All
This command configures memory use, in kilobytes, alarm thresholds.
The no form of the command removes the parameters from the configuration.
After a rising threshold crossing event is generated, another such event will not be generated until the sampled value falls below this threshold and reaches less than or equal the falling-threshold value.
The threshold value represents units of kilobytes.
After a falling threshold crossing event is generated, another such event will not be generated until the sampled value rises above this threshold and reaches greater than or equal the rising-threshold value.
The threshold value represents units of kilobytes.
All
This command configures memory usage, in kilobytes, for warning thresholds
After a rising threshold crossing event is generated, another such event will not be generated until the sampled value falls below this threshold and reaches less than or equal the falling-threshold value.
The threshold value represents units of kilobytes.
After a falling threshold crossing event is generated, another such event will not be generated until the sampled value rises above this threshold and reaches greater than or equal the rising-threshold value.
The threshold value represents units of kilobytes.
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures Echo-Request messages.
The no form of this command reverts to the default values.
keep-alive interval 60 retry-count 4 timeout 5
All
This command configures the time interval between keep-alive PDUs.
no keep-alive
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e, 7950 XRS
This command configures keepalive parameters to monitor ILMI link connectivity.
The no form of this command resets the default values on an ILMI link.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command configures the X2 and X3 keep-alive timeout.
All
This command enables the context to configure SDP connectivity monitoring keepalive messages for the SDP ID.
SDP ID keepalive messages use SDP Echo Request and Reply messages to monitor SDP connectivity. The operating state of the SDP is affected by the keepalive state on the SDP ID. SDP Echo Request messages are only sent when the SDP ID is completely configured and administratively up. If the SDP ID is administratively down, keepalives for that SDP ID are disabled. SDP Echo Requests (when sent for keepalive messages) are always sent with the originator-sdp-id. All SDP ID keepalive SDP Echo Replies are sent using generic IP/GRE OAM encapsulation.
When a keepalive response is received that indicates an error condition, the SDP ID will immediately be brought operationally down. Once a response is received that indicates the error has cleared and the hold-down-time interval has expired, the SDP ID will be eligible to be put into the operationally up state. If no other condition prevents the operational change, the SDP ID will enter the operational state.
A set of event counters track the number of keepalive requests sent, the size of the message sent, non-error replies received and error replies received. A keepalive state value is kept indicating the last response event. A keepalive state timestamp value is kept indicating the time of the last event. With each keepalive event change, a log message is generated indicating the event type and the timestamp value.
Table 69 describes the keepalive interpretation of SDP echo reply response conditions and the effect on the SDP ID operational status.
Result of Request | Stored Response State | Operational State |
keepalive request timeout without reply | Request Timeout | Down |
keepalive request not sent due to non-existent orig-sdp-id (This condition should not occur) | Orig-SDP Non-Existent | Down |
keepalive request not sent due to administratively down orig-sdp-id | Orig-SDP Admin-Down | Down |
keepalive reply received, invalid origination-id | Far End: Originator-ID Invalid | Down |
keepalive reply received, invalid responder-id | Far End: Responder-ID Error | Down |
keepalive reply received, No Error | Success | Up (If no other condition prevents) |
All
This command sets the interval at which keep-alive messages are exchanged between two systems participating in MC-LAG. These keep-alive messages are used to determine remote-node failure and the interval is set in deciseconds.
The no form of this command sets the interval to default value.
keep-alive-interval 10
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command defines the interval between SRRP advertisement messages sent when operating in the master state. The interval is also the basis for setting the master-down timer used to determine when the master is no longer sending. The system uses three times the keep-alive interval to set the timer. Every time an SRRP advertisement is seen that is better than the local priority, the timer is reset. If the timer expires, the SRRP instance assumes that a master does not exist and initiates the attempt to become master.
When in backup state, the SRRP instance takes the keep-alive interval of the master as represented in the masters SRRP advertisement message. Once in master state, the SRRP instance uses its own configured keep-alive interval.
The keep-alive-interval may be changed at any time, but will have no effect until the SRRP instance is in the master state.
The no form of this command restores the default interval.
keep-alive-interval 10
All
This command sets the interval at which keep-alive messages are exchanged between two systems participating in MC-EP when bfd is not enabled or is down. These fast keep-alive messages are used to determine remote-node failure and the interval is set in deciseconds.
The no form of this command sets the interval to default value
no keep-alive-interval
7450 ESS, 7750 SR, 7750 SR-1s, 7750 SR-2s, 7750 SR-e, VSR
This command specifies the time interval of the mastership election protocol sending keep-alive packet.
The no form of this command reverts to the default.
keep-alive-interval 10
All
This command configures the number of missed keepalives before the TCP connection is declared down.
The no form of this command reverts to the default.
keep-count 4
All
This command configures the time until the first TCP keepalive probe is sent.
The no form of this command reverts to the default.
keep-idle 600
All
This command configures the time between two TCP keepalives probes.
The no form of this command reverts to the default.
keep-interval 15
7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command configures the integer used by RSVP to declare that a reservation is down or the neighbor is down.
The no form of this command resets the configuration to the default value.
keep-multiplier 3
All
The keep-multiplier number is an integer used by RSVP to declare that a reservation is down or the neighbor is down.
The no form of this command reverts to the default value.
keep-multiplier 3
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures the PPP keepalive interval and multiplier.
keepalive 30 hold-up-multiplier 3
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command defines the keepalive interval and the number of keepalives that can be missed before the session is declared down for this PPP policy.
The no form of this command reverts to the default value.
keepalive 30 hold-up-multiplier 3
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures the BGP keepalive timer. A keepalive message is sent every time this timer expires.
The keepalive value is generally one-third of the hold-time interval. Even though the OS implementation allows the keepalive value and the hold-time interval to be independently set, under the following circumstances, the configured keepalive value is overridden by the hold-time value:
If the specified keepalive value is greater than the configured hold-time, then the specified value is ignored, and the keepalive is set to one third of the current hold-time value.
If the specified hold-time interval is less than the configured keepalive value, then the keepalive value is reset to one third of the specified hold-time interval.
If the hold-time interval is set to zero, then the configured value of the keepalive value is ignored. This means that the connection with the peer is up permanently and no keepalive packets are sent to the peer.
The no form of this command used at the global level reverts to the default value.
keepalive 30
All
This command configures keepalive values for the GSMP connections in this group.
The no form of this command reverts to the default.
no keepalive
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command defines the keepalive interval and the number of times the keepalive can be missed before the session is declared down for this PPPoE client policy.
The no form of this command reverts to the default.
keepalive 30 hold-up-multiplier 3
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
This command sets the keepalive interval.
The no form of this command returns the interval to the default value.
keepalive 10
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
This command specifies the interval, in seconds, used to send periodic keepalive packets. The receiver process expects to receive a keepalive packet every “keepalive interval”. The link is declared down if the receiver process does not receive a keepalive within the “timeout interval”. The link is declared up once the number of continual keepalive packets received equals to the up-count. The nodes at the two endpoints of the cHDLC link should be provisioned with the same values. A keepalive value of 0 means no keepalive packets are sent.
keepalive 10
All
This command configures the BGP keepalive timer. A keepalive message is sent every time this timer expires. The seconds parameter can be set at three levels: global level (applies to all peers), group level (applies to all peers in peer-group) or neighbor level (only applies to specified peer). The most specific value is used.
The keepalive value is generally one-third of the hold-time interval. Even though the OS implementation allows the keepalive value and the hold-time interval to be independently set, under the following circumstances, the configured keepalive value is overridden by the hold-time value:
If the specified keepalive value is greater than the configured hold-time, then the specified value is ignored, and the keepalive is set to one third of the current hold-time value.
If the specified hold-time interval is less than the configured hold-time value, then the keepalive value is reset to one third of the specified hold-time interval.
If the hold-time interval is set to zero, then the configured value of the keepalive value is ignored. This means that the connection with the peer is up permanently and no keepalive packets are sent to the peer.
The no form of this command used at the global level reverts to the default value.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
keepalive 30
All
This command configures the time interval (in s), that LDP waits before tearing down the session. The factor parameter derives the keepalive interval.
The config>router>ldp>if-params>ipv6>keepalive and config>router>ldp>targ-session>ipv6>keepalive commands are not supported on the 7450 ESS.
If no LDP messages are exchanged for the configured time interval, the LDP session is torn down. Keepalive timeout is usually three times the keepalive interval. To maintain the session permanently, regardless of the activity, set the value to zero.
When LDP session is being set up, the keepalive timeout is negotiated to the lower of the two peers. Once an operational value is agreed upon, the keepalive factor is used to derive the value of the keepalive interval.
The no form of the command at the interface-parameters and targeted-session levels sets the keepalive timeout and the keepalive factor to the default value.
The no form of this command, at the interface level, sets the keepalive timeout and the keepalive factor to the value defined under the interface-parameters level.
The no form of this command, at the peer level, sets the keepalive timeout and the keepalive factor to the value defined under the targeted-session level.
The session must be flapped for the new settings to operate.
Table 70 lists the default values.
Context | Timeout | Factor |
config>router>ldp>if-params | 30 | 3 |
config>router>ldp>targ-session | 40 | 4 |
config>router>ldp>if-params>if | Inherits values from interface-parameters context. | |
config>router>ldp>targ-session>peer | Inherits values from targeted-session context. |
All
This command enables debugging for LDP Keepalive packets.
The no form of the command disables the debugging output.
All
This command configures the PCEP session keep-alive value. A PCEP speaker (PCC or PCE) must send a keep-alive message if no other PCEP message is sent to the peer at the expiry of this timer. This timer is restarted every time a PCEP message or keep-alive message is sent.
The keep-alive mechanism is asymmetric, meaning that each peer can use a different keep-alive timer value at its end.
The no form of the command returns the keep-alive timer to the default value.
keepalive 30
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures keepalives between the CPMs residing on different chassis. The keepalives are used to detect the presence of the peering node. If the redundant peer connectivity is lost beyond the limit defined by keepalives, then each node in the redundant pair transitions into a standalone mode. Keepalives use UDP transport.
keepalive 30 dropcount 2
All
This command configures the BGP keepalive timer. A keepalive message is sent every time this timer expires.
The keepalive parameter can be set at three levels: global level (applies to all peers), group level (applies to all peers in peer-group) or neighbor level (only applies to specified peer). The most specific value is used.
The keepalive value is generally one-third of the hold-time interval. Even though the implementation allows the keepalive value and the hold-time interval to be independently set, under the following circumstances, the configured keepalive value is overridden by the hold-time value:
The no form of this command used at the global level reverts to the default value.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
keepalive 30
All
This command decodes and logs all sent and received keepalive messages in the debug log.
The no form of this command disables the debugging.
This command configures the keepalive timer override. The PIM (S,G) Keepalive Timer (KAT) is used to maintain the (S,G) state when (S,G) join is not received. Expiry of the KAT causes the (S,G) entry to be removed.
The KAT override configuration is performed with a multicast information policy, which must be applied to the related PIM routing instance. When a KAT override is configured under a channel (a group or a group range), it applies to all (S,G) entries that fall under it, except when the source-override is configured and a KAT override is also configured under the source-override. In this scenario, the specific KAT override must be used for the (S,G) entries that fall under the source-override, while other (S,G) entries under the bundle use the KAT override configured under the channel.
All
This command enables and disables the kernel.
All
This command allows the user to configure phase 1 SSH v2 KEX algorithms for SR OS as an SSH server or an SSH client. By default, the client and server lists are empty. If the user configures this list, SSH uses the hard-coded list with the first-listed algorithm having the highest priority and so on. An empty server or client list is the default list and contains the following algorithms:
diffie-hellman-group16-sha512
diffie-hellman-group14-sha256
diffie-hellman-group14-sha1
diffie-hellman-group14-sha1
diffie-hellman-group1-sha1
The no form of this command removes the specified KEX index. If all KEX indexes are removed, the default list is used again.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies the RADIUS cache key that is used to match the information in subsequent DHCP requests for authorization.
7450 ESS, 7750 SR, 7750 SR-1s, 7750 SR-2s, 7750 SR-e, VSR
This command specifies the filename of an imported key for the cert-profile entry.
The no form of this command removes the key filename from the entry configuration.
no key
All
This command specifies a pre-shared key used for CMPv2 initial registration. Multiples of key commands are allowed to be configured under this context.
The password and reference-number is distributed by the CA via out-of-band means.
The configured password is stored in configuration file in an encrypted form by using SR OS hash2 algorithm.
The no form of this command removes the parameters from the configuration.
All
This command specifies the file name of an imported key for the cert-profile entry.
The no form of the command removes the key.
no key
All
This command enables the context to configure pre-shared key list parameters.
All
This command enables the key re-exchange context.
All
This command configures the key rollover interval.
The no form of this command reverts to the default.
key-rollover-interval 10
All
This command configures the key rollover interval.
key-rollover-interval 10
All
This command requests a new certificate from the CA to update an existing certificate due to reasons such as key refresh or replacing compromised key.
In some cases, the CA may not return certificate immediately, due to reasons such as request processing need manual intervention. In such cases, the admin certificate cmpv2 poll command can be used to poll the status of the request.
All
This command configures a value for the RSA or ECDSA public key. The public key must be enclosed in quotation marks. For RSA, the key is between 768 and 4096 bits. For ECDSA, the key is between 1 and 1024 bits.
no key-value
All
This command enables the context to configure keychain parameters. A keychain must be configured on the system before it can be applied to a session.
The no form of this command removes the keychain nodal context and everything under it from the configuration. If the keychain to be removed is in use when the no keychain command is entered, the command will not be accepted and an error indicating that the keychain is in use will be printed.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command is used to name the key group. The key group name can be used to reference a key group when configuring services or displaying information.
The no form of the command reverts to the default value.
All
no kill-session