This command enables and disables the ability of the router to ignore D-PATH domain segment length during best-path selection. At the base router level (or vprn>bgp level for PE-CE routers), this command allows BGP to ignore the D-PATH domain segment length for best-path selection purposes. The D-PATH length is ignored when comparing two VPN routes or two IFL routes within the same RD. However, these VPN/IFL routes are processed in Main-BGP instance.
At the VPRN router level, this command allows the VPRN RTM to ignore the D-PATH domain segment length for best path selection purposes (for routes in VPRN). The user can control whether the D-PATH length is considered when two VPN routes with different RDs are compared.
Best-path selection for EVPN-IFF routes against other owners (for example, EVPN-IFL or IPVPN) still relies on RTM preference. When EVPN-IFF RTM preference matches the RTM preference of another BGP owner, the existing RTM selection applies and D-PATH is not considered, irrespective of the d-path-length-ignore configuration.
The no form of this command disables the ability to ignore the D-PATH domain segment length.
no d-path-length-ignore
All
The no form of this command disables the delayed acknowledgment timeout.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command disables duplicate address detection (DAD) on a per-interface basis. This prevents the router from performing a DAD check on the interface. All IPv6 addresses of an interface with DAD disabled, immediately enter a preferred state, without checking for uniqueness on the interface. This is useful for interfaces which enter a looped state during troubleshooting and operationally disable themselves when the loop is detected, requiring manual intervention to clear the DAD violation.
The no form of this command turns off dad-disable on the interface.
no dad-disable
All
This command allows the router to populate the neighbor discovery table through snooping subscribers’ duplicate address detection messages.
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command controls how long a BGP peer session remains in the idle-state after some type of error causes the session to reset. In the idle state, BGP does not initiate or respond to attempts to establish a new session. Repeated errors that occur a short while after each session reset cause longer and longer hold times in the idle state. This command supports the DampPeerOscillations FSM behavior described in section 8.1 of RFC 4271, A Border Gateway Protocol 4 (BGP-4).
The default behavior, which applies when no damp-peer-oscillations is configured, is to immediately transition out of the idle-state after every reset.
no damp-peer-oscillations
All
This command controls how long a BGP peer session remains in the idle-state after some type of error causes the session to reset. In the idle state, BGP does not initiate or respond to attempts to establish a new session. Repeated errors that occur a short while after each session reset cause longer and longer hold times in the idle state. This command supports the DampPeerOscillations FSM behavior described in section 8.1 of RFC 4271, A Border Gateway Protocol 4 (BGP-4).
The default behavior, which applies when no damp-peer-oscillations is configured, is to immediately transition out of the idle-state after every reset.
no damp-peer-oscillations
All
Commands in this context configure exponential port dampening for an Ethernet port.
Exponential Port Dampening (EPD) reduces the number of physical link transitions reported to upper layer protocols, potentially reducing upper layer protocol churn caused by a faulty link. Penalties are added against a port whenever the port’s physical link state transitions from a link up state to a link down state. When the penalties exceed a configurable threshold, port-up and port-down transitions are no longer advertised to upper layers and the port’s operational state will remain down until the penalty amount drops below a configurable reuse threshold. Each transition of link up state to link down state increments the accumulated penalty value by 1000. The accumulated penalties for a port are reduced at an exponential decay rate according to a configurable half-life parameter.
All
This command enables BGP route damping for learned routes which are defined within the route policy. Use damping to reduce the number of update messages sent between BGP peers and reduce the load on peers without affecting the route convergence time for stable routes. Damping parameters are set via route the policy definition.
The no form of this command used at the global level disables route damping.
When damping is enabled and the route policy does not specify a damping profile, the default damping profile is used. This profile is always present and consists of the following parameters:
Half-life: | 15 minutes |
Max-suppress: | 60 minutes |
Suppress-threshold: | 3000 |
Reuse-threshold | 750 |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command enables BGP route damping for learned routes which are defined within the route policy. Use damping to reduce the number of update messages sent between BGP peers and reduce the load on peers without affecting the route convergence time for stable routes. Damping parameters are set via route policy definition.
The no form of this command used at the global level disables route damping.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
When damping is enabled and the route policy does not specify a damping profile, the default damping profile is used. This profile is always present and consists of the following parameters:
Half-life: 15 minutes
Max-suppress: 60 minutes
Suppress-threshold: 3000
Reuse-threshold: 750
no damping — Learned route damping is disabled.
All
This command enables BGP route damping for learned routes which are defined within the route policy. Use damping to reduce the number of update messages sent between BGP peers and reduce the load on peers without affecting the route convergence time for stable routes. Damping parameters are set via route policy definition.
The no form of this command used at the global level reverts route damping.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
When damping is enabled and the route policy does not specify a damping profile, the default damping profile is used. This profile is always present and consists of the following parameters:
no damping
All
This command creates a context to configure a route damping profile to use in route policy entries.
The no form of this command deletes the named route damping profile.
no damping
All
This command configures a damping profile used for routes matching the route policy statement entry.
If no damping criteria is specified, the default damping profile is used.
The no form of this command removes the damping profile associated with the route policy entry.
no damping
The name specified must already be defined.
All
This command enables debugging for PIM data exception.
The no form of this command disables PIM data exception debugging.
All
This command creates a data bearer assigned to a TE Link. Only one data bearer may be configured within a given TE Link.
no data-bearer
7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command configures the I-PMSI data delay timer.
This delay timer is intended to allow time for the RSVP control plane to signal and bring up the S2L sub-LSP to each destination PE participating in the VPLS/B-VPLS service. The delay timer is started as soon as the P2MP LSP instance becomes operationally up after the user performed a ‘no shutdown’ under the inclusive node, i.e., as soon as the first S2L sub-LSP is up. In general, it is started when the P2MP LSP instance transitions from the operationally down state to the up state.
For a mLDP P2MP LSP, the delay timer is started as soon as the P2MP FEC corresponding to the I-PMSI is resolved and installed at the root node. The user must factor in the value configured in the data-delay-interval at the root node any delay configured in IGP-LDP sync timer (config>router>if>ldp-sync-timer) on interfaces over the network. This is because the mLDP P2MP LSP may move to a different interface at the expiry of this timer since the routing upstream of the LDP Label Mapping message may change when this timer expires and the interface metric is restored.
At the expiry of this timer, the VPLS/B-VPLS will begin forwarding of BUM packets over the P2MP LSP instance even if not all the S2L paths are up.
The no version of this command re-instates the default value for this delay timer.
All
This command specifies the interval, in seconds, before a PE router connected to the source switches traffic from the inclusive provider tunnel to the selective provider tunnel.
This command is not applicable to multi-stream S-PMSI.
The no form of this command reverts the value to the default.
data-delay-interval 3
All
This command specifies the interval, in seconds, before a PBR connected to the source switches traffic from the inclusive provider tunnel to the selective provider tunnel.
This command is not applicable to multi-stream S-PMSIs.
The no form of this command reverts the value to the default.
data-delay-interval 3
All
This command configures a rendezvous point (RP) using Multicast Source Discovery Protocol (MSDP) to encapsulate multicast data received in MSDP register messages inside forwarded MSDP source-active messages.
data-encapsulation
All
This command configures a rendezvous point (RP) using Multicast Source Discovery Protocol (MSDP) to encapsulate multicast data received in MSDP register messages inside forwarded MSDP source-active messages.
data-encapsulation
All
This command specifies the data rate threshold that triggers the switch from the inclusive provider tunnel to the selective provider tunnel for (C-S, C-G) within the group range. Optionally, PE thresholds for creating/deleting ng-MVPN S-PMSI may also be specified. Omitting the PE thresholds, preserves the currently set value (or defaults if never set). Multiple statements (one per a unique group) are allowed in the configuration.
This command is not applicable to multi-stream S-PMSI.
The no form of this command removes the values from the configuration.
no data-threshold
c-grp-ip-addr | : multicast group address a.b.c.d | |
mask | [4 to 32] | |
netmask | : a.b.c.d (network bits all 1 and host bits all 0) | |
s-pmsi-threshold | : [0 to 4294967294] (threshold in kb/s) | |
c-grp-ipv6-addr | : multicast ipv6-address x:x:x:x:x:x:x:x (eight 16-bit pieces) | |
x:x:x:x:x:x:d.d.d.d | ||
x [0 to FFFF]H | ||
d [0 to 255]D | ||
prefix-length [1 to 128] | ||
pe-threshold-add: | [1 to 65535], if never specified, 65535 is used (add threshold always met) | |
pe-threshold-delete: | [2 to 65535], if never specified, 65535 is used (delete threshold never met) |
All
This command specifies the data rate threshold that triggers the switch from the inclusive provider tunnel to the selective provider tunnel for (C-S, C-G) within the group range. Optionally, PBR thresholds for creating or deleting NG-MVPN S-PMSI may also be specified. Omitting the PBR thresholds preserves currently set values (or defaults if never set). Multiple statements (one per a unique group) are allowed in the configuration.
This command is not applicable to multi-stream S-PMSIs.
The no form of this command removes the values from the configuration.
no data-threshold
c-grp-ip-addr | multicast group address a.b.c.d | |
mask | 4 to 32 | |
netmask | a.b.c.d (network bits all 1 and host bits all 0) | |
s-pmsi-threshold | 1 to 4294967294 (threshold in kb/s) | |
c-grp-ipv6-addr | multicast ipv6-address x:x:x:x:x:x:x:x (eight 16-bit pieces) | |
x:x:x:x:x:x:d.d.d.d | ||
x [0 to FFFF]H | ||
d [0 to 255]D | ||
prefix-length [1 to 128] | ||
pe-threshold-add | 1 to 65535 Default: 65535 (delete threshold always met) | |
pe-threshold-delete | 2 to 65535 Default: 65535:(delete threshold always met) |
All
This command allows the operator to add an optional Data TLV to PDU and increase the frame on the wire by the specified amount. Note that this command only configures the size of the padding added to the PDU, and does not configure the total size of the frame on the wire.
The no form of this command removes the optional TLV.
All
Commands in this context configure data-triggered subscriber management entities.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command enables learning of MAC addresses from data packets.
The no form of this command disables learning of MAC addresses from data packets.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command enables matching on UEs currently in a data-triggered state. This query only filters UEs that are currently authenticating due to a data trigger, not UEs that were originally authenticated due to data trigger, such as those in an ESM, DSM, or portal state.
The no form of this command disables matching on UEs in a data-triggered state, unless all state matching is disabled.
no data-triggered
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command enables data-triggered subscriber creation for WIFI subscribers. Data- triggered UE creation is currently only supported for UDP and TCP packets.
The no form of this command disables the data-triggered subscriber creation for WIFI subscribers.
7750 SR, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure dynamic services data trigger capture SAP debugging. The no form of this command removes all dynamic services data trigger capture SAP debug configurations.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command enables or disables debugging for the PIM database.
All
This command enables the population of the extended TE Database (TE-DB) with the link-state information from a given IGP instance.
The extended TE-DB is used as a central point for importing all link-state information, link, node, and prefix, from IGP instances on the router or the vSROS controller of the NSP and to exporting it to BGP-LS on the router and to Java-VM proxy on the vSROS controller. This information includes the IGP, TE, and the SR information, prefix SID sub-TLV, adjacency SID sub-TLV, and router SR capability TLV.
The no form of this command disables database exportation.
The BGP-LS identifier is optional and is only sent in a BGP-LS NLRI if configured in the IGP instance of an IGP domain.
Note that if this IGP instance participates in traffic engineering with RSVP-TE or SR-TE, the traffic-engineering option is not strictly required because enabling the extended TE-DB populates this information automatically. It is, however, recommended to enable it to make the configuration consistent with other routers in the network that do not require the enabling of the extended TE-DB.
All
This command enables the population of the extended TE Database (TE-DB) with the link-state information from a given IGP instance.
The extended TE-DB is used as a central point for importing all link-state information, link, node, and prefix, from IGP instances on the router or the vSROS controller of the NSP and to exporting it to BGP-LS on the router and to Java-VM proxy on the vSROS controller. This information includes the IGP, TE, and the SR information, prefix SID sub-TLV, adjacency SID sub-TLV, and router SR capability TLV.
The no form of this command disables database exportation.
no database-export
The BGP-LS identifier is optional and is only sent in a BGP-LS NLRI if configured in the IGP instance of an IGP domain.
Note that if this IGP instance participates in traffic engineering with RSVP-TE or SR-TE, the traffic-engineering option is not strictly required because enabling the extended TE-DB populates this information automatically. It is, however, recommended to enable it to make the configuration consistent with other routers in the network that do not require the enabling of the extended TE-DB.
All
This command allows the user to prune the IGP link-state information of a specific IS-IS level from being exported into the extended TE-DB.
The no form of this command returns to the default behavior inherited from the database-export command at the IS-IS instance level.
All
This command allows the user to prune the IGP link-state information of a specific OSPF level or OSPF area from being exported into the extended TE-DB. The no form of this command returns to the default behavior inherited from the database-export command at the IS-IS or OSPF instance level.
no database-export-exclude
All
This command configures the system-wide high watermark threshold as a percentage of the per-ISA datapath core CPU utilization, where an alarm will be raised by the agent. CPU usage is the average usage across all datapath cores.
datapath-cpu-high-wmark 95
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the system-wide low watermark threshold as a percentage of the per-ISA datapath core CPU utilization, where an alarm will be raised by the agent. CPU usage is the average usage across all datapath cores.
datapath-cpu-low-wmark 90
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies which days of the month that the schedule will occur. Multiple days of the month can be specified. When multiple days are configured, each of them will cause the schedule to trigger. If a day-of-month is configured without configuring month, weekday, hour, and minute, the event will not execute.
Using the weekday command as well as the day-of-month command will cause the script to run twice. For example, consider that today is Monday January 1. If Tuesday January 5 is configured, the script will run on Tuesday (tomorrow) as well as January 5 (Friday).
The no form of this command removes the specified day-of-month from the list.
no day-of-month
Integer values must map to a valid day for the month in question. For example, February 30 is not a valid date.
All
This command enables debugging for PIM database.
The no form of this command disables PIM database debugging.
All
This command enables dark bandwidth accounting and enters the context to configure the associated parameters. When dark bandwidth accounting is enabled, the system polls the dark bandwidth counters, performs sample and average rate computations, and generates IGP-TE updates if required. To enable dark bandwidth accounting, auxiliary MPLS statistics must first be enabled using the command config>router>mpls>aux-stats.
The no form of this command disables dark bandwidth accounting, resets all global parameters to their default values, and results in an immediate IGP-TE update for which dark bandwidth is null.
no dbw-accounting
This command sets the minimum change (in percent of the latest advertised value) above which an decrease in MRLB (IS-IS TE sub-TLV 10) or MRB (OSPF TE sub-TLV 7) triggers an IGP-TE update. This configuration only applies to a change in MRLB or MRB caused by dark bandwidth. Other events affecting MRLB/MRB (such as the change of the subscription factor or the loss of link in a LAG over which the RSVP interface is defined) trigger an immediate TE update, regardless of the importance of the impact.
Optionally, the threshold can also be expressed as an absolute value. In this case, the evaluation of the change is made using the percent change and the absolute change. An IGP-TE update is sent if both thresholds are crossed. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.
By default, the multiplier inherits the global value, unless it is specifically set using this command. The no form of this command sets this parameter to inherit the value of the corresponding global parameter.
This command sets the dark bandwidth multiplier to the specified value. Choosing 0% will lead to no IGP-TE updates based on dark bandwidth evolution being sent. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.
dbw-multiplier 100
This command sets the dark bandwidth multiplier to the specified value. Choosing 0% will lead to no IGP-TE updates based on dark bandwidth evolution being sent. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.
By default, the multiplier inherits the global value, unless it is specifically set using this command. The no form of this command sets this parameter to inherit the value of the corresponding global parameter.
This command sets the minimum change (in percent of the latest advertised value) above which an increase in MRLB (IS-IS TE sub-TLV 10) or MRB (OSPF TE sub-TLV 7) triggers an IGP-TE update. This configuration only applies to a change in MRLB or MRB caused by dark bandwidth. Other events affecting MRLB/MRB (such as the change of the subscription factor or the loss of link in a LAG over which the RSVP interface is defined) trigger an immediate TE update, regardless of the importance of the impact.
Optionally, the threshold can also be expressed as an absolute value. In this case, the evaluation of the change uses the percent change and the absolute change. An IGP-TE update is sent if both thresholds are crossed. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.
By default, the multiplier inherits the global value, unless it is specifically set using this command. The no form of this command sets this parameter to inherit the value of the corresponding global parameter.
This command enables Digital Diagnostic Monitoring (DDM) events for the port.
The no form of this command disables DDM events.
All
This command, when enabled on a parent forwarding class, applies a color profile mode to the packets stored in the queue associated with this forwarding class. The queue associated with the parent forwarding class must be of type profile-mode.
When this QoS policy is applied to the ingress of a Frame Relay VLL SAP, the system will treat the received FR frames with DE bit set as out-of-profile, regardless of their previous marking as the result of the default classification or on a match with an IP filter. It also adjusts the CIR of the ingress SAP queue to consider out-of-profile frames that were sent while the SAP queue was in the “< CIR” state of the bucket. This makes sure that the CIR of the SAP is achieved.
All received DE = 0 frames that are classified into this parent forwarding class or any of its subclasses have their profile unchanged by enabling this option. That is, the DE = 0 frame profile could be undetermined (default), in-profile, or out-of-profile as per previous classification. The DE = 0 frames that have a profile of undetermined will be evaluated by the system CIR marking algorithm and will be marked appropriately.
The priority option, if used, has no effect. All FR VLL DE = 1 frames have their priority automatically set to low while DE = 0 frames have their priority set to high. Furthermore, DE = 1 frames have the drop-preference bit set in the internal header. The internal settings of the priority bit and of the drop-preference bit of the frame is independent of the use of the profile mode.
All other capabilities of the Fpipe service are maintained. This includes remarking of the DE bit on egress SAP, and FR PW control word on egress network port for the packets that were classified into “out-of-profile” at ingress SAP.
This de-1-out-profile keyword has an effect when applied to the ingress of a SAP that is part of an Fpipe service. It can also be used on the ingress of an Epipe or VPLS SAP.
The no form of this command disables the color profile mode of operation on all SAPs to which this ingress QoS policy is applied.
no de-1-out-profile
All
This command is used to explicitly define the marking of the DE bit for fc fc-name according to the inplus-profile/in-profile or out-of-profile/exceed-profile status of the packet (fc-name may be used to identify the dot1p-value).
If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile or in-profile packets, 1 for out-of-profile or exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.
In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the DE bit for both the BVID and ITAG.
If this command is not used, the DE bit should be preserved if an ingress TAG exist; otherwise, set to zero.
If the DE value is included in the command line, this value is to be used for all the packets of this forwarding class regardless of their profile status.
The commands de-mark-inner and de-mark-outer take precedence over the de-mark command if both are specified in the same policy.
All
This command is used to explicitly define the marking of the DE bit for fc fc-name according to the inplus-profile or in-profile and out-of-profile or exceed-profile status of the packet (fc-name may be used to identify the dot1p value).
If no DE value is present, the default values are used for the marking of the DE bit; that is, 0 for inplus-profile and in-profile packets, 1 for out-of-profile and exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.
In the PBB case, use the following rules for a network port (B-SDP):
All
This command is used to explicitly define the marking of the DE bit in the inner VLAN tag for fc fc-name on a QinQ SAP, according to the in- and out-of-profile status of the packet.
If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile or in-profile packets, 1 for out-of-profile or exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.
If the DE value is included in the command line, this value is used for all the inner tags of packets of this forwarding class, regardless of their profile status.
This command takes precedence over the de-mark command if both are specified in the same policy and over the default action.
The configuration of qinq-mark-top-only under the SAP egress takes precedence over the use of the de-mark-inner in the policy. That is, the inner VLAN tag is not remarked when qinq-mark-top-only is configured (the marking used for the inner VLAN tag is based on the current default, which is governed by the marking of the packet received at the ingress to the system).
If no de-mark commands are used, the DE bit is preserved if an ingress inner tag exists; otherwise, set to 0.
Remarking the inner DE bit is not supported based on the profile result of egress policing.
All
This command is used to explicitly define the marking of the DE bit in the outer or single VLAN tag on a qinq or dot1q SAP, respectively, according to the in, out, or exceed-profile status of the packet.
If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile/in-profile packets, 1 for out-of-profile/exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.
If the DE value is included in the command line, this value is used for all the outer or single tags of packets of this forwarding class, regardless of their profile status.
In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the DE bit for both the BVID and ITAG.
This command takes precedence over the de-mark command if both are specified in the same policy and over the default action.
If no de-mark commands are used, the DE bit is preserved if an ingress outer or single tag exists; otherwise, set to 0.
All
This command configures the time, in seconds, that OSPF waits before declaring a neighbor router down. If no Hello packets are received from a neighbor for the duration of the dead interval, the router is assumed to be down. The minimum interval must be two times the Hello interval.
The no form of this command reverts to the default value.
dead-interval 40
Sham-link — If the configured dead-interval applies to a sham-link, then the interval on both endpoints of the sham-link must have the same dead interval.
All
This command configures the time, in seconds, that OSPF waits before declaring a neighbor router down. If no hello packets are received from a neighbor for the duration of the dead interval, the router is assumed to be down. The minimum interval must be two times the hello interval.
The no form of this command reverts to the default value.
dead-interval 40
All
This command configures the PCEP session dead timer value, which is the amount of time a PCEP speaker (PCC or PCE) will wait after the receipt of the last PCEP message before declaring its peer down.
The keep-alive mechanism is asymmetric, meaning that each PCEP speaker can propose a different dead timer value to its peer to use to detect session timeout.
The no form of the command returns the dead timer to the default value.
dead-timer 120
All
This command enables the inband control path debouncing. The no form of this command disables inband control path debouncing.
The no form of this command reverts to the default.
debounce
All
This command configures when to trigger, for example after one or more event occurrences. The number of occurrences of an event can be bounded by a time window or left open.
The no form of this command removes the debounce configuration.
All
Commands in this context specify debugging options.
All
This command enables output to the debug log. Traced messages are decoded as text and sent to debug logging. This allows for real-time debugging but is not recommended on live systems because of the decode overhead.
This command disables logging to the compact flash. The debug-output and live-output commands are mutually exclusive.
The no form of this command disables output to the debug log.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command saves existing debug configuration (configuration done under the debug branch of CLI). Debug configurations are not saved by the admin save command and not preserved across a node reboot or CPM switchover. The debug-save command makes the debug configuration available for the operator to execute after a reboot by using the exec command or after a CPM switchover by using the switchover-exec command, if desired.
![]() | Note: IPv6-address applies only to 7750 SR and 7950 XRS. |
file url | local-url | remote-url: 255 chars max |
local-url | [cflash-id/][file-path] 200 chars max, including cflash-id file-path 199 chars max |
remote-url | [{ftp:// | tftp://}login:pswd@remote-locn/][file-path] |
255 chars max | |
directory length 99 chars max each | |
remote-locn | {hostname | ipv4-address | [ipv6-address]} |
ipv4-address | a.b.c.d |
ipv6-address | x:x:x:x:x:x:x:x[-interface] |
x:x:x:x:x:x:d.d.d.d[-interface] | |
x - [0 to FFFF]H | |
d - [0 to 255]D | |
interface - 32 chars max, for link local addresses 255 | |
cflash-id | cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B: |
All
In case the file is encrypted this command is used to configure the decryption key used to read the file.
The no form of this command removes the url-list object.
no decrypt-key
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies the default application profile to be used by a subscriber host.
The no form of this command removes the application profile name from the configuration.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the default application profile.
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures a default application profile.
no def-app-profile
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the default SPI sharing method for IPoE or PPPoE sessions from the same subscriber, having the same SLA profile associated, that are active on the same SAP. SPI sharing can be per-SAP or a dedicated SPI per-session.
def-instance-sharing per-sap
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies a default destination string for all subscribers associated with the SAP. The command also accepts the use-top-q flag that automatically derives the string based on the top most delineating Dot1Q tag from the SAP’s encapsulation.
The no form of this command removes the default subscriber identification string from the configuration.
Alternatively, the destination string can be defined in LUDB.
The control plane is aware of the VPI during the session initiation phase. This VPI is used to make the association between the host and the Vport with the same name (VPI number).
![]() | Note: In this case the Vport name under the configure>port>sonet-sdh>path>access>egress context must be the VPI number. |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies a default destination string for all subscribers associated with the SAP. The command also accepts the use-top-q flag that automatically derives the string based on the top most delineating Dot1Q tag from the SAP’s encapsulation.
The no form of this command removes the default subscriber identification string from the configuration.
no def-sub-id
no def-inter-dest-id
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command defines how the BGP will treat a received EVPN route without RC5512 BGP encapsulation extended community. If no encapsulation is received, BGP will validate the route as MPLS or VXLAN depending on how this command is configured.
no def-recv-evpn-encap
All
This command specifies a default SLA profile for this SAP. The SLA profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sla-profile context.
If a subscriber is not explicitly associated with an SLA profile during the authentication phase, a default profile will be assigned to it.
The no form of this command removes the default SLA profile from the SAP configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies the explicit default sub-id for dynamic subscriber hosts (including ARP hosts) in case that the sub-id string is not supplied through RADIUS or LUDB.
The sub-id is assigned to a new subscriber host in the following order of priority:
This command does not apply to static subscribers.
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures the default subscriber ID. The default is used if no other source (like RADIUS) provides a subscriber identification string.
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies a default subscriber profile for an MSAP.
A subscriber profile defines the aggregate QoS for all hosts within a subscriber context. This is done through the definition of the egress and ingress scheduler policies that govern the aggregate SLA for subscriber using the subscriber profile.
The no form of this command removes the default SLA profile from the SAP configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.
A subscriber profile defines the aggregate QoS for all hosts within a subscriber context. This is done through the definition of the egress and ingress scheduler policies that govern the aggregate SLA for subscriber using the subscriber profile. Subscriber profiles also allow for specific SLA profile definitions when the default definitions from the subscriber identification policy must be overridden.
The no form of this command removes the default SLA profile from the SAP configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.
A subscriber profile defines the aggregate QoS for all hosts within a subscriber context. This is done through the definition of the egress and ingress scheduler policies that govern the aggregate SLA for subscriber using the subscriber profile. Subscriber profiles also allow for specific SLA profile definitions when the default definitions from the subscriber identification policy must be overridden.
The no form of this command removes the default SLA profile from the SAP configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures the default accounting policy to be used with all SAPs that do not have an accounting policy.
If no access accounting policy is defined on a SAP, accounting records are produced in accordance with the default access policy. If no default access policy is created, then no accounting records will be collected other than the records for the accounting policies that are explicitly configured.
If no network accounting policy is defined on a network port, accounting records will be produced in accordance with the default network policy. If no network default policy is created, then no accounting records will be collected other than the records for the accounting policies explicitly configured.
Only one access accounting policy ID can be designated as the default access policy. Likewise, only one network accounting policy ID can be designated as the default network accounting policy.
The record name must be specified prior to assigning an accounting policy as default.
If a policy is configured as the default policy, then a no default command must be issued before a new default policy can be configured.
The no form of this command removes the default policy designation from the policy ID. The accounting policy will be removed from all SAPs or network ports that do not have this policy explicitly defined.
All
This command specifies the default radius-server-policy for RADIUS accounting. This policy is used when there is no specific match based on username.
The no form of this command removes the policy name from the configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies the default action for DHCP filters when no entries match.
The no form of this command reverts to the default.
All
This command specifies the default action for DHCP6 filters when no entries match.
The no form of this command reverts to the default.
All
This command specifies what should happen to packets that do not match any of the configured entries.
The no form of this command reverts to the default value.
default-action drop
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies the action to be applied to the MMRP attributes (Group B-MACs) whose ISIDs do not match the specified criteria in all of the entries of the mrp-policy.
When multiple default-action commands are entered, the last command will overwrite the previous command.
default-action allow
All
The default action specifies the action that is applied to events when no action is specified in the event filter entries or when an event does not match the specified criteria.
When multiple default-action commands are entered, the last command overwrites the previous command.
The no form of this command reverts the default action to the default value (forward).
default-action forward — The events which are not explicitly dropped by an event filter match are forwarded.
All
This command specifies the default action to take for packets that do not match any filter entries.
The no form of this command reverts the default action to the default value (forward).
default-action deny
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures a TCA for the counter capturing hits for the specified GTP filter default action. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures a TCA for the counter capturing hits due to the default action specified for the GTPv2 message type filter. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures a TCA for the counter capturing hits for the specified GTP IMSI-APN filter default action. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.
This command configures a TCA for the counter capturing hits for the specified SCTP filter default PPID. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures a TCA for the counter capturing hits for the specified session filter default action. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the default action for the IMSI-APN filter.
default-action permit
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the default action for all GTP message types.
default-action permit
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the default action for all SCTP PPIDs.
default-action permit
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the default action to take when the ICAP server is unreachable.
no default-action
This command specifies the default action to take for packets in this nat-classifier. The default-action will apply to packet that do not match any configured criteria within nat-classifier. The no form of this command equals action forward.
default-action forward
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies the action to be applied to multicast streams (channels) when the streams do not match any of the multicast addresses defined in the MCAC policy.
When multiple default-action commands are entered, the last command will overwrite the previous command.
default-action discard
All
This command defines or edits the default action to be taken for packets that have an undefined DSCP or MPLS EXP bit set. The default-action command specifies the forwarding class to which such packets are assigned.
Multiple default-action commands will overwrite each previous default-action command.
default-action fc be profile out
All
This command defines the default action to be applied to packets not matching any entry in this ACL filter policy or to packets for that match a PBF/PBR filter entry for which the PBF/PBR target is down and pbr-down-action-override per-entry is set to filter-default-action.
default-action drop
All
The default action specifies the action that is applied to events when no action is specified in the event filter entries or when an event does not match the specified criteria.
When multiple default-action commands are entered, the last command overwrites the previous command.
The no form of this command reverts the default action to the default value (forward).
default-action forward
All
This command creates the default action for management access in the absence of a specific management access filter match.
The default-action is applied to a packet that does not satisfy any match criteria in any of the management access filters. Whenever management access filters are configured, the default-action must be defined.
The deny-host-unreachable only applies to ip-filter and ipv6filter.
All
This command specifies the action to take on the traffic when there are no filter entry matches. If there are no filter entries defined, the packets received are either dropped or forwarded based on that default action.
default-action accept
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command specifies the default action to be applied when no match conditions are met.
![]() | Note: In classic CLI but not in MD-CLI the permit-all parameter does not change access to security commands. Specific entries must be created in a command authorization profile in order to give access to security commands. The system populated “administrative” profile contains rules to access security commands. |
For example, if a user is a member of two profiles and the default action of the first profile is permit-all, then the second profile is never evaluated because the permit-all is executed first. Set the first profile default action to none and if no match conditions are met in the first profile, then the second profile is evaluated. If the default action of the last profile is none and no explicit match is found, then the command is denied.
All
Commands in this context configure actions to apply to routes that do not match any entries of a route policy statement.
The no form of this command deletes the default-action context for the policy statement.
no default-action
All
This command configures a default action for the URL filter. The default action takes effect when the URL filter cannot be used. This may happen in the following scenarios.
The no form of this command removes the default-action for the URL filter.
no default-action
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies the default radius-server-policy for RADIUS authentication. This policy is used when there is no specific match based on username.
The no form of this command removes the policy name from the configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command indicates that the default BRG profile must be used for new BRGs. This profile can be overridden by RADIUS.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures the default category map.
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command associates a charging group to any applications or app-groups that are not explicitly assigned to a charging group, for an application assurance policy.
The no form of this command deletes the default charging group from the configuration.
no default-charging-group
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the default credit values for RADIUS credit control and Diameter Gy application credit control.
For RADIUS credit control, this command configures the default time or volume credit for this category. The default credit is used during initial setup when no quota is received from the RADIUS server.
For Diameter Gy credit control, this command specifies the interim credit assigned to this category (rating group) when Extended Failure Handling (EFH) is enabled. This command is ignored when EFH is disabled.
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures the IP address to substitute for the destination IP address of the packets
no default-dnat-ip-address
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures last resort IP DNS addresses that can be used for name resolution by IPoE hosts (IA_NA, IA_PD and SLAAC) and PPPoE hosts (IA_NA, IA_PD and SLAAC).
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures last resort IPv6 DNS addresses that can be used for name resolution by IPoEv6 hosts (IA_NA, IA_PD and SLAAC) and PPPoEv6 hosts (IA_NA, IA_PD and SLAAC).
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures the DNS domain name to be added in DNS retries when a DNS query is not replied or an empty DNS reply is received.
The no form of this command prevents DNS retries when the DNS query is not replied or an empty DNS reply is received.
All
Commands in this context configure MIP creation parameters per index (bridge-identifier bridge-id vlan vlan-id) if the MIP creation statement exists as part of the service connection. The mip creation statement must be present on the connection before any configuration can occur for a MIP under this context. The determining factor for MIP creation is based on the authoritative properties of the eth-cfm domain association configuration. The individual indexes in this table are used for MIP creation only when the association context is not authoritative; this includes the lack of association for a matching index.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command configures the default forwarding class for the policy. In the event that an ingress packet does not match a higher priority (more explicit) classification command, the default forwarding class or subclass will be associated with the packet. Unless overridden by an explicit forwarding class classification rule, all packets received on an ingress SAP using this ingress QoS policy will be classified to the default forwarding class. Optionally, the default ingress enqueuing priority for the traffic can be overridden as well.
The default forwarding class is best effort (be). The default-fc settings are displayed in the show configuration and save output regardless of inclusion of the detail keyword.
default-fc “be”
The subclass-name parameter is optional and used with the fc-name parameter to define a preexisting subclass. The fc-name and subclass-name parameters must be separated by a period (dot). If subclass-name does not exist in the context of fc -name, an error will occur. If subclass-name is removed using the no fc fc-name.subclass-name force command, the default-fc command will automatically drop the subclass-name and only use fc-name (the parent forwarding class for the subclass) as the forwarding class.
fc: | class[.subclass] | |
class: be, l2, af, l1, h2, ef, h1, nc | ||
subclass: 29 characters max |
All
This command configures the recorder filter default action to either record or no-record. This parameter applies to http-host values not matching any expressions defined in the filter context.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the group interface where the PPP sessions are established when the authentication server does not specify the group interface.
The no form of this command removes the interface name or service ID from the configuration.
This variant of the command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic). The default-group-interface ip-int-name service-name svc-name variant can be used in all configuration modes.
id: | 1 to 2147483647 |
svc-name: | up to 64 characters (svc-name is an alias for input only. The svc-name gets replaced with an id automatically by SR OS in the configuration). |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures a TCA for the counter capturing drops due to the GTP endpoint limits create requests exceeding the configured allowed limit (set by the default-tunnel-endpoint-limit command). A default-gtp-tunnel-endpoint-limit drop TCA can be created for traffic generated from the subscriber side of AA (from-sub). The create keyword is mandatory when creating a TCA.
This command configures the default-host. More than one default host can be configured per SAP.
The no form of this command removes the values from the configuration.
ipv4-prefix | a.b.c.d (host bits must be 0 |
prefix-length 0 to 32 |
ipv6-prefix | x:x:x:x:x:x:x:x (eight 16-bit pieces) |
x:x:x:x:x:x:d.d.d.d | |
x - [0 to FFFF]H | |
d - [0 to 255]D | |
prefix-length - [0 to 128] |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command enables a non-MI capable router to establish an adjacency and operate with an SR OS in a non-zero instance. If the router does not receive IID-TLVs, it will establish an adjacency in a single instance. Instead of establishing an adjacency in the standard instance 0, the router will establish an adjacency in the configured non-zero instance. The router will then operate in the configured non-zero instance so that it appears to be in the standard instance 0 to its neighbor. This feature is supported on point-to-point interfaces, broadcast interfaces are not supported.
The no form of this command disables the functionality so that the router can only establish adjacencies in the standard instance 0.
no default-instance
All
This command enables a non-MI capable router to establish an adjacency and operate with a router in a non-zero instance. If the router does not receive IID-TLVs, it will establish an adjacency in a single instance. Instead of establishing an adjacency in the standard instance 0, the router will establish an adjacency in the configured non-zero instance. The router will then operate in the configured non-zero instance so that it appears to be in the standard instance 0 to its neighbor. This feature is supported on point-to-point interfaces, broadcast interfaces are not supported.
This feature must be configured on the router connected to non-MI capable routers and on all other SR OS routers in the area, so that they receive non-MI LSPs in the correct instance and not in the base instance.
The no form of this command disables the functionality so that the router can only establish adjacencies in the standard instance 0.
no default-instance
All
This command configures the default metric to be used for the IS-IS interface in the IPv4 multicast topology (MT3).
The no form of this command deletes the specified default metric and reverts to using the system default of 10.
default-ipv4-multicast-metric 10
All
This command configures the default metric to be used for the IS-IS interface in the IPv4 multicast topology (MT3).
The no form of this command deletes the specified default metric and reverts to using the system default of 10.
default-ipv4-multicast-metric 10
All
This command configures the default metric to be used for the IS-IS interface in the IPv6 multicast topology (MT4).
The no form of this command deletes the specified default metric and reverts to using the system default of 10.
default-ipv6-multicast-metric 10
1 to 16777215
This command configures the default metric to be used for the IS-IS interface in the IPv6 multicast topology (MT4).
The no form of this command deletes the specified default metric and reverts to using the system default of 10.
default-ipv6-multicast-metric 10
1 to 16777215
All
This command specifies the default metric for IPv6 unicast.
default-ipv6-unicast-metric 10
All
This command specifies the default metric for IPv6 unicast.
The no form of this command reverts to the default value.
default-ipv6-unicast-metric 10
All
This command specifies a route-table preference value to use for EBGP or IBGP routes carrying labeled-unicast prefixes and received from peers covered by the context of the command. Route-table preference comes into play when the route-table has multiple routes for the same IP prefix. In this case the route with the numerically lowest preference value is usually the route that is activated and installed into the IP FIB. By default all BGP routes have a route-table preference value of 170.
This command overrides the preference value assigned by the label-preference command; that other command does not distinguish between EBGP and IBGP routes. Overriding happens even when the default-label-preference value is inherited from a higher level of configuration and competes with an explicitly configured label-preference value at a lower level of configuration in the BGP hierarchy.
![]() | Note: The preference value assigned by the default-label-preference command can always be overwritten by a route policy entry that accepts the route with a preference command in the action. |
The no form of the command lets BGP route-table preference for labeled-unicast routes to be controlled by other means.
no default-label-preference
All
This command sets the default metric that routes imported by the RTM will acquire.
The no form of this command removes the metric.
default-metric 2
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies the configurable default metric used for all IS-IS interfaces on this level. This value is not used if a metric is configured for an interface.
default-metric 10
All
This command configures the metric used by the area border router (ABR) for the default route into a stub area. The default metric should only be configured on an ABR of a stub area. An ABR generates a default route if the area is a stub area.
The no form of this command reverts to the default value.
default-metric 1
All
This command specifies the configurable default metric used for all IS-IS interfaces on this level. This value is not used if a metric is configured for an interface.
The no form of this command reverts to the default value.
default-metric 10
All
This command configures the metric used by the area border router (ABR) for the default route into a stub area.
The default metric should only be configured on an ABR of a stub area.
An ABR generates a default route if the area is a stub area.
The no form of this command reverts to the default value.
default-metric 1
All
This command specifies the default managed SAP policy to use to create MSAPs when the response from the RADIUS server does not specify a managed SAP policy.
The policy-name parameter is only valid for a SAP with the keywords capture-sap specified in the SAP’s configuration. The capture-sap keyword in the SAP configuration captures the SAP where triggering packets is sent to the CPM. Non-triggering packets captured by the capture SAP is dropped.
The managed SAP policy must already be defined in the config>subscr-mgmt>msap-policy context.
The no form of this command removes the policy-name from the configuration.
This command configures the default PAP password for RADIUS authentication when the Password-Length=0 in the PAP Authenticate-Request.
RADIUS authentication cannot be initiated when the Password-Length=0 in the PAP Authenticate-Request and no default-pap-password is configured. The PPP session terminates in this case.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
A default path binding must be provided before the LSP template can be used for signaling LSP. The LSP template must be shutdown to modify default-path binding.
All
This command designates a peer as a default peer. Traffic that is destined to realms that are not associated with locally configured peers, is sent to the default-peer. In effect, the default peer becomes a default route for Diameter realms.
This command is mandatory in multi-chassis redundancy where the inter-chassis peer is designated as default peer. Then, the SR with no open connections towards agents or servers, forwards all traffic to the inter-peer which maintains, as part of MCS, open connections with agents and servers.
The no form of this command reverts to the default.
no default-peer
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
Using the default peer mechanism, a peer can be selected as the default Multicast Source Discovery Protocol (MSDP) peer. As a result, all source-active messages from the peer will be accepted without the usual peer-reverse-path-forwarding (RPF) check.
The MSDP peer-RPF check is different from the normal multicast RPF checks. The peer-RPF check is used to stop source-active messages from looping. A router validates source-active messages originated from other routers in a deterministic fashion.
A set of rules is applied in order to validate received source-active messages, and the first rule that applies determines the peer-RPF neighbor. All source-active messages from other routers are rejected. The rules applied to source-active messages originating at Router S received at Router R from Router N are as follows:
no default-peer
All
Using the default peer mechanism, a peer can be selected as the default Multicast Source Discovery Protocol (MSDP) peer. As a result, all source-active messages from the peer will be accepted without the usual peer-reverse-path-forwarding (RPF) check.
The MSDP peer-RPF check is different from the normal multicast RPF checks. The peer-RPF check is used to stop source-active messages from looping. A router validates source-active messages originated from other routers in a deterministic fashion.
A set of rules is applied in order to validate received source-active messages, and the first rule that applies determines the peer-RPF neighbor. All source-active messages from other routers are rejected. The rules applied to source-active messages originating at Router S received at Router R from Router N are as follows:
no default-peer (No default peer is established and all active source messages must be RPF checked)
All
This command references a default DHCP address pool for local PPPoX pool management in case that the pool-name is not returned via Radius or LUDB.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies a route-table preference value to use for EBGP or IBGP routes carrying unlabeled prefixes and received from peers covered by the context of the command. Route-table preference comes into play when the route-table has multiple routes for the same IP prefix. In this case, the route with the numerically lowest preference value is usually the route that is activated and installed into the IP FIB. By default all BGP routes have a route-table preference value of 170.
This command overrides the preference value assigned by the preference command; that other command does not distinguish between EBGP and IBGP routes. Overriding happens even when the default-preference value is inherited from a higher level of configuration and competes with an explicitly configured preference value at a lower level of configuration in the BGP hierarchy.
![]() | Note: The preference value assigned by the default-preference command can always be overwritten by a route policy entry that accepts the route with a preference command in the action. |
The no form of the command lets BGP route-table preference to be controlled by other means.
no default-preference
All
This command configures the default enqueuing priority for all packets received on an ingress SAP using this policy. To change the default priority for the policy, the fc-name must be defined whether it is being changed or not.
default-priority low
All
This command configures the default category profile to use when no category profile is explicitly selected for the subscriber.
The no form of this command removes the selected default profile configuration.
no default-profile
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies the default certificate revocation status that is used result when both the primary and secondary CSV methods fail to verify the status.
default-result revoked
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
VSR
This command specifies the id of default retail service if there is no match found in VLAN to retail map configuration (specified by the vlan command). For DSM and migrant, this command is only applicable for non-NAT stacks.
This command configures the default retailer service for WIFI users.
This command configures a route tag that EVPN and IP-VPN use when sending a route to the BGP application (for the corresponding service and BGP instance). If the corresponding BGP EVPN instance is enabled, the command cannot be changed. Additionally, EVPN services can add tags to routes with proxy-arp/nd>evpn-route-tag or the route table tag (added using the import policy). Only one tag is passed from EVPN to the BGP for matching on export policies. In case of a conflict with other route tags pushed by EVPN, the default route tag has the least priority.
The following are examples of the conflict priority handling:
The default-route-tag configuration is only supported on EVPN and IP-VPN service routes. The route tag for ES and AD per-ES routes is always zero.
The no form of this command removes the default-route-tag (that is, it sets the route tag to zero).
no default-route-tag
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
All
This command configures the route tag for default route for the router or VPRN service.
All
This command configures the route tag for default route.
All
This command originates the default RTC route (zero prefix length) towards the selected peers.
no default-route-target
All
This command configures the IP address of the default router for a DHCP client. Up to four IP addresses can be specified.
The no form of this command removes the address(es) from the configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command adds a default SAP to the managed VLAN list.
The no form of this command removes the default SAP to the managed VLAN list.
All
This command specifies a service ID or service name of the default security service used by this SAP IPsec gateway.
This command configures the default forwarding set.
All
This command sets the default tag that routes processed by the AAA route downloader will take.
![]() | Note: Any route received with a specific tag retains the specific tag. The tag value is passed to the Route Table Manager and is available as match condition on the export statement of other routing protocols. |
The no form of this command reverts to the default.
default-tag 0
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures the maximum number of GTP endpoints requested in GTP-C messages by using, for example, the PDP Context Create message type.
The validate-gtp-tunnels command must be enabled before using this command.
The no form of this command sets the limit to 4294967295 (the maximum number of GTP endpoints supported by AA FW minus one).
no default-tunnel-endpoint-limit
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures a default tunnel policy template for the gateway.
This command configures the default username for authentication when not provided in PAP/CHAP authentication (no Name field in CHAP Response message or Peer-Id-Length=0 in PAP Authenticate-Request).
The PPP session terminates when no username is provided in PAP/CHAP authentication and no default-user-name is configured.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command assigns one of the characteristic values as default.
When a default value is specified, app-profile entries that do not explicitly include this characteristic inherit the default value and use it as part of the AQP match criteria based on that app-profile.
A default-value is required for each characteristic. This is evaluated at commit time.
The no form of this command removes the default value for the characteristic.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure server default timer and option parameters. These can be overridden on a per-pool and per-prefix basis.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure default parameters for the GTP connection that can be used when the parameters are not returned in authentication.
7750 SR, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure or apply delay interface attributes such as static delay.
All
This command sets the delay before the progress indicator is displayed in the MD-CLI.
delay 500
All
This command configures the type of delay measurement statistic used in both the sample window and aggregate sample window.
The no form of this command reverts to the default value.
delay min
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command sets the bin number, the threshold and the direction that is monitored to determine if a delay metric threshold crossing event has occurred or has cleared. It requires a bin number, a rising threshold value and a direction. If the clear-threshold value is not specified, the traffic crossing alarm is stateless. Stateless means the state is not carried forward to other measurement intervals. Each measurement interval is analyzed independently and without regard to any previous window. When a raise threshold is reached, the log event is generated. Each unique threshold can only be raised once for the threshold within measurement interval. If the optional clear threshold is specified, the traffic crossing alarm uses stateful behavior. Stateful means each unique previous event state is carried forward to following measurement intervals. If a threshold crossing event is raised another is not raised until a measurement interval completes, and the clear threshold has not been exceeded. A clear event is raised under that condition. In general, alarms are generated when there is a state change. The thresholds configured are applied to the count in specified bin and all higher number bins.
The no form of this command removes thresholding for this delay metric. The complete command must be configured in order to remove the specific threshold.
All
This optional command allows results from probes that map to the specified bin and higher bins to be excluded from the TCA count. The TCA count is used to determine if a threshold has been reached by the event monitoring function. Individual counters are incremented in the bin, but the counts in the specified bin and higher bins are not included in the TCA threshold computation. A delay-event must be configured in the same direction, and the lowest-bin configured as part of the delay-event-exclusion command must be higher than the lowest bin specified by the corresponding delay-event command.
The bin group allows this optional command to be added, modified, or deleted while tests are actively referencing the bin group. The bin group does not need to be shut down during delay-event-exclusion configuration. If the values are modified while the active tests are executing, all configured TCAs for the specified direction within the bin group enters a pending (p) state until the start of the next measurement interval. Any existing stateful TCAs that were raised are cleared without creating a log event, and no further processing for the affected TCAs occur in the active window. Depending on timing, the pending state may continue past the adjacent measurement interval until the start of the following measurement interval.
The no form of this command does not exclude any values from the configured TCA threshold.
no delay-event-exclusion forward
no delay-event-exclusion backward
no delay-event-exclusion round-trip
All
This enables the monitoring of all configured delay events. Adding this functionality starts the monitoring of the configured delay events at the start of the next measurement interval. If the function is removed using the no command, all monitoring of configured delay events, logging, and recording of new events for that session are suspended. Any existing events at the time of the shut down are maintained until the active measurement window in which the removal was performed has completed. The state of this monitoring function can be changed without having to shutdown all the tests in the session.
The no form of this command disables the monitoring of all configured delay events.
This command selects the delay source to be advertised by the IGP for this interface.
The no form of this command reverts to the default value.
delay-selection static-preferred
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
It is recommended to only use this command when session-accounting is used. By default, a dual stack subscriber generates a RADIUS accounting interim message for each new host update (IPv4, IPv6 WAN, and IPv6 PD). This command delays the trigger of a RADIUS accounting start message and allows all hosts to connect first. When the delay timer expires, a single RADIUS accounting start message containing all the host currently connected to the BNG is sent to the server. Subsequent host connections will trigger interim-updates if host-update is enabled on session-accounting. For all other accounting modes, this command will delay the trigger of an accounting start when a host connects.
The no form of this command reverts to the default.
no delay-start-time
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies a reference to a config>oam-pm>streaming delay-template for the Ethernet DMM test. It is possible to include a delay template reference that is not configured under config>oam-pm>streaming. In this case, the streaming of the results is not in effect. Refer to the config>oam-pm>streaming delay-template command for session to template interaction behaviors.
The no form of this command deletes the delay template from the test.
no delay-template
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command specifies a reference to a config>oam-pm>streaming delay-template for the IP TWAMP LIGHT test. It is possible to include a delay template reference that is not configured under config>oam-pm>streaming. In this case, streaming of results are not in effect. Refer to the config>oam-pm>streaming delay-template command for session to template interaction behaviors.
The no form of this command deletes the delay template from the test.
no delay-template
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command specifies a reference to a config>oam-pm>streaming delay-template for the MPLS DM test. It is possible to include a delay template reference that is not configured under config>oam-pm>streaming. In this case, streaming of results are not in effect. Refer to the config>oam-pm>streaming delay-template command for session to template interaction behaviors.
The no form of this command deletes the delay template from the test.
no delay-template
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command specifies a template for streaming delay metrics that can be referenced under the oam-pm>session technology delay style test.
The delay-template must be configured under the technology delay test oam-pm>session to allow the delay specific test to stream results using the configured template attributes.
The no form of this command deletes the specified delay template.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command enables the generation of the delegated-ipv6-prefix RADIUS attribute.
The no form of this command disables the generation of the delegated-ipv6-prefix RADIUS attribute.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures the delegated prefix length that is used if the DHCPv6 client does not specify a prefix length hint.
The DHCPv6 client prefix length hint is limited by the range specified by the minimum and maximum parameters. If the hint is smaller than the minimum, the allocated prefix length is equal to the minimum length. If the hint is larger than the maximum, the allocated prefix length is equal to the maximum length.
The no form of this command reverts to the default.
delegated-prefix-length 64 minimum 48 maximum 64
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures the subscriber interface level setting for delegated prefix length. The delegated prefix length for a subscriber- interface can be either set to a fixed value that is explicitly configured under the subscriber interface CLI hierarchy or a variable value that can be obtained from various sources. This command can be changed only when no IPv6 prefixes are configured under the subscriber-interface context.
The no form of this command reverts to the default.
no delegated-prefix-length (the delegated prefix length is 64)
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command deletes the specified file.
The optional wildcard (*) can be used to delete multiple files that share a common (partial) prefix and/or (partial) suffix. When the wildcard is entered, the following prompt displays for each file that matches the wildcard:
“Delete file <filename> (y/n)?”
local-url | [cflash-id/][file-path] up to 200 characters, including cflash-id directory length up to 99 each |
remote-url | [{ftp:// | tftp:// | http:// | https://}login:pswd@remote-locn/][file-path] |
up to 247 characters | |
directory length up to 99 characters each | |
remote-locn | [hostname | ipv4-address | [ipv6-address]] |
ipv4-address | a.b.c.d |
ipv6-address | x:x:x:x:x:x:x:x[-interface] |
x:x:x:x:x:x:d.d.d.d[-interface] | |
x - [0 to FFFF]H | |
d - [0 to 255]D | |
interface - up to 32 characters, for link local addresses 255 | |
cflash-id | cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B: |
All
This command deletes the selected CLI node (which includes all sub-branches). The deleted lines are also copied into a temporary buffer that can be used for a subsequent insert.
line, offset, first, edit-point, last | ||
line | absolute line number | |
offset | relative line number to current edit point. Prefixed with '+' or '-' | |
first | keyword - first line | |
edit-point | keyword - current edit point | |
last | keyword - last line that is not 'exit' |
This command deletes a rollback checkpoint and causes the suffixes to be adjusted (decremented) for all checkpoints older that the one that was deleted (to close the hole in the list of checkpoint files and create room to create another checkpoint).
If config redundancy rollback-sync is enabled, a rollback delete will also delete the equivalent checkpoint on the standby CF and shuffle the suffixes on the standby CF.
It is not advised to manually delete a rollback checkpoint (for example, using a file delete command). If a rollback checkpoint file is manually deleted without using the admin rollback delete command then the suffixes of the checkpoint files are not shuffled, nor is the equivalent checkpoint file deleted from the standby CF. This manual deletion creates a hole in the checkpoint file list until enough new checkpoints have been created to roll the hole off the end of the list.
All
This command enables the NETCONF delete-config operation.
The no form of this command disables the operation.
no delete-config
![]() | Note: The operation is enabled by default in the built-in system-generated administrative profile. |
All
This command enables matching on UEs that are in a delete-pending state.
The no form of this command disables matching on UEs in a delete pending-state, unless all state matching is disabled.
no delete-pending
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command sets the delivery service for GRE encapsulated packets associated with a particular GRE tunnel. This is the IES or VPRN service where the GRE encapsulated packets are injected and terminated. The delivery service may be the same service that owns the private tunnel SAP associated with the GRE tunnel. The GRE tunnel does not come up until a valid delivery service is configured.
The no form of this command deletes the delivery-service from the GRE tunnel configuration.
This variant of the command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic). The delivery-service name service-name variant can be used in all configuration modes.
id: | 1 to 2147483647 |
svc-name: | up to 64 characters (svc-name is an alias for input only. The svc-name gets replaced with an id automatically by SR OS in the configuration). |
All
This command configures the percentage of the delta (from the beginning to the end of the current H-QoS below CIR or above CIR pass) of the aggregate rate consumed by its other members that can be given to a queue at the end of an H-QoS below CIR pass and above CIR pass. This command is only applicable when the port scheduler is configured to use the above-offered-allowance-control algorithm, otherwise it is ignored.
The no form of this command reverts the delta-consumed-agg-rate percent to its default value.
delta-consumed-agg-rate 20.00
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command configures the percentage of the delta (from the beginning to the end of the current H-QoS below CIR or above CIR pass) of the higher tier rate consumed by its other members that can be given to a queue at the end of an H-QoS below CIR pass and above CIR pass. Higher tier refers to the Vport aggregate rate and port scheduler level, group, and maximum rates.
This command is only applicable when the port scheduler is configured to use the above-offered-allowance-control algorithm, otherwise it is ignored.
The no form of this command reverts the delta-consumed-higher-tier-rate percent to its default value.
delta-consumed-higher-tier-rate 5.00
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command sets a lower limit on the virtual router in-use priority that can be derived from the delta priority control events.
Each vrrp-priority-id places limits on the delta priority control events to define the in-use priority of the virtual router instance. Setting this limit prevents the sum of the delta priority events from lowering the in-use priority value of the associated virtual router instances below the configured value.
The limit has no effect on explicit priority control events. Explicit priority control events are controlled by setting the in-use priority to any value between 1 and 254.
Only non-owner virtual router instances can be associated with VRRP priority control policies and their priority control events.
Once the total sum of all delta events is calculated and subtracted from the base priority of the virtual router instance, the result is compared to the delta-in-use-limit value. If the result is less than the limit, the delta-in-use-limit value is used as the virtual router in-use priority value. If an explicit priority control event overrides the delta priority control events, the delta-in-use-limit has no effect.
Setting the limit to a higher value than the default of 1 limits the effect of the delta priority control events on the virtual router instance base priority value. This allows for multiple priority control events while minimizing the overall effect on the in-use priority.
Changing the in-use-priority-limit causes an immediate re-evaluation of the in-use priority values for all virtual router instances associated with this vrrp-policy-id based on the current sum of all active delta control policy events.
The no form of the command reverts to the default value.
delta-in-use-limit 1 — Specifies the lower limit of 1 for the in-use priority, as modified, by delta priority control events.
Setting the in-use-priority-limit to a value equal to or larger than the virtual router instance base-priority prevents the delta priority control events from having any effect on the virtual router instance in-use priority value.
All
This command sets the threshold value below which the FCC server will dent/drop unicast data sent to the FCC client during a fast channel change. Within the RTP extension header, the packet priority (PRI) (2 bits) and the fine-grained priority (FPRI) (3 bits) indicate the “importance” of the frame as to how essential it is to the video stream.
This parameter is only applicable if the FCC server mode is dent.
The no form of the command returns the parameter to the default value.
dent-threshold 16 (only B frames are dropped)
7450 ESS, 7750 SR-7/12/12e, 7750 SR-14s
This command adds a deny-list URL list to the local URL filter policy.
The no form of this command removes the URL list object.
no deny-list
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command enables the system to send out a warning when the prefix with a configured length is no longer available in the provisioned prefix.
For example:
With the above configuration, the system will send out a warning when there is no available /64 that can be allocated out of 2001:0:0:ffe0::/50.
The no form of this command disables the warnings.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command enables the system to send out warnings when the prefix with the configured length is no longer available in the pool.
The no form of this command disables the warnings.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures an ASCII string that uniquely identifies a host and is derived by a Python script from packet content available during a DHCP transaction or PPPoE session establishment.
![]() | Note: This command is only used when derived-id is configured as one of the match-list parameters. |
The no form of this command removes the derived-id from the configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.
The no form of this command removes the string from the configuration.
All
This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.
The no form of this command removes the string from the configuration.
no description
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, 7950 XRS, VSR
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
7450 ESS, 7750 SR-7/12/12e
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e, 7950 XRS
7750 SR, 7750 SR-e, 7750 SR-s, VSR
7750 SR-1, 7750 SR-s
7750 SR-7/12/12e
All
VSR
This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.
The no form of this command removes the string from the configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, 7950 XRS, VSR
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
7450 ESS, 7750 SR-7/12/12e, 7750 SR-s, 7950 XRS, VSR
7750 SR, 7750 SR-e, 7750 SR-s, VSR
All
VSR
This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.
The no form of this command removes the string from the configuration.
No description is associated with the configuration context.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
7450 ESS, 7750 SR-7/12/12e, 7750 SR-14s
7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e, 7950 XRS
7750 SR-7/12/12e
All
This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.
The no form of this command removes the string from the configuration.
no description
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e, 7950 XRS
7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
All
This command creates a text description which is stored in the configuration file to help identify the content of the entity.
The no form of this command removes the string from the configuration.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command creates a text description stored in the configuration file for a configuration context.
The description command associates a text string with a configuration context to help identify the content in the configuration file.
The no form of this command removes the string from the configuration.
no description
All
This command creates a text description stored in the configuration file for a configuration context.
The description command associates a text string with a configuration context to help identify the content in the configuration file.
The no form of this command removes the string from the configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
All
This command adds a text description for the eth-tunnel.
The no form of this command removes the text description.
Eth-tunnel
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command provides a description for a vsd-domain. This description must be added before the domain is activated using the no shutdown command.
All
This command creates a text description which is stored in the configuration file to help identify the content of the entity.
The no form of the command removes the string from the configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command enables/disables support for the description option.
no description
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies a description of a S-BFD reflector.
All
This command configures a text description of an alarm contact input pin. The description is stored in the CLI configuration file. It indicates the usage or attribute of the pin, and helps the user to identify the purpose of the pin. The description is included in the log event when the pin changes state.
The no form of this command reverts the description string to the default.
7750 SR-a
This command is used to specify the type of the traffic descriptor profile as per ATM Forum Traffic Management Specification Version 4.1.
Service Category | Default Descriptor Type |
CBR | P0_1 |
UBR | P0_1 |
UBR with MIR | P0_1 |
rt-VBR or nrt-VBR | P0_1andS0_1 |
Descriptor Type | Rates Interpretation | Applicable Service Categories |
P0_1 | PIR applies to CLP=0 and CLP=1 cell flows | CBR, UBR, UBR with MIR |
P0_1andS0_1 | PIR applies to CLP=0 and CLP=1 cell flows SCR applies to CLP=0 and CLP=1 cell flows | rt-VBR and nrt-VBR |
P0_1andS0 | PIR applies to CLP=0 and CLP=1 cell flows SCR applies to CLP=0 cell flow | rt-VBR and nrt-VBR |
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e, 7950 XRS
This command sets the designated role for the tunnel group in the IPsec domain.
The no form of this command reverts to the default value.
designated-role standby
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies the policy accounting destination class index to associate with matched routes.
no dest-class
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
This optional command configures the MPLS-TP Global ID of the far end node of the MPLS-TP LSP. This command is only allowed for MPLS-TP LSPs. Global ID values of 0 indicate that the local node’s configured global ID is used. If the local global-id is 0, then the dest-global-id must also be 0. The dest-global-id cannot be changed if an LSP is in use by an SDP.
dest-global-id 0
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command configures a private IPv4 or IPv6 address of the remote tunnel endpoint. A tunnel can have up to 16 dest-ip commands. At least one dest-ip address is required in the configuration of a tunnel. A tunnel does not come up operationally unless all dest-ip addresses are reachable (part of a local subnet).
Unnumbered interfaces are not supported.
The no form of this command deletes the destination IP of the tunnel.
<ip-address> | ipv4-address | a.b.c.d |
ipv6-address | x:x:x:x:x:x:x:x (eight 16-bit pieces) | |
x:x:x:x:x:x:d.d.d.d | ||
x - [0 to FFFF]H | ||
d - [0 to 255]D |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies the IP address of the external node to which IGMP events are exported. The destination IP address can only be reachable from the global routing table (no vrf access).
The no form of this command removes the destination address from the configuration.
All
This command configures destination MAC address parameters.
dest-mac nearest-bridge
All
This command defines the destination MAC address of the peer MEP and sets the destination MAC address in the layer two header to match. This must be a unicast address.
The no form of this command removes session parameter.
All
This command specifies the destination MAC address.
The no form of this command removes the MAC address.
All
This commands enables the overwriting of a destination MAC address to an operator-configured value for all unicast packets egressing the specified SAP. The command is intended to be deployed with L2 PBF SAP redirect when a remote end of the SAP interface is an L3 interface with a MAC address different from the MAC address of the non-PBF-ed L3 interface. See Filter Policy in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Router Configuration Guide for more details.
The no form disables the option.
no dest-mac-rewrite
All
This command restricts the output to a specific destination-realm.
The no form of this command disables debugging.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures destination realm learning that is used in outgoing Gx and Gy Credit Control Request (CCR) messages. Destination realm is a mandatory configuration parameter.
The configured destination realm is always used in the initial CCR-I message. The consecutive request message of a Gx or Gy session can use the destination realm as learned from replies within a DIAMETER session (if learning is enabled), or they can ignore the realm from the reply and always use the configured destination realm in Gx and Gy request messages (learning is disabled).
The no form of this command ignores the realm from the reply.
dest-realm-learning
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This optional command configures the MPLS-TP tunnel number of the LSP at the far end node of the MPLS-TP LSP. This command is only allowed for MPLS-TP LSPs. If it is not entered, then the system will take the dest-tunnel-number to be the same as the src-tunnel-num for the LSP.
The default value is the configured src-tunnel-num.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command defines the destination UDP port on outbound TWAMP Light packets sent from the session controller. The destination UDP port must match the UDP port value configured on the TWAMP Light reflector that is responding to this specific TWAMP Light test.
The no form of this command removes the destination UDP port setting.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command configures the destination UDP port used by the link measurement tests.
dest-udp-port 862
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command defines the destination IP address that is assigned to the TWAMP Light packets. The destination address must be included in the prefix list on the session reflector within the configured context in order to allow the reflector to process the inbound TWAMP Light packets.
The no form of this command removes the destination parameters.
ipv4-address: | a.b.c.d | |
ipv6-address: | x:x:x:x:x:x:x:x (eight 16-bit pieces) | |
x:x:x:x:x:x:d.d.d.d | ||
x: | [0 to FFFF]H | |
d: | [0 to 255]D |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command defines a destination in a redirect policy. More than one destination can be configured. Whether a destination IPv4/IPv6 address will receive redirected packets depends on the effective priority value after evaluation.
The most preferred destination is programmed in hardware as action forward next-hop. If all destinations are down (as determined by the supported tests), action forward is programmed in hardware. All destinations within a given policy must be either IPv4 or (exclusive) IPv6. The redirect policy with IPv4 destinations configured can only be used by IPv4 filter policies. The redirect policy with IPv6 destinations configured can only be used by IPv6 filter policies.
no destination
All
This command configures the destination for filter log entries for the filter log ID.
Filter logs can be sent to either memory (memory) or to an existing Syslog server definition (syslog).
If the filter log destination is memory, the maximum number of entries in the log must be specified.
The no form of the command deletes the filter log association.
destination memory 1000
All
This command configures a destination IP address and port for a specific destination within a destination group. Up to two destinations can be defined within a destination group. Each destination is an IPv4 address, an IPv6 address, or the Fully Qualified Domain Name (FQDN).
The no form of this command removes the destination from the destination group.
All
This command configures the unicast IPv4 destination address for the TWAMP Light test packet. When this command is not configured, the destination IPv4 address is auto-assigned for interfaces configured with a prefix length of 30 and 31. All other interface prefix lengths and unnumbered interfaces are unable to auto- assign the destination IPv4 address. If the interface does not use a prefix length of 30 or 31, the destination must be configured.
Deleting a configured destination removes the specified address and causes the source address to be auto-assigned for prefix length of 30 and 31.
Configuration modifications are allowed without administratively disabling the IPv4 protocol.
The no form of this command removes the IPv4 address from the configuration.
no destination
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command configures the IPv6 destination address of the TWAMP Light test packet. When this command is not configured, no destination address is present and an error is raised to prevent the transmission of the test packet.
The IPv6 protocol can be enabled without addressing. However, the test does not transmit packets.
The link local address must be in the form fe80::/60 in accordance with RFC 4291, IP Version 6 Addressing Architecture.
The no form of this command removes the IPv6 address from the configuration.
no destination
ipv6-address: | x:x:x:x:x:x:x:x |
x - [0 to FFFF]H | |
unicast and link local IPv6 address only |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command defines one or more destinations for the GRE IP header used to encapsulate the matching IPv4/IPv6 packet.
Traffic matching the associated IPv4 or IPv6 filter are hashed across all available destination address. If no destination address is available, then matching traffic follows the configured pbr-down-action-override action, if configured.
The no form of this command removes the specified destination IP address configuration from the associated GRE tunnel template.
All
This command configures the address to where the ICMP echo requests are directed to test connectivity. The source of the ICMP echo request is the primary IPv4 address of the interface under which the ping-template is configured. The destination address must be on the same subnet as the source IP address. A configuration warning message displays if the primary IPv4 address and the destination are not on the same subnet, INFO: PIP #2092 Ping template misconfiguration - destination-address and primary IP address should fall in the same subnet. Unnumbered interfaces and loopback addresses are not supported.
The config>service>ies|vprn>interface>ping-template must be in the no shutdown state to remove or change the destination-address ip-address.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
Commands in this context create a destination class index for the template.
The no form of this command removes the index from the configuration.
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
This command configures the policy accounting destination-class index to be used when incrementing accounting statistic for traffic matching the associated static route.
The no form of this command removes the associated destination-class from the associated static route nexthop.
no destination-class
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
This command configures the BGP destination-class value match criterion. Filtering egress traffic on destination-class requires the destination-class-lookup command to be enabled on the interface that the packet ingresses on.
The no form of the command removes the destination-class value match criterion.
no destination-class
All
This command configures the policy accounting destination-class index to be used when incrementing accounting statistic for traffic matching the associated static route.
The no form of this command removes the associated destination-class from the associated static route next hop.
no destination-class
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
This command enables BGP destination-class lookup for packets on this interface ingress and is supported on FP3-based cards and later. It is used in combination with an IP filter or IPv6 filter destination-class to filter traffic egress of the router based on BGP destination classes.
The command is supported on network, IES, VPRN and R-VPLS interfaces. It is not supported on subscriber interfaces, tunnel interfaces or VPRN network interfaces.
no destination-class-lookup
All
This command enables BGP destination-class lookup for packets on this interface ingress and is supported on FP3-based cards and later. It is used in combination with an IP filter or IPv6 filter destination-class to filter traffic egress of the router based on BGP destination classes.
The command is supported on network, IES, VPRN and R-VPLS interfaces. It is not supported on subscriber interfaces, tunnel interfaces and VPRN network interfaces.
no destination-class-lookup
All
This command enables BGP destination-class lookup for packets on this interface ingress. It is used in combination with an IP filter or IPv6 filter destination-class to filter traffic egress of the router based on BGP destination classes.
The command is supported on network, IES, VPRN and R-VPLS interfaces. It is not supported on subscriber interfaces, tunnel interfaces or VPRN network interfaces.
The no form of this command reverts to the default value.
no destination-class-lookup
All
Commands in this context configure commands for destination groups.
The no form of this command removes the destination group name.
All
This command assigns the specified destination group to a gRPC tunnel.
The no form of this command removes the specified destionation group from the gRPC tunnel.
no destination-group
All
This command assigns an existing destination group to the specified persistent subscription. The assigned destination-group must already exist before the configured persistent subscription can be activated.
The no form of this command removes the destination group name from the persistent subscription.
All
This command configures the Destination-Host AVP that is sent in CCR-I/U/T and RAA messages. If the destination host name is not explicitly set by configuration, it is learned from CCA or RAR messages. In other words, the origin host name received in the CCA or RAR message is used to populate or replace the destination host name for a session in SR OS node.
This command is applicable only to legacy implementations of Diameter base in the SR OS.
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command includes the destination IP address in the flow log. The destination-ip is significant in Destination Based NAT (DNAT) where the foreign IP address is translated. A foreign IP address is the original IP address toward the destination node and in DNAT it is replaced by the destination-ip. More clearly, on the inside (private side), the IP address of the destination node is referred to as foreign IP (original destination IP), and once this address is translated by DNAT, it is referred to as destination IP (translated destination IP) on the outside (public side).
The no form of the command disables the feature.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the destination port (collector port) to which UDP stream containing the syslog flow records are sent.
destination-port 514
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures a destination prefix. An (internal) static route will be created for this prefix. All traffic that hits this route will be subject to NAT. The system will not allow a destination-prefix to be configured if the configured nat-policy refers to an IP pool that resides in the same service (as this would result in a routing loop).
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies that the aggregation data is based on destination prefix information.
The no form removes this type of aggregation from the collector configuration.
All
This command configures the destination-realm AVP that is sent in CCR-I/U/T and RAA messages. The destination realm name cannot be learned dynamically from the CCA or RAR messages and therefore it should be explicitly configured in SR OS node. Once configured, it cannot be changed while peers are open.
This command is applicable only to legacy implementations of Diameter base in the SR OS.
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures the period of time that the data of a disconnected tunnel will persist before being removed.
The no form of this command removes the value from the configuration.
no destruct-timeout
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command debugs the DHCP tracing detail level.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
All
This command configures the L2TP packet debugging level of detail.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specify the detail level of PPP packet debug output.
The no form of this command disables debugging.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures the detail level of debug output.
The no form of this command disables debugging.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies the output detail level of command debug router radius.
detail-level medium
All
This command specifies the detail level of WPP packet debugging.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies the amount of detail present in debugging the specified PPPoE client.
detail-level high
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command enables and configures the IGMP tracing detail level.
The no form of this command disables the IGMP tracing detail level.
All
This command enables and configures the MLD tracing detail level.
The no form of this command disables the MLD tracing detail level.
All
This command configures the DHCP tracing detail level.
The no form of the command disables debugging.
All
This command configures the packet debugging level of detail.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command enables detailed reporting of per queue and per policer octet and packet counters using RADIUS VSAs. Enabled by default. It can be enabled simultaneously with aggregate counters (std-acct-attributes).
The no form of this command excludes the detailed counter VSAs from the RADIUS accounting messages.
detailed-acct-attributes
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
The mac-duplication featured is always enabled by default. This command modifies the default behavior. mac-duplication monitors the number of moves of a MAC address for a period of time (window).
detect num-moves 5 window 3
All
This command enables the detection of transit subscribers based on the IP address.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
When a dynamic enforcing policer is instantiated, it remains allocated until at least a contiguous conforming period of detection-time passes.
detection-time 30
All
When a policer is declared as in an “exceed” state, it remains as exceeding until a contiguous conforming period of detection-time passes. The detection-time only starts after the exceed-action hold-down is complete. If the policer detects another exceed during the detection count down then a hold-down is once again triggered before the policer re-enters the detection time (that is, the countdown timer starts again at the configured value). During the hold-down (and the detection-time), the policer is considered as in an “exceed” state.
detection-time 30
All
Commands in this context configure deterministic NAT.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures deterministic NAT for this pool.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command controls how the BGP decision process compares routes on the basis of MED. When deterministic-med is configured, BGP groups paths that are equal up to the MED comparison step based on neighbor AS, and then compares the best path from each group to arrive at the overall best path. This change to the BGP decision process makes best path selection completely deterministic in all cases. Without deterministic-med, the overall best path selection is sometimes dependent on the order of the route arrival because of the rule that MED cannot be compared in routes from different neighbor AS.
no deterministic-med
All
This command controls how the BGP decision process compares routes on the basis of MED. When deterministic-med is configured, BGP groups paths that are equal up to the MED comparison step based on neighbor AS, and then compares the best path from each group to arrive at the overall best path. This change to the BGP decision process makes best path selection completely deterministic in all cases. Without deterministic-med, the overall best path selection is sometimes dependent on the order of the route arrival because of the rule that MED cannot be compared in routes from different neighbor AS.
no deterministic-med
All
This command configures the script generated for deterministic NAT.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command is used to add and remove devices from the Bluetooth allowlist or to enter the context to configure the MAC. The router only accepts pairing requests with devices that are in the allowlist. The devices are identified through their IEEE 802 MAC addresses. There can be up to six devices defined in the allowlist.
The create keyword must be used to add a new device.
The no form of this command removes the indicated device from the allowlist.
7750 SR-1, 7750 SR-s
This command configures the metadata label that is supplied to all remote managers. This label can be used to group devices (network-nodes) that serve a common purpose or role.
If this command is also configured for a specific remote manager in the config>system> management-interface>remote-management>manager context, that configuration takes precedence.
The no form of this command causes an empty string to be used.
All
This command configures the metadata label that is supplied to this remote manager. This label can be used to group devices (network-nodes) with a common purpose/role.
This command takes precedence over the same command configured in the global context (config>system>management-interface>remote-management).
The no form of this command causes the device-label name to be inherited from the global context (config>system>management-interface>remote-management).
All
This command configures a device name that is supplied to all remote managers. This name identifies the specified SR OS node in the network.
If this command is also configured for a specific manager in the config>system> management-interface>remote-management>manager context, that configuration takes precedence.
The no form of this command causes the system to use the default device name (system-name).
system-name
All
This command configures a device name that is supplied to the specific manager. This name identifies the specified SR OS node in the network.
This command takes precedence over the same command configured in the global context (config>system>management-interface>remote-management).
The no form of this command causes the device name to be inherited from the global context (config>system>management-interface>remote-management).
system-name
All
By default, the LAC df-bit-lac is always set and sends all L2TP packets with the DF bit set to 1. The DF bit is configurable to allow downstream routers to fragment the L2TP packets. The LAC itself will not fragment L2TP packets. L2TP packets that have a larger MTU size than what the LAC egress ports allows are dropped.
The no form of this command reverts to the default.
df-bit-lac always
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
By default, the LAC df-bit-lac is set to default and sends all L2TP packets with the DF bit set to 1. The DF bit is configurable to allow downstream routers to fragment the L2TP packets. The LAC will not fragment L2TP packets. L2TP packets that have a larger MTU size than what the LAC egress ports allows are dropped. The configuration of the df-bit can be overridden at different levels: l2tp, tunnel, and group. The configuration at the tunnel level overrides the configuration on both the group and l2tp levels. The configuration at the group level overrides the configuration on l2tp.
The no form of this command reverts to the default.
df-bit-lac default
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies the Diffie-Hellman group to be used in this IKE transform instance.
dh-group 2 (1024-bit — More Modular Exponential (MODP))
Group 1: 768 bits
Group 2: 1024 bits
Group 5: 1536 bits
Group 14: 2048 bits
Group 15: 3072 bits
Group 19: P-256 ECC Curve, 256 bits
Group 20: P-384 ECC Curve, 384 bits
Group 21: P-512 ECC Curve, 512 bits
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure DHCP parameters.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure DHCP parameters.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
All
This command enables DHCP debugging.
The no form of this command disables debugging.
All
This command specifies the Python script for the specified DHCPv4 packet type in the specified direction.
Multiple dhcp command configurations are allowed in the same Python policy.
The no form of this command reverts to the default.
All
Commands in this context create DHCP configuration for WLAN-GW ISA subscribers (such as migrant subscribers).
Commands in this context perform DHCP debugging.
The no form of the command disables DHCP debugging.
All
This command enables dynamic DHCP-based management of transit aa-subs for the transit-ip-policy. This is mutually exclusive to other types management of transit subs for a given transit-ip-policy.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure DHCPv4-based address assignment for IKEv2 remote-access tunnels.
The system acts as a DHCPv4 client on behalf of the IPsec client, and also a relay agent to relay DHCPv4 packets to the DHCPv4 server.
DHCPv4 DORA(Discovery/Offer/Request/Ack) exchange happens during IKEv2 remote-access tunnel setup. The system also supports standard renew.
In order to use this feature, the relay-proxy must be enabled on the corresponding interface (either the private interface or the interface that has the gi-address as the interface address).
no dhcp
Commands in this context configure DHCP parameters.
All
This command configures the IPv4 DHCP client for OOB management. The OOB management IPv4 can be set using a DHCP server offer.
The no form of this command disables IPv4 DHCP OOB management.
no dhcp
7450 ESS-7, 7750 SR-1, 7750 SR-7, 7750 SR-1e, 7750 SR-s
This command configures the IPv6 DHCP client for out-of-band (OOB) management. The OOB management IPv6 can be set using a DHCP server offer.
The no form of this command disables IPv6 DHCP client OOB management.
no dhcp
7450 ESS-7, 7750 SR-1, 7750 SR-7, 7750 SR-1e, 7750 SR-s
This command includes the extracted IPv4 DHCP packets for ip-src-monitoring. IPv4 DHCP packets will be subject to the per-source-rate of CPU protection policies.
dhcp (Note this is different from the other protocols)
7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS
This command enables debugging for DHCP client packet.
The no form of this command disables debugging for DHCP client packet.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command enable PPP event debug for DHCP client.
The no form of this command disables PPP event debugging for the DHCP client.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command enables debugging for specific DHCP client packets.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure the PPPoE-to-DHCP options.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
Commands in this context create and configure the specified DHCP filter policy.
All
This command configures Dynamic Data Persistence (DDP) compact flash access optimization for DHCP leases.
The DHCP lease-time threshold controls the eligibility of a DHCP lease for persistency updates when no data other than the lease expiry time is to be updated. When the offered lease time of the DHCP lease is less than the configured threshold, the lease is flagged to skip persistency updates and will be installed with its full lease time upon a persistency recovery after a reboot.
The dhcp-leasetime-threshold command controls persistency updates for DHCPv4 and DHCPv6 leases for a DHCP relay or proxy and DHCPv4 leases for DHCP snooping (enabled with subscriber-mgmt) and a DHCP server (enabled with dhcp-server).
The no form of the command disables the DHCP lease time threshold.
no dhcp-leasetime-threshold
All
This command configures the DHCP lease time threshold to be eligible for MCS synchronization.
DHCP leases for the sub-mgmt MCS applications are eligible to skip synchronization if the committed lease time is less than the active threshold on a multi-chassis peer. The active threshold is the minimum value of the thresholds configured on the nodes at each end of a multi-chassis peer. The threshold is inactive when it is unconfigured on at least one end of the multi-chassis peer.
The no form of the command disables the DHCP lease time threshold.
no dhcp-leasetime-threshold
No threshold is active and all sub-mgmt DHCP leases are synchronized.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command enables insertion of RADIUS VSA containing all DHCP options from DHCP discover (or DHCP request) message. The VSA contains all DHCP options in a form of the string. If required (the total length of all DHCP options exceeds 255B), multiple VSAs are included.
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command enables insertion of RADIUS VSA containing all dhcp-options from dhcp-discover (or dhcp-request) message. The VSA contains all dhcp-options in a form of the string. If required (the total length of all dhcp-options exceeds 255B), multiple VSAs are included.
no dhcp-options
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure per-subscriber IPv4 address pool parameters to be used for address allocation. Pools for different subscribers can overlap. Specific pool parameters can be overridden by RADIUS.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies the name of the Python policy. The Python policy is created in the config>python>python-policy name context.
The no form of this command reverts to the default.
All
This command configures DHCP server persistence parameters.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command enables matching on UEs currently in a DHCP-triggered state. This query only filters UEs that are currently authenticating due to a DHCP, DHCPv6, or RS trigger, not RADIUS-authenticated UEs in an ESM, DSM, or portal state that were originally authenticated due to a DHCP, DHCPv6, or RS trigger.
The no form of this command disables matching on UEs in a DHCP-triggered state, unless all state matching is disabled.
no dhcp-triggered
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command enabled access to LUDB for DHCPv4 hosts under the capture SAP. The name of this local user database must match the name of local user database configured under the config>service>vprn/ies>sub-if>group-if>dhcp context.
All
This command includes the [26-6527-36] Alc-DHCP-Vendor-Class-Id attribute in authentication or RADIUS accounting messages. The content of the DHCP Vendor-Class-Identifier option (60) is mapped in this attribute.
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command includes the “[26-6527-36] Alc-DHCP-Vendor-Class-Id” attribute in authentication or RADIUS accounting messages. The content of the DHCP Vendor-Class-Identifier option (60) is mapped in this attribute.
no dhcp-vendor-class-id
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure DHCPv6 parameters.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure system-wide DHCPv6 parameters.
All
This command enables DHCPv6 debugging with optional interface, SAP, and client-identifier match criteria to filter the debug output.
The no form of this command disables debugging.
All
This command specifies the Python script for the specified DHCPv6 packet type in the specified direction.
Multiple dhcps command configurations are allowed in the same Python policy.
The no form of this command reverts to the default.
All
Commands in this context create DHCPv6 configuration for WLAN-GW ISA subscribers.
Commands in this context configure DHCPv6-based address assignment for IKEv2 remote-access tunnels.
The system acts as a DHCPv6 client on behalf of the IPsec client, and also acts as a relay agent to relay DHCPv6 packets to the DHCPv6 server.
DHCPv6 exchange happens during IKEv2 remote-access tunnel setup. The system also supports standard renew.
no dhcp6
This command enables matching on UEs with the specified DHCPv6 IA-NA address.
The no form of this command disables matching on the IA-NA address.
no dhcp6-address
ipv6-address | x:x:x:x:x:x:x:x (eight 16-bit pieces) |
x:x:x:x:x:x:d.d.d.d | |
x: [0 to FFFF]H | |
d: [0 to 255]D |
7750 SR, 7750 SR-e, 7750 SR-s, VSR
Commands in this context create and configure the specified DHCPv6 filter policy.
The no form of this command reverts to the default.
All
This command copies DHCPv6 options from received DHCPv6 messages on ingress access and pass them to the RADIUS server in Accept-Request. The messages is carried in the RADIUS VSA Alc-ToServer-Dhcp6-Options.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
If a DHCPv6 stack is active for a UE, this attribute defines if options received in the last DHCPv6 message should be reflected.
no dhcp6-options
7750 SR, 7750 SR-e, 7750 SR-s, VSR
If authentication was triggered by DHCPv6, this knob defines if options received in that DHCPv6 message should be reflected in the radius Access-Request.
no dhcp6-options
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specified the Python policy for DHCPv6 packets sent/received on the capture SAP.
The no form of this command removes the policy name from the configuration.
All
Commands in this context configure DHCPv6 relay parameters for the interface.
The no form of this command disables DHCPv6 relay.
All
Commands in this context configure DHCPv6 server parameters for the interface.
The no form of this command disables the DHCP6 server.
All
This command enabled access to LUDB for DHCPv6 hosts under the capture SAP. The name of this LUDB must match the name of the LUDB configured under the config>service>vprn/ies>sub-if>grp-if>dhcp hierarchy.
The no form of this command reverts to the default.
All
This node enables address pools for DHCPv4 NAT inside addresses. This configuration is only available in wholesale interfaces.
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the DHCPv6 client for the pool manager.
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies the Python script to use for the specified Diameter message type in the specified direction.
Multiple diameter command configurations are allowed in the same Python policy.
The no form of this command reverts to the default.
Message type | Application | Direction |
aaa – AA Answer | Nasreq | ingress |
aar – AA Request | Nasreq | egress |
asa – Abort Session Answer | Gx, Gy | egress |
asr – Abort Session Request | Gx, Gy | ingress |
cca – Credit Control Answer | Gx, Gy | ingress |
ccr – Credit Control Request | Gx, Gy | egress |
cea – Capabilities Exchange Answer | Base | ingress |
cer – Capabilities Exchange Request | Base | egress |
dpa – Disconnect Peer Answer | Base | ingress/egress |
dpr – Disconnect Peer Request | Base | ingress/egress |
dwa – Device Watchdog Answer | Base | ingress/egress |
dwr – Device Watchdog Request | Base | ingress/egress |
raa – Re-Authentication Answer | Gx, Gy | egress |
rar – Re-Authentication Request | Gx, Gy | ingress |
All
Commands in this context configure Diameter parameters.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command enables debugging for diameter.
The no form of this command disables debugging.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure dynamic Diameter-based management of transit AA subs for the transit IP policy. This is mutually exclusive to other types of management of transit subs for a given transit IP policy.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command applies the diameter-application-policy to the processing of the host attachment requests.
The no form of this command reverts to the default value.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
Commands in this context create and configure diameter application policy.
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command is used to configure the Diameter NASREQ application policy to use for authentication.
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures the Diameter authentication policy with which the GTP connection is authenticated.
The no form of this command removes the authentication policy. Only new session setups are affected.
no diameter-auth-policy
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command is used to configure the Diameter NASREQ application policy to use for authentication.
The no form of this command reverts to the default value.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command is used to configure the Diameter NASREQ application policy to use for authentication.
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures the Diameter node for this Diameter application policy.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command restricts output to a specific peer.
The no form of this command disables debugging.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command restricts the debug output to messages on a specific peer within the diameter peer policy. Overrides the debug>diam>diam-peer debug command for the specified diameter peer policy. A single peer can be specified per diameter peer policy.
When no peer is specified at the diameter peer policy level, the debug output is restricted to the peer configured at the debug>diam level.
The no form of this command removes the peer from the debug>diam>diam-peer-plcy debug output.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command is the foundation of the legacy Diameter base implementation in the SR OS node. It defines a Diameter client node in the SR OS and within, where the peering connections are defined. Various diameter applications (NASREQ, Gx, and Gy) can reference this policy.
This command applies only to the legacy Diameter base.
The no form of this command removes the Diameter node origin host string and destination realm from the configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command is used by an application (DCCA, Gx, policy-management application, and so on) to reference a base diameter peer policy that the application will use.
The no form of this command reverts to the default.
The diameter-peer-policy command contain a legacy Diameter client node definition in SR OS is referenced by an application (NASREQ, Gx, and Gy). The application will then use this diameter-peer-policy to communicate with external Diameter nodes.
This command applies only to legacy implementations of Diameter base and it is mutually exclusive with the diameter-node command under the same hierarchy.
The no form of this command removes the peer policy name from the configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command restricts the debug output to messages on peers of a specific diameter peer policy. Up to eight diameter peer policies can be specified.
The no form of this command removes the specified diameter peer policy and all debug statement under this policy from the debug configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command enables Diameter redundancy in dual-homed environment. This command is used to synchronize Diameter proxy parameters between two redundant SR OS nodes. The parameters that are synchronized are:
This command is applicable only to legacy implementations of Diameter base in the SR OS.
The no form of this command disables Diameter redundancy.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command compares the newly configured policy against the operational policy.
This command enabled Diff-Serv TE on the node.
When this command is enabled, IS-IS and OSPF will start advertising available bandwidth for each TE class configured under the diffserv-te node. This command will only have effect if the operator has already enabled TE at the IS-IS and/or OSPF routing protocol levels:
config>router>isis>traffic-engineering
and/or:
config>router>ospf>traffic-engineering
IGP will advertise for each RSVP interface in the system the available bandwidth in each TE class in the unreserved bandwidth TE parameter for that class. In addition, IGP will continue to advertise the existing Maximum Reservable Link Bandwidth TE parameter to mean the maximum bandwidth that can be booked on a given interface by all classes. The value advertised is adjusted with the link subscription percentage factor configured in the config>router>rsvp>interface context.
The user configures the following parameters for the operation of Diff-Serv:
When Diff-Serv TE is enabled, the system will automatically enable the Max Allocation Model (MAM) Admission Control Policy. MAM represents the bandwidth constraint model for the admission control of an LSP reservation to a link. This is the only Admission Control Policy supported in this release.
Each CT shares a percentage of the Maximum Reservable Link Bandwidth through the user-configured Bandwidth Constraint (BC) for this CT. The Maximum Reservable Link Bandwidth is the link bandwidth multiplied by the RSVP interface subscription factor.
The sum of all BC values across all CTs will not exceed the Maximum Reservable Link Bandwidth. In other words, the following rule is enforced:
SUM (BCc) =< Max-Reservable-Bandwidth, 0 <= c <= 7
An LSP of class-type CTc, setup priority p, holding priority h (h=<p), and bandwidth B is admitted into a link if the following condition is satisfied:
B <= Unreserved Bandwidth for TE-Class[i]
where TE-Class [i] maps to < CTc , p > in the definition of the TE classes on the node. The bandwidth reservation is effected at the holding priority, that is, in TE-class [j] = <CTc, h>. Thus, the reserved bandwidth for CTc and the unreserved bandwidth for the TE classes using CTc are updated as follows:
Reserved(CTc) = Reserved(CTc) + B
Unreserved TE-Class [j] = BCc - SUM (Reserved(CTc,q)) for 0<= q <= h
Unreserved TE-Class [i] = BCc - SUM (Reserved(CTc,q)) for 0<= q <= p
The same is done to update the unreserved bandwidth for any other TE class making use of the same CTc. These new values are advertised to the rest of the network at the next IGP-TE flooding.
The Russian Doll Model (RDM) LSP admission control policy allows bandwidth sharing across Class Types. It provides a hierarchical model by which the reserved bandwidth of a CT is the sum of the reserved bandwidths of the numerically equal and higher CTs.
The RDM model is defined using the following equations:
SUM (Reserved (CTc)) <= BCb,
where the SUM is across all values of c in the range b <= c <= (MaxCT - 1), and BCb is the bandwidth constraint of CTb.
BC0= Max-Reservable-Bandwidth, so that
SUM (Reserved(CTc)) <= Max-Reservable-Bandwidth,
where the SUM is across all values of c in the range 0 <= c <= (MaxCT - 1).
When Diff-Serv is disabled on the node, this model degenerates into a single default CT internally with eight preemption priorities and a non-configurable BC equal to the Maximum Reservable Link Bandwidth. This would behave exactly like CT0 with eight preemption priorities and BC= Maximum Reservable Link Bandwidth if Diff-Serv was enabled.
The enabling or disabling of Diff-Serv TE on the system requires the RSVP and MPLS protocol be shutdown.
The no form of this command reverts to the default value.
no diffserv-te
All
This command configures the hashing algorithm used to calculate the message digest.
The no form of this command returns the digest-type to none.
no digest-type
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies if a digital coherent optics module is used for this port.
The no form of this command specifies that the optical module used in this port is not a digital coherent optics module.
no digital-coherent-optics
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command displays a list of files and subdirectories in a directory.
Use the file-url with the optional wildcard (*) to reduce the number of files to list.
local-url | [cflash-id/][file-path] up to 200 characters, including cflash-id directory length up to 99 each |
remote-url | [{ftp:// | tftp://}login:pswd@remote-locn/][file-path] |
up to 247 characters | |
directory length up to 99 characters each | |
remote-locn | [hostname | ipv4-address | [ipv6-address]] |
ipv4-address | a.b.c.d |
ipv6-address | x:x:x:x:x:x:x:x[-interface] |
x:x:x:x:x:x:d.d.d.d[-interface] | |
x - [0 to FFFF]H | |
d - [0 to 255]D | |
interface - up to 32 characters, for link local addresses 255 | |
cflash-id | cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B: |
The following output is an example of directory information.
All
This command enables debugging for packet direction.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies if debugging should only include ingress, egress or all messages.
direction both
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures the direction for an IPsec manual SA.
The no form of this command reverts to the default value.
direction bidirectional
All
This command enables debugging for packet direction.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies the data type that indicates the TCP stream direction to apply the keychain.
All
This command is used to steal one bit from the intercept-id in the LI-Shim and use it to indicate the direction of traffic flow for an LI session. Using a direction bit may be used by a LI Mediation Gateway to distinguish between the two directions of traffic flow for an LI session when both directions share a common mirror-dest, intercept-id and session-id. If the direction bit is enabled then the Mirror Header Version (2 bit mhv) in the LI-Shim will be set to binary 01, and the next bit after the mhv is set to 0 for ingress traffic and 1 for egress traffic.
For NAT based LI, ingress means the traffic is arriving at the node from the subscriber host (applies to the 7450 ESS and 7750 SR).
No changes are allowed to the direction-bit configuration once a gateway is configured.
All
This command enables and disables the use of one bit from the interception ID field in the LI-Shim header to be used to indicate the direction of mirrored traffic flow for an LI session. An LI Mediation Gateway can use a direction bit to distinguish between the two directions of traffic flow for an LI session when both directions share a common mirror destination, interception ID, and session ID. If the direction bit is enabled, the Mirror Header Version (2-bit MHV) in the LI-Shim header will be set to binary 01, and the next bit after the MHV is set to 0 for ingress traffic and 1 for egress traffic.
For NAT-based LI, ingress traffic arrives at the node from the subscriber host. No changes are allowed to the direction bit configuration after a gateway is configured.
The no form of this command disables the use of the bit as a direction indicator.
All
When configured, the specified compact flash will not be used by call-trace. The no form of this command enables the compact flash for use by call-trace.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command disables the use of 4-byte ASNs. It can be configured at all 3 level of the hierarchy so it can be specified down to the per peer basis.
If this command is enabled 4-byte ASN support should not be negotiated with the associated remote peer.
The no form of this command resets the behavior to the default which is to enable the use of 4-byte ASN.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command disables the use of 4-byte ASNs. It can be configured at all 3 level of the hierarchy so it can be specified down to the per peer basis.
If this command is enabled 4-byte ASN support should not be negotiated with the associated remote peer(s).
The no form of this command resets the behavior to the default which is to enable the use of 4-byte ASN.
All
This command disables the support of 4-byte ASNs. It can be configured at all three levels of the hierarchy so it can be specified down to the per-peer basis.
If this command is enabled, 4-byte ASN support should not be negotiated with the associated remote peers.
The no form of this command resets the behavior to the default which is to enable the support of 4-byte ASN.
no disable-4byte-asn
All
This command disables MAC address aging across a VPLS service, on a VPLS service SAP or spoke-SDP, or VXLAN instance with static binds. Learned MACs can be aged out if no packets are sourced from the MAC address for a period of time (aging time). In each VPLS service instance, there are independent aging timers for local learned MAC and remote learned MAC entries in the VPLS forwarding database (FDB).
The disable-aging command turns off aging for local and remote learned MAC addresses. When no disable-aging is specified for a VPLS, aging can be disabled for specific SAPs, spoke-SDPs, and VXLAN instances (or any combination) by entering the disable-aging command at the appropriate level.
When the disable-aging command is entered at the VPLS level, the aging state of individual SAPs or SDPs or VXLAN instance is ignored.
The no form of this command enables aging on the VPLS service.
no disable-aging
Except for VXLAN instances, where the disable-aging is the default mode
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
All
This command disables MAC address aging across a service.
The no form of this command enables aging.
no disable-aging
All
This command disables the exchange of capabilities. When command is enabled and after the peering is flapped, any new capabilities are not negotiated and strictly supports IPv4 routing exchanges with that peer.
The no form of this command removes this command from the configuration and restores the normal behavior.
no disable-capability-negotiation
All
This command disables capability negotiation. When the command is enabled and after the peering is flapped, any new capabilities are not negotiated and will strictly support IPv4 routing exchanges with that peer.
The no form of this command removes this command from the configuration and restores the normal behavior.
no disable-capability-negotiation
All
This command disables the reflection of routes by the route reflector to the group or neighbor. This only disables the reflection of routes from other client peers. Routes learned from non-client peers are still reflected to all clients.
The no form re-enables client reflection of routes to all client peers.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command disables the reflection of routes by the route reflector to the group or neighbor. This only disables the reflection of routes from other client peers. Routes learned from non-client peers are still reflected to all clients.
The no form re-enables client reflection of routes.
no disable-client-reflect
All
This command determines whether routes received from neighbors considered to be RR clients are reflected to other clients.
The no form enables client reflection of routes.
no disable-client-reflect
All
This command configures BGP to disable sending communities.
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures BGP to disable sending standard, extended, or large communities to specific peers.
By default, all communities that are attached to a BGP route (any address family) are not stripped from the route when it is advertised to any type of peer: IBGP, EBGP or confed-EBGP.
no disable-communities
All
This command configures BGP to disable sending standard, extended, or large communities to specific peers.
By default, all communities that are attached to a BGP route (any address family) are not stripped from the route when it is advertised to any type of peer: IBGP, EBGP, or confed-EBGP.
no disable-communities
All
This command disables the use of cookies.
The no form of this command enables cookies.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command controls the allocation and use of explicit null MPLS labels with labeled-unicast ipv6 routes.
When this command is enabled (no disable-explicit-null), the following behaviors apply:
When this command is disabled (disable-explicit-null), the following behaviors apply:
Changes in the operational status do not cause the BGP sessions of the base router to reset.
All
This command configures BGP fast external failover.
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures BGP fast external failover.
All
This command configures BGP fast external failover.
no disable-fast-external-failover
All
This command enables graceful shutdown of SSH sessions.
The no form of this command disables graceful shutdown of SSH sessions.
All
This command disables the IGP-LDP synchronization feature on all interfaces participating in the OSPF or IS-IS routing protocol. When this command is executed, IGP immediately advertises the actual value of the link cost for all interfaces which have the IGP-LDP synchronization enabled if the currently advertised cost is different. It will then disable IGP-LDP synchronization for all interfaces. This command does not delete the interface configuration. The no form of this command has to be entered to re-enable IGP-LDP synchronization for this routing protocol.
The no form of this command restores the default settings and re-enables IGP-LDP synchronization on all interfaces participating in the OSPF or IS-IS routing protocol and for which the ldp-sync-timer is configured.
no disable-ldp-sync
All
This command disables the IGP-LDP synchronization feature on all interfaces participating in the OSPF routing protocol. When this command is executed, IGP immediately advertises the actual value of the link cost for all interfaces which have the IGP-LDP synchronization enabled if the currently advertised cost is different. It will then disable IGP-LDP synchronization for all interfaces. This command does not delete the interface configuration. The no form of this command has to be entered to re-enable IGP-LDP synchronization for this routing protocol.
The no form of this command restores the default settings and re-enables IGP-LDP synchronization on all interfaces participating in the OSPF or IS-IS routing protocol and for which the ldp-sync-timer is configured.
no disable-ldp-sync
All
This command disables learning of new MAC addresses in the VPLS forwarding database (FDB) for the service instance, SAP instance, spoke-SDP instance, or VXLAN instance.
When disable-learning is enabled, new source MAC addresses are not entered in the VPLS service forwarding database. This applies for both local and remote MAC addresses.
When no disable-learning is specified for a VPLS on a 7450 ESS, it is possible to disable learning for specific SAPs and/or spoke SDPs by entering the disable-learning command at the appropriate level.
When disable-learning is disabled, new source MAC addresses are learned and entered into the VPLS forwarding database.
This parameter is mainly used in conjunction with the discard-unknown command.
The no form of this command enables learning of MAC addresses.
no disable-learning
Normal MAC learning is enabled. The default mode for VXLAN instances is disable-learning.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
All
This command enables learning of new MAC addresses.
This parameter is mainly used in conjunction with the discard-unknown command.
The no form of this command enables learning of MAC addresses.
no disable-learning (Normal MAC learning is enabled)
All
This command disables the installation of all IPv4, label-ipv4, IPv6 and label-ipv6 routes into the route table and tunnel table associated with the BGP instance.
Configuring this command prevents the advertisement of all IPv4, label-ipv4, IPv6 and label-ipv6 routes if there is a change of the BGP next-hop to one of the router’s own addresses. Typically, this is only useful on a router that is a control-plane route reflector (not in the datapath).
The no form of the command enables the installation of all IPv4, label-ipv4, IPv6 and label-ipv6 routes into the route table and tunnel table associated with the BGP instance.
no disable-route-table-install
All
This command specifies that BGP routes (IPv4, IPv6, label-ipv4, label-ipv6) matching the policy entry (or, depending on the context, the policy’s default-action) should not be installed in the route table, tunnel table (in the case of label-ipv4 routes), or IP FIB table.
This policy action has an effect only in BGP peer import policies. This policy action does not prevent the matched routes from contributing toward aggregate routes and does not prevent the matched routes from being advertised, even if next-hop-self has been applied. This means that incorrect use of this feature can blackhole traffic.
Marking label-ipv4 routes with this action does not prevent label-swap (ILM) entries from being programmed when such routes are re-advertised with a new BGP next-hop and label.
The no form of this command provides the default behavior of installing routes that are selected as the best path, ECMP path or backup path, depending on the circumstances.
no disable-route-table-install
All
This command disables router alert checking for IGMP/MLD messages received on this interface.
The no form of this command enables router alert checking.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
All
This command enables router alert checking for MLD messages received on this interface.
The no form of this command disables router alert checking.
All
This command disables router alert checking for IGMP messages received on this interface.
The no form of this command reverts to the default value.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command disables the IGMP router alert check option.
The no form of this command enables the router alert check.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command disables router alert checking for MLD messages received on this interface.
The no form of this command enables router alert checking.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command disables the IGMP or MLD router alert check option.
The no form of this command enables the router alert check.
no disable-router-alert-check
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
All
This command disables the IGMP router alert check option.
The no form of this command enables the router alert check.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
All
This command disables router alert checking for MLD messages received on this interface.
The no form of this command enables the router alert checking.
All
This command specifies whether the system level selective FIB setting is overridden on this instance.
The no form of this command enables the selective FIB.
no disable-selective-fib
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command disables the selective FIB.
The no form of this command enables the selective FIB.
no disable-selective-fib
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command disables the ISID-based C-MAC flush indication when the corresponding SAP or spoke-SDP enters the operationally down state.
If the send-bvpls-evpn-flush is properly enabled, the no version of the command enables B-MAC/ISID route updates to be sent when the SAP or spoke-SDP is operationally down.
no disable-send-bvpls-evpn-flush
All
When this command is configured, the node suspends SHCV for the hosts defined with this ANCP policy until the access node sends a port-up message. When the hold-time parameter is used, the node suspends SHCV for the period of time defined. If the hold-time parameter is not defined the node will suspend SHCV until a port-up message is received.
If the optional alarm flag is used, the node sends a SHCV alarm before suspending.
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
no disable-soft-reset-extension
All
This command disables a subscriber RADIUS accounting session from sticking with a single server under normal working conditions. If a direct algorithm is used, all subscriber RADIUS sessions will go directly to the server with the lowest configured index. If a failure occurs, a new in-service server with the next lowest index is used. When the original server recovers, if stickiness is not disabled, all existing sessions will continue to use the new server. This command disables stickiness, and as a result, the recovered original RADIUS server will again service every subscriber. If a round-robin algorithm is used and stickiness is not disabled, an accounting session for a particular subscriber (or host, depending on the accounting mode) will stay with the same server. This command removes the stickiness and all subscriber accounting messages will go through the list of servers in a round-robin manner.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command disables support for SDP triggered automatic generated targeted sessions. Targeted sessions are LDP sessions between non-directly connected peers. The discovery messages for an indirect LDP session are addressed to the specified peer and not to the multicast address.
The no form of this command enables the set up of any targeted sessions.
no disable-targeted-session
All
This optional command determines if the associated static route can be resolved via an IGP next-hop in the RTM if no tunnel next-hops are found in TTM.
When configured, the associated static route will not be resolved to an available IGP route in the RTM.
The no form of this command returns the behavior to the default, which allows the static route to be resolved via an IGP route in the RTM if no tunnel next-hop can be found in the TTM.
no disallow-igp
All
This command deletes the entire contents of the candidate configuration and exits the edit-cfg mode. Undo cannot be used to recover a candidate that has been discarded with candidate discard.
This command enables the NETCONF discard-changes operation.
The no form of this command disables the operation.
no discard-changes
![]() | Note: The operation is enabled by default in the built-in system-generated administrative profile. |
All
This command discards received pause frames. Pause frames are used for local link flow control.
The no form of this command processes pause frames upon reception and the transmit side of the receiving port pauses in its transmissions.
no discard-rx-pause-frames
All
By default, packets with unknown destination MAC addresses are flooded. If discard-unknown is enabled at the VPLS level, packets with unknown destination MAC address will be dropped instead (even when configured FDB size limits for VPLS or SAP are not yet reached).
The no form of this command allows flooding of packets with unknown destination MAC addresses in the VPLS.
All
When this command is enabled, packets received on a SAP, a spoke-SDP, or a static VXLAN instance with an unknown source MAC address will be dropped only if the maximum number of MAC addresses for that SAP or spoke-SDP (see max-nbr-mac-addr [config>service>vpls>sap max-nbr-mac-addr, config>service>vpls>spoke-sdp max-nbr-mac-addr]) has been reached. If max-nbr-mac-addr has not been set for the SAP or spoke-SDP, enabling discard-unknown-source has no effect.
When disabled, the packets are forwarded based on the destination MAC addresses.
The no form of this command causes packets with an unknown source MAC addresses to be forwarded by destination MAC addresses in VPLS.
no discard-unknown-source
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
All
When this command is enabled, packets received with an unknown source MAC address will be dropped only if the maximum number of MAC addresses have been reached.
When disabled, the packets are forwarded based on the destination MAC addresses.
The no form of this command causes packets with an unknown source MAC addresses to be forwarded by destination MAC addresses.
no discard-unknown-source
All
This command disconnects a user from a session.
Issuing the disconnect command without any parameters will disconnect the session in which the command was executed.
If any of the session type options (for example, console, bluetooth, telnet, FTP, SSH) are specified, then only the respective sessions are affected.
If no session type options are specified, then all sessions from the IP address or from the specified user are disconnected.
Any task that the user is executing is terminated. FTP files accessed by the user will not be removed.
A major severity security log event is created specifying what was terminated and by whom.
![]() | Note: IPv6 is supported on the 7750 SR and 7950 XRS. |
ipv4-address | a.b.c.d |
ipv6-address | x:x:x:x:x:x:x:x (eight 16-bit pieces) |
x:x:x:x:x:x:d.d.d.d | |
x - [0 to FFFF]H | |
d - [0 to 255]D |
All
This command configures the default time to delay DHCP Discover messages. The delay is applied to all DHCP Discover messages for which no per DHCP server or per client MAC delay is configured.
The no form of this command removes the delay.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures the amount of time to delay DHCP Discover messages from odd or even source MAC addresses.
The no form of this command removes the delay.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures the amount of time to delay DHCP Discover messages relayed to the server.
The no form of this command removes the delay.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command enables debugging for specific PPP discovery packets.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command, limits debugging only to the specified messages in the discovery phase.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This is the top level of the hierarchy containing various discovery parameters that allow the operator to control certain aspects of the negotiation process as well as what action to take when there is a mismatch in peer capabilities.
All
This command specifies the time interval of tunnel-group stays in the Discovery state. Interval-1 is used as discovery-interval when a new tunnel-group is added to multi-chassis redundancy (mp-ipsec); interval-2 is used as discovery-interval when the system boots up, it is optional, when it is not specified, the interval-1 will be used.
discovery-interval 300 boot 300
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies the S-BFD discriminator.
The no form of this command removes the discriminator.
All
This command specifies the seamless BFD reflector discriminator for the remote peer node in the mapping table used by seamless BFD sessions initiated on the router.
The no form of this command removes the discriminator.
All
This command configures the value conveyed in the P-flag of the DISJOINTNESS-CONFIGURATION TLV. When enabled, it indicates that this LSP path is the reference path for the disjoint set of paths. The PCE must first compute the path of this LSP and then apply the requested disjointness type to compute the path of all other paths in the same diversity association ID.
The no form of this command sets the P-flag to false.
P-flag to false
All
This command configures the disjointness type for the association group.
The no form of this command reverts to the default value.
disjointness-type loose
All
This command configures the residual chromatic dispersion to be compensated when the coherent receiver is operating in manual dispersion control mode.
0
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command displays the content of an input file in plain text.
![]() | Note: When displaying the key file content, only the key size and type are displayed. |
The following list summarizes the formats supported by this command:
url-string | <local-url> [up to 99 characters] |
local-url | <cflash-id>/<file-path> |
cflash-id | cf1: | cf2: | cf3: |
All
This command displays the system’s running configuration.
By default, only non-default settings are displayed.
Specifying the detail option displays all default and non-default configuration parameters.
All
This command displays existing IKE-SA or CHILD-SA keys..
![]() | Note: This command does not work if config>ipsec>no show-ipsec-keys or no max-history-{esp|ike}-key-records is configured under corresponding ipsec-gw or ipsec-tunnel. |
<ip-address> | ip-address | a.b.c.d |
ipv6-address | x:x:x:x:x:x:x:x | |
x:x:x:x:x:x:d.d.d.d | ||
x - [0 to FFFF]H | ||
d - [0 to 255]D |
The following outputs are examples of the admin ipsec display-key command.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command assigns a Distributed CPU Protection (DCP) policy to an MSAP policy. The DCP policy is automatically assigned to MSAPs created with this policy. A non-existent DCP policy can be assigned to an msap-policy because an MSAP policy is similar to a template that is applied in the MSAP creation. The DCP policy is validated at the time that the MSAP is created, and the MSAP creation is blocked (and an appropriate log event created) if the DCP policy does not exist.
![]() | Note: For other types of objects (for example, normal non-MSAP SAPs and network interfaces) the DCP policy must exist before it can be assigned to the SAP. |
The no form of this command removes the policy name from the configuration.
If no dist-cpu-protection policy is assigned to an MSAP policy, then the default access DCP policy (_default-access-policy) is used.
If no DCP functionality is required on the MSAP policy, then an empty DCP policy can be created and explicitly assigned to the MSAP policy.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command assigns a DCP policy to a SAP template. The policy is automatically assigned to SAPs that are autocreated with this SAP template. The dist-cpu-protection policy must exit before it is assigned to a SAP template.
The no form of this command removes the policy name from the configuration.
If a DCP policy is not assigned to an SAP template, the default access DCP policy (_defaultaccess-policy) is used.
If no DCP functionality is required on the autocreated SAPs, an empty DCP policy can be created and explicitly assigned to the SAP template.
no dist-cpu-protection
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid existing DCP policy can be assigned to a SAP or a network interface (this rule does not apply to templates, such as an msap-policy template).
If no dist-cpu-protection policy is assigned to a SAP, then the default access DCP policy (_default-access-policy) is used.
If no DCP functionality is required on the SAP, then an empty DCP policy can be created and explicitly assigned to the SAP.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e, 7950 XRS
All
This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid existing DCP policy can be assigned to a SAP or a network interface (this rule does not apply to templates, such as an msap-policy template).
If no dist-cpu-protection policy is assigned to a SAP, then the default access DCP policy (_default-access-policy) is used. If no DCP functionality is required on the SAP, then an empty DCP policy can be created and explicitly assigned to the SAP.
All
This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid DCP policy can be assigned to a SAP or a network interface. This rule does not apply to templates such as an msap-policy.
If no dist-cpu-protection policy is assigned to an SAP, then the default access DCP policy (default-access-policy) is used. If no DCP functionality is required on the SAP, then an empty DCP policy can be created and explicitly assigned to the SAP policy.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
All
This command assigns a Distributed CPU Protection (DCP) policy to the network interface. Only a valid created DCP policy can be assigned to a network interface (this rule does not apply to templates such as an msap-policy).
If no dist-cpu-protection policy is assigned to the VPRN network interface, then the default network DCP policy (_default-network-policy) is used.
If no DCP functionality is required on the VPRN network interface then an empty DCP policy can be created and explicitly assigned to the VPRN network interface.
All
This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid created DCP policy can be assigned to a SAP or a network interface (This rule does not apply to templates such as an msap-policy).
If no dist-cpu-protection policy is assigned to an SAP policy, then the default access DCP policy (default-access-policy) is used. If no DCP functionality is required on the SAP policy, then an empty DCP policy can be created and explicitly assigned to the SAP policy.
All
This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid created DCP policy can be assigned to a SAP or a network interface (note that this rule does not apply to templates such as an msap-policy).
no dist-cpu-protection
All
Commands in this context configure the Distributed CPU Protection (DCP) feature.
All
This command enables sharing of rates when the port on which this port-scheduler-policy is configured is part of a LAG configured in distribute mode.
When enabled, the absolute rate values configured as part of the max-rate, PIR/CIR group rates and PIR/CIR level rates are shared across the member ports of the LAG when configured in distribute mode.
This command does not have any effect when the port on which this port-scheduler-policy is configured is part of a LAG in link or port-fair mode. Similarly, when rates are configured as a percent-rate, this parameter is ignored.
All
The no form of this command removes the distinguisher association.
no distinguisher
All
This command configures an SR Policy distinguisher as a route policy match criterion. This match criterion is only used in import policies.
The no form of this command removes the distinguisher ID match criterion from the configuration.
All
Commands in this context configure Distributed Subscriber Management (DSM) for soft GRE group interface and for ranges of IEEE 802.1q VLAN tags in soft GRE group interfaces.
7750 SR, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure profiles, templates and policies that can be applied to DSM subscribers.
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the WLAN gateway distributed subscriber management.
7750 SR, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure distributed-sub-mgmt configuration per vlan-range. This also includes vlan-range default, which makes this configuration applicable to the wlan-gw group-interface.
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command creates a named diversity association from which the parameters for the specified diversity association are configured.
The no form of the command deletes the specified diversity association.
All
This command binds the LSP to a named diversity association. The diversity association must exist under the PCC. Up to five diversity associations can be configured per LSP.
The no form of the command removes the LSP binding from the specified diversity association.
All
This command configures the diversity type for the association group. This command is mandatory. If the command is not configured, the system does not validate the association configuration.
The no form of the command reverts to the default value.
no diversity-type
All
This command enables the redirection of traffic to AA ISA for the system-wide forwarding classes diverted to application assurance (divert-fc) for AA subscribers using this application profile.
The no form of this command stops redirect of traffic to AA ISAs for the AA subscribers using this application profile.
no divert
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command selects a forwarding class in the system to be diverted to an application assurance engine for this application assurance group. Only traffic to/from subscribers with application assurance enabled is diverted.
To divert multiple forwarding classes, the command needs to be executed multiple times specifying each forwarding class to be diverted at a time.
The no form of this command stops diverting of the traffic to an application assurance engine for this application assurance group.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command assigns an identifier to the DM test and creates the individual test.
The no form of this command removes the DM test function from the OAM-PM session.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command defines the test ID to be assigned to the delay test and creates the container to allow the individual test parameters to be configured.
The no form of this command removes the DMM test function from the PM Session.
All
This command configures the IPv6 prefix of the BR (dmr-prefix), which is used as a default MAP rule (route) in the CEs. Each MAP domain in the VSR has a unique dmr-prefix.
VSR
This command defines context for destination NAT (DNAT) specific configuration under the nat-policy.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure the dnat-only parameters.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command defines the DNS address to be assigned to the far-end of the associated PPP or MLPPP link through IPCP extensions. This command is only applicable if the associated SAP or port is a PPP or MLPPP interface with an IPCP encapsulation.
The no form of this command deletes either the specified primary DNS address, secondary DNS address or both addresses from the IPCP extension peer-ip-address configuration.
no dns
All
Commands in this context configure domain name servers.
The no form of this command disables DNS for this service.
All
This command defines the dns address(es) to be assigned to the far-end of the associated PPP/MLPPP link via IPCP extensions.
This command is only applicable if the associated SAP/port is a PPP/MLPPP interface with an IPCP encapsulation.
The no form of this command deletes either the specified primary DNS address, secondary DNS address or both addresses from the IPCP extension peer-ip-address configuration.
no dns
All
This command performs DNS name resolution. If ipv4-a-record is specified, DNS target addresses are queried for A records only. If ipv6-aaaa-record is specified, AAAA records are queried first, and if a successful response is not received, the DNS server is queried for A records (applies to the 7750 SR and 7950 XRS).
If the interval is set to 1 second, and the timeout value is set to 10 seconds, then the maximum time between message requests is 10 seconds and the minimum is 1 second. This depends upon the receipt of a message response corresponding to the outstanding message request.
ipv4-address: | a.b.c.d | |
ipv6-address: | x:x:x:x:x:x:x:x (eight 16-bit pieces) | |
x:x:x:x:x:x:d.d.d.d | ||
x: | 0 to FFFF]H | |
d: | [0 to 255]D |
router-name | Base | Specifies a base routing instance |
management | Specifies a management routing instance | |
_Base_and_management | Specifies a base routing instance and a management routing instance: if no response is received from the base, a management routing instance is used. | |
vprn-svc-name | Specifies a service name, up to 64 characters |
All
This command configures the DNS.
dns
All
This command configures DNS settings.
All
This command configures the domain name used when performing DNS address resolution. This is a required parameter if DNS address resolution is required. Only a single domain name can be configured. If multiple domain statements are configured, the last one encountered is used.
The no form of this command removes the domain name from the configuration.
no dns-domain
All
This command configures a DNS IP cache used to snoop DNS requests generated by subscribers to populate a cache of IP addresses matching a specified list of domain names. In the context of URL content charging strengthening, it is also mandatory to specify a list of trusted DNS servers to populate the DNS IP cache.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures a DNS IP cache using session filter DST IP match criteria. It is typically combine with an allow action in the context of captive-redirect.
Commands in this context configure match parameters in the DNS IP cache.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure IPv6 DNS options for SLAAC hosts.
The no form of this command returns the command to the default setting.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure DNS information for Stateless Address Auto-Configuration (SLAAC) hosts.
When specified at the router-advertisement level in the routing context, this command allows configuration of service-wide parameters. These can then be inherited at the interface level by specifying the config>service>vprn>router-advert>if>dns-options>include-dns command.
The no form of this command disables configuration of DNS information for Stateless Address Auto-Configuration (SLAAC) hosts.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
All
Commands in this context configure DNS information for Stateless Address Auto-Configuration (SLAAC) hosts. When specified at the router-advertisement level in the routing context, this command allows configuration of service-wide parameters. These can then be inherited at the interface level by specifying the config>router>router-advert>if>dns-options>include-dns command.
The no form of this command disables configuration of DNS information for Stateless Address Auto-Configuration (SLAAC) hosts.
All
This command configures the IPv4 address of the DNS server.
The no form of this command removes the IPv4 address of the DNS server from the configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures IPv6 DNS server addresses that can be used for name resolution.
The no form of this command removes the IPv6 address of the DNS server from the configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the DNS server that is used to resolve the web service host name.
The no form of this command removes the DNS server configuration.
no dns-server
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures system Domain Name System Security Extensions (DNSSEC) settings.
All
This command configures the Do Not Fragment (DF) bit in the IPv4 header of the TWAMP Light test packet in order to prevent packet fragmentation. This is only applicable to IPv4. IPv6 does not include the bit as part of the specification. This parameter is ignored but not blocked when the address is IPv6.
The no form of this command allows packet fragmentation.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command enables the use of the LDP Downstream-on-Demand (DoD) label distribution procedures.
When this option is enabled, LDP will set the A-bit in the Label Initialization message when the LDP session to the peer is established. When both peers set the A-bit, they will both use the DoD label distribution method over the LDP session (RFC 5036).
This feature can only be enabled on a link-level LDP session and therefore will apply to prefix labels only, not service labels.
As soon as the link LDP session comes up, the router will send a label request to its DoD peer for the FEC prefix corresponding to the peer’s LSR-id. The DoD peer LSR-id is found in the basic Hello discovery messages the peer used to establish the Hello adjacency with the router.
Similarly if the router and the directly attached DoD peer entered into extended discovery and established a targeted LDP session, the router will immediately send a label request for the FEC prefix corresponding to the peer’s LSR-id found in the extended discovery messages.
However, the router will not advertise any <FEC, label> bindings, including the FEC of its own LSR-id, unless the DoD peer requested it using a Label Request Message.
When the DoD peer sends a label request for any FEC prefix, the router will reply with a <FEC, label> binding for that prefix if the FEC was already activated on the router. If not, the router replies with a notification message containing the status code of “no route.” The router will not attempt in the latter case to send a label request to the next-hop for the FEC prefix when the LDP session to this next-hop uses the DoD label distribution mode. Hence the reference to single-hop LDP DoD procedures.
As soon as the link LDP session comes up, the router will send a label request to its DoD peer for the FEC prefix corresponding to the peer’s LSR-id. The DoD peer LSR-id is found in the basic Hello discovery messages the peer used to establish the Hello adjacency with the router.
Similarly if the router and the directly attached DoD peer entered into extended discovery and established a targeted LDP session, the router immediately sends a label request for the FEC prefix corresponding to the peer’s LSR-id found in the extended discovery messages. Peer address has to be the peer LSR-ID address.
The no form of this command disables the DoD label distribution with an LDP neighbor.
no dod-label-distribution
All
This command configures a vsd-domain that can be associated to a VPLS or VPRN service.
All
This command configures a domain expression to populate the DNS IP cache. Up to 32 domains can be configured.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures a domain to contain firewall parameters. Each domain must be assigned to a NAT group where firewall functionality will be performed.
The no form of the command removes the domain.
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies a router and domain to which the firewall policy will be applied. All associated traffic must be part of the prefixes specified by this domain.
The no form of the command removes the domain association from the firewall policy.
no domain
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures Connectivity Fault Management domain parameters.
The no form of the command removes the MD index parameters from the configuration.
dns: | Specifies the DNS name format. |
mac: | X:X:X:X:X:X-u |
X: [0..FF]h | |
u: [0..65535]d | |
none: | Specifies a Y.1731 domain format and the only format allowed to execute Y.1731 specific functions. |
string | Specifies an ASCII string. |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command configures the PTP domain.
![]() | Note: |
domain 0 — profile ieee1588-2008
domain 4 — profile g8265dot1-2010
domain 24 — profile g8275dot1-2014
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command configures domain information. This command is mutually exclusive to the tunnel-group command.
The no form of this command removes the multi-chassis IPsec domain value.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies the domain ID that identifies the network from which a BGP route was received before that route is exported to a different neighbor. The domain ID is part of a domain, represented as domain-id:isf_safi_type in the D-PATH attribute, as described in draft-ietf-bess-evpn-ipvpn-interworking. The D-PATH attribute is modified by gateway routers, where a gateway is defined as a PE where a VPRN is instantiated, and that VPRN advertises or receives routes from multiple BGP owners (for example, EVPN-IFL and BGP-IPVPN) or multiple instances of the same owner (for example, VPRN with two BGP-IPVPN instances).
In the following example, consider that a gateway receives prefix P in an EVPN-IFL instance with the following D-PATH from neighbor N:
Seg Len=1 / 65000:1:128
If the router imports the route in VPRN-1, BGP-EVPN SRv6 instance with domain 65000:2, it readvertises it to its BGP-IPVPN MPLS instance as follows:
Seg Len=2 / 65000:2:70 / 65000:1:128
That is, the gateway prepends the local domain ID and family to the D-PATH before readvertising the route into a different instance.
The D-PATH attribute is used on gateways to detect loops (for received routes where the D-PATH contains a local domain ID) and to make BGP best-path selection decisions based on the D-PATH length (shorter D-PATH is preferred).
The no form of this command removes the configured domain ID.
no domain-id
4byte-GlobalAdminValue:2byte-LocalAdminValue | ||
4byte-GlobalAdminValue: | 0 to 4294967295 | |
2byte-LocalAdminValue | 0 to 65535 |
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
All
This command configures the default domain for a DHCP client that the router uses to complete unqualified host names (without a dotted-decimal domain name).
The no form of this command removes the name from the configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command explicitly sets the forwarding class or subclass or enqueuing priority when a packet is marked with a dot1p-priority specified. Adding a dot1p rule on the policy forces packets that match the dot1p-priority specified to override the forwarding class and enqueuing priority based on the parameters included in the dot1p rule. When the forwarding class is not specified in the rule, a matching packet preserves (or inherits) the existing forwarding class derived from earlier matches in the classification hierarchy. When the enqueuing priority is not specified in the rule, a matching packet preserves (or inherits) the existing enqueuing priority derived from earlier matches in the classification hierarchy.
The dot1p-priority is derived from the most significant three bits in the IEEE 802.1q or IEEE 802.1p header. The three dot1p bits define 8 Class-of-Service (CoS) values commonly used to map packets to per-hop QoS behavior.
The no form of this command removes the explicit dot1p classification rule from the SAP ingress policy. Removing the rule on the policy immediately removes the rule on all ingress SAPs using the policy.
A maximum of eight dot1p rules are allowed on a single policy.
All
The IEEE 802.1p value to be used as the match criterion.
Use the no form of this command to remove the dot1p value as the match criterion.
no dot1p
Format Style | Format Syntax | Example |
Decimal | D | 4 |
Hexadecimal | 0xH | 0x4 |
Binary | 0bBBB | 0b100 |
To select a range from 4 up to 7, specify p-value of 4 and a mask of 0b100 for value and mask.
All
This command defines a specific dot1p value that must be matched to perform the associated reclassification actions. If an egress packet on the SAP matches the specified dot1p value, the forwarding class or profile may be overridden. By default, the forwarding class and profile of the packet is derived from ingress classification and profiling functions.
The dot1p priority is derived from the most significant three bits in the IEEE 802.1q or IEEE 802.1p header. The three dot1p bits define 8 Class-of-Service (CoS) values commonly used to map packets to per-hop QoS behavior.
The reclassification actions from a dot1p reclassification rule may be overridden by a DSCP, IP precedence, or IP flow matching event.
The fc keyword is optional. When specified, the egress classification rule will overwrite the forwarding class derived from ingress. The new forwarding class is used for egress remarking and queue mapping decisions. If a DSCP, IP precedence, IPv6 criteria, or IP criteria match occurs after the dot1p match, the new forwarding class may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new FC, the FC from the dot1p match will be used.
The profile keyword is optional. When specified, the egress classification rule will overwrite the profile of the packet derived from ingress. The new profile value is used for egress remarking and queue congestion behavior. If a DSCP, IP precedence, IPv6 criteria, or IP criteria match occurs after the dot1p match, the new profile may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new profile, the profile from the dot1p match will be used.
The no form of this command removes the reclassification rule from the SAP egress QoS policy.
A maximum of eight dot1p rules are allowed on a single policy.
All
This command explicitly defines the egress IEEE 802.1p (dot1p) bits marking for fc-name. When the marking is set, all packets of fc-name that have either an IEEE 802.1q or IEEE 802.1p encapsulation use the explicitly defined dot1p-value. If the egress packets for fc-name are not IEEE 802.1q or IEEE 802.1p encapsulated, the dot1p command has no effect.
The optional in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value] parameters added to the existing dot1p command adds the capability to mark on an egress SAP the in, out, and exceed-profile status via a certain dot1p combination, similarly with the DE options. All inplus-profile traffic is marked with the same value as in-profile traffic.
When the in-profile keyword is added, the out-profile keyword must be specified; however, exceed-profile is optional. If the optional exceed-profile dot1p-value is not included, any exceed-profile traffic will be marked with the same dot1p value as configured for the out-of-profile traffic.
The command with the additional structure may be used on the SAP when the internal in, out, and exceed-profile status needs to be communicated to an access network or customer device that does not support the DE bit.
When these commands are used, the DE bit or the equivalent field is left unchanged by the egress processing if a tag exists. If a new tag is added, the related DE bit is set to 0.
When the previous command (dot1p dot1p-value) is used without the new structure, it means that the dot1p value is used for the entire forwarding class, as it did before. The two versions of the command are mutually exclusive.
The in-profile or out-of-profile/exceed-profile status may be indicated via the DE bit setting if the de-mark command is used. The DE value used for exceed-profile is the same as that used for out-of-profile.
In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the dot1p bits for both the BVID and ITAG.
The commands dot1p-inner and dot1p-outer take precedence over the dot1p command if both are specified in the same policy.
The no form of this command sets the IEEE 802.1p or IEEE 802.1q priority bits to 0.
no dot1p
All
This command explicitly sets the forwarding class or enqueuing priority and profile of the packet when a packet is marked with a dot1p-priority specified. Adding a dot1p rule on the policy forces packets that match the dot1p-priority specified to override and be assigned to the forwarding class and enqueuing priority and profile of the packet, based on the parameters included in the dot1p rule. When the forwarding class is not specified in the rule, a matching packet preserves (or inherits) the existing forwarding class derived from earlier matches in the classification hierarchy. When the enqueuing priority is not specified in the rule, a matching packet preserves (or inherits) the existing enqueuing priority derived from earlier matches in the classification hierarchy.
The dot1p-priority is derived from the most significant three bits in the IEEE 802.1q or IEEE 802.1p header. The three dot1p bits define 8 Class-of-Service (CoS) values commonly used to map packets to per-hop Quality of Service (QoS) behavior.
The no form of this command removes the explicit dot1p classification rule from the policy. Removing the rule on the policy immediately removes the rule on all ingress SAPs using the policy.
A maximum of eight dot1p rules are allowed on a single policy.
All
This command is used whenever the dot1p bits are set to a common value regardless of the internal profile of the packets. Although it is not mandatory, this command should be used in combination with the de-mark command to enable the marking of the DE bit according to the internal profile of the packet.
This command acts as a shortcut for configuring the two existing commands with the same dot1p priority.
The dot1p dot1p-priority command is saved in the configuration as dot1p-in-profile dot1p-priority and dot1p-out-profile dot1p-priority. The inplus-profile traffic is marked with the same value as in-profile traffic. The exceed-profile traffic is marked with the same value as out-of-profile traffic.
All
Configures an IEEE 802.1p value or range to be used as a MAC filter match criterion.
When a frame is missing the 802.1p bits, specifying an dot1p match criterion will fail for the frame and result in a non-match for the MAC filter entry.
The no form of the command removes the criterion from the match entry.
Egress dot1p value matching will only match if the customer payload contains the 802.1p bits. For example, if a packet ingresses on a null encapsulated SAP and the customer packet is IEEE 802.1Q or 802.1p tagged, the 802.1p bits will be present for a match evaluation. On the other hand, if a customer tagged frame is received on a dot1p encapsulated SAP, the tag will be stripped on ingress and there will be no 802.1p bits for a MAC filter match evaluation; in this case, any filter entry with a dot1p match criterion specified will fail.
no dot1p
Format Style | Format Syntax | Example |
Decimal | D | 4 |
Hexadecimal | 0xH | 0x4 |
Binary | 0bBBB | 0b100 |
To select a range from 4 up to 7 specify dot1p-value of 4 and a dot1p-mask of 0b100 for value and mask.
All
This command configures Dot1p match conditions.
Format Style | Format Syntax | Example |
Decimal | D | 4 |
Hexadecimal | 0xH | 0x4 |
Binary | 0bBBB | 0b100 |
All
This command specifies values of the outer and inner dot1p bits for the VLAN when dot1q or qinq encapsulation is used. This field is not exposed to egress QoS policies.
The no form of this command reverts to the default value.
dot1p 7
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command specifies dot1p in-profile mappings. The inplus-profile traffic is marked with the same value as in-profile traffic.
The no form of this command resets the configuration to the default in-profile dot1p-priority setting for policy-id 1.
A maximum of eight dot1p rules are allowed on a single policy.
All
This command explicitly defines the egress inner VLAN tag IEEE 802.1p (dot1p) bits marking for fc-name. When the marking is set, all packets of fc-name that have either an inner IEEE 802.1q or IEEE 802.1p encapsulation on a qinq SAP will use the explicitly defined dot1p-value. If the egress packets for fc-name are not IEEE 802.1q or IEEE 802.1p qinq encapsulated, this command has no effect.
The optional in-profile | dot1p-value out-profile dot1p-value parameters on the dot1p-inner command add the capability to mark the in-profile and out-of-profile status on an egress qinq SAP. The command with the additional parameters may be used on the SAP when the internal in-profile and out-of-profile status needs to be communicated to an access network or customer device that does not support the DE bit. When the in-profile keyword is added, the rest of the structure must be specified. All inplus-profile traffic is marked with the same value as in-profile traffic and all exceed-profile traffic is marked with the same value as out-of-profile traffic.
When these commands are used, the DE bit or the equivalent field is left unchanged by the egress processing if an inner tag exists. If a new inner tag is added, the related DE bit is set to 0. The inplus/in or out/exceed-profile status may be indicated via the setting of the DE bit setting if the de-mark(-inner) command is used.
The two versions of the command (with and without parameters) are mutