9. application-assurance commands

configure
— aarp number
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— peer (ipv4-address-no-zone | ipv6-address-no-zone)
— sap
— encap-type keyword
— sap-id string
— spoke-sdp string
— priority number
— apply-groups reference
— apply-groups-exclude reference
— cflowd
— field string
— apply-groups reference
— apply-groups-exclude reference
— comment string
— attribute string
— apply-groups reference
— apply-groups-exclude reference
— comment string
— group number
— apply-groups reference
— apply-groups-exclude reference
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— file string
— cflowd
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— collector (ipv4-address-no-zone | ipv6-address-no-zone) port number
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— apply-groups reference
— apply-groups-exclude reference
— flow-rate number
— flow-rate-2 number
— apply-groups reference
— apply-groups-exclude reference
— admin-state keyword
— field string
— field-selection keyword
— collector number
— address (ipv4-address-no-zone | ipv6-address-no-zone) port number
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— apply-groups reference
— apply-groups-exclude reference
— description string
— vlan-id number
— mode keyword
— prefix string
— apply-groups reference
— apply-groups-exclude reference
— apply-groups reference
— apply-groups-exclude reference
— admin-state keyword
— field string
— field-selection keyword
— flow-rate number
— flow-rate-2 number
— apply-groups reference
— apply-groups-exclude reference
— admin-state keyword
— field string
— field-selection keyword
— apply-groups reference
— apply-groups-exclude reference
— admin-state keyword
— field string
— field-selection keyword
— apply-groups reference
— apply-groups-exclude reference
— flow-rate number
— flow-rate-2 number
— apply-groups reference
— apply-groups-exclude reference
— admin-state keyword
— field string
— field-selection keyword
— volume
— rate number
— apply-groups reference
— apply-groups-exclude reference
— admin-state keyword
— field string
— field-selection keyword
— dns-ip-cache string
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— domain string
— apply-groups reference
— apply-groups-exclude reference
— expression string
— trusted-server-address (ipv4-address-no-zone | ipv6-address-no-zone)
— apply-groups reference
— apply-groups-exclude reference
— server-name string
— high-watermark number
— low-watermark number
— size number
— static-address (ipv4-address-no-zone | ipv6-address-no-zone)
— http-enrich string
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— field string
— anti-spoof boolean
— apply-groups reference
— apply-groups-exclude reference
— calling-line-id boolean
— encode
— cert-profile reference
— key
— type keyword
— value string
— name string
— static-string string
— rat-type keyword
— apply-groups reference
— apply-groups-exclude reference
— rat-string string
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— error-code number
— apply-groups reference
— apply-groups-exclude reference
— http-host string
— participant-id string
— template number
— http-notification string
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— interval (number | keyword)
— script-url string
— template number
— http-redirect string
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— vlan-id number
— description string
— redirect-https boolean
— redirect-url string
— tcp-client-reset boolean
— template number
— partition number
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— rat-type keyword
— apply-groups reference
— apply-groups-exclude reference
— rtt-threshold (number | keyword)
— rtt-threshold (number | keyword)
— aa-sub-remote boolean
— source keyword
— apply-groups reference
— apply-groups-exclude reference
— rat-type keyword
— apply-groups reference
— apply-groups-exclude reference
— rtt-threshold (number | keyword)
— rtt-threshold (number | keyword)
— source-level keyword
— apply-groups reference
— apply-groups-exclude reference
— aqp-initial-lookup boolean
— cflowd
— export-type keyword
— admin-state keyword
— app-group reference
— apply-groups reference
— apply-groups-exclude reference
— rate-choice keyword
— application reference
— apply-groups reference
— apply-groups-exclude reference
— rate-choice keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— event-log string
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— buffer-type keyword
— max-entries number
— syslog
— address (ipv4-address-no-zone | ipv6-address-no-zone)
— description string
— facility keyword
— port number
— severity keyword
— vlan-id number
— gtp
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— gtp-filter string
— apply-groups reference
— apply-groups-exclude reference
— description string
— gtp-in-gtp keyword
— default-action keyword
— entry number
— action keyword
— apn string
— apply-groups reference
— apply-groups-exclude reference
— src-gsn
— ip-prefix (ipv4-prefix | ipv6-prefix)
— ip-prefix-list reference
— log
— action keyword
— event-log reference
— max-payload-length number
— default-action keyword
— entry number
— action keyword
— apply-groups reference
— apply-groups-exclude reference
— value (number | keyword)
— default-action keyword
— entry number
— action keyword
— apply-groups reference
— apply-groups-exclude reference
— value (number | keyword)
— gtpc-inspection boolean
— log
— action keyword
— event-log reference
— mode keyword
— http-x-online-host boolean
— ip-prefix-list string
— apply-groups reference
— apply-groups-exclude reference
— description string
— prefix (ipv4-prefix | ipv6-prefix)
— apply-groups reference
— apply-groups-exclude reference
— name string
— policy
— entry number
— admin-state keyword
— application reference
— apply-groups reference
— apply-groups-exclude reference
— description string
— expression number
— apply-groups reference
— apply-groups-exclude reference
— eq string
— neq string
— type keyword
— eq
— port-list reference
— port-number number
— neq
— port-list reference
— port-number number
— eq (number | keyword)
— neq (number | keyword)
— eq
— ip-prefix (ipv4-prefix | ipv6-prefix)
— ip-prefix-list reference
— neq
— ip-prefix (ipv4-prefix | ipv6-prefix)
— ip-prefix-list reference
— eq (string | named-item)
— neq (string | named-item)
— eq
— dns-ip-cache reference
— ip-prefix (ipv4-prefix | ipv6-prefix)
— ip-prefix-list reference
— address (ipv4-address-no-zone | ipv6-address-no-zone)
— netmask (ipv4-address-no-zone | ipv6-address-no-zone)
— neq
— dns-ip-cache reference
— ip-prefix (ipv4-prefix | ipv6-prefix)
— ip-prefix-list reference
— address (ipv4-address-no-zone | ipv6-address-no-zone)
— netmask (ipv4-address-no-zone | ipv6-address-no-zone)
— eq
— first-packet-policy keyword
— port-list reference
— port-number number
— range
— end number
— start number
— gt
— port-number number
— lt
— port-number number
— neq
— port-list reference
— port-number number
— range
— end number
— start number
— app-group string
— apply-groups reference
— apply-groups-exclude reference
— charging-group reference
— description string
— export-id number
— app-profile string
— aa-sub-suppressible boolean
— apply-groups reference
— apply-groups-exclude reference
— capacity-cost number
— characteristic reference
— apply-groups reference
— apply-groups-exclude reference
— value reference
— description string
— divert boolean
— entry number
— action
— apply-groups reference
— apply-groups-exclude reference
— anl reference
— dual-bucket reference
— single-bucket reference
— dns-ip-cache reference
— drop boolean
— event-log reference
— event-log reference
— policer-name reference
— event-log reference
— policer-name reference
— drop-scope keyword
— event-log reference
— gtp-filter reference
— http-enrich reference
— http-error-redirect reference
— http-notification reference
— flow-type keyword
— name reference
— all-inclusive boolean
— mirror-service reference
— event-log reference
— remark
— dscp
— in-profile keyword
— out-profile keyword
— fc keyword
— priority keyword
— sctp-filter reference
— session-filter reference
— tcp-mss-adjust number
— tcp-validate reference
— tls-enrich reference
— characteristic reference
— name reference
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— match
— aa-sub
— esm
— eq string
— neq string
— esm-mac
— eq string
— neq string
— sap
— eq string
— neq string
— eq string
— neq string
— transit
— eq string
— neq string
— aa-sub-tethering keyword
— eq reference
— neq reference
— eq reference
— neq reference
— apply-groups reference
— apply-groups-exclude reference
— characteristic reference
— apply-groups reference
— apply-groups-exclude reference
— eq reference
— neq reference
— eq reference
— neq reference
— dscp
— eq keyword
— neq keyword
— dst-ip
— eq
— ip-prefix (ipv4-prefix | ipv6-prefix)
— ip-prefix-list reference
— neq
— ip-prefix (ipv4-prefix | ipv6-prefix)
— ip-prefix-list reference
— eq
— port-list reference
— port-number number
— range
— end number
— start number
— neq
— port-list reference
— port-number number
— range
— end number
— start number
— flow-attribute string
— apply-groups reference
— apply-groups-exclude reference
— eq number
— gte number
— lt number
— eq (number | keyword)
— neq (number | keyword)
— src-ip
— eq
— ip-prefix (ipv4-prefix | ipv6-prefix)
— ip-prefix-list reference
— neq
— ip-prefix (ipv4-prefix | ipv6-prefix)
— ip-prefix-list reference
— eq
— port-list reference
— port-number number
— range
— end number
— start number
— neq
— port-list reference
— port-number number
— range
— end number
— start number
— traffic-direction keyword
— characteristic string
— apply-groups reference
— apply-groups-exclude reference
— default-value string
— value string
— application string
— app-group reference
— apply-groups reference
— apply-groups-exclude reference
— charging-group reference
— description string
— export-id number
— apply-groups reference
— apply-groups-exclude reference
— charging-group string
— apply-groups reference
— apply-groups-exclude reference
— description string
— export-id number
— notify-start-stop keyword
— custom-protocol string
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— expression number
— apply-groups reference
— apply-groups-exclude reference
— direction keyword
— eq string
— offset number
— ip-protocol keyword
— default-charging-group reference
— aa-sub
— sap string
— apply-groups reference
— apply-groups-exclude reference
— characteristic reference
— apply-groups reference
— apply-groups-exclude reference
— value reference
— spoke-sdp string
— apply-groups reference
— apply-groups-exclude reference
— characteristic reference
— apply-groups reference
— apply-groups-exclude reference
— value reference
— transit string
— apply-groups reference
— apply-groups-exclude reference
— characteristic reference
— apply-groups reference
— apply-groups-exclude reference
— value reference
— port-list string
— apply-groups reference
— apply-groups-exclude reference
— description string
— port number
— range start number end number
— sctp-filter string
— apply-groups reference
— apply-groups-exclude reference
— description string
— event-log reference
— ppid
— default-action keyword
— entry number
— action keyword
— apply-groups reference
— apply-groups-exclude reference
— value (number | keyword)
— max number
— min number
— session-filter string
— apply-groups reference
— apply-groups-exclude reference
— action keyword
— event-log reference
— description string
— entry number
— action
— deny
— event-log reference
— http-redirect reference
— permit
— tcp-optimizer reference
— apply-groups reference
— apply-groups-exclude reference
— description string
— match
— dst-ip
— dns-ip-cache reference
— ip-prefix (ipv4-prefix | ipv6-prefix)
— ip-prefix-list reference
— eq number
— gt number
— lt number
— port-list reference
— range
— end number
— start number
— ip-protocol (number | keyword)
— src-ip
— ip-prefix (ipv4-prefix | ipv6-prefix)
— ip-prefix-list reference
— eq number
— gt number
— lt number
— port-list reference
— range
— end number
— start number
— shallow-inspection boolean
— accounting-policy reference
— apply-groups reference
— apply-groups-exclude reference
— collect-stats boolean
— gtp-filter-stats boolean
— policer-stats boolean
— sctp-filter-stats boolean
— tcp-validate-stats boolean
— accounting-policy reference
— apply-groups reference
— apply-groups-exclude reference
— collect-stats boolean
— accounting-policy reference
— apply-groups reference
— apply-groups-exclude reference
— collect-stats boolean
— accounting-policy reference
— apply-groups reference
— apply-groups-exclude reference
— collect-stats boolean
— tethering-stats boolean
— traffic-type-stats boolean
— accounting-policy reference
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— collect-stats boolean
— aa-sub
— accounting-policy reference
— app-group reference
— apply-groups reference
— apply-groups-exclude reference
— export-using keyword
— application reference
— apply-groups reference
— apply-groups-exclude reference
— export-using keyword
— apply-groups reference
— apply-groups-exclude reference
— charging-group reference
— apply-groups reference
— apply-groups-exclude reference
— export-using keyword
— collect-stats boolean
— exclude-tcp-retrans boolean
— protocol string
— apply-groups reference
— apply-groups-exclude reference
— export-using keyword
— usage-monitoring boolean
— aa-sub-study keyword
— aa-sub
— esm string
— esm-mac string
— sap string
— spoke-sdp string
— transit string
— accounting-policy reference
— apply-groups reference
— apply-groups-exclude reference
— collect-stats boolean
— tcp-validate string
— apply-groups reference
— apply-groups-exclude reference
— description string
— log
— all boolean
— event-log reference
— strict boolean
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— expected-ttl number
— criteria keyword direction keyword
— apply-groups reference
— apply-groups-exclude reference
— high-watermark number
— low-watermark number
— gtp-filter reference criteria keyword direction keyword
— apply-groups reference
— apply-groups-exclude reference
— high-watermark number
— low-watermark number
— gtp-filter-entry reference entry-id number direction keyword
— apply-groups reference
— apply-groups-exclude reference
— high-watermark number
— low-watermark number
— policer string direction keyword
— apply-groups reference
— apply-groups-exclude reference
— high-watermark number
— low-watermark number
— sctp-filter reference criteria keyword direction keyword
— apply-groups reference
— apply-groups-exclude reference
— high-watermark number
— low-watermark number
— sctp-filter-entry reference entry-id reference direction keyword
— apply-groups reference
— apply-groups-exclude reference
— high-watermark number
— low-watermark number
— session-filter reference criteria keyword direction keyword
— apply-groups reference
— apply-groups-exclude reference
— high-watermark number
— low-watermark number
— session-filter-entry reference entry-id reference direction keyword
— apply-groups reference
— apply-groups-exclude reference
— high-watermark number
— low-watermark number
— tcp-validate reference direction keyword
— apply-groups reference
— apply-groups-exclude reference
— high-watermark number
— low-watermark number
— transit-ip-policy number
— apply-groups reference
— apply-groups-exclude reference
— default-app-profile reference
— description string
— detect-seen-ip boolean
— dhcp
— admin-state keyword
— admin-state keyword
— application-policy reference
— radius
— admin-state keyword
— authentication-policy reference
— static-aa-sub string
— app-profile reference
— apply-groups reference
— apply-groups-exclude reference
— ip (ipv4-unicast-address | ipv6-prefix)
— sub-ident-policy reference
— admin-state keyword
— inactivity-monitor boolean
— apply-groups reference
— apply-groups-exclude reference
— description string
— entry number
— aa-sub reference
— apply-groups reference
— apply-groups-exclude reference
— match
— aa-sub-ip (ipv4-prefix | ipv6-prefix)
— network-ip (ipv4-prefix | ipv6-prefix)
— static-aa-sub string
— app-profile reference
— apply-groups reference
— apply-groups-exclude reference
— is-remote boolean
— wap1x
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— policer
— action keyword
— pir keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— mbs number
— rate-percentage number
— cir keyword
— pir keyword
— apply-groups reference
— apply-groups-exclude reference
— cbs number
— cir (number | keyword)
— cbs number
— cir (number | keyword)
— mbs number
— pir (number | keyword)
— cbs number
— cir (number | keyword)
— mbs number
— pir (number | keyword)
— description string
— mbs number
— pir (number | keyword)
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— cbs number
— cir (number | keyword)
— description string
— mbs number
— pir (number | keyword)
— daily
— end string
— on keyword
— start string
— weekly
— end
— day keyword
— time string
— start
— day keyword
— time string
— action keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— granularity keyword
— limit-gtp-flows boolean
— peak-flow-count (number | keyword)
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— peak-flow-count (number | keyword)
— daily
— end string
— on keyword
— start string
— weekly
— end
— day keyword
— time string
— start
— day keyword
— time string
— action keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— granularity keyword
— peak-flow-setup-rate (number | keyword)
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— peak-flow-setup-rate (number | keyword)
— daily
— end string
— on keyword
— start string
— weekly
— end
— day keyword
— time string
— start
— day keyword
— time string
— action keyword
— pir keyword
— apply-groups reference
— apply-groups-exclude reference
— mbs number
— pir (number | keyword)
— mbs number
— pir (number | keyword)
— description string
— granularity keyword
— mbs number
— pir (number | keyword)
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— mbs number
— pir (number | keyword)
— daily
— end string
— on keyword
— start string
— weekly
— end
— day keyword
— time string
— start
— day keyword
— time string
— tcp-optimizer string
— apply-groups reference
— apply-groups-exclude reference
— dack-timeout number
— description string
— initial-cwnd number
— initial-ss-threshold (number | keyword)
— tcp-stack keyword
— url-filter string
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— allow
— block-http-redirect reference
— description string
— http-redirect reference
— icap
— custom-x-header string
— allow
— block-http-redirect reference
— http-redirect reference
— server (ipv4-address-no-zone | ipv6-address-no-zone) port number
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— vlan-id number
— allow-list reference
— deny-list reference
— apply-groups reference
— apply-groups-exclude reference
— allow
— block-http-redirect reference
— http-redirect reference
— category-set number
— entry number
— apply-groups reference
— apply-groups-exclude reference
— category-name string
— expression string
— classifier keyword
— allow
— block-http-redirect reference
— default-profile reference
— dns-server (ipv4-address-no-zone | ipv6-address-no-zone)
— fqdn string
— http-redirect reference
— profile string
— apply-groups reference
— apply-groups-exclude reference
— block
— category string
— description string
— vlan-id number
— url-list string
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— file string
— host-expressions boolean
— key string
— size keyword
— field string
— apply-groups reference
— apply-groups-exclude reference
— comment string
— error-code number
— apply-groups reference
— apply-groups-exclude reference
— comment string
— template number
— apply-groups reference
— apply-groups-exclude reference
— comment string
— template number
— apply-groups reference
— apply-groups-exclude reference
— comment string
— template number
— apply-groups reference
— apply-groups-exclude reference
— comment string
— protocol string
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— apply-groups reference
— apply-groups-exclude reference
— description string
— access-algorithm keyword
— retry number
— router-instance string
— server number
— address string
— apply-groups reference
— apply-groups-exclude reference
— port number
— secret string
— source-address string
— timeout number
— significant-change number
— bit-rate-high-wmark (number | keyword)
— bit-rate-low-wmark number
— datapath-cpu-high-wmark (number | keyword)
— flow-setup-rate-high-wmark (number | keyword)
— packet-rate-high-wmark (number | keyword)

9.1. application-assurance command descriptions

application-assurance

Synopsis

Enter the application-assurance context

Context

configure application-assurance

Tree

application-assurance

Description

Commands in this context configure the attributes of Application Assurance (AA) operations.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aarp [aarp-id] number

Synopsis

Enter the aarp list instance

Context

configure application-assurance aarp number

Tree

aarp

Description

Commands in this context define an Application Assurance Redundancy Protocol (AARP) instance. This instance is paired with the same AARP ID in a peer node, as part of the configuration to provide flow and packet asymmetry removal for traffic of a multi-homed SAP or spoke SDP.

Max. Elements

100

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[aarp-id] number

Synopsis

AARP ID

Context

configure application-assurance aarp number

Range

1 to 65535

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the AARP instance

Context

configure application-assurance aarp number admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance aarp number description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

master-selection-mode keyword

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

AARP master selection mode

Context

configure application-assurance aarp number master-selection-mode keyword

Tree

master-selection-mode

Description

This command configures the AARP mode of operation with the peer instance. The modes affect the AARP state machine behavior according to the specified behavior. 

Default

minimize-switchovers

Options

minimize-switchovers, inter-chassis-efficiency, priority-based-balance

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

peer (ipv4-address-no-zone | ipv6-address-no-zone)

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

AARP peer IP address

Context

configure application-assurance aarp number peer (ipv4-address-no-zone | ipv6-address-no-zone)

Tree

peer

Description

This command defines the IP address of the AARP peer router, which must be a routable system IP address. If no peer is configured when the AARP is administratively enabled, it is configured as a single node AARP instance.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

peer-endpoint

Synopsis

Enter the peer-endpoint context

Context

configure application-assurance aarp number peer-endpoint

Tree

peer-endpoint

Description

Commands in this context specify the attributes of the peer endpoint parent AA subscriber of the AARP peer.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sap

Synopsis

Enable the sap context

Context

configure application-assurance aarp number peer-endpoint sap

Tree

sap

Notes

The following elements are part of a choice: sap or spoke-sdp.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

encap-type keyword

Synopsis

Encapsulation type for peer endpoint SAP

Context

configure application-assurance aarp number peer-endpoint sap encap-type keyword

Tree

encap-type

Options

null, dot1q, qinq

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sap-id string

Synopsis

AARP peer endpoint SAP ID

Context

configure application-assurance aarp number peer-endpoint sap sap-id string

Tree

sap-id

String Length

1 to 45

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

spoke-sdp string

Synopsis

AARP peer endpoint spoke SDP

Context

configure application-assurance aarp number peer-endpoint spoke-sdp string

Tree

spoke-sdp

String Length

3 to 16

Notes

The following elements are part of a choice: sap or spoke-sdp.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

priority number

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

AARP priority

Context

configure application-assurance aarp number priority number

Tree

priority

Description

This command defines the priority for the AARP instance. The priority value is used to determine the master and backup upon initialization or rebalance.

Range

0 to 255

Default

100

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cflowd

Synopsis

Enter the cflowd context

Context

configure application-assurance cflowd

Tree

cflowd

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string

Synopsis

Enter the field list instance

Context

configure application-assurance cflowd field string

Tree

field

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string

Synopsis

Cflowd record field name

Context

configure application-assurance cflowd field string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

comment string

Synopsis

User information comment

Context

configure application-assurance cflowd field string comment string

Tree

comment

String Length

1 to 32

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-attribute

Synopsis

Enter the flow-attribute context

Context

configure application-assurance flow-attribute

Tree

flow-attribute

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

attribute [attribute-name] string

Synopsis

Enter the attribute list instance

Context

configure application-assurance flow-attribute attribute string

Tree

attribute

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[attribute-name] string

Synopsis

Attribute name

Context

configure application-assurance flow-attribute attribute string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

comment string

Synopsis

User information comment

Context

configure application-assurance flow-attribute attribute string comment string

Tree

comment

String Length

1 to 32

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

group [aa-group-id] number

Synopsis

Enter the group list instance

Context

configure application-assurance group number

Tree

group

Description

Commands in this context configure an Application Assurance group and partition parameters.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[aa-group-id] number

Synopsis

AA group ID

Context

configure application-assurance group number

Range

1 to 255

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

certificate-profile [cert-prof-name] string

Synopsis

Enter the certificate-profile list instance

Context

configure application-assurance group number certificate-profile string

Tree

certificate-profile

Description

Commands in this context create a certificate profile to be used for certificate-based encryption in HTTP header enrichment.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[cert-prof-name] string

Synopsis

AA group certificate profile name

Context

configure application-assurance group number certificate-profile string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the AA certificate profile

Context

configure application-assurance group number certificate-profile string admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number certificate-profile string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

file string

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Certificate file name

Context

configure application-assurance group number certificate-profile string file string

Tree

file

String Length

1 to 95

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cflowd

Synopsis

Enter the cflowd context

Context

configure application-assurance group number cflowd

Tree

cflowd

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of cflowd export

Context

configure application-assurance group number cflowd admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collector [ip-address] (ipv4-address-no-zone | ipv6-address-no-zone) port number

Synopsis

Enter the collector list instance

Context

configure application-assurance group number cflowd collector (ipv4-address-no-zone | ipv6-address-no-zone) port number

Tree

collector

Description

Commands in this context configure flow data collectors for cflowd data.

In the current release, the system supports IPv4 addresses only for the cflowd collector host.

Max. Elements

2

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[ip-address] (ipv4-address-no-zone | ipv6-address-no-zone)

Synopsis

IP address of the remote cflowd collector host

Context

configure application-assurance group number cflowd collector (ipv4-address-no-zone | ipv6-address-no-zone) port number

Description

This command configures the IP address of the remote cflowd collector host.

In the current release, the system supports IPv4 addresses only for the cflowd collector host.

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port number

Synopsis

Cflowd collector host port number

Context

configure application-assurance group number cflowd collector (ipv4-address-no-zone | ipv6-address-no-zone) port number

Description

This command configures the UDP port number used by the remote cflowd collector host.

In the MD-CLI, the default port is 4739.

Range

1 to 65535

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the cflowd export

Context

configure application-assurance group number cflowd collector (ipv4-address-no-zone | ipv6-address-no-zone) port number admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number cflowd collector (ipv4-address-no-zone | ipv6-address-no-zone) port number description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

comprehensive

Synopsis

Enter the comprehensive context

Context

configure application-assurance group number cflowd comprehensive

Tree

comprehensive

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-rate number

Synopsis

Cflowd flow sampling rate

Context

configure application-assurance group number cflowd comprehensive flow-rate number

Tree

flow-rate

Range

1 to 1000

Units

flows per second

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-rate-2 number

Synopsis

Cflowd per-flow second sampling rate

Context

configure application-assurance group number cflowd comprehensive flow-rate-2 number

Tree

flow-rate-2

Range

1 to 1000

Units

flows per second

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template

Synopsis

Enter the template context

Context

configure application-assurance group number cflowd comprehensive template

Tree

template

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dynamic-fields

Synopsis

Enter the dynamic-fields context

Context

configure application-assurance group number cflowd comprehensive template dynamic-fields

Tree

dynamic-fields

Description

Commands in this context configure the fields that are included in the exported cflowd template.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the dynamic fields

Context

configure application-assurance group number cflowd comprehensive template dynamic-fields admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string

Synopsis

Add a list entry for field

Context

configure application-assurance group number cflowd comprehensive template dynamic-fields field string

Tree

field

Description

This command adds a dynamic field to be included in the exported cflowd template.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string

Synopsis

Cflowd template dynamic field name

Context

configure application-assurance group number cflowd comprehensive template dynamic-fields field string

Description

This command specifies the name of the field to be included in the exported cflowd template.

  1. Common to all templates are the following values: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | hostName |hostNameExtended| deviceId | deviceMfgId | deviceOsId |ipFamily | deviceOsVer1 | deviceOsVer2 | deviceOsVer3 |anlType | anlTopology | anlCongestionState | apn | chargeId |mnc | imsi | msisdn | sgw-sgsnAddr | pgw-ggsnAddr | bsid |ratType | regionId | cellId |timeZone | aaChargingGrp |flowAttr_video | flowAttr_abr_service | flowAttr_audio |flowAttr_encrypted | flowAttr_download |flowAttr_upload |flowAttr_realtime_communication | aaSubTetheringState | imei| ipTTL | imei roamingStatus | mcc | uli |chargingChar | plmnid| customerId
  1. When AA is deployed in FWA SR, the following value applies: ApnExtended
  1. For the rtp-voice template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpBurstCount|rtpAvgBurstLengthMs | rtpGapCount | rtpAvgGapLengthMs |MAPDV | RBurst | RGap | SSRC
  1. For the rtp-video template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpRefClockRate | MOSAV | VSTQ | estimatedPSNR |GoPType | avgGoPLength | avgInterIFrameGap | imageWidth| imageHeight | frameRate |slicesPerIFrame | SSRC |videoInterlaced | IFrameReceived | IFrameImpaired |PFrameReceived | PFrameImpaired | BFrameReceived |BFrameImpaired | SIFrameReceived | SIFrameImpaired |SPFrameReceived | SPFrameImpaired |frameInterArrivalJitter| IFrameInterArrivalJitter | avgFrameArrivalDelay
  1. For the rtp-audio template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | rtpBurstCount| rtpAvgBurstLengthPkts | rtpGapCount |rtpAvgGapLengthPkts | PPDVM | rtpNumAudioChannels |rtpRefClockRate |rtpPeakAudioBw | SSRC | hostName
  1. For volume and comprehensive templates, the following values apply: tcpSessionEstDelay | tcpRetransmittedBytes |tcpRetransmittedPackets
String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field-selection keyword

Synopsis

Field selection method

Context

configure application-assurance group number cflowd comprehensive template field-selection keyword

Tree

field-selection

Description

This command configures the method for selecting the fields to be included in the exported cflowd template.

Default

legacy

Options

legacy, dynamic

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direct-export

Synopsis

Enter the direct-export context

Context

configure application-assurance group number cflowd direct-export

Tree

direct-export

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collector [collector-id] number

Synopsis

Enter the collector list instance

Context

configure application-assurance group number cflowd direct-export collector number

Tree

collector

Max. Elements

16

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[collector-id] number

Synopsis

Cflowd direct export collector ID

Context

configure application-assurance group number cflowd direct-export collector number

Range

1 to 65535

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

address [ip-address] (ipv4-address-no-zone | ipv6-address-no-zone) port number

Synopsis

Enter the address list instance

Context

configure application-assurance group number cflowd direct-export collector number address (ipv4-address-no-zone | ipv6-address-no-zone) port number

Tree

address

Description

Commands in this context configure the cflowd direct export collector IP address.

In the current release, the system supports IPv4 addresses only for the cflowd direct export collector.

Max. Elements

2

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[ip-address] (ipv4-address-no-zone | ipv6-address-no-zone)

Synopsis

IP address of the remote cflowd collector host

Context

configure application-assurance group number cflowd direct-export collector number address (ipv4-address-no-zone | ipv6-address-no-zone) port number

Description

This command configures the IP address of the remote cflowd collector host.

In the current release, the system supports IPv4 addresses only for the cflowd collector host.

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port number

Synopsis

Cflowd collector host port number

Context

configure application-assurance group number cflowd direct-export collector number address (ipv4-address-no-zone | ipv6-address-no-zone) port number

Description

This command configures the UDP port number used by the remote cflowd collector host.

In the MD-CLI, the default port is 4739.

Range

1 to 65535

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the cflowd direct export collector

Context

configure application-assurance group number cflowd direct-export collector number address (ipv4-address-no-zone | ipv6-address-no-zone) port number admin-state keyword

Tree

admin-state

Description

This command sets the administrative state of the cflowd direct export collector.

In the current release, the system supports IPv4 addresses only for the cflowd direct export collector.

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description of the collector

Context

configure application-assurance group number cflowd direct-export collector number description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

vlan-id number

Synopsis

Cflowd direct export VLAN ID

Context

configure application-assurance group number cflowd direct-export vlan-id number

Tree

vlan-id

Range

1 to 4094

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-override

Synopsis

Enter the export-override context

Context

configure application-assurance group number cflowd export-override

Tree

export-override

Description

Commands in this context configure the AA subtype used in the cflowd record export. The cflowd statistics exported to the cflowd collector look identical to AA for the type of system defined by the mode. The following cflowd export fields are affected:

  1. The cflowd export observation point (field 138) mode is derived from the export-override category that is selected.
  2. The cflowd export AA_Subscriber_Type (field 12) mode is modified as configured, using existing field types.
  3. The cflowd interface name is used as the sub-ID field, optionally modified to use the configured export-override mode and prefix for global identifiers.

All AA cflowd record types are affected by export override. To change the export override or prefix, cflowd must first be disabled. When this command is set back to the default, the prefix will also be set back to its default.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mode keyword

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

AA cflowd export override mode

Context

configure application-assurance group number cflowd export-override mode keyword

Tree

mode

Description

This command specifies the type of system emulated for the cflowd export.

Options

mobile, ifname-obfuscate

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

prefix string

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

AA group cflowd export override prefix

Context

configure application-assurance group number cflowd export-override prefix string

Tree

prefix

Description

This command specifies the prefix-string associated with the export override. The prefix string specifies up to an 8 character string. If the 8 character prefix is "ABCDEFG_" for a particular node, the cflowd export override would generate IPv4 interface names such as ABCDEFG_255.255.255.255 or IPv6 as ABCDEFG_2001:DB8:EF01:2345::/64. By default, the prefix is left blank.

String Length

1 to 8

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

obfuscation

Synopsis

Enter the obfuscation context

Context

configure application-assurance group number cflowd obfuscation

Tree

obfuscation

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aes-128-encryption-key string

Synopsis

AES-128 encryption key

Context

configure application-assurance group number cflowd obfuscation aes-128-encryption-key string

Tree

aes-128-encryption-key

Description

This command specifies the AES-128 key used to encrypt export cflowd fields.

String Length

51

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aes-256-encryption-key string

Synopsis

AES-256 encryption key

Context

configure application-assurance group number cflowd obfuscation aes-256-encryption-key string

Tree

aes-256-encryption-key

Description

This command specifies the AES-256 key used to encrypt exported cflowd fields.

String Length

71

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rtp-performance

Synopsis

Enter the rtp-performance context

Context

configure application-assurance group number cflowd rtp-performance

Tree

rtp-performance

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

audio-template

Synopsis

Enter the audio-template context

Context

configure application-assurance group number cflowd rtp-performance audio-template

Tree

audio-template

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dynamic-fields

Synopsis

Enter the dynamic-fields context

Context

configure application-assurance group number cflowd rtp-performance audio-template dynamic-fields

Tree

dynamic-fields

Description

Commands in this context configure dynamic fields to be included in the exported cflowd template.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the dynamic fields

Context

configure application-assurance group number cflowd rtp-performance audio-template dynamic-fields admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string

Synopsis

Add a list entry for field

Context

configure application-assurance group number cflowd rtp-performance audio-template dynamic-fields field string

Tree

field

Description

This command adds a list entry for fields to include in the exported cflowd template.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string

Synopsis

Cflowd template dynamic field name

Context

configure application-assurance group number cflowd rtp-performance audio-template dynamic-fields field string

Description

This command specifies the name of the field to be included in the exported cflowd template.

