24. isa Commands
24.1. isa Command Descriptions
lns-group [id] number
Synopsis
Enter the lns-group list instance
Tree
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
[id] number
Synopsis
Tunnel group ID
Range
1 to 4
Notes
This element is part of a list key.
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
admin-state keyword
Synopsis
Administrative state of the ISA LNS group
Context
configure isa lns-group number admin-state keyword
Tree
Default
disable
Options
enable, disable
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
description string
Synopsis
Text description
Context
configure isa lns-group number description string
Tree
String Length
1 to 80
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
esa [esa-id] reference vm reference
Synopsis
Enter the esa list instance
Tree
Max. Elements
6
Introduced
20.10.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s
[esa-id] reference
Synopsis
ESA ID
Notes
This element is part of a list key.
Introduced
20.10.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s
vm reference
Synopsis
VM ID
Notes
This element is part of a list key.
Introduced
20.10.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s
drain boolean
Synopsis
Redirect subscribers to other ESA VMs
Tree
Description
When configured to true, the ESA VM redirects new subscribers to use other ESA VMs.
The drain function gracefully redirects subscribers to other ESA VMs and does not allow new subscribers to use the ESA VM. As the existing subscribers terminate their sessions, the ESA VM no longer services any subscribers and can be decommissioned gracefully.
When configured to false, the ESA VM is set to the normal working operational state and accepts new LNS subscribers.
Default
false
Introduced
20.10.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s
mda [mda-id] string
Synopsis
Enter the mda list instance
Tree
Max. Elements
6
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
[mda-id] string
Synopsis
MDA ID for the ISA LNS group
Notes
This element is part of a list key.
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
drain boolean
Synopsis
Specifies the draining state of the MDA
Tree
Default
false
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
port-policy reference
 | Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
Synopsis
Port policy for the ISA LNS group
Context
configure isa lns-group number port-policy reference
Tree
Reference
configure port-policy string
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
nat-group [id] number
Synopsis
Enter the nat-group list instance
Tree
Max. Elements
4
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
[id] number
Synopsis
Nat-group identifier
Range
1 to 4
Notes
This element is part of a list key.
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
admin-state keyword
Synopsis
Administrative state of the NAT group
Context
configure isa nat-group number admin-state keyword
Tree
Default
disable
Options
enable, disable
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
description string
Synopsis
Text description
Context
configure isa nat-group number description string
Tree
String Length
1 to 80
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
esa [esa-id] reference vm reference
Synopsis
Add a list entry for esa
Tree
Introduced
20.5.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s
[esa-id] reference
Synopsis
Provisioned ESA ID
Notes
This element is part of a list key.
Introduced
20.5.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s
vm reference
Synopsis
VM ID for the provisioned BB ISA
Notes
This element is part of a list key.
Introduced
20.5.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s
log
Synopsis
Enter the log context
Tree
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
suppress-lsn-events boolean
Synopsis
Suppress the generation of Large Scale NAT (LSN) events when RADIUS accounting is enabled
Context
configure isa nat-group number log suppress-lsn-events boolean
Tree
Default
true
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
suppress-lsn-sub-blocks-free boolean
Synopsis
Suppress the LSN Free blocks and NAT pool block allocation notifications
Context
configure isa nat-group number log suppress-lsn-sub-blocks-free boolean
Default
false
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
mda [mda-id] string
Synopsis
Add a list entry for mda
Tree
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
[mda-id] string
Synopsis
MDA ID for ISA NAT group
Notes
This element is part of a list key.
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
radius-accounting-policy reference
Synopsis
RADIUS accounting policy for ISA group
Context
configure isa nat-group number radius-accounting-policy reference
Reference
configure aaa radius isa-policy string
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
redundancy
Synopsis
Enter the redundancy context
Context
configure isa nat-group number redundancy
Tree
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
active-mda-limit number
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element clears ISA state, such as flow state, for the new value to take effect. |
Synopsis
Number of active MS-ISAs in the NAT group
Context
configure isa nat-group number redundancy active-mda-limit number
Tree
Range
1 to 14
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
inter-chassis
Synopsis
Enable the inter-chassis context
Context
configure isa nat-group number redundancy inter-chassis
Tree
Notes
The following are part of a choice: inter-chassis or intra-chassis.
Introduced
20.7.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
flow-timeout-on-switchover number
Synopsis
Flow timeout immediately following a switchover
Context
configure isa nat-group number redundancy inter-chassis flow-timeout-on-switchover number
Description
This command configures the initial flow timeout on the newly active node for the NAT group after a switchover. The timeout is in effect only if there is no traffic present over the flow; otherwise, the first packet over the flow resets the flow timeout to the originally configured value (under the NAT policy configuration).
This command configuration restricts the flow timeout to a portion of the originally configured value.
Range
1 to 50
Default
50
Introduced
20.7.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
ip-mtu number
Synopsis
IP MTU for ISA-to-ISA communication
Context
configure isa nat-group number redundancy inter-chassis ip-mtu number
Tree
Description
This command configures the IP MTU size used to transport flow synchronization records between the ISAs. Multiple flow synchronization events can be packed into a single frame up to the IP MTU size.
Range
512 to 9000
Default
1500
Introduced
20.7.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
keepalive
Synopsis
Enter the keepalive context
Context
Tree
Description
Commands in this context configure keepalive messages between the CPMs residing on different chassis and are used to detect the presence of the peering node. If the redundant peer connectivity is lost beyond the limit defined by the keepalive messages, each node in the redundant pair transitions to standalone mode. Keepalive messages use UDP transport.
Introduced
20.7.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dropcount number
Synopsis
Threshold for lost consecutive keepalive messages
Context
configure isa nat-group number redundancy inter-chassis keepalive dropcount number
Tree
Description
This command configures the threshold for the number of consecutive keepalive messages that are lost between the redundant nodes before the connection is declared down. When the peer is considered unreachable, each node transitions to standalone mode.
Range
2 to 20
Default
2
Introduced
20.7.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
interval number
Synopsis
Interval between two consecutive keepalive messages
Context
configure isa nat-group number redundancy inter-chassis keepalive interval number
Tree
Description
This command configures the interval at which the keepalive messages are periodically sent between the redundant nodes (CPMs) to verify the presence of the peer. If peer connectivity is lost, each node transitions to standalone mode.
Range
2 to 250
Default
30
Units
deciseconds
Introduced
20.7.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
local-ip-range-start string
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element clears ISA state, such as flow state, for the new value to take effect. |
Synopsis
Starting IP address for ISAs in the NAT group
Context
configure isa nat-group number redundancy inter-chassis local-ip-range-start string
Tree
Description
This command configures the initial IP address for the ISAs in the NAT group. Consecutive IP addresses are automatically assigned for the remaining ISAs. The IP addresses are used to communicate between the ISAs on redundant nodes for the purpose of flow synchronization. Traffic from the member ISA with the initial IP address is sent to the initial IP address from the remote IP range.
Introduced
20.7.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
monitor-oper-group [oper-group] reference
Synopsis
Enter the monitor-oper-group list instance
Context
configure isa nat-group number redundancy inter-chassis monitor-oper-group reference
Tree
Description
Commands in this context specify monitoring settings for objects in an operational group, such as SAPs, BFD sessions, or VRRP sessions, in order to adjust the overall health of the node in a redundant inter-chassis NAT system. A state change of the objects in the operational group influences the health of a NAT node in a redundant configuration.
Max. Elements
4
Introduced
20.7.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
[oper-group] reference
Synopsis
Operational group name
Context
configure isa nat-group number redundancy inter-chassis monitor-oper-group reference
Reference
configure service oper-group string
Notes
This element is part of a list key.
Introduced
20.7.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
health-drop number
Synopsis
Overall health drop of the NAT group on a state change
Context
configure isa nat-group number redundancy inter-chassis monitor-oper-group reference health-drop number
Tree
Range
1 to 255
Default
1
Introduced
20.7.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
monitor-port [port-id] string
Synopsis
Enter the monitor-port list instance
Context
configure isa nat-group number redundancy inter-chassis monitor-port string
Tree
Description
Commands in this context specify monitoring settings for a port carrying NAT traffic, in order to adjust the overall health of the node in a redundant inter-chassis NAT system. A state change of a monitored port influences the health of a NAT node in a redundant configuration.
Max. Elements
16
Introduced
20.7.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
[port-id] string
Synopsis
Port ID
Context
configure isa nat-group number redundancy inter-chassis monitor-port string
Notes
This element is part of a list key.
Introduced
20.7.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
health-drop number
Synopsis
Overall health drop of the NAT group on a state change
Context
configure isa nat-group number redundancy inter-chassis monitor-port string health-drop number
Tree
Range
1 to 255
Default
1
Introduced
20.7.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
preferred boolean
Synopsis
Set the preferred activity status for the node
Context
configure isa nat-group number redundancy inter-chassis preferred boolean
Tree
Description
When configured to true, the system designates the node in a redundant NAT system with the preferred activity status. The preferred status comes into consideration only when both redundant nodes have equal health values. If the peer traffic-serving node has an equal health value but does not have the preferred designation, a switch of activity occurs to route traffic to the preferred node. The switchover could cause a brief interruption in traffic flow.
When configured to false, the preferred designation is not set for the node.
Default
false
Introduced
20.7.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
remote-ip-range-start string
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element clears ISA state, such as flow state, for the new value to take effect. |
Synopsis
Starting IP address for ISAs on the remote node
Context
configure isa nat-group number redundancy inter-chassis remote-ip-range-start string
Description
This command configures the initial IP address for the ISAs in the NAT group on the remote node. Consecutive IP addresses are automatically assigned for the remaining ISAs. The IP addresses are used to communicate between the ISAs on redundant nodes for the purpose of flow synchronization. Traffic from the member ISA with the initial local IP address is sent to the initial IP address from the remote IP range.
Introduced
20.7.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
replication-threshold number
Synopsis
Minimum time to wait before a NAT flow is synchronized
Context
configure isa nat-group number redundancy inter-chassis replication-threshold number
Description
This command configures the minimum time to wait before a NAT flow is replicated (synchronized) to the standby node.
Range
0 to 300
Default
20
Units
seconds
Introduced
20.7.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
router-instance string
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element clears ISA state, such as flow state, for the new value to take effect. |
Synopsis
Router instance for the ISA-to-ISA communication
Context
configure isa nat-group number redundancy inter-chassis router-instance string
Tree
Description
This command specifies the routing instance through which ISAs on redundant nodes communicate with each other and synchronize their flow state.
Introduced
20.7.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
intra-chassis
Synopsis
Enter the intra-chassis context
Context
configure isa nat-group number redundancy intra-chassis
Tree
Notes
This element is the default part of a choice.
The following are part of a choice: inter-chassis or intra-chassis.
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
active-active
Synopsis
Enter the active-active context
Context
Tree
Notes
The following are part of a choice: active-active, active-standby, or l2aware-bypass.
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
failed-mda-limit number
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element clears ISA state, such as flow state, for the new value to take effect. |
Synopsis
Maximum allowable number of failed MS-ISAs in the nat-group
Context
configure isa nat-group number redundancy intra-chassis active-active failed-mda-limit number
Tree
Range
1 to 2
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
active-standby
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element clears ISA state, such as flow state, for the new value to take effect. |
Synopsis
Active-standby intra-chassis NAT redundancy model
Context
Tree
Notes
This element is the default part of a choice.
The following are part of a choice: active-active, active-standby, or l2aware-bypass.
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2aware-bypass
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element clears ISA state, such as flow state, for the new value to take effect. |
Synopsis
L2-aware-bypass NAT redundancy model
Context
Tree
Notes
The following are part of a choice: active-active, active-standby, or l2aware-bypass.
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
scaling-profile keyword
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element clears ISA state, such as flow state, for the new value to take effect. |
Synopsis
Scaling profile for the NAT group
Context
configure isa nat-group number scaling-profile keyword
Tree
Description
This command specifies the scaling profile for the NAT group. This command is applicable only for NAT groups that contain ESA VMs or VSR virtual ISAs.
Default
profile1
Options
profile1, profile2
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
session-limits
Synopsis
Enter the session-limits context
Context
configure isa nat-group number session-limits
Tree
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
reserved number
Synopsis
Number of sessions reserved for prioritized sessions
Context
configure isa nat-group number session-limits reserved number
Tree
Range
1 to 6291456
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
upnp-mappings number
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element clears ISA state, such as flow state, for the new value to take effect. |
Synopsis
Maximum number of Universal Plug and Play mappings per member
Context
configure isa nat-group number session-limits upnp-mappings number
Tree
Range
1 to 524288
Default
524288
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
watermarks
Synopsis
Enable the watermarks context
Context
Tree
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
high number
Synopsis
High watermark of the number of sessions for each MDA in this NAT ISA group
Context
configure isa nat-group number session-limits watermarks high number
Tree
Range
0 to 100
Notes
This element is mandatory.
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
low number
Synopsis
Low watermark of the number of sessions for each MDA in this NAT ISA group
Context
configure isa nat-group number session-limits watermarks low number
Tree
Range
0 to 100
Notes
This element is mandatory.
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
tunnel-group [id] number
Synopsis
Enter the tunnel-group list instance
Context
configure isa tunnel-group number
Tree
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s, VSR
[id] number
Synopsis
The unique identifier of the tunnel group.
Context
configure isa tunnel-group number
Range
1 to 64
Notes
This element is part of a list key.
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s, VSR
admin-state keyword
Synopsis
Administrative state of the ISA tunnel group
Context
configure isa tunnel-group number admin-state keyword
Tree
Default
disable
Options
enable, disable
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s, VSR
backup string
Synopsis
The backup IPsec ISA to be used for this tunnel group.
Context
configure isa tunnel-group number backup string
Tree
Notes
The following are part of a choice: multi-active or (backup and primary).
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s, VSR
description string
Synopsis
Text description
Context
configure isa tunnel-group number description string
Tree
String Length
1 to 80
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s, VSR
ipsec-responder-only boolean
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
Synopsis
The IPsec tunnel responds the requests only and does not initiate exchanges with the peer.
Context
configure isa tunnel-group number ipsec-responder-only boolean
Tree
Default
false
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s, VSR
isa-scale-mode keyword
| Warning: Modifying this element recreates the parent element automatically for the new value to take effect. |
Synopsis
The set of supported scaling modes for each ISA in this group.
Context
configure isa tunnel-group number isa-scale-mode keyword
Tree
Options
tunnel-limit-2k, tunnel-limit-32k, tunnel-limit-64k, tunnel-limit-8, tunnel-limit-32
Notes
This element is mandatory.
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s, VSR
multi-active
Synopsis
Enable the multi-active context
Context
configure isa tunnel-group number multi-active
Tree
Notes
The following are part of a choice: multi-active or (backup and primary).
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s, VSR
active-isa-number number
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
Synopsis
The number of active ISAs to be used by this tunnel group to load-balance IPsec traffic.
Context
configure isa tunnel-group number multi-active active-isa-number number
Tree
Range
1 to 16
Default
1
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s, VSR
esa [esa-id] reference vm reference
Synopsis
Add a list entry for esa
Context
configure isa tunnel-group number multi-active esa reference vm reference
Tree
Notes
The following are part of a choice: esa or isa.
Introduced
20.5.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s
[esa-id] reference
Synopsis
ESA ID
Context
configure isa tunnel-group number multi-active esa reference vm reference
Notes
This element is part of a list key.
Introduced
20.5.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s
vm reference
Synopsis
VM ID
Context
configure isa tunnel-group number multi-active esa reference vm reference
Notes
This element is part of a list key.
Introduced
20.5.R1
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s
isa [isa-id] string
Synopsis
Add a list entry for isa
Context
configure isa tunnel-group number multi-active isa string
Tree
Notes
This element is the default part of a choice.
The following are part of a choice: esa or isa.
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s, VSR
[isa-id] string
Synopsis
The ISA associated with this tunnel group.
Context
configure isa tunnel-group number multi-active isa string
Notes
This element is part of a list key.
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s, VSR
primary string
Synopsis
The primary IPsec ISA to be used for this tunnel group.
Context
configure isa tunnel-group number primary string
Tree
Notes
The following are part of a choice: multi-active or (backup and primary).
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s, VSR
reassembly
Synopsis
Enter the reassembly context
Context
configure isa tunnel-group number reassembly
Tree
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s, VSR
max-wait-time number
Synopsis
The maximum number of milliseconds to wait to receive all fragments of a particular IPsec or GRE packet for reassembly. The value of this leaf must be a multiple of 100 milliseconds.
Context
configure isa tunnel-group number reassembly max-wait-time number
Tree
Range
1 to 5000
Units
milliseconds
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s, VSR
stats-collection
Synopsis
Enter the stats-collection context
Context
configure isa tunnel-group number stats-collection
Tree
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s, VSR
isa-dp-cpu-usage boolean
Synopsis
Collect the historical data-plane CPU usage statistics.
Context
configure isa tunnel-group number stats-collection isa-dp-cpu-usage boolean
Tree
Default
false
Introduced
16.0.R4
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-1s, 7750 SR-2s, VSR
video-group [video-group-id] number
Synopsis
Enter the video-group list instance
Context
configure isa video-group number
Tree
Max. Elements
4
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
[video-group-id] number
Synopsis
Video group identifier
Context
configure isa video-group number
Range
1 to 4
Notes
This element is part of a list key.
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
ad-insert boolean
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element recreates the parent element automatically for the new value to take effect. |
Synopsis
Enable the ad insert server for the group
Context
configure isa video-group number ad-insert boolean
Tree
Default
false
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
admin-state keyword
Synopsis
Administrative state of a video group
Context
configure isa video-group number admin-state keyword
Tree
Default
disable
Options
enable, disable
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
analyzer boolean
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element recreates the parent element automatically for the new value to take effect. |
Synopsis
Enable video analyzer for all streams on video group
Context
configure isa video-group number analyzer boolean
Tree
Default
false
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
description string
Synopsis
Text description
Context
configure isa video-group number description string
Tree
String Length
1 to 80
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
fcc-server boolean
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element recreates the parent element automatically for the new value to take effect. |
Synopsis
Allow FCC server capability for the group
Context
configure isa video-group number fcc-server boolean
Tree
Default
false
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
local-rt-server boolean
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element recreates the parent element automatically for the new value to take effect. |
Synopsis
Enable the local RET server for the group
Context
configure isa video-group number local-rt-server boolean
Tree
Default
false
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
mda [mda-id] string
Synopsis
Add a list entry for mda
Context
configure isa video-group number mda string
Tree
Max. Elements
6
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
[mda-id] string
Synopsis
MDA identifier
Context
configure isa video-group number mda string
Notes
This element is part of a list key.
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
resv-ret number
Synopsis
Egress bandwidth reserved for retransmission for all ISAs within a video group
Context
configure isa video-group number resv-ret number
Tree
Range
0 to 10500
Units
megabps
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
rt-client boolean
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element recreates the parent element automatically for the new value to take effect. |
Synopsis
Allow client capability for retransmission
Context
configure isa video-group number rt-client boolean
Tree
Default
true
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
stream-selection boolean
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element recreates the parent element automatically for the new value to take effect. |
Synopsis
Allow stream selection for the group
Context
configure isa video-group number stream-selection boolean
Tree
Default
false
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
vapp [esa-id] reference vapp-id reference
Synopsis
Add a list entry for vapp
Context
configure isa video-group number vapp reference vapp-id reference
Tree
Description
This command adds a list entry for the ESA and VM ID to the list of video group member ESA virtual applications.
Max. Elements
6
Introduced
21.5.R1
Platforms
7750 SR-7/12/12e
[esa-id] reference
Synopsis
ESA ID
Context
configure isa video-group number vapp reference vapp-id reference
Notes
This element is part of a list key.
Introduced
21.5.R1
Platforms
7750 SR-7/12/12e
vapp-id reference
Synopsis
Virtual application ID
Context
configure isa video-group number vapp reference vapp-id reference
Notes
This element is part of a list key.
Introduced
21.5.R1
Platforms
7750 SR-7/12/12e
watermark
Synopsis
Enter the watermark context
Context
configure isa video-group number watermark
Tree
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
bandwidth
Synopsis
Enter the bandwidth context
Context
configure isa video-group number watermark bandwidth
Tree
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
fcc number
Synopsis
FCC watermark parameters based on the bandwidth
Tree
Range
1 to 99
Default
90
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
ret number
Synopsis
RET watermark parameters based on the bandwidth
Tree
Range
1 to 99
Default
90
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
total number
Synopsis
Total watermark parameters based on the bandwidth
Tree
Range
1 to 99
Default
90
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
session
Synopsis
Enter the session context
Context
configure isa video-group number watermark session
Tree
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
fcc number
Synopsis
FCC watermark parameters based on the session
Tree
Range
1 to 99
Default
90
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
ret number
Synopsis
RET watermark parameters based on the session
Tree
Range
1 to 99
Default
90
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
total number
Synopsis
Total watermark parameters based on the session
Tree
Range
1 to 99
Default
90
Introduced
16.0.R1
Platforms
7450 ESS, 7750 SR-7/12/12e
wlan-gw-group [id] number
Synopsis
Enter the wlan-gw-group list instance
Context
configure isa wlan-gw-group number
Tree
Max. Elements
1
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
[id] number
Synopsis
Unique value which to identify the WLAN-GW group within a chassis in system
Context
configure isa wlan-gw-group number
Range
1 to 4
Notes
This element is part of a list key.
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
active-iom-limit number
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element clears ISA state, such as flow state, for the new value to take effect. |
Synopsis
Number of WLAN-GW IOMs used as active IOMs
Context
configure isa wlan-gw-group number active-iom-limit number
Tree
Range
1 to 7
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
active-mda-limit number
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element clears ISA state, such as flow state, for the new value to take effect. |
Synopsis
ISAs that can be active to use by the WLAN-GW group at the same time
Context
configure isa wlan-gw-group number active-mda-limit number
Tree
Range
1 to 14
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s
admin-state keyword
Synopsis
Administrative state of a WLAN gateway group
Context
configure isa wlan-gw-group number admin-state keyword
Tree
Default
disable
Options
enable, disable
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
description string
Synopsis
Text description
Context
configure isa wlan-gw-group number description string
Tree
String Length
1 to 80
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
esa [esa-id] reference vm reference
Synopsis
Add a list entry for esa
Context
configure isa wlan-gw-group number esa reference vm reference
Tree
Introduced
20.10.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s
[esa-id] reference
Synopsis
ESA ID
Context
configure isa wlan-gw-group number esa reference vm reference
Notes
This element is part of a list key.
Introduced
20.10.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s
vm reference
Synopsis
VM ID
Context
configure isa wlan-gw-group number esa reference vm reference
Notes
This element is part of a list key.
Introduced
20.10.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s
iom [slot-number] reference
Synopsis
Add a list entry for iom
Context
configure isa wlan-gw-group number iom reference
Tree
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
[slot-number] reference
Synopsis
IOM slot to use in the WLAN-GW group
Context
configure isa wlan-gw-group number iom reference
Notes
This element is part of a list key.
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
mda [mda-id] string
Synopsis
Add a list entry for mda
Context
configure isa wlan-gw-group number mda string
Tree
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s
[mda-id] string
Synopsis
MDA slot value
Context
configure isa wlan-gw-group number mda string
Notes
This element is part of a list key.
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s
nat
Synopsis
Enter the nat context
Context
configure isa wlan-gw-group number nat
Tree
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
log
Synopsis
Enter the log context
Context
configure isa wlan-gw-group number nat log
Tree
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
suppress-lsn-events boolean
Synopsis
Suppress the generation of Large Scale NAT (LSN) events when RADIUS accounting is enabled
Context
configure isa wlan-gw-group number nat log suppress-lsn-events boolean
Tree
Default
true
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
suppress-lsn-sub-blocks-free boolean
Synopsis
Suppress the LSN Free blocks and NAT pool block allocation notifications
Context
configure isa wlan-gw-group number nat log suppress-lsn-sub-blocks-free boolean
Default
false
Introduced
16.0.R4
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
lsn boolean
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
Synopsis
Use Large Scale NAT
Context
configure isa wlan-gw-group number nat lsn boolean
Tree
Default
true
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
radius-accounting-policy reference
Synopsis
RADIUS accounting policy for ISA group
Context
configure isa wlan-gw-group number nat radius-accounting-policy reference
Reference
configure aaa radius isa-policy string
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
session-limits
Synopsis
Enter the session-limits context
Context
configure isa wlan-gw-group number nat session-limits
Tree
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
reserved number
Synopsis
Number of sessions reserved for prioritized sessions
Context
configure isa wlan-gw-group number nat session-limits reserved number
Tree
Range
1 to 6291456
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
upnp-mappings number
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element clears ISA state, such as flow state, for the new value to take effect. |
Synopsis
Maximum number of Universal Plug and Play mappings per member
Context
configure isa wlan-gw-group number nat session-limits upnp-mappings number
Tree
Range
1 to 524288
Default
524288
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
watermarks
Synopsis
Enable the watermarks context
Context
Tree
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
high number
Synopsis
High watermark of the number of sessions for each MDA in this NAT ISA group
Context
configure isa wlan-gw-group number nat session-limits watermarks high number
Tree
Range
0 to 100
Notes
This element is mandatory.
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
low number
Synopsis
Low watermark of the number of sessions for each MDA in this NAT ISA group
Context
configure isa wlan-gw-group number nat session-limits watermarks low number
Tree
Range
0 to 100
Notes
This element is mandatory.
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
port-policy reference
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
Synopsis
Base port configuration for WLAN-GW group ports that take part in per-UE QoS processing
Context
configure isa wlan-gw-group number port-policy reference
Tree
Reference
configure port-policy string
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
redundancy keyword
| Warning: Modifying this element clears ISA state, such as flow state, for the new value to take effect. |
| Warning: Modifying this element recreates the parent element automatically for the new value to take effect. |
Synopsis
Hardware unit subject to redundancy
Context
configure isa wlan-gw-group number redundancy keyword
Tree
Default
iom
Options
iom, mda
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
scaling-profile keyword
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
| Warning: Modifying this element clears ISA state, such as flow state, for the new value to take effect. |
Synopsis
The ISA scaling profile identifier.
Context
configure isa wlan-gw-group number scaling-profile keyword
Tree
Default
profile1
Options
profile1, profile2
Introduced
20.5.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s
tunnel-port-policy reference
| Warning: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. |
Synopsis
Base port configuration for WLAN-GW group ports that take part in per-tunnel QoS processing
Context
configure isa wlan-gw-group number tunnel-port-policy reference
Tree
Reference
configure port-policy string
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
watermarks
Synopsis
Enter the watermarks context
Context
configure isa wlan-gw-group number watermarks
Tree
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
mark [entity] keyword
Synopsis
Enter the mark list instance
Context
configure isa wlan-gw-group number watermarks mark keyword
Tree
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
[entity] keyword
Synopsis
Entity to be monitored
Context
configure isa wlan-gw-group number watermarks mark keyword
Options
user-equipment, bridge-domain, radius-proxy-client
Notes
This element is part of a list key.
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
high number
Synopsis
High watermark for the WLAN-GW group
Context
configure isa wlan-gw-group number watermarks mark keyword high number
Tree
Range
1 to 100
Notes
This element is mandatory.
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
low number
Synopsis
Low watermark for the WLAN-GW group
Context
configure isa wlan-gw-group number watermarks mark keyword low number
Tree
Range
0 to 99
Notes
This element is mandatory.
Introduced
16.0.R1
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR