50. system Commands

— apply-groups reference

— apply-groups-exclude reference

— gnmi

— admin-state keyword

— auto-config-save boolean

— gnoi

— cert-mgmt

— admin-state keyword

— file

— admin-state keyword

— system

— admin-state keyword

— max-msg-size number

— md-cli

— admin-state keyword

— rib-api

— admin-state keyword

— purge-timeout number

— tcp-keepalive

— admin-state keyword

— idle-time number

— interval number

— retries number

— tls-server-profile reference

— icmp-vse boolean

— ip

— allow-qinq-network-interface boolean

— apply-groups reference

— apply-groups-exclude reference

— enforce-unique-if-index boolean

— forward-6in4 boolean

— forward-ip-over-gre boolean

— ipv6-eh keyword

— mpls

— label-stack-statistics-count number

— l2tp

— apply-groups reference

— apply-groups-exclude reference

— non-multi-chassis-tunnel-id-range

— end number

— start number

— lacp

— apply-groups reference

— apply-groups-exclude reference

— system-priority number

— lldp

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— message-fast-tx number

— message-fast-tx-init number

— notification-interval number

— reinit-delay number

— tx-credit-max number

— tx-hold-multiplier number

— tx-interval number

— load-balancing

— apply-groups reference

— apply-groups-exclude reference

— l2tp-load-balancing boolean

— l4-load-balancing boolean

— lsr-load-balancing keyword

— mc-enh-load-balancing boolean

— service-id-lag-hashing boolean

— system-ip-load-balancing boolean

— location string

— login-control

— apply-groups reference

— apply-groups-exclude reference

— exponential-backoff boolean

— ftp

— inbound-max-sessions number

— idle-timeout (keyword | number)

— login-banner boolean

— login-scripts

— global-script string

— per-user-script

— file-name string

— user-directory string

— motd

— text string

— url string

— pre-login-message

— message string

— name boolean

— ssh

— graceful-shutdown boolean

— inbound-max-sessions number

— outbound-max-sessions number

— ttl-security number

— telnet

— graceful-shutdown boolean

— inbound-max-sessions number

— outbound-max-sessions number

— ttl-security number

— management-interface

— apply-groups reference

— apply-groups-exclude reference

— cli

— apply-groups reference

— apply-groups-exclude reference

— classic-cli

— allow-immediate boolean

— rollback

— apply-groups reference

— apply-groups-exclude reference

— local-checkpoints number

— location string

— remote-checkpoints number

— rescue

— location string

— cli-engine keyword

— md-cli

— apply-groups reference

— apply-groups-exclude reference

— auto-config-save boolean

— environment

— command-completion

— enter boolean

— space boolean

— tab boolean

— console

— length number

— width number

— message-severity-level

— cli keyword

— more boolean

— progress-indicator

— admin-state keyword

— delay number

— type keyword

— prompt

— context boolean

— newline boolean

— timestamp boolean

— uncommitted-changes-indicator boolean

— time-display keyword

— time-format keyword

— configuration-mode keyword

— configuration-save

— apply-groups reference

— apply-groups-exclude reference

— configuration-backups number

— netconf

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— auto-config-save boolean

— capabilities

— candidate boolean

— writable-running boolean

— port number

— operations

— apply-groups reference

— apply-groups-exclude reference

— global-timeouts

— asynchronous-execution (number | keyword)

— asynchronous-retention (number | keyword)

— synchronous-execution (number | keyword)

— remote-management

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— client-tls-profile reference

— connection-timeout number

— device-label string

— device-name string

— hello-interval number

— manager string

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— client-tls-profile reference

— connection-timeout number

— description string

— device-label string

— device-name string

— manager-address (ipv4-address-no-zone | ipv6-address-no-zone | fully-qualified-domain-name)

— manager-port number

— router-instance string

— source-address (ipv4-address-no-zone | ipv6-address-no-zone)

— source-port (number | keyword)

— router-instance string

— source-address (ipv4-address-no-zone | ipv6-address-no-zone)

— source-port (number | keyword)

— schema-path string

— snmp

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— engine-id string

— general-port number

— packet-size number

— streaming

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— yang-modules

— apply-groups reference

— apply-groups-exclude reference

— base-r13-modules boolean

— nokia-combined-modules boolean

— nokia-submodules boolean

— openconfig-modules boolean

— name string

— network-element-discovery

— apply-groups reference

— apply-groups-exclude reference

— generate-traps boolean

— profile string

— apply-groups reference

— apply-groups-exclude reference

— neid string

— neip

— apply-groups reference

— apply-groups-exclude reference

— auto-generate

— ipv4

— vendor-id-value number

— ipv6

— vendor-id-value number

— ipv4 string

— ipv6 string

— platform-type string

— system-mac string

— vendor-id string

— ospf-dynamic-hostnames boolean

— persistence

— ancp

— apply-groups reference

— apply-groups-exclude reference

— description string

— location keyword

— application-assurance

— apply-groups reference

— apply-groups-exclude reference

— description string

— location keyword

— apply-groups reference

— apply-groups-exclude reference

— dhcp-server

— apply-groups reference

— apply-groups-exclude reference

— description string

— location keyword

— nat-port-forwarding

— apply-groups reference

— apply-groups-exclude reference

— description string

— location keyword

— options

— apply-groups reference

— apply-groups-exclude reference

— dhcp-leasetime-threshold number

— python-policy-cache

— apply-groups reference

— apply-groups-exclude reference

— description string

— location keyword

— subscriber-mgmt

— apply-groups reference

— apply-groups-exclude reference

— description string

— location keyword

— power-management power-zone number

— apply-groups reference

— apply-groups-exclude reference

— mode keyword

— power-safety-alert number

— power-safety-level number

— script-control

— apply-groups reference

— apply-groups-exclude reference

— script string owner string

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— description string

— location string

— script-policy string owner string

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— expire-time (number | keyword)

— lifetime (number | keyword)

— lock-override boolean

— max-completed number

— results string

— script

— name string

— owner string

— security

— aaa

— apply-groups reference

— apply-groups-exclude reference

— cli-session-group string

— apply-groups reference

— apply-groups-exclude reference

— combined-max-sessions number

— description string

— ssh-max-sessions number

— telnet-max-sessions number

— health-check (number | keyword)

— local-profiles

— apply-groups reference

— apply-groups-exclude reference

— profile string

— apply-groups reference

— apply-groups-exclude reference

— cli-session-group reference

— combined-max-sessions number

— default-action keyword

— entry number

— action keyword

— apply-groups reference

— apply-groups-exclude reference

— description string

— match string

— grpc

— rpc-authorization

— gnmi-capabilities keyword

— gnmi-get keyword

— gnmi-set keyword

— gnmi-subscribe keyword

— gnoi-cert-mgmt-cangenerate keyword

— gnoi-cert-mgmt-getcert keyword

— gnoi-cert-mgmt-install keyword

— gnoi-cert-mgmt-revoke keyword

— gnoi-cert-mgmt-rotate keyword

— gnoi-file-get keyword

— gnoi-file-put keyword

— gnoi-file-remove keyword

— gnoi-file-stat keyword

— gnoi-system-cancelreboot keyword

— gnoi-system-reboot keyword

— gnoi-system-rebootstatus keyword

— gnoi-system-setpackage keyword

— gnoi-system-switchcontrolprocessor keyword

— md-cli-session keyword

— rib-api-getversion keyword

— rib-api-modify keyword

— li boolean

— netconf

— base-op-authorization

— kill-session boolean

— lock boolean

— ssh-max-sessions number

— telnet-max-sessions number

— management-interface

— apply-groups reference

— apply-groups-exclude reference

— md-cli

— command-accounting-during-load boolean

— output-authorization

— md-interfaces boolean

— telemetry-data boolean

— remote-servers

— apply-groups reference

— apply-groups-exclude reference

— ldap

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— public-key-authentication boolean

— route-preference keyword

— server number

— address (ipv4-address-no-zone | ipv6-address-no-zone)

— apply-groups reference

— apply-groups-exclude reference

— port number

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— bind-authentication

— password string

— root-dn string

— search

— base-dn string

— server-name string

— tls-profile reference

— server-retry number

— server-timeout number

— use-default-template boolean

— radius

— access-algorithm keyword

— accounting boolean

— accounting-port number

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— authorization boolean

— interactive-authentication boolean

— port number

— route-preference keyword

— server number

— address (ipv4-address-no-zone | ipv6-address-no-zone)

— apply-groups reference

— apply-groups-exclude reference

— secret string

— server-retry number

— server-timeout number

— use-default-template boolean

— tacplus

— accounting

— record-type keyword

— admin-control

— tacplus-map-to-priv-lvl number

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— authorization

— use-priv-lvl boolean

— interactive-authentication boolean

— priv-lvl-map

— apply-groups reference

— apply-groups-exclude reference

— priv-lvl number

— apply-groups reference

— apply-groups-exclude reference

— user-profile-name reference

— route-preference keyword

— server number

— address (ipv4-address-no-zone | ipv6-address-no-zone)

— apply-groups reference

— apply-groups-exclude reference

— port number

— secret string

— server-timeout number

— use-default-template boolean

— user-template keyword

— access

— console boolean

— ftp boolean

— grpc boolean

— li boolean

— netconf boolean

— apply-groups reference

— apply-groups-exclude reference

— console

— login-exec string

— home-directory (sat-url | cflash-without-slot-url)

— profile string

— restricted-to-home boolean

— apply-groups reference

— apply-groups-exclude reference

— cli-script

— apply-groups reference

— apply-groups-exclude reference

— authorization

— cron

— cli-user reference

— event-handler

— cli-user reference

— vsd

— cli-user reference

— cpm-filter

— apply-groups reference

— apply-groups-exclude reference

— default-action keyword

— ip-filter

— admin-state keyword

— entry number

— action

— accept

— default

— drop

— queue reference

— apply-groups reference

— apply-groups-exclude reference

— description string

— log reference

— match

— dscp keyword

— dst-ip

— address (ipv4-address | ipv4-prefix-with-host-bits)

— ip-prefix-list reference

— mask string

— dst-port

— eq number

— mask number

— port-list reference

— range

— end number

— start number

— fragment keyword

— icmp

— code number

— type number

— ip-option

— mask number

— type number

— multiple-option boolean

— option-present boolean

— port

— eq number

— mask number

— port-list reference

— range

— end number

— start number

— protocol (number | keyword)

— router-instance string

— src-ip

— address (ipv4-address | ipv4-prefix-with-host-bits)

— ip-prefix-list reference

— mask string

— src-port

— eq number

— mask number

— port-list reference

— range

— end number

— start number

— tcp-flags

— ack boolean

— syn boolean

— ipv6-filter

— admin-state keyword

— entry number

— action

— accept

— default

— drop

— queue reference

— apply-groups reference

— apply-groups-exclude reference

— description string

— log reference

— match

— dscp keyword

— dst-ip

— address (ipv6-address | ipv6-prefix-with-host-bits)

— ipv6-prefix-list reference

— mask string

— dst-port

— eq number

— mask number

— port-list reference

— range

— end number

— start number

— extension-header

— hop-by-hop boolean

— flow-label number

— fragment keyword

— icmp

— code number

— type number

— next-header (number | keyword)

— port

— eq number

— mask number

— port-list reference

— range

— end number

— start number

— router-instance string

— src-ip

— address (ipv6-address | ipv6-prefix-with-host-bits)

— ipv6-prefix-list reference

— mask string

— src-port

— eq number

— mask number

— port-list reference

— range

— end number

— start number

— tcp-flags

— ack boolean

— syn boolean

— mac-filter

— admin-state keyword

— entry number

— action

— accept

— default

— drop

— queue reference

— apply-groups reference

— apply-groups-exclude reference

— description string

— log reference

— match

— cfm-opcode

— eq number

— gt number

— lt number

— range

— end number

— start number

— dst-mac

— address string

— mask string

— etype string

— frame-type keyword

— llc-dsap

— dsap number

— mask number

— llc-ssap

— mask number

— ssap number

— service reference

— src-mac

— address string

— mask string

— cpm-queue

— apply-groups reference

— apply-groups-exclude reference

— queue number

— apply-groups reference

— apply-groups-exclude reference

— cbs number

— mbs number

— rate

— cir (number | keyword)

— pir (number | keyword)

— cpu-protection

— apply-groups reference

— apply-groups-exclude reference

— ip-src-monitoring

— included-protocols

— dhcp boolean

— gtp boolean

— icmp boolean

— igmp boolean

— link-specific-rate (number | keyword)

— policy number

— alarm boolean

— apply-groups reference

— apply-groups-exclude reference

— description string

— eth-cfm

— entry number

— apply-groups reference

— apply-groups-exclude reference

— level start number end number

— opcode start number end number

— pir (number | keyword)

— out-profile-rate

— log-events boolean

— pir (number | keyword)

— overall-rate (number | keyword)

— per-source-parameters

— ip-src-monitoring

— limit-dhcp-ci-addr-zero boolean

— per-source-rate (number | keyword)

— port-overall-rate

— action-low-priority boolean

— pir (number | keyword)

— protocol-protection

— allow-sham-links boolean

— block-pim-tunneled boolean

— dist-cpu-protection

— apply-groups reference

— apply-groups-exclude reference

— policy string

— apply-groups reference

— apply-groups-exclude reference

— description string

— local-monitoring-policer string

— apply-groups reference

— apply-groups-exclude reference

— description string

— exceed-action keyword

— log-events keyword

— rate

— kbps

— limit (keyword | number)

— mbs number

— packets

— initial-delay number

— limit (keyword | number)

— within number

— protocol keyword

— apply-groups reference

— apply-groups-exclude reference

— dynamic-parameters

— detection-time number

— exceed-action

— action keyword

— hold-down (keyword | number)

— log-events keyword

— rate

— kbps

— limit (keyword | number)

— mbs number

— packets

— initial-delay number

— limit (keyword | number)

— within number

— enforcement

— dynamic

— mon-policer-name reference

— dynamic-local-mon-bypass

— static

— policer-name reference

— static-policer string

— apply-groups reference

— apply-groups-exclude reference

— description string

— detection-time number

— exceed-action

— action keyword

— hold-down (keyword | number)

— log-events keyword

— rate

— kbps

— limit (keyword | number)

— mbs number

— packets

— initial-delay number

— limit (keyword | number)

— within number

— type keyword

— dot1x

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— radius-policy string

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— retry number

— server number

— accounting-port number

— address string

— apply-groups reference

— apply-groups-exclude reference

— authentication-port number

— secret string

— type keyword

— source-address string

— timeout number

— ftp-server boolean

— hash-control

— apply-groups reference

— apply-groups-exclude reference

— management-interface

— classic-cli

— read-algorithm keyword

— write-algorithm keyword

— grpc

— hash-algorithm keyword

— md-cli

— hash-algorithm keyword

— netconf

— hash-algorithm keyword

— keychains

— keychain string

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— bidirectional

— entry number

— admin-state keyword

— algorithm keyword

— apply-groups reference

— apply-groups-exclude reference

— authentication-key string

— begin-time string

— option keyword

— tolerance (number | keyword)

— description string

— receive

— entry number

— admin-state keyword

— algorithm keyword

— apply-groups reference

— apply-groups-exclude reference

— authentication-key string

— begin-time string

— end-time string

— tolerance (number | keyword)

— send

— entry number

— admin-state keyword

— algorithm keyword

— apply-groups reference

— apply-groups-exclude reference

— authentication-key string

— begin-time string

— tcp-option-number

— receive keyword

— send keyword

— management

— allow-ftp boolean

— allow-grpc boolean

— allow-netconf boolean

— allow-ssh boolean

— allow-telnet boolean

— allow-telnet6 boolean

— apply-groups reference

— apply-groups-exclude reference

— management-access-filter

— apply-groups reference

— apply-groups-exclude reference

— ip-filter

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— default-action keyword

— entry number

— action keyword

— apply-groups reference

— apply-groups-exclude reference

— description string

— log-events boolean

— match

— dst-port

— mask number

— port number

— mgmt-port

— cpm

— lag string

— port-id string

— protocol (number | keyword)

— router-instance string

— src-ip

— address (ipv4-prefix | ipv4-address)

— ip-prefix-list reference

— mask string

— ipv6-filter

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— default-action keyword

— entry number

— action keyword

— apply-groups reference

— apply-groups-exclude reference

— description string

— log-events boolean

— match

— dst-port

— mask number

— port number

— flow-label number

— mgmt-port

— cpm

— lag string

— port-id string

— next-header (number | keyword)

— router-instance string

— src-ip

— address (ipv6-prefix | ipv6-address)

— ipv6-prefix-list reference

— mask string

— mac-filter

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— default-action keyword

— entry number

— action keyword

— apply-groups reference

— apply-groups-exclude reference

— description string

— log-events boolean

— match

— cfm-opcode

— eq number

— gt number

— lt number

— range

— end number

— start number

— dot1p

— mask number

— priority number

— dst-mac

— address string

— mask string

— etype string

— frame-type keyword

— llc-dsap

— dsap number

— mask number

— llc-ssap

— mask number

— ssap number

— service string

— snap-oui keyword

— snap-pid number

— src-mac

— address string

— mask string

— per-peer-queuing boolean

— pki

— apply-groups reference

— apply-groups-exclude reference

— ca-profile string

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— auto-crl-update

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— crl-urls

— url-entry number

— apply-groups reference

— apply-groups-exclude reference

— transmission-profile reference

— url http-url-path-loose

— periodic-update-interval number

— pre-update-time number

— retry-interval number

— schedule-type keyword

— cert-file string

— cmpv2

— accept-unprotected-message

— error-message boolean

— pkiconf-message boolean

— always-set-sender-for-ir boolean

— http

— response-timeout number

— version keyword

— key-list

— key string

— apply-groups reference

— apply-groups-exclude reference

— password string

— response-signing-cert string

— same-recipient-nonce-for-poll-request boolean

— url

— service-name string

— url-string http-optional-url-loose

— crl-file string

— description string

— ocsp

— responder-url http-optional-url-loose

— service-name string

— transmission-profile reference

— revocation-check keyword

— certificate-display-format keyword

— certificate-expiration-warning

— hours number

— repeat-hours number

— common-name-list string

— apply-groups reference

— apply-groups-exclude reference

— common-name number

— apply-groups reference

— apply-groups-exclude reference

— cn-type keyword

— cn-value string

— crl-expiration-warning

— hours number

— repeat-hours number

— imported-format keyword

— maximum-cert-chain-depth number

— snmp

— access string context string security-model keyword security-level keyword

— apply-groups reference

— apply-groups-exclude reference

— notify string

— prefix-match keyword

— read string

— write string

— apply-groups reference

— apply-groups-exclude reference

— attempts

— apply-groups reference

— apply-groups-exclude reference

— count number

— lockout number

— time number

— community string

— access-permissions keyword

— apply-groups reference

— apply-groups-exclude reference

— source-access-list reference

— version keyword

— source-access-list string

— apply-groups reference

— apply-groups-exclude reference

— source-host string

— address (ipv4-address-no-zone | ipv6-address-no-zone)

— apply-groups reference

— apply-groups-exclude reference

— usm-community string

— apply-groups reference

— apply-groups-exclude reference

— group string

— source-access-list reference

— view string subtree string

— apply-groups reference

— apply-groups-exclude reference

— mask string

— type keyword

— source-address

— ipv4 keyword

— address string

— apply-groups reference

— apply-groups-exclude reference

— interface-name string

— ipv6 keyword

— address string

— apply-groups reference

— apply-groups-exclude reference

— ssh

— apply-groups reference

— apply-groups-exclude reference

— client-cipher-list-v1

— apply-groups reference

— apply-groups-exclude reference

— cipher number

— apply-groups reference

— apply-groups-exclude reference

— name keyword

— client-cipher-list-v2

— apply-groups reference

— apply-groups-exclude reference

— cipher number

— apply-groups reference

— apply-groups-exclude reference

— name keyword

— client-kex-list-v2

— kex number

— apply-groups reference

— apply-groups-exclude reference

— name keyword

— client-mac-list-v2

— mac number

— apply-groups reference

— apply-groups-exclude reference

— name keyword

— key-re-exchange

— client

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— mbytes (number | keyword)

— minutes (number | keyword)

— server

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— mbytes (number | keyword)

— minutes (number | keyword)

— preserve-key boolean

— server-admin-state keyword

— server-cipher-list-v1

— apply-groups reference

— apply-groups-exclude reference

— cipher number

— apply-groups reference

— apply-groups-exclude reference

— name keyword

— server-cipher-list-v2

— apply-groups reference

— apply-groups-exclude reference

— cipher number

— apply-groups reference

— apply-groups-exclude reference

— name keyword

— server-kex-list-v2

— kex number

— apply-groups reference

— apply-groups-exclude reference

— name keyword

— server-mac-list-v2

— mac number

— apply-groups reference

— apply-groups-exclude reference

— name keyword

— version keyword

— system-passwords

— admin-password string

— apply-groups reference

— apply-groups-exclude reference

— vsd-password string

— tech-support

— apply-groups reference

— apply-groups-exclude reference

— ts-location (ts-sat-url | cflash-url | string)

— telnet-server boolean

— telnet6-server boolean

— tls

— apply-groups reference

— apply-groups-exclude reference

— cert-profile string

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— entry number

— apply-groups reference

— apply-groups-exclude reference

— certificate-file string

— key-file string

— send-chain

— ca-profile reference

— client-cipher-list string

— apply-groups reference

— apply-groups-exclude reference

— cipher number

— apply-groups reference

— apply-groups-exclude reference

— name keyword

— client-tls-profile string

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— cert-profile reference

— cipher-list reference

— trust-anchor-profile reference

— server-cipher-list string

— apply-groups reference

— apply-groups-exclude reference

— cipher number

— apply-groups reference

— apply-groups-exclude reference

— name keyword

— server-tls-profile string

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— authenticate-client

— common-name-list reference

— trust-anchor-profile reference

— cert-profile reference

— cipher-list reference

— tls-re-negotiate-timer number

— trust-anchor-profile string

— apply-groups reference

— apply-groups-exclude reference

— trust-anchor reference

— user-params

— apply-groups reference

— apply-groups-exclude reference

— attempts

— count number

— lockout number

— time number

— authentication-order

— exit-on-reject boolean

— order keyword

— local-user

— password

— aging number

— apply-groups reference

— apply-groups-exclude reference

— complexity-rules

— allow-user-name boolean

— credits

— lowercase number

— numeric number

— special-character number

— uppercase number

— minimum-classes number

— minimum-length number

— repeated-characters number

— required

— lowercase number

— numeric number

— special-character number

— uppercase number

— hashing keyword

— history-size number

— minimum-age number

— minimum-change number

— user string

— access

— console boolean

— ftp boolean

— grpc boolean

— li boolean

— netconf boolean

— snmp boolean

— apply-groups reference

— apply-groups-exclude reference

— cli-engine keyword

— console

— cannot-change-password boolean

— login-exec (sat-url | cflash-url | ftp-tftp-url | filename)

— member reference

— new-password-at-login boolean

— home-directory (sat-url | cflash-without-slot-url)

— password string

— public-keys

— ecdsa

— ecdsa-key number

— apply-groups reference

— apply-groups-exclude reference

— description string

— key-value string

— rsa

— rsa-key number

— apply-groups reference

— apply-groups-exclude reference

— description string

— key-value string

— restricted-to-home boolean

— snmp

— apply-groups reference

— apply-groups-exclude reference

— authentication

— authentication-key string

— authentication-protocol keyword

— privacy

— privacy-key string

— privacy-protocol keyword

— group string

— vprn-network-exceptions

— count number

— window number

— selective-fib boolean

— software-repository string

— apply-groups reference

— apply-groups-exclude reference

— description string

— primary-location string

— secondary-location string

— tertiary-location string

— switch-fabric

— apply-groups reference

— apply-groups-exclude reference

— failure-recovery

— admin-state keyword

— sfm-loss-threshold number

— telemetry

— apply-groups reference

— apply-groups-exclude reference

— destination-group string

— apply-groups reference

— apply-groups-exclude reference

— description string

— destination (ipv4-address-no-zone | ipv6-address-no-zone | fully-qualified-domain-name) port number

— apply-groups reference

— apply-groups-exclude reference

— router-instance string

— tcp-keepalive

— admin-state keyword

— idle-time number

— interval number

— retries number

— tls-client-profile reference

— persistent-subscriptions

— subscription string

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— description string

— destination-group reference

— encoding keyword

— local-source-address (ipv4-address-no-zone | ipv6-address-no-zone)

— mode keyword

— originated-qos-marking keyword

— sample-interval number

— sensor-group reference

— sensor-groups

— sensor-group string

— apply-groups reference

— apply-groups-exclude reference

— description string

— path string

— thresholds

— cflash-cap-alarm-percent string

— apply-groups reference

— apply-groups-exclude reference

— falling-threshold number

— interval number

— rising-threshold number

— rmon-event-type keyword

— startup-alarm keyword

— cflash-cap-warn-percent string

— apply-groups reference

— apply-groups-exclude reference

— falling-threshold number

— interval number

— rising-threshold number

— rmon-event-type keyword

— startup-alarm keyword

— kb-memory-use-alarm

— apply-groups reference

— apply-groups-exclude reference

— falling-threshold number

— interval number

— rising-threshold number

— rmon-event-type keyword

— startup-alarm keyword

— kb-memory-use-warn

— apply-groups reference

— apply-groups-exclude reference

— falling-threshold number

— interval number

— rising-threshold number

— rmon-event-type keyword

— startup-alarm keyword

— rmon

— alarm number

— apply-groups reference

— apply-groups-exclude reference

— falling-event number

— falling-threshold number

— interval number

— owner string

— rising-event number

— rising-threshold number

— sample-type keyword

— startup-alarm keyword

— variable-oid string

— event number

— apply-groups reference

— apply-groups-exclude reference

— description string

— event-type keyword

— owner string

— time

— apply-groups reference

— apply-groups-exclude reference

— dst-zone string

— apply-groups reference

— apply-groups-exclude reference

— end

— day keyword

— hours-minutes string

— month keyword

— week keyword

— offset number

— start

— day keyword

— hours-minutes string

— month keyword

— week keyword

— ntp

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— authentication-check boolean

— authentication-key number

— apply-groups reference

— apply-groups-exclude reference

— key string

— type keyword

— broadcast reference interface-name string

— apply-groups reference

— apply-groups-exclude reference

— key-id reference

— ttl number

— version number

— broadcast-client string interface-name string

— apply-groups reference

— apply-groups-exclude reference

— authenticate boolean

— multicast

— apply-groups reference

— apply-groups-exclude reference

— key-id reference

— version number

— multicast-client

— apply-groups reference

— apply-groups-exclude reference

— authenticate boolean

— ntp-server

— authenticate boolean

— peer (ipv4-address-no-zone | ipv6-address-no-zone) router-instance string

— apply-groups reference

— apply-groups-exclude reference

— key-id reference

— prefer boolean

— version number

— server (ipv4-address-no-zone | ipv6-address-no-zone | keyword) router-instance string

— apply-groups reference

— apply-groups-exclude reference

— key-id reference

— prefer boolean

— version number

— prefer-local-time boolean

— sntp

— admin-state keyword

— apply-groups reference

— apply-groups-exclude reference

— server (ipv4-address-no-zone | ipv6-address-no-zone)

— apply-groups reference

— apply-groups-exclude reference

— interval number

— prefer boolean

— version number

— sntp-state keyword

— zone

— non-standard

— name string

— offset string

— standard

— name keyword

— transmission-profile string

— apply-groups reference

— apply-groups-exclude reference

— ipv4-source-address string

— ipv6-source-address string

— redirection number

— retry number

— router-instance string

— timeout number

16.0.R1

Platforms

7750 SR-a

description string

Synopsis

Text description

Context

configure system alarm-contact-input number description string

Tree

String Length

1 to 160

Introduced

16.0.R1

Platforms

7750 SR-a

normal-state keyword

Synopsis

Normal state associated with the alarm contact input

Context

configure system alarm-contact-input number normal-state keyword

Tree

normal-state

Default

open

Options

open, closed

Introduced

16.0.R1

Platforms

7750 SR-a

trigger-message string

Synopsis

Text message sent in the log event when input changes

Context

Introduced

16.0.R4

Platforms

All

max-cleared number

Synopsis

Maximum number of cleared alarms

Context

configure system alarms max-cleared number

Tree

max-cleared

Range

0 to 500

Default

500

Introduced

16.0.R4

Platforms

All

allow-boot-license-violations boolean

Synopsis

Introduced

20.2.R1

Platforms

7750 SR-1, 7750 SR-s

advertising-timeout number

Synopsis

Bluetooth advertising timeout

Context

configure system bluetooth advertising-timeout number

Tree

advertising-timeout

Range

30 to 3600

Units

seconds

Introduced

16.0.R1

Platforms

7750 SR-1, 7750 SR-s

device [mac-address] string

Synopsis

Enter the device list instance

Context

configure system bluetooth device string

Tree

device

Max. Elements

Introduced

16.0.R1

Platforms

7750 SR-1, 7750 SR-s

[mac-address] string

Synopsis

Bluetooth client device MAC address

Context

configure system bluetooth device string

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

7750 SR-1, 7750 SR-s

description string

Synopsis

Text description

Context

configure system bluetooth device string description string

Tree

configure system central-frequency-clock ptp

String Length

1 to 80

Introduced

16.0.R1

Platforms

7750 SR-1, 7750 SR-s

module [cpm-slot] string

Synopsis

Enter the module list instance

Context

configure system bluetooth module string

Tree

module

Introduced

16.0.R1

Platforms

7750 SR-1, 7750 SR-s

[cpm-slot] string

Synopsis

CPM slot on which the module resides

Context

configure system bluetooth module string

passkey

String Length

Default

123456

Introduced

16.0.R1

Platforms

7750 SR-1, 7750 SR-s

power-mode keyword

Synopsis

source keyword

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

ssm-bit number

Synopsis

Sa bit to convey SSM information

Context

configure system central-frequency-clock bits ssm-bit number

Tree

ssm-bit

Range

4 to 8

Default

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

ptp

Synopsis

Enter the ptp context

Context

Tree

ptp

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS-20, 7950 XRS-20e, 7950 XRS-40

admin-state keyword

Synopsis

Administrative state of the PTP timing reference

Context

configure system central-frequency-clock ptp admin-state keyword

Tree

configure system central-frequency-clock ref1

Default

disable

Options

enable, disable

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS-20, 7950 XRS-20e, 7950 XRS-40

ql-minimum keyword

Synopsis

Minimum signal quality level for system timing module

Synopsis

Enter the ref1 context

Context

Tree

ref1

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

admin-state keyword

Synopsis

Administrative state of the first timing reference

Context

configure system central-frequency-clock ref1 admin-state keyword

Tree

configure system central-frequency-clock synce

Default

disable

Options

enable, disable

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

ql-override keyword

Synopsis

Quality level override of a timing reference

Context

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

ql-override keyword

Synopsis

Quality level override of a timing reference

Context

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

synce

Synopsis

Enter the synce context

Context

Tree

synce

Introduced

19.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-s, 7950 XRS-20, 7950 XRS-20e, 7950 XRS-40

admin-state keyword

Synopsis

Administrative state of the SyncE timing reference

Context

configure system central-frequency-clock synce admin-state keyword

Tree

Default

disable

Options

enable, disable

Introduced

19.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-s, 7950 XRS-20, 7950 XRS-20e, 7950 XRS-40

ql-override keyword

Synopsis

Override the quality level of a timing reference

Context

configure system central-frequency-clock synce ql-override keyword

Tree

ql-override

Default

unused

Options

unused, prs, stu, st2, tnc, st3e, st3, prc, ssua, ssub, sec, eec1, eec2

Introduced

19.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-s, 7950 XRS-20, 7950 XRS-20e, 7950 XRS-40

wait-to-restore number

Synopsis

Time to re-validate a previously failed input reference

Context

configure system central-frequency-clock wait-to-restore number

Tree

wait-to-restore

Range

1 to 12

Units

minutes

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

clli-code string

Synopsis

CLLI code value for the system

Context

configure system clli-code string

Tree

clli-code

Platforms

All

Administrative state of the cron schedule

Context

configure system cron schedule string owner string admin-state keyword

Tree

16.0.R1

Platforms

All

description string

Synopsis

Platforms

All

day keyword

Synopsis

Day to stop triggering this schedule

Context

configure system cron schedule string owner string end-time day keyword

Tree

day

Options

sunday, monday, tuesday, wednesday, thursday, friday, saturday

Notes

The following are part of a choice: date-and-time or (day and time).

Introduced

16.0.R1

Platforms

All

time string

Synopsis

Time to stop triggering the schedule

Context

configure system cron schedule string owner string end-time time string

Tree

time

String Length

Notes

The following are part of a choice: date-and-time or (day and time).

Introduced

16.0.R1

Platforms

All

hour number

Synopsis

Hours within a day when the schedule runs

Context

configure system cron schedule string owner string hour number

Tree

hour

Range

0 to 23

Max. Elements

Introduced

16.0.R1

Platforms

All

interval number

Synopsis

Time between each periodic schedule run

Context

configure system cron schedule string owner string interval number

Tree

configure system eth-cfm md-auto-id

Range

30 to 42949672

Units

seconds

Introduced

16.0.R1

Platforms

All

minute number

Synopsis

Minutes in an hour when the schedule runs

Context

configure system cron schedule string owner string minute number

Tree

minute

Range

0 to 59

Max. Elements

Introduced

16.0.R1

Platforms

All

month (keyword | number)

Synopsis

Months when the schedule runs

Context

configure system cron schedule string owner string month (keyword | number)

Tree

month

Range

1 to 12

Options

january, february, march, april, may, june, july, august, september, october, november, december

Max. Elements

Introduced

16.0.R1

Platforms

All

Schedule type

Context

configure system cron schedule string owner string type keyword

Tree

type

Default

periodic

Options

periodic, calendar, oneshot

Introduced

16.0.R1

Platforms

All

weekday (keyword | number)

Synopsis

Weekdays when the schedule runs

Context

configure system cron schedule string owner string weekday (keyword | number)

Tree

weekday

Range

1 to 7

Options

sunday, monday, tuesday, wednesday, thursday, friday, saturday

Max. Elements

Introduced

16.0.R1

Platforms

All

dhcp6

Synopsis

Enter the dhcp6 context

Context

configure system dhcp6

Tree

dhcp6

Introduced

16.0.R4

Platforms

All

adv-noaddrs-global keyword

Synopsis

Applications to send NoAddrsAvail in Advertise messages

Context

configure system dhcp6 adv-noaddrs-global keyword

Tree

adv-noaddrs-global

Options

esm-relay, server

Max. Elements

Introduced

16.0.R4

Platforms

All

dns

Synopsis

Enter the dns context

Context

configure system dns

Tree

dns

Introduced

16.0.R1

Platforms

All

address-pref keyword

Synopsis

Platforms

All

efm-oam

Synopsis

Enter the efm-oam context

Context

configure system efm-oam

Tree

efm-oam

Introduced

16.0.R1

Platforms

All

dying-gasp-tx-on-reset boolean

Synopsis

Generate Information OAM PDU on soft reset notification

Context

configure system efm-oam dying-gasp-tx-on-reset boolean

Tree

dying-gasp-tx-on-reset

Default

false

Introduced

16.0.R1

Platforms

All

grace-tx boolean

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

md-auto-id

Synopsis

Enter the md-auto-id context

Context

Tree

md-auto-id

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

ma-index-range

Synopsis

Enable the ma-index-range context

Context

configure system eth-cfm md-auto-id ma-index-range

Tree

ma-index-range

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

end number

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

Upper bound of the range

Context

configure system eth-cfm md-auto-id ma-index-range end number

Tree

end

Range

1 to max

Notes

This element is mandatory.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

start number

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

Lower bound of the range

Context

configure system eth-cfm md-auto-id ma-index-range start number

This element is mandatory.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

start number

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

Lower bound of the range

Context

propagate-hold-time (number | keyword)

Synopsis

Delay timer value for the fault propagation

Context

configure system eth-cfm redundancy mc-lag propagate-hold-time (number | keyword)

Tree

propagate-hold-time

Range

1 to 60

Default

Units

seconds

Options

none

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

standby-mep boolean

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

type keyword

Synopsis

ETH-CFM sender ID to be used in CFM PDUs

Context

Units

seconds

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

grpc

Synopsis

Enter the grpc context

Context

configure system grpc

Tree

grpc

Introduced

16.0.R1

Platforms

All

admin-state keyword

Synopsis

Administrative state of gRPC server

Context

configure system grpc admin-state keyword

Tree

Default

disable

Options

enable, disable

Introduced

16.0.R1

Platforms

All

allow-unsecure-connection

Synopsis

Allow connection without secured transport protocol

Context

Introduced

16.0.R1

Platforms

All

auto-config-save boolean

Synopsis

Introduced

19.10.R1

Platforms

All

file

Synopsis

Enter the file context

Context

configure system grpc gnoi file

Tree

file

Introduced

21.2.R1

Platforms

All

admin-state keyword

Synopsis

Administrative state of gNOI File service.

Context

Introduced

20.5.R1

Platforms

All

max-msg-size number

Synopsis

Maximum size of received message

Context

configure system grpc max-msg-size number

Tree

max-msg-size

Range

1 to 1024

Default

512

Units

megabytes

Introduced

16.0.R1

Platforms

All

md-cli

Synopsis

Enter the md-cli context

Context

configure system grpc md-cli

Tree

md-cli

Introduced

20.5.R1

Platforms

All

admin-state keyword

Synopsis

Administrative state of the MD-CLI service

Context

configure system grpc md-cli admin-state keyword

Tree

Default

disable

Options

enable, disable

Introduced

20.5.R1

Platforms

All

rib-api

Synopsis

Enter the rib-api context

Context

configure system grpc rib-api

Tree

rib-api

Introduced

16.0.R4

Platforms

All

admin-state keyword

Synopsis

Administrative state of RibAPI service

Context

configure system grpc rib-api admin-state keyword

Tree

Default

disable

Options

enable, disable

Introduced

16.0.R4

Platforms

All

purge-timeout number

Synopsis

Number of seconds until stale entries are purged

Context

Introduced

16.0.R4

Platforms

All

idle-time number

Synopsis

Time until the first TCP keepalive probe is sent

Context

configure system grpc tcp-keepalive idle-time number

Tree

idle-time

Range

1 to 100000

Default

600

Units

seconds

Introduced

16.0.R4

Platforms

All

interval number

Synopsis

Interval between TCP keep-alive probes

Context

configure system grpc tcp-keepalive interval number

Tree

label-stack-statistics-count

Range

1 to 100000

Default

Units

seconds

Introduced

16.0.R4

Platforms

All

retries number

Synopsis

Missed keepalives before the TCP connection is closed

Context

configure system grpc tcp-keepalive retries number

Tree

retries

Range

3 to 100

Default

Introduced

16.0.R4

Platforms

All

tls-server-profile reference

Synopsis

Preferred TLS server profile

Notes

The following are part of a choice: allow-unsecure-connection or tls-server-profile.

Introduced

16.0.R1

Platforms

All

icmp-vse boolean

Synopsis

Enable vendor-specific extensions to ICMP

Context

configure system icmp-vse boolean

Tree

icmp-vse

Default

false

Introduced

16.0.R1

Platforms

All

ip

Synopsis

Enter the ip context

Context

configure system ip

max

Options

max, limited

Introduced

20.5.R1

Platforms

All

mpls

Synopsis

Enter the mpls context

Context

configure system ip mpls

Tree

mpls

Introduced

19.10.R3

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

label-stack-statistics-count number

Synopsis

Specifies the MPLS label stack statistics count.

Context

configure system ip mpls label-stack-statistics-count number

Tree

Range

1 to 2

end

Range

0 to 16383

Default

16383

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

start number

Synopsis

Lower bound of the range

Context

configure system l2tp non-multi-chassis-tunnel-id-range start number

Tree

configure system load-balancing

Range

0 to 16383

Default

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

lacp

Synopsis

Enter the lacp context

Context

configure system lacp

Tree

lacp

Introduced

16.0.R1

Platforms

All

system-priority number

Synopsis

LACP system priority on aggregated Ethernet interfaces

Context

Introduced

16.0.R1

Platforms

All

message-fast-tx number

Synopsis

Interval at which LLDP frames are transmitted

Context

configure system lldp message-fast-tx number

Tree

message-fast-tx

Range

1 to 3600

Default

Units

seconds

Introduced

16.0.R1

Platforms

All

message-fast-tx-init number

Synopsis

PDUs to transmit during the fast transmission period

Context

configure system lldp message-fast-tx-init number

Tree

message-fast-tx-init

Range

1 to 8

Default

Introduced

16.0.R1

Platforms

All

notification-interval number

Synopsis

Minimum interval between change notifications

Context

configure system lldp notification-interval number

Tree

notification-interval

Range

5 to 3600

Default

Units

seconds

Introduced

16.0.R1

Platforms

All

reinit-delay number

Synopsis

Time required before re-initializing LLDP on a port

Context

configure system lldp reinit-delay number

Tree

reinit-delay

Range

1 to 10

Default

Units

Default

Units

seconds

Introduced

16.0.R1

Platforms

All

load-balancing

Synopsis

Enter the load-balancing context

Context

Tree

load-balancing

Introduced

16.0.R1

Platforms

All

l2tp-load-balancing boolean

Synopsis

Platforms

All

mc-enh-load-balancing boolean

Synopsis

Enable enhanced egress multicast load balancing

Context

configure system load-balancing mc-enh-load-balancing boolean

Tree

mc-enh-load-balancing

Default

false

Introduced

16.0.R1

Platforms

All

service-id-lag-hashing boolean

Synopsis

Platforms

All

login-control

Synopsis

Enter the login-control context

Context

configure system login-control

Tree

Introduced

16.0.R1

Platforms

All

exponential-backoff boolean

Synopsis

Enable exponential-backoff of the login prompt

Context

configure system login-control exponential-backoff boolean

Tree

exponential-backoff

Default

false

Introduced

16.0.R1

Platforms

All

ftp

Synopsis

Enter the ftp context

Context

configure system login-control ftp

Tree

ftp

Introduced

16.0.R1

Platforms

All

inbound-max-sessions number

Synopsis

Maximum number of concurrent inbound FTP sessions

Context

configure system login-control ftp inbound-max-sessions number

Tree

inbound-max-sessions

Range

0 to 5

Default

Introduced

16.0.R1

Platforms

All

idle-timeout (keyword | number)

Synopsis

Idle timeout for FTP, console, or Telnet sessions

Context

configure system login-control idle-timeout (keyword | number)

Tree

idle-timeout

Range

1 to 1440

Default

Units

minutes

Options

none

Introduced

16.0.R1

Platforms

All

login-banner boolean

Synopsis

Display login banner

Context

configure system login-control login-banner boolean

Tree

Default

false

Introduced

16.0.R1

Platforms

All

login-scripts

Synopsis

Enter the login-scripts context

Context

configure system login-control login-scripts

Tree

Introduced

16.0.R1

Platforms

All

global-script string

Synopsis

URL of the global CLI login script

Context

configure system login-control login-scripts global-script string

Tree

global-script

String Length

1 to 180

Introduced

16.0.R1

Platforms

All

per-user-script

Synopsis

Enter the per-user-script context

Context

configure system login-control login-scripts per-user-script

Tree

per-user-script

Introduced

16.0.R1

Platforms

All

Platforms

All

pre-login-message

Synopsis

Enter the pre-login-message context

Context

configure system login-control pre-login-message

Tree

pre-login-message

Introduced

16.0.R1

Platforms

All

message string

Synopsis

Message displayed prior to the login prompt

Context

configure system login-control pre-login-message message string

Tree

message

String Length

1 to 900

Introduced

16.0.R1

Platforms

All

name boolean

Synopsis

Platforms

All

inbound-max-sessions number

Synopsis

Maximum number of concurrent inbound sessions

Context

configure system login-control ssh inbound-max-sessions number

Tree

inbound-max-sessions

Range

0 to 50

Default

Introduced

16.0.R1

Platforms

All

outbound-max-sessions number

Synopsis

Maximum number of concurrent outbound sessions

Context

configure system login-control ssh outbound-max-sessions number

Tree

outbound-max-sessions

Range

0 to 15

Default

Introduced

16.0.R1

Platforms

All

ttl-security number

Synopsis

Platforms

All

inbound-max-sessions number

Synopsis

Maximum number of concurrent inbound sessions

Context

configure system login-control telnet inbound-max-sessions number

Tree

inbound-max-sessions

Range

0 to 50

Default

Introduced

16.0.R1

Platforms

All

outbound-max-sessions number

Synopsis

Maximum number of concurrent outbound sessions

Context

configure system login-control telnet outbound-max-sessions number

Tree

outbound-max-sessions

Range

0 to 15

Default

Introduced

16.0.R1

Platforms

All

ttl-security number

Synopsis

Platforms

All

rollback

Synopsis

Enter the rollback context

Context

configure system management-interface cli classic-cli rollback

Tree

rollback

Introduced

16.0.R1

Platforms

All

local-checkpoints number

Synopsis

Maximum number of rollback files on compact flash

Context

configure system management-interface cli classic-cli rollback local-checkpoints number

Tree

local-checkpoints

Range

1 to 50

Default

Introduced

16.0.R1

Platforms

All

location string

Synopsis

Location and filename of the rollback checkpoint files

Context

configure system management-interface cli classic-cli rollback location string

Tree

location

String Length

1 to 180

Introduced

16.0.R1

Platforms

All

remote-checkpoints number

Synopsis

Maximum rollback files saved at a remote location

Context

configure system management-interface cli classic-cli rollback remote-checkpoints number

Tree

remote-checkpoints

Range

1 to 200

Default

Introduced

16.0.R1

Platforms

All

rescue

Synopsis

Enter the rescue context

Context

configure system management-interface cli classic-cli rollback rescue

Tree

rescue

Introduced

16.0.R1

Platforms

All

location string

Synopsis

Location of the rollback rescue file

Context

configure system management-interface cli classic-cli rollback rescue location string

Tree

location

String Length

1 to 180

Introduced

16.0.R1

Platforms

All

cli-engine keyword

Synopsis

System-wide CLI engine access configuration

Context

Introduced

16.0.R1

Platforms

All

auto-config-save boolean

Synopsis

length number

Synopsis

Number of lines displayed on the screen

Context

configure system management-interface cli md-cli environment console length number

Tree

length

Range

24 to 512

Default

Introduced

16.0.R1

Platforms

All

width number

Synopsis

Number of columns displayed on the screen

Context

configure system management-interface cli md-cli environment console width number

Tree

width

Range

80 to 512

Default

Introduced

16.0.R1

Platforms

All

message-severity-level

Synopsis

Enter the message-severity-level context

Context

configure system management-interface cli md-cli environment message-severity-level

Tree

message-severity-level

Introduced

16.0.R1

Platforms

All

cli keyword

Synopsis

Message severity threshold for CLI messages

Context

configure system management-interface cli md-cli environment message-severity-level cli keyword

Tree

cli

Default

info

Options

warning, info

Introduced

16.0.R1

Platforms

All

more boolean

Synopsis

Prompt to continue or stop when output text fills page

Context

configure system management-interface cli md-cli environment more boolean

Tree

Default

true

Introduced

16.0.R1

Platforms

All

progress-indicator

Synopsis

Enter the progress-indicator context

Context

configure system management-interface cli md-cli environment progress-indicator

Tree

progress-indicator

Introduced

16.0.R1

Platforms

All

admin-state keyword

Synopsis

Administrative state of the progress indicator

Context

configure system management-interface cli md-cli environment progress-indicator admin-state keyword

Tree

configure system management-interface netconf

Default

enable

Options

enable, disable

Introduced

16.0.R1

Platforms

All

delay number

Synopsis

Delay before progress indicator is displayed

Context

configure system management-interface cli md-cli environment progress-indicator delay number

Tree

time-format keyword

Synopsis

Time format to display date and time

Context

Maximum number of backup versions maintained

Context

configure system management-interface configuration-save configuration-backups number

Tree

configuration-backups

Range

1 to 200

Default

Introduced

16.0.R1

Platforms

All

netconf

Synopsis

Enter the netconf context

Context

Tree

Introduced

16.0.R1

Platforms

All

admin-state keyword

Synopsis

Administrative state of NETCONF

Context

configure system management-interface netconf admin-state keyword

Tree

configure system management-interface operations

Default

disable

Options

enable, disable

Introduced

16.0.R1

Platforms

All

auto-config-save boolean

Synopsis

Platforms

All

writable-running boolean

Synopsis

Allow NETCONF server to access the running datastore

Context

configure system management-interface netconf capabilities writable-running boolean

Tree

writable-running

Default

false

Introduced

16.0.R1

Platforms

All

port number

Synopsis

Choose port on which the NETCONF server will listen for new connections.

Context

configure system management-interface netconf port number

Tree

port

Range

22 | 830

Default

830

Introduced

19.10.R1

Platforms

All

operations

Synopsis

Enter the operations context

Context

Tree

operations

Description

Commands in this context configure parameters associated with operational commands in model-driven interfaces.

Introduced

21.5.R1

Platforms

All

global-timeouts

Synopsis

Enter the global-timeouts context

Context

configure system management-interface operations global-timeouts

Tree

global-timeouts

Description

Commands in this context configure system timeout parameters for operational commands.

Timeout parameters provide default system-level control for various types of operational commands in model-driven interfaces. The timeout values are used when specific execution and retention timeouts are not requested for a specific operation.

Introduced

21.5.R1

Platforms

All

asynchronous-execution (number | keyword)

Synopsis

Timeout for asynchronous operation execution

Context

configure system management-interface operations global-timeouts asynchronous-execution (number | keyword)

Tree

asynchronous-execution

Description

This command configures the period of time that operations launched as “asynchronous” are allowed to execute before being automatically stopped by the SR OS.

An asynchronous operation is not deleted from the system when it is stopped. See the asynchronous-retention command.

If a specific execution timeout is not included in the request for a particular asynchronous operation, this system-level timeout applies.

Note: This execution timeout is part of the general global operations infrastructure and is separate and independent from any operation-specific timeouts (for example, the ping operation also has its own timeout parameter).

Range

1 to 604800

Default

3600

Options

never

Introduced

21.5.R1

Platforms

All

asynchronous-retention (number | keyword)

Synopsis

Timeout for asynchronous operation data retention

Context

configure system management-interface operations global-timeouts asynchronous-retention (number | keyword)

Tree

asynchronous-retention

Description

This command configures the period of time that data related to operations launched as “asynchronous” is retained in the system. After the retention timeout expires, all information related to the operation is deleted, including any status information and result data.

If a specific retention timeout is not included in the request for a particular asynchronous operation, this system-level timeout applies.

Range

1 to 604800

Default

86400

Options

never

Introduced

21.5.R1

Platforms

All

synchronous-execution (number | keyword)

Synopsis

Timeout for synchronous operation execution

Context

configure system management-interface operations global-timeouts synchronous-execution (number | keyword)

Tree

synchronous-execution

Description

This command configures the period of time that operations launched as “'synchronous” (the default method for all operations) are allowed to execute before they are automatically stopped, and their associated data is deleted.

20.5.R1

Platforms

All

client-tls-profile reference

Synopsis

TLS client profile name

Context

configure system management-interface remote-management client-tls-profile reference

Tree

client-tls-profile

Description

This command specifies the client TLS profile to all remote managers.

Reference

configure system security tls client-tls-profile string

Notes

The following are part of a choice: allow-unsecure-connection or client-tls-profile.

Introduced

20.5.R1

Platforms

All

connection-timeout number

Synopsis

Time without a response before manager declared down

Context

configure system management-interface remote-management connection-timeout number

Tree

connection-timeout

Range

1 to 3600

Default

Units

seconds

Introduced

20.5.R1

Platforms

All

device-label string

Synopsis

Device label supplied to the remote manager

Context

configure system management-interface remote-management device-label string

Tree

device-label

Description

This command specifies a metadata label that is supplied to the manager. This label is used to group devices or network nodes with a common purpose or goal.

String Length

1 to 64

Introduced

20.5.R1

Platforms

All

device-name string

Synopsis

Device name supplied to the remote manager

Context

configure system management-interface remote-management device-name string

Tree

device-name

Description

This command specifies a device name that is supplied to the manager. The name identifies a specific SR OS node in the network.

When unconfigured, the default system name is used.

String Length

1 to 64

Introduced

20.5.R1

Platforms

All

hello-interval number

Synopsis

Time between hello messages from SR OS node to manager

Context

configure system management-interface remote-management hello-interval number

Tree

hello-interval

Range

10 to 3600

Default

Units

minutes

Introduced

20.5.R1

Platforms

All

manager [manager-name] string

Synopsis

Enter the manager list instance

Context

configure system management-interface remote-management manager string

Tree

manager

Description

Commands in this context configure specific manager-related commands. Commands configured in this context take precedence over command values specified directly in the configure management-interface remote-management context.

If a command is not configured in this context, the command setting is inherited from the higher level context.

Max. Elements

Introduced

20.5.R1

Platforms

All

[manager-name] string

Synopsis

Remote management manager name

Context

configure system management-interface remote-management manager string

String Length

1 to 64

Notes

This element is part of a list key.

Introduced

20.5.R1

Platforms

All

admin-state keyword

Synopsis

Administrative state of remote management registration

Context

configure system management-interface remote-management manager string admin-state keyword

Tree

allow-unsecure-connection

Default

disable

Options

enable, disable

Introduced

20.5.R1

Platforms

All

allow-unsecure-connection

Synopsis

Allow connection without secured transport protocol

Context

configure system management-interface remote-management manager string allow-unsecure-connection

Tree

Description

When configured, this command allows an unsecured connection to remote managers; TCP connections are not encrypted, including username and password information.

Notes

The following are part of a choice: allow-unsecure-connection or client-tls-profile.

Introduced

20.5.R1

Platforms

All

client-tls-profile reference

Synopsis

TLS client profile name

Context

configure system management-interface remote-management manager string client-tls-profile reference

Tree

client-tls-profile

Description

This command assigns a profile name to a remote manager.

Reference

configure system security tls client-tls-profile string

Notes

The following are part of a choice: allow-unsecure-connection or client-tls-profile.

Introduced

20.5.R1

Platforms

All

connection-timeout number

Synopsis

Platforms

All

device-name string

Synopsis

Device name supplied to the remote manager

Context

configure system management-interface remote-management manager string device-name string

Tree

device-name

Description

This command specifies a device name that is supplied to the manager. The name identifies a specific SR OS node in the network.

When unconfigured, the default system name is used.

String Length

1 to 64

Introduced

20.5.R1

Platforms

All

manager-address (ipv4-address-no-zone | ipv6-address-no-zone | fully-qualified-domain-name)

Synopsis

Destination IP address of the manager

Context

configure system management-interface remote-management manager string manager-address (ipv4-address-no-zone | ipv6-address-no-zone | fully-qualified-domain-name)

Tree

manager-address

String Length

1 to 255

Introduced

20.5.R1

Platforms

All

manager-port number

Synopsis

Destination TCP port for gRPC connections to manager

Context

Introduced

20.5.R1

Platforms

All

router-instance string

Synopsis

Options

grpc-default

Introduced

20.5.R1

Platforms

All

schema-path string

Synopsis

Schema path URL

Context

configure system management-interface schema-path string

Tree

schema-path

Description

This command specifies the schema path where the SR OS YANG modules can be manually copied by the user prior to using a <get-schema> request. It is recommended that the URL string not exceed 135 characters for the <get-schema> request to work properly with all schema files.

When unconfigured, the software upgrade process manages the YANG schema files to ensure the schema files are synchronized with the software image on both the primary and standby CPM.

String Length

1 to 180

Introduced

16.0.R4

Platforms

All

snmp

Synopsis

Enter the snmp context

Context

configure system management-interface snmp

Tree

snmp

Introduced

16.0.R1

Platforms

All

admin-state keyword

Synopsis

Platforms

All

packet-size number

Synopsis

Maximum SNMP packet size generated by the node

Context

Introduced

16.0.R1

Platforms

All

yang-modules

Synopsis

Enter the yang-modules context

Context

configure system management-interface yang-modules

Tree

yang-modules

Description

Commands in this context determine the system support of the Nokia YANG models.

The settings affect the data sent in a NETCONF <hello>, data populated in the RFC 6022 /netconf-state/schemas list, data returned in a <get-schema> request, and data populated in the RFC 8525 /yang-library.

Introduced

16.0.R1

Platforms

All

base-r13-modules boolean

Synopsis

Support base release 13 YANG models

Context

configure system management-interface yang-modules base-r13-modules boolean

Tree

base-r13-modules

Default

false

Introduced

16.0.R1

Platforms

All

nokia-combined-modules boolean

Synopsis

Support access to combined Nokia YANG models

Context

configure system management-interface yang-modules nokia-combined-modules boolean

Tree

nokia-combined-modules

Description

When configured to true, the system supports the combined Nokia YANG files for both configuration and state data in the NETCONF server.

When the system is operating in classic configuration mode, attempts to access (read or write) the configuration using the Nokia configuration modules or namespace via NETCONF result in errors, even if this command is set to true.

When configured to false, access to the combined Nokia YANG files is not supported.

This command and the nokia-submodules command cannot both be set to true at the same time.

Introduced

16.0.R4

Platforms

All

nokia-submodules boolean

Synopsis

Support submodule-based packaging of Nokia YANG models

Platforms

All

profile [name] string

Synopsis

Enter the profile list instance

Context

configure system network-element-discovery profile string

Tree

profile

Max. Elements

Introduced

19.5.R1

Platforms

All

[name] string

Synopsis

Profile name

Context

configure system network-element-discovery profile string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

19.5.R1

Platforms

All

neid string

Synopsis

Introduced

21.2.R1

Platforms

All

ipv6

Synopsis

Enable the ipv6 context

Context

configure system network-element-discovery profile string neip auto-generate ipv6

Tree

ipv6

Introduced

21.2.R1

Platforms

All

vendor-id-value number

Synopsis

Most significant byte of the NE IPv6 address

Context

Platforms

All

system-mac string

Synopsis

MAC address of the advertised node

Context

configure system network-element-discovery profile string system-mac string

Tree

system-mac

Introduced

19.5.R1

Platforms

All

vendor-id string

Synopsis

Vendor ID to be advertised

Context

configure system network-element-discovery profile string vendor-id string

Tree

vendor-id

String Length

1 to 255

Default

Nokia

Introduced

19.5.R1

Platforms

All

ospf-dynamic-hostnames boolean

Synopsis

Process received OSPF dynamic hostname information

Context

configure system ospf-dynamic-hostnames boolean

Tree

ospf-dynamic-hostnames

Description

Context

configure system persistence ancp description string

Tree

configure system persistence python-policy-cache

String Length

1 to 80

Introduced

16.0.R1

Platforms

All

location keyword

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

location keyword

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

location keyword

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

location keyword

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

python-policy-cache

Synopsis

Enter the python-policy-cache context

Context

Tree

python-policy-cache

Introduced

16.0.R1

Platforms

All

description string

Synopsis

Text description

Context

configure system persistence python-policy-cache description string

Tree

configure system security

String Length

1 to 80

Introduced

16.0.R1

Platforms

All

location keyword

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

location keyword

Synopsis

Platforms

7750 SR-s, 7950 XRS

mode keyword

Synopsis

Power capacity mode algorithm

Context

configure system power-management power-zone number mode keyword

Tree

mode

Default

basic

Options

none, basic, advanced

Introduced

16.0.R1

Platforms

7750 SR-s, 7950 XRS

power-safety-alert number

Synopsis

Power capacity to trigger a safety alert event

Context

configure system power-management power-zone number power-safety-alert number

Tree

power-safety-alert

Range

0 to 120000

Default

Units

watts

Introduced

16.0.R1

Platforms

7750 SR-s, 7950 XRS

power-safety-level number

Synopsis

Minimum threshold to power off devices

Context

configure system power-management power-zone number power-safety-level number

Tree

Introduced

16.0.R1

Platforms

All

description string

Synopsis

Platforms

All

expire-time (number | keyword)

Synopsis

Maximum amount of time to keep a run history status

Context

configure system script-control script-policy string owner string expire-time (number | keyword)

Tree

expire-time

Range

0 to 21474836

Default

3600

Units

seconds

Options

forever

Introduced

16.0.R1

Platforms

All

lifetime (number | keyword)

Synopsis

Maximum amount of time the script may run

Context

configure system script-control script-policy string owner string lifetime (number | keyword)

Tree

lifetime

Range

0 to 21474836

Default

16.0.R1

Platforms

All

results string

Synopsis

Location to receive CLI output of a script run

16.0.R1

Platforms

All

owner string

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Script owner

Context

configure system script-control script-policy string owner string script owner string

Tree

owner

String Length

1 to 32

Introduced

16.0.R1

Platforms

All

security

Synopsis

Enter the security context

Context

Tree

security

Description

Commands in this context configure central security settings such as DDoS protection, users, authorization profiles, and certificates.

Access to these commands should be restricted to highly trusted users and device administrators.

Introduced

16.0.R1

Platforms

All

aaa

Synopsis

Enter the aaa context

Context

configure system security aaa

Tree

aaa

Introduced

16.0.R1

Platforms

All

cli-session-group [cli-session-group-name] string

Synopsis

Enter the cli-session-group list instance

Context

configure system security aaa cli-session-group string

Tree

cli-session-group

6 to 1500

Default

Units

seconds

Options

none

Introduced

16.0.R1

Platforms

All

Action for non-matching entry

Context

Platforms

All

action keyword

Synopsis

Platforms

All

gnmi-capabilities keyword

Synopsis

gNMI Capabilities RPC authorization

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnmi-capabilities keyword

Tree

gnmi-capabilities

Default

permit

Options

permit, deny

Introduced

16.0.R1

Platforms

All

gnmi-get keyword

Synopsis

gNMI Get RPC authorization

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnmi-get keyword

Tree

gnmi-get

Default

permit

Options

permit, deny

Introduced

16.0.R1

Platforms

All

gnmi-set keyword

Synopsis

gNMI Set RPC authorization

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnmi-set keyword

Tree

gnmi-set

Default

permit

Options

permit, deny

Introduced

16.0.R1

Platforms

All

gnmi-subscribe keyword

Synopsis

gNMI Subscribe RPC authorization

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnmi-subscribe keyword

Tree

gnmi-subscribe

Default

permit

Options

permit, deny

Introduced

16.0.R1

Platforms

All

gnoi-cert-mgmt-cangenerate keyword

Synopsis

CanGenerateCSR RPC usage

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnoi-cert-mgmt-cangenerate keyword

Tree

gnoi-cert-mgmt-cangenerate

Default

deny

Options

permit, deny

Introduced

19.10.R1

Platforms

All

gnoi-cert-mgmt-getcert keyword

Synopsis

GetCertificates RPC usage

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnoi-cert-mgmt-getcert keyword

Tree

gnoi-cert-mgmt-getcert

Default

deny

Options

permit, deny

Introduced

19.10.R1

Platforms

All

gnoi-cert-mgmt-install keyword

Synopsis

Install RPC usage

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnoi-cert-mgmt-install keyword

Tree

gnoi-cert-mgmt-install

Default

deny

Options

permit, deny

Introduced

19.10.R1

Platforms

All

gnoi-cert-mgmt-revoke keyword

Synopsis

RevokeCertificates RPC usage

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnoi-cert-mgmt-revoke keyword

Tree

gnoi-cert-mgmt-revoke

Default

deny

Options

permit, deny

Introduced

20.2.R1

Platforms

All

gnoi-cert-mgmt-rotate keyword

Synopsis

Rotate RPC usage

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnoi-cert-mgmt-rotate keyword

Tree

gnoi-cert-mgmt-rotate

Default

deny

Options

permit, deny

Introduced

19.10.R1

Platforms

All

gnoi-file-get keyword

Synopsis

gNOI File Get RPC usage

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnoi-file-get keyword

Tree

gnoi-file-get

Default

permit

Options

permit, deny

Introduced

21.2.R1

Platforms

All

gnoi-file-put keyword

Synopsis

gNOI File Put RPC usage

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnoi-file-put keyword

Tree

gnoi-file-put

Default

permit

Options

permit, deny

Introduced

21.2.R1

Platforms

All

gnoi-file-remove keyword

Synopsis

gNOI File Remove RPC usage

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnoi-file-remove keyword

Tree

gnoi-file-remove

Default

permit

Options

permit, deny

Introduced

21.2.R1

Platforms

All

gnoi-file-stat keyword

Synopsis

gNOI File Stat RPC usage

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnoi-file-stat keyword

Tree

gnoi-file-stat

Default

permit

Options

permit, deny

Introduced

21.2.R1

Platforms

All

gnoi-system-cancelreboot keyword

Synopsis

gNOI System CancelReboot RPC usage

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnoi-system-cancelreboot keyword

Tree

gnoi-system-cancelreboot

Default

deny

Options

permit, deny

Introduced

20.5.R1

Platforms

All

gnoi-system-reboot keyword

Synopsis

gNOI System Reboot RPC authorization

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnoi-system-reboot keyword

Tree

gnoi-system-reboot

Default

deny

Options

permit, deny

Introduced

20.5.R1

Platforms

All

gnoi-system-rebootstatus keyword

Synopsis

gNOI System RebootStatus RPC authorization

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnoi-system-rebootstatus keyword

Tree

gnoi-system-rebootstatus

Default

deny

Options

permit, deny

Introduced

20.5.R1

Platforms

All

gnoi-system-setpackage keyword

Synopsis

gNOI System SetPackage RPC usage

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnoi-system-setpackage keyword

Tree

gnoi-system-setpackage

Default

deny

Options

permit, deny

Introduced

20.5.R1

Platforms

All

gnoi-system-switchcontrolprocessor keyword

Synopsis

gNOI System SwitchControlProcessor RPC usage

Context

configure system security aaa local-profiles profile string grpc rpc-authorization gnoi-system-switchcontrolprocessor keyword

Tree

gnoi-system-switchcontrolprocessor

Default

deny

Options

permit, deny

Introduced

20.5.R1

Platforms

All

md-cli-session keyword

Synopsis

gNOI MdCli Session RPC authorization

Context

configure system security aaa local-profiles profile string grpc rpc-authorization md-cli-session keyword

Tree

md-cli-session

Default

permit

Options

permit, deny

Introduced

20.5.R1

Platforms

All

rib-api-getversion keyword

Synopsis

RibApi GetVersion RPC authorization

Context

configure system security aaa local-profiles profile string grpc rpc-authorization rib-api-getversion keyword

Tree

rib-api-getversion

Default

permit

Options

permit, deny

Introduced

16.0.R4

Platforms

All

rib-api-modify keyword

Synopsis

RibApi Modify RPC authorization

Context

configure system security aaa local-profiles profile string grpc rpc-authorization rib-api-modify keyword

Tree

rib-api-modify

Default

permit

Options

permit, deny

Introduced

16.0.R4

Platforms

All

li boolean

Synopsis

Allow lawful intercept profile ID

Context

configure system security aaa local-profiles profile string li boolean

Tree

Default

false

Introduced

19.10.R1

Platforms

All

netconf

Synopsis

Enter the netconf context

Context

configure system security aaa local-profiles profile string netconf

Tree

configure system security aaa management-interface output-authorization

Introduced

16.0.R1

Platforms

All

output-authorization

Synopsis

Enter the output-authorization context

Context

Tree

output-authorization

Introduced

20.10.R1

Platforms

All

md-interfaces boolean

Synopsis

Perform output authorization

Context

configure system security aaa management-interface output-authorization md-interfaces boolean

Tree

md-interfaces

Default

true

Introduced

20.10.R1

Platforms

All

telemetry-data boolean

Synopsis

Introduced

16.0.R1

Platforms

All

public-key-authentication boolean

Synopsis

Allow SSH public key authentication from LDAP server

Context

configure system security aaa remote-servers ldap public-key-authentication boolean

Tree

public-key-authentication

Default

false

Introduced

16.0.R1

Platforms

All

route-preference keyword

Synopsis

Route preference to reach the AAA server

Context

configure system security aaa remote-servers ldap route-preference keyword

Tree

route-preference

Description

This command specifies the routing preference to reach the AAA server. If the configured option is to use both in-band and out-of-band routes, the out-of-band routes in the Base routing instance are used to reach the server before the in-band routes in the management routing instance.

Default

both

Options

both, inband, outband

Introduced

21.5.R1

Platforms

All

server [index] number

Synopsis

Enter the server list instance

Context

configure system security aaa remote-servers ldap server number

Tree

Max. Elements

Introduced

16.0.R1

Platforms

All

[index] number

Synopsis

LDAP server ID

Context

configure system security aaa remote-servers ldap server number

Range

1 to 5

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

All

address [ip-address] (ipv4-address-no-zone | ipv6-address-no-zone)

Synopsis

Enter the address list instance

Context

configure system security aaa remote-servers ldap server number address (ipv4-address-no-zone | ipv6-address-no-zone)

Tree

Max. Elements

Introduced

16.0.R1

Platforms

All

[ip-address] (ipv4-address-no-zone | ipv6-address-no-zone)

Synopsis

LDAP server address

Context

configure system security aaa remote-servers ldap server number address (ipv4-address-no-zone | ipv6-address-no-zone)

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

All

port number

Synopsis

Port number on which to contact the LDAP server

Context

Enter the search context

Context

configure system security aaa remote-servers ldap server number search

Tree

Introduced

16.0.R1

Platforms

All

base-dn string

Synopsis

LDAP server search base domain name

Context

configure system security aaa remote-servers ldap server number search base-dn string

Tree

base-dn

String Length

1 to 512

Introduced

16.0.R1

Platforms

All

server-name string

Synopsis

LDAP server name

Context

16.0.R1

Platforms

All

server-timeout number

Synopsis

Timeout for a response from the LDAP server

Context

configure system security aaa remote-servers ldap server-timeout number

Tree

server-timeout

Range

1 to 90

Default

Units

seconds

Introduced

16.0.R1

Platforms

All

Platforms

All

admin-state keyword

Synopsis

Platforms

All

route-preference keyword

Synopsis

Route preference to reach the AAA server

Context

configure system security aaa remote-servers radius route-preference keyword

Tree

route-preference

Description

Default

both

Options

both, inband, outband

Introduced

21.5.R1

Platforms

All

server [index] number

Synopsis

Enter the server list instance

Context

configure system security aaa remote-servers radius server number

Tree

configure system security aaa remote-servers tacplus admin-control

1 to 115

Notes

This element is mandatory.

Introduced

16.0.R1

Platforms

All

server-retry number

Synopsis

Number of attempts to retry contacting RADIUS server

Context

configure system security aaa remote-servers radius server-retry number

Tree

server-retry

Range

1 to 10

Default

Introduced

16.0.R1

Platforms

All

server-timeout number

Synopsis

Time to wait for a response from the RADIUS server

Context

configure system security aaa remote-servers radius server-timeout number

Tree

server-timeout

Range

1 to 90

Default

Units

seconds

Introduced

16.0.R1

Platforms

All

use-default-template boolean

Synopsis

Introduced

16.0.R1

Platforms

All

admin-control

Synopsis

Enter the admin-control context

Context

Tree

admin-control

Introduced

16.0.R1

Platforms

All

tacplus-map-to-priv-lvl number

Synopsis

user-profile-name reference

Synopsis

User profile for the mapping

Context

configure system security aaa remote-servers tacplus priv-lvl-map priv-lvl number user-profile-name reference

Tree

user-profile-name

Reference

configure system security aaa local-profiles profile string

Notes

This element is mandatory.

Introduced

16.0.R1

Platforms

All

route-preference keyword

Synopsis

Route preference to reach the AAA server

Context

configure system security aaa remote-servers tacplus route-preference keyword

Tree

route-preference

Description

Default

both

Options

both, inband, outband

Introduced

21.5.R1

Platforms

All

server [index] number

Synopsis

Enter the server list instance

Context

configure system security aaa remote-servers tacplus server number

Tree

Max. Elements

Introduced

16.0.R1

Platforms

All

[index] number

Synopsis

TACACS+ server ID

Context

16.0.R1

Platforms

All

secret string

Synopsis

Secret key to access the TACACS+ server

Context

configure system security aaa remote-servers tacplus server number secret string

Tree

secret

String Length

1 to 199

Notes

This element is mandatory.

Introduced

16.0.R1

Platforms

All

server-timeout number

Synopsis

Time to wait for a response from the TACACS+ server

Context

configure system security aaa remote-servers tacplus server-timeout number

Tree

server-timeout

Range

1 to 90

Default

Units

seconds

Introduced

16.0.R1

Platforms

All

use-default-template boolean

Synopsis

Platforms

All

Allow access to lawful intercept

Context

configure system security aaa user-template keyword access li boolean

Tree

Default

false

Introduced

19.10.R1

Platforms

All

netconf boolean

Synopsis

Allow NETCONF session access

Context

configure system security aaa user-template keyword access netconf boolean

Tree

configure system security cli-script authorization event-handler

Default

false

Introduced

16.0.R1

Platforms

All

console

Synopsis

Enter the console context

Context

configure system security aaa user-template keyword console

Tree

console

Introduced

16.0.R1

Platforms

All

login-exec string

Synopsis

File to execute for a successful user login via console

Context

configure system security aaa user-template keyword console login-exec string

Platforms

All

event-handler

Synopsis

Enter the event-handler context

Context

Tree

event-handler

Introduced

16.0.R1

Platforms

All

cli-user reference

Synopsis

Platforms

All

cpm-filter

Synopsis

Enter the cpm-filter context

Context

configure system security cpm-filter

Tree

cpm-filter

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

default-action keyword

Synopsis

Action for packets that do not match any filter entries

Context

configure system security cpm-filter default-action keyword

Tree

default-action

Default

Options

drop, accept

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

ip-filter

Synopsis

Enter the ip-filter context

Context

configure system security cpm-filter ip-filter

Tree

ip-filter

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

admin-state keyword

Synopsis

Administrative state of the CPM filter

Context

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

action

Synopsis

Enter the action context

Context

configure system security cpm-filter ip-filter entry number action

Tree

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

accept

Synopsis

Forward matching packets

Context

configure system security cpm-filter ip-filter entry number action accept

queue

Reference

configure system security cpm-queue queue number

Notes

The following are part of a choice: accept, default, drop, or queue.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

description string

Synopsis

Text description

Context

configure system security cpm-filter ip-filter entry number description string

Tree

String Length

1 to 80

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

log reference

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dst-ip

Synopsis

Enter the dst-ip context

Context

configure system security cpm-filter ip-filter entry number match dst-ip

Tree

dst-ip

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

address (ipv4-address | ipv4-prefix-with-host-bits)

Synopsis

IP address used as the match criterion

Context

configure system security cpm-filter ip-filter entry number match dst-ip address (ipv4-address | ipv4-prefix-with-host-bits)

Tree

Notes

The following are part of a choice: (address and mask) or ip-prefix-list.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

ip-prefix-list reference

Synopsis

eq number

Synopsis

Port number as the match criterion

Context

configure system security cpm-filter ip-filter entry number match dst-port eq number

Tree

Range

0 to 65535

Notes

The following are part of a choice: (eq and mask), port-list, or range.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

mask number

Synopsis

Port mask as the match criterion

Context

configure system security cpm-filter ip-filter entry number match dst-port mask number

Tree

Range

1 to 65535

Default

65535

Notes

The following are part of a choice: (eq and mask), port-list, or range.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

port-list reference

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

start number

Synopsis

Lower bound of the port number to match

Context

configure system security cpm-filter ip-filter entry number match dst-port range start number

Tree

Range

0 to 65535

Notes

This element is mandatory.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

fragment keyword

Synopsis

Match criterion based on presence of fragmented packets

Context

configure system security cpm-filter ip-filter entry number match fragment keyword

Tree

fragment

Options

false, true

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

icmp

Synopsis

Enter the icmp context

Context

configure system security cpm-filter ip-filter entry number match icmp

Tree

icmp

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

eq number

Synopsis

Port number as the match criterion

Context

configure system security cpm-filter ip-filter entry number match port eq number

Tree

Range

0 to 65535

Notes

The following are part of a choice: (eq and mask), port-list, or range.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

mask number

Synopsis

Port mask as the match criterion

Context

configure system security cpm-filter ip-filter entry number match port mask number

Tree

Range

1 to 65535

Default

65535

Notes

The following are part of a choice: (eq and mask), port-list, or range.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

port-list reference

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

start number

Synopsis

Lower bound of the port number to match

Context

configure system security cpm-filter ip-filter entry number match port range start number

Tree

Range

0 to 65535

Notes

This element is mandatory.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

protocol (number | keyword)

Synopsis

IP protocol as the match criterion

Context

configure system security cpm-filter ip-filter entry number match protocol (number | keyword)

Tree

protocol

Range

0 to 255

Options

tcp-udp, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route, ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

router-instance string

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

ip-prefix-list reference

Synopsis

eq number

Synopsis

Port number as the match criterion

Context

configure system security cpm-filter ip-filter entry number match src-port eq number

Tree

Range

0 to 65535

Notes

The following are part of a choice: (eq and mask), port-list, or range.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

mask number

Synopsis

Port mask as the match criterion

Context

configure system security cpm-filter ip-filter entry number match src-port mask number

Tree

Range

1 to 65535

Default

65535

Notes

The following are part of a choice: (eq and mask), port-list, or range.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

port-list reference

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

start number

Synopsis

Lower bound of the port number to match

Context

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

entry [entry-id] number

Synopsis

Enter the entry list instance

Context

configure system security cpm-filter ipv6-filter entry number

Tree

entry

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

[entry-id] number

Synopsis

Filter entry ID

Context

configure system security cpm-filter ipv6-filter entry number

Range

1 to 131072

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

action

Synopsis

Enter the action context

Context

configure system security cpm-filter ipv6-filter entry number action

Tree

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

accept

Synopsis

Forward matching packets

Context

configure system security cpm-filter ipv6-filter entry number action accept

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dst-ip

Synopsis

Enter the dst-ip context

Context

configure system security cpm-filter ipv6-filter entry number match dst-ip

Tree

dst-ip

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

address (ipv6-address | ipv6-prefix-with-host-bits)

Synopsis

IP address as the match criterion

Context

configure system security cpm-filter ipv6-filter entry number match dst-ip address (ipv6-address | ipv6-prefix-with-host-bits)

Tree

Notes

The following are part of a choice: (address and mask) or ipv6-prefix-list.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

ipv6-prefix-list reference

Synopsis

eq number

Synopsis

Port number as the match criterion

Context

configure system security cpm-filter ipv6-filter entry number match dst-port eq number

Tree

Range

0 to 65535

Notes

The following are part of a choice: (eq and mask), port-list, or range.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

mask number

Synopsis

Port mask as the match criterion

Context

configure system security cpm-filter ipv6-filter entry number match dst-port mask number

Tree

Range

1 to 65535

Default

65535

Notes

The following are part of a choice: (eq and mask), port-list, or range.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

port-list reference

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

start number

Synopsis

Lower bound of the port number to match

Context

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

fragment keyword

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

type number

Synopsis

ICMP type as the match criterion

Context

configure system security cpm-filter ipv6-filter entry number match icmp type number

Tree

type

Range

0 to 255

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

next-header (number | keyword)

Synopsis

IP protocol to match

Context

configure system security cpm-filter ipv6-filter entry number match next-header (number | keyword)

Tree

next-header

Range

0 to 255

Options

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

port

Synopsis

Enter the port context

Context

configure system security cpm-filter ipv6-filter entry number match port

Tree

port

Notes

The following are part of a choice: port or (dst-port and src-port).

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

eq number

Synopsis

Port number as the match criterion

Context

configure system security cpm-filter ipv6-filter entry number match port eq number

Tree

Range

0 to 65535

Notes

The following are part of a choice: (eq and mask), port-list, or range.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

mask number

Synopsis

Port mask as the match criterion

Context

configure system security cpm-filter ipv6-filter entry number match port mask number

Tree

Range

1 to 65535

Default

65535

Notes

The following are part of a choice: (eq and mask), port-list, or range.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

port-list reference

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

start number

Synopsis

Lower bound of the port number to match

Context

configure system security cpm-filter ipv6-filter entry number match port range start number

Tree

Range

0 to 65535

Notes

This element is mandatory.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

router-instance string

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

ipv6-prefix-list reference

Synopsis

eq number

Synopsis

Port number as the match criterion

Context

configure system security cpm-filter ipv6-filter entry number match src-port eq number

Tree

Range

0 to 65535

Notes

The following are part of a choice: (eq and mask), port-list, or range.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

mask number

Synopsis

Port mask as the match criterion

Context

configure system security cpm-filter ipv6-filter entry number match src-port mask number

Tree

Range

1 to 65535

Default

65535

Notes

The following are part of a choice: (eq and mask), port-list, or range.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

port-list reference

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

start number

Synopsis

Lower bound of the port number to match

Context

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

entry [entry-id] number

Synopsis

Enter the entry list instance

Context

configure system security cpm-filter mac-filter entry number

Tree

entry

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

[entry-id] number

Synopsis

Filter entry ID

Context

configure system security cpm-filter mac-filter entry number

Range

1 to 131072

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

action

Synopsis

Enter the action context

Context

configure system security cpm-filter mac-filter entry number action

Tree

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

accept

Synopsis

Forward matching packets

Context

configure system security cpm-filter mac-filter entry number action accept

queue

Reference

configure system security cpm-queue queue number

Notes

The following are part of a choice: accept, default, drop, or queue.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

description string

Synopsis

Text description

Context

configure system security cpm-filter mac-filter entry number description string

Tree

configure system security dist-cpu-protection

String Length

1 to 80

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

log reference

Synopsis

range

Synopsis

Enable the range context

Context

configure system security cpm-filter mac-filter entry number match cfm-opcode range

Tree

range

Notes

The following are part of a choice: eq, gt, lt, or range.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

end number

Synopsis

Upper bound of the Opcode range to match

Context

Ethernet type as the match criterion

Context

configure system security cpm-filter mac-filter entry number match etype string

Tree

etype

Description

This command specifies an Ethernet type II Ethertype value to be used as a MAC filter match criterion.

The Ethernet type field is used by the Ethernet version-II frames and does not apply to IEEE 802.3 Ethernet frames.

String Length

5 to 6

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

frame-type keyword

Synopsis

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

mask number

Synopsis

Mask for DSAP value as the match criterion

Context

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

ssap number

Synopsis

8-bit SSAP as the match criterion

Context

configure system security cpm-filter mac-filter entry number match llc-ssap ssap number

Tree

ssap

Range

0 to 255

Notes

This element is mandatory.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

service reference

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

mask string

Synopsis

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

cbs number

Synopsis

Buffer size that can be drawn from queue buffer pool

Context

configure system security cpm-queue queue number cbs number

Tree

cbs

Range

0 to 131072

Units

kilobps

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

mbs number

Synopsis

Maximum queue depth to which the queue can grow

Context

Units

kilobps

Options

max

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

pir (number | keyword)

Synopsis

Peak information Rate for the queue

Context

configure system security cpm-queue queue number rate pir (number | keyword)

Tree

pir

Range

Packet arrival rate limit for link level protocols

Context

configure system security cpu-protection link-specific-rate (number | keyword)

Tree

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS

alarm boolean

Synopsis

Generate an event when the rate is exceeded

Context

configure system security cpu-protection policy number alarm boolean

Tree

alarm

Default

true

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS

description string

Synopsis

Text description

Context

configure system security cpu-protection policy number description string

Tree

16.0.R1

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS

[id] number

Synopsis

Entry ID

Context

configure system security cpu-protection policy number eth-cfm entry number

Range

1 to 100

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS

level start number end number

Synopsis

Add a list entry for level

Context

configure system security cpu-protection policy number eth-cfm entry number level start number end number

Tree

level

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS

pir (number | keyword)

Synopsis

Packet arrival rate limit

Context

configure system security cpu-protection policy number out-profile-rate pir (number | keyword)

Tree

pir

Range

1 to 65534

Units

packets per second

Options

max

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS

overall-rate (number | keyword)

Synopsis

Overall packet arrival rate limit to apply for all sources of packets

Context

configure system security cpu-protection policy number overall-rate (number | keyword)

Tree

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS

per-source-rate (number | keyword)

Synopsis

Per-source packet arrival rate limit

Context

configure system security cpu-protection policy number per-source-rate (number | keyword)

Tree

per-source-rate

Range

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS

pir (number | keyword)

Synopsis

Per-port packet arrival rate limit

Context

configure system security cpu-protection port-overall-rate pir (number | keyword)

Tree

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS

block-pim-tunneled boolean

Synopsis

Block extraction and processing of PIM packets that arrive inside a tunnel

Context

configure system security cpu-protection protocol-protection block-pim-tunneled boolean

Tree

block-pim-tunneled

Default

false

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS

dist-cpu-protection

Synopsis

Enter the dist-cpu-protection context

Context

Tree

dist-cpu-protection

Introduced

16.0.R1

Platforms

All

policy [policy-name] string

Synopsis

Enter the policy list instance

Context

configure system security dist-cpu-protection policy string

Tree

policy

Description

Commands in this context configure the attributes of DCP policies. These policies can be applied to objects such as SAPs, network interfaces or ports

Introduced

16.0.R1

Platforms

All

mbs number

Synopsis

Tolerance for the rate

Context

configure system security dist-cpu-protection policy string local-monitoring-policer string rate kbps mbs number

Tree

mbs

Range

0 to 4194304

Units

bytes

Introduced

16.0.R1

Platforms

All

packets

Synopsis

Enter the packets context

Context

configure system security dist-cpu-protection policy string local-monitoring-policer string rate packets

Tree

packets

Notes

This element is the default part of a choice.

The following are part of a choice: kbps or packets.

Introduced

16.0.R1

Platforms

All

initial-delay number

Synopsis

Additional packets allowed in an initial burst

Context

configure system security dist-cpu-protection policy string local-monitoring-policer string rate packets initial-delay number

Tree

initial-delay

Range

0 to 255

Default

Units

packets

Introduced

16.0.R1

Platforms

All

limit (keyword | number)

Synopsis

Packets per interval limit

Context

configure system security dist-cpu-protection policy string local-monitoring-policer string rate packets limit (keyword | number)

Tree

limit

Range

0 to 8000

Default

max

Units

packets per interval

Options

max

Introduced

16.0.R1

Platforms

All

within number

Synopsis

Measurement interval for packets rate

Context

configure system security dist-cpu-protection policy string local-monitoring-policer string rate packets within number

Tree

within

Range

1 to 32767

Default

Units

seconds

Introduced

16.0.R1

Platforms

All

protocol [protocol-name] keyword

Synopsis

Enter the protocol list instance

Context

configure system security dist-cpu-protection policy string protocol keyword

Tree

protocol

Introduced

16.0.R1

Platforms

All

[protocol-name] keyword

Synopsis

Protocol name

Context

configure system security dist-cpu-protection policy string protocol keyword

Options

arp, dhcp, http-redirect, icmp, igmp, mld, ndis, pppoe-pppoa, all-unspecified, mpls-ttl, bfd-cpm, bgp, eth-cfm, isis, ldp, ospf, pim, rsvp, icmp-ping-check, lacp

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

All

dynamic-parameters

Synopsis

Enter the dynamic-parameters context

Context

configure system security dist-cpu-protection policy string protocol keyword dynamic-parameters

Tree

dynamic-parameters

Introduced

16.0.R1

Platforms

All

detection-time number

Synopsis

Minimum time the dynamic policer remains allocated

Context

configure system security dist-cpu-protection policy string protocol keyword dynamic-parameters detection-time number

Tree

detection-time

Range

1 to 128000

Default

Units

seconds

Introduced

16.0.R1

Platforms

All

exceed-action

Synopsis

Enter the exceed-action context

Context

configure system security dist-cpu-protection policy string protocol keyword dynamic-parameters exceed-action

Tree

exceed-action

Introduced

16.0.R1

Platforms

All

action keyword

Synopsis

Action taken on control packets when rates are exceeded

Context

configure system security dist-cpu-protection policy string protocol keyword dynamic-parameters exceed-action action keyword

Tree

Default

none

Options

discard, low-priority, none

Introduced

16.0.R1

Platforms

All

hold-down (keyword | number)

Synopsis

Hold down behavior

Context

configure system security dist-cpu-protection policy string protocol keyword dynamic-parameters exceed-action hold-down (keyword | number)

Tree

hold-down

Range

Introduced

16.0.R1

Platforms

All

mbs number

Synopsis

Tolerance for the rate

Context

configure system security dist-cpu-protection policy string protocol keyword dynamic-parameters rate kbps mbs number

Tree

mbs

Range

0 to 4194304

Units

bytes

Introduced

16.0.R1

Platforms

All

packets

Synopsis

Enter the packets context

Context

configure system security dist-cpu-protection policy string protocol keyword dynamic-parameters rate packets

Tree

packets

Notes

This element is the default part of a choice.

The following are part of a choice: kbps or packets.

Introduced

16.0.R1

Platforms

All

initial-delay number

Synopsis

Additional packets allowed in an initial burst

Context

configure system security dist-cpu-protection policy string protocol keyword dynamic-parameters rate packets initial-delay number

Tree

initial-delay

Range

0 to 255

Default

Units

packets

Introduced

16.0.R1

Platforms

All

limit (keyword | number)

Synopsis

Packets per interval limit

Context

configure system security dist-cpu-protection policy string protocol keyword dynamic-parameters rate packets limit (keyword | number)

Tree

limit

Range

0 to 8000

Default

max

Units

packets per interval

Options

max

Introduced

16.0.R1

Platforms

All

within number

Synopsis

Measurement interval for packets rate

Context

configure system security dist-cpu-protection policy string protocol keyword dynamic-parameters rate packets within number

Tree

within

Range

1 to 32767

Default

Units

seconds

Introduced

16.0.R1

Platforms

All

Do not include packets in the local monitoring function

Context

configure system security dist-cpu-protection policy string protocol keyword enforcement dynamic-local-mon-bypass

Tree

dynamic-local-mon-bypass

Notes

1 to 128000

Default

Units

seconds

Introduced

16.0.R1

Platforms

All

exceed-action

Synopsis

Enter the exceed-action context

Context

configure system security dist-cpu-protection policy string static-policer string exceed-action

Tree

exceed-action

Introduced

16.0.R1

Platforms

All

action keyword

Synopsis

Action taken on control packets when rates are exceeded

Context

configure system security dist-cpu-protection policy string static-policer string exceed-action action keyword

Tree

Default

none

Options

discard, low-priority, none

Introduced

16.0.R1

Platforms

All

hold-down (keyword | number)

Synopsis

Hold down behavior

Context

configure system security dist-cpu-protection policy string static-policer string exceed-action hold-down (keyword | number)

Tree

hold-down

Range

Introduced

16.0.R1

Platforms

All

mbs number

Synopsis

Tolerance for the rate

Context

configure system security dist-cpu-protection policy string static-policer string rate kbps mbs number

Tree

mbs

Range

0 to 4194304

Units

bytes

Introduced

16.0.R1

Platforms

All

packets

Synopsis

Enter the packets context

Context

configure system security dist-cpu-protection policy string static-policer string rate packets

Tree

packets

Notes

This element is the default part of a choice.

The following are part of a choice: kbps or packets.

Introduced

16.0.R1

Platforms

All

initial-delay number

Synopsis

Additional packets allowed in an initial burst

Context

configure system security dist-cpu-protection policy string static-policer string rate packets initial-delay number

Tree

initial-delay

Range

0 to 255

Default

Units

packets

Introduced

16.0.R1

Platforms

All

limit (keyword | number)

Synopsis

Packets per interval limit

Context

configure system security dist-cpu-protection policy string static-policer string rate packets limit (keyword | number)

Tree

limit

Range

0 to 8000

Default

max

Units

packets per interval

Options

max

Introduced

16.0.R1

Platforms

All

within number

Synopsis

Measurement interval for packets rate

Context

configure system security dist-cpu-protection policy string static-policer string rate packets within number

Tree

within

Range

1 to 32767

Default

Tree

retry

Range

1 to 10

Default

Introduced

16.0.R1

Platforms

All

server [server-index] number

Synopsis

Enter the server list instance

Context

configure system security dot1x radius-policy string server number

Tree

configure system security hash-control management-interface classic-cli

Max. Elements

Introduced

16.0.R1

Platforms

All

[server-index] number

Synopsis

RADIUS server index

Context

configure system security dot1x radius-policy string server number

Range

1 to 5

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

All

accounting-port number

Synopsis

Platforms

All

secret string

Synopsis

Secret key associated with the RADIUS server

Context

Time assigned between the request retries toward the same RADIUS server

Context

configure system security dot1x radius-policy string timeout number

Tree

timeout

Range

1 to 90

Default

Units

seconds

Introduced

16.0.R1

Platforms

All

ftp-server boolean

Synopsis

Platforms

All

classic-cli

Synopsis

Enter the classic-cli context

Context

Tree

classic-cli

Introduced

16.0.R4

Platforms

All

read-algorithm keyword

Synopsis

Global read algorithm for the system

Context

configure system security hash-control management-interface classic-cli read-algorithm keyword

Tree

read-algorithm

Description

This command specifies how encrypted configuration secrets are interpreted and which encryption types are accepted when secrets are input into the system or read from a configuration file (for example, at system bootup time).

Default

all-hash

Options

all-hash, hash, hash2, custom

Introduced

16.0.R4

Platforms

All

write-algorithm keyword

Synopsis

Global write algorithm for the system

Context

configure system security hash-control management-interface classic-cli write-algorithm keyword

Tree

write-algorithm

Description

This command specifies the format of the output for encrypted configuration secrets (for example, in the saved configuration file, or in the output of the info or show commands).

Default

hash2

Options

cleartext, hash, hash2, custom

Introduced

16.0.R4

Platforms

All

grpc

Synopsis

Enter the grpc context

Context

configure system security hash-control management-interface grpc

Tree

grpc

Introduced

16.0.R4

Platforms

All

hash-algorithm keyword

Synopsis

Encryption format for configuration secrets

Context

configure system security hash-control management-interface grpc hash-algorithm keyword

Tree

hash-algorithm

Description

This command specifies the format of the input and output for encrypted configuration secrets.

Default

hash2

Options

cleartext, hash, hash2, custom

Introduced

16.0.R4

Platforms

All

md-cli

Synopsis

Enter the md-cli context

Context

configure system security hash-control management-interface md-cli

Tree

md-cli

Introduced

16.0.R4

Platforms

All

hash-algorithm keyword

Synopsis

Encryption format for configuration secrets

Context

configure system security hash-control management-interface md-cli hash-algorithm keyword

Tree

hash-algorithm

Description

This command specifies the format of the input and output for encrypted configuration secrets.

Default

hash2

Options

cleartext, hash, hash2, custom

Introduced

16.0.R4

Platforms

All

netconf

Synopsis

Enter the netconf context

Context

configure system security hash-control management-interface netconf

Tree

Introduced

16.0.R4

Platforms

All

hash-algorithm keyword

Synopsis

Encryption format for configuration secrets

Context

configure system security hash-control management-interface netconf hash-algorithm keyword

Tree

hash-algorithm

Description

This command specifies the format of the input and output for encrypted configuration secrets.

Default

hash2

Options

cleartext, hash, hash2, custom

Introduced

16.0.R4

Platforms

All

Administrative state of the keychain

Context

Platforms

All

admin-state keyword

Synopsis

Administrative state of the keychain entry

Context

configure system security keychains keychain string bidirectional entry number admin-state keyword

Tree

Default

enable

Options

enable, disable

Introduced

16.0.R1

Platforms

All

algorithm keyword

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

Encryption algorithm used by the keychain key

16.0.R1

Platforms

All

description string

Synopsis

Platforms

All

admin-state keyword

Synopsis

Administrative state of the keychain entry

Context

configure system security keychains keychain string receive entry number admin-state keyword

Tree

Default

enable

Options

enable, disable

Introduced

16.0.R1

Platforms

All

algorithm keyword

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

Encryption algorithm used by the keychain key

Context

configure system security keychains keychain string receive entry number algorithm keyword

Tree

algorithm

Options

aes-128-cmac-96, hmac-sha-1-96, password, message-digest, hmac-md5, hmac-sha-1, hmac-sha-256

Introduced

16.0.R1

Platforms

All

authentication-key string

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

Range

0 to 63 | 255

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

All

admin-state keyword

Synopsis

Administrative state of the keychain entry

Context

configure system security keychains keychain string send entry number admin-state keyword

Tree

configure system security management

Default

enable

Options

enable, disable

Introduced

16.0.R1

Platforms

All

algorithm keyword

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

Encryption algorithm used by the keychain key

Context

configure system security keychains keychain string send entry number algorithm keyword

Tree

algorithm

Options

aes-128-cmac-96, hmac-sha-1-96, password, message-digest, hmac-md5, hmac-sha-1, hmac-sha-256

Introduced

16.0.R1

Platforms

All

authentication-key string

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

Introduced

16.0.R1

Platforms

All

send keyword

Synopsis

TCP option value assigned in the TCP header of transmitted packets

Context

configure system security keychains keychain string tcp-option-number send keyword

Tree

send

Default

option-254

Options

option-253, option-254, tcp-ao

Introduced

16.0.R1

Platforms

All

management

Synopsis

Enter the management context

Context

Tree

management

Description

Commands in this context control which management protocols can be used to access the SR OS router via the 'Base' and 'management' router instances.

Introduced

16.0.R5

Platforms

All

allow-ftp boolean

Synopsis

Allow access to the FTP server

Context

configure system security management allow-ftp boolean

Tree

allow-ftp

Description

When configured to true, this command allows FTP access to the SR OS router via the 'Base' and 'management' router instances.

When configured to false, this command disallows access to the SR OS FTP server.

Default

true

Introduced

16.0.R6

Platforms

All

allow-grpc boolean

Synopsis

Allow access to the gRPC server

Context

configure system security management allow-grpc boolean

Tree

allow-grpc

Description

When configured to true, this command allows access to the gRPC server via the 'Base' and 'management' router instances.

When configured to false, this command disallows gRPC server access.

Default

true

Introduced

19.5.R1

Platforms

All

allow-netconf boolean

Synopsis

Allow access to the NETCONF server

Context

configure system security management allow-netconf boolean

Tree

allow-netconf

Description

When configured to true, this command allows NETCONF server access to the SR OS router via the 'Base' and 'management' router instances.

When configured to false, this command disallows access to the NETCONF server.

Default

true

Introduced

19.5.R1

Platforms

All

allow-ssh boolean

Synopsis

Allow access to the SSH server

Context

configure system security management allow-ssh boolean

Tree

allow-ssh

Description

When configured to true, this command allows SSH server access to the SR OS router via the 'Base' and 'management' router instances.

When configured to false, this command disallows SSH server access.

Default

true

Introduced

16.0.R5

Platforms

All

allow-telnet boolean

Synopsis

Allow access to the IPv4 Telnet server

Context

configure system security management allow-telnet boolean

Tree

allow-telnet

Description

When configured to true, this command allows IPv4 Telnet server access to the SR OS router via the 'Base' and 'management' router instances.

When configured to false, this command disallows access to the IPv4 Telnet server.

Default

true

Introduced

16.0.R5

Platforms

All

allow-telnet6 boolean

Synopsis

Allow access to the Telnet IPv6 server

Context

configure system security management allow-telnet6 boolean

Tree

allow-telnet6

Description

Context

description string

Synopsis

Text description

Context

configure system security management-access-filter ip-filter entry number description string

Tree

String Length

1 to 80

Introduced

16.0.R4

Platforms

All

log-events boolean

Synopsis

port-id string

Synopsis

Port ID as the match criterion

Context

configure system security management-access-filter ip-filter entry number match mgmt-port port-id string

Tree

port-id

Notes

The following are part of a choice: cpm, (lag and lag-id), or port-id.

Introduced

16.0.R4

Platforms

All

protocol (number | keyword)

Synopsis

IP protocol as the match criterion

Context

configure system security management-access-filter ip-filter entry number match protocol (number | keyword)

Tree

protocol

Range

0 to 255

Notes

The following are part of a choice: (address and mask) or ip-prefix-list.

Introduced

16.0.R4

Platforms

All

ip-prefix-list reference

Synopsis

IP prefix list as the match criterion

Context

configure system security management-access-filter ip-filter entry number match src-ip ip-prefix-list reference

Tree

ip-prefix-list

Reference

configure filter match-list ip-prefix-list string

Notes

The following are part of a choice: (address and mask) or ip-prefix-list.

Introduced

20.7.R1

Platforms

All

mask string

Synopsis

description string

Synopsis

Text description

Context

configure system security management-access-filter ipv6-filter entry number description string

Tree

String Length

1 to 80

Introduced

16.0.R4

Platforms

All

log-events boolean

Synopsis

Introduced

16.0.R4

Platforms

All

port number

Synopsis

TCP or UDP port number as the match criterion

Context

configure system security management-access-filter ipv6-filter entry number match dst-port port number

Tree

port

Range

1 to 65535

Notes

This element is mandatory.

Introduced

16.0.R4

Platforms

All

flow-label number

Synopsis

Platforms

All

lag string

Synopsis

LAG ID as the match criterion

Context

configure system security management-access-filter ipv6-filter entry number match mgmt-port lag string

Tree

The following are part of a choice: (address and mask) or ipv6-prefix-list.

Introduced

16.0.R4

Platforms

All

ipv6-prefix-list reference

Synopsis

IPv6 prefix list as the match criterion

Context

configure system security management-access-filter ipv6-filter entry number match src-ip ipv6-prefix-list reference

Tree

ipv6-prefix-list

Reference

configure filter match-list ipv6-prefix-list string

Notes

The following are part of a choice: (address and mask) or ipv6-prefix-list.

Introduced

20.7.R1

Platforms

All

mask string

Synopsis

description string

Synopsis

Text description

Context

configure system security management-access-filter mac-filter entry number description string

Tree

String Length

1 to 80

Introduced

16.0.R4

Platforms

All

log-events boolean

Synopsis

range

Synopsis

Enable the range context

Context

configure system security management-access-filter mac-filter entry number match cfm-opcode range

Tree

range

Notes

The following are part of a choice: eq, gt, lt, or range.

Introduced

16.0.R4

Platforms

All

end number

Synopsis

Upper bound of the range for the OpCode to match

Context

3-bit mask as the match criterion

Context

configure system security management-access-filter mac-filter entry number match dot1p mask number

Tree

Range

1 to 7

Default

Introduced

16.0.R4

Platforms

All

priority number

Synopsis

IEEE 802.1p value as the match criterion

Context

mask number

Synopsis

Mask for DSAP value as the match criterion

Context

Introduced

16.0.R4

Platforms

All

ssap number

Synopsis

Platforms

All

mask string

Synopsis

Platforms

All

[ca-profile-name] string

Synopsis

Certificate Authority (CA) profile name

Context

configure system security pki ca-profile string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

All

admin-state keyword

Synopsis

Administrative state of the CA profile

All

url http-url-path-loose

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Location of updated CRL

Context

configure system security pki ca-profile string auto-crl-update crl-urls url-entry number url http-url-path-loose

Tree

url

String Length

1 to 180

Introduced

16.0.R1

Platforms

All

periodic-update-interval number

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Interval between two consecutive CRL updates

Context

configure system security pki ca-profile string auto-crl-update periodic-update-interval number

Tree

periodic-update-interval

Range

3600 to 31622400

Default

86400

Units

seconds

Introduced

16.0.R1

Platforms

All

pre-update-time number

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Time prior to the next update time of the current CRL

Context

configure system security pki ca-profile string auto-crl-update pre-update-time number

Tree

pre-update-time

Range

0 to 31622400

Default

3600

Units

seconds

Introduced

16.0.R1

Platforms

All

retry-interval number

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Interval before retrying to update CRL

Context

configure system security pki ca-profile string auto-crl-update retry-interval number

Tree

retry-interval

Range

0 to 31622400

Default

3600

Units

seconds

Introduced

16.0.R1

Platforms

All

schedule-type keyword

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Time scheduler type for an automated CRL update

Context

configure system security pki ca-profile string auto-crl-update schedule-type keyword

Tree

schedule-type

Default

next-update-based

Options

next-update-based, periodic

Introduced

16.0.R1

Platforms

All

cert-file string

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

All

pkiconf-message boolean

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Accept unprotected PKI confirmation messages

Context

configure system security pki ca-profile string cmpv2 accept-unprotected-message pkiconf-message boolean

Tree

pkiconf-message

Default

false

Introduced

16.0.R1

Platforms

All

always-set-sender-for-ir boolean

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Subject name in CMPv2 header for all Initial Registration (IR) messages

Context

configure system security pki ca-profile string cmpv2 always-set-sender-for-ir boolean

Tree

always-set-sender-for-ir

Default

false

Introduced

16.0.R1

Platforms

All

http

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Enter the http context

Context

configure system security pki ca-profile string cmpv2 http

Tree

http

Introduced

16.0.R1

Platforms

All

response-timeout number

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

HTTP response timeout

Context

configure system security pki ca-profile string cmpv2 http response-timeout number

Tree

response-timeout

Range

1 to 3600

Default

Units

seconds

Introduced

16.0.R1

Platforms

All

version keyword

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

HTTP version for CMPv2 messages

All

[reference-number] string

Synopsis

Unique identifier for the CA initial authentication key

Context

configure system security pki ca-profile string cmpv2 key-list key string

String Length

1 to 64

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

All

password string

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Shared secret for this CA initial authentication key

Context

configure system security pki ca-profile string cmpv2 key-list key string password string

Tree

password

String Length

1 to 115

Introduced

16.0.R1

Platforms

All

response-signing-cert string

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

File name of the certificate to verify the signature of received CMPv2 responses

Context

configure system security pki ca-profile string cmpv2 response-signing-cert string

Tree

response-signing-cert

String Length

1 to 95

Introduced

16.0.R1

Platforms

All

same-recipient-nonce-for-poll-request boolean

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

All

url-string http-optional-url-loose

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

ocsp

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Enter the ocsp context

Context

configure system security pki ca-profile string ocsp

Tree

ocsp

Introduced

16.0.R1

Platforms

All

responder-url http-optional-url-loose

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

HTTP URL of the OCSP responder for the CA

Context

configure system security pki ca-profile string ocsp responder-url http-optional-url-loose

Tree

responder-url

String Length

1 to 180

Introduced

16.0.R1

Platforms

All

service-name string

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Administrative service name

Context

configure system security pki ca-profile string ocsp service-name string

Tree

service-name

String Length

1 to 64

Introduced

16.0.R1

Platforms

All

transmission-profile reference

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

The transmission profile for OCSP.

Context

configure system security pki ca-profile string ocsp transmission-profile reference

Tree

transmission-profile

Reference

configure system transmission-profile string

Introduced

16.0.R6

Platforms

All

revocation-check keyword

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Method to verify the revocation status of certificates issued by the CA

Context

configure system security pki ca-profile string revocation-check keyword

Tree

revocation-check

Default

crl

Options

crl, crl-optional

Introduced

16.0.R1

Platforms

All

certificate-display-format keyword

Synopsis

Display format for certificates and Certificate Revocation Lists (CRLs)

Context

Introduced

16.0.R1

Platforms

All

repeat-hours number

Synopsis

Time period when the system repeatedly generates the certificate expiration warning trap

Context

configure system security pki certificate-expiration-warning repeat-hours number

Tree

repeat-hours

Range

0 to 8760

Default

Units

hours

Introduced

16.0.R1

Platforms

All

common-name-list [cn-list-name] string

Synopsis

Enter the common-name-list list instance

Context

configure system security pki common-name-list string

Tree

common-name-list

Max. Elements

Introduced

16.0.R1

Platforms

All

[cn-list-name] string

Synopsis

Platforms

All

cn-type keyword

Synopsis

Common name type

Context

configure system security pki common-name-list string common-name number cn-type keyword

Tree

cn-type

Options

ip-address, domain-name

Notes

This element is mandatory.

Introduced

16.0.R1

Platforms

All

cn-value string

Synopsis

Common name value

Context

Introduced

16.0.R1

Platforms

All

repeat-hours number

Synopsis

Time when the system repeatedly generates the Certificate Revocation List (CRL) expiration warning trap

Context

configure system security pki crl-expiration-warning repeat-hours number

Tree

repeat-hours

Range

0 to 8760

Default

Units

hours

Introduced

16.0.R1

Platforms

All

imported-format keyword

Synopsis

The supported encrypted file formats

Context

configure system security pki imported-format keyword

Tree

imported-format

Default

any

Options

any, secure

Introduced

16.0.R6

Platforms

All

maximum-cert-chain-depth number

Synopsis

Maximum depth of certificate chain verification

Context

configure system security pki maximum-cert-chain-depth number

Tree

maximum-cert-chain-depth

Range

1 to 7

1 to 32

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

All

context string

Synopsis

Platforms

All

prefix-match keyword

Synopsis

Match type for the context

Context

configure system security snmp access string context string security-model keyword security-level keyword prefix-match keyword

Tree

prefix-match

Options

exact, prefix

Introduced

16.0.R1

Platforms

All

read string

Synopsis

SNMP view for read access

Context

Maximum unsuccessful SNMP attempts that are allowed for the specified time

Context

configure system security snmp attempts count number

Tree

count

Range

1 to 64

Default

Introduced

16.0.R1

Platforms

All

lockout number

Synopsis

Lockout period during which the host is not allowed to log in

Context

configure system security snmp attempts lockout number

Tree

lockout

Range

0 to 1440

Default

Units

minutes

Introduced

16.0.R1

Platforms

All

time number

Synopsis

Time when a number of unsuccessful attempts are made before the host is locked out

Context

configure system security snmp attempts time number

Tree

time

Range

0 to 60

Default

Units

minutes

Introduced

16.0.R1

Platforms

All

community [community-string] string

Synopsis

Enter the community list instance

Context

configure system security snmp community string

Tree

community

Introduced

16.0.R1

Platforms

All

[community-string] string

Synopsis

Management information that is accessed when using the community string

Context

configure system security snmp community string

String Length

1 to 114

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

All

access-permissions keyword

Synopsis

Platforms

All

source-access-list [list-name] string

Synopsis

Enter the source-access-list list instance

Context

configure system security snmp source-access-list string

Tree

source-access-list

Max. Elements

Introduced

16.0.R1

Platforms

All

[list-name] string

Synopsis

Value for the name given to source access list

Context

configure system security snmp source-access-list string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

All

source-host [host-name] string

Synopsis

Enter the source-host list instance

Context

configure system security snmp source-access-list string source-host string

Tree

source-host

Max. Elements

Introduced

16.0.R1

Platforms

All

[host-name] string

Synopsis

Source host entry name

Context

configure system security snmp source-access-list string source-host string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

All

address (ipv4-address-no-zone | ipv6-address-no-zone)

Synopsis

address string

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

Source IPv4 address

Context

configure system security source-address ipv4 keyword address string

Tree

configure system security ssh key-re-exchange server

Notes

The following are part of a mandatory choice: address or interface-name.

Introduced

16.0.R1

Platforms

All

interface-name string

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

Interface name whose IP address to be used in all packets sent by the application

Context

Platforms

All

address string

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

Platforms

All

name keyword

Synopsis

Cipher name value

Context

Platforms

All

name keyword

Synopsis

Cipher name value

Context

Platforms

All

name keyword

Synopsis

KEX algorithm for computing a shared secret key

Context

Platforms

All

name keyword

Synopsis

MAC algorithm that performs encryption or decryption

Context

Introduced

16.0.R1

Platforms

All

mbytes (number | keyword)

Synopsis

Maximum bytes transmitted before key re-exchange begins

Context

configure system security ssh key-re-exchange client mbytes (number | keyword)

Tree

mbytes

Range

1 to 64000

Default

1024

Units

megabytes

Options

infinite

Introduced

16.0.R1

Platforms

All

minutes (number | keyword)

Synopsis

Maximum time before key re-exchange is initiated

Context

configure system security ssh key-re-exchange client minutes (number | keyword)

Tree

minutes

Range

1 to 1440

Default

Units

minutes

Options

infinite

Introduced

16.0.R1

Platforms

All

server

Synopsis

Enter the server context

Context

Tree

Introduced

16.0.R1

Platforms

All

admin-state keyword

Synopsis

Administrative state of the key re-exchange

Context

configure system security ssh key-re-exchange server admin-state keyword

Tree

Default

enable

Options

enable, disable

Introduced

16.0.R1

Platforms

All

mbytes (number | keyword)

Synopsis

Maximum bytes transmitted before key re-exchange begins

Context

configure system security ssh key-re-exchange server mbytes (number | keyword)

Tree

mbytes

Range

1 to 64000

Default

1024

Units

megabytes

Options

infinite

Introduced

16.0.R1

Platforms

All

minutes (number | keyword)

Synopsis

Maximum time before key re-exchange is initiated

Context

configure system security ssh key-re-exchange server minutes (number | keyword)

Tree

minutes

Range

1 to 1440

Default

Units

minutes

Options

infinite

Introduced

16.0.R1

Platforms

All

preserve-key boolean

Synopsis

Preserve keys and restore on system or server restart

Context

configure system security ssh preserve-key boolean

Tree

preserve-key

Default

false

Introduced

16.0.R1

Platforms

All

server-admin-state keyword

Synopsis

Administrative state of the SSH server

Context

Platforms

All

name keyword

Synopsis

Cipher name value

Context

Platforms

All

name keyword

Synopsis

Cipher name value

Context

Platforms

All

name keyword

Synopsis

KEX algorithm for computing a shared secret key

Context

Platforms

All

name keyword

Synopsis

MAC algorithm that performs encryption or decryption

Context

configure system security ssh server-mac-list-v2 mac number name keyword

Tree

name

Options

hmac-sha2-512, hmac-sha2-256, hmac-sha1, hmac-sha1-96, hmac-md5, hmac-ripemd160, hmac-ripemd160-openssh-com, hmac-md5-96

Notes

This element is mandatory.

Introduced

16.0.R1

Platforms

All

version keyword

Synopsis

SSH protocol version supported by the SSH server

Context

configure system security ssh version keyword

Tree

configure system security system-passwords

Default

Options

1, 2, 1-2

Introduced

16.0.R1

Platforms

All

system-passwords

Synopsis

Enter the system-passwords context

Context

Tree

system-passwords

Introduced

16.0.R1

Platforms

All

admin-password string

Synopsis

Password that assigns the user as administrator

Context

configure system security system-passwords admin-password string

Tree

admin-password

String Length

3 to 136

Introduced

16.0.R1

Platforms

All

vsd-password string

Synopsis

Platforms

All

telnet-server boolean

Synopsis

Enable Telnet servers running on the system

Context

configure system security telnet-server boolean

Tree

telnet-server

Default

false

Introduced

16.0.R1

Platforms

All

telnet6-server boolean

Synopsis

Enable Telnet IPv6 servers running on the system

Context

configure system security telnet6-server boolean

Tree

16.0.R1

Platforms

All

[cert-profile-name] string

Synopsis

TLS certificate profile name

Context

configure system security tls cert-profile string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

All

admin-state keyword

Synopsis

Administrative state of the certificate profile

Context

configure system security tls cert-profile string admin-state keyword

Tree

Default

disable

Options

enable, disable

Introduced

16.0.R1

Platforms

All

entry [entry-id] number

Synopsis

Enter the entry list instance

Context

configure system security tls cert-profile string entry number

Tree

entry

16.0.R1

Platforms

All

[ca-profile-name] reference

Synopsis

Certificate Authority (CA) profile name

Context

configure system security tls cert-profile string entry number send-chain ca-profile reference

Reference

configure system security pki ca-profile string

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

All

client-cipher-list [client-cipher-list-name] string

Synopsis

Enter the client-cipher-list list instance

Context

configure system security tls client-cipher-list string

Tree

client-cipher-list

Max. Elements

Introduced

16.0.R1

Platforms

All

[client-cipher-list-name] string

Synopsis

Platforms

All

name keyword

Synopsis

Value for the cipher suite code

Context

configure system security tls client-cipher-list string cipher number name keyword

Tree

name

Options

tls-rsa-with3des-ede-cbc-sha, tls-rsa-with-aes128-cbc-sha, tls-rsa-with-aes256-cbc-sha, tls-rsa-with-aes128-cbc-sha256, tls-rsa-with-aes256-cbc-sha256

Notes

This element is mandatory.

Introduced

16.0.R1

Platforms

All

client-tls-profile [client-profile-name] string

Synopsis

Enter the client-tls-profile list instance

Context

configure system security tls client-tls-profile string

Tree

client-tls-profile

Max. Elements

Introduced

16.0.R1

Platforms

All

[client-profile-name] string

Synopsis

Name of TLS client profile.

Context

configure system security tls client-tls-profile string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

All

admin-state keyword

Synopsis

server-cipher-list [server-cipher-list-name] string

Synopsis

Enter the server-cipher-list list instance

Context

configure system security tls server-cipher-list string

Tree

server-cipher-list

Max. Elements

Introduced

16.0.R1

Platforms

All

[server-cipher-list-name] string

Synopsis

Platforms

All

name keyword

Synopsis

Value for the cipher suite code

Context

configure system security tls server-cipher-list string cipher number name keyword

Tree

name

Options

tls-rsa-with3des-ede-cbc-sha, tls-rsa-with-aes128-cbc-sha, tls-rsa-with-aes256-cbc-sha, tls-rsa-with-aes128-cbc-sha256, tls-rsa-with-aes256-cbc-sha256

Notes

This element is mandatory.

Introduced

16.0.R1

Platforms

All

server-tls-profile [server-profile-name] string

Synopsis

Enter the server-tls-profile list instance

Context

configure system security tls server-tls-profile string

Tree

server-tls-profile

Max. Elements

Introduced

16.0.R1

Platforms

All

[server-profile-name] string

Synopsis

TLS HELLO request timer

Context

configure system security tls server-tls-profile string tls-re-negotiate-timer number

Tree

tls-re-negotiate-timer

Range

0 to 65000

Default

Units

minutes

Introduced

16.0.R1

Platforms

All

trust-anchor-profile [trust-anchor-profile-name] string

Synopsis

Enter the trust-anchor-profile list instance

Context

configure system security tls trust-anchor-profile string

Tree

trust-anchor-profile

Max. Elements

Introduced

16.0.R1

Platforms

All

[trust-anchor-profile-name] string

Synopsis

Name of TLS trust anchor profile

Context

configure system security tls trust-anchor-profile string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

All

trust-anchor [ca-profile-name] reference

Synopsis

Add a list entry for trust-anchor

Context

configure system security tls trust-anchor-profile string trust-anchor reference

Tree

trust-anchor

Max. Elements

Introduced

16.0.R1

Platforms

All

[ca-profile-name] reference

Synopsis

count number

Synopsis

Number of unsuccessful login attempts

Context

configure system security user-params attempts count number

Tree

count

Range

1 to 64

Default

Introduced

16.0.R1

Platforms

All

lockout number

Synopsis

Lockout period after unsuccessful login attempts

Context

configure system security user-params attempts lockout number

Tree

lockout

Range

0 to 1440

Default

Units

minutes

Introduced

16.0.R1

Platforms

All

time number

Synopsis

Time frame of unsuccessful login attempts

Context

configure system security user-params attempts time number

Tree

time

Range

0 to 60

Default

Units

minutes

Introduced

16.0.R1

Platforms

All

authentication-order

Synopsis

aging

Range

1 to 500

Units

days

Introduced

16.0.R1

Platforms

All

Minimum length required for local passwords

Context

configure system security user-params local-user password complexity-rules minimum-length number

Tree

minimum-length

Range

6 to 50

bcrypt

Options

bcrypt, sha2-pbkdf2, sha3-pbkdf2

Introduced

20.7.R1

Platforms

All

history-size number

Synopsis

New password to match against previous ones

Context

configure system security user-params local-user password history-size number

Tree

history-size

Range

0 to 20

Introduced

16.0.R1

Platforms

All

minimum-age number

Synopsis

Minimum age required for a password before changing it

Context

configure system security user-params local-user password minimum-age number

Tree

minimum-age

Range

0 to 86400

Default

600

Units

seconds

Introduced

16.0.R1

Platforms

All

minimum-change number

Synopsis

Minimum distance required between the old and the new password

Context

configure system security user-params local-user password minimum-change number

Tree

minimum-change

Range

1 to 20

Default

Introduced

16.0.R1

Platforms

All

user [user-name] string

Synopsis

Enter the user list instance

Context

configure system security user-params local-user user string

Tree

user

Introduced

16.0.R1

Platforms

All

[user-name] string

Synopsis

Platforms

All

ftp boolean

Synopsis

Allow FTP access

Context

configure system security user-params local-user user string access ftp boolean

Tree

ftp

Default

false

Introduced

16.0.R1

Platforms

All

grpc boolean

Synopsis

Allow gRPC access

Context

configure system security user-params local-user user string access grpc boolean

Tree

grpc

Default

false

Introduced

16.0.R1

Platforms

All

li boolean

Synopsis

Enable/disable access to LI.

Context

configure system security user-params local-user user string access li boolean

cli-engine

Default

md-cli

Options

classic-cli, md-cli

Max. Elements

Notes

This element is ordered by the user.

Introduced

16.0.R1

Platforms

All

console

Synopsis

Enter the console context

Context

configure system security user-params local-user user string console

Tree

console

Introduced

16.0.R1

Platforms

All

cannot-change-password boolean

Synopsis

Change password privileges

Context

configure system security user-params local-user user string console cannot-change-password boolean

Tree

cannot-change-password

Default

false

Introduced

16.0.R1

Platforms

All

login-exec (sat-url | cflash-url | ftp-tftp-url | filename)

Synopsis

File to execute when a user successfully logs in

Context

configure system security user-params local-user user string console login-exec (sat-url | cflash-url | ftp-tftp-url | filename)

Tree

String Length

1 to 200

Introduced

16.0.R1

Platforms

All

member reference

Synopsis

User profiles for this user

Context

configure system security user-params local-user user string console member reference

Tree

member

Reference

configure system security aaa local-profiles profile string

Enter the snmp context

Context

configure system security user-params local-user user string snmp

Tree

snmp

Introduced

16.0.R1

Platforms

All

authentication

Synopsis

Enable the authentication context

Context

configure system security user-params local-user user string snmp authentication

Tree

authentication

Introduced

16.0.R1

Platforms

All

Platforms

All

group string

Synopsis

Introduced

16.0.R1

Platforms

All

window number

Synopsis

Time interval to measure exception messages

Context

configure system security vprn-network-exceptions window number

Tree

window

Range

1 to 60

Default

Units

seconds

Introduced

16.0.R1

Platforms

All

selective-fib boolean

Synopsis

FIB assigned to the system

Context

configure system selective-fib boolean

Tree

selective-fib

Default

false

Introduced

16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Administrative state of the failure recovery process

Context

configure system switch-fabric failure-recovery admin-state keyword

Tree

configure system telemetry

Default

disable

Options

enable, disable

Introduced

21.2.R1

Platforms

7450 ESS, 7750 SR-7, 7950 XRS-20, 7950 XRS-20e, 7950 XRS-40

sfm-loss-threshold number

Synopsis

Number of SFMs that can fail before SFM overload state

Context

configure system switch-fabric sfm-loss-threshold number

Tree

sfm-loss-threshold

Description

This command specifies the number of SFMs that are permitted to fail before the system goes into SFM overload state.

The default value for the 7750 SR-7s is 1 and the default value for the 7750 SR-14s is 2. Users can select the SFM limit based on the number possible for the system minus one. For the 7750 SR-7s, the limit is 3 and the limit for the 7750 SR-14s is 7.

Range

1 to 7

Introduced

20.5.R1

Platforms

7750 SR-7s, 7750 SR-14s

telemetry

Synopsis

Enter the telemetry context

Context

Tree

telemetry

Description

Commands in this context configure the parameters for the dial-out telemetry functionality.

Introduced

20.2.R1

Platforms

All

destination-group [name] string

Synopsis

destination [address] (ipv4-address-no-zone | ipv6-address-no-zone | fully-qualified-domain-name) port number

Synopsis

Enter the destination list instance

Context

configure system telemetry destination-group string destination (ipv4-address-no-zone | ipv6-address-no-zone | fully-qualified-domain-name) port number

Tree

destination

Max. Elements

Notes

This element is ordered by the user.

Introduced

20.5.R1

Platforms

All

[address] (ipv4-address-no-zone | ipv6-address-no-zone | fully-qualified-domain-name)

Synopsis

Address of the destination within the destination group

Context

configure system telemetry destination-group string destination (ipv4-address-no-zone | ipv6-address-no-zone | fully-qualified-domain-name) port number

String Length

1 to 255

Notes

This element is part of a list key.

Introduced

20.5.R1

Platforms

All

port number

Synopsis

Introduced

20.5.R1

Platforms

All

idle-time number

Synopsis

Time until the first TCP keepalive probe is sent

Context

configure system telemetry destination-group string tcp-keepalive idle-time number

Tree

idle-time

Range

1 to 100000

Default

600

Units

seconds

Introduced

20.5.R1

Platforms

All

interval number

Synopsis

Time between TCP keepalive probes

Context

configure system telemetry destination-group string tcp-keepalive interval number

Tree

Range

1 to 100000

Default

Units

seconds

Introduced

20.5.R1

Platforms

All

retries number

Synopsis

Number of probe retries before closing the connection

Context

configure system telemetry destination-group string tcp-keepalive retries number

Tree

retries

Description

This command configures the number of missed TCP keepalive probes before closing the TCP connection and attempting to reach the other destinations within the same destination group.

Range

3 to 100

Default

Introduced

20.5.R1

Platforms

All

tls-client-profile reference

Synopsis

TLS client profile assigned to the destination group

Context

Platforms

All

[name] string

Synopsis

Persistent subscription name

Context

configure system telemetry persistent-subscriptions subscription string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

20.5.R1

Platforms

All

admin-state keyword

Synopsis

Introduced

20.5.R1

Platforms

All

local-source-address (ipv4-address-no-zone | ipv6-address-no-zone)

Synopsis

Local IP address of packets sent from the source

Context

configure system telemetry persistent-subscriptions subscription string local-source-address (ipv4-address-no-zone | ipv6-address-no-zone)

Tree

local-source-address

Introduced

20.5.R1

Platforms

All

mode keyword

Synopsis

Mode for telemetry notifications

Context

configure system telemetry persistent-subscriptions subscription string mode keyword

Tree

mode

Description

This command specifies the subscription path mode for telemetry notifications sent out for the persistent subscription.

Options

target-defined, on-change, sample

Introduced

20.5.R1

Platforms

All

originated-qos-marking keyword

Synopsis

QoS marking used for telemetry notification packets

Context

configure system telemetry persistent-subscriptions subscription string originated-qos-marking keyword

Tree

originated-qos-marking

Options

Introduced

20.5.R1

Platforms

All

sample-interval number

Synopsis

Sampling interval for the persistent subscription

Context

configure system telemetry persistent-subscriptions subscription string sample-interval number

Tree

sample-interval

Description

Enter the cflash-cap-alarm-percent list instance

Context

configure system thresholds cflash-cap-alarm-percent string

Tree

cflash-cap-alarm-percent

Introduced

16.0.R1

Platforms

All

[cflash-id] string

Synopsis

Capacity that monitors the cflash (compact flash) assigned in this command

Context

configure system thresholds cflash-cap-alarm-percent string

String Length

1 to 200

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

All

falling-threshold number

Synopsis

Specifies the falling threshold percentage value for sampled statistics of cflash capacity alarm entry.

Context

configure system thresholds cflash-cap-alarm-percent string falling-threshold number

Tree

falling-threshold

Range

0 to 100

Units

percent

Introduced

16.0.R4

Platforms

All

interval number

Synopsis

Polling period over which data is sampled and compared

Context

configure system thresholds cflash-cap-alarm-percent string interval number

Tree

Range

1 to 2147483647

Notes

This element is mandatory.

Introduced

16.0.R1

Platforms

All

rising-threshold number

Synopsis

Specifies the rising threshold percentage value for sampled statistics of cflash capacity alarm entry.

Context

configure system thresholds cflash-cap-alarm-percent string rising-threshold number

Tree

Range

0 to 100

Units

percent

Notes

This element is mandatory.

Introduced

16.0.R4

Platforms

All

rmon-event-type keyword

Synopsis

Notification type specifying action when event occurs

Context

interval number

Synopsis

Polling period over which data is sampled and compared

Context

configure system thresholds cflash-cap-warn-percent string interval number

Tree

Range

1 to 2147483647

Notes

This element is mandatory.

Introduced

16.0.R1

Platforms

All

rising-threshold number

Synopsis

Specifies the rising threshold percentage value for sampled statistics of cflash capacity alarm entry.

Context

configure system thresholds cflash-cap-warn-percent string rising-threshold number

Tree

Range

0 to 100

Units

percent

Notes

This element is mandatory.

Introduced

16.0.R4

Platforms

All

rmon-event-type keyword

Synopsis

Notification type specifying action when event occurs

Context

rising-threshold number

Synopsis

Specifies the threshold for the sampled statistic for the rising threshold event.

Context

configure system thresholds kb-memory-use-alarm rising-threshold number

Tree

Range

-2147483648 to 2147483647

Notes

This element is mandatory.

Introduced

16.0.R4

Platforms

All

rmon-event-type keyword

Synopsis

Notification type specifying action when event occurs

Context

rising-threshold number

Synopsis

Specifies the threshold for the sampled statistic for the rising threshold event.

Context

configure system thresholds kb-memory-use-warn rising-threshold number

Tree

Range

-2147483648 to 2147483647

Notes

This element is mandatory.

Introduced

16.0.R4

Platforms

All

rmon-event-type keyword

Synopsis

Notification type specifying action when event occurs

Context

Falling threshold for the sampled statistic

Context

configure system thresholds rmon alarm number falling-threshold number

Tree

falling-threshold

Description

This command specifies a falling threshold for the sampled statistic. When the current sampled value is less than or equal to this threshold and the value at the last sampling interval was greater than this threshold, a single threshold crossing event is generated. A single threshold crossing event is also generated if the first sample taken is less than or equal to this threshold and the associated startup-alarm command is set to falling or either.

After a falling threshold crossing event is generated, another such event is not generated until the sampled value exceeds this threshold and reaches or exceeds the rising-threshold command setting.

Range

-2147483648 to 2147483647

Introduced

16.0.R1

Platforms

All

interval number

Synopsis

Polling period over which data is sampled and compared

Context

configure system thresholds rmon alarm number interval number

Tree

Description

This command specifies the polling interval over which the data is sampled and compared with the rising and falling thresholds

Range

1 to 2147483647

Notes

This element is mandatory.

Introduced

16.0.R1

Platforms

All

owner string

Synopsis

Owner that created this entry and uses the resources

Context

configure system thresholds rmon alarm number owner string

Tree

owner

String Length

1 to 80

Default

TiMOS CLI

Introduced

16.0.R1

Platforms

All

rising-event number

Synopsis

RMON event ID used when a rising event threshold event occurs

Context

configure system thresholds rmon alarm number rising-event number

Tree

rising-event

Range

0 to 65400

Introduced

16.0.R1

Platforms

All

rising-threshold number

Synopsis

Rising threshold for the sampled statistic

Context

configure system thresholds rmon alarm number rising-threshold number

Tree

Description

This command specifies the rising threshold for the sampled statistic. When the current sampled value is greater than or equal to this threshold and the value at the last sampling interval was below this threshold, a single threshold crossing event is generated. A single threshold crossing event is also generated if the first sample taken is greater than or equal to this threshold and the associated startup-alarm command is set to rising or either.

After a rising threshold crossing event is generated, another such event is not generated until the sampled value falls below this threshold and reaches or falls below the falling-threshold command setting.

Range

-2147483648 to 2147483647

Introduced

16.0.R1

Platforms

All

sample-type keyword

Synopsis

Method to sample the selected variable and calculate the value comparing against the thresholds

Context

configure system thresholds rmon alarm number sample-type keyword

Tree

sample-type

Default

absolute

Options

absolute, delta

Introduced

16.0.R1

Platforms

All

startup-alarm keyword

Synopsis

Alarm to send when this entry is first set to valid

Context

configure system thresholds rmon alarm number startup-alarm keyword

Tree

startup-alarm

Default

either

Options

rising, falling, either

Introduced

16.0.R1

Platforms

All

variable-oid string

Synopsis

Platforms

All

owner string

Synopsis

Owner that created this entry and uses the resources

Context

configure system thresholds rmon event number owner string

Tree

owner

String Length

16.0.R1

Platforms

All

[summer-time-zone] string

Synopsis

Introduced

16.0.R1

Platforms

All

hours-minutes string

Synopsis

Hour and number of minutes after which the daylight savings time ends

Context

configure system time dst-zone string end hours-minutes string

Tree

hours-minutes

String Length

Default

00:00

Introduced

16.0.R1

Platforms

All

month keyword

Synopsis

Month of the week when the daylight savings time setting ends

Context

configure system time dst-zone string end month keyword

Tree

month

Default

january

Options

january, february, march, april, may, june, july, august, september, october, november, december

Introduced

16.0.R1

Platforms

All

week keyword

Synopsis

Week of the month when the daylight savings time setting ends

Context

configure system time dst-zone string end week keyword

Tree

week

Default

first

Options

first, second, third, fourth, last

Introduced

16.0.R1

Platforms

All

offset number

Synopsis

Offset for summer time setting

Context

configure system time dst-zone string offset number

Tree

offset

Range

0 to 60

Default

Units

minutes

Introduced

16.0.R1

Platforms

All

start

Synopsis

Enter the start context

Context

configure system time dst-zone string start

Tree

Introduced

16.0.R1

Platforms

All

day keyword

Synopsis

Day of the week when the daylight savings time setting starts

Context

configure system time dst-zone string start day keyword

Tree

day

Default

sunday

Options

sunday, monday, tuesday, wednesday, thursday, friday, saturday

Introduced

16.0.R1

Platforms

All

hours-minutes string

Synopsis

Hour and number of minutes after which the daylight savings time starts

Context

configure system time dst-zone string start hours-minutes string

Tree

hours-minutes

String Length

Default

00:00

Introduced

16.0.R1

Platforms

All

month keyword

Synopsis

Month of the week when the daylight savings time setting starts

Context

configure system time dst-zone string start month keyword

Tree

month

Default

january

Options

january, february, march, april, may, june, july, august, september, october, november, december

Introduced

16.0.R1

Platforms

All

week keyword

Synopsis

Week of the month when the daylight savings time setting starts

Context

Introduced

16.0.R1

Platforms

All

authentication-check boolean

Synopsis

Platforms

All

key string

Synopsis

Key to authenticate NTP packets

Context

version number

Synopsis

NTP version number generated or accepted by this node in NTP packets

Context

configure system time ntp broadcast reference interface-name string version number

Tree

Range

2 to 4

1 to 32

Notes

This element is part of a list key.

Introduced

16.0.R1

Platforms

All

authenticate boolean

Synopsis

Platforms

All

version number

Synopsis

NTP version number generated by the node

Context

configure system time ntp multicast version number

Tree

configure system time ntp multicast-client

Description

This command specifies the NTP version number that is generated by the node. This command does not need to be configured when in client mode, in which case all three versions are accepted.

Range

2 to 4

Default

Introduced

16.0.R1

Platforms

All

multicast-client

Synopsis

Enable the multicast-client context

Context

Tree

multicast-client

Introduced

16.0.R1

Platforms

All

authenticate boolean

Synopsis

Platforms

All

prefer boolean

Synopsis

NTP server from which is preferred to receive time

Context

configure system time ntp peer (ipv4-address-no-zone | ipv6-address-no-zone) router-instance string prefer boolean

Tree

prefer

Default

false

Introduced

16.0.R1

Platforms

All

version number

Synopsis

NTP version number generated by the node

Context

configure system time ntp peer (ipv4-address-no-zone | ipv6-address-no-zone) router-instance string version number

Tree

Description

This command specifies the NTP version number that is generated by the node. This command does not need to be configured when in client mode, in which case all three versions are accepted.

Range

2 to 4

Default

Introduced

16.0.R1

Platforms

All

server [ip-address] (ipv4-address-no-zone | ipv6-address-no-zone | keyword) router-instance string

Synopsis

Enter the server list instance

Context

configure system time ntp server (ipv4-address-no-zone | ipv6-address-no-zone | keyword) router-instance string

Tree

Introduced

16.0.R1

Platforms

All

[ip-address] (ipv4-address-no-zone | ipv6-address-no-zone | keyword)

Synopsis

Platforms

All

prefer boolean

Synopsis

NTP server from which is preferred to receive time

Context

configure system time ntp server (ipv4-address-no-zone | ipv6-address-no-zone | keyword) router-instance string prefer boolean

Tree

prefer

Default

false

Introduced

16.0.R1

Platforms

All

version number

Synopsis

NTP version number generated by the node

Context

configure system time ntp server (ipv4-address-no-zone | ipv6-address-no-zone | keyword) router-instance string version number

Tree

Description

This command specifies the NTP version number that is generated by the node. This command does not need to be configured when in client mode, in which case all three versions are accepted.

Range

2 to 4

Default

Introduced

16.0.R1

Platforms

All

prefer-local-time boolean

Synopsis

Range

64 to 1024

Default

Units

seconds

Introduced

16.0.R1

Platforms

All

prefer boolean

Synopsis

Preference value for this SNTP server

Context

configure system time sntp server (ipv4-address-no-zone | ipv6-address-no-zone) prefer boolean

Tree

prefer

Default

false

Introduced

16.0.R1

Platforms

All

version number

Synopsis

SNTP version supported by this server

Context

configure system time sntp server (ipv4-address-no-zone | ipv6-address-no-zone) version number

Tree