  1. Common to all templates are the following values: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | hostName |hostNameExtended| deviceId | deviceMfgId | deviceOsId |ipFamily | deviceOsVer1 | deviceOsVer2 | deviceOsVer3 |anlType | anlTopology | anlCongestionState | apn | chargeId |mnc | imsi | msisdn | sgw-sgsnAddr | pgw-ggsnAddr | bsid |ratType | regionId | cellId |timeZone | aaChargingGrp |flowAttr_video | flowAttr_abr_service | flowAttr_audio |flowAttr_encrypted | flowAttr_download |flowAttr_upload |flowAttr_realtime_communication | aaSubTetheringState | imei| ipTTL | imei roamingStatus | mcc | uli |chargingChar | plmnid| customerId
  1. When AA is deployed in FWA SR, the following value applies: ApnExtended
  1. For the rtp-voice template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpBurstCount|rtpAvgBurstLengthMs | rtpGapCount | rtpAvgGapLengthMs |MAPDV | RBurst | RGap | SSRC
  1. For the rtp-video template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpRefClockRate | MOSAV | VSTQ | estimatedPSNR |GoPType | avgGoPLength | avgInterIFrameGap | imageWidth| imageHeight | frameRate |slicesPerIFrame | SSRC |videoInterlaced | IFrameReceived | IFrameImpaired |PFrameReceived | PFrameImpaired | BFrameReceived |BFrameImpaired | SIFrameReceived | SIFrameImpaired |SPFrameReceived | SPFrameImpaired |frameInterArrivalJitter| IFrameInterArrivalJitter | avgFrameArrivalDelay
  1. For the rtp-audio template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | rtpBurstCount| rtpAvgBurstLengthPkts | rtpGapCount |rtpAvgGapLengthPkts | PPDVM | rtpNumAudioChannels |rtpRefClockRate |rtpPeakAudioBw | SSRC | hostName
  1. For volume and comprehensive templates, the following values apply: tcpSessionEstDelay | tcpRetransmittedBytes |tcpRetransmittedPackets
String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field-selection keyword

Synopsis

Field selection method

Context

configure application-assurance group number cflowd rtp-performance audio-template field-selection keyword

Tree

field-selection

Description

This command configures the method for selecting the fields to be included in the exported cflowd template.

Default

legacy

Options

legacy, dynamic

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-rate number

Synopsis

Cflowd flow sampling rate

Context

configure application-assurance group number cflowd rtp-performance flow-rate number

Tree

flow-rate

Range

1 to 1000

Units

flows per second

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-rate-2 number

Synopsis

Cflowd per-flow second sampling rate

Context

configure application-assurance group number cflowd rtp-performance flow-rate-2 number

Tree

flow-rate-2

Range

1 to 1000

Units

flows per second

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

video-template

Synopsis

Enter the video-template context

Context

configure application-assurance group number cflowd rtp-performance video-template

Tree

video-template

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dynamic-fields

Synopsis

Enter the dynamic-fields context

Context

configure application-assurance group number cflowd rtp-performance video-template dynamic-fields

Tree

dynamic-fields

Description

Commands in this context configure dynamic fields to be included in the exported cflowd template.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the dynamic fields

Context

configure application-assurance group number cflowd rtp-performance video-template dynamic-fields admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string

Synopsis

Add a list entry for field

Context

configure application-assurance group number cflowd rtp-performance video-template dynamic-fields field string

Tree

field

Description

This command adds a list entry for the fields to include in the exported cflowd template.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string

Synopsis

Cflowd template dynamic field name

Context

configure application-assurance group number cflowd rtp-performance video-template dynamic-fields field string

Description

This command specifies the name of the field to be included in the exported cflowd template.

  1. Common to all templates are the following values: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | hostName |hostNameExtended| deviceId | deviceMfgId | deviceOsId |ipFamily | deviceOsVer1 | deviceOsVer2 | deviceOsVer3 |anlType | anlTopology | anlCongestionState | apn | chargeId |mnc | imsi | msisdn | sgw-sgsnAddr | pgw-ggsnAddr | bsid |ratType | regionId | cellId |timeZone | aaChargingGrp |flowAttr_video | flowAttr_abr_service | flowAttr_audio |flowAttr_encrypted | flowAttr_download |flowAttr_upload |flowAttr_realtime_communication | aaSubTetheringState | imei| ipTTL | imei roamingStatus | mcc | uli |chargingChar | plmnid| customerId
  1. When AA is deployed in FWA SR, the following value applies: ApnExtended
  1. For the rtp-voice template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpBurstCount|rtpAvgBurstLengthMs | rtpGapCount | rtpAvgGapLengthMs |MAPDV | RBurst | RGap | SSRC
  1. For the rtp-video template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpRefClockRate | MOSAV | VSTQ | estimatedPSNR |GoPType | avgGoPLength | avgInterIFrameGap | imageWidth| imageHeight | frameRate |slicesPerIFrame | SSRC |videoInterlaced | IFrameReceived | IFrameImpaired |PFrameReceived | PFrameImpaired | BFrameReceived |BFrameImpaired | SIFrameReceived | SIFrameImpaired |SPFrameReceived | SPFrameImpaired |frameInterArrivalJitter| IFrameInterArrivalJitter | avgFrameArrivalDelay
  1. For the rtp-audio template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | rtpBurstCount| rtpAvgBurstLengthPkts | rtpGapCount |rtpAvgGapLengthPkts | PPDVM | rtpNumAudioChannels |rtpRefClockRate |rtpPeakAudioBw | SSRC | hostName
  1. For volume and comprehensive templates, the following values apply: tcpSessionEstDelay | tcpRetransmittedBytes |tcpRetransmittedPackets
String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field-selection keyword

Synopsis

Field selection method

Context

configure application-assurance group number cflowd rtp-performance video-template field-selection keyword

Tree

field-selection

Description

This command configures the method for selecting the fields to be included in the exported cflowd template.

Default

legacy

Options

legacy, dynamic

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

voice-template

Synopsis

Enter the voice-template context

Context

configure application-assurance group number cflowd rtp-performance voice-template

Tree

voice-template

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dynamic-fields

Synopsis

Enter the dynamic-fields context

Context

configure application-assurance group number cflowd rtp-performance voice-template dynamic-fields

Tree

dynamic-fields

Description

Commands in this context configure dynamic fields to be included in the exported cflowd template.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the dynamic fields

Context

configure application-assurance group number cflowd rtp-performance voice-template dynamic-fields admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string

Synopsis

Add a list entry for field

Context

configure application-assurance group number cflowd rtp-performance voice-template dynamic-fields field string

Tree

field

Description

This command adds a cflowd record field to the list included in the exported cflowd template.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string

Synopsis

Cflowd template dynamic field name

Context

configure application-assurance group number cflowd rtp-performance voice-template dynamic-fields field string

Description

This command specifies the name of the field to be included in the exported cflowd template.

  1. Common to all templates are the following values: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | hostName |hostNameExtended| deviceId | deviceMfgId | deviceOsId |ipFamily | deviceOsVer1 | deviceOsVer2 | deviceOsVer3 |anlType | anlTopology | anlCongestionState | apn | chargeId |mnc | imsi | msisdn | sgw-sgsnAddr | pgw-ggsnAddr | bsid |ratType | regionId | cellId |timeZone | aaChargingGrp |flowAttr_video | flowAttr_abr_service | flowAttr_audio |flowAttr_encrypted | flowAttr_download |flowAttr_upload |flowAttr_realtime_communication | aaSubTetheringState | imei| ipTTL | imei roamingStatus | mcc | uli |chargingChar | plmnid| customerId
  1. When AA is deployed in FWA SR, the following value applies: ApnExtended
  1. For the rtp-voice template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpBurstCount|rtpAvgBurstLengthMs | rtpGapCount | rtpAvgGapLengthMs |MAPDV | RBurst | RGap | SSRC
  1. For the rtp-video template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpRefClockRate | MOSAV | VSTQ | estimatedPSNR |GoPType | avgGoPLength | avgInterIFrameGap | imageWidth| imageHeight | frameRate |slicesPerIFrame | SSRC |videoInterlaced | IFrameReceived | IFrameImpaired |PFrameReceived | PFrameImpaired | BFrameReceived |BFrameImpaired | SIFrameReceived | SIFrameImpaired |SPFrameReceived | SPFrameImpaired |frameInterArrivalJitter| IFrameInterArrivalJitter | avgFrameArrivalDelay
  1. For the rtp-audio template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | rtpBurstCount| rtpAvgBurstLengthPkts | rtpGapCount |rtpAvgGapLengthPkts | PPDVM | rtpNumAudioChannels |rtpRefClockRate |rtpPeakAudioBw | SSRC | hostName
  1. For volume and comprehensive templates, the following values apply: tcpSessionEstDelay | tcpRetransmittedBytes |tcpRetransmittedPackets
String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field-selection keyword

Synopsis

Field selection method

Context

configure application-assurance group number cflowd rtp-performance voice-template field-selection keyword

Tree

field-selection

Description

This command configures the method for selecting the fields to be included in the exported cflowd template.

Default

legacy

Options

legacy, dynamic

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-performance

Synopsis

Enter the tcp-performance context

Context

configure application-assurance group number cflowd tcp-performance

Tree

tcp-performance

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-rate number

Synopsis

Cflowd flow sampling rate

Context

configure application-assurance group number cflowd tcp-performance flow-rate number

Tree

flow-rate

Range

1 to 1000

Units

flows per second

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-rate-2 number

Synopsis

Cflowd per-flow second sampling rate

Context

configure application-assurance group number cflowd tcp-performance flow-rate-2 number

Tree

flow-rate-2

Range

1 to 1000

Units

flows per second

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template

Synopsis

Enter the template context

Context

configure application-assurance group number cflowd tcp-performance template

Tree

template

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dynamic-fields

Synopsis

Enter the dynamic-fields context

Context

configure application-assurance group number cflowd tcp-performance template dynamic-fields

Tree

dynamic-fields

Description

Commands in this context configure the fields to be included in the exported cflowd template.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the dynamic fields

Context

configure application-assurance group number cflowd tcp-performance template dynamic-fields admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string

Synopsis

Add a list entry for field

Context

configure application-assurance group number cflowd tcp-performance template dynamic-fields field string

Tree

field

Description

This command adds a list entry for fields to include in the exported cflowd template.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string

Synopsis

Cflowd template dynamic field name

Context

configure application-assurance group number cflowd tcp-performance template dynamic-fields field string

Description

This command specifies the name of the field to be included in the exported cflowd template.

  1. Common to all templates are the following values: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | hostName |hostNameExtended| deviceId | deviceMfgId | deviceOsId |ipFamily | deviceOsVer1 | deviceOsVer2 | deviceOsVer3 |anlType | anlTopology | anlCongestionState | apn | chargeId |mnc | imsi | msisdn | sgw-sgsnAddr | pgw-ggsnAddr | bsid |ratType | regionId | cellId |timeZone | aaChargingGrp |flowAttr_video | flowAttr_abr_service | flowAttr_audio |flowAttr_encrypted | flowAttr_download |flowAttr_upload |flowAttr_realtime_communication | aaSubTetheringState | imei| ipTTL | imei roamingStatus | mcc | uli |chargingChar | plmnid| customerId
  1. When AA is deployed in FWA SR, the following value applies: ApnExtended
  1. For the rtp-voice template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpBurstCount|rtpAvgBurstLengthMs | rtpGapCount | rtpAvgGapLengthMs |MAPDV | RBurst | RGap | SSRC
  1. For the rtp-video template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpRefClockRate | MOSAV | VSTQ | estimatedPSNR |GoPType | avgGoPLength | avgInterIFrameGap | imageWidth| imageHeight | frameRate |slicesPerIFrame | SSRC |videoInterlaced | IFrameReceived | IFrameImpaired |PFrameReceived | PFrameImpaired | BFrameReceived |BFrameImpaired | SIFrameReceived | SIFrameImpaired |SPFrameReceived | SPFrameImpaired |frameInterArrivalJitter| IFrameInterArrivalJitter | avgFrameArrivalDelay
  1. For the rtp-audio template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | rtpBurstCount| rtpAvgBurstLengthPkts | rtpGapCount |rtpAvgGapLengthPkts | PPDVM | rtpNumAudioChannels |rtpRefClockRate |rtpPeakAudioBw | SSRC | hostName
  1. For volume and comprehensive templates, the following values apply: tcpSessionEstDelay | tcpRetransmittedBytes |tcpRetransmittedPackets
String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field-selection keyword

Synopsis

Field selection method

Context

configure application-assurance group number cflowd tcp-performance template field-selection keyword

Tree

field-selection

Description

This command configures the method for selecting the fields to be included in the exported cflowd template.

Default

legacy

Options

legacy, dynamic

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template-retransmit number

Synopsis

Template retransmit time

Context

configure application-assurance group number cflowd template-retransmit number

Tree

template-retransmit

Range

10 to 600

Default

600

Units

seconds

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

volume

Synopsis

Enter the volume context

Context

configure application-assurance group number cflowd volume

Tree

volume

Description

Commands in this context configure the cflowd volume export.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rate number

Synopsis

Cflowd packet sampling rate

Context

configure application-assurance group number cflowd volume rate number

Tree

rate

Range

1 to 10000

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template

Synopsis

Enter the template context

Context

configure application-assurance group number cflowd volume template

Tree

template

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dynamic-fields

Synopsis

Enter the dynamic-fields context

Context

configure application-assurance group number cflowd volume template dynamic-fields

Tree

dynamic-fields

Description

Commands in this context configure the fields to be included in the exported cflowd template.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the dynamic fields

Context

configure application-assurance group number cflowd volume template dynamic-fields admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string

Synopsis

Add a list entry for field

Context

configure application-assurance group number cflowd volume template dynamic-fields field string

Tree

field

Description

This command adds a list entry for the fields to be included in the exported cflowd template.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string

Synopsis

Cflowd template dynamic field name

Context

configure application-assurance group number cflowd volume template dynamic-fields field string

Description

This command specifies the name of the field to be included in the exported cflowd template.

  1. Common to all templates are the following values: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | hostName |hostNameExtended| deviceId | deviceMfgId | deviceOsId |ipFamily | deviceOsVer1 | deviceOsVer2 | deviceOsVer3 |anlType | anlTopology | anlCongestionState | apn | chargeId |mnc | imsi | msisdn | sgw-sgsnAddr | pgw-ggsnAddr | bsid |ratType | regionId | cellId |timeZone | aaChargingGrp |flowAttr_video | flowAttr_abr_service | flowAttr_audio |flowAttr_encrypted | flowAttr_download |flowAttr_upload |flowAttr_realtime_communication | aaSubTetheringState | imei| ipTTL | imei roamingStatus | mcc | uli |chargingChar | plmnid| customerId
  1. When AA is deployed in FWA SR, the following value applies: ApnExtended
  1. For the rtp-voice template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpBurstCount|rtpAvgBurstLengthMs | rtpGapCount | rtpAvgGapLengthMs |MAPDV | RBurst | RGap | SSRC
  1. For the rtp-video template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpRefClockRate | MOSAV | VSTQ | estimatedPSNR |GoPType | avgGoPLength | avgInterIFrameGap | imageWidth| imageHeight | frameRate |slicesPerIFrame | SSRC |videoInterlaced | IFrameReceived | IFrameImpaired |PFrameReceived | PFrameImpaired | BFrameReceived |BFrameImpaired | SIFrameReceived | SIFrameImpaired |SPFrameReceived | SPFrameImpaired |frameInterArrivalJitter| IFrameInterArrivalJitter | avgFrameArrivalDelay
  1. For the rtp-audio template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | rtpBurstCount| rtpAvgBurstLengthPkts | rtpGapCount |rtpAvgGapLengthPkts | PPDVM | rtpNumAudioChannels |rtpRefClockRate |rtpPeakAudioBw | SSRC | hostName
  1. For volume and comprehensive templates, the following values apply: tcpSessionEstDelay | tcpRetransmittedBytes |tcpRetransmittedPackets
String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field-selection keyword

Synopsis

Field selection method

Context

configure application-assurance group number cflowd volume template field-selection keyword

Tree

field-selection

Description

This command configures the method for selecting the fields to be included in the exported cflowd template.

Default

legacy

Options

legacy, dynamic

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-ip-cache [dns-ip-cache-name] string

Synopsis

Enter the dns-ip-cache list instance

Context

configure application-assurance group number dns-ip-cache string

Tree

dns-ip-cache

Description

Commands in this context configure a DNS IP cache that is used to snoop DNS requests generated by subscribers, to populate a cache of IP addresses that match a specified list of domain names. In the context of strengthening URL-content charging, Operators may also specify a list of trusted DNS servers to populate the DNS IP cache.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[dns-ip-cache-name] string

Synopsis

DNS IP cache name within the AA group

Context

configure application-assurance group number dns-ip-cache string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the AA DNS IP cache object

Context

configure application-assurance group number dns-ip-cache string admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number dns-ip-cache string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-match

Synopsis

Enter the dns-match context

Context

configure application-assurance group number dns-ip-cache string dns-match

Tree

dns-match

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

domain [domain-name] string

Synopsis

Enter the domain list instance

Context

configure application-assurance group number dns-ip-cache string dns-match domain string

Tree

domain

Description

Commands in this context configure a domain expression to populate the DNS IP cache.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[domain-name] string

Synopsis

DNS IP cache domain name

Context

configure application-assurance group number dns-ip-cache string dns-match domain string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

expression string

Synopsis

AA DNS domain expression to match

Context

configure application-assurance group number dns-ip-cache string dns-match domain string expression string

Tree

expression

Description

This command specifies a domain name expression string used to define a pattern match. The domain expression uses the same syntax as the expressions used in configure application-assurance group partition policy app-filter entry app-filters configuration.

String Length

1 to 255

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

trusted-server-address [dns-server-address] (ipv4-address-no-zone | ipv6-address-no-zone)

Synopsis

Enter the trusted-server-address list instance

Context

configure application-assurance group number dns-ip-cache string dns-match trusted-server-address (ipv4-address-no-zone | ipv6-address-no-zone)

Tree

trusted-server-address

Description

Commands in this context configure a trusted DNS server address. DNS responses from this DNS server are used to populate the DNS IP cache.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[dns-server-address] (ipv4-address-no-zone | ipv6-address-no-zone)

Synopsis

Trusted DNS server address

Context

configure application-assurance group number dns-ip-cache string dns-match trusted-server-address (ipv4-address-no-zone | ipv6-address-no-zone)

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server-name string

Synopsis

DNS server name

Context

configure application-assurance group number dns-ip-cache string dns-match trusted-server-address (ipv4-address-no-zone | ipv6-address-no-zone) server-name string

Tree

server-name

String Length

1 to 32

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-cache

Synopsis

Enter the ip-cache context

Context

configure application-assurance group number dns-ip-cache string ip-cache

Tree

ip-cache

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number

Synopsis

High watermark value for the DNS IP cache

Context

configure application-assurance group number dns-ip-cache string ip-cache high-watermark number

Tree

high-watermark

Description

This command configures the high watermark value for the DNS IP cache. When the number of cached IP addresses exceeds the threshold, the system generates a trap.

Range

0 to 100

Default

90

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number

Synopsis

Low watermark value for the DNS IP cache

Context

configure application-assurance group number dns-ip-cache string ip-cache low-watermark number

Tree

low-watermark

Description

This command configures the low watermark value for the DNS IP cache. When the number of cached IP addresses exceeds the high watermark threshold, the system generates a trap based on the high watermark. The trap clears after the number of cached IP addresses drops below the configured low watermark value.

Range

0 to 100

Default

80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

size number

Synopsis

Maximum number of IP addresses stored in the cache

Context

configure application-assurance group number dns-ip-cache string ip-cache size number

Tree

size

Range

10 to 64000

Default

10

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

static-address [static-ip-address] (ipv4-address-no-zone | ipv6-address-no-zone)

Synopsis

Add a list entry for static-address

Context

configure application-assurance group number dns-ip-cache string ip-cache static-address (ipv4-address-no-zone | ipv6-address-no-zone)

Tree

static-address

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[static-ip-address] (ipv4-address-no-zone | ipv6-address-no-zone)

Synopsis

Trusted IP address for the DNS IP cache

Context

configure application-assurance group number dns-ip-cache string ip-cache static-address (ipv4-address-no-zone | ipv6-address-no-zone)

Description

This command configures an IP address to be used as a trusted IP address. For packets whose destination IP address matches that of the trusted IP address, a cache hit is assumed.

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-enrich [http-enrich-name] string

Synopsis

Enter the http-enrich list instance

Context

configure application-assurance group number http-enrich string

Tree

http-enrich

Description

Commands in this context configure the attributes of the HTTP enrichment policy.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[http-enrich-name] string

Synopsis

HTTP header enrichment policy name

Context

configure application-assurance group number http-enrich string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the HTTP enrichment policy

Context

configure application-assurance group number http-enrich string admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number http-enrich string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string

Synopsis

Enter the field list instance

Context

configure application-assurance group number http-enrich string field string

Tree

field

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string

Synopsis

Field name to insert into the HTTP header

Context

configure application-assurance group number http-enrich string field string

Description

This command specifies the field type to insert into the HTTTP header. The command must be repeated for each field to be inserted. The same field cannot be inserted twice into the header under different header names.

Note: AA can insert two copies of the following fields in the same HTTP header (with a different header name):

imei-hyphenated, imei-hyphenated-2, imsi, imsi-2, static-string, static-string-2, user-location-raw, and user-location-raw2.

The following field types are supported in any deployment:

static-string - header name for the inserted string

static-string-2 - header name for the inserted string

subscriber-id - header name for the subscriber ID

subscriber-ip - header name for the subscriber IP address

The following field types are supported in Fixed Wireless Access (FWA) deployments only:

apn - complete APN string

apn-ni - APN Network Identifier (APN-NI) used by the UE

billing-type - UE charging type (charging characteristics)

dynamic-acr - dynamic Anonymous Customer Record (ACR)

static-acr - static ACR

imei-hyphenated - subscriber IMEI with format AABBBBBB-CCCCCC-EE

imei-hyphenated-2 - subscriber IMEI with format AABBBBBB-CCCCCC-EE

imei-sv - subscriber IMEI with format AABBBBBBCCCCCCEE

imsi - subscriber IMSI

imsi-2 - subscriber IMSI

msisdn - subscriber MSISDN

msisdn-without-cc - subscriber MSISDN without a country code

pgw-ggsn-address - PGW/GGSN address serving the UE

plmn-id - Public Land Mobile Network (PLMN) ID of the SGSN/MME

rat-type - Radio Access Technology (RAT) type

timestamp - timestamp inserted in UNIX time format; for example, 1531204313

user-location - UE LOCATION (ULI)

user-location-3gpp - ULI encoded as defined in 3GPP 29.061

user-location-raw - ULI in raw format:<ULI-TYPE1>[+<ULI-TYPE2>]=<ULI HEX>

Example: x-locinfo: TAI+ECGI=1300622c46130062014adf16

user-location-raw-2 - ULI in raw format:<ULI-TYPE1>[+<ULI-TYPE2>]=<ULI HEX>

Example: x-locinfo: TAI+ECGI=1300622c46130062014adf16

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

anti-spoof boolean

Synopsis

Enable anti-spoofing

Context

configure application-assurance group number http-enrich string field string anti-spoof boolean

Tree

anti-spoof

Description

When configured to true, this command enables the HTTP header enrichment anti-spoofing functionality.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

calling-line-id boolean

Synopsis

Enable calling line identification

Context

configure application-assurance group number http-enrich string field string calling-line-id boolean

Tree

calling-line-id

Description

When configured to true, this command configures the HTTP header for “x-up-calling-line-id” anti-spoofing.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

encode

Synopsis

Enter the encode context

Context

configure application-assurance group number http-enrich string field string encode

Tree

encode

Description

Commands in this context configure the encoding applied to the HTTP header enrichment field.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cert-profile reference

Synopsis

Certificate profile name used for encryption

Context

configure application-assurance group number http-enrich string field string encode cert-profile reference

Tree

cert-profile

Reference

configure application-assurance group number certificate-profile string

Notes

The following elements are part of a choice: cert-profile or key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

key

Synopsis

Enter the key context

Context

configure application-assurance group number http-enrich string field string encode key

Tree

key

Description

Commands in this context configure the encryption fields.

Notes

The following elements are part of a choice: cert-profile or key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

type keyword

Synopsis

Encoding type

Context

configure application-assurance group number http-enrich string field string encode key type keyword

Tree

type

Description

This command configures the encoding/ encryption method.

Options

md5, rc4, rc4-md5-base64

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value string

Synopsis

Secret key for encrypting the field

Context

configure application-assurance group number http-enrich string field string encode key value string

Tree

value

String Length

1 to 114

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

name string

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

HTTP header field name

Context

configure application-assurance group number http-enrich string field string name string

Tree

name

String Length

1 to 32

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

static-string string

Synopsis

HTTP header enrichment template field static string

Context

configure application-assurance group number http-enrich string field string static-string string

Tree

static-string

String Length

1 to 16

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rat-type-enrichment

Synopsis

Enter the rat-type-enrichment context

Context

configure application-assurance group number http-enrich string rat-type-enrichment

Tree

rat-type-enrichment

Description

Commands in this context configure Radio Access Type (RAT) enrichment.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rat-type [rat-type-name] keyword

Synopsis

Enter the rat-type list instance

Context

configure application-assurance group number http-enrich string rat-type-enrichment rat-type keyword

Tree

rat-type

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[rat-type-name] keyword

Synopsis

RAT type name

Context

configure application-assurance group number http-enrich string rat-type-enrichment rat-type keyword

Description

This command configures a customised RAT value for the specified RAT-Type.

Options

utran, geran, wlan, gan, hspa-evol, eutran, virtual, eutran-nb, ehrpd, hrpd, cdma-1x, umb, wifi, nr, lte-m

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rat-string string

Synopsis

Customised RAT type value

Context

configure application-assurance group number http-enrich string rat-type-enrichment rat-type keyword rat-string string

Tree

rat-string

String Length

1 to 31

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-error-redirect [http-error-redirect-name] string

Synopsis

Enter the http-error-redirect list instance

Context

configure application-assurance group number http-error-redirect string

Tree

http-error-redirect

Description

Commands in this context configure an HTTP error redirect policy that contains important information relevant to the redirect server.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[http-error-redirect-name] string

Synopsis

HTTP error redirect policy name

Context

configure application-assurance group number http-error-redirect string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the HTTP error redirect object

Context

configure application-assurance group number http-error-redirect string admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number http-error-redirect string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

error-code [error-code-value] number

Synopsis

Enter the error-code list instance

Context

configure application-assurance group number http-error-redirect string error-code number

Tree

error-code

Description

Commands in this context configure the HTTP error status codes to which a redirect action is applied. Only messages with sizes less than that configured for the custom-message-size command are eligible for redirect action.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[error-code-value] number

Synopsis

HTTP error code value for an HTTP error redirect

Context

configure application-assurance group number http-error-redirect string error-code number

Max. Range

0 to 4294967295

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

custom-message-size number

Synopsis

HTTP error redirect error code custom message size

Context

configure application-assurance group number http-error-redirect string error-code number custom-message-size number

Tree

custom-message-size

Description

This command specifies the maximum message size above which an HTTP error redirect is not performed.

Max. Range

0 to 4294967295

Default

1024

Units

octets

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-host string

Synopsis

HTTP host for the HTTP error redirect object

Context

configure application-assurance group number http-error-redirect string http-host string

Tree

http-host

Description

This command specifies the HTTP hostname of the landing server (Barefruit or Xerocole). It is used in the HTTP GET operation from the client (which is being redirected) to the redirect search landing server. The hostname must contain a valid IP address or HTTP hostname or URI for the HTTP GET from the client to the landing server.

String Length

1 to 255

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

participant-id string

Synopsis

Participant ID for the HTTP error redirect object

Context

configure application-assurance group number http-error-redirect string participant-id string

Tree

participant-id

Description

This command specifies a string assigned to the operator by Barefruit. It is used by Barefruit landing servers (applies to template # 1 only).

String Length

1 to 32

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template number

Synopsis

Template ID for the HTTP error redirect object

Context

configure application-assurance group number http-error-redirect string template number

Tree

template

Description

This command configures the template of parameters passed from the AA-ISA to the redirect server using JavaScript in the redirect packet. The template is specific to the redirect server used in the network. Currently, two partners are supported with AA-ISA redirect solution, Barefruit, and Xerocole.

Max. Range

0 to 4294967295

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-notification [http-notification-name] string

Synopsis

Enter the http-notification list instance

Context

configure application-assurance group number http-notification string

Tree

http-notification

Description

Commands in this context configure an HTTP notification object for the subscriber in-browser notification.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[http-notification-name] string

Synopsis

HTTP notification policy name

Context

configure application-assurance group number http-notification string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the AA HTTP notification object

Context

configure application-assurance group number http-notification string admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number http-notification string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

interval (number | keyword)

Synopsis

Minimum HTTP response notification interval

Context

configure application-assurance group number http-notification string interval (number | keyword)

Tree

interval

Range

1 to 1440

Default

one-time

Units

minutes

Options

one-time

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

script-url string

Synopsis

Script URL inserted into the HTTP response

Context

configure application-assurance group number http-notification string script-url string

Tree

script-url

Description

This command configures the URL of the script used by the HTTP notification policy.

String Length

1 to 255

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template number

Synopsis

Template ID for the AA HTTP notification object

Context

configure application-assurance group number http-notification string template number

Tree

template

Description

This command configures the template that defines the format and attributes included in the HTTP notification message.

Max. Range

0 to 4294967295

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-redirect [http-redirect-name] string

Synopsis

Enter the http-redirect list instance

Context

configure application-assurance group number http-redirect string

Tree

http-redirect

Description

Commands in this context configure the parameters of the HTTP redirect policy.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[http-redirect-name] string

Synopsis

HTTP redirect policy name

Context

configure application-assurance group number http-redirect string

Description

This command specifies the applied HTTP redirect name. If no redirect name is specified, HTTP redirect is not enabled.

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the AA HTTP redirect object

Context

configure application-assurance group number http-redirect string admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

captive-redirect

Synopsis

Enter the captive-redirect context

Context

configure application-assurance group number http-redirect string captive-redirect

Tree

captive-redirect

Description

Commands in this context configure the captive redirect capability for an HTTP redirect policy. HTTP redirect policies using captive redirect can be used in conjunction with a session-filter policy to terminate TCP flows in the ISA-AA card before reaching the Internet to redirect subscribers to the predefined redirect URL. 

Non-HTTP TCP flows are TCP reset. Captive redirect uses the provisioned VLAN ID to send the HTTP response to subscribers; therefore, this VLAN ID must be properly assigned in the same VPN as the subscriber. 

The operator can select the URL arguments to include in the redirect URL using either a specific template ID or by configuring the redirect URL using a supported macro substitution keyword.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

vlan-id number

Synopsis

Captive redirect VLAN ID

Context

configure application-assurance group number http-redirect string captive-redirect vlan-id number

Tree

vlan-id

Description

This command configures the VLAN ID for a captive redirect. Captive redirect uses the provisioned VLAN ID to send the HTTP response to subscribers; therefore, this VLAN ID must be properly assigned in the same VPN as the subscriber.

Range

1 to 4094

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number http-redirect string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

redirect-https boolean

Synopsis

Enable HTTPS redirect

Context

configure application-assurance group number http-redirect string redirect-https boolean

Tree

redirect-https

Description

When set to true, the HTTP redirect policy redirects HTTPS sessions to the configured redirect URL.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

redirect-url string

Synopsis

HTTP redirect URL

Context

configure application-assurance group number http-redirect string redirect-url string

Tree

redirect-url

Description

This command configures the HTTP redirect URL which is the URL (page) that the user is redirected to when an HTTP redirect takes effect.

The operator can select the URL arguments to include in the redirect URL, using either a specific template ID or by configuring any of the following macro substitution keywords:

  1. $URL - The Request-URI in the HTTP GET Request received
  2. $SUB - The subscriber ID
  3. $IP - The IP address of the subscriber host
  4. $RTRID - The router ID
  5. $URLPRM - The HTTP URL parameter associated with the subscriber
  6. $MAC - The UE MAC address
  7. $SAP - The UE SAP
  8. $CID - The circuit ID or interface ID of the subscriber
  9. $RID - The remote ID of the subscriber
  10. $CATID - The URL filter web-service rating category identifier
  11. $CATNAME - The URL filter web-service rating category name

Only ESM and ESM-MAC sub types support $MAC, $SAP, $CID, and $RID macro substitution.

String Length

1 to 255

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-client-reset boolean

Synopsis

Enable TCP client reset

Context

configure application-assurance group number http-redirect string tcp-client-reset boolean

Tree

tcp-client-reset

Description

When set to true, this command enables an HTTP-redirect policy to initiate a TCP reset towards the client if the AA policy results in a redirect with packet drop but the HTTP redirect cannot be delivered.  Scenarios for this include HTTP (TLS) sessions, blocking of non-HTTP TCP traffic, and blocking of existing flows after a policy re-evaluation of an existing subscriber.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template number

Synopsis

Template ID for the HTTP redirect object

Context

configure application-assurance group number http-redirect string template number

Tree

template

Description

This command configures the template that defines which parameters are appended to the HTTP host redirect field in the redirect message. The HTTP redirect template provides HTTP 302 redirect containing only the URL specified in the redirect policy, with no other parameters.

Max. Range

0 to 4294967295

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

partition [aa-partition-id] number

Synopsis

Enter the partition list instance

Context

configure application-assurance group number partition number

Tree

partition

Description

Commands in this context configure the AA partition-related policies.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[aa-partition-id] number

Synopsis

Partition ID within the AA group

Context

configure application-assurance group number partition number

Range

0 to 65535

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub-congestion-detection

Synopsis

Enter the aa-sub-congestion-detection context

Context

configure application-assurance group number partition number aa-sub-congestion-detection

Tree

aa-sub-congestion-detection

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of congestion detection

Context

configure application-assurance group number partition number aa-sub-congestion-detection admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rat-type [rat-type-name] keyword

Synopsis

Enter the rat-type list instance

Context

configure application-assurance group number partition number aa-sub-congestion-detection rat-type keyword

Tree

rat-type

Description

Commands in this context configure the RAT types for which unique RTT thresholds are configured.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[rat-type-name] keyword

Synopsis

Mobile radio access technology (RAT) type

Context

configure application-assurance group number partition number aa-sub-congestion-detection rat-type keyword

Options

utran, geran, wlan, gan, hspa-evol, eutran, virtual, eutran-nb, ehrpd, hrpd, cdma-1x, umb, wifi, nr, lte-m

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rtt-threshold (number | keyword)

Synopsis

Round trip time congestion threshold for a RAT type

Context

configure application-assurance group number partition number aa-sub-congestion-detection rat-type keyword rtt-threshold (number | keyword)

Tree

rtt-threshold

Description

This command configures the maximum acceptable round trip time (RTT) under no congestion. Any measured RTT above the threshold is considered an indication of possible congestion.

Range

1 to 500

Units

milliseconds

Options

not-applicable

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rtt-threshold (number | keyword)

Synopsis

Round trip time congestion threshold

Context

configure application-assurance group number partition number aa-sub-congestion-detection rtt-threshold (number | keyword)

Tree

rtt-threshold

Description

This command configures the default round trip delay threshold used by the DEM gateway algorithm to determine subscriber congestion for NLB-DEM. This default value is used when the current RAT-Type is not known, or has no associated configured RTT threshold.

Range

1 to 500

Default

173

Units

milliseconds

Options

not-applicable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rtt-threshold-tolerance number

Synopsis

RTT threshold tolerance for congestion detection

Context

configure application-assurance group number partition number aa-sub-congestion-detection rtt-threshold-tolerance number

Tree

rtt-threshold-tolerance

Description

This command configures the round trip delay threshold tolerance used by the DEM gateway algorithm to determine subscriber-level congestion.

Range

0 to 100

Default

50

Units

percent

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub-remote boolean

Synopsis

Reverse subscriber traffic direction

Context

configure application-assurance group number partition number aa-sub-remote boolean

Tree

aa-sub-remote

Description

When configured to true, the direction of the from-subscriber and to-subscriber traffic is reversed for this group partition.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

access-network-location

Synopsis

Enter the access-network-location context

Context

configure application-assurance group number partition number access-network-location

Tree

access-network-location

Description

Commands in this context configure parameters related to dynamic experience management, also known as Access Network Location (ANL).

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

source [source-type] keyword

Synopsis

Enter the source list instance

Context

configure application-assurance group number partition number access-network-location source keyword

Tree

source

Description

Commands in this context configure location sources for dynamic experience management.

Max. Elements

1

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[source-type] keyword

Synopsis

Access network location source

Context

configure application-assurance group number partition number access-network-location source keyword

Description

This command specifies the location or access technology. AA supports access points for WLGW access points or ULI-2gpp for mobile (for example, FWA).

Options

mobile-3g, access-point, uli-3gpp

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rat-type [rat-type-name] keyword

Synopsis

Enter the rat-type list instance

Context

configure application-assurance group number partition number access-network-location source keyword rat-type keyword

Tree

rat-type

Description

Commands in this context configure the RAT types for which unique RTT thresholds are configured.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[rat-type-name] keyword

Synopsis

Access network location RAT type

Context

configure application-assurance group number partition number access-network-location source keyword rat-type keyword

Options

utran, geran, wlan, gan, hspa-evol, eutran, virtual, eutran-nb, ehrpd, hrpd, cdma-1x, umb, wifi, nr, lte-m

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rtt-threshold (number | keyword)

Synopsis

RTT congestion threshold for a RAT type

Context

configure application-assurance group number partition number access-network-location source keyword rat-type keyword rtt-threshold (number | keyword)

Tree

rtt-threshold

Description

This command specifies the maximum acceptable round trip time (RTT) under no congestion. Any measured RTT above the threshold is considered an indication of possible congestion.

Range

1 to 500

Units

milliseconds

Options

not-applicable

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rtt-threshold (number | keyword)

Synopsis

Source round trip time congestion threshold

Context

configure application-assurance group number partition number access-network-location source keyword rtt-threshold (number | keyword)

Tree

rtt-threshold

Description

This command configures the default round trip delay threshold used by the DEM gateway algorithm to determine ANL congestion. This default value is used when either the ANL RAT-Type is not known or has no associated configured RTT threshold. 

Range

1 to 500

Default

173

Units

milliseconds

Options

not-applicable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rtt-threshold-tolerance number

Synopsis

Source round trip time congestion threshold tolerance

Context

configure application-assurance group number partition number access-network-location source keyword rtt-threshold-tolerance number

Tree

rtt-threshold-tolerance

Description

This command configures the ANL round trip delay threshold tolerance used by the DEM gateway algorithm to determine ANL-level congestion.

Range

0 to 100

Default

50

Units

percent

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

source-level keyword

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

Access network location source level

Context

configure application-assurance group number partition number access-network-location source keyword source-level keyword

Tree

source-level

Default

cell

Options

cell, transport-network-link, mac-vlan

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aqp-initial-lookup boolean

Synopsis

Enable AQP initial lookup

Context

configure application-assurance group number partition number aqp-initial-lookup boolean

Tree

aqp-initial-lookup

Description

When configured to true, this command allows AA to perform application QoS policy (AQP) lookups on flows prior to complete application identification. As usual, AQP will be looked up again when identification is complete. Without this, AA executes AQPs that are part of the sub-default policy. The sub-default policy is formed by regular AQPs that contain ASOs, subID, or flow direction as matching conditions.

This behavior is required, for example, to apply GTP and SCTP filtering on the first packet of a new GTP/SCTP flow (AQP matching conditions).

When configured to false, AA only performs AQP lookups when identification is complete.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cflowd

Synopsis

Enter the cflowd context

Context

configure application-assurance group number partition number cflowd

Tree

cflowd

Description

Commands in this context configure the AA partition-based cflowd fields.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-type [flow-export-type] keyword

Synopsis

Enter the export-type list instance

Context

configure application-assurance group number partition number cflowd export-type keyword

Tree

export-type

Description

Commands in this context configure the scope of traffic subjected to AA cflowd export.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[flow-export-type] keyword

Synopsis

Cflowd flow export type for the partition

Context

configure application-assurance group number partition number cflowd export-type keyword

Description

This command allows the operator to configure the scope of traffic that can be sampled for cflowd export for the configured cflowd template.

Options

volume, tcp-performance, rtp-performance, comprehensive

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of cflowd export

Context

configure application-assurance group number partition number cflowd export-type keyword admin-state keyword

Tree

admin-state

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-group [app-group-name] reference

Synopsis

Enter the app-group list instance

Context

configure application-assurance group number partition number cflowd export-type keyword app-group reference

Tree

app-group

Description

Commands in this context configure application groups for flow sampling and cflowd export.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[app-group-name] reference

Synopsis

Application group name

Context

configure application-assurance group number partition number cflowd export-type keyword app-group reference

Reference

configure application-assurance group number partition number policy app-group string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rate-choice keyword

Synopsis

Cflowd rate to use for sampling

Context

configure application-assurance group number partition number cflowd export-type keyword app-group reference rate-choice keyword

Tree

rate-choice

Default

flow-rate

Options

flow-rate, flow-rate-2

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

application [application-name] reference

Synopsis

Enter the application list instance

Context

configure application-assurance group number partition number cflowd export-type keyword application reference

Tree

application

Description

Commands in this context configure applications for flow sampling and cflowd export.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[application-name] reference

Synopsis

Application name

Context

configure application-assurance group number partition number cflowd export-type keyword application reference

Reference

configure application-assurance group number partition number policy application string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rate-choice keyword

Synopsis

Cflowd rate to use for sampling

Context

configure application-assurance group number partition number cflowd export-type keyword application reference rate-choice keyword

Tree

rate-choice

Default

flow-rate

Options

flow-rate, flow-rate-2

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log [event-log-name] string

Synopsis

Enter the event-log list instance

Context

configure application-assurance group number partition number event-log string

Tree

event-log

Description

Commands in this context configure an event log.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[event-log-name] string

Synopsis

Partition event log name

Context

configure application-assurance group number partition number event-log string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the event log

Context

configure application-assurance group number partition number event-log string admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

buffer-type keyword

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Event log buffer type

Context

configure application-assurance group number partition number event-log string buffer-type keyword

Tree

buffer-type

Default

linear

Options

linear, circular, syslog

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

max-entries number

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Maximum number of entries for the event log

Context

configure application-assurance group number partition number event-log string max-entries number

Tree

max-entries

Range

1 to 100000

Default

500

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

syslog

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Enter the syslog context

Context

configure application-assurance group number partition number event-log string syslog

Tree

syslog

Description

Commands in this context configure the syslog options for the partition.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

address (ipv4-address-no-zone | ipv6-address-no-zone)

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Syslog host IP address

Context

configure application-assurance group number partition number event-log string syslog address (ipv4-address-no-zone | ipv6-address-no-zone)

Tree

address

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number event-log string syslog description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

facility keyword

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

AA syslog facility

Context

configure application-assurance group number partition number event-log string syslog facility keyword

Tree

facility

Description

This command configures the syslog facility. The syslog facility is an information field associated with a syslog message. It is defined by the syslog protocol and provides an indication of which part of the system originated the message.

Default

local7

Options

kernel, user, mail, systemd, auth, syslogd, printer, netnews, uucp, cron, authpriv, ftp, ntp, logaudit, logalert, cron2, local0, local1, local2, local3, local4, local5, local6, local7

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port number

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Syslog host UDP port

Context

configure application-assurance group number partition number event-log string syslog port number

Tree

port

Description

This command specifies the UDP port used by application assurance for the syslog events.

Max. Range

0 to 65535

Default

514

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

severity keyword

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Syslog message severity level threshold

Context

configure application-assurance group number partition number event-log string syslog severity keyword

Tree

severity

Default

info

Options

emergency, alert, critical, error, warning, notice, info, debug

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

vlan-id number

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

ISA service port VLAN ID for sending syslog traffic

Context

configure application-assurance group number partition number event-log string syslog vlan-id number

Tree

vlan-id

Description

This command configures the service port VLAN ID to be used by application assurance to provide syslog events. This VLAN ID also needs to be configured for the application assurance interface.

Range

1 to 4094

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtp

Synopsis

Enter the gtp context

Context

configure application-assurance group number partition number gtp

Tree

gtp

Description

Commands in this context configure GTP parameters.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of GTP

Context

configure application-assurance group number partition number gtp admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtp-filter [gtp-filter-name] string

Synopsis

Enter the gtp-filter list instance

Context

configure application-assurance group number partition number gtp gtp-filter string

Tree

gtp-filter

Description

Commands in this context allow AA to treat traffic on UDP port number 2152 as GTP-U. Without further specifying any other parameters within this GTP context, AA performs basic GTP-U header sanity checks and discards packets that are malformed. This GTP context also allows the operator to configure various GTP filters.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[gtp-filter-name] string

Synopsis

GTP filter name

Context

configure application-assurance group number partition number gtp gtp-filter string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number gtp gtp-filter string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtp-in-gtp keyword

Synopsis

GTP in GTP packet filtering

Context

configure application-assurance group number partition number gtp gtp-filter string gtp-in-gtp keyword

Tree

gtp-in-gtp

Default

permit

Options

deny, permit

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtp-tunnel-database

Synopsis

Enter the gtp-tunnel-database context

Context

configure application-assurance group number partition number gtp gtp-filter string gtp-tunnel-database

Tree

gtp-tunnel-database

Description

Commands in this context configure GTP advanced firewall functions, such as validating GTP tunnels, sequence numbers, and source IP addresses).

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-tunnel-endpoint-limit number

Synopsis

Default GTP tunnel endpoint limit

Context

configure application-assurance group number partition number gtp gtp-filter string gtp-tunnel-database default-tunnel-endpoint-limit number

Tree

default-tunnel-endpoint-limit

Description

This command configures the maximum number of GTP endpoints requested in GTP-C messages by using, for example, the PDP Context Create message type. 

The validate-gtp-tunnels command must be enabled before using this command.

Range

1 to 4294967295

Default

4294967295

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

validate-gtp-tunnels boolean

Synopsis

Enable GTP tunnel validation

Context

configure application-assurance group number partition number gtp gtp-filter string gtp-tunnel-database validate-gtp-tunnels boolean

Tree

validate-gtp-tunnels

Description

When configured to true, this command configures GTP tunnel validation. This allows for the validation of TEIDs and is a prerequisite for sequence checking and UE IP address validation. This command is only applicable when AA GTP FW is deployed on S8/S5/Gp/Gn interfaces. The gtpc-inspection command in the configure application-assurance group partition gtp context must be configured to true before using this command.

When configured to false, the GTP tunnels cannot be validated.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

validate-sequence-number boolean

Synopsis

Enable GTP sequence number checking

Context

configure application-assurance group number partition number gtp gtp-filter string gtp-tunnel-database validate-sequence-number boolean

Tree

validate-sequence-number

Description

When configured to true, this command enables GTP sequence number checking. GTP packets that fail the sequence number check are discarded.

The validate-gtp-tunnels command in the configure application-assurance group partition gtp gtp-filter gtp-tunnel-database context must be configured to true before using this command.

When configured to false, the GTP packet sequence number cannot be checked.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

validate-source-ip-addr boolean

Synopsis

Validate source IP address in GTP frames

Context

configure application-assurance group number partition number gtp gtp-filter string gtp-tunnel-database validate-source-ip-addr boolean

Tree

validate-source-ip-addr

Description

When configured to true, this command enables checking for spoofed or invalid UE IP addresses. Upstream GTP packets that contain invalid UE IP addresses are discarded. When a packet is dropped due to source-ip-address “invalid source IP add”, the statistics counter is updated.

The validate-gtp-tunnels command in the configure application-assurance group partition gtp gtp-filter gtp-tunnel-database context must be configured to true before using this command.

When configured to false, the spoofed or invalid UE IP addresses cannot be checked.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

imsi-apn-filter

Synopsis

Enter the imsi-apn-filter context

Context

configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter

Tree

imsi-apn-filter

Description

Commands in this context configure IMSI and APN filtering.

The gtpc-inspection command in the configure application-assurance group partition gtp context must be configured to true before using this command. 

This command is only applicable to the GTP packets that contain IMSI or APN information elements (IEs).

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action keyword

Synopsis

IMSI APN filter default action

Context

configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter default-action keyword

Tree

default-action

Default

permit

Options

deny, permit

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number

Synopsis

Enter the entry list instance

Context

configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter entry number

Tree

entry

Description

Commands in this context configure an entry within the IMSI-APN filter to allow for IMSI-APN match and action configuration.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number

Synopsis

AA IMSI-APN filter entry ID

Context

configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter entry number

Description

This command specifies the index in the IMSI-APN list that defines a custom filtering action.

Range

1031 to 2030

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword

Synopsis

IMSI APN filter entry action

Context

configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter entry number action keyword

Tree

action

Default

permit

Options

deny, permit

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

apn string

Synopsis

APN as GTP filter match criterion

Context

configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter entry number apn string

Tree

apn

Description

This command configures a matching condition for an APN configured as a GTP filter. If no APN is specified, the entry is not checked for the APN IE in GTP-C packets. The values for this command are:

  1.  string:The extracted APN must match string exactly.
  2. ^string: The extracted APN must start with string.
  3. string$: The extracted APN must end with string.
  4. WILDCARD_APN: Special string that indicates that the extracted APN must be “*” (that is, a length octet with value one, followed by the ASCII code for the asterisk)
  5. EMPTY_APN: Special string that indicates that the extracted APN must be empty (that is, “”)
  6. ANY_APN: Special string that indicates that the extracted APN IE must be present and can have any value in order for the filter entry to match
String Length

1 to 100

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

imsi-mcc-mnc-prefix string

Synopsis

IMSI (MCC-MNC) prefix as GTP filter match criterion

Context

configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter entry number imsi-mcc-mnc-prefix string

Tree

imsi-mcc-mnc-prefix

Description

This command configures a matching condition for the IMSI (MCC-MNC) prefix. This string represents the IMSI prefix to be matched against the IMSI IE of the packet, or the special value ANY_IMSI to indicate that an IMSI IE must be present as a matching condition regardless of the IMSI IE value. If no MCC-MNC prefix is specified, the entry will match GTP packets that have an IMSI IE containing any value.

String Length

1 to 8

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

src-gsn

Synopsis

Enter the src-gsn context

Context

configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter entry number src-gsn

Tree

src-gsn

Description

Commands in this context configure a matching condition for the GSN IP address. The IP address value is checked only against the source IP address of the GTP packets that contain an APN IE or an IMSI IE.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)

Synopsis

Source GSN IP address prefix as GTP filter match criterion

Context

configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter entry number src-gsn ip-prefix (ipv4-prefix | ipv6-prefix)

Tree

ip-prefix

Description

This command specifies a valid unicast address associated with the IMSI-APN filter entry.

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference

Synopsis

Source GSN IP address prefix list as match criterion

Context

configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter entry number src-gsn ip-prefix-list reference

Tree

ip-prefix-list

Reference

configure application-assurance group number partition number ip-prefix-list string

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

log

Synopsis

Enter the log context

Context

configure application-assurance group number partition number gtp gtp-filter string log

Tree

log

Description

Commands in this context configure the AA group partition GTP filter log.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword

Synopsis

GTP filter action to be logged

Context

configure application-assurance group number partition number gtp gtp-filter string log action keyword

Tree

action

Default

deny

Options

deny, permit, all

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference

Synopsis

Event-log name to capture GTP filter events

Context

configure application-assurance group number partition number gtp gtp-filter string log event-log reference

Tree

event-log

Reference

configure application-assurance group number partition number event-log string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

max-payload-length number

Synopsis

Maximum allowed GTP payload length

Context

configure application-assurance group number partition number gtp gtp-filter string max-payload-length number

Tree

max-payload-length

Range

0 to 65535

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

message-type

Synopsis

Enter the message-type context

Context

configure application-assurance group number partition number gtp gtp-filter string message-type

Tree

message-type

Description

Commands in this context configure the GTP message-type filtering. If no message type is specified within a filter, all GTP message types are allowed.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action keyword

Synopsis

GTP message type default action

Context

configure application-assurance group number partition number gtp gtp-filter string message-type default-action keyword

Tree

default-action

Default

permit

Options

deny, permit

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number

Synopsis

Enter the entry list instance

Context

configure application-assurance group number partition number gtp gtp-filter string message-type entry number

Tree

entry

Description

Commands in this context configure an entry for a specific GTPv1 message type value.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number

Synopsis

GTP filter entry ID

Context

configure application-assurance group number partition number gtp gtp-filter string message-type entry number

Description

This command specifies the index in the GTPv1 message value list that defines a custom message-type action.

Range

1 to 255

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword

Synopsis

GTPv1 filter message entry action

Context

configure application-assurance group number partition number gtp gtp-filter string message-type entry number action keyword

Tree

action

Options

deny, permit

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value (number | keyword)

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

GTPv1 filter message type value

Context

configure application-assurance group number partition number gtp gtp-filter string message-type entry number value (number | keyword)

Tree

value

Range

1 to 255

Options

echo-request, echo-response, version-not-supported, node-alive-request, node-alive-response, redirection-request, redirection-response, create-pdp-context-request, create-pdp-context-response, update-pdp-context-request, update-pdp-context-response, delete-pdp-context-request, delete-pdp-context-response, initiate-pdp-context-activation-request, initiate-pdp-context-activation-response, error-indication, pdu-notification-request, pdu-notification-response, pdu-notification-reject-request, pdu-notification-reject-response, supported-extension-headers-notification, send-routing-information-for-gprs-request, send-routing-information-for-gprs-response, failure-report-request, failure-report-response, note-ms-gprs-present-request, note-ms-gprs-present-response, identification-request, identification-response, sgsn-context-request, sgsn-context-response, sgsn-context-acknowledge, forward-relocation-request, forward-relocation-response, forward-relocation-complete, relocation-cancel-request, relocation-cancel-response, forward-srns-context, forward-relocation-complete-acknowledge, forward-srns-context-acknowledge, ran-information-relay, mbms-notification-request, mbms-notification-response, mbms-notification-reject-request, mbms-notification-reject-response, create-mbms-context-request, create-mbms-context-response, update-mbms-context-request, update-mbms-context-response, delete-mbms-context-request, delete-mbms-context-response, mbms-registration-request, mbms-registration-response, mbms-de-registration-request, mbms-de-registration-response, mbms-session-start-request, mbms-session-start-response, mbms-session-stop-request, mbms-session-stop-response, mbms-session-update-request, mbms-session-update-response, ms-info-change-notification-request, ms-info-change-notification-response, data-record-transfer-request, data-record-transfer-response, end-marker, g-pdu

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

message-type-gtp-v2

Synopsis

Enter the message-type-gtp-v2 context

Context

configure application-assurance group number partition number gtp gtp-filter string message-type-gtp-v2

Tree

message-type-gtp-v2

Description

Commands in this context configure the GTPv2 message-type filtering.

If message-type GTPv2 is not specified within a filter, all GTP message types are allowed, except for the messages that are dropped by GTP-C inspection because they violate the expected GTP protocol for the deployment interface (for example, roaming deployment).

The gtpc-inspection command in the configure application-assurance group partition gtp context must be configured to true before configuring GTPv2 message-type filtering.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action keyword

Synopsis

GTPv2 message type default action

Context

configure application-assurance group number partition number gtp gtp-filter string message-type-gtp-v2 default-action keyword

Tree

default-action

Default

permit

Options

deny, permit

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number

Synopsis

Enter the entry list instance

Context

configure application-assurance group number partition number gtp gtp-filter string message-type-gtp-v2 entry number

Tree

entry

Description

Commands in this context configure an entry for a specific GTPv2 message type value.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number

Synopsis

GTPv2 filter entry ID

Context

configure application-assurance group number partition number gtp gtp-filter string message-type-gtp-v2 entry number

Description

This command configures the index in the GTP message value list that defines a custom message-type action.

Range

516 to 770

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword

Synopsis

GTPv2 filter message entry action

Context

configure application-assurance group number partition number gtp gtp-filter string message-type-gtp-v2 entry number action keyword

Tree

action

Description

This command specifies the action to take for packets that match this GTPv2 filter message entry.

Options

deny, permit

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value (number | keyword)

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

GTPv2 filter message type value

Context

configure application-assurance group number partition number gtp gtp-filter string message-type-gtp-v2 entry number value (number | keyword)

Tree

value

Range

1 to 255

Options

echo-request, echo-response, version-not-supported-indication, create-session-request, create-session-response, modify-bearer-request, modify-bearer-response, delete-session-request, delete-session-response, change-notification-request, change-notification-response, remote-ue-report-notification, remote-ue-report-acknowledge, modify-bearer-command, modify-bearer-failure-indication, delete-bearer-command, delete-bearer-failure-indication, bearer-resource-command, bearer-resource-failure-indication, downlink-data-notification-failure-indication, trace-session-activation, trace-session-deactivation, stop-paging-indication, create-bearer-request, create-bearer-response, update-bearer-request, update-bearer-response, delete-bearer-request, delete-bearer-response, delete-pdn-connection-set-request, delete-pdn-connection-set-response, pgw-downlink-triggering-notification, pgw-downlink-triggering-acknowledge, identification-request, identification-response, context-request, context-response, context-acknowledge, forward-relocation-request, forward-relocation-response, forward-relocation-complete-notification, forward-relocation-complete-acknowledge, forward-access-context-notification, forward-access-context-acknowledge, relocation-cancel-request, relocation-cancel-response, configuration-transfer-tunnel, detach-notification, detach-acknowledge, cs-paging-indication, ran-information-relay, alert-mme-notification, alert-mme-acknowledge, ue-activity-notification, ue-activity-acknowledge, isr-status-indication, create-forwarding-tunnel-request, create-forwarding-tunnel-response, suspend-notification, suspend-acknowledge, resume-notification, resume-acknowledge, create-indirect-data-forwarding-tunnel-request, create-indirect-data-forwarding-tunnel-response, delete-indirect-data-forwarding-tunnel-request, delete-indirect-data-forwarding-tunnel-response, release-access-bearers-request, release-access-bearers-response, downlink-data-notification, downlink-data-notification-acknowledge, pgw-restart-notification, pgw-restart-notification-acknowledge, update-pdn-connection-set-request, update-pdn-connection-set-response, modify-access-bearers-request, modify-access-bearers-response, mbms-session-start-request, mbms-session-start-response, mbms-session-update-request, mbms-session-update-response, mbms-session-stop-request, mbms-session-stop-response

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtpc-inspection boolean

Synopsis

Enable inspection of GTP-C packets

Context

configure application-assurance group number partition number gtp gtpc-inspection boolean

Tree

gtpc-inspection

Description

When configured to true, this command enables the inspection of GTP-C packets. This is relevant only when AA GTP FW is deployed on S8/S5/Gp/Gn interfaces. This command must be enabled before configuring related features, such as APN filtering, GTP tunnel validation, message-type-v2 filtering, sequence number validation, and SRC IP validation.

When configured to false, GTP-C packet inspection cannot be performed.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

log

Synopsis

Enter the log context

Context

configure application-assurance group number partition number gtp log

Tree

log

Description

Commands in this context configure the AA group partition GTP log.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword

Synopsis

GTP log action

Context

configure application-assurance group number partition number gtp log action keyword

Tree

action

Description

This command specifies the action on which the GTP log is raised.

Default

deny

Options

deny, permit, all

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference

Synopsis

Event log reference for logging GTP events

Context

configure application-assurance group number partition number gtp log event-log reference

Tree

event-log

Reference

configure application-assurance group number partition number event-log string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mode keyword

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

GTP mode

Context

configure application-assurance group number partition number gtp mode keyword

Tree

mode

Default

filtering

Options

filtering, untunneling

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-match-all-requests boolean

Synopsis

Enable HTTP matching for all requests for an expression

Context

configure application-assurance group number partition number http-match-all-requests boolean

Tree

http-match-all-requests

Description

When configured to true, this command enables HTTP matching for all requests for an HTTP expression.

When configured to false, this command restores the default and removes the matching request for this particular expression.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-x-online-host boolean

Synopsis

Enable X-Online-Host header field

Context

configure application-assurance group number partition number http-x-online-host boolean

Tree

http-x-online-host

Description

When configured to true, this command enables the X-Online-Host header field as a replacement for the HTTP Host header field.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list [ip-prefix-list-name] string

Synopsis

Enter the ip-prefix-list list instance

Context

configure application-assurance group number partition number ip-prefix-list string

Tree

ip-prefix-list

Description

Commands in this context configure an IP prefix list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[ip-prefix-list-name] string

Synopsis

AA IP prefix list name

Context

configure application-assurance group number partition number ip-prefix-list string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number ip-prefix-list string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

prefix [ip-prefix] (ipv4-prefix | ipv6-prefix)

Synopsis

Enter the prefix list instance

Context

configure application-assurance group number partition number ip-prefix-list string prefix (ipv4-prefix | ipv6-prefix)

Tree

prefix

Description

Commands in this context configure an IP prefix within the list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[ip-prefix] (ipv4-prefix | ipv6-prefix)

Synopsis

AA IP prefix

Context

configure application-assurance group number partition number ip-prefix-list string prefix (ipv4-prefix | ipv6-prefix)

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

name string

Synopsis

AA IP prefix name

Context

configure application-assurance group number partition number ip-prefix-list string prefix (ipv4-prefix | ipv6-prefix) name string

Tree

name

String Length

1 to 32

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

policy

Synopsis

Enter the policy context

Context

configure application-assurance group number partition number policy

Tree

policy

Description

Commands in this context configure the fields for the Application Assurance policy. 

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-filter

Synopsis

Enter the app-filter context

Context

configure application-assurance group number partition number policy app-filter

Tree

app-filter

Description

Commands in this context configure an application filter for Application Assurance.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number

Synopsis

Enter the entry list instance

Context

configure application-assurance group number partition number policy app-filter entry number

Tree

entry

Description

Commands in this context create an application filter entry. 

Application filter entries are an ordered list. The lowest numerical entry that matches the flow defines the application for that flow. 

An application filter entry or entries configure match attributes of an application.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number

Synopsis

Application filter entry ID

Context

configure application-assurance group number partition number policy app-filter entry number

Range

1 to 65535

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the AA application filter entry

Context

configure application-assurance group number partition number policy app-filter entry number admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

application reference

Synopsis

Application name

Context

configure application-assurance group number partition number policy app-filter entry number application reference

Tree

application

Reference

configure application-assurance group number partition number policy application string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number policy app-filter entry number description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

expression [expr-index] number

Synopsis

Enter the expression list instance

Context

configure application-assurance group number partition number policy app-filter entry number expression number

Tree

expression

Description

Commands in this context configure string values to use in the application definition.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[expr-index] number

Synopsis

Application filter matching expression identifier

Context

configure application-assurance group number partition number policy app-filter entry number expression number

Range

1 to 4

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq string

Synopsis

Exact match for application filter matching expression

Context

configure application-assurance group number partition number policy app-filter entry number expression number eq string

Tree

eq

String Length

1 to 255

Notes

The following elements are part of a mandatory choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq string

Synopsis

Non-match for application filter matching expression

Context

configure application-assurance group number partition number policy app-filter entry number expression number neq string

Tree

neq

String Length

1 to 255

Notes

The following elements are part of a mandatory choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

type keyword

Synopsis

Application filter matching expression type

Context

configure application-assurance group number partition number policy app-filter entry number expression number type keyword

Tree

type

Options

http-host, http-uri, http-referer, sip-ua, sip-uri, sip-mt, citrix-app, http-user-agent, h323-product-id, tls-cert-subj-org-name, tls-cert-subj-common-name, rtsp-host, rtsp-uri, rtsp-ua, rtmp-page-host, rtmp-page-uri, rtmp-swf-host, rtmp-swf-uri, rtmp-tc-host, rtmp-tc-uri, dns-domain-name

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-setup-direction keyword

Synopsis

Traffic flow direction for the application filter entry

Context

configure application-assurance group number partition number policy app-filter entry number flow-setup-direction keyword

Tree

flow-setup-direction

Default

both

Options

subscriber-to-network, network-to-subscriber, both

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-match-all-requests boolean

Synopsis

Enable HTTP matching for all requests

Context

configure application-assurance group number partition number policy app-filter entry number http-match-all-requests boolean

Tree

http-match-all-requests

Description

When configured to true, this command enables HTTP matching for all requests for an HTTP expression.

When configured to false, this command restores the default for this app-filter entry which matches the first request.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-port

Synopsis

Enter the http-port context

Context

configure application-assurance group number partition number policy app-filter entry number http-port

Tree

http-port

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq

Synopsis

Enter the eq context

Context

configure application-assurance group number partition number policy app-filter entry number http-port eq

Tree

eq

Description

Commands in this context configure the exact value as the match criterion.

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference

Synopsis

Port list name

Context

configure application-assurance group number partition number policy app-filter entry number http-port eq port-list reference

Tree

port-list

Reference

configure application-assurance group number partition number port-list string

Notes

The following elements are part of a choice: port-list or port-number.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number

Synopsis

Server port number

Context

configure application-assurance group number partition number policy app-filter entry number http-port eq port-number number

Tree

port-number

Range

0 | 1 to 65535

Default

0

Notes

The following elements are part of a choice: port-list or port-number.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq

Synopsis

Enter the neq context

Context

configure application-assurance group number partition number policy app-filter entry number http-port neq

Tree

neq

Description

Commands in this context configure the non-match criterion used. 

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference

Synopsis

Port list name

Context

configure application-assurance group number partition number policy app-filter entry number http-port neq port-list reference

Tree

port-list

Reference

configure application-assurance group number partition number port-list string

Notes

The following elements are part of a choice: port-list or port-number.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number

Synopsis

Server port number

Context

configure application-assurance group number partition number policy app-filter entry number http-port neq port-number number

Tree

port-number

Range

0 | 1 to 65535

Default

0

Notes

The following elements are part of a choice: port-list or port-number.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-protocol

Synopsis

Enter the ip-protocol context

Context

configure application-assurance group number partition number policy app-filter entry number ip-protocol

Tree

ip-protocol

Description

Commands in this context configure the IP protocol to use in the application definition.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq (number | keyword)

Synopsis

Exact match criterion used for the IP protocol number

Context

configure application-assurance group number partition number policy app-filter entry number ip-protocol eq (number | keyword)

Tree

eq

Range

0 to 255

Options

tcp-udp, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route, ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq (number | keyword)

Synopsis

Non-match criterion used for the IP protocol number

Context

configure application-assurance group number partition number policy app-filter entry number ip-protocol neq (number | keyword)

Tree

neq

Range

0 to 255

Options

tcp-udp, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route, ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

network-address

Synopsis

Enter the network-address context

Context

configure application-assurance group number partition number policy app-filter entry number network-address

Tree

network-address

Description

Commands in this context configure the network address to use for the application filter entry. The network address is the address on the network side of AA, independent of whether the subscriber is acting as a client or server and is not normally used in AA app-filters. The network address will match the destination IP address in a from-sub flow or the source IP address in a to-sub flow.

Notes

The following elements are part of a choice: network-address or server-address.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq

Synopsis

Enter the eq context

Context

configure application-assurance group number partition number policy app-filter entry number network-address eq

Tree

eq

Description

Commands in this context specify an exact value as the match criterion for the network address.

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)

Synopsis

IP prefix

Context

configure application-assurance group number partition number policy app-filter entry number network-address eq ip-prefix (ipv4-prefix | ipv6-prefix)

Tree

ip-prefix

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference

Synopsis

IP prefix list

Context

configure application-assurance group number partition number policy app-filter entry number network-address eq ip-prefix-list reference

Tree

ip-prefix-list

Reference

configure application-assurance group number partition number ip-prefix-list string

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq

Synopsis

Enter the neq context

Context

configure application-assurance group number partition number policy app-filter entry number network-address neq

Tree

neq

Description

Commands in this context specify the non-match criterion used for the network address. 

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)

Synopsis

IP prefix

Context

configure application-assurance group number partition number policy app-filter entry number network-address neq ip-prefix (ipv4-prefix | ipv6-prefix)

Tree

ip-prefix

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference

Synopsis

IP prefix list

Context

configure application-assurance group number partition number policy app-filter entry number network-address neq ip-prefix-list reference

Tree

ip-prefix-list

Reference

configure application-assurance group number partition number ip-prefix-list string

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

protocol

Synopsis

Enter the protocol context

Context

configure application-assurance group number partition number policy app-filter entry number protocol

Tree

protocol

Description

Commands in this context configure the protocol signature in the application definition.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq (string | named-item)

Synopsis

Exact match criterion used for the AA protocol name

Context

configure application-assurance group number partition number policy app-filter entry number protocol eq (string | named-item)

Tree

eq

String Length

1 to 32

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq (string | named-item)

Synopsis

Non-match criterion used for the AA protocol name

Context

configure application-assurance group number partition number policy app-filter entry number protocol neq (string | named-item)

Tree

neq

String Length

1 to 32

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server-address

Synopsis

Enter the server-address context

Context

configure application-assurance group number partition number policy app-filter entry number server-address

Tree

server-address

Description

Commands in this context configure the server address to use for the application filter entry. The server address is the address on the server end of a client-server session.

Notes

The following elements are part of a choice: network-address or server-address.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq

Synopsis

Enter the eq context

Context

configure application-assurance group number partition number policy app-filter entry number server-address eq

Tree

eq

Description

Commands in this context configure the attributes of the IP address used for the exact match criterion for the application flow.                                                                            

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-ip-cache reference

Synopsis

DNS IP cache name

Context

configure application-assurance group number partition number policy app-filter entry number server-address eq dns-ip-cache reference

Tree

dns-ip-cache

Reference

configure application-assurance group number dns-ip-cache string

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, ip-prefix-list, or masked-ip.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)

Synopsis

IP prefix

Context

configure application-assurance group number partition number policy app-filter entry number server-address eq ip-prefix (ipv4-prefix | ipv6-prefix)

Tree

ip-prefix

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, ip-prefix-list, or masked-ip.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference

Synopsis

IP prefix list

Context

configure application-assurance group number partition number policy app-filter entry number server-address eq ip-prefix-list reference

Tree

ip-prefix-list

Reference

configure application-assurance group number partition number ip-prefix-list string

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, ip-prefix-list, or masked-ip.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

masked-ip

Synopsis

Enter the masked-ip context

Context

configure application-assurance group number partition number policy app-filter entry number server-address eq masked-ip

Tree

masked-ip

Description

Commands in this context configure the attributes of a masked IP address.

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, ip-prefix-list, or masked-ip.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

address (ipv4-address-no-zone | ipv6-address-no-zone)

Synopsis

IPv4 or IPv6 address mask

Context

configure application-assurance group number partition number policy app-filter entry number server-address eq masked-ip address (ipv4-address-no-zone | ipv6-address-no-zone)

Tree

address

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

netmask (ipv4-address-no-zone | ipv6-address-no-zone)

Synopsis

IPv4 or IPv6 address mask

Context

configure application-assurance group number partition number policy app-filter entry number server-address eq masked-ip netmask (ipv4-address-no-zone | ipv6-address-no-zone)

Tree

netmask

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq

Synopsis

Enter the neq context

Context

configure application-assurance group number partition number policy app-filter entry number server-address neq

Tree

neq

Description

Commands in this context configure the attributes of the IP address used for non-matching criteria in the application flow. 

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-ip-cache reference

Synopsis

DNS IP cache name

Context

configure application-assurance group number partition number policy app-filter entry number server-address neq dns-ip-cache reference

Tree

dns-ip-cache

Reference

configure application-assurance group number dns-ip-cache string

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, ip-prefix-list, or masked-ip.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)

Synopsis

IP prefix

Context

configure application-assurance group number partition number policy app-filter entry number server-address neq ip-prefix (ipv4-prefix | ipv6-prefix)

Tree

ip-prefix

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, ip-prefix-list, or masked-ip.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference

Synopsis

IP prefix list

Context

configure application-assurance group number partition number policy app-filter entry number server-address neq ip-prefix-list reference

Tree

ip-prefix-list

Reference

configure application-assurance group number partition number ip-prefix-list string

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, ip-prefix-list, or masked-ip.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

masked-ip

Synopsis

Enter the masked-ip context

Context

configure application-assurance group number partition number policy app-filter entry number server-address neq masked-ip

Tree

masked-ip

Description

Commands in this context configure the attributes of a masked IP address.

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, ip-prefix-list, or masked-ip.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

address (ipv4-address-no-zone | ipv6-address-no-zone)

Synopsis

IPv4 or IPv6 address mask

Context

configure application-assurance group number partition number policy app-filter entry number server-address neq masked-ip address (ipv4-address-no-zone | ipv6-address-no-zone)

Tree

address

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

netmask (ipv4-address-no-zone | ipv6-address-no-zone)

Synopsis

IPv4 or IPv6 address mask

Context

configure application-assurance group number partition number policy app-filter entry number server-address neq masked-ip netmask (ipv4-address-no-zone | ipv6-address-no-zone)

Tree

netmask

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server-port

Synopsis

Enter the server-port context

Context

configure application-assurance group number partition number policy app-filter entry number server-port

Tree

server-port

Description

Commands in this context specify the server TCP or UDP port number to use in the application definition.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq

Synopsis

Enter the eq context

Context

configure application-assurance group number partition number policy app-filter entry number server-port eq

Tree

eq

Description

Commands in this context configure the exact value as the match criterion for the server TCP or UDP number in the app-filter. 

Notes

The following elements are part of a choice: eq, gt, lt, or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

first-packet-policy keyword

Synopsis

First packet policy

Context

configure application-assurance group number partition number policy app-filter entry number server-port eq first-packet-policy keyword

Tree

first-packet-policy

Description

This command configures the action to perform on the first packet.

Options

first-packet-trusted, first-packet-validate

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference

Synopsis

Port-list name used in application filter criteria

Context

configure application-assurance group number partition number policy app-filter entry number server-port eq port-list reference

Tree

port-list

Reference

configure application-assurance group number partition number port-list string

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number

Synopsis

Server port number used as match criterion

Context

configure application-assurance group number partition number policy app-filter entry number server-port eq port-number number

Tree

port-number

Range

0 | 1 to 65535

Default

0

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range

Synopsis

Enter the range context

Context

configure application-assurance group number partition number policy app-filter entry number server-port eq range

Tree

range

Description

Commands in this context specify the match value as the match criterion based on the starting or ending port number.

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number

Synopsis

TCP/UDP ending port number

Context

configure application-assurance group number partition number policy app-filter entry number server-port eq range end number

Tree

end

Range

0 | 1 to 65535

Default

1

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number

Synopsis

TCP/UDP starting port number

Context

configure application-assurance group number partition number policy app-filter entry number server-port eq range start number

Tree

start

Range

0 | 1 to 65535

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gt

Synopsis

Enter the gt context

Context

configure application-assurance group number partition number policy app-filter entry number server-port gt

Tree

gt

Description

Commands in this context specify the greater than value as the match criterion for the server port number for the app-filter.

Notes

The following elements are part of a choice: eq, gt, lt, or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number

Synopsis

Server port number used as match criterion

Context

configure application-assurance group number partition number policy app-filter entry number server-port gt port-number number

Tree

port-number

Range

0 | 1 to 65535

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

lt

Synopsis

Enter the lt context

Context

configure application-assurance group number partition number policy app-filter entry number server-port lt

Tree

lt

Description

Commands in this context specify the less than value as the match criterion for the server port number for the app-filter.

Notes

The following elements are part of a choice: eq, gt, lt, or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number

Synopsis

Server port number used as match criterion

Context

configure application-assurance group number partition number policy app-filter entry number server-port lt port-number number

Tree

port-number

Range

0 | 1 to 65535

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq

Synopsis

Enter the neq context

Context

configure application-assurance group number partition number policy app-filter entry number server-port neq

Tree

neq

Description

Commands in this context configure non-match criterion used for the server TCP or UDP number in the app-filter. 

Notes

The following elements are part of a choice: eq, gt, lt, or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference

Synopsis

Port-list name used in application filter criteria

Context

configure application-assurance group number partition number policy app-filter entry number server-port neq port-list reference

Tree

port-list

Reference

configure application-assurance group number partition number port-list string

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number

Synopsis

Server port number used as match criterion

Context

configure application-assurance group number partition number policy app-filter entry number server-port neq port-number number

Tree

port-number

Range

0 | 1 to 65535

Default

0

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range

Synopsis

Enter the range context

Context

configure application-assurance group number partition number policy app-filter entry number server-port neq range

Tree

range

Description

Commands in this context specify the match value as the match criterion based on the starting or ending port number.

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number

Synopsis

TCP/UDP ending port number

Context

configure application-assurance group number partition number policy app-filter entry number server-port neq range end number

Tree

end

Range

0 | 1 to 65535

Default

1

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number

Synopsis

TCP/UDP starting port number

Context

configure application-assurance group number partition number policy app-filter entry number server-port neq range start number

Tree

start

Range

0 | 1 to 65535

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-group [application-group-name] string

Synopsis

Enter the app-group list instance

Context

configure application-assurance group number partition number policy app-group string

Tree

app-group

Description

Commands in this context create an application group for an application assurance policy.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[application-group-name] string

Synopsis

Application group name

Context

configure application-assurance group number partition number policy app-group string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

charging-group reference

Synopsis

Charging group used in the AA application group policy

Context

configure application-assurance group number partition number policy app-group string charging-group reference

Tree

charging-group

Reference

configure application-assurance group number partition number policy charging-group string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number policy app-group string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-id number

Synopsis

App group export ID used in RADIUS accounting export

Context

configure application-assurance group number partition number policy app-group string export-id number

Tree

export-id

Description

This command assigns an export ID value to a charging group, an application group, or an application that RADIUS accounting uses for accounting export identification. This export ID is encoded in the top two bytes of the RADIUS accounting VSA to identify which charging group the counter value represents.

If no export ID is assigned, the counter cannot be added to the AA subscriber stats RADIUS export-type. After a charging group index is referenced, it cannot be deleted without removing the reference.

Range

1 to 255

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-profile [app-profile-name] string

Synopsis

Enter the app-profile list instance

Context

configure application-assurance group number partition number policy app-profile string

Tree

app-profile

Description

Commands in this context create an application profile and configure the profile parameters.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[app-profile-name] string

Synopsis

App-profile name

Context

configure application-assurance group number partition number policy app-profile string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub-suppressible boolean

Synopsis

Enable AA suppression for subs with this app profile

Context

configure application-assurance group number partition number policy app-profile string aa-sub-suppressible boolean

Tree

aa-sub-suppressible

Description

When configured to true, this command configures the ability to suppress Application Assurance for subscribers with this application profile. 

This function is used in the context of an SRRP group interface. If an SRRP group interface is configured as configure service ies subscriber-interface group-interface suppress-aa-sub or configure service vprn subscriber-interface group-interface suppress-aa-sub, then subscribers with an application profile configured as suppressible are not diverted to Application Assurance.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

capacity-cost number

Synopsis

Application profile capacity cost

Context

configure application-assurance group number partition number policy app-profile string capacity-cost number

Tree

capacity-cost

Description

This command configures an application profile capacity cost. 

Capacity cost based load balancing allows a cost to be assigned to diverted SAPs (with the application profile). This allows for load balancing SAPs between ISAs and acts as a threshold to notify the operator if capacity planning is exceeded.

Range

1 to 65535

Default

1

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

characteristic [characteristic-name] reference

Synopsis

Enter the characteristic list instance

Context

configure application-assurance group number partition number policy app-profile string characteristic reference

Tree

characteristic

Description

Commands in this context assign one of the existing values of an existing application service option characteristic to the application profile.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[characteristic-name] reference

Synopsis

Application service option characteristic name

Context

configure application-assurance group number partition number policy app-profile string characteristic reference

Reference

configure application-assurance group number partition number policy app-service-options characteristic string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value reference

Synopsis

ASO characteristic value name

Context

configure application-assurance group number partition number policy app-profile string characteristic reference value reference

Tree

value

Reference

configure application-assurance group number partition number policy app-service-options characteristic string value string

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number policy app-profile string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

divert boolean

Synopsis

Enable traffic redirection to AA ISAs or ESA VMs

Context

configure application-assurance group number partition number policy app-profile string divert boolean

Tree

divert

Description

When configured to true, this command enables the redirection of traffic to AA ISAs or ESA VMs for the system-wide forwarding classes diverted to Application Assurance (configure isa application-assurance-group divert-fc) for AA subscribers using this application profile.

When configured to false, this command stops the redirection of traffic to AA ISAs or ESA VMs for the AA subscribers using this application profile.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-qos-policy

Synopsis

Enter the app-qos-policy context

Context

configure application-assurance group number partition number policy app-qos-policy

Tree

app-qos-policy

Description

Commands in this context configure an application QoS policy.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number

Synopsis

Enter the entry list instance

Context

configure application-assurance group number partition number policy app-qos-policy entry number

Tree

entry

Description

Commands in this context create an application QoS policy (AQP) entry. 

A flow that matches multiple AQP entries will have multiple AQP entries actions applied. If a conflict occurs for two or more actions, the action from the AQP entry with the lowest numerical value takes precedence.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number

Synopsis

AQP entry ID

Context

configure application-assurance group number partition number policy app-qos-policy entry number

Range

1 to 65535

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action

Synopsis

Enter the action context

Context

configure application-assurance group number partition number policy app-qos-policy entry number action

Tree

action

Description

Commands in this context configure AQP actions to be performed on flows that match the match criteria of the AQP entry.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

abandon-tcp-optimization boolean

Synopsis

Enable abandoning TCP optimization for this entry

Context

configure application-assurance group number partition number policy app-qos-policy entry number action abandon-tcp-optimization boolean

Tree

abandon-tcp-optimization

Default

false

Introduced

22.2.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

bandwidth-policer

Synopsis

Enter the bandwidth-policer context

Context

configure application-assurance group number partition number policy app-qos-policy entry number action bandwidth-policer

Tree

bandwidth-policer

Description

Commands in this context assign an existing bandwidth policer as an action on flows matching this AQP entry. 

The match criteria for the AQP entry must specify a unidirectional traffic direction before a policer action can be configured. If a policer is used in one direction in an AQP match entry, the same policer name cannot be used by another AQP entry that uses different traffic direction match criteria. 

When multiple policers apply to a single flow, the final action on a packet is the worst case of all policer outcomes (for example, if one of the policers marks packet out of profile, the final marking will reflect that).

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

anl reference

Synopsis

Access network locator bandwidth policer

Context

configure application-assurance group number partition number policy app-qos-policy entry number action bandwidth-policer anl reference

Tree

anl

Description

This command creates an Application Assurance policy profile for a policer instance for each ANL that limits traffic bandwidth in the scope of that ANL. For ANL, only single-bucket bandwidth policers can be configured.

Reference

configure application-assurance group number policer anl-bandwidth-policer string

Notes

The following elements are part of a choice: anl, dual-bucket, or single-bucket.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dual-bucket reference

Synopsis

Dual bucket bandwidth limiting policer

Context

configure application-assurance group number partition number policy app-qos-policy entry number action bandwidth-policer dual-bucket reference

Tree

dual-bucket

Description

This command creates an Application Assurance policy profile for a dual bucket (PIR) bandwidth limiting policer.

Reference

configure application-assurance group number policer dual-bucket-bandwidth-policer string

Notes

The following elements are part of a choice: anl, dual-bucket, or single-bucket.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

single-bucket reference

Synopsis

Single bucket bandwidth limiting policer

Context

configure application-assurance group number partition number policy app-qos-policy entry number action bandwidth-policer single-bucket reference

Tree

single-bucket

Description

This command creates an Application Assurance policy profile for a single bucket (PIR) bandwidth limiting policer.

Reference

configure application-assurance group number policer single-bucket-bandwidth-policer string

Notes

The following elements are part of a choice: anl, dual-bucket, or single-bucket.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-ip-cache reference

Synopsis

DNS IP cache name

Context

configure application-assurance group number partition number policy app-qos-policy entry number action dns-ip-cache reference

Tree

dns-ip-cache

Reference

configure application-assurance group number dns-ip-cache string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

drop boolean

Synopsis

Enable drop action for the AQP entry

Context

configure application-assurance group number partition number policy app-qos-policy entry number action drop boolean

Tree

drop

Description

When configured to true, all flow traffic matching this AQP entry is dropped. 

The drop action is performed first and no other action is invoked on that flow even if multiple other actions exist for the flow because of one or more AQP entry matches.

When configured to false, this command disables the drop action on flows matching this AQP entry.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

error-drop

Synopsis

Enable the error-drop context

Context

configure application-assurance group number partition number policy app-qos-policy entry number action error-drop

Tree

error-drop

Description

Commands in this context configure a drop action for error flows (for instance, bad IP checksums or TCP/UDP port 0).

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference

Synopsis

Event log action for the AQP entry

Context

configure application-assurance group number partition number policy app-qos-policy entry number action error-drop event-log reference

Tree

event-log

Reference

configure application-assurance group number partition number event-log string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-count-limit-policer

Synopsis

Enter the flow-count-limit-policer context

Context

configure application-assurance group number partition number policy app-qos-policy entry number action flow-count-limit-policer

Tree

flow-count-limit-policer

Description

Commands in this context assign an existing flow count limit policer as an action on flows matching this AQP entry. 

The match criteria for the AQP entry must specify a unidirectional traffic direction before a policer action can be configured. If a policer is used in one direction in an AQP match entry, the same policer name cannot be used by another AQP entry that uses different traffic direction match criteria. 

When multiple policers are applied to a single flow, the final action on a packet is the worst case of all policer outcomes (for example, if one of the policers marks packet out of profile, the final marking will reflect that).

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference

Synopsis

Event log name

Context

configure application-assurance group number partition number policy app-qos-policy entry number action flow-count-limit-policer event-log reference

Tree

event-log

Reference

configure application-assurance group number partition number event-log string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

policer-name reference

Synopsis

Policer name

Context

configure application-assurance group number partition number policy app-qos-policy entry number action flow-count-limit-policer policer-name reference

Tree

policer-name

Description

This command specifies the name of the flow count limit policer for flows matching the AQP entry. The policer name is configured in the configure application-assurance group policer context.

Reference

configure application-assurance group number policer flow-count-limit-policer string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-setup-rate-policer

Synopsis

Enter the flow-setup-rate-policer context

Context

configure application-assurance group number partition number policy app-qos-policy entry number action flow-setup-rate-policer

Tree

flow-setup-rate-policer

Description

Commands in this context assign an existing flow setup rate policer as an action on flows matching this AQP entry.

The match criteria for the AQP entry must specify a unidirectional traffic direction before a policer action can be configured. If a policer is used in one direction in an AQP match entry, the same policer name cannot be used for another AQP entry that uses different traffic direction match criteria.

When multiple policers are applied to a single flow, the final action on a packet is the worst case of all policer outcomes (for example, if one of the policers marks a packet out of profile, the final marking reflects that).

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference

Synopsis

Flow drop events log name due to flow-setup rate policer

Context

configure application-assurance group number partition number policy app-qos-policy entry number action flow-setup-rate-policer event-log reference

Tree

event-log

Reference

configure application-assurance group number partition number event-log string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

policer-name reference

Synopsis

Policer name

Context

configure application-assurance group number partition number policy app-qos-policy entry number action flow-setup-rate-policer policer-name reference

Tree

policer-name

Description

This command specifies the name of the flow setup rate policer for flows matching this AQP entry.

Reference

configure application-assurance group number policer flow-setup-rate-policer string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

fragment-drop

Synopsis

Enter the fragment-drop context

Context

configure application-assurance group number partition number policy app-qos-policy entry number action fragment-drop

Tree

fragment-drop

Description

Commands in this context specify the drop action options to apply to fragments.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

drop-scope keyword

Synopsis

Fragment-drop scope

Context

configure application-assurance group number partition number policy app-qos-policy entry number action fragment-drop drop-scope keyword

Tree

drop-scope

Description

This command specifies which fragments to drop as an action on flows matching this AQP entry.

Options

all, out-of-order

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference

Synopsis

Event log name

Context

configure application-assurance group number partition number policy app-qos-policy entry number action fragment-drop event-log reference

Tree

event-log

Reference

configure application-assurance group number partition number event-log string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtp-filter reference

Synopsis

GTP filter executed for flows matching this AQP entry

Context

configure application-assurance group number partition number policy app-qos-policy entry number action gtp-filter reference

Tree

gtp-filter

Reference

configure application-assurance group number partition number gtp gtp-filter string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-enrich reference

Synopsis

HTTP header enrichment action for the AQP entry

Context

configure application-assurance group number partition number policy app-qos-policy entry number action http-enrich reference

Tree

http-enrich

Description

This command configures the HTTP header enrichment template name that is applied as defined in the tmnxBsxHttpEnrichTable. An empty value specifies no HTTP header enrichment template.

Reference

configure application-assurance group number http-enrich string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-error-redirect reference

Synopsis

HTTP error redirect for the AQP entry

Context

configure application-assurance group number partition number policy app-qos-policy entry number action http-error-redirect reference

Tree

http-error-redirect

Description

This command specifies the HTTP error redirect that is applied as defined in the redirect table. An empty value specifies no HTTP error redirect.

Reference

configure application-assurance group number http-error-redirect string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-notification reference

Synopsis

HTTP notification to use for flows matching AQP entry

Context

configure application-assurance group number partition number policy app-qos-policy entry number action http-notification reference

Tree

http-notification

Reference

configure application-assurance group number http-notification string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-redirect

Synopsis

Enter the http-redirect context

Context

configure application-assurance group number partition number policy app-qos-policy entry number action http-redirect

Tree

http-redirect

Description

Commands in this context assign an existing HTTP redirect policy as an action on flows matching this AQP entry. 

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-type keyword

Synopsis

Flow type for HTTP redirect of flows matching the entry

Context

configure application-assurance group number partition number policy app-qos-policy entry number action http-redirect flow-type keyword

Tree

flow-type

Description

This command assigns an existing HTTP redirect policy as an action on flows matching this AQP entry. The redirect only takes effect if the matching flows are HTTP and the condition specified is met. 

The condition specified by dropped flows means the flow is dropped due to an AQP action, such as flow rate, count policers, or drop actions. The admitted flows condition allows the operator to redirect HTTP traffic to a web portal while allowing non-HTTP traffic matching the same AQP rule to be forwarded.

No HTTP redirect takes place if the HTTP redirect action and a drop/flow-police action are part of the default AQP policy. In this case, any flow drop actions take place before identification of the application/application-group.

Options

dropped-flows, admitted-flows

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

name reference

Synopsis

HTTP redirect policy name

Context

configure application-assurance group number partition number policy app-qos-policy entry number action http-redirect name reference

Tree

name

Description

This command specifies the name of an existing HTTP policy redirect.

Reference

configure application-assurance group number http-redirect string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mirror-source

Synopsis

Enter the mirror-source context

Context

configure application-assurance group number partition number policy app-qos-policy entry number action mirror-source

Tree

mirror-source

Description

Commands in this context configure an application-based policy mirroring service that uses the AQP entry of this AA ISA as a mirror source. 

When configured, the AQP entry becomes a mirror source for IP packets seen by AA. The mirrored packet is an IP packet analyzed by AA and does not include encapsulations present on the incoming interfaces.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

all-inclusive boolean

Synopsis

Mirror flows matching the AQP subscriber default policy

Context

configure application-assurance group number partition number policy app-qos-policy entry number action mirror-source all-inclusive boolean

Tree

all-inclusive

Description

This command specifies that all packets during the identification phase that could match a given AQP rule are mirrored in addition to packets after an application identification completes that match the AQP rule. This ensures that all packets of a flow are mirrored at a cost of sending some unidentified packets, which after the application is identified no longer match this AQP entry.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mirror-service reference

Synopsis

Mirror source service ID for flows matching the entry

Context

configure application-assurance group number partition number policy app-qos-policy entry number action mirror-source mirror-service reference

Tree

mirror-service

Description

This command specifies the mirror source service ID to use for flows that match this policy.

Reference

configure mirror mirror-dest string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

overload-drop

Synopsis

Enable the overload-drop context

Context

configure application-assurance group number partition number policy app-qos-policy entry number action overload-drop

Tree

overload-drop

Description

Commands in this context configure a drop action for cases where flow records are not created (overload). This command is only applicable to ISA2 hardware.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference

Synopsis

Event log name

Context

configure application-assurance group number partition number policy app-qos-policy entry number action overload-drop event-log reference

Tree

event-log

Reference

configure application-assurance group number partition number event-log string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

remark

Synopsis

Enter the remark context

Context

configure application-assurance group number partition number policy app-qos-policy entry number action remark

Tree

remark

Description

Commands in this context configure the remark action on flows matching this AQP entry.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dscp

Synopsis

Enter the dscp context

Context

configure application-assurance group number partition number policy app-qos-policy entry number action remark dscp

Tree

dscp

Description

Commands in this context configure the DSCP remark action or actions on flows matching this AQP entry. 

All packets for all flows matching this AQP entry are remarked to the configured DSCP name. 

DSCP remark can only be applied when the entry remarks forwarding class or forwarding class and priority. In-profile and out-of-profile of a packet for DSCP remark is assessed after all AQP policing and priority remarking actions have taken place.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

in-profile keyword

Synopsis

DSCP name to remark matching in-profile flows

Context

configure application-assurance group number partition number policy app-qos-policy entry number action remark dscp in-profile keyword

Tree

in-profile

Options

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

out-profile keyword

Synopsis

DSCP name to remark matching out-of-profile flows

Context

configure application-assurance group number partition number policy app-qos-policy entry number action remark dscp out-profile keyword

Tree

out-profile

Options

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

fc keyword

Synopsis

FC remark action for flows matching this entry

Context

configure application-assurance group number partition number policy app-qos-policy entry number action remark fc keyword

Tree

fc

Options

be, l2, af, l1, h2, ef, h1, nc

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

priority keyword

Synopsis

Priority to use to remark flows matching this entry

Context

configure application-assurance group number partition number policy app-qos-policy entry number action remark priority keyword

Tree

priority

Default

auto

Options

low, high, auto

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sctp-filter reference

Synopsis

SCTP filter to use for flows matching the AQP entry

Context

configure application-assurance group number partition number policy app-qos-policy entry number action sctp-filter reference

Tree

sctp-filter

Reference

configure application-assurance group number partition number sctp-filter string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-filter reference

Synopsis

Session filter to use for flows matching the AQP entry

Context

configure application-assurance group number partition number policy app-qos-policy entry number action session-filter reference

Tree

session-filter

Reference

configure application-assurance group number partition number session-filter string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-mss-adjust number

Synopsis

TCP MSS adjustment traffic action and size

Context

configure application-assurance group number partition number policy app-qos-policy entry number action tcp-mss-adjust number

Tree

tcp-mss-adjust

Range

160 to 10240

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-validate reference

Synopsis

TCP validation policy action for entry matching flows

Context

configure application-assurance group number partition number policy app-qos-policy entry number action tcp-validate reference

Tree

tcp-validate

Description

This command assigns an existing TCP validation policy as an action on flows matching this AQP entry.

TCP validation can only be called from AQP entries that:

  1. have no matching conditions that relate to information extracted from the incoming IP packets; for example, no application or IP address.
  2. allow the following match conditions: none, aa-sub, characteristic, traffic-direction (both only), traffic-direction cannot be unidirectional (from or to sub). It can either be set to both or left unspecified.
Reference

configure application-assurance group number partition number tcp-validate string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tls-enrich reference

Synopsis

HTTP TLS enrichment action for the AQP entry

Context

configure application-assurance group number partition number policy app-qos-policy entry number action tls-enrich reference

Tree

tls-enrich

Reference

configure application-assurance group number http-enrich string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

url-filter

Synopsis

Enter the url-filter context

Context

configure application-assurance group number partition number policy app-qos-policy entry number action url-filter

Tree

url-filter

Description

Commands in this context configure a URL filter action for flows matching this entry.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

characteristic reference

Synopsis

URL filter characteristic used for matching AQP entries

Context

configure application-assurance group number partition number policy app-qos-policy entry number action url-filter characteristic reference

Tree

characteristic

Reference

configure application-assurance group number partition number policy app-service-options characteristic string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

name reference

Synopsis

URL filter name

Context

configure application-assurance group number partition number policy app-qos-policy entry number action url-filter name reference

Tree

name

Reference

configure application-assurance group number url-filter string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the AA AQP entry

Context

configure application-assurance group number partition number policy app-qos-policy entry number admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number policy app-qos-policy entry number description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

match

Synopsis

Enter the match context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match

Tree

match

Description

Commands in this context configure flow match rules for this AQP entry. A flow matches this AQP entry only if it matches all match rules defined (logical AND of all rules). If no match rule is specified, the entry will match all flows. 

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub

Synopsis

Enter the aa-sub context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub

Tree

aa-sub

Description

Commands in this context specify a Service Access Point (SAP) or an Enhanced Subscriber Management (ESM) subscriber as matching criteria.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

esm

Synopsis

Enter the esm context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub esm

Tree

esm

Description

Commands in this context configure the ESM fields for the AA subscriber match entry.

Notes

The following elements are part of a choice: esm, esm-mac, sap, spoke-sdp, or transit.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq string

Synopsis

Exact match criterion used for the ESM subscriber

Context

configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub esm eq string

Tree

eq

String Length

1 to 32

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq string

Synopsis

Non-match criterion used for ESM subscriber

Context

configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub esm neq string

Tree

neq

String Length

1 to 32

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

esm-mac

Synopsis

Enter the esm-mac context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub esm-mac

Tree

esm-mac

Description

Commands in this context configure the ESM MAC fields for the AA subscriber match entry.

Notes

The following elements are part of a choice: esm, esm-mac, sap, spoke-sdp, or transit.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq string

Synopsis

Exact match criterion used for ESM MAC subscriber

Context

configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub esm-mac eq string

Tree

eq

String Length

1 to 32

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq string

Synopsis

Non-match criterion used for AA subscriber ESM MAC

Context

configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub esm-mac neq string

Tree

neq

String Length

1 to 32

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sap

Synopsis

Enter the sap context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub sap

Tree

sap

Description

Commands in this context configure the SAP fields for the AA subscriber match entry.

Notes

The following elements are part of a choice: esm, esm-mac, sap, spoke-sdp, or transit.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq string

Synopsis

Exact match criterion used for the SAP subscriber

Context

configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub sap eq string

Tree

eq

String Length

1 to 45

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq string

Synopsis

Non-match criterion used for the SAP subscriber

Context

configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub sap neq string

Tree

neq

String Length

1 to 45

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

spoke-sdp

Synopsis

Enter the spoke-sdp context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub spoke-sdp

Tree

spoke-sdp

Description

Commands in this context configure the spoke SDP fields for the AA subscriber match entry.

Notes

The following elements are part of a choice: esm, esm-mac, sap, spoke-sdp, or transit.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq string

Synopsis

Exact match criterion used for a spoke SDP subscriber

Context

configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub spoke-sdp eq string

Tree

eq

String Length

3 to 16

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq string

Synopsis

Non-match criterion used for a spoke SDP subscriber

Context

configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub spoke-sdp neq string

Tree

neq

String Length

3 to 16

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

transit

Synopsis

Enter the transit context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub transit

Tree

transit

Description

Commands in this context configure the transit fields for the AA subscriber match entry.

Notes

The following elements are part of a choice: esm, esm-mac, sap, spoke-sdp, or transit.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq string

Synopsis

Exact match criterion used for a transit AA subscriber

Context

configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub transit eq string

Tree

eq

String Length

1 to 32

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq string

Synopsis

Non-match criterion used for a transit AA subscriber

Context

configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub transit neq string

Tree

neq

String Length

1 to 32

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub-tethering keyword

Synopsis

Tethering detection status for flow match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub-tethering keyword

Tree

aa-sub-tethering

Description

This command configures the match criteria for subscribers in a tethering state.

Default

not-applicable

Options

not-applicable, detected, not-detected

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-group

Synopsis

Enter the app-group context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match app-group

Tree

app-group

Description

Commands in this context add an application group to the match criteria used by this AQP entry.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq reference

Synopsis

Exact match criterion used for the application group

Context

configure application-assurance group number partition number policy app-qos-policy entry number match app-group eq reference

Tree

eq

Reference

configure application-assurance group number partition number policy app-group string

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq reference

Synopsis

Non-match criterion used for the application group

Context

configure application-assurance group number partition number policy app-qos-policy entry number match app-group neq reference

Tree

neq

Reference

configure application-assurance group number partition number policy app-group string

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

application

Synopsis

Enter the application context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match application

Tree

application

Description

Commands in this context add an application to match criteria used by this AQP entry.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq reference

Synopsis

Exact match criterion used for the application

Context

configure application-assurance group number partition number policy app-qos-policy entry number match application eq reference

Tree

eq

Reference

configure application-assurance group number partition number policy application string

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq reference

Synopsis

Non-match criterion used for the application

Context

configure application-assurance group number partition number policy app-qos-policy entry number match application neq reference

Tree

neq

Reference

configure application-assurance group number partition number policy application string

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

characteristic [characteristic-name] reference

Synopsis

Enter the characteristic list instance

Context

configure application-assurance group number partition number policy app-qos-policy entry number match characteristic reference

Tree

characteristic

Description

Commands in this context configure an existing characteristic and its value to the match criteria used by this AQP entry.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[characteristic-name] reference

Synopsis

ASO characteristic name for AQP entry matching

Context

configure application-assurance group number partition number policy app-qos-policy entry number match characteristic reference

Reference

configure application-assurance group number partition number policy app-service-options characteristic string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq reference

Synopsis

Match criterion used for AQP match characteristic

Context

configure application-assurance group number partition number policy app-qos-policy entry number match characteristic reference eq reference

Tree

eq

Reference

configure application-assurance group number partition number policy app-service-options characteristic string value string

Notes

The following elements are part of a mandatory choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq reference

Synopsis

Non-match criterion used for AQP match characteristic

Context

configure application-assurance group number partition number policy app-qos-policy entry number match characteristic reference neq reference

Tree

neq

Reference

configure application-assurance group number partition number policy app-service-options characteristic string value string

Notes

The following elements are part of a mandatory choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

charging-group

Synopsis

Enter the charging-group context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match charging-group

Tree

charging-group

Description

Commands in this context add a charging group to match criteria used by this AQP entry.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq reference

Synopsis

Match criterion used for the charging group

Context

configure application-assurance group number partition number policy app-qos-policy entry number match charging-group eq reference

Tree

eq

Reference

configure application-assurance group number partition number policy charging-group string

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq reference

Synopsis

Non-match criterion used for the charging group

Context

configure application-assurance group number partition number policy app-qos-policy entry number match charging-group neq reference

Tree

neq

Reference

configure application-assurance group number partition number policy charging-group string

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dscp

Synopsis

Enter the dscp context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dscp

Tree

dscp

Description

Commands in this context add a DSCP name to the match criteria used by this entry.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq keyword

Synopsis

Exact match criterion used for the DSCP

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dscp eq keyword

Tree

eq

Options

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq keyword

Synopsis

Non-match criterion used for the DSCP

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dscp neq keyword

Tree

neq

Options

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-ip

Synopsis

Enter the dst-ip context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-ip

Tree

dst-ip

Description

Commands in this context configure a destination IP address to use as match criteria.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq

Synopsis

Enter the eq context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-ip eq

Tree

eq

Description

Commands in this context specify the exact match value as the match criterion. A successful match occurs when the flow matches the specified address or prefix.

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)

Synopsis

IP address prefix used for match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-ip eq ip-prefix (ipv4-prefix | ipv6-prefix)

Tree

ip-prefix

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference

Synopsis

IP address prefix list used for match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-ip eq ip-prefix-list reference

Tree

ip-prefix-list

Reference

configure application-assurance group number partition number ip-prefix-list string

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq

Synopsis

Enter the neq context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-ip neq

Tree

neq

Description

Commands in this context specify the non-match value as the match criterion. A successful match occurs when the flow does not match the specified address or prefix.

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)

Synopsis

IP address prefix used for match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-ip neq ip-prefix (ipv4-prefix | ipv6-prefix)

Tree

ip-prefix

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference

Synopsis

IP address prefix list used for match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-ip neq ip-prefix-list reference

Tree

ip-prefix-list

Reference

configure application-assurance group number partition number ip-prefix-list string

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-port

Synopsis

Enter the dst-port context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-port

Tree

dst-port

Description

Commands in this context configure a destination TCP/UDP port, a destination port list, or a destination range to use as match criteria.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq

Synopsis

Enter the eq context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-port eq

Tree

eq

Description

Commands in this context specify the exact match criterion. A successful match occurs when the flow matches the specified port.

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference

Synopsis

IP port list used as match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-port eq port-list reference

Tree

port-list

Reference

configure application-assurance group number partition number port-list string

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number

Synopsis

Server port number used as match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-port eq port-number number

Tree

port-number

Range

0 | 1 to 65535

Default

0

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range

Synopsis

Enter the range context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-port eq range

Tree

range

Description

Commands in this context specify the match value as the match criterion based on the starting or ending port number.

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number

Synopsis

TCP/UDP ending port number

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-port eq range end number

Tree

end

Range

0 | 1 to 65535

Default

1

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number

Synopsis

TCP/UDP starting port number

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-port eq range start number

Tree

start

Range

0 | 1 to 65535

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq

Synopsis

Enter the neq context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-port neq

Tree

neq

Description

Commands in this context specify the non-match value as the match criterion. A successful match occurs when the flow does not match the specified port.

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference

Synopsis

IP port list used as match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-port neq port-list reference

Tree

port-list

Reference

configure application-assurance group number partition number port-list string

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number

Synopsis

Server port number used as match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-port neq port-number number

Tree

port-number

Range

0 | 1 to 65535

Default

0

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range

Synopsis

Enter the range context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-port neq range

Tree

range

Description

Commands in this context specify the match value as the match criterion based on the starting or ending port number.

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number

Synopsis

TCP/UDP ending port number

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-port neq range end number

Tree

end

Range

0 | 1 to 65535

Default

1

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number

Synopsis

TCP/UDP starting port number

Context

configure application-assurance group number partition number policy app-qos-policy entry number match dst-port neq range start number

Tree

start

Range

0 | 1 to 65535

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-attribute [flow-attribute-name] string

Synopsis

Enter the flow-attribute list instance

Context

configure application-assurance group number partition number policy app-qos-policy entry number match flow-attribute string

Tree

flow-attribute

Description

Commands in this context configure a flow attribute to use as match criteria. The supported options are: 

  1. abr_service
  2. audio
  3. download
  4. encrypted
  5. esni
  6. real_time_communication
  7. upload
  8. video
Max. Elements

10

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[flow-attribute-name] string

Synopsis

Flow attribute name used as match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match flow-attribute string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

confidence

Synopsis

Enter the confidence context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match flow-attribute string confidence

Tree

confidence

Description

Commands in this context configure the confidence level of the flow attribute for use as match criteria.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq number

Synopsis

Exact match criterion used for the flow-attribute confidence

Context

configure application-assurance group number partition number policy app-qos-policy entry number match flow-attribute string confidence eq number

Tree

eq

Range

0 to 100

Notes

The following elements are part of a choice: eq, gte, or lt.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gte number

Synopsis

Greater than or equal to for confidence match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match flow-attribute string confidence gte number

Tree

gte

Range

0 to 100

Notes

The following elements are part of a choice: eq, gte, or lt.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

lt number

Synopsis

Less than value for confidence match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match flow-attribute string confidence lt number

Tree

lt

Range

1 to 100

Notes

The following elements are part of a choice: eq, gte, or lt.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-protocol

Synopsis

Enter the ip-protocol context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match ip-protocol

Tree

ip-protocol

Description

Commands in this context configure the IP protocol to use in the application definition.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq (number | keyword)

Synopsis

Exact match criterion used for the IP protocol

Context

configure application-assurance group number partition number policy app-qos-policy entry number match ip-protocol eq (number | keyword)

Tree

eq

Range

0 to 255

Options

tcp-udp, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route, ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq (number | keyword)

Synopsis

Non-match criterion used for the IP protocol

Context

configure application-assurance group number partition number policy app-qos-policy entry number match ip-protocol neq (number | keyword)

Tree

neq

Range

0 to 255

Options

tcp-udp, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route, ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

src-ip

Synopsis

Enter the src-ip context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-ip

Tree

src-ip

Description

Commands in this context configure a source IP address to use as match criteria.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq

Synopsis

Enter the eq context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-ip eq

Tree

eq

Description

Commands in this context specify the exact match value as the match criterion. A successful match occurs when the flow matches the specified address or prefix.

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)

Synopsis

IP address prefix used for match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-ip eq ip-prefix (ipv4-prefix | ipv6-prefix)

Tree

ip-prefix

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference

Synopsis

IP address prefix list used for match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-ip eq ip-prefix-list reference

Tree

ip-prefix-list

Reference

configure application-assurance group number partition number ip-prefix-list string

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq

Synopsis

Enter the neq context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-ip neq

Tree

neq

Description

Commands in this context specify the non-match value as the match criterion. A successful match occurs when the flow does not match the specified address or prefix.

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)

Synopsis

IP address prefix used for match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-ip neq ip-prefix (ipv4-prefix | ipv6-prefix)

Tree

ip-prefix

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference

Synopsis

IP address prefix list used for match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-ip neq ip-prefix-list reference

Tree

ip-prefix-list

Reference

configure application-assurance group number partition number ip-prefix-list string

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

src-port

Synopsis

Enter the src-port context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-port

Tree

src-port

Description

Commands in this context specify a source IP port, a source port list, or a source range to use as match criteria.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq

Synopsis

Enter the eq context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-port eq

Tree

eq

Description

Commands in this context specify the exact match criterion. A successful match occurs when the flow matches the specified port.

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference

Synopsis

IP port list used as match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-port eq port-list reference

Tree

port-list

Reference

configure application-assurance group number partition number port-list string

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number

Synopsis

Server port number used as match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-port eq port-number number

Tree

port-number

Range

0 | 1 to 65535

Default

0

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range

Synopsis

Enter the range context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-port eq range

Tree

range

Description

Commands in this context specify the match value as the match criterion based on the starting or ending port number.

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number

Synopsis

TCP/UDP ending port number

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-port eq range end number

Tree

end

Range

0 | 1 to 65535

Default

1

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number

Synopsis

TCP/UDP starting port number

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-port eq range start number

Tree

start

Range

0 | 1 to 65535

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq

Synopsis

Enter the neq context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-port neq

Tree

neq

Description

Commands in this context specify the non-match value as the match criterion. A successful match occurs when the flow does not match the specified port.

Notes

The following elements are part of a choice: eq or neq.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference

Synopsis

IP port list used as match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-port neq port-list reference

Tree

port-list

Reference

configure application-assurance group number partition number port-list string

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number

Synopsis

Server port number used as match criterion

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-port neq port-number number

Tree

port-number

Range

0 | 1 to 65535

Default

0

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range

Synopsis

Enter the range context

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-port neq range

Tree

range

Description

Commands in this context specify the match value as the match criterion based on the starting or ending port number.

Notes

The following elements are part of a choice: port-list, port-number, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number

Synopsis

TCP/UDP ending port number

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-port neq range end number

Tree

end

Range

0 | 1 to 65535

Default

1

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number

Synopsis

TCP/UDP starting port number

Context

configure application-assurance group number partition number policy app-qos-policy entry number match src-port neq range start number

Tree

start

Range

0 | 1 to 65535

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

traffic-direction keyword

Synopsis

Traffic direction to which AQP match entry is applied

Context

configure application-assurance group number partition number policy app-qos-policy entry number match traffic-direction keyword

Tree

traffic-direction

Default

both

Options

subscriber-to-network, network-to-subscriber, both

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-service-options

Synopsis

Enter the app-service-options context

Context

configure application-assurance group number partition number policy app-service-options

Tree

app-service-options

Description

Commands in this context configure application service option characteristics.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

characteristic [characteristic-name] string

Synopsis

Enter the characteristic list instance

Context

configure application-assurance group number partition number policy app-service-options characteristic string

Tree

characteristic

Description

Commands in this context create the characteristic of the application service options.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[characteristic-name] string

Synopsis

ASO characteristic name

Context

configure application-assurance group number partition number policy app-service-options characteristic string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-value string

Synopsis

ASO characteristic default value

Context

configure application-assurance group number partition number policy app-service-options characteristic string default-value string

Tree

default-value

String Length

1 to 32

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value [value-name] string

Synopsis

Add a list entry for value

Context

configure application-assurance group number partition number policy app-service-options characteristic string value string

Tree

value

Description

Commands in this context configure a characteristic value.

Max. Elements

64

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[value-name] string

Synopsis

ASO characteristic value name

Context

configure application-assurance group number partition number policy app-service-options characteristic string value string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

application [application-name] string

Synopsis

Enter the application list instance

Context

configure application-assurance group number partition number policy application string

Tree

application

Description

Commands in this context configure the policy application of the Application Assurance group partition.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[application-name] string

Synopsis

Application name

Context

configure application-assurance group number partition number policy application string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-group reference

Synopsis

Application group associated with the application

Context

configure application-assurance group number partition number policy application string app-group reference

Tree

app-group

Reference

configure application-assurance group number partition number policy app-group string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

charging-group reference

Synopsis

Charging group associated with the application

Context

configure application-assurance group number partition number policy application string charging-group reference

Tree

charging-group

Reference

configure application-assurance group number partition number policy charging-group string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number policy application string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-id number

Synopsis

Application export ID used for RADIUS accounting

Context

configure application-assurance group number partition number policy application string export-id number

Tree

export-id

Range

1 to 255

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

charging-group [charging-group-name] string

Synopsis

Enter the charging-group list instance

Context

configure application-assurance group number partition number policy charging-group string

Tree

charging-group

Description

Commands in this context create a charging group for an Application Assurance policy.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[charging-group-name] string

Synopsis

Charging group name

Context

configure application-assurance group number partition number policy charging-group string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number policy charging-group string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-id number

Synopsis

Charging group export ID used for RADIUS accounting

Context

configure application-assurance group number partition number policy charging-group string export-id number

Tree

export-id

Description

This command assigns an export ID value to a charging group, an app application group, or an application to be used for accounting export identification in RADIUS accounting. This ID is encoded in the top 2 bytes of the RADIUS accounting VSA to identify which charging group the counter value represents.

Range

1 to 255

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

notify-start-stop keyword

Synopsis

Start and stop notification for the charging group

Context

configure application-assurance group number partition number policy charging-group string notify-start-stop keyword

Tree

notify-start-stop

Default

none

Options

none, flow, charging-group

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

custom-protocol [custom-protocol-id] string

Synopsis

Enter the custom-protocol list instance

Context

configure application-assurance group number partition number policy custom-protocol string

Tree

custom-protocol

Description

Commands in this context configure custom protocols. 

Custom protocols allow the creation of TCP and UDP-based custom protocols that employ pattern-match at offset in the protocol signature definition.

Operator-configurable custom protocols are evaluated ahead of any Nokia-provided protocol signature in order of custom protocol ID within the context the protocol is defined. The lower ID is matched first in case of flow matching multiple custom protocols.

Custom protocols must be created before they can be used in an application definition but do not have to be enabled. To reference a custom protocol in an application definition, or any other CLI configuration one must use the protocol name that is a concatenation of “custom_” and, (for example, custom_01, custom_02 ... custom_10, and so on). This concatenation is also used when reporting custom protocol statistics.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[custom-protocol-id] string

Synopsis

Custom protocol ID for the AA policy custom protocol

Context

configure application-assurance group number partition number policy custom-protocol string

Description

This command configures the index into the protocol list that defines a custom protocol for Application Assurance.

String Length

9

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the custom protocol

Context

configure application-assurance group number partition number policy custom-protocol string admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number policy custom-protocol string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

expression [expr-index] number

Synopsis

Enter the expression list instance

Context

configure application-assurance group number partition number policy custom-protocol string expression number

Tree

expression

Description

Commands in this context configure an expression string value for pattern-based custom protocols match. 

A flow matches a custom protocol if the specified string is found at an offset of a TCP/UDP of the first payload packet.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[expr-index] number

Synopsis

Expression substring index for custom protocol matching

Context

configure application-assurance group number partition number policy custom-protocol string expression number

Range

1

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword

Synopsis

Flow direction for custom-protocol expression matching

Context

configure application-assurance group number partition number policy custom-protocol string expression number direction keyword

Tree

direction

Description

This command configures the protocol direction to match against for a custom protocol.

Options

client-to-server, server-to-client, any

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq string

Synopsis

Exact match criterion for custom protocol expression

Context

configure application-assurance group number partition number policy custom-protocol string expression number eq string

Tree

eq

String Length

1 to 255

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

offset number

Synopsis

Offset in protocol flow to start custom-protocol match

Context

configure application-assurance group number partition number policy custom-protocol string expression number offset number

Tree

offset

Description

This command configures the offset into the protocol payload where the expr-string match criteria starts.

Range

0 to 127

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-protocol keyword

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

IP protocol number for custom-protocol match criterion

Context

configure application-assurance group number partition number policy custom-protocol string ip-protocol keyword

Tree

ip-protocol

Description

This command configures the IP protocol number of the TCP and UDP-based custom protocols.

Options

tcp, udp

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-charging-group reference

Synopsis

Default charging group

Context

configure application-assurance group number partition number policy default-charging-group reference

Tree

default-charging-group

Description

This command associates a charging group with any applications or application groups that do not have an explicitly assigned charging group for the Application Assurance policy.  

Reference

configure application-assurance group number partition number policy charging-group string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-tethered-charging-group reference

Synopsis

Default charging group for tethered traffic

Context

configure application-assurance group number partition number policy default-tethered-charging-group reference

Tree

default-tethered-charging-group

Description

This command configures the default charging group to be assigned to all flows which are classified as tethered.

For flows that have been identified as tethered, the AA will replace the charging group configured at the application level with the charging group configured for tethered traffic (that is, configured with default-tethered-charging-group).

Reference

configure application-assurance group number partition number policy charging-group string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

policy-override

Synopsis

Enter the policy-override context

Context

configure application-assurance group number partition number policy-override

Tree

policy-override

Description

Commands in this context configure policy override parameters.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub

Synopsis

Enter the aa-sub context

Context

configure application-assurance group number partition number policy-override aa-sub

Tree

aa-sub

Description

Commands in this context configure the AA policy override subscriber fields.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sap [sap-id] string

Synopsis

Enter the sap list instance

Context

configure application-assurance group number partition number policy-override aa-sub sap string

Tree

sap

Description

Commands in this context configure the Service Access Point (SAP) within the partition.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[sap-id] string

Synopsis

AA subscriber SAP ID

Context

configure application-assurance group number partition number policy-override aa-sub sap string

String Length

1 to 45

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

characteristic [characteristic-name] reference

Synopsis

Enter the characteristic list instance

Context

configure application-assurance group number partition number policy-override aa-sub sap string characteristic reference

Tree

characteristic

Description

Commands in this context configure an override characteristic and value.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[characteristic-name] reference

Synopsis

ASO characteristic name

Context

configure application-assurance group number partition number policy-override aa-sub sap string characteristic reference

Reference

configure application-assurance group number partition number policy app-service-options characteristic string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value reference

Synopsis

Characteristic value used in subscriber policy override

Context

configure application-assurance group number partition number policy-override aa-sub sap string characteristic reference value reference

Tree

value

Reference

configure application-assurance group number partition number policy app-service-options characteristic string value string

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

spoke-sdp [sdp-bind-id] string

Synopsis

Enter the spoke-sdp list instance

Context

configure application-assurance group number partition number policy-override aa-sub spoke-sdp string

Tree

spoke-sdp

Description

Commands in this context configure the Service Distribution Point (SDP) for the policy override.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[sdp-bind-id] string

Synopsis

Spoke SDP ID for an AA subscriber

Context

configure application-assurance group number partition number policy-override aa-sub spoke-sdp string

String Length

3 to 16

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

characteristic [characteristic-name] reference

Synopsis

Enter the characteristic list instance

Context

configure application-assurance group number partition number policy-override aa-sub spoke-sdp string characteristic reference

Tree

characteristic

Description

Commands in this context configure an override characteristic and value.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[characteristic-name] reference

Synopsis

ASO characteristic name

Context

configure application-assurance group number partition number policy-override aa-sub spoke-sdp string characteristic reference

Reference

configure application-assurance group number partition number policy app-service-options characteristic string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value reference

Synopsis

Characteristic value used in subscriber policy override

Context

configure application-assurance group number partition number policy-override aa-sub spoke-sdp string characteristic reference value reference

Tree

value

Reference

configure application-assurance group number partition number policy app-service-options characteristic string value string

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

transit [transit-sub-name] string

Synopsis

Enter the transit list instance

Context

configure application-assurance group number partition number policy-override aa-sub transit string

Tree

transit

Description

Commands in this context configure the AA transit subscriber fields.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[transit-sub-name] string

Synopsis

Transit subscriber name

Context

configure application-assurance group number partition number policy-override aa-sub transit string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

characteristic [characteristic-name] reference

Synopsis

Enter the characteristic list instance

Context

configure application-assurance group number partition number policy-override aa-sub transit string characteristic reference

Tree

characteristic

Description

Commands in this context configure an override characteristic and value.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[characteristic-name] reference

Synopsis

ASO characteristic name

Context

configure application-assurance group number partition number policy-override aa-sub transit string characteristic reference

Reference

configure application-assurance group number partition number policy app-service-options characteristic string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value reference

Synopsis

Characteristic value used in subscriber policy override

Context

configure application-assurance group number partition number policy-override aa-sub transit string characteristic reference value reference

Tree

value

Reference

configure application-assurance group number partition number policy app-service-options characteristic string value string

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list [port-list-name] string

Synopsis

Enter the port-list list instance

Context

configure application-assurance group number partition number port-list string

Tree

port-list

Description

Commands in this context define an AA group or partition named port list, which contains a list of port numbers or port ranges. 

The port list is then referenced in AA policy application filters, allowing increased flexibility in the use of server ports or HTTP proxy ports for application definition.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[port-list-name] string

Synopsis

Port list name

Context

configure application-assurance group number partition number port-list string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number port-list string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port [port-number] number

Synopsis

Add a list entry for port

Context

configure application-assurance group number partition number port-list string port number

Tree

port

Description

Commands in this context specify the server TCP or UDP port number to use in the port list definition.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[port-number] number

Synopsis

Port number

Context

configure application-assurance group number partition number port-list string port number

Range

0 to 65535

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range start number end number

Synopsis

Add a list entry for range

Context

configure application-assurance group number partition number port-list string range start number end number

Tree

range

Description

Commands in this context configure the AA group or partition named port-list range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number

Synopsis

Start value for the port range in the AA port list

Context

configure application-assurance group number partition number port-list string range start number end number

Range

0 to 65534

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number

Synopsis

End value for the port range in the AA port list

Context

configure application-assurance group number partition number port-list string range start number end number

Range

1 to 65535

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sctp-filter [sctp-filter-name] string

Synopsis

Enter the sctp-filter list instance

Context

configure application-assurance group number partition number sctp-filter string

Tree

sctp-filter

Description

Commands in this context configure the Stream Control Transmission Protocol (SCTP) fields.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[sctp-filter-name] string

Synopsis

SCTP filter name

Context

configure application-assurance group number partition number sctp-filter string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number sctp-filter string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference

Synopsis

Event log for packets dropped by the SCTP filter

Context

configure application-assurance group number partition number sctp-filter string event-log reference

Tree

event-log

Reference

configure application-assurance group number partition number event-log string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ppid

Synopsis

Enter the ppid context

Context

configure application-assurance group number partition number sctp-filter string ppid

Tree

ppid

Description

Commands in this context configure actions for specific or default Payload Protocol Identifiers (PPIDs).

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action keyword

Synopsis

Default action for all SCTP PPIDs

Context

configure application-assurance group number partition number sctp-filter string ppid default-action keyword

Tree

default-action

Default

permit

Options

deny, permit

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number

Synopsis

Enter the entry list instance

Context

configure application-assurance group number partition number sctp-filter string ppid entry number

Tree

entry

Description

Commands in this context specify SCTP PPID values and the corresponding action to apply.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number

Synopsis

SCTP filter PPID entry ID

Context

configure application-assurance group number partition number sctp-filter string ppid entry number

Range

1 to 255

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword

Synopsis

SCTP filter PPID entry action

Context

configure application-assurance group number partition number sctp-filter string ppid entry number action keyword

Tree

action

Options

deny, permit

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value (number | keyword)

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

PPID entry value

Context

configure application-assurance group number partition number sctp-filter string ppid entry number value (number | keyword)

Tree

value

Range

0 to 4294967295

Options

iua, m2ua, m3ua, sua, m2pa, v5ua, h.248, bicc/q.2150.3, tali, dua, asap, enrp, h.323, q.ipc/q.2150.3, simco, ddp-segment-chunk, ddp-stream-session-control, s1-application-protocol, rua, hnbap, forces-hp, forces-mp, forces-lp, sbc-ap, nbap, x2ap, ircp, lcs-ap, mpich2, service-area-broadcast-protocol, fractal-generator-protocol, ping-pong-protocol, calcapp-protocol, scripting-service-protocol, netperfmeter-protocol-control-channel, netperfmeter-protocol-data-channel, echo, discard, daytime, character-generator, 3gpp-rna, 3gpp-m2ap, 3gpp-m3ap, ssh-over-sctp, diameter-in-a-sctp-data-chunk, diameter-in-a-dtls/sctp-data-chunk, r14p.-ber-encoded-asn.1-over-sctp, webrtc-control, domstring-last, binary-data-partial, binary-data-last, domstring-partial, 3gpp-pua, webrtc-string-empty, webrtc-binary-empty, 3gpp-xwap, 3gpp-xw-control-plane, 3gpp-ng-application-protocol, 3gpp-xn-application-protocol, 3gpp-f1-application-protocol, http-sctp, 3gpp-e1-application-protocol, ele2-lawful-interception, 3gpp-ngap-over-dtls-over-sctp, 3gpp-xnap-over-dtls-over-sctp, 3gpp-f1ap-over-dtls-over-sctp, 3gpp-e1ap-over-dtls-over-sctp, e2-cp, e2-up, e2-du, 3gpp-w1ap

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ppid-range

Synopsis

Enter the ppid-range context

Context

configure application-assurance group number partition number sctp-filter string ppid-range

Tree

ppid-range

Description

Commands in this context specify the range of PPID values that are allowed by the AA SCTP filter firewall.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

max number

Synopsis

Maximum PPID value

Context

configure application-assurance group number partition number sctp-filter string ppid-range max number

Tree

max

Description

This command configures the maximum SCTP Payload Protocol Identifier (PPID) to be permitted by the SCTP filter. The value must be greater or equal to the minimum PPID value.

Range

0 to 4294967295

Default

4294967295

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

min number

Synopsis

Minimum PPID value

Context

configure application-assurance group number partition number sctp-filter string ppid-range min number

Tree

min

Description

This command configures the minimum SCTP Payload Protocol Identifier (PPID) to be permitted by the SCTP filter. The value must be less than or equal to the maximum PPID value.

Range

0 to 4294967295

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-filter [session-filter-name] string

Synopsis

Enter the session-filter list instance

Context

configure application-assurance group number partition number session-filter string

Tree

session-filter

Description

Commands in this context create a session filter.

Max. Elements

300

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[session-filter-name] string

Synopsis

Session filter name

Context

configure application-assurance group number partition number session-filter string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Synopsis

Enter the default-action context

Context

configure application-assurance group number partition number session-filter string default-action

Tree

default-action

Description

Commands in this context specify the default action to take for packets that do not match any filter entries.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword

Synopsis

Default action for packets not matching filter entries

Context

configure application-assurance group number partition number session-filter string default-action action keyword

Tree

action

Default

deny

Options

deny, permit

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference

Synopsis

Event logging of default action

Context

configure application-assurance group number partition number session-filter string default-action event-log reference

Tree

event-log

Reference

configure application-assurance group number partition number event-log string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number session-filter string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number

Synopsis

Enter the entry list instance

Context

configure application-assurance group number partition number session-filter string entry number

Tree

entry

Description

Commands in this context configure an AA session filter match entry.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number

Synopsis

Entry ID for the session filter entry

Context

configure application-assurance group number partition number session-filter string entry number

Range

1 to 65535

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action

Synopsis

Enter the action context

Context

configure application-assurance group number partition number session-filter string entry number action

Tree

action

Description

Commands in this context configure the action for this entry.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

deny

Synopsis

Deny sessions matching the criteria

Context

configure application-assurance group number partition number session-filter string entry number action deny

Tree

deny

Notes

This element is the default part of a choice.

The following elements are part of a choice: deny, http-redirect, permit, or tcp-optimizer.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference

Synopsis

Event log name used to log the action

Context

configure application-assurance group number partition number session-filter string entry number action event-log reference

Tree

event-log

Reference

configure application-assurance group number partition number event-log string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-redirect reference

Synopsis

HTTP redirect for matching sessions

Context

configure application-assurance group number partition number session-filter string entry number action http-redirect reference

Tree

http-redirect

Reference

configure application-assurance group number http-redirect string

Notes

The following elements are part of a choice: deny, http-redirect, permit, or tcp-optimizer.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

permit

Synopsis

Permit sessions that match the criteria

Context

configure application-assurance group number partition number session-filter string entry number action permit

Tree

permit

Notes

The following elements are part of a choice: deny, http-redirect, permit, or tcp-optimizer.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-optimizer reference

Synopsis

TCP optimizer to handle sessions matching the criteria

Context

configure application-assurance group number partition number session-filter string entry number action tcp-optimizer reference

Tree

tcp-optimizer

Reference

configure application-assurance group number tcp-optimizer string

Notes

The following elements are part of a choice: deny, http-redirect, permit, or tcp-optimizer.

Introduced

22.2.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number session-filter string entry number description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

match

Synopsis

Enter the match context

Context

configure application-assurance group number partition number session-filter string entry number match

Tree

match

Description

Commands in this context configure session conditions for this entry.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-ip

Synopsis

Enter the dst-ip context

Context

configure application-assurance group number partition number session-filter string entry number match dst-ip

Tree

dst-ip

Description

Commands in this context configure the destination IP address to match.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-ip-cache reference

Synopsis

Destination IPs in specified DNS IP Cache

Context

configure application-assurance group number partition number session-filter string entry number match dst-ip dns-ip-cache reference

Tree

dns-ip-cache

Reference

configure application-assurance group number dns-ip-cache string

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)

Synopsis

Destination IP address prefix as match criterion

Context

configure application-assurance group number partition number session-filter string entry number match dst-ip ip-prefix (ipv4-prefix | ipv6-prefix)

Tree

ip-prefix

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference

Synopsis

IP address prefix list as match criterion

Context

configure application-assurance group number partition number session-filter string entry number match dst-ip ip-prefix-list reference

Tree

ip-prefix-list

Reference

configure application-assurance group number partition number ip-prefix-list string

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-port

Synopsis

Enter the dst-port context

Context

configure application-assurance group number partition number session-filter string entry number match dst-port

Tree

dst-port

Description

Commands in this context specify a destination TCP/UDP port, a destination port list, or a destination range to use as match criteria.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq number

Synopsis

Match criterion used for destination or source port

Context

configure application-assurance group number partition number session-filter string entry number match dst-port eq number

Tree

eq

Range

0 | 1 to 65535

Default

0

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gt number

Synopsis

Greater than match criterion for the port number

Context

configure application-assurance group number partition number session-filter string entry number match dst-port gt number

Tree

gt

Range

0 | 1 to 65535

Default

0

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

lt number

Synopsis

Less than match criterion for the port

Context

configure application-assurance group number partition number session-filter string entry number match dst-port lt number

Tree

lt

Range

0 | 1 to 65535

Default

0

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference

Synopsis

Destination or source port list

Context

configure application-assurance group number partition number session-filter string entry number match dst-port port-list reference

Tree

port-list

Reference

configure application-assurance group number partition number port-list string

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range

Synopsis

Enable the range context

Context

configure application-assurance group number partition number session-filter string entry number match dst-port range

Tree

range

Description

Commands in this context specify a destination IP port, a destination port list, or a destination range to use as match criteria.

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number

Synopsis

Upper bound of the port range as match criterion

Context

configure application-assurance group number partition number session-filter string entry number match dst-port range end number

Tree

end

Range

0 | 1 to 65535

Default

1

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number

Synopsis

Lower bound of the port range as match criterion

Context

configure application-assurance group number partition number session-filter string entry number match dst-port range start number

Tree

start

Range

0 | 1 to 65535

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-protocol (number | keyword)

Synopsis

IP protocol as a match criterion

Context

configure application-assurance group number partition number session-filter string entry number match ip-protocol (number | keyword)

Tree

ip-protocol

Range

0 to 255

Options

tcp-udp, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route, ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

src-ip

Synopsis

Enter the src-ip context

Context

configure application-assurance group number partition number session-filter string entry number match src-ip

Tree

src-ip

Description

Commands in this context specify a source IP address to use as match criteria.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)

Synopsis

Source IP address prefix as match criterion

Context

configure application-assurance group number partition number session-filter string entry number match src-ip ip-prefix (ipv4-prefix | ipv6-prefix)

Tree

ip-prefix

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference

Synopsis

Source IP address prefix list as match criterion

Context

configure application-assurance group number partition number session-filter string entry number match src-ip ip-prefix-list reference

Tree

ip-prefix-list

Reference

configure application-assurance group number partition number ip-prefix-list string

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

src-port

Synopsis

Enter the src-port context

Context

configure application-assurance group number partition number session-filter string entry number match src-port

Tree

src-port

Description

Commands in this context specify a source IP port, a source port list, or a source range to use as match criteria.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq number

Synopsis

Match criterion used for destination or source port

Context

configure application-assurance group number partition number session-filter string entry number match src-port eq number

Tree

eq

Range

0 | 1 to 65535

Default

0

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gt number

Synopsis

Greater than match criterion for the port number

Context

configure application-assurance group number partition number session-filter string entry number match src-port gt number

Tree

gt

Range

0 | 1 to 65535

Default

0

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

lt number

Synopsis

Less than match criterion for the port

Context

configure application-assurance group number partition number session-filter string entry number match src-port lt number

Tree

lt

Range

0 | 1 to 65535

Default

0

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference

Synopsis

Destination or source port list

Context

configure application-assurance group number partition number session-filter string entry number match src-port port-list reference

Tree

port-list

Reference

configure application-assurance group number partition number port-list string

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range

Synopsis

Enable the range context

Context

configure application-assurance group number partition number session-filter string entry number match src-port range

Tree

range

Description

Commands in this context specify a destination IP port, a destination port list, or a destination range to use as match criteria.

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number

Synopsis

Upper bound of the port range as match criterion

Context

configure application-assurance group number partition number session-filter string entry number match src-port range end number

Tree

end

Range

0 | 1 to 65535

Default

1

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number

Synopsis

Lower bound of the port range as match criterion

Context

configure application-assurance group number partition number session-filter string entry number match src-port range start number

Tree

start

Range

0 | 1 to 65535

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

shallow-inspection boolean

Synopsis

Enable shallow inspection

Context

configure application-assurance group number partition number shallow-inspection boolean

Tree

shallow-inspection

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

statistics

Synopsis

Enter the statistics context

Context

configure application-assurance group number partition number statistics

Tree

statistics

Description

Commands in this context configure accounting and billing statistics for this AA group.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-admit-deny

Synopsis

Enter the aa-admit-deny context

Context

configure application-assurance group number partition number statistics aa-admit-deny

Tree

aa-admit-deny

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

accounting-policy reference

Synopsis

Accounting policy

Context

configure application-assurance group number partition number statistics aa-admit-deny accounting-policy reference

Tree

accounting-policy

Reference

configure log accounting-policy number

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collect-stats boolean

Synopsis

Collect statistics

Context

configure application-assurance group number partition number statistics aa-admit-deny collect-stats boolean

Tree

collect-stats

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtp-filter-stats boolean

Synopsis

Include GTP filter statistics in admit-deny accounting records

Context

configure application-assurance group number partition number statistics aa-admit-deny gtp-filter-stats boolean

Tree

gtp-filter-stats

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

policer-stats boolean

Synopsis

Include admit-deny policer statistics in accounting records

Context

configure application-assurance group number partition number statistics aa-admit-deny policer-stats boolean

Tree

policer-stats

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

policer-stats-resources boolean

Synopsis

Allocate ISA/ ESA resources for policer admit-deny statistics

Context

configure application-assurance group number partition number statistics aa-admit-deny policer-stats-resources boolean

Tree

policer-stats-resources

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sctp-filter-stats boolean

Synopsis

Include SCTP filter admit-deny statistics in accounting

Context

configure application-assurance group number partition number statistics aa-admit-deny sctp-filter-stats boolean

Tree

sctp-filter-stats

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-filter-stats boolean

Synopsis

Include session filter admit-deny statistics in accounting

Context

configure application-assurance group number partition number statistics aa-admit-deny session-filter-stats boolean

Tree

session-filter-stats

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-validate-stats boolean

Synopsis

Include TCP validate admit-deny statistics in accounting

Context

configure application-assurance group number partition number statistics aa-admit-deny tcp-validate-stats boolean

Tree

tcp-validate-stats

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-app-group

Synopsis

Enter the aa-app-group context

Context

configure application-assurance group number partition number statistics aa-app-group

Tree

aa-app-group

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

accounting-policy reference

Synopsis

Accounting policy ID

Context

configure application-assurance group number partition number statistics aa-app-group accounting-policy reference

Tree

accounting-policy

Reference

configure log accounting-policy number

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collect-stats boolean

Synopsis

Collect statistics

Context

configure application-assurance group number partition number statistics aa-app-group collect-stats boolean

Tree

collect-stats

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-application

Synopsis

Enter the aa-application context

Context

configure application-assurance group number partition number statistics aa-application

Tree

aa-application

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

accounting-policy reference

Synopsis

Accounting policy ID

Context

configure application-assurance group number partition number statistics aa-application accounting-policy reference

Tree

accounting-policy

Reference

configure log accounting-policy number

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collect-stats boolean

Synopsis

Collect statistics

Context

configure application-assurance group number partition number statistics aa-application collect-stats boolean

Tree

collect-stats

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-partition

Synopsis

Enter the aa-partition context

Context

configure application-assurance group number partition number statistics aa-partition

Tree

aa-partition

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

accounting-policy reference

Synopsis

Accounting policy

Context

configure application-assurance group number partition number statistics aa-partition accounting-policy reference

Tree

accounting-policy

Reference

configure log accounting-policy number

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collect-stats boolean

Synopsis

Collect statistics

Context

configure application-assurance group number partition number statistics aa-partition collect-stats boolean

Tree

collect-stats

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tethering-stats boolean

Synopsis

Collect tethering statistics

Context

configure application-assurance group number partition number statistics aa-partition tethering-stats boolean

Tree

tethering-stats

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

traffic-type-stats boolean

Synopsis

Collect traffic type statistics

Context

configure application-assurance group number partition number statistics aa-partition traffic-type-stats boolean

Tree

traffic-type-stats

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-protocol

Synopsis

Enter the aa-protocol context

Context

configure application-assurance group number partition number statistics aa-protocol

Tree

aa-protocol

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

accounting-policy reference

Synopsis

Accounting policy ID

Context

configure application-assurance group number partition number statistics aa-protocol accounting-policy reference

Tree

accounting-policy

Reference

configure log accounting-policy number

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of protocol statistics

Context

configure application-assurance group number partition number statistics aa-protocol admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collect-stats boolean

Synopsis

Collect statistics

Context

configure application-assurance group number partition number statistics aa-protocol collect-stats boolean

Tree

collect-stats

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub

Synopsis

Enter the aa-sub context

Context

configure application-assurance group number partition number statistics aa-sub

Tree

aa-sub

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

accounting-policy reference

Synopsis

Accounting policy ID

Context

configure application-assurance group number partition number statistics aa-sub accounting-policy reference

Tree

accounting-policy

Reference

configure log accounting-policy number

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aggregate-stats-export-using keyword

Synopsis

Method of statistics export to be used

Context

configure application-assurance group number partition number statistics aa-sub aggregate-stats-export-using keyword

Tree

aggregate-stats-export-using

Options

accounting-policy, radius-accounting-policy

Max. Elements

2

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-group [app-group-name] reference

Synopsis

Enter the app-group list instance

Context

configure application-assurance group number partition number statistics aa-sub app-group reference

Tree

app-group

Description

Commands in this context configure accounting and statistics collection parameters for AA application groups for a specific AA group/partition.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[app-group-name] reference

Synopsis

Application group name

Context

configure application-assurance group number partition number statistics aa-sub app-group reference

Reference

configure application-assurance group number partition number policy app-group string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-using keyword

Synopsis

Method used to export statistics

Context

configure application-assurance group number partition number statistics aa-sub app-group reference export-using keyword

Tree

export-using

Options

accounting-policy, radius-accounting-policy

Max. Elements

2

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

application [application-name] reference

Synopsis

Enter the application list instance

Context

configure application-assurance group number partition number statistics aa-sub application reference

Tree

application

Description

Commands in this context configure the AA subscriber accounting statistics for the export of AA applications for an AA group/partition.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[application-name] reference

Synopsis

Application name

Context

configure application-assurance group number partition number statistics aa-sub application reference

Reference

configure application-assurance group number partition number policy application string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-using keyword

Synopsis

Method used to export statistics

Context

configure application-assurance group number partition number statistics aa-sub application reference export-using keyword

Tree

export-using

Options

accounting-policy, radius-accounting-policy

Max. Elements

2

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

charging-group [charging-group-name] reference

Synopsis

Enter the charging-group list instance

Context

configure application-assurance group number partition number statistics aa-sub charging-group reference

Tree

charging-group

Description

Commands in this context configure AA subscriber accounting statistics for the export of AA charging groups of an AA group/partition.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[charging-group-name] reference

Synopsis

Charging group name

Context

configure application-assurance group number partition number statistics aa-sub charging-group reference

Description

This command specifies the AA charging group to be included in the exported accounting records. 

Reference

configure application-assurance group number partition number policy charging-group string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-using keyword

Synopsis

Method used to export statistics

Context

configure application-assurance group number partition number statistics aa-sub charging-group reference export-using keyword

Tree

export-using

Options

accounting-policy, radius-accounting-policy

Max. Elements

2

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collect-stats boolean

Synopsis

Collect statistics

Context

configure application-assurance group number partition number statistics aa-sub collect-stats boolean

Tree

collect-stats

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

exclude-tcp-retrans boolean

Synopsis

Exclude TCP retransmission and error statistics

Context

configure application-assurance group number partition number statistics aa-sub exclude-tcp-retrans boolean

Tree

exclude-tcp-retrans

Description

When configured to true, TCP errors and retransmission packets are not counted for the purpose of content-based billing. Note: This command is only applicable to EPC.This setting has no impact on app/app-group aggregate AA stats. 

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

max-throughput-stats boolean

Synopsis

Collect maximum throughput statistics

Context

configure application-assurance group number partition number statistics aa-sub max-throughput-stats boolean

Tree

max-throughput-stats

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

protocol [protocol-name] string

Synopsis

Enter the protocol list instance

Context

configure application-assurance group number partition number statistics aa-sub protocol string

Tree

protocol

Description

Commands in this context configure AA subscriber accounting statistics for the export of aa-sub protocols of an AA group/partition.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[protocol-name] string

Synopsis

AA protocol name

Context

configure application-assurance group number partition number statistics aa-sub protocol string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-using keyword

Synopsis

Method used to export statistics

Context

configure application-assurance group number partition number statistics aa-sub protocol string export-using keyword

Tree

export-using

Options

accounting-policy, radius-accounting-policy

Max. Elements

2

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

radius-accounting-policy reference

Synopsis

RADIUS accounting policy name

Context

configure application-assurance group number partition number statistics aa-sub radius-accounting-policy reference

Tree

radius-accounting-policy

Reference

configure application-assurance radius-accounting-policy string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

usage-monitoring boolean

Synopsis

Collect usage monitoring statistics

Context

configure application-assurance group number partition number statistics aa-sub usage-monitoring boolean

Tree

usage-monitoring

Description

When configured to true, this command allows the system to activate Gx usage monitoring at AA group/partition level, if enough usage monitoring resources exist for all existing subs. 

When configured to false, this command silently removes all monitoring instances (no PCRF notifications) for AA subscribers and all subsequent AA Gx usage monitoring messages are ignored.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub-study [study-type] keyword

Synopsis

Enter the aa-sub-study list instance

Context

configure application-assurance group number partition number statistics aa-sub-study keyword

Tree

aa-sub-study

Description

Commands in this context configure accounting and statistics collection parameters per AA special study subscribers.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[study-type] keyword

Synopsis

Statistic type that the study is using

Context

configure application-assurance group number partition number statistics aa-sub-study keyword

Options

protocol, application

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub

Synopsis

Enter the aa-sub context

Context

configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub

Tree

aa-sub

Description

Commands in this context add an existing subscriber identification to a group of special study subscribers.

Identifying a group of special study subscribers allows statistics and accounting records for those subscribers to be collected for protocols and applications through Application Assurance. When adding a subscriber to the special study group, accounting records and statistics generation commence immediately. When removing a subscriber from the group, special study statistics and accounting records for that subscriber in the current interval are lost.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

esm [esm-sub-name] string

Synopsis

Add a list entry for esm

Context

configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub esm string

Tree

esm

Description

Commands in this context configure the ESM fields.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[esm-sub-name] string

Synopsis

ESM subscriber name

Context

configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub esm string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

esm-mac [esm-mac-sub-name] string

Synopsis

Add a list entry for esm-mac

Context

configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub esm-mac string

Tree

esm-mac

Description

Commands in this context configure the ESM MAC fields.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[esm-mac-sub-name] string

Synopsis

ESM MAC subscriber name

Context

configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub esm-mac string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sap [sap-id] string

Synopsis

Add a list entry for sap

Context

configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub sap string

Tree

sap

Description

Commands in this context configure the Service Access Point (SAP) for the purpose of enabling special study statistics.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[sap-id] string

Synopsis

AA subscriber SAP ID

Context

configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub sap string

String Length

1 to 45

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

spoke-sdp [sdp-bind-id] string

Synopsis

Add a list entry for spoke-sdp

Context

configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub spoke-sdp string

Tree

spoke-sdp

Description

Commands in this context specify the spoke SDP ID and VC ID for the purpose of including the subscriber into AA special study statistics. 

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[sdp-bind-id] string

Synopsis

Spoke SDP ID for an AA subscriber

Context

configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub spoke-sdp string

String Length

3 to 16

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

transit [transit-sub-name] string

Synopsis

Add a list entry for transit

Context

configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub transit string

Tree

transit

Description

Commands in the context specify an existing transit subscriber to be included in AA sub special study statistics.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[transit-sub-name] string

Synopsis

Transit subscriber name

Context

configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub transit string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

accounting-policy reference

Synopsis

Accounting policy ID

Context

configure application-assurance group number partition number statistics aa-sub-study keyword accounting-policy reference

Tree

accounting-policy

Reference

configure log accounting-policy number

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collect-stats boolean

Synopsis

Collect statistics

Context

configure application-assurance group number partition number statistics aa-sub-study keyword collect-stats boolean

Tree

collect-stats

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-validate [tcp-validate-name] string

Synopsis

Enter the tcp-validate list instance

Context

configure application-assurance group number partition number tcp-validate string

Tree

tcp-validate

Description

Commands in this context configure a TCP validation policy.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[tcp-validate-name] string

Synopsis

TCP validation policy name

Context

configure application-assurance group number partition number tcp-validate string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number tcp-validate string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

log

Synopsis

Enter the log context

Context

configure application-assurance group number partition number tcp-validate string log

Tree

log

Description

Commands in this context enable event logging of traffic dropped by TCP validation.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

all boolean

Synopsis

Enable logging of all dropped TCP packets

Context

configure application-assurance group number partition number tcp-validate string log all boolean

Tree

all

Description

When configured to true, all dropped TCP packets are logged, including the following:

  1. packets received after an RST and discarded
  2. packets received before TCP session establishment (before SYN) and discarded

An event log must also be configured to enable logging of all dropped packets.

When configured to false, discards related to the described cases are not captured in any event log.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference

Synopsis

Event log name

Context

configure application-assurance group number partition number tcp-validate string log event-log reference

Tree

event-log

Reference

configure application-assurance group number partition number event-log string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

strict boolean

Synopsis

Enable strict checking of TCP traffic

Context

configure application-assurance group number partition number tcp-validate string strict boolean

Tree

strict

Description

When configured to true, the command specifies whether enforcement of TCP sequence and acknowledgment numbers are applied. If a packet does not meet the expected sequence or acknowledgment number, it is dropped. This command should only be enabled if the expected bit error rate or packet loss is low. 

For example, if acknowledgments are lost before being detected by AA, the server timeouts are triggered and retransmissions occur. If strict is enabled, these retransmissions resemble a reply attack and are dropped by AA.

When configured to false, the command removes the TCP sequence and acknowledgment number enforcement.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tethering-detection

Synopsis

Enter the tethering-detection context

Context

configure application-assurance group number partition number tethering-detection

Tree

tethering-detection

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of tethering detection

Context

configure application-assurance group number partition number tethering-detection admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

single-device

Synopsis

Enter the single-device context

Context

configure application-assurance group number partition number tethering-detection single-device

Tree

single-device

Description

Commands in this context configure the single-device fields and expected TTL values for flow-level tethering detection.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

expected-ttl [ttl] number

Synopsis

Add a list entry for expected-ttl

Context

configure application-assurance group number partition number tethering-detection single-device expected-ttl number

Tree

expected-ttl

Description

Commands in this context configure the TTL values for single-device tethering detection.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[ttl] number

Synopsis

Expected TTL traffic value from host devices

Context

configure application-assurance group number partition number tethering-detection single-device expected-ttl number

Range

1 to 255

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

threshold-crossing-alert

Synopsis

Enter the threshold-crossing-alert context

Context

configure application-assurance group number partition number threshold-crossing-alert

Tree

threshold-crossing-alert

Description

Commands in this context configure the generation of threshold crossing alerts (TCAs).

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

criteria [criteria-id] keyword direction keyword

Synopsis

Enter the criteria list instance

Context

configure application-assurance group number partition number threshold-crossing-alert criteria keyword direction keyword

Tree

criteria

Description

Commands in this context configure the TCA criteria for the partition.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[criteria-id] keyword

Synopsis

Statistics TCA criteria ID

Context

configure application-assurance group number partition number threshold-crossing-alert criteria keyword direction keyword

Options

error-drop, fragment-drop-out-of-order, fragment-drop-all, overload-drop, gtp-sanity-drop

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword

Synopsis

Direction of traffic for the criteria statistics TCA

Context

configure application-assurance group number partition number threshold-crossing-alert criteria keyword direction keyword

Options

from-sub, to-sub

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number

Synopsis

High watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert criteria keyword direction keyword high-watermark number

Tree

high-watermark

Range

1 to 4294967295

Default

4294967295

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number

Synopsis

Low watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert criteria keyword direction keyword low-watermark number

Tree

low-watermark

Range

0 to 4294967294

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtp-filter [gtp-filter-name] reference criteria keyword direction keyword

Synopsis

Enter the gtp-filter list instance

Context

configure application-assurance group number partition number threshold-crossing-alert gtp-filter reference criteria keyword direction keyword

Tree

gtp-filter

Description

Commands in this context configure TCA generation for a GTP filter.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[gtp-filter-name] reference

Synopsis

GTP filter name for TCA generation

Context

configure application-assurance group number partition number threshold-crossing-alert gtp-filter reference criteria keyword direction keyword

Reference

configure application-assurance group number partition number gtp gtp-filter string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

criteria keyword

Synopsis

Criteria ID for GTP filter TCA

Context

configure application-assurance group number partition number threshold-crossing-alert gtp-filter reference criteria keyword direction keyword

Options

max-payload-length, message-type-default-action, header-sanity, message-type-gtpv2-default-action, imsi-apn-filter-default-action, validate-gtp-tunnels, validate-sequence-number, validate-src-ip-addr, missing-mandatory-ie, gtp-in-gtp, gtp-tunnel-database-full, gtp-tunnel-endpoint-limit

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword

Synopsis

Direction of traffic for the GTP filter TCA

Context

configure application-assurance group number partition number threshold-crossing-alert gtp-filter reference criteria keyword direction keyword

Options

from-sub, to-sub

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number

Synopsis

High watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert gtp-filter reference criteria keyword direction keyword high-watermark number

Tree

high-watermark

Range

1 to 4294967295

Default

4294967295

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number

Synopsis

Low watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert gtp-filter reference criteria keyword direction keyword low-watermark number

Tree

low-watermark

Range

0 to 4294967294

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtp-filter-entry [gtp-filter-name] reference entry-id number direction keyword

Synopsis

Enter the gtp-filter-entry list instance

Context

configure application-assurance group number partition number threshold-crossing-alert gtp-filter-entry reference entry-id number direction keyword

Tree

gtp-filter-entry

Description

Commands in this context configure the AA GTP filter entry TCA fields.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[gtp-filter-name] reference

Synopsis

AA GTP filter name for TCA configuration

Context

configure application-assurance group number partition number threshold-crossing-alert gtp-filter-entry reference entry-id number direction keyword

Reference

configure application-assurance group number partition number gtp gtp-filter string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry-id number

Synopsis

Entry ID

Context

configure application-assurance group number partition number threshold-crossing-alert gtp-filter-entry reference entry-id number direction keyword

Description

This command configures the identifier for the statistics TCA GTP filter V1 message type entry, V2 message type entry, or imsi-apn filter entry.

Max. Range

0 to 4294967295

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword

Synopsis

Traffic direction for GTP filter entry TCA

Context

configure application-assurance group number partition number threshold-crossing-alert gtp-filter-entry reference entry-id number direction keyword

Options

from-sub, to-sub

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number

Synopsis

High watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert gtp-filter-entry reference entry-id number direction keyword high-watermark number

Tree

high-watermark

Range

1 to 4294967295

Default

4294967295

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number

Synopsis

Low watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert gtp-filter-entry reference entry-id number direction keyword low-watermark number

Tree

low-watermark

Range

0 to 4294967294

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

policer [policer-name] string direction keyword

Synopsis

Enter the policer list instance

Context

configure application-assurance group number partition number threshold-crossing-alert policer string direction keyword

Tree

policer

Description

Commands in this context configure a TCA for the counter capturing drops or admit events.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[policer-name] string

Synopsis

Policer name for TCA generation

Context

configure application-assurance group number partition number threshold-crossing-alert policer string direction keyword

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword

Synopsis

Direction of traffic for the policer TCA

Context

configure application-assurance group number partition number threshold-crossing-alert policer string direction keyword

Options

from-sub, to-sub

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number

Synopsis

High watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert policer string direction keyword high-watermark number

Tree

high-watermark

Range

1 to 4294967295

Default

4294967295

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number

Synopsis

Low watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert policer string direction keyword low-watermark number

Tree

low-watermark

Range

0 to 4294967294

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sctp-filter [sctp-filter-name] reference criteria keyword direction keyword

Synopsis

Enter the sctp-filter list instance

Context

configure application-assurance group number partition number threshold-crossing-alert sctp-filter reference criteria keyword direction keyword

Tree

sctp-filter

Description

Commands in this context configure TCA generation for an SCTP filter.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[sctp-filter-name] reference

Synopsis

SCTP filter name for TCA generation

Context

configure application-assurance group number partition number threshold-crossing-alert sctp-filter reference criteria keyword direction keyword

Reference

configure application-assurance group number partition number sctp-filter string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

criteria keyword

Synopsis

Criteria ID for SCTP filter TCA

Context

configure application-assurance group number partition number threshold-crossing-alert sctp-filter reference criteria keyword direction keyword

Options

ppid-default-action, packet-sanity, ppid-range

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword

Synopsis

Direction of traffic for SCTP filter TCA

Context

configure application-assurance group number partition number threshold-crossing-alert sctp-filter reference criteria keyword direction keyword

Options

from-sub, to-sub

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number

Synopsis

High watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert sctp-filter reference criteria keyword direction keyword high-watermark number

Tree

high-watermark

Range

1 to 4294967295

Default

4294967295

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number

Synopsis

Low watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert sctp-filter reference criteria keyword direction keyword low-watermark number

Tree

low-watermark

Range

0 to 4294967294

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sctp-filter-entry [sctp-filter-name] reference entry-id reference direction keyword

Synopsis

Enter the sctp-filter-entry list instance

Context

configure application-assurance group number partition number threshold-crossing-alert sctp-filter-entry reference entry-id reference direction keyword

Tree

sctp-filter-entry

Description

Commands in this context configure the AA SCTP filter PPID entry TCA fields.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[sctp-filter-name] reference

Synopsis

AA SCTP filter name for TCA configuration

Context

configure application-assurance group number partition number threshold-crossing-alert sctp-filter-entry reference entry-id reference direction keyword

Reference

configure application-assurance group number partition number sctp-filter string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry-id reference

Synopsis

ID for SCTP filter entry TCA

Context

configure application-assurance group number partition number threshold-crossing-alert sctp-filter-entry reference entry-id reference direction keyword

Reference

configure application-assurance group number partition number sctp-filter string ppid entry number

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword

Synopsis

Direction of traffic for TCA configuration

Context

configure application-assurance group number partition number threshold-crossing-alert sctp-filter-entry reference entry-id reference direction keyword

Options

from-sub, to-sub

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number

Synopsis

High watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert sctp-filter-entry reference entry-id reference direction keyword high-watermark number

Tree

high-watermark

Range

1 to 4294967295

Default

4294967295

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number

Synopsis

Low watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert sctp-filter-entry reference entry-id reference direction keyword low-watermark number

Tree

low-watermark

Range

0 to 4294967294

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-filter [session-filter-name] reference criteria keyword direction keyword

Synopsis

Enter the session-filter list instance

Context

configure application-assurance group number partition number threshold-crossing-alert session-filter reference criteria keyword direction keyword

Tree

session-filter

Description

Commands in this context configure TCA generation for a session filter.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[session-filter-name] reference

Synopsis

AA session filter name for TCA configuration

Context

configure application-assurance group number partition number threshold-crossing-alert session-filter reference criteria keyword direction keyword

Reference

configure application-assurance group number partition number session-filter string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

criteria keyword

Synopsis

ID for session filter entry TCA

Context

configure application-assurance group number partition number threshold-crossing-alert session-filter reference criteria keyword direction keyword

Options

default-action

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword

Synopsis

Direction of traffic for TCA configuration

Context

configure application-assurance group number partition number threshold-crossing-alert session-filter reference criteria keyword direction keyword

Options

from-sub, to-sub

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number

Synopsis

High watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert session-filter reference criteria keyword direction keyword high-watermark number

Tree

high-watermark

Range

1 to 4294967295

Default

4294967295

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number

Synopsis

Low watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert session-filter reference criteria keyword direction keyword low-watermark number

Tree

low-watermark

Range

0 to 4294967294

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-filter-entry [session-filter-name] reference entry-id reference direction keyword

Synopsis

Enter the session-filter-entry list instance

Context

configure application-assurance group number partition number threshold-crossing-alert session-filter-entry reference entry-id reference direction keyword

Tree

session-filter-entry

Description

Commands in this context configure the AA session filter entry TCA fields for the partition.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[session-filter-name] reference

Synopsis

AA session filter name for TCA configuration

Context

configure application-assurance group number partition number threshold-crossing-alert session-filter-entry reference entry-id reference direction keyword

Reference

configure application-assurance group number partition number session-filter string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry-id reference

Synopsis

ID for session filter entry TCA

Context

configure application-assurance group number partition number threshold-crossing-alert session-filter-entry reference entry-id reference direction keyword

Reference

configure application-assurance group number partition number session-filter string entry number

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword

Synopsis

Direction of traffic for TCA configuration

Context

configure application-assurance group number partition number threshold-crossing-alert session-filter-entry reference entry-id reference direction keyword

Options

from-sub, to-sub

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number

Synopsis

High watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert session-filter-entry reference entry-id reference direction keyword high-watermark number

Tree

high-watermark

Range

1 to 4294967295

Default

4294967295

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number

Synopsis

Low watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert session-filter-entry reference entry-id reference direction keyword low-watermark number

Tree

low-watermark

Range

0 to 4294967294

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-validate [tcp-validate-name] reference direction keyword

Synopsis

Enter the tcp-validate list instance

Context

configure application-assurance group number partition number threshold-crossing-alert tcp-validate reference direction keyword

Tree

tcp-validate

Description

Commands in this context configure TCP validation policy TCA fields for the partition.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[tcp-validate-name] reference

Synopsis

AA TCP validate name for configuration

Context

configure application-assurance group number partition number threshold-crossing-alert tcp-validate reference direction keyword

Reference

configure application-assurance group number partition number tcp-validate string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword

Synopsis

Direction of traffic for TCA configuration

Context

configure application-assurance group number partition number threshold-crossing-alert tcp-validate reference direction keyword

Options

from-sub, to-sub

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number

Synopsis

High watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert tcp-validate reference direction keyword high-watermark number

Tree

high-watermark

Range

1 to 4294967295

Default

4294967295

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number

Synopsis

Low watermark threshold

Context

configure application-assurance group number partition number threshold-crossing-alert tcp-validate reference direction keyword low-watermark number

Tree

low-watermark

Range

0 to 4294967294

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

transit-ip-policy [ip-policy-id] number

Synopsis

Enter the transit-ip-policy list instance

Context

configure application-assurance group number partition number transit-ip-policy number

Tree

transit-ip-policy

Description

Commands in this context define a transit AA subscriber IP policy. Transit AA subscribers are managed by the system through the use of this policy assigned to services, which determines how transit subs are created and removed for that service.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[ip-policy-id] number

Synopsis

IP transit policy ID

Context

configure application-assurance group number partition number transit-ip-policy number

Range

1 to 65535

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-app-profile reference

Synopsis

Default AA application profile

Context

configure application-assurance group number partition number transit-ip-policy number default-app-profile reference

Tree

default-app-profile

Reference

configure application-assurance group number partition number policy app-profile string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number transit-ip-policy number description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

detect-seen-ip boolean

Synopsis

Detect transit subscribers based on IP address

Context

configure application-assurance group number partition number transit-ip-policy number detect-seen-ip boolean

Tree

detect-seen-ip

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dhcp

Synopsis

Enter the dhcp context

Context

configure application-assurance group number partition number transit-ip-policy number dhcp

Tree

dhcp

Description

Commands in this context enable dynamic DHCP-based management of transit aa-subs for the transit IP policy. Dynamic DHCP-based management and other types of management of transit subs for a transit IP policy are mutually exclusive.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state for learning DHCP dynamic transits

Context

configure application-assurance group number partition number transit-ip-policy number dhcp admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

diameter

Synopsis

Enter the diameter context

Context

configure application-assurance group number partition number transit-ip-policy number diameter

Tree

diameter

Description

Commands in this context configure dynamic Diameter-based management of transit AA subs for the transit IP policy. This is mutually exclusive to other types of management of transit subs for a given transit IP policy.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state for Diameter dynamic transits

Context

configure application-assurance group number partition number transit-ip-policy number diameter admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

application-policy reference

Synopsis

Diameter application policy name for IP transit policy

Context

configure application-assurance group number partition number transit-ip-policy number diameter application-policy reference

Tree

application-policy

Reference

configure subscriber-mgmt diameter-gx-policy string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ipv6-address-prefix-length number

Synopsis

Length of the AA transit IP policy IPv6 address prefix

Context

configure application-assurance group number partition number transit-ip-policy number ipv6-address-prefix-length number

Tree

ipv6-address-prefix-length

Range

32 to 64

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

radius

Synopsis

Enter the radius context

Context

configure application-assurance group number partition number transit-ip-policy number radius

Tree

radius

Description

Commands in this context enable dynamic RADIUS-based management of transit aa-subs for the transit IP policy. This is mutually exclusive to other types of management of transit subs for a given transit IP policy.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of learning RADIUS dynamic transit

Context

configure application-assurance group number partition number transit-ip-policy number radius admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

authentication-policy reference

Synopsis

RADIUS authentication policy

Context

configure application-assurance group number partition number transit-ip-policy number radius authentication-policy reference

Tree

authentication-policy

Reference

configure subscriber-mgmt radius-authentication-policy string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

seen-ip-radius-acct-policy reference

Synopsis

RADIUS accounting policy to enable seen-IP notification

Context

configure application-assurance group number partition number transit-ip-policy number radius seen-ip-radius-acct-policy reference

Tree

seen-ip-radius-acct-policy

Reference

configure application-assurance radius-accounting-policy string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

static-aa-sub [transit-aa-sub-name] string

Synopsis

Enter the static-aa-sub list instance

Context

configure application-assurance group number partition number transit-ip-policy number static-aa-sub string

Tree

static-aa-sub

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[transit-aa-sub-name] string

Synopsis

Static transit subscriber name

Context

configure application-assurance group number partition number transit-ip-policy number static-aa-sub string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-profile reference

Synopsis

Application profile name

Context

configure application-assurance group number partition number transit-ip-policy number static-aa-sub string app-profile reference

Tree

app-profile

Reference

configure application-assurance group number partition number policy app-profile string

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip [address] (ipv4-unicast-address | ipv6-prefix)

Synopsis

Add a list entry for ip

Context

configure application-assurance group number partition number transit-ip-policy number static-aa-sub string ip (ipv4-unicast-address | ipv6-prefix)

Tree

ip

Description

Commands in this context configure the IP address for a static transit aa-sub.

Max. Elements

32

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[address] (ipv4-unicast-address | ipv6-prefix)

Synopsis

IP address for an AA static transit subscriber

Context

configure application-assurance group number partition number transit-ip-policy number static-aa-sub string ip (ipv4-unicast-address | ipv6-prefix)

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sub-ident-policy reference

Synopsis

Subscriber identification policy

Context

configure application-assurance group number partition number transit-ip-policy number sub-ident-policy reference

Tree

sub-ident-policy

Description

This command defines the subscriber identification policy for the transit IP policy that will be associated with a SAP. The subscriber identification policy must be defined prior to associating the profile with a SAP in the configure subscriber-mgmt sub-ident-policy context. Subscribers are managed by the system through the use of subscriber identification strings. A subscriber identification string uniquely identifies a subscriber. For static hosts, the subscriber identification string is explicitly defined with each static subscriber host.

For dynamic hosts, the subscriber identification string must be derived from the DHCP ACK message sent to the subscriber host. The default value for the string is the content of Option 82 CIRCUIT-ID and REMOTE-ID fields interpreted as an octet string. As an option, the DHCP ACK message may be processed by a subscriber identification policy which has the capability to parse the message into an alternative ASCII or octet string value.

When multiple hosts on the same port are associated with the same subscriber identification string, they are considered to be host members of the same subscriber. A subscriber identification policy can also be used for identifying dynamic transit subscriber names.

Reference

configure subscriber-mgmt sub-ident-policy string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

transit-auto-create

Synopsis

Enter the transit-auto-create context

Context

configure application-assurance group number partition number transit-ip-policy number transit-auto-create

Tree

transit-auto-create

Description

Commands in this context enable the seen-IP auto creation of transit subscribers using the transit IP policy name and subscriber IP address as the aa-sub name. The default app-profile configured against the transit IP policy is applied to these subscribers.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the automatic dynamic transits

Context

configure application-assurance group number partition number transit-ip-policy number transit-auto-create admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

inactivity-monitor boolean

Synopsis

Monitor inactivity on auto-created transit subscribers

Context

configure application-assurance group number partition number transit-ip-policy number transit-auto-create inactivity-monitor boolean

Tree

inactivity-monitor

Description

When configured to true, this command enables the auto-removal of inactive transit subscribers. Periodically, AA removes any inactive auto-created subscribers. An inactive subscriber is defined as having no active flows in the last period. 

When configured to false, this command disables the auto-removal of inactive transit subscribers. 

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

transit-prefix-policy [prefix-policy-id] number

Synopsis

Enter the transit-prefix-policy list instance

Context

configure application-assurance group number partition number transit-prefix-policy number

Tree

transit-prefix-policy

Description

Commands in this context define a transit AA subscriber prefix policy. Transit AA subscribers are managed by the system through the use of this policy assigned to services, which determines how transit subscribers are created and removed for that service.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[prefix-policy-id] number

Synopsis

Transit prefix policy ID

Context

configure application-assurance group number partition number transit-prefix-policy number

Range

1 to 65535

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number partition number transit-prefix-policy number description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number

Synopsis

Enter the entry list instance

Context

configure application-assurance group number partition number transit-prefix-policy number entry number

Tree

entry

Description

Commands in this context configure the index to a specific entry of a transit prefix policy.

Max. Elements

4095

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number

Synopsis

ID for a transit prefix policy entry

Context

configure application-assurance group number partition number transit-prefix-policy number entry number

Range

1 to 4294967295

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub reference

Synopsis

Name of the transit prefix AA subscriber

Context

configure application-assurance group number partition number transit-prefix-policy number entry number aa-sub reference

Tree

aa-sub

Reference

configure application-assurance group number partition number transit-prefix-policy number static-aa-sub string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

match

Synopsis

Enter the match context

Context

configure application-assurance group number partition number transit-prefix-policy number entry number match

Tree

match

Description

Commands in this context configure transit prefix policy entry match criteria.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub-ip (ipv4-prefix | ipv6-prefix)

Synopsis

AA subscriber IP address prefix

Context

configure application-assurance group number partition number transit-prefix-policy number entry number match aa-sub-ip (ipv4-prefix | ipv6-prefix)

Tree

aa-sub-ip

Description

This command configures a transit prefix subscriber IP address prefix. It is used when the site is on the local side, the same side of the system as the parent SAP. The local aa-sub-ip addresses represent the source IP in the from-SAP direction and destination IP in the to-SAP direction.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

network-ip (ipv4-prefix | ipv6-prefix)

Synopsis

Network IP address prefix

Context

configure application-assurance group number partition number transit-prefix-policy number entry number match network-ip (ipv4-prefix | ipv6-prefix)

Tree

network-ip

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

static-aa-sub [transit-aa-sub-name] string

Synopsis

Enter the static-aa-sub list instance

Context

configure application-assurance group number partition number transit-prefix-policy number static-aa-sub string

Tree

static-aa-sub

Max. Elements

4095

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[transit-aa-sub-name] string

Synopsis

Static transit subscriber name

Context

configure application-assurance group number partition number transit-prefix-policy number static-aa-sub string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-profile reference

Synopsis

Application profile name

Context

configure application-assurance group number partition number transit-prefix-policy number static-aa-sub string app-profile reference

Tree

app-profile

Reference

configure application-assurance group number partition number policy app-profile string

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

is-remote boolean

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

Set transit subscriber as remote

Context

configure application-assurance group number partition number transit-prefix-policy number static-aa-sub string is-remote boolean

Tree

is-remote

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

wap1x

Synopsis

Enter the wap1x context

Context

configure application-assurance group number partition number wap1x

Tree

wap1x

Description

Commands in this context configure the Wireless Application Protocol (WAP) 1.X.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of WAP1x detection

Context

configure application-assurance group number partition number wap1x admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

policer

Synopsis

Enter the policer context

Context

configure application-assurance group number policer

Tree

policer

Description

Commands in this context create application assurance policer profiles of a specified type. Policers can be bandwidth or flow-limiting and can have a granularity of system scope (limits traffic entering AA ISA for all or a subset of AA subscribers) or a subscriber scope (limits apply to each AA subscriber traffic).

The policer type and granularity can only be configured during creation. They cannot be modified. The policer profile must be removed from all AQPs to be removed. Changes to policer profile parameters take effect immediately for policers instantiated as a result of AQP actions using this profile.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

anl-bandwidth-policer [policer-name] string

Synopsis

Enter the anl-bandwidth-policer list instance

Context

configure application-assurance group number policer anl-bandwidth-policer string

Tree

anl-bandwidth-policer

Description

Commands in this context configure the AA ANL policer.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[policer-name] string

Synopsis

Policer name

Context

configure application-assurance group number policer anl-bandwidth-policer string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword

Synopsis

Action for packets violating configured policer rate

Context

configure application-assurance group number policer anl-bandwidth-policer string action keyword

Tree

action

Description

This command configures the action to be performed by single-bucket bandwidth policers for non-conformant traffic.

Dual bucket bandwidth policers cannot have their action configured and always mark traffic below CIR as in-profile, between CIR and PIR as out-of-profile, and drop traffic above PIR. Flow policers always discard non-conformant traffic.

When multiple application assurance policers are configured against a single flow (including policers at both subscriber and system), the flow/packet is dropped if one of the policers requires the packet to be discarded. This occurs regardless of the action of the other policers.

Default

permit-deny

Options

permit-deny, priority-mark

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

adaptation-rule

Synopsis

Enter the adaptation-rule context

Context

configure application-assurance group number policer anl-bandwidth-policer string adaptation-rule

Tree

adaptation-rule

Description

Commands in this context configure the AA policer adaptation rule fields and define the method used by the system to derive the operational CIR and PIR values when the queue is provisioned. For the CIR and PIR values individually, the system attempts to find the best operational rate depending on the defined option. To change the CIR adaptation rule only, the current PIR rule must be part of the command executed.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir keyword

Synopsis

Peak information rate value for the adaptation rule

Context

configure application-assurance group number policer anl-bandwidth-policer string adaptation-rule pir keyword

Tree

pir

Description

This command configures the adaptation rule to be used while computing the operational PIR value. The adaptation rule specifies the rules to compute the operational values while maintaining minimum offset.

Default

closest

Options

max, min, closest

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number policer anl-bandwidth-policer string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number

Synopsis

ANL bandwidth policer maximum burst size

Context

configure application-assurance group number policer anl-bandwidth-policer string mbs number

Tree

mbs

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends configuring MBS larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

Range

0 to 131071

Default

0

Units

kilobytes

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rate-percentage number

Synopsis

Rate used by Access-Network-Location policers

Context

configure application-assurance group number policer anl-bandwidth-policer string rate-percentage number

Tree

rate-percentage

Description

This command configures the stage 1 congestion percentage used by Access-Network-Location (ANL) policers. Because ANL total bandwidth is dynamically measured and estimated by AA, this command allows the operator to configure the ratio of that measured bandwidth to be used by the ANL policer as the policer rate.

No limiting is performed if not specified.

Range

0 to 200

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rate-percentage-stage-2 number

Synopsis

Rate used by Access-Network-Location policers

Context

configure application-assurance group number policer anl-bandwidth-policer string rate-percentage-stage-2 number

Tree

rate-percentage-stage-2

Description

This command configures the stage 2 congestion percentage rate used by Access-Network-Location (ANL) policers. Because ANL stage2 total bandwidth is dynamically measured and estimated by AA, this command allows the operator to configure the ratio of that measured bandwidth to be used by the ANL stage2 policer as the policer rate.

When unconfigured, limiting is not performed.

Range

0 to 200

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dual-bucket-bandwidth-policer [policer-name] string

Synopsis

Enter the dual-bucket-bandwidth-policer list instance

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string

Tree

dual-bucket-bandwidth-policer

Description

Commands in this context configure the dual-bucket bandwidth policer.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[policer-name] string

Synopsis

Policer name

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

adaptation-rule

Synopsis

Enter the adaptation-rule context

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string adaptation-rule

Tree

adaptation-rule

Description

Commands in this context configure the AA policer adaptation rule fields and define the method used by the system to derive the operational CIR and PIR values when the queue is provisioned. For the CIR and PIR values individually, the system attempts to find the best operational rate depending on the defined option. To change the CIR adaptation rule only, the current PIR rule must be part of the command executed.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cir keyword

Synopsis

Committed information rate value for adaptation rule

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string adaptation-rule cir keyword

Tree

cir

Description

This command configures the CIR for the dual-bucket-bandwidth-policer adaptation rule policer. Nokia recommends configuring CIR larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. The CIR is configurable for dual-bucket bandwidth policers only.

Default

closest

Options

max, min, closest

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir keyword

Synopsis

Peak information rate value for the adaptation rule

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string adaptation-rule pir keyword

Tree

pir

Description

This command configures the adaptation rule to be used while computing the operational PIR value. The adaptation rule specifies the rules to compute the operational values while maintaining minimum offset.

Default

closest

Options

max, min, closest

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cbs number

Synopsis

Committed burst size when in congested state

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string cbs number

Tree

cbs

Description

This command configures the committed burst size (CBS) for a policer. Nokia recommends that CBS is configured larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. CBS is configurable for dual-bucket bandwidth policers only.

Range

0 to 131071

Default

0

Units

kilobytes

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cir (number | keyword)

Synopsis

Committed information rate value for the policer

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string cir (number | keyword)

Tree

cir

Description

This command configures the CIR for the dual-bucket-bandwidth-policer policer. Nokia recommends that the CIR is configured larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. The CIR is configurable for dual-bucket bandwidth policers only.

Range

0 to 100000000

Default

0

Units

kilobps

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

congestion-override

Synopsis

Enter the congestion-override context

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override

Tree

congestion-override

Description

Commands in this context configure the congestion bandwidth policer override rates.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cbs number

Synopsis

Committed burst size in a congested stage 2 state

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override cbs number

Tree

cbs

Description

This command configures the committed burst size for a policer. The configured CBS should be larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. CBS is configurable for dual-bucket bandwidth policers only.

Range

0 to 131071

Default

0

Units

kilobytes

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cir (number | keyword)

Synopsis

Committed information rate value for the policer override

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override cir (number | keyword)

Tree

cir

Description

This command configures the CIR for the dual-bucket bandwidth policer congestion override. Nokia recommends that the CIR is configured larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. The CIR is configurable for dual-bucket bandwidth policers only.

Range

0 to 100000000

Default

0

Units

kilobps

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number

Synopsis

Maximum burst size when in a congested state

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override mbs number

Tree

mbs

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends configuring MBS larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

Range

0 to 131071

Default

0

Units

kilobytes

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir (number | keyword)

Synopsis

Peak information rate value for the congestion override

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override pir (number | keyword)

Tree

pir

Range

1 to 100000000

Default

max

Units

kilobps

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

congestion-override-stage-2

Synopsis

Enter the congestion-override-stage-2 context

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override-stage-2

Tree

congestion-override-stage-2

Description

This command enables the context to configure per-subscriber stage 2 congestion bandwidth policer override rates.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cbs number

Synopsis

Committed burst size in a congested stage 2 state

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override-stage-2 cbs number

Tree

cbs

Description

This command configures the committed burst size for a policer. The configured CBS should be larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. CBS is configurable for dual-bucket bandwidth policers only.

Range

0 to 131071

Default

0

Units

kilobytes

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cir (number | keyword)

Synopsis

Committed information rate value for the policer override

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override-stage-2 cir (number | keyword)

Tree

cir

Description

This command configures the CIR for the dual-bucket bandwidth policer congestion override. Nokia recommends that the CIR is configured larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. The CIR is configurable for dual-bucket bandwidth policers only.

Range

0 to 100000000

Default

0

Units

kilobps

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number

Synopsis

Maximum burst size when in a congested state

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override-stage-2 mbs number

Tree

mbs

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends configuring MBS larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

Range

0 to 131071

Default

0

Units

kilobytes

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir (number | keyword)

Synopsis

Peak information rate value for the congestion override

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override-stage-2 pir (number | keyword)

Tree

pir

Range

1 to 100000000

Default

max

Units

kilobps

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number

Synopsis

Bandwidth policer maximum burst size

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string mbs number

Tree

mbs

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends configuring MBS larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

Range

0 to 131071

Default

0

Units

kilobytes

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir (number | keyword)

Synopsis

Peak information rate value for the bandwidth policer

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string pir (number | keyword)

Tree

pir

Range

1 to 100000000

Default

max

Units

kilobps

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time-of-day-override [tod-override-id] number

Synopsis

Enter the time-of-day-override list instance

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number

Tree

time-of-day-override

Description

Commands in this context configure the time of day override policy for a given policer. Rate/mbs/cbs/flow-rate/flow-count configured in each override-id will override the default policer values at the specified time of day configured in the override.

Max. Elements

8

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[tod-override-id] number

Synopsis

ID for time of day override

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number

Range

1 to 255

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of this time of day policer

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cbs number

Synopsis

Committed burst size for time of day override policer

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number cbs number

Tree

cbs

Description

This command configures the committed burst size (CBS) for a policer. Nokia recommends configuring CBS larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. CBS is configurable for dual-bucket bandwidth policers only.

Range

0 to 131071

Default

0

Units

kilobytes

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cir (number | keyword)

Synopsis

Committed information rate for time of day override

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number cir (number | keyword)

Tree

cir

Description

This command configures the committed information rate (CIR) for the dual-bucket-bandwidth-policer policer time of day override. Nokia recommends that the CIR is configured larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. The CIR is configurable for dual-bucket bandwidth policers only.

Range

0 to 100000000

Default

0

Units

kilobps

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number

Synopsis

Maximum burst size for the policer time of day override

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number mbs number

Tree

mbs

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends that MBS is configured larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

Range

0 to 131071

Default

0

Units

kilobytes

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir (number | keyword)

Synopsis

Peak information rate value for the time of day override

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number pir (number | keyword)

Tree

pir

Range

1 to 100000000

Default

max

Units

kilobps

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time-range

Synopsis

Enter the time-range context

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range

Tree

time-range

Description

Commands in this context configure the days of the week policer override is enabled as well as the time policer override starts and ends. When using a daily override the operator can select which days during the week from Sunday to Saturday it is applicable along with the start/end hour/min time range repeated over these days.When using a weekly override the operator can select between which days in the week the policy start up to the hours/min for both start day and end day.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

daily

Synopsis

Enable the daily context

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range daily

Tree

daily

Description

Commands in this context configure the daily start and end times for policer override.

Notes

The following elements are part of a choice: daily or weekly.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

all-days

Synopsis

Enable policer override on every day

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range daily all-days

Tree

all-days

Notes

This element is the default part of a choice.

The following elements are part of a choice: all-days or on.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end string

Synopsis

Daily end time

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range daily end string

Tree

end

Description

This command configures the daily end time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

String Length

3 to 5

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

on keyword

Synopsis

Policer override on selected days

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range daily on keyword

Tree

on

Options

sunday, monday, tuesday, wednesday, thursday, friday, saturday

Max. Elements

6

Notes

The following elements are part of a choice: all-days or on.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start string

Synopsis

Daily start time

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range daily start string

Tree

start

Description

This command configures the daily start time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

String Length

3 to 5

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

weekly

Synopsis

Enable the weekly context

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range weekly

Tree

weekly

Description

Commands in this context configure the weekly start and end times for policer override.

Notes

The following elements are part of a choice: daily or weekly.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end

Synopsis

Enable the end context

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range weekly end

Tree

end

Description

Commands in this context configure the weekly end time for policer override.When using a weekly override, the operator can select between which days in the week the policy ends up to the hours or minutes for both start of the day and end of the day.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

day keyword

Synopsis

Weekly end day

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range weekly end day keyword

Tree

day

Options

sunday, monday, tuesday, wednesday, thursday, friday, saturday

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time string

Synopsis

Weekly end time

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range weekly end time string

Tree

time

Description

This command configures the weekly end time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

String Length

3 to 5

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start

Synopsis

Enable the start context

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range weekly start

Tree

start

Description

Commands in this context configure the weekly start time for policer override.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

day keyword

Synopsis

Weekly start day

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range weekly start day keyword

Tree

day

Options

sunday, monday, tuesday, wednesday, thursday, friday, saturday

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time string

Synopsis

Weekly start time

Context

configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range weekly start time string

Tree

time

Description

This command configures the weekly start time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

String Length

3 to 5

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-count-limit-policer [policer-name] string

Synopsis

Enter the flow-count-limit-policer list instance

Context

configure application-assurance group number policer flow-count-limit-policer string

Tree

flow-count-limit-policer

Description

Commands in this context configure the AA flow count limit policer.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[policer-name] string

Synopsis

Policer name

Context

configure application-assurance group number policer flow-count-limit-policer string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword

Synopsis

Action for packets violating configured policer rate

Context

configure application-assurance group number policer flow-count-limit-policer string action keyword

Tree

action

Description

This command configures the action to be performed by single-bucket bandwidth policers for non-conformant traffic.

Dual bucket bandwidth policers cannot have their action configured and always mark traffic below CIR as in-profile, between CIR and PIR as out-of-profile, and drop traffic above PIR. Flow policers always discard non-conformant traffic.

When multiple application assurance policers are configured against a single flow (including policers at both subscriber and system), the flow/packet is dropped if one of the policers requires the packet to be discarded. This occurs regardless of the action of the other policers.

Default

permit-deny

Options

permit-deny, priority-mark

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number policer flow-count-limit-policer string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

granularity keyword

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

Policer granularity

Context

configure application-assurance group number policer flow-count-limit-policer string granularity keyword

Tree

granularity

Options

system, subscriber

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

limit-gtp-flows boolean

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

Limit concurrent GTP flows

Context

configure application-assurance group number policer flow-count-limit-policer string limit-gtp-flows boolean

Tree

limit-gtp-flows

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

peak-flow-count (number | keyword)

Synopsis

Peak flow count limit

Context

configure application-assurance group number policer flow-count-limit-policer string peak-flow-count (number | keyword)

Tree

peak-flow-count

Range

0 to 100000000

Default

max

Units

flows per second

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time-of-day-override [tod-override-id] number

Synopsis

Enter the time-of-day-override list instance

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number

Tree

time-of-day-override

Description

Commands in this context configure the time of day override policy for a specific policer. Rate/mbs/cbs/flow-rate/flow-count configured in each override ID overrides the default policer values at the specified time of day configured in the override.

Max. Elements

8

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[tod-override-id] number

Synopsis

ID for time of day override

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number

Range

1 to 255

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of this time of day policer

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

peak-flow-count (number | keyword)

Synopsis

Peak flow count limit

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number peak-flow-count (number | keyword)

Tree

peak-flow-count

Range

0 to 100000000

Default

max

Units

flows per second

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time-range

Synopsis

Enter the time-range context

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range

Tree

time-range

Description

Commands in this context configure the days of the week policer override is enabled as well as the time policer override starts and ends. When using a daily override the operator can select which days during the week from Sunday to Saturday it is applicable along with the start/end hour/min time range repeated over these days.When using a weekly override the operator can select between which days in the week the policy start up to the hours/min for both start day and end day.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

daily

Synopsis

Enable the daily context

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range daily

Tree

daily

Description

Commands in this context configure the daily start and end times for policer override.

Notes

The following elements are part of a choice: daily or weekly.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

all-days

Synopsis

Enable policer override on every day

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range daily all-days

Tree

all-days

Notes

This element is the default part of a choice.

The following elements are part of a choice: all-days or on.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end string

Synopsis

Daily end time

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range daily end string

Tree

end

Description

This command configures the daily end time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

String Length

3 to 5

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

on keyword

Synopsis

Policer override on selected days

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range daily on keyword

Tree

on

Options

sunday, monday, tuesday, wednesday, thursday, friday, saturday

Max. Elements

6

Notes

The following elements are part of a choice: all-days or on.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start string

Synopsis

Daily start time

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range daily start string

Tree

start

Description

This command configures the daily start time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

String Length

3 to 5

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

weekly

Synopsis

Enable the weekly context

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range weekly

Tree

weekly

Description

Commands in this context configure the weekly start and end times for policer override.

Notes

The following elements are part of a choice: daily or weekly.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end

Synopsis

Enable the end context

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range weekly end

Tree

end

Description

Commands in this context configure the weekly end time for policer override.When using a weekly override, the operator can select between which days in the week the policy ends up to the hours or minutes for both start of the day and end of the day.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

day keyword

Synopsis

Weekly end day

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range weekly end day keyword

Tree

day

Options

sunday, monday, tuesday, wednesday, thursday, friday, saturday

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time string

Synopsis

Weekly end time

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range weekly end time string

Tree

time

Description

This command configures the weekly end time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

String Length

3 to 5

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start

Synopsis

Enable the start context

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range weekly start

Tree

start

Description

Commands in this context configure the weekly start time for policer override.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

day keyword

Synopsis

Weekly start day

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range weekly start day keyword

Tree

day

Options

sunday, monday, tuesday, wednesday, thursday, friday, saturday

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time string

Synopsis

Weekly start time

Context

configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range weekly start time string

Tree

time

Description

This command configures the weekly start time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

String Length

3 to 5

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-setup-rate-policer [policer-name] string

Synopsis

Enter the flow-setup-rate-policer list instance

Context

configure application-assurance group number policer flow-setup-rate-policer string

Tree

flow-setup-rate-policer

Description

Commands in this context configure the flow setup rate policer.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[policer-name] string

Synopsis

Policer name

Context

configure application-assurance group number policer flow-setup-rate-policer string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword

Synopsis

Action for packets violating configured policer rate

Context

configure application-assurance group number policer flow-setup-rate-policer string action keyword

Tree

action

Description

This command configures the action to be performed by single-bucket bandwidth policers for non-conformant traffic.

Dual bucket bandwidth policers cannot have their action configured and always mark traffic below CIR as in-profile, between CIR and PIR as out-of-profile, and drop traffic above PIR. Flow policers always discard non-conformant traffic.

When multiple application assurance policers are configured against a single flow (including policers at both subscriber and system), the flow/packet is dropped if one of the policers requires the packet to be discarded. This occurs regardless of the action of the other policers.

Default

permit-deny

Options

permit-deny, priority-mark

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

adaptation-rule

Synopsis

Enter the adaptation-rule context

Context

configure application-assurance group number policer flow-setup-rate-policer string adaptation-rule

Tree

adaptation-rule

Description

Commands in this context configure the AA policer adaptation rule fields and define the method used by the system to derive the operational CIR and PIR values when the queue is provisioned. For the CIR and PIR values individually, the system attempts to find the best operational rate depending on the defined option. To change the CIR adaptation rule only, the current PIR rule must be part of the command executed.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

peak-flow-setup-rate keyword

Synopsis

Peak flow setup rate adaptation rule

Context

configure application-assurance group number policer flow-setup-rate-policer string adaptation-rule peak-flow-setup-rate keyword

Tree

peak-flow-setup-rate

Default

closest

Options

max, min, closest

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number policer flow-setup-rate-policer string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-setup-rate-burst-size number

Synopsis

Maximum flow setup rate burst size

Context

configure application-assurance group number policer flow-setup-rate-policer string flow-setup-rate-burst-size number

Tree

flow-setup-rate-burst-size

Range

0 to 131071

Default

0

Units

flows

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

granularity keyword

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

Policer granularity

Context

configure application-assurance group number policer flow-setup-rate-policer string granularity keyword

Tree

granularity

Options

system, subscriber

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

peak-flow-setup-rate (number | keyword)

Synopsis

Peak flow setup rate

Context

configure application-assurance group number policer flow-setup-rate-policer string peak-flow-setup-rate (number | keyword)

Tree

peak-flow-setup-rate

Range

1 to 100000000

Default

max

Units

flows per second

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time-of-day-override [tod-override-id] number

Synopsis

Enter the time-of-day-override list instance

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number

Tree

time-of-day-override

Description

Commands in this context configure the time of day override policy for a given policer. Rate/mbs/cbs/flow-rate/flow-count configured in each override-id will override the default policer values at the specified time of day configured in the override.

Max. Elements

8

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[tod-override-id] number

Synopsis

ID for time of day override

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number

Range

1 to 255

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of this time of day policer

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-setup-rate-burst-size number

Synopsis

Maximum flow setup rate burst size

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number flow-setup-rate-burst-size number

Tree

flow-setup-rate-burst-size

Range

0 to 131071

Default

0

Units

flows

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

peak-flow-setup-rate (number | keyword)

Synopsis

Peak flow setup rate

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number peak-flow-setup-rate (number | keyword)

Tree

peak-flow-setup-rate

Range

1 to 100000000

Default

max

Units

flows per second

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time-range

Synopsis

Enter the time-range context

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range

Tree

time-range

Description

Commands in this context configure the days of the week policer override is enabled as well as the time policer override starts and ends. When using a daily override the operator can select which days during the week from Sunday to Saturday it is applicable along with the start/end hour/min time range repeated over these days.When using a weekly override the operator can select between which days in the week the policy start up to the hours/min for both start day and end day.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

daily

Synopsis

Enable the daily context

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range daily

Tree

daily

Description

Commands in this context configure the daily start and end times for policer override.

Notes

The following elements are part of a choice: daily or weekly.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

all-days

Synopsis

Enable policer override on every day

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range daily all-days

Tree

all-days

Notes

This element is the default part of a choice.

The following elements are part of a choice: all-days or on.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end string

Synopsis

Daily end time

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range daily end string

Tree

end

Description

This command configures the daily end time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

String Length

3 to 5

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

on keyword

Synopsis

Policer override on selected days

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range daily on keyword

Tree

on

Options

sunday, monday, tuesday, wednesday, thursday, friday, saturday

Max. Elements

6

Notes

The following elements are part of a choice: all-days or on.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start string

Synopsis

Daily start time

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range daily start string

Tree

start

Description

This command configures the daily start time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

String Length

3 to 5

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

weekly

Synopsis

Enable the weekly context

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range weekly

Tree

weekly

Description

Commands in this context configure the weekly start and end times for policer override.

Notes

The following elements are part of a choice: daily or weekly.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end

Synopsis

Enable the end context

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range weekly end

Tree

end

Description

Commands in this context configure the weekly end time for policer override.When using a weekly override, the operator can select between which days in the week the policy ends up to the hours or minutes for both start of the day and end of the day.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

day keyword

Synopsis

Weekly end day

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range weekly end day keyword

Tree

day

Options

sunday, monday, tuesday, wednesday, thursday, friday, saturday

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time string

Synopsis

Weekly end time

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range weekly end time string

Tree

time

Description

This command configures the weekly end time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

String Length

3 to 5

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start

Synopsis

Enable the start context

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range weekly start

Tree

start

Description

Commands in this context configure the weekly start time for policer override.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

day keyword

Synopsis

Weekly start day

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range weekly start day keyword

Tree

day

Options

sunday, monday, tuesday, wednesday, thursday, friday, saturday

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time string

Synopsis

Weekly start time

Context

configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range weekly start time string

Tree

time

Description

This command configures the weekly start time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

String Length

3 to 5

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

single-bucket-bandwidth-policer [policer-name] string

Synopsis

Enter the single-bucket-bandwidth-policer list instance

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string

Tree

single-bucket-bandwidth-policer

Description

Commands in this context configure the single-bucket bandwidth policer.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[policer-name] string

Synopsis

Policer name

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword

Synopsis

Action for packets violating configured policer rate

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string action keyword

Tree

action

Description

This command configures the action to be performed by single-bucket bandwidth policers for non-conformant traffic.

Dual bucket bandwidth policers cannot have their action configured and always mark traffic below CIR as in-profile, between CIR and PIR as out-of-profile, and drop traffic above PIR. Flow policers always discard non-conformant traffic.

When multiple application assurance policers are configured against a single flow (including policers at both subscriber and system), the flow/packet is dropped if one of the policers requires the packet to be discarded. This occurs regardless of the action of the other policers.

Default

permit-deny

Options

permit-deny, priority-mark

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

adaptation-rule

Synopsis

Enter the adaptation-rule context

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string adaptation-rule

Tree

adaptation-rule

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir keyword

Synopsis

Peak information rate value for the adaptation rule

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string adaptation-rule pir keyword

Tree

pir

Description

This command configures the adaptation rule to be used while computing the operational PIR value. The adaptation rule specifies the rules to compute the operational values while maintaining minimum offset.

Default

closest

Options

max, min, closest

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

congestion-override

Synopsis

Enter the congestion-override context

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string congestion-override

Tree

congestion-override

Description

Commands in this context configure the congestion bandwidth policer override rates.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number

Synopsis

Maximum burst size when in a congested state

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string congestion-override mbs number

Tree

mbs

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends configuring MBS larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

Range

0 to 131071

Default

0

Units

kilobytes

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir (number | keyword)

Synopsis

Peak information rate value for the congestion override

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string congestion-override pir (number | keyword)

Tree

pir

Range

1 to 100000000

Default

max

Units

kilobps

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

congestion-override-stage-2

Synopsis

Enter the congestion-override-stage-2 context

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string congestion-override-stage-2

Tree

congestion-override-stage-2

Description

Commands in this context configure per-subscriber stage 2 congestion bandwidth policer override rates.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number

Synopsis

Maximum burst size when in a congested state

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string congestion-override-stage-2 mbs number

Tree

mbs

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends configuring MBS larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

Range

0 to 131071

Default

0

Units

kilobytes

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir (number | keyword)

Synopsis

Peak information rate value for the congestion override

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string congestion-override-stage-2 pir (number | keyword)

Tree

pir

Range

1 to 100000000

Default

max

Units

kilobps

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

granularity keyword

Warning:

Modifying this element recreates the parent element automatically for the new value to take effect.

Synopsis

Policer granularity

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string granularity keyword

Tree

granularity

Options

system, subscriber

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number

Synopsis

Bandwidth policer maximum burst size

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string mbs number

Tree

mbs

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends configuring MBS larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

Range

0 to 131071

Default

0

Units

kilobytes

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir (number | keyword)

Synopsis

Peak information rate value for the bandwidth policer

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string pir (number | keyword)

Tree

pir

Range

1 to 100000000

Default

max

Units

kilobps

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time-of-day-override [tod-override-id] number

Synopsis

Enter the time-of-day-override list instance

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number

Tree

time-of-day-override

Description

Commands in this context configure the time of day override policy for a given policer. Rate/mbs/cbs/flow-rate/flow-count configured in each override-id will override the default policer values at the specified time of day configured in the override.

Max. Elements

8

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[tod-override-id] number

Synopsis

ID for time of day override

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number

Range

1 to 255

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of this time of day policer

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number

Synopsis

Bandwidth policer maximum burst size for time of day override

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number mbs number

Tree

mbs

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends configuring MBS larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

Range

0 to 131071

Default

0

Units

kilobytes

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir (number | keyword)

Synopsis

Peak information rate value for time of day override

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number pir (number | keyword)

Tree

pir

Range

1 to 100000000

Default

max

Units

kilobps

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time-range

Synopsis

Enter the time-range context

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range

Tree

time-range

Description

Commands in this context configure the days of the week policer override is enabled as well as the time policer override starts and ends. When using a daily override the operator can select which days during the week from Sunday to Saturday it is applicable along with the start/end hour/min time range repeated over these days.When using a weekly override the operator can select between which days in the week the policy start up to the hours/min for both start day and end day.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

daily

Synopsis

Enable the daily context

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range daily

Tree

daily

Description

Commands in this context configure the daily start and end times for policer override.

Notes

The following elements are part of a choice: daily or weekly.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

all-days

Synopsis

Enable policer override on every day

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range daily all-days

Tree

all-days

Notes

This element is the default part of a choice.

The following elements are part of a choice: all-days or on.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end string

Synopsis

Daily end time

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range daily end string

Tree

end

Description

This command configures the daily end time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

String Length

3 to 5

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

on keyword

Synopsis

Policer override on selected days

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range daily on keyword

Tree

on

Options

sunday, monday, tuesday, wednesday, thursday, friday, saturday

Max. Elements

6

Notes

The following elements are part of a choice: all-days or on.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start string

Synopsis

Daily start time

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range daily start string

Tree

start

Description

This command configures the daily start time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

String Length

3 to 5

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

weekly

Synopsis

Enable the weekly context

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range weekly

Tree

weekly

Description

Commands in this context configure the weekly start and end times for policer override.

Notes

The following elements are part of a choice: daily or weekly.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end

Synopsis

Enable the end context

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range weekly end

Tree

end

Description

Commands in this context configure the weekly end time for policer override.When using a weekly override, the operator can select between which days in the week the policy ends up to the hours or minutes for both start of the day and end of the day.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

day keyword

Synopsis

Weekly end day

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range weekly end day keyword

Tree

day

Options

sunday, monday, tuesday, wednesday, thursday, friday, saturday

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time string

Synopsis

Weekly end time

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range weekly end time string

Tree

time

Description

This command configures the weekly end time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

String Length

3 to 5

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start

Synopsis

Enable the start context

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range weekly start

Tree

start

Description

Commands in this context configure the weekly start time for policer override.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

day keyword

Synopsis

Weekly start day

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range weekly start day keyword

Tree

day

Options

sunday, monday, tuesday, wednesday, thursday, friday, saturday

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time string

Synopsis

Weekly start time

Context

configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range weekly start time string

Tree

time

Description

This command configures the weekly start time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

String Length

3 to 5

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-optimizer [tcp-optimizer-name] string

Synopsis

Enter the tcp-optimizer list instance

Context

configure application-assurance group number tcp-optimizer string

Tree

tcp-optimizer

Description

Commands in this context configure the TCP optimizer policy. When a TCP optimizer policy is removed or deleted, the existing flows using this policy are abandoned, and optimization is stopped.

Introduced

22.2.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[tcp-optimizer-name] string

Synopsis

TCP optimizer name

Context

configure application-assurance group number tcp-optimizer string

Description

This command configures the name of the TCP optimizer policy.

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

22.2.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dack-timeout number

Synopsis

Delayed acknowledgment timeout for client and server

Context

configure application-assurance group number tcp-optimizer string dack-timeout number

Tree

dack-timeout

Description

This command configures a delay ACK (DACK) timeout for the TCP optimizer. By entering this command a default of 200 ms timeout is enabled for delayed acknowledgment. This value is not configurable.

Range

200

Units

milliseconds

Introduced

22.2.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number tcp-optimizer string description string

Tree

description

String Length

1 to 80

Introduced

22.2.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

initial-cwnd number

Synopsis

Initial congestion window of the TCP optimizer

Context

configure application-assurance group number tcp-optimizer string initial-cwnd number

Tree

initial-cwnd

Description

This command configures the initial TCP congestion window (cwnd) used during the TCP Slow Start (SS) period.

Range

1 to 256

Default

8

Introduced

22.2.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

initial-ss-threshold (number | keyword)

Synopsis

Initial TCP Slow Start threshold for client and server

Context

configure application-assurance group number tcp-optimizer string initial-ss-threshold (number | keyword)

Tree

initial-ss-threshold

Description

This command configures the initial Slow Start (SS) threshold for a specific TCP optimizer policy. Nokia recommends setting the threshold close to the access network Bandwidth Delay Product (BDP).

Range

0 to 1000000

Default

1000000

Units

kilobytes

Options

auto

Introduced

22.2.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

network-rtt-threshold number

Synopsis

Network round trip time threshold

Context

configure application-assurance group number tcp-optimizer string network-rtt-threshold number

Tree

network-rtt-threshold

Description

This command configures the threshold of the Round Trip Time (RTT) delay of the network side (between AA and the content provider) above which TCP Optimization (TCPO) is performed. This enables the operator to disable optimization for content that is served from a location close to the TCP optimizer.

Range

1 to 100

Units

milliseconds

Introduced

22.2.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-stack keyword

Synopsis

TCP stack congestion control algorithm

Context

configure application-assurance group number tcp-optimizer string tcp-stack keyword

Tree

tcp-stack

Description

This command configures the TCP stack used toward the subscriber.

Note: The TCP stack used toward the core network is new-reno, and it is not configurable. TCP BBR, TCP Illinois, and TCP Westwood implement a sender-side modification of the TCP congestion window algorithm that improves the performance of TCP Reno in wireless networks with lossy links.

Default

westwood

Options

westwood, illinois, new-reno, bbr

Introduced

22.2.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

url-filter [url-filter-name] string

Synopsis

Enter the url-filter list instance

Context

configure application-assurance group number url-filter string

Tree

url-filter

Description

Commands in this context configure a URL filter action for flows of a specific type matching this entry. If no URL filters are specified, then no URL filters are evaluated.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[url-filter-name] string

Synopsis

URL filter name

Context

configure application-assurance group number url-filter string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the AA URL filter

Context

configure application-assurance group number url-filter string admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

apply-function-specific-behaviour boolean

Synopsis

Use function-specific behavior for action or redirect

Context

configure application-assurance group number url-filter string apply-function-specific-behaviour boolean

Tree

apply-function-specific-behaviour

Description

When configured to true, the function-specific configurations for URL list, ICAP, and web service (url-list, icap, and web-service) are used for default action (default-action) and HTTP redirect (http-redirect).

When configured to false, the configuration at the URL filter level (url-filter) is used for default action and HTTP redirect. 

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Synopsis

Enter the default-action context

Context

configure application-assurance group number url-filter string default-action

Tree

default-action

Description

Commands in this context configure the default action to take effect when the URL filter cannot be used. This may occur in the following cases:

  1. for the local URL list when the URL list is shut down or the file is not loaded due to an error.
  2. in the case of ICAP or web filtering when all TCP connections are busy or down.
Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

allow

Synopsis

Allow all requests as the default URL filter action

Context

configure application-assurance group number url-filter string default-action allow

Tree

allow

Description

When configured, this command allows all requests as the default URL filter action when the URL filter cannot be used.

Notes

The following elements are part of a choice: allow, block-all, or block-http-redirect.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block-all

Synopsis

Block all requests as the default URL filter action

Context

configure application-assurance group number url-filter string default-action block-all

Tree

block-all

Description

When configured, this command blocks all requests as the default URL filter action when the URL filter cannot be used.

Notes

This element is the default part of a choice.

The following elements are part of a choice: allow, block-all, or block-http-redirect.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block-http-redirect reference

Synopsis

HTTP URL name for block and redirect request action

Context

configure application-assurance group number url-filter string default-action block-http-redirect reference

Tree

block-http-redirect

Description

This command blocks traffic and redirects the user to an information page that can be different from the page the user is redirected to when the site that the user tried to access is found in the URL filter. This page is configured using the configure AA group url-filter http-redirect command

Reference

configure application-assurance group number http-redirect string

Notes

The following elements are part of a choice: allow, block-all, or block-http-redirect.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number url-filter string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-redirect reference

Synopsis

HTTP redirect for a blocked HTTP request

Context

configure application-assurance group number url-filter string http-redirect reference

Tree

http-redirect

Reference

configure application-assurance group number http-redirect string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-request-filtering keyword

Synopsis

HTTP filtering for all HTTP requests

Context

configure application-assurance group number url-filter string http-request-filtering keyword

Tree

http-request-filtering

Description

This command selects between HTTP filtering for all HTTP requests in a flow or only the first HTTP request.

Default

all

Options

all, first

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

icap

Synopsis

Enter the icap context

Context

configure application-assurance group number url-filter string icap

Tree

icap

Description

Commands in this context configure the URL filter ICAP policy fields.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

custom-x-header string

Synopsis

Custom x-header field name to include in ICAP requests

Context

configure application-assurance group number url-filter string icap custom-x-header string

Tree

custom-x-header

Description

This command configures the URL filter ICAP policy to include a new x-header field; the content of the x-header is populated based on the AQP URL filter action which can optionally specify the ASO characteristic value to include in the x-header.

String Length

1 to 32

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Synopsis

Enter the default-action context

Context

configure application-assurance group number url-filter string icap default-action

Tree

default-action

Description

Commands in this context configure a default action for the URL filter. The default action takes effect when the URL filter cannot be used. This may happen when all TCP connections are busy or down.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

allow

Synopsis

Allow all requests as the default action

Context

configure application-assurance group number url-filter string icap default-action allow

Tree

allow

Description

When configured, this command allows all traffic when the URL filter cannot be used.

Notes

The following elements are part of a choice: allow, block-all, or block-http-redirect.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block-all

Synopsis

Block all requests as the default action

Context

configure application-assurance group number url-filter string icap default-action block-all

Tree

block-all

Description

When configured, this command blocks all traffic when the URL filter cannot be used.

Notes

This element is the default part of a choice.

The following elements are part of a choice: allow, block-all, or block-http-redirect.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block-http-redirect reference

Synopsis

HTTP URL for redirection when URL filter cannot be used

Context

configure application-assurance group number url-filter string icap default-action block-http-redirect reference

Tree

block-http-redirect

Description

This command blocks traffic and redirects the user to an information page, which can be different than the page the user is redirected to when the site they attempted to access was found in the URL filter; this page is configured using the configure application-assurance group url-filter http-redirect command.

Reference

configure application-assurance group number http-redirect string

Notes

The following elements are part of a choice: allow, block-all, or block-http-redirect.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-redirect reference

Synopsis

HTTP redirect object used when ICAP blocks HTTP request

Context

configure application-assurance group number url-filter string icap http-redirect reference

Tree

http-redirect

Reference

configure application-assurance group number http-redirect string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server [ip-address] (ipv4-address-no-zone | ipv6-address-no-zone) port number

Synopsis

Enter the server list instance

Context

configure application-assurance group number url-filter string icap server (ipv4-address-no-zone | ipv6-address-no-zone) port number

Tree

server

Description

Commands in this context configure the IP address and server port of the ICAP server.

In the current release, the system supports IPv4 addresses only for the ICAP server.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[ip-address] (ipv4-address-no-zone | ipv6-address-no-zone)

Synopsis

ICAP server IP address

Context

configure application-assurance group number url-filter string icap server (ipv4-address-no-zone | ipv6-address-no-zone) port number

Description

This command configures the ICAP server address.

In the current release, the system supports IPv4 addresses only for the ICAP server.

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port number

Synopsis

ICAP server port

Context

configure application-assurance group number url-filter string icap server (ipv4-address-no-zone | ipv6-address-no-zone) port number

Range

1 to 65535

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of this URL filter ICAP server

Context

configure application-assurance group number url-filter string icap server (ipv4-address-no-zone | ipv6-address-no-zone) port number admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number url-filter string icap server (ipv4-address-no-zone | ipv6-address-no-zone) port number description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

vlan-id number

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

VLAN ID of the ICAP server service port

Context

configure application-assurance group number url-filter string icap vlan-id number

Tree

vlan-id

Range

1 to 4094

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

local-filtering

Synopsis

Enter the local-filtering context

Context

configure application-assurance group number url-filter string local-filtering

Tree

local-filtering

Description

Commands in this context configure a URL filter policy for local filtering to filter traffic based on a list of URLs located on a file stored in the router compact flash.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

allow-list reference

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Local filtering URL list for allowed URLs

Context

configure application-assurance group number url-filter string local-filtering allow-list reference

Tree

allow-list

Reference

configure application-assurance group number url-list string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

deny-list [url-list-name] reference

Synopsis

Enter the deny-list list instance

Context

configure application-assurance group number url-filter string local-filtering deny-list reference

Tree

deny-list

Description

Commands in this context configure a list of denied URLs to be added to the local URL filter policy.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[url-list-name] reference

Synopsis

URL list name

Context

configure application-assurance group number url-filter string local-filtering deny-list reference

Description

This command adds a deny-list URL list to the local URL filter policy. 

Reference

configure application-assurance group number url-list string

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Synopsis

Enter the default-action context

Context

configure application-assurance group number url-filter string local-filtering deny-list reference default-action

Tree

default-action

Description

Commands in this context configure a default action for the URL filter. The default action takes effect when the URL filter cannot be used. This may happen in the case of a local URL list when the URL list is disabled or the file is not loaded due to an error.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

allow

Synopsis

Allow all requests as the default action

Context

configure application-assurance group number url-filter string local-filtering deny-list reference default-action allow

Tree

allow

Description

This command allows all traffic when the URL filter cannot be used.

Notes

The following elements are part of a choice: allow, block-all, or block-http-redirect.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block-all

Synopsis

Block all requests as the default action

Context

configure application-assurance group number url-filter string local-filtering deny-list reference default-action block-all

Tree

block-all

Description

This command blocks all traffic when the URL filter cannot be used.

Notes

This element is the default part of a choice.

The following elements are part of a choice: allow, block-all, or block-http-redirect.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block-http-redirect reference

Synopsis

HTTP URL for redirection when URL filter cannot be used

Context

configure application-assurance group number url-filter string local-filtering deny-list reference default-action block-http-redirect reference

Tree

block-http-redirect

Description

This command blocks traffic and redirects the user to an information page, which can be different than the page the user is redirected to when the site they attempted to access was found in the URL filter; this page is configured using the configure application-assurance group url-filter http-redirect command.

Reference

configure application-assurance group number http-redirect string

Notes

The following elements are part of a choice: allow, block-all, or block-http-redirect.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-redirect reference

Synopsis

HTTP redirect object applied to blocked HTTP requests

Context

configure application-assurance group number url-filter string local-filtering deny-list reference http-redirect reference

Tree

http-redirect

Reference

configure application-assurance group number http-redirect string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

web-service

Synopsis

Enter the web-service context

Context

configure application-assurance group number url-filter string web-service

Tree

web-service

Description

Commands in this context configure the URL filter policy using web-service filtering. The operator must configure the web service, hostname, DNS server to use, the AA interface VLAN ID, and provision the category profiles.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

category-set number

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Web service category ID

Context

configure application-assurance group number url-filter string web-service category-set number

Tree

category-set

Range

1 to 65535

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

classification-overrides

Synopsis

Enter the classification-overrides context

Context

configure application-assurance group number url-filter string web-service classification-overrides

Tree

classification-overrides

Description

Commands in this context create a classification override and allow the operator to manually set the category of a hostname.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number

Synopsis

Enter the entry list instance

Context

configure application-assurance group number url-filter string web-service classification-overrides entry number

Tree

entry

Description

Commands in this context configure a classification override, manually setting the category of a hostname.

Max. Elements

200

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number

Synopsis

Classification override entry ID

Context

configure application-assurance group number url-filter string web-service classification-overrides entry number

Range

1 to 65535

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

category-name string

Synopsis

Web service category name

Context

configure application-assurance group number url-filter string web-service classification-overrides entry number category-name string

Tree

category-name

String Length

1 to 32

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

expression string

Synopsis

Hostname of the configured override category

Context

configure application-assurance group number url-filter string web-service classification-overrides entry number expression string

Tree

expression

String Length

1 to 255

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

classifier keyword

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Web service classifier

Context

configure application-assurance group number url-filter string web-service classifier keyword

Tree

classifier

Options

web-service-1

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Synopsis

Enter the default-action context

Context

configure application-assurance group number url-filter string web-service default-action

Tree

default-action

Description

Commands in this context configure a default action for the URL filter. The default action takes effect when the URL filter cannot be used. This may happen when all TCP connections are busy or down.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

allow

Synopsis

Allow all requests as the default action

Context

configure application-assurance group number url-filter string web-service default-action allow

Tree

allow

Description

This command allows all traffic when the web service is unavailable.

Notes

The following elements are part of a choice: allow, block-all, or block-http-redirect.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block-all

Synopsis

Block all requests as the default action

Context

configure application-assurance group number url-filter string web-service default-action block-all

Tree

block-all

Description

This command blocks all traffic when the web service is unavailable.

Notes

This element is the default part of a choice.

The following elements are part of a choice: allow, block-all, or block-http-redirect.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block-http-redirect reference

Synopsis

HTTP URL for redirection when the web service is unavailable

Context

configure application-assurance group number url-filter string web-service default-action block-http-redirect reference

Tree

block-http-redirect

Description

This command blocks traffic and redirects the user to an information page, which can be different than the page the user is redirected to when the site they attempted to access was found in the URL filter; this page is configured using the configure application-assurance group url-filter http-redirect command.

Reference

configure application-assurance group number http-redirect string

Notes

The following elements are part of a choice: allow, block-all, or block-http-redirect.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-profile reference

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Web service default profile

Context

configure application-assurance group number url-filter string web-service default-profile reference

Tree

default-profile

Reference

configure application-assurance group number url-filter string web-service profile string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-server (ipv4-address-no-zone | ipv6-address-no-zone)

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Web service DNS server

Context

configure application-assurance group number url-filter string web-service dns-server (ipv4-address-no-zone | ipv6-address-no-zone)

Tree

dns-server

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

fqdn string

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Web service fully qualified domain name

Context

configure application-assurance group number url-filter string web-service fqdn string

Tree

fqdn

String Length

1 to 255

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-redirect reference

Synopsis

Web service HTTP redirect

Context

configure application-assurance group number url-filter string web-service http-redirect reference

Tree

http-redirect

Reference

configure application-assurance group number http-redirect string

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

profile [profile-name] string

Synopsis

Enter the profile list instance

Context

configure application-assurance group number url-filter string web-service profile string

Tree

profile

Description

Commands in this context configure the category profiles of the web service.

Max. Elements

8

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[profile-name] string

Synopsis

Web service profile name

Context

configure application-assurance group number url-filter string web-service profile string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block

Synopsis

Enter the block context

Context

configure application-assurance group number url-filter string web-service profile string block

Tree

block

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

category [category-name] string

Synopsis

Add a list entry for category

Context

configure application-assurance group number url-filter string web-service profile string block category string

Tree

category

Description

Commands in this context configure the category that is blocked in the category profile.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[category-name] string

Synopsis

Web service profile category name to be blocked

Context

configure application-assurance group number url-filter string web-service profile string block category string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number url-filter string web-service profile string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

vlan-id number

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Web-service VLAN ID

Context

configure application-assurance group number url-filter string web-service vlan-id number

Tree

vlan-id

Description

This command configures the VLAN ID on which the AA ISA emits the traffic mapping to a preconfigured AA interface.

Range

1 to 4094

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

url-list [url-list-name] string

Synopsis

Enter the url-list list instance

Context

configure application-assurance group number url-list string

Tree

url-list

Description

Commands in this context configure a URL list object. The URL list points to a file containing a list of URLs located on the system Compact Flash and is then referenced in a URL filter object to filter and redirect subscribers when a URL from this file is accessed.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[url-list-name] string

Synopsis

URL list name

Context

configure application-assurance group number url-list string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the URL list

Context

configure application-assurance group number url-list string admin-state keyword

Tree

admin-state

Default

disable

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance group number url-list string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

file string

Synopsis

File name of the URL list on compact flash

Context

configure application-assurance group number url-list string file string

Tree

file

String Length

1 to 180

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

host-expressions boolean

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Allow URL list to contain hostnames with wildcards

Context

configure application-assurance group number url-list string host-expressions boolean

Tree

host-expressions

Description

When configured to true, this command adds hostnames with wildcards to the URL list.

When configured to false, the URL list containing hostnames with wildcards is removed from the configuration.

Default

false

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

key string

Synopsis

URL list decryption key

Context

configure application-assurance group number url-list string key string

Tree

key

Description

This command configures the secret key for decrypting the URL list.

String Length

1 to 115

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

size keyword

Warning:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

Synopsis

Size limit of the URL list

Context

configure application-assurance group number url-list string size keyword

Tree

size

Default

standard

Options

standard, extended

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-enrich

Synopsis

Enter the http-enrich context

Context

configure application-assurance http-enrich

Tree

http-enrich

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string

Synopsis

Enter the field list instance

Context

configure application-assurance http-enrich field string

Tree

field

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string

Synopsis

HTTP enrich field name (void, do not use)

Context

configure application-assurance http-enrich field string

Description

This command should not be used by the operators. Configuring it has no effect. Operators should use the commands in the application-assurance group context.

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

comment string

Synopsis

User information comment

Context

configure application-assurance http-enrich field string comment string

Tree

comment

String Length

1 to 32

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-error-redirect

Synopsis

Enter the http-error-redirect context

Context

configure application-assurance http-error-redirect

Tree

http-error-redirect

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

error-code [error-code-number] number

Synopsis

Enter the error-code list instance

Context

configure application-assurance http-error-redirect error-code number

Tree

error-code

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[error-code-number] number

Synopsis

Error code for HTTP error redirection

Context

configure application-assurance http-error-redirect error-code number

Max. Range

0 to 4294967295

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

comment string

Synopsis

User information comment

Context

configure application-assurance http-error-redirect error-code number comment string

Tree

comment

String Length

1 to 32

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template [template-id] number

Synopsis

Enter the template list instance

Context

configure application-assurance http-error-redirect template number

Tree

template

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[template-id] number

Synopsis

HTTP error redirect template ID

Context

configure application-assurance http-error-redirect template number

Max. Range

0 to 4294967295

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

comment string

Synopsis

User information comment

Context

configure application-assurance http-error-redirect template number comment string

Tree

comment

String Length

1 to 32

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-notification

Synopsis

Enter the http-notification context

Context

configure application-assurance http-notification

Tree

http-notification

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template [template-id] number

Synopsis

Enter the template list instance

Context

configure application-assurance http-notification template number

Tree

template

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[template-id] number

Synopsis

HTTP notification template ID

Context

configure application-assurance http-notification template number

Max. Range

0 to 4294967295

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

comment string

Synopsis

User information comment

Context

configure application-assurance http-notification template number comment string

Tree

comment

String Length

1 to 32

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-redirect

Synopsis

Enter the http-redirect context

Context

configure application-assurance http-redirect

Tree

http-redirect

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template [template-id] number

Synopsis

Enter the template list instance

Context

configure application-assurance http-redirect template number

Tree

template

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[template-id] number

Synopsis

HTTP redirect template ID

Context

configure application-assurance http-redirect template number

Description

This command configures the HTTP policy redirect template ID. 

The available options are:

  1. JavaScript based redirect embedded in HTTP 200 OK response with a predefined number of arguments automatically appended to the redirect URL 
  2. HTTP 302 redirect with a predefined number of arguments automatically appended to the redirect URL. 
  3. HTTP 302 redirect with no parameters appended to the URL (empty).
  4. Empty redirect format using JavaScript. 
  5. Redirect supporting macro substitution using HTTP 302. 
  6. Redirect supporting macro substitution using JavaScript.
Max. Range

0 to 4294967295

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

comment string

Synopsis

User information comment

Context

configure application-assurance http-redirect template number comment string

Tree

comment

String Length

1 to 32

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

protocol [protocol-name] string

Synopsis

Enter the protocol list instance

Context

configure application-assurance protocol string

Tree

protocol

Description

Commands in this context configure the administrative state of system-wide protocols.Some protocols are always enabled and cannot be disabled. These are "base protocols" that were present in R1 of the release.Some protocols are disabled by default and can be enabled. There are protocols that were introduced post R1, which are all enabled by default but may be disabled if not desired.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[protocol-name] string

Synopsis

AA protocol name

Context

configure application-assurance protocol string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword

Synopsis

Administrative state of the protocol

Context

configure application-assurance protocol string admin-state keyword

Tree

admin-state

Options

enable, disable

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

radius-accounting-policy [rad-acct-plcy-name] string

Synopsis

Enter the radius-accounting-policy list instance

Context

configure application-assurance radius-accounting-policy string

Tree

radius-accounting-policy

Description

Commands in this context configure an existing subscriber RADIUS-based accounting policy to use for AA. RADIUS accounting policies are configured in the configure application-assurance radius-accounting-policy context.

Max. Elements

8

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[rad-acct-plcy-name] string

Synopsis

AA RADIUS accounting policy name

Context

configure application-assurance radius-accounting-policy string

String Length

1 to 32

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string

Synopsis

Text description

Context

configure application-assurance radius-accounting-policy string description string

Tree

description

String Length

1 to 80

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

interim-update-interval number

Synopsis

AA RADIUS accounting policy interim update interval

Context

configure application-assurance radius-accounting-policy string interim-update-interval number

Tree

interim-update-interval

Range

5 to 1080

Units

minutes

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

radius-accounting-server

Synopsis

Enter the radius-accounting-server context

Context

configure application-assurance radius-accounting-policy string radius-accounting-server

Tree

radius-accounting-server

Description

Commands in this context configure an existing subscriber RADIUS-based accounting policy to use for AA. RADIUS accounting policies are configured in the configure application-assurance radius-accounting-policy context.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

access-algorithm keyword

Synopsis

Access algorithm for the list of RADIUS servers

Context

configure application-assurance radius-accounting-policy string radius-accounting-server access-algorithm keyword

Tree

access-algorithm

Default

direct

Options

direct, round-robin

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

retry number

Synopsis

Number of retries for contacting the RADIUS server

Context

configure application-assurance radius-accounting-policy string radius-accounting-server retry number

Tree

retry

Range

1 to 10

Default

3

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

router-instance string

Synopsis

Router or VPRN service name

Context

configure application-assurance radius-accounting-policy string radius-accounting-server router-instance string

Tree

router-instance

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server [server-index] number

Synopsis

Enter the server list instance

Context

configure application-assurance radius-accounting-policy string radius-accounting-server server number

Tree

server

Description

Commands in this context configure the RADIUS server and the RADIUS server IP address, index, and key values.

RADIUS servers are accessed in order from lowest to highest index for authentication requests until a response from a server is received. A higher indexed server is only queried if no response is received from a lower indexed server (which implies that the server is not available). If a response from a server is received, no other RADIUS servers are queried.

Max. Elements

5

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[server-index] number

Synopsis

RADIUS accounting server index

Context

configure application-assurance radius-accounting-policy string radius-accounting-server server number

Description

This command configures the index for the RADIUS server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from lowest to highest index.

Range

1 to 5

Notes

This element is part of a list key.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

address string

Synopsis

RADIUS server IP address

Context

configure application-assurance radius-accounting-policy string radius-accounting-server server number address string

Tree

address

Description

This command configures the IP address of the RADIUS server. Two RADIUS servers cannot have the same IP address. An error message is generated if the server address is a duplicate.

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port number

Synopsis

RADIUS server UDP port used for authentication

Context

configure application-assurance radius-accounting-policy string radius-accounting-server server number port number

Tree

port

Range

1 to 65535

Default

1813

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

secret string

Synopsis

RADIUS server secret key

Context

configure application-assurance radius-accounting-policy string radius-accounting-server server number secret string

Tree

secret

Description

This command configures the secret key to access the RADIUS server. This secret key must match the password on the RADIUS server.

String Length

1 to 54

Notes

This element is mandatory.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

source-address string

Synopsis

Source IP address of RADIUS packets

Context

configure application-assurance radius-accounting-policy string radius-accounting-server source-address string

Tree

source-address

Description

This command configures the source IP address of the RADIUS packet. 

The system IP address must be configured for the RADIUS client to work. The system IP address must only be configured if the source address is not specified. When this command reverts to its default, the source address is determined at the moment the request is sent. 

This address is also used in the nas-ip-address command in the configure aaa radius isa-policy accounting include-attributes and configure aaa radius isa-policy authentication include-attributes contexts as it is set to the system IP address if no source address was given. 

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

timeout number

Synopsis

RADIUS accounting server response timeout

Context

configure application-assurance radius-accounting-policy string radius-accounting-server timeout number

Tree

timeout

Range

1 to 90

Default

5

Units

seconds

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

significant-change number

Synopsis

Change delta for RADIUS accounting record updates

Context

configure application-assurance radius-accounting-policy string significant-change number

Tree

significant-change

Description

This command configures the number of changes required to generate the record.

Range

1

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

usage-alert-thresholds

Synopsis

Enter the usage-alert-thresholds context

Context

configure application-assurance usage-alert-thresholds

Tree

usage-alert-thresholds

Description

Commands in this context configure the AA performance monitoring alerts.

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

bit-rate-high-wmark (number | keyword)

Synopsis

High watermark for bit rate alarms

Context

configure application-assurance usage-alert-thresholds bit-rate-high-wmark (number | keyword)

Tree

bit-rate-high-wmark

Description

This command configures the high watermark for bit rate alarms. The value must be larger than or equal to the low watermark value.

Range

1 to 100000

Default

max

Units

megabps

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

bit-rate-low-wmark number

Synopsis

Low watermark for bit rate alarms

Context

configure application-assurance usage-alert-thresholds bit-rate-low-wmark number

Tree

bit-rate-low-wmark

Description

This command configures the utilization of the flow records on the ISA-AA group when the full alarm is cleared by the agent.

Range

0 to 99999

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

datapath-cpu-high-wmark (number | keyword)

Synopsis

High watermark for datapath CPU alarms

Context

configure application-assurance usage-alert-thresholds datapath-cpu-high-wmark (number | keyword)

Tree

datapath-cpu-high-wmark

Description

This command configures the system-wide high watermark threshold as a percentage of the per-ISA datapath core CPU utilization, where an alarm is raised by the agent. CPU usage is the average usage across all datapath cores.

Range

0 to 100

Default

95

Units

percent

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

datapath-cpu-low-wmark number

Synopsis

Low watermark for datapath CPU alarms

Context

configure application-assurance usage-alert-thresholds datapath-cpu-low-wmark number

Tree

datapath-cpu-low-wmark

Description

This command configures the system-wide low watermark threshold as a percentage of the per-ISA datapath core CPU utilization, where an alarm is raised by the agent. CPU usage is the average usage across all datapath cores.

Range

0 to 100

Default

90

Units

percent

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-setup-rate-high-wmark (number | keyword)

Synopsis

High watermark for flow setup rate

Context

configure application-assurance usage-alert-thresholds flow-setup-rate-high-wmark (number | keyword)

Tree

flow-setup-rate-high-wmark

Description

This command configures the system-wide high watermark threshold for per-ISA throughput in packets/second when an alarm is raised by the agent. The value must be larger than or equal to the packet-rate-low-wmark value.

Range

1 to 2000000

Default

max

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-setup-rate-low-wmark number

Synopsis

Low watermark for flow setup rate

Context

configure application-assurance usage-alert-thresholds flow-setup-rate-low-wmark number

Tree

flow-setup-rate-low-wmark

Description

This command configures the flow setup rate on the ISA-AA when a flow setup alarm is raised by the agent.

Range

0 to 1999999

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-table-high-wmark number

Synopsis

Flow table high watermark

Context

configure application-assurance usage-alert-thresholds flow-table-high-wmark number

Tree

flow-table-high-wmark

Description

This command configures the system-wide high watermark threshold as a percentage of the flow table size for the per-ISA utilization of the flow records when a full alarm is raised by the agent.

Range

0 to 100

Default

95

Units

percent

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-table-low-wmark number

Synopsis

Flow table low watermark

Context

configure application-assurance usage-alert-thresholds flow-table-low-wmark number

Tree

flow-table-low-wmark

Description

This command configures the system-wide low watermark threshold as a percentage of the flow table size for per-ISA. 

Range

0 to 100

Default

90

Units

percent

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

packet-rate-high-wmark (number | keyword)

Synopsis

Packet rate high watermark

Context

configure application-assurance usage-alert-thresholds packet-rate-high-wmark (number | keyword)

Tree

packet-rate-high-wmark

Description

This command configures the packet rate on the ISA-AA when a packet rate alarm is raised by the agent.

Range

1 to 148809524

Default

max

Options

max

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

packet-rate-low-wmark number

Synopsis

Packet rate low watermark

Context

configure application-assurance usage-alert-thresholds packet-rate-low-wmark number

Tree

packet-rate-low-wmark

Description

This command configures the packet rate on the ISA-AA when a packet rate alarm is cleared by the agent.

Range

0 to 148809523

Default

0

Introduced

21.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR