area flag (IA-flag). The ABR also propagates the TLV if received with the inter-area flag set from other ABR nodes but only from the backbone to leaf areas and not vice-versa. However, if the exact same TLV is advertised as an intra-area TLV in a leaf area, the ABR will not flood the inter-area TLV into that leaf area.
SR OS does not leak this TLV between OSPF instances.
Each time a prefix or a range of prefixes is configured in the SR mapping database in any routing instance, the router issues for this prefix, or range of prefixes, a prefix-SID sub-TLV within a OSPF Extended Prefix Range TLV in that instance. The flooding scope of the TLV from the mapping server is determined as previously explained. No further check of the reachability of that prefix in the mapping server route table is performed and no check if the SID index is duplicate with some existing prefix in the local IGP instance database or if the SID index is out of range with the local SRGB.
The no form of this command deletes the range of node SIDs beginning with the specified index value.
Default
no prefix-sid-range
Parameters
- index index-value
-
Specifies the index.
- range range-value
-
Specifies the range.
- prefix ip-address/mask
-
Specifies the IP address in dotted decimal notation.
- netmask
-
Specifies the netmask.
- area area-id
-
Configures the mapping server own flooding scope for the generated OSPF Extended Prefix Range TLV.
Platforms
All
sid-protection
sid-protection
Syntax
[no] sid-protection
Context
[Tree] (config>router>isis>interface sid-protection)
Full Context
configure router isis interface sid-protection
Description
This command enables or disables adjacency SID protection by LFA and remote LFA.
While LFA and remote LFA Fast-Reroute (FRR) protection is enabled for all node SIDs and local adjacency SIDs when the user enables the loopfree-alternates option in IS-IS or OSPF at the LER and LSR, there are applications where the user wants traffic to never divert from the strict hop computed by CSPF for a SR-TE LSP. In that case, the user can disable protection for all adjacency SIDs formed over a given network IP interface using this command.
The protection state of an adjacency SID is advertised in the B-FLAG of the IS-IS or OSPF Adjacency SID sub-TLV.
Default
sid-protection
Platforms
All
sid-protection
Syntax
[no] sid-protection
Context
[Tree] (config>router>ospf>area>interface sid-protection)
Full Context
configure router ospf area interface sid-protection
Description
This command enables or disables adjacency SID protection by LFA and remote LFA.
LFA and remote LFA Fast-Reroute (FRR) protection is enabled for all node SIDs and local adjacency SIDs when the user enables the loopfree-alternate option in IS-IS or OSPF at the LER and LSR. However, may be applications where the user never wants traffic to divert from the strict hop computed by CSPF for an SR-TE LSP. In this case, the user can disable protection for all adjacency SIDs formed over a particular network IP interface using this command.
The protection state of an adjacency SID is advertised in the B-FLAG of the IS-IS or OSPF Adjacency SID sub-TLV.
Default
sid-protection
Platforms
All
signal-label
signal-label
Syntax
signal-label value
no signal-label
Context
[Tree] (config>port>sonet-sdh>path signal-label)
Full Context
configure port sonet-sdh path signal-label
Description
This command sets the C2 byte value. The purpose of this byte is to communicate the payload type being encapsulated by SONET framing.
This command is supported on TDM satellite.
Default
signal-label 0xcf
Parameters
- value
-
Specifies the C2 byte value, expressed as a decimal integer or a value in hex format.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
signal-mode
signal-mode
Syntax
signal-mode {cas}
no signal-mode
Context
[Tree] (config>port>tdm>ds1 signal-mode)
[Tree] (config>port>tdm>e1 signal-mode)
Full Context
configure port tdm ds1 signal-mode
configure port tdm e1 signal-mode
Description
This command activates the signal mode on the channel. When enabled, it uses routing information to direct the payload of voice or data to its destination.
The no form of this command reverts to the default value.
Default
no signal-mode
Parameters
- cas
-
Specifies channel associated signaling.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
signaling
signaling
Syntax
signaling signaling
Context
[Tree] (config>service>epipe>spoke-sdp-fec signaling)
Full Context
configure service epipe spoke-sdp-fec signaling
Description
This command enables a user to configure this router as the active or passive T-PE for signaling this MS-PW, or to automatically select whether this T-PE is active or passive based on the prefix. In an active role, this endpoint initiates MS-PW signaling without waiting for a T-LDP label mapping message to arrive from the far end T-PE. In a passive role, it will wait for the initial label mapping message from the far end before sending a label mapping for this end of the PW. In auto mode, if the SAII has the greater prefix value, then the router will initiate MS-PW signaling without waiting for a label mapping message from the far end. However, if the TAII has the greater value prefix, then the router will assume that the far end T-PE will initiate MS-PW signaling and will wait for that label mapping message before responding with a T-LDP label mapping message for the MS-PW in the reverse direction.
The no form of this command means that the router T-PE automatically selects the which router will initiate MS-PW signaling based on the prefix values configured in the SAII and TAII of the spoke SDP, as previously described.
Default
signaling auto
Parameters
- signaling
-
Configures this router as the active T-PE for signaling this MS-PW.
Platforms
All
signaling
Syntax
signaling {off | tldp | bgp}
Context
[Tree] (config>service>sdp signaling)
Full Context
configure service sdp signaling
Description
This command specifies the signaling protocol used to obtain the ingress and egress pseudowire labels in frames transmitted and received on the SDP. When signaling is off then labels are manually configured when the SDP is bound to a service. The signaling value can only be changed while the administrative status of the SDP is down. Additionally, the signaling can only be changed on an SDP if that SDP is not in use by BGP-AD or BGP-VPLS. BGP signaling can only be enabled if that SDP does not already have pseudowires signaled over it.
If the tldp option is selected as the mechanism for exchanging service labels over an MPLS or GRE SDP and the T-LDP session is automatically established, an explicit T-LDP session that is subsequently configured takes precedence over the automatic T-LDP session. However, if the explicit, manually-configured session is then removed, the system does not revert to the automatic session and the automatic session is also deleted. To address this, recreate the T-LDP session by disabling and re-enabling the SDP using the shutdown and no shutdown commands.
The no form of this command is not applicable. To modify the signaling configuration, the SDP must be administratively shut down and then the signaling parameter can be modified and re-enabled.
Default
signaling tldp
Parameters
- off
-
Ingress and egress signal auto-labeling is not enabled. If this parameter is selected, then each service using the specified SDP must manually configure VPN labels. This configuration is independent of the SDP’s transport type, GRE, MPLS (RSVP or LDP).
- tldp
-
Ingress and egress pseudowire signaling using T-LDP is enabled. Default value used when BGP AD automatically instantiates the SDP.
- bgp
-
Ingress and egress pseudowire signaling using BGP is enabled. Default value used when BGP VPLS automatically instantiates the SDP.
Platforms
All
signature-list
signature-list
Syntax
signature-list name
no signature-list
Context
[Tree] (config>system>security>tls>client-tls-profile signature-list)
Full Context
configure system security tls client-tls-profile signature-list
Description
This command assigns an existing TLS 1.3 signature list to the TLS client profile.
The no form of this command removes the signature list from the client profile.
Default
no signature-list
Parameters
- name
-
Specifies the name of the signature list, up to 32 characters.
Platforms
All
signature-list
Syntax
signature-list name
no signature-list
Context
[Tree] (config>system>security>tls>server-tls-profile signature-list)
Full Context
configure system security tls server-tls-profile signature-list
Description
This command assigns an existing TLS 1.3 signature list to the TLS server profile.
The no form of this command removes the signature list from the server profile.
Default
no signature-list
Parameters
- name
-
Specifies the name of the signature list, up to 32 characters.
Platforms
All
significant-change
significant-change
Syntax
significant-change delta
no significant-change
Context
[Tree] (config>subscr-mgmt>acct-plcy>cr significant-change)
Full Context
configure subscriber-mgmt radius-accounting-policy custom-record significant-change
Description
This command configures the significant change required to generate the record.
Parameters
- delta
-
Specifies the delta change (significant change) that is required for the custom record to be generated.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
significant-change
Syntax
significant-change delta
no significant-change
Context
[Tree] (config>app-assure>rad-acct-plcy significant-change)
Full Context
configure application-assurance radius-accounting-policy significant-change
Description
This command configures the significant change required to generate the record.
The no form of this command reverts to the default.
Default
no significant-change
Parameters
- delta
-
Specifies the delta change (significant change) that is required for the charging-group counts to be included in the RADIUS Accounting VSAs.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
significant-change
Syntax
significant-change delta
no significant-change
Context
[Tree] (config>log>acct-policy>cr significant-change)
Full Context
configure log accounting-policy custom-record significant-change
Description
This command configures the significant change required to generate the record. The custom record is only generated when the change in the reference counters equals or exceeds the configured (non-zero) significant change value. Only the reference counters for which there are corresponding counters configured under the related queues and policers are used for the significant change comparison. For reference queues and policers, the change applies to the sum of all configured reference queue and policer counters. When no reference counters are configured or significant-change is zero, the significant change reporting is not active.
Default
significant-change 0
Parameters
- delta
-
Specifies the delta change (significant change) that is required for the custom record to be written to the XML file.
Platforms
All
single-device
single-device
Syntax
single-device
Context
[Tree] (config>app-assure>group>tether-detect single-device)
Full Context
configure application-assurance group tethering-detection single-device
Description
Commands in this context configure the single-device fields and expected TTL values for flow-level tethering detection.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
single-fiber
single-fiber
Syntax
[no] single-fiber
Context
[Tree] (config>port>sonet-sdh single-fiber)
[Tree] (config>port>ethernet single-fiber)
Full Context
configure port sonet-sdh single-fiber
configure port ethernet single-fiber
Description
This command enables packet gathering and redirection of IP packets from a single fiber (RX) port of the Ethernet or SONET/SDH interface and redistributes packets to other interfaces through either static routes or policy-based forwarding.
This parameter can be applied in conjunction with the strip-label command. If they are applied together, the port must have the single-fiber option configured before it can be associated with an interface that is configured with the strip-label option.
Once a port is configured with single-fiber, traffic will no longer be transmitted out of that port. This command can be used in conjunction with strip-label.
Default
no single-fiber
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
single-mac
single-mac
Syntax
[no] single-mac
Context
[Tree] (config>service>ies>sub-if>grp-if>sap>static-host-mgmt>mac-learning-options single-mac)
[Tree] (config>service>vprn>sub-if>grp-if>sap>static-host-mgmt>mac-learning-options single-mac)
Full Context
configure service ies subscriber-interface group-interface sap static-host-mgmt mac-learning-options single-mac
configure service vprn subscriber-interface group-interface sap static-host-mgmt mac-learning-options single-mac
Description
This command controls how the SAP learns the IPv6 static host MAC address. Enabling this command indicates that this particular SAP only has one subscriber and only has one MAC address for all hosts. With this parameter enabled, the subscriber’s NS and RS source MAC address is used to automatically populate the subscriber MAC address. To allow this auto-populate behavior, the subscriber’s NS and RS source IP must be of type link local address.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
single-sfm-overload
single-sfm-overload
Syntax
single-sfm-overload [holdoff-time holdoff-time]
no single-sfm-overload
Context
[Tree] (config>service>vprn single-sfm-overload)
Full Context
configure service vprn single-sfm-overload
Description
This command configures OSPF, OSPFv3 and IS-IS to set overload when the router has fewer than the full set of SFMs functioning, which reduces forwarding capacity. Setting overload enables a router to still participate in exchanging routing information, but routes all traffic away from it.
The conditions to set overload are as follows:
-
7950 XRS-20, 7750 SR-12/SR-7, and 7450 ESS-12/ESS-7 platforms: if an SF/CPMs fails, the protocol will set the overload
-
7950-40 XRS and 7750 SR-12e platforms: if two SFMs fail (a connected pair on the XRS-40) the protocol will set the overload
The no form of this command configures the router to not set overload if an SFM fails.
Default
no single-sfm-overload
Parameters
- holdoff-time
-
Specifies the delay between detecting SFM failures and setting overload.
Platforms
7450 ESS, 7750 SR-1, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e, 7750 SR-2s, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s, 7950 XRS, VSR
single-sfm-overload
Syntax
single-sfm-overload [holdoff-time holdoff-time]
no single-sfm-overload
Context
[Tree] (config>router single-sfm-overload)
Full Context
configure router single-sfm-overload
Description
This command configures OSPF, OSPFv3 and IS-IS to set overload when the router has fewer than the full set of SFMs functioning, which reduces forwarding capacity. Setting overload enables a router to still participate in exchanging routing information, but routes all traffic away from it.
The conditions to set overload are as follows:
-
7750 SR-12/SR-7 and 7450 ESS-12/ESS-7 platforms: protocol sets overload if one of the SF/CPMs fails
-
7750 SR-12e and 7950 XRS platforms: protocol sets overload if two SFMs fail (two SFMs belonging to different SFM pairs on the XRS-40)
The no form of this command configures the router to not set overload if an SFM fails.
Default
no single-sfm-overload
Parameters
- holdoff-time
-
Specifies the delay between detecting SFM failures and setting overload.
Platforms
7450 ESS, 7750 SR-1, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e, 7750 SR-2s, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s, 7950 XRS, VSR
single-sub-parameters
single-sub-parameters
Syntax
single-sub-parameters
Context
[Tree] (config>subscr-mgmt>msap-policy>sub-sla-mgmt single-sub-parameters)
Full Context
configure subscriber-mgmt msap-policy sub-sla-mgmt single-sub-parameters
Description
Commands in this context configure single subscriber MSAP parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
single-sub-parameters
Syntax
single-sub-parameters
Context
[Tree] (config>service>vpls>sap>sub-sla-mgmt single-sub-parameters)
[Tree] (config>service>ies>if>sap>sub-sla-mgmt single-sub-parameters)
[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt single-sub-parameters)
[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt single-sub-parameters)
Full Context
configure service vpls sap sub-sla-mgmt single-sub-parameters
configure service ies interface sap sub-sla-mgmt single-sub-parameters
configure service ies subscriber-interface group-interface sap sub-sla-mgmt single-sub-parameters
configure service vprn subscriber-interface group-interface sap sub-sla-mgmt single-sub-parameters
Description
Commands in this context configure single subscriber SAP parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sip
sip
Syntax
[no] sip
Context
[Tree] (config>service>nat>firewall-policy>alg sip)
[Tree] (config>service>nat>nat-policy>alg sip)
[Tree] (config>service>nat>up-nat-policy>alg sip)
Full Context
configure service nat firewall-policy alg sip
configure service nat nat-policy alg sip
configure service nat up-nat-policy alg sip
Description
This command enables SIP ALG.
The no form of the command disables SIP ALG.
Default
no sip
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service nat firewall-policy alg sip
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service nat up-nat-policy alg sip
- configure service nat nat-policy alg sip
sip
Syntax
sip [hrs hours] [min minutes] [ sec seconds]
no sip
Context
[Tree] (config>service>nat>nat-policy>timeouts sip)
[Tree] (config>service>nat>up-nat-policy>timeouts sip)
[Tree] (config>service>nat>firewall-policy>timeouts sip)
Full Context
configure service nat nat-policy timeouts sip
configure service nat up-nat-policy timeouts sip
configure service nat firewall-policy timeouts sip
Description
This command configures the SIP inactive media timeout.
Default
sip min 2
Parameters
- hours
-
Specifies the SIP inactive media timeout, in hours.
- minutes
-
Specifies the SIP inactive media timeout, in minutes.
- seconds
-
Specifies the SIP inactive media timeout, in seconds.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service nat up-nat-policy timeouts sip
- configure service nat nat-policy timeouts sip
7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service nat firewall-policy timeouts sip
site
site
Syntax
site name [create]
no site name
Context
[Tree] (config>service>vpls site)
Full Context
configure service vpls site
Description
This command configures a VPLS site.
The no form of this command removes the name from the configuration.
Parameters
- name
-
Specifies a site name up to 32 characters in length.
- create
-
This keyword is mandatory while creating a VPLS site.
Platforms
All
site
Syntax
site name [create]
no site name
Context
[Tree] (config>service>epipe site)
Full Context
configure service epipe site
Description
This command configures a Epipe site.
The no form of this command removes the name from the configuration.
Parameters
- name
-
Specifies a site name up to 32 characters in length.
- create
-
This keyword is mandatory while creating a Epipe service.
Platforms
All
site-activation-timer
site-activation-timer
Syntax
site-activation-timer seconds
no site-activation-timer
Context
[Tree] (config>redundancy>bgp-multi-homing site-activation-timer)
Full Context
configure redundancy bgp-multi-homing site-activation-timer
Description
This command defines the amount of time the service manager will keep the local sites in standby status, waiting for BGP updates from remote PEs before running the DF election algorithm to decide whether the site should be unblocked. The timer is started when one of the following event occurs only if the site is operationally up:
-
Manual site activation using "no shutdown” at site-id level or at member object(s) level (for example, SAP(s) or PW(s)
-
Site activation after a failure
The no form of this command sets the value to 2.
Default
no site-activation-timer
Parameters
- seconds
-
Specifies the timer, in seconds.
Platforms
All
site-activation-timer
Syntax
site-activation-timer seconds
no site-activation-timer
Context
[Tree] (config>redundancy>bgp-multi-homing site-activation-timer)
Full Context
configure redundancy bgp-multi-homing site-activation-timer
Description
This command defines the amount of time the service manager will keep the local sites in standby status, waiting for BGP updates from remote PEs before running the DF election algorithm to decide whether the site should be unblocked. The timer is started when one of the following events occurs if the site is operationally up:
-
Manual site activation using the no shutdown command at site-id level or at member object(s) level (SAP(s) or PW(s))
-
Site activation after a failure
Default
no site-activation-timer
Parameters
- seconds
-
Specifies the standby status in seconds.
Platforms
All
site-activation-timer
Syntax
site-activation-timer seconds
no site-activation-timer
Context
[Tree] (config>service>vpls>site site-activation-timer)
Full Context
configure service vpls site site-activation-timer
Description
This command configures the time-period the system keeps the local sites in standby status, waiting for BGP updates from remote PEs before running the DF (designated-forwarder) election algorithm to decide whether the site should be unblocked. This timer if terminated if an update is received for which the remote PE has transitioned from DF to non-DF.
The no form of this command removes the value from the configuration.
Default
site-activation-timer 2
Parameters
- seconds
-
Specifies the site activation timer in seconds.
Platforms
All
site-activation-timer
Syntax
site-activation-timer seconds
no site-activation-timer
Context
[Tree] (config>service>epipe>site site-activation-timer)
Full Context
configure service epipe site site-activation-timer
Description
This command configures the time-period the system keeps the local sites in standby status, waiting for BGP updates from remote PEs before running the DF (designated-forwarder) election algorithm to decide whether the site should be unblocked. This timer is terminated if an update is received for which the remote PE has transitioned from DF to non-DF.
The no form of this command removes the value from the configuration.
Default
site-activation-timer 2
Parameters
- seconds
-
Specifies the site activation timer in seconds.
Platforms
All
site-id
site-id
Syntax
site-id value
no site-id
Context
[Tree] (config>service>vpls>site site-id)
Full Context
configure service vpls site site-id
Description
This command configures the identifier for the site in this service.
Parameters
- value
-
Specifies the site identifier.
Platforms
All
site-id
Syntax
site-id value
no site-id
Context
[Tree] (config>service>epipe>site site-id)
Full Context
configure service epipe site site-id
Description
This command configures the identifier for the site in this service. It must match between services but it is local to the service.
Parameters
- value
-
Specifies the site identifier.
Platforms
All
site-min-down-timer
site-min-down-timer
Syntax
site-min-down-timer seconds
no site-min-down-timer
Context
[Tree] (config>redundancy>bgp-multi-homing site-min-down-timer)
Full Context
configure redundancy bgp-multi-homing site-min-down-timer
Description
This command configures the BGP multi-homing site minimum down time. When this value is set and the site goes operationally down, it remains operationally down for at least the length of time configured by this timer, regardless of whether other state changes might cause the site to go operationally up. This timer is restarted every time the site transitions from operationally up to down.
This timer is optimized in the following circumstances:
-
If the site goes down on the DF but there are no BGP multi-homing peers with the same site in an up state, this timer is not used.
-
If the site goes down on the DF but there are no active BGP multi-homing peers, this timer is not used.
-
If this timer is active and a BGP multihoming update is received from the DF indicating its site is down, this timer is immediately terminated and the BGP multihoming algorithm is triggered to determine whether this PE should become the DF.
The no form of this command removes the value from the configuration.
Default
no site-min-down-timer
Parameters
- seconds
-
Specifies the time, in seconds, that a BGP multi-homing site remains operationally down after a transition from up to down.
Platforms
All
site-min-down-timer
Syntax
site-min-down-timer min-down-time
no site-min-down-timer
Context
[Tree] (config>service>vpls>site site-min-down-timer)
Full Context
configure service vpls site site-min-down-timer
Description
This command configures the BGP multi-homing site minimum down time. When set to a non-zero value, if the site goes operationally down it will remain operationally down for at least the length of time configured for the site-min-down-timer, regardless of whether other state changes would have caused it to go operationally up. This timer is restarted every time that the site transitions from up to down. Setting this parameter to zero allows the minimum down timer to be disabled for this service.
The above operation is optimized in the following circumstances:
-
If the site goes down on the designated forwarder but there are no BGP multi-homing peers with the same site in an operationally up state, then the site-min-down-timer is not started and is not used.
-
If the site goes down on the designated forwarder but there are no active BGP multi-homing peers, then the site-min-down-timer is not started and is not used.
-
If the site-min-down-timer is active and a BGP multi-homing update is received from the designated forwarder indicating its site has gone down, the site-min-down-timer is immediately terminated and this PE becomes the designated forwarder if the BGP multi-homing algorithm determines it should be the designated forwarder.
The no form of this command reverts to the default value.
Default
Taken from the value of site-min-down-timer configured for Multi-Chassis BGP multi-homing under the config>redundancy>bgp-multi-homing context.
Parameters
- min-down-time
-
Specifies the time, in seconds, that a BGP multi-homing site remains operationally down after a transition from up to down.
Platforms
All
site-min-down-timer
Syntax
site-min-down-timer min-down-time
no site-min-down-timer
Context
[Tree] (config>service>epipe>site site-min-down-timer)
Full Context
configure service epipe site site-min-down-timer
Description
This command configures the BGP multi-homing site minimum down time. When set to a non-zero value, if the site goes operationally down it will remain operationally down for at least the length of time configured for the site-min-down-timer, regardless of whether other state changes would have caused it to go operationally up. This timer is restarted every time that the site transitions from up to down. Setting this parameter to zero allows the minimum down timer to be disabled for this service.
The preceding operation is optimized in the following circumstances:
-
If the site goes down on the designated forwarder but there are no BGP multi-homing peers with the same site in an operationally up state, then the site-min-down-timer is not started and is not used.
-
If the site goes down on the designated forwarder but there are no active BGP multi-homing peers, then the site-min-down-timer is not started and is not used.
-
If the site-min-down-timer is active and a BGP multi-homing update is received from the designated forwarder indicating its site has gone down, the site-min-down-timer is immediately terminated and this PE becomes the designated forwarder if the BGP multi-homing algorithm determines it should be the designated forwarder.
The no form of this command reverts to default value.
Default
Taken from the value of site-min-down-timer configured for Multi-Chassis BGP multi-homing under the config>redundancy>bgp-multi-homing context.
Parameters
- min-down-time
-
Specifies the time, in seconds, that a BGP multi-homing site remains operationally down after a transition from up to down.
Platforms
All
site-preference
site-preference
Syntax
site-preference preference-value
no site-preference
Context
[Tree] (config>service>epipe>site site-preference)
Full Context
configure service epipe site site-preference
Description
This command defines the value to advertise in the VPLS preference field of the BGP VPWS and BGP Multi-homing NLRI extended community. This value can be changed without having to shutdown the site itself. The site-preference is only applicable to VPWS services.
When not configured, the default is zero, indicating that the VPLS preference is not in use.
Default
no site-preference, value=0
Parameters
- preference-value
-
Specifies the preference value to advertise in the NLRI L2 extended community for this site.
- primary
-
Sets the site-preference to 65535.
- backup
-
Sets the site-preference to 1.
Platforms
All
size
size
Syntax
size queue-set-size allocation-weight weight
Context
[Tree] (config>qos>fp-resource-policy>aggregate-shapers>queue-sets size)
Full Context
configure qos fp-resource-policy aggregate-shapers queue-sets size
Description
This command configures the size and allocation weight for the specified queue set. The available queue sets are distributed based on the allocation weight between different queue sets.
Parameters
- queue-set-size
-
Specifies the size of the queue sets.
- weight
-
Specifies the allocation weight of the queue set.
Platforms
7750 SR-1, 7750 SR-s
size
Syntax
size cache-size
Context
[Tree] (config>app-assure>group>dns-ip-cache>ip-cache size)
Full Context
configure application-assurance group dns-ip-cache ip-cache size
Description
This command configures the maximum number of entries in the cache.
Default
size 10
Parameters
- cache-size
-
Specifies the maximum number of IP addresses that can be stored in the cache.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
size
Syntax
size url-list-size
Context
[Tree] (config>app-assure>group>url-list size)
Full Context
configure application-assurance group url-list size
Description
This command specifies the size of the URL list that can be filtered. The size can be set to either standard or extended. Configuring the specified url-list as extended provides support for filtering on a larger number of URLs.
Default
size standard
Parameters
- url-list-size
-
Specifies the size of the AA url-list for URL filtering.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
size
Syntax
size octets
no size
Context
[Tree] (config>saa>test>type-multi-line>lsp-ping size)
[Tree] (config>saa>test>type-multi-line>lsp-trace>sr-policy size)
[Tree] (config>saa>test>type-multi-line>lsp-ping>sr-policy size)
Full Context
configure saa test type-multi-line lsp-ping size
configure saa test type-multi-line lsp-trace sr-policy size
configure saa test type-multi-line lsp-ping sr-policy size
Description
This command configures the MPLS echo request packet size.
The no form of this command reverts to the default value.
Default
size 1
Parameters
- octets
-
Specifies the size in octets. The request payload is padded with zeros to the specified size.
Platforms
All
size
Syntax
size octets
no size
Context
[Tree] (config>test-oam>icmp>ping-template size)
Full Context
configure test-oam icmp ping-template size
Description
This command configures the size of the Data field (in other words, padding) of the outgoing ICMP echo packet. Minimum packet sizes should be used to test connectivity. Larger packet size should only be used if there is a requirement to spot-check large packet size issues on a very limited number of tests and should not be used for normal connectivity testing. Packet sizes should never be configured to require fragmentation anywhere along the path. Exceeding these recommendations will negatively affect the scale and performance of icmp ping check testing.
The no form of this command reverts to the default value.
Default
size 56
Parameters
- octets
-
Specifies the size of the ICMP echo ping padding field, in octets.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
size
Syntax
size number
Context
[Tree] (config>system>management-interface>cli>md-cli>environment>history size)
Full Context
configure system management-interface cli md-cli environment history size
Description
This command configures the maximum size of the command history.
Parameters
- number
-
Specifies the maximum size of the command history. A value of 0 disables the command history.
Platforms
All
size-a
size-a
Syntax
size-a bytes
Context
[Tree] (config>test-oam>sath>frame-size-tmpl size-a)
Full Context
configure test-oam service-activation-testhead frame-size-template size-a
Description
This command configures the Ethernet frame size for the letter "a”.
Parameters
- bytes
-
Specifies the Ethernet frame value, in bytes.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
size-b
size-b
Syntax
size-b bytes
Context
[Tree] (config>test-oam>sath>frame-size-tmpl size-b)
Full Context
configure test-oam service-activation-testhead frame-size-template size-b
Description
This command configures the Ethernet frame size for the letter "b”.
Parameters
- bytes
-
Specifies the Ethernet frame value, in bytes.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
size-c
size-c
Syntax
size-c bytes
Context
[Tree] (config>test-oam>sath>frame-size-tmpl size-c)
Full Context
configure test-oam service-activation-testhead frame-size-template size-c
Description
This command configures the Ethernet frame size for the letter "c”.
Parameters
- bytes
-
Specifies the Ethernet frame value, in bytes.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
size-d
size-d
Syntax
size-d bytes
Context
[Tree] (config>test-oam>sath>frame-size-tmpl size-d)
Full Context
configure test-oam service-activation-testhead frame-size-template size-d
Description
This command configures the Ethernet frame size for the letter "d”.
Parameters
- bytes
-
Specifies the Ethernet frame value, in bytes.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
size-e
size-e
Syntax
size-e bytes
Context
[Tree] (config>test-oam>sath>frame-size-tmpl size-e)
Full Context
configure test-oam service-activation-testhead frame-size-template size-e
Description
This command configures the Ethernet frame size the letter "e”.
Parameters
- bytes
-
Specifies the Ethernet frame value, in bytes.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
size-f
size-f
Syntax
size-f bytes
Context
[Tree] (config>test-oam>sath>frame-size-tmpl size-f)
Full Context
configure test-oam service-activation-testhead frame-size-template size-f
Description
This command configures the Ethernet frame size for the letter "f”.
Parameters
- bytes
-
Specifies the Ethernet frame value, in bytes.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
size-g
size-g
Syntax
size-g bytes
Context
[Tree] (config>test-oam>sath>frame-size-tmpl size-g)
Full Context
configure test-oam service-activation-testhead frame-size-template size-g
Description
This command configures the Ethernet frame size for the letter "g”.
Parameters
- bytes
-
Specifies the Ethernet frame value, in bytes.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
size-h
size-h
Syntax
size-h bytes
Context
[Tree] (config>test-oam>sath>frame-size-tmpl size-h)
Full Context
configure test-oam service-activation-testhead frame-size-template size-h
Description
This command configures the Ethernet frame size for the letter "h”.
Parameters
- bytes
-
Specifies the Ethernet frame value, in bytes.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
size-limit
size-limit
Syntax
size-limit limit-value
no size-limit
Context
[Tree] (config>call-trace>location size-limit)
Full Context
configure call-trace location size-limit
Description
This command limits the total size of call-trace files on the specified compact flash card.
The no form of this command removes the size restriction.
Default
size-limit 1000
Parameters
- limit-value
-
Specifies the total size of call-trace files on the specified compact flash card, in Mbytes.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
size-limit
Syntax
size-limit limit-value
Context
[Tree] (config>call-trace>trace-profile size-limit)
Full Context
configure call-trace trace-profile size-limit
Description
This command specifies a maximum of how big a trace may grow before it is stopped.
Default
size-limit 10
Parameters
- limit-value
-
Specifies the maximum data volume generated by a single call trace job to the output in megabytes. After reaching the limit the call trace job for a given host is automatically terminated.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
size-u
size-u
Syntax
size-u bytes
Context
[Tree] (config>test-oam>sath>frame-size-tmpl size-u)
Full Context
configure test-oam service-activation-testhead frame-size-template size-u
Description
This command configures the Ethernet frame size for the letter "u”, which is user-defined.
Parameters
- bytes
-
Specifies the Ethernet frame value, in bytes.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
skip-gtp-ipv4-alloc
skip-gtp-ipv4-alloc
Syntax
[no] skip-gtp-ipv4-alloc
Context
[Tree] (config>subscr-mgmt>gtp>apn-policy>apn skip-gtp-ipv4-alloc)
Full Context
configure subscriber-mgmt gtp apn-policy apn skip-gtp-ipv4-alloc
Description
This command enables the ability to skip IPv4 address assignment using a GTP session setup response when PCO "allocation via NAS" is not present in a GTP session creation request. Without this configuration, IPv4 address allocation is done using GTP session setup response, even in absence of the PCO "allocation via NAS" in a GTP session setup request.
The no form of this command reverts to IPv4 address allocation using GTP.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
skip-ttl-decrement
skip-ttl-decrement
Syntax
[no] skip-ttl-decrement
Context
[Tree] (config>filter>gre-tun-tmp>ipv4 skip-ttl-decrement)
Full Context
configure filter gre-tunnel-template ipv4 skip-ttl-decrement
Description
This command enables an option to not decrement the TTL of the IP packet matching the IPv4/IPv6 filter, when it is encapsulated into the GRE tunnel header.
The no form of this command disables this option (default). This results in the matching of IP packet’s TTL field to be decremented before it is encapsulated in the GRE tunnel header.
Platforms
All
sla-profile
sla-profile
Syntax
[no] sla-profile
Context
[Tree] (config subscr-mgmt acct-plcy include-radius-attribute sla-profile)
Full Context
configure subscriber-mgmt radius-accounting-policy include-radius-attribute sla-profile
Description
This command specifies that SLA profile attributes should be included into RADIUS accounting messages.
The no form of this command reverts to the default.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sla-profile
Syntax
sla-profile sla-profile-name
no sla-profile
Context
[Tree] (config service ies sub-if grp-if sap static-host sla-profile)
[Tree] (config service vprn sub-if grp-if sap static-host sla-profile)
[Tree] (config service vprn if sap static-host sla-profile)
[Tree] (config service vpls sap static-host sla-profile)
[Tree] (config service ies if sap static-host sla-profile)
Full Context
configure service ies subscriber-interface group-interface sap static-host sla-profile
configure service vprn subscriber-interface group-interface sap static-host sla-profile
configure service vprn interface sap static-host sla-profile
configure service vpls sap static-host sla-profile
configure service ies interface sap static-host sla-profile
Description
This command specifies an existing SLA profile name to be associated with the static subscriber host. The SLA profile is configured in the config>subscr-mgmt>sla-profile context.
The no form of this command reverts to the default.
Parameters
- sla-profile-name
-
Specifies the SLA profile name.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sla-profile
Syntax
sla-profile sla-profile-name [create]
no sla-profile sla-profile-name
Context
[Tree] (config subscr-mgmt sla-profile)
Full Context
configure subscriber-mgmt sla-profile
Description
This command configures an SLA profile mapping. Hosts associated with a subscriber are subdivided into Service Level Agreement (SLA) profiles. For each subscriber host an SLA profile can be specified. For a subscriber host, the SLA profile determines:
-
The QoS-policies to use
-
The classification
-
The queues
-
The queue mapping
-
-
The IP filters to use
The SLA profile also has the attribute host-limits which limits the total number of hosts (belonging to the same subscriber) on a certain SAP that can be using this SLA profile.
The no form of this command reverts to the default.
Parameters
- sla-profile-name
-
Specifies the name of the SLA profile.
- create
-
Keyword used to create the SLA profile.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sla-profile-map
sla-profile-map
Syntax
sla-profile-map
Context
[Tree] (config>subscr-mgmt>sub-ident-pol sla-profile-map)
Full Context
configure subscriber-mgmt sub-ident-policy sla-profile-map
Description
Commands in this context configure SLA profile mapping parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sla-profile-map
Syntax
sla-profile-map
Context
[Tree] (config>subscr-mgmt>sub-prof sla-profile-map)
Full Context
configure subscriber-mgmt sub-profile sla-profile-map
Description
Commands in this context configure SLA profile mapping.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sla-profile-string
sla-profile-string
Syntax
sla-profile-string sla-profile-string
no sla-profile-string
Context
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>ident-strings sla-profile-string)
[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>ident-strings sla-profile-string)
Full Context
configure subscriber-mgmt local-user-db ipoe host identification-strings sla-profile-string
configure subscriber-mgmt local-user-db ppp host identification-strings sla-profile-string
Description
This command specifies the SLA profile string which is encoded in the identification strings.
The no form of this command returns to the default.
Parameters
- sla-profile-string
-
Specifies the SLA profile string, up to 16 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
sla-profile-string
Syntax
sla-profile-string string
no sla-profile-string
Context
[Tree] (config>subscr-mgmt>vrgw>brg>brg-profile sla-profile-string)
Full Context
configure subscriber-mgmt vrgw brg brg-profile sla-profile-string
Description
This command configures the SLA profile string which will be used as a default for SLA-profile lookup. This string can be overridden during BRG or host authentication.
The no form of the command removes the string from the configuration.
Default
no sla-profile-string
Parameters
- string
-
Specifies the string to use to look up the subscriber profile.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
slaac
slaac
Syntax
slaac
Context
[Tree] (config>service>ies>sub-if>wlan-gw>pool-manager>dhcp6-client slaac)
[Tree] (config>service>vprn>sub-if>wlan-gw>pool-manager>dhcp6-client slaac)
Full Context
configure service ies subscriber-interface wlan-gw pool-manager dhcpv6-client slaac
configure service vprn subscriber-interface wlan-gw pool-manager dhcpv6-client slaac
Description
This command configures SLAAC for the DHCPv6 client.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
slaac-prefix
slaac-prefix
Syntax
slaac-prefix ipv6-address
no slaac-prefix
Context
[Tree] (config>subscr-mgmt>wlan-gw>ue-query slaac-prefix)
Full Context
configure subscriber-mgmt wlan-gw ue-query slaac-prefix
Description
This command enables matching on UEs with the specified SLAAC prefix.
The no form of this command disables matching on the SLAAC prefix.
Default
no slaac-prefix
Parameters
- ipv6-address
-
Specifies the SLAAC prefix.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
sleep
sleep
Syntax
sleep [seconds]
Context
[Tree] (sleep)
Full Context
sleep
Description
This command causes the console session to pause operation (sleep) for 1 second (default) or for the specified number of seconds.
Default
sleep 1
Parameters
- seconds
-
Specifies the number of seconds for the console session to sleep, expressed as a decimal integer.
Platforms
All
slice-size
slice-size
Syntax
slice-size slice-size
no slice-size
Context
[Tree] (config>mirror>mirror-dest slice-size)
Full Context
configure mirror mirror-dest slice-size
Description
This command enables mirrored frame truncation and specifies the maximum size, in bytes, of a mirrored frame that can be transmitted to the mirror destination.
This command enables mirroring larger frames than the destination packet decode equipment can handle. It also allows conservation of mirroring resources by limiting the size of the packet stream through the router and the core network.
When defined, the mirror slice-size creates a threshold that truncates a mirrored frame to a specific size. For example, if the value of 256 bytes is defined, a frame larger than 256 bytes will only have the first 256 bytes transmitted to the mirror destination. The original frame is not affected by the truncation. The mirrored frame size may increase if encapsulation information is added during transmission through the network core or out the mirror destination SAP to the packet/protocol decode equipment.
The actual capability of the router to transmit a sliced or non-sliced frame is also dictated by the mirror destination SDP path-mtu or the mirror destination SAP physical MTU. Packets that require a larger MTU than the mirroring destination supports are discarded if the defined slice-size does not truncate the packet to an acceptable size.
Notes:
-
When configuring IP mirroring, packet slice is rejected as an incorrect option as it will cause IP packets to be rejected by the next hop with an IP header verification error.
-
Slice-size is not supported by CEM encap-types or IP-mirroring.
The no form of this command disables mirrored packet truncation.
Parameters
- slice-size
-
Specifies the number of bytes to which mirrored frames are truncated, expressed as a decimal integer.
Platforms
All
slm
slm
Syntax
slm [test-id test-id] [create]
no slm
Context
[Tree] (config>oam-pm>session>ethernet slm)
Full Context
configure oam-pm session ethernet slm
Description
This command defines the test ID to be assigned to the synthetic loss test and creates the container to allow the individual test parameters to be configured.
The no form of this command removes the SLM test function from the PM Session.
Parameters
- test-id
-
Specifies the value placed in the 4-byte test ID field of the ETH-SLM PDU.
- create
-
Creates the test.
Platforms
All
slm
Syntax
slm
Context
[Tree] (config>eth-cfm slm)
Full Context
configure eth-cfm slm
Description
This is the container that provides the global configuration parameters for ITU-T Synthetic Loss Measurement (ETH-SL).
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
slope-policy
slope-policy
Syntax
slope-policy name
no slope-policy
Context
[Tree] (config>port>network>egress>pool slope-policy)
[Tree] (config>port>access>egress>pool slope-policy)
[Tree] (config>port>access>ingress>pool slope-policy)
Full Context
configure port network egress pool slope-policy
configure port access egress pool slope-policy
configure port access ingress pool slope-policy
Description
This command specifies an existing slope policy which defines high and low priority RED slope parameters and the time average factor. The policy is defined in the config>qos>slope-policy context.
Default
slope-policy default
Parameters
- name
-
Specifies the policy name, a string up to 32 characters.
Platforms
All
slope-policy
Syntax
slope-policy slope-policy-name
no slope-policy
Context
[Tree] (config>card>fp>egress>wred-queue-control slope-policy)
Full Context
configure card fp egress wred-queue-control slope-policy
Description
This command configures WRED slopes within the WRED mega-pool. The WRED slopes in the WRED mega-pool are used when WRED queues are requesting buffers from the mega-pool while they are over their CBS threshold. Once over the CBS threshold, the WRED queue stops receiving buffers from the CBS reserve in the mega-pool and starts competing for buffers in the shared portion of the mega-pool. If the packet resulting in the buffer request is inplus-profile, the packet will be associated with the highplus-slope. In-profile packets are associated with the high slope. Out-of-profile packets are associated with the low slope. Exceed-profile packets are associated with the exceed slope. While the queue is within its CBS threshold, the slopes are ignored.
Within the defined slope-policy, each slope is enabled or disabled (no shutdown or shutdown) and each slope’s geometry is defined as percentages of shared portion depth. If a slope is shutdown, the related traffic uses the minimum of the queue MBS and egress WRED megapool size as a drop tail.
The slope-policy also defines the time average factor (TAF) value that is used to determine how the pool’s weighted average depth is calculated. The higher the factor, the slower the average depth tracks the actual pool depth.
The no form of this command reverts to the default slope policy to the WRED mega-pool.
Default
slope-policy default
Parameters
- slope-policy-name
-
Specifies which slope policy the system should apply to the WRED mega-pool. When slope-policy is not executed, the WRED mega-pool will use the default slope policy. The defined slope policy must already exist or the command will fail. 32 characters maximum.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
slope-policy
Syntax
slope-policy name
no slope-policy
Context
[Tree] (config>card>fp>ingress>network>pool slope-policy)
Full Context
configure card fp ingress network pool slope-policy
Description
This command specifies an existing slope policy which defines high and low priority RED slope parameters and the time average factor. The policy is defined in the config>qos>slope-policy context.
Default
slope-policy default
Parameters
- name
-
Specifies the policy name, a string up to 32 characters.
Platforms
All
slope-policy
Syntax
slope-policy slope-policy-name
no slope-policy
Context
[Tree] (config>isa>aa-grp>qos>egress>from-subscriber>pool slope-policy)
[Tree] (config>isa>aa-grp>qos>egress>to-subscriber>pool slope-policy)
Full Context
configure isa application-assurance-group qos egress from-subscriber pool slope-policy
configure isa application-assurance-group qos egress to-subscriber pool slope-policy
Description
This command specifies an existing slope policy which defines high and low priority RED slope parameters and the time average factor. The slope policy is defined in the config>qos>slope-policy context.
Parameters
- slope-policy-name
-
Specifies the name of the slope policy, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
slope-policy
Syntax
slope-policy policy-name
no slope-policy
Context
[Tree] (config>qos>hs-pool-policy>mid-tier>mid-pool slope-policy)
[Tree] (config>qos>hs-pool-policy>root-tier>root-pool slope-policy)
Full Context
configure qos hs-pool-policy mid-tier mid-pool slope-policy
configure qos hs-pool-policy root-tier root-pool slope-policy
Description
This command specifies the slope policy to be used to define the high, low, and exceed slopes within the pool. The slope (high, low, or exceed) used on the egress queue for the packet that generated the buffer request is also used in the mid-pool from the applied slope policy. The pool’s current allocation amount is applied to the appropriate slope to derive the buffer rejection probability. The probability value is compared to a randomly-generated number. If the probability decision generates a rejection decision or the buffer pool has no remaining free buffers, the buffer request fails and the arriving packet is discarded. Otherwise, a buffer is allocated as long as the port-class and root-tier buffer pools also honor the buffer request.
The no form of the command restores the default slope policy to the associated pool.
Default
slope-policy _tmnx_hs_default
Parameters
- policy-name
-
Specifies the slope policy associated with this pool, up to 32 characters.
Platforms
7750 SR-7/12/12e
slope-policy
Syntax
slope-policy policy-name
no slope-policy
Context
[Tree] (config>qos>hs-port-pool-policy>std-port-class-pools>class-pool slope-policy)
[Tree] (config>qos>hs-port-pool-policy>alt-port-class-pools>class-pool slope-policy)
Full Context
configure qos hs-port-pool-policy std-port-class-pools class-pool slope-policy
configure qos hs-port-pool-policy alt-port-class-pools class-pool slope-policy
Description
This command specifies the slope policy that is used to define the high, low, and exceed slopes within the port-class pool. The slope used on the egress queue for the packet that generated the buffer request is also used in the class-pool. The pool’s current allocation amount is applied to the appropriate slope to derive the buffer rejection probability. The probability value is compared to a randomly generated number. If the probability decision generates a rejection or the buffer pool has no remaining free buffers, the buffer request fails and the arriving packet is discarded. Otherwise, a buffer is allocated as long as the mid-tier and root-tier buffer pools also honor the buffer request.
The no form of the command restores the default slope policy to the associated class-pool.
Default
slope-policy _tmnx_hs_default
Parameters
- policy-name
-
Specifies the policy name, up to 32 characters. This parameter is required when executing the slope-policy command and must refer to an existing slope policy within the system. If a slope policy with the specified name does not exist, the slope-policy command fails without modifying the slope behavior on the pool. A non-existent slope-policy error is generated. After a slope policy is associated with any HSQ queue or buffer pool, the policy cannot be deleted.
Platforms
7750 SR-7/12/12e
slope-policy
Syntax
slope-policy name [create]
no slope-policy name
Context
[Tree] (config>qos slope-policy)
Full Context
configure qos slope-policy
Description
Commands in this context configure a QoS slope policy.
Default
slope-policy "default”
Parameters
- name
-
The name of the slope policy.
Platforms
All
slope-policy
Syntax
slope-policy src-name dst-name [overwrite]
Context
[Tree] (config>qos>copy slope-policy)
Full Context
configure qos copy slope-policy
Description
This command copies existing QoS policy entries for a QoS policy-id to another QoS policy-id.
The copy command is a configuration-level maintenance tool used to create new policies using existing policies. It also allows bulk modifications to an existing policy with the use of the overwrite keyword.
Parameters
- slope-policy
-
Indicates that the source policy ID and the destination policy ID are slope policy IDs. Specify the source policy ID that the copy command will attempt to copy from and specify the destination policy ID to which the command will copy a duplicate of the policy.
- overwrite
-
Specifies to replace the existing destination policy. Everything in the existing destination policy will be overwritten with the contents of the source policy. If overwrite is not specified, an error will occur if the destination policy ID exists.
ALA-7>config>qos# copy slope-policy default sp1 MINOR: CLI Destination "sp1" exists - use {overwrite}. ALA-7>config>qos#overwrite
Platforms
All
slow-psc-timer
slow-psc-timer
Syntax
slow-psc-timer interval
no slow-psc-timer
Context
[Tree] (config>router>mpls>mpls-tp>protection-template slow-psc-timer)
Full Context
configure router mpls mpls-tp protection-template slow-psc-timer
Description
This command configures the slow timer value to be used for protection switching coordination (PSC) packets for MPLS-TP linear protection (RFC 6378).
Default
slow-psc-timer 5
Parameters
- interval
-
Specifies the slow timer interval in seconds.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
slow-queue-threshold
slow-queue-threshold
Syntax
slow-queue-threshold kilobits-per-second
no slow-queue-threshold
Context
[Tree] (config>card>virt-sched-adj slow-queue-threshold)
Full Context
configure card virtual-scheduler-adjustment slow-queue-threshold
Description
This command overrides the system default rate threshold where policers and queues are placed in the "slow” queue category. Slow rate policers and queues use a different minimum rate calculation interval time than fast rate queues. The rate is determined based on the previous calculated offered rate for the policer or queue.
The default slow policer or queue rate is 1 Mb/s. The fast rate is derived by multiplying the slow rate by a factor of 1.5 resulting in a default fast rate of 1.5 Mb/s. The slow-queue-threshold command uses a "Kilobit-Per-Second” value to modify the default slow queue rate threshold and indirectly changes the fast queue rate threshold.
The no form of this command restores the default slow queue and fast rate thresholds.
Default
no slow-queue-threshold
Parameters
- kilobits-per-second
-
Specifies that the kilobit-per-second parameter is required and is used to modify the default slow rate threshold. Defining a value of 0 forces all policers and queues to be treated as fast rate. Defining a value of 1000 (1 Mb/s) returns the threshold to the default value and is equivalent to executing no slow-queue-threshold.
The fast rate threshold is derived by multiplying the new slow rate threshold by a factor of 1.5.
Platforms
All
sm-tti
sm-tti
Syntax
sm-tti
Context
[Tree] (config>port>otu sm-tti)
Full Context
configure port otu sm-tti
Description
Commands in this context configure section monitoring trail trace identifier parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
snap-oui
snap-oui
Syntax
snap-oui {zero | non-zero}
no snap-oui
Context
[Tree] (config>qos>sap-ingress>mac-criteria>entry>match snap-oui)
Full Context
configure qos sap-ingress mac-criteria entry match snap-oui
Description
Configures an IEEE 802.3 LLC SNAP Ethernet frame OUI zero or non-zero value to be used as a service ingress QoS policy match criterion.
The no form of this command removes the criterion from the match criteria.
Default
no snap-oui
Parameters
- zero
-
Specifies to match packets with the 3-byte OUI field in the SNAP-ID set to zero.
- non-zero
-
Specifies to match packets with the 3-byte OUI field in the SNAP-ID not set to zero.
Platforms
All
snap-oui
Syntax
snap-oui {zero | non-zero}
no snap-oui
Context
[Tree] (config>filter>mac-filter>entry>match snap-oui)
Full Context
configure filter mac-filter entry match snap-oui
Description
This command configures an IEEE 802.3 LLC SNAP Ethernet Frame OUI zero or non-zero value to be used as a MAC filter match criterion.
The no form of the command removes the criterion from the match criteria.
Default
no snap-oui
Parameters
- zero
-
Specifies to match packets with the three-byte OUI field in the SNAP-ID set to zero.
- non-zero
-
Specifies to match packets with the three-byte OUI field in the SNAP-ID not set to zero.
Platforms
All
snap-oui
Syntax
snap-oui {zero | non-zero}
no snap-oui
Context
[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry>match snap-oui)
Full Context
configure system security management-access-filter mac-filter entry match snap-oui
Description
This command configures an IEEE 802.3 LLC SNAP Ethernet Frame OUI zero or non-zero value to be used as a MAC filter match criterion.
The no form of this command removes the criterion from the match criteria.
Default
no snap-oui
Parameters
- zero
-
Specifies to match packets with the three-byte OUI field in the SNAP-ID set to zero.
- non-zero
-
Specifies to match packets with the three-byte OUI field in the SNAP-ID not set to zero.
Platforms
All
snap-pid
snap-pid
Syntax
snap-pid snap-pid
no snap-pid
Context
[Tree] (config>qos>sap-ingress>mac-criteria>entry>match snap-pid)
Full Context
configure qos sap-ingress mac-criteria entry match snap-pid
Description
Configures an IEEE 802.3 LLC SNAP Ethernet frame PID value to be used as a service ingress QoS policy match criterion.
This is a 2-byte protocol id that is part of the IEEE 802.3 LLC SNAP Ethernet Frame that follows the 3-byte OUI field.
The snap-pid field, etype field, ssap, and dsap fields are mutually exclusive and cannot be part of the same match criteria.
The snap-pid match criteria is independent of the OUI field within the SNAP header. Two packets with different 3-byte OUI fields, but the same PID field, will both match the same policy entry based on a snap-pid match criteria.
The no form of this command removes the snap-pid value as the match criteria.
Default
no snap-pid
Parameters
- snap-pid
-
The 2-byte snap-pid value to be used as a match criterion in hexadecimal.
Platforms
All
snap-pid
Syntax
snap-pid snap-pid
no snap-pid
Context
[Tree] (config>filter>mac-filter>entry>match snap-pid)
Full Context
configure filter mac-filter entry match snap-pid
Description
Configures an IEEE 802.3 LLC SNAP Ethernet Frame PID value to be used as a MAC filter match criterion.
This is a two-byte protocol id that is part of the IEEE 802.3 LLC SNAP Ethernet Frame that follows the three-byte OUI field.
The snap-pid field, etype field, ssap and dsap fields are mutually exclusive and may not be part of the same match criteria.
The snap-pid match criterion is independent of the OUI field within the SNAP header. Two packets with different three-byte OUI fields but the same PID field will both match the same filter entry based on a snap-pid match criteria.
The no form of the command removes the snap-pid value as the match criteria.
Default
no snap-pid
Parameters
- snap-pid
-
Specifies the two-byte snap-pid value to be used as a match criterion. The value can be expressed in decimal integer or hexadecimal format.
Platforms
All
snap-pid
Syntax
snap-pid snap-pid
no snap-pid
Context
[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry>match snap-pid)
Full Context
configure system security management-access-filter mac-filter entry match snap-pid
Description
This command configures an IEEE 802.3 LLC SNAP Ethernet Frame PID value to be used as a MAC filter match criterion.
This is a two-byte protocol id that is part of the IEEE 802.3 LLC SNAP Ethernet Frame that follows the three-byte OUI field.
The snap-pid field, etype field, ssap and dsap fields are mutually exclusive and may not be part of the same match criteria. Refer to the 7450 ESS, 7750 SR, 7950 XRS, and VSR Router Configuration Guide for information about MAC Match Criteria Exclusivity Rules fields that are exclusive based on the frame format.
The snap-pid match criterion is independent of the OUI field within the SNAP header. Two packets with different three-byte OUI fields but the same PID field will both match the same filter entry based on a snap-pid match criteria.
The no form of this command removes the snap-pid value as the match criteria.
Default
no snap-pid
Parameters
- pid-value
-
Specifies the two-byte snap-pid value to be used as a match criterion in hexadecimal.
Platforms
All
snmp
snmp
Syntax
snmp
Context
[Tree] (config>service>vprn snmp)
Full Context
configure service vprn snmp
Description
Commands in this context configure SNMP parameters for this VPRN.
Platforms
All
snmp
Syntax
snmp
Context
[Tree] (config>system>security>user snmp)
Full Context
configure system security user snmp
Description
This command creates the context to configure SNMP group membership for a specific user and defines encryption and authentication parameters.
All SNMPv3 users must be configured with the commands available in this CLI node.
The OS always uses the configured SNMPv3 user name as the security user name.
Platforms
All
snmp
snmp-trap-group
snmp-trap-group
Syntax
snmp-trap-group log-id | log-name [name log-name]
no snmp-trap-group log-id | log-name
Context
[Tree] (config>service>vprn>log snmp-trap-group)
Full Context
configure service vprn log snmp-trap-group
Description
This command creates the context to configure a group of SNMP trap receivers and their operational parameters for a specific log-id.
A group specifies the types of SNMP traps and specifies the log ID that will receive the group of SNMP traps. The user must configure a trap group before SNMP traps can be sent.
To suppress the generation of all alarms and traps, see the event-control command. To suppress alarms and traps that are sent to this log-id, see the filter command. After alarms and traps are generated, they can be directed to one or more SNMP trap groups. Log events that can be forwarded as SNMP traps are always defined on the main event source.
The no form of this command deletes the SNMP trap group.
Default
There are no default SNMP trap groups.
Parameters
- log-id | log-name
-
Specifies the log ID or name (up to 32 characters).
- name log-name
-
Specifies an optional log name of a log configured in the log-id context, up to 32 characters, that can be used to refer to the log after it is created. Alarms and traps cannot be sent to the trap receivers until a valid log-id exists.
Platforms
All
snmp-trap-group
Syntax
snmp-trap-group log-id | log-name [name log-name]
no snmp-trap-group log-id | log-name
Context
[Tree] (config>log snmp-trap-group)
Full Context
configure log snmp-trap-group
Description
This command creates the context to configure a group of SNMP trap receivers and their operational parameters for a specified log-id.
A group specifies the types of SNMP traps and the log ID which that will receive the SNMP trap group. The user must configure a trap to send SNMP traps.
To suppress the generation of all alarms and traps, see the event-control command. To suppress alarms and traps that are sent to this log ID, see the filter command. When alarms and traps are generated, they can be directed to one or more SNMP trap groups. Log events that can be forwarded as SNMP traps are always defined at the main event source.
The no form of this command deletes the SNMP trap group.
Parameters
- log-id | log-name
-
Specifies the log ID or log name (up to 32 characters).
- name log-name
-
Specifies an optional log name of a log configured in the log-id context, up to 32 characters, that can be used to refer to the log after it is created. Alarms and traps cannot be sent to the trap receivers until a valid log-id exists.
Platforms
All
snoop
snoop
Syntax
[no] snoop
Context
[Tree] (config>service>vprn>nw-if>dhcp snoop)
[Tree] (config>service>vpls>sap>dhcp snoop)
[Tree] (config>service>vprn>if>dhcp>option snoop)
[Tree] (config>service>vpls>mesh-sdp>dhcp snoop)
[Tree] (config>service>vpls>spoke-sdp>dhcp snoop)
Full Context
configure service vprn nw-if dhcp snoop
configure service vpls sap dhcp snoop
configure service vprn interface dhcp option snoop
configure service vpls mesh-sdp dhcp snoop
configure service vpls spoke-sdp dhcp snoop
Description
This command enables snooping of DHCP or DHCP6 messages on the SAP or SDP. Enabling DHCP or DHCP6 snooping on interfaces (SAPs and SDP bindings) is required where DHCP or DHCP6 messages important to lease state table population are received, or where Option 82 information is to be inserted. This includes interfaces that are in the path to receive messages from either DHCP or DHCP6 servers or from subscribers.
The no form of this command disables DHCP or DHCP6 snooping on the specified SAP or SDP binding.
Default
no snoop
Platforms
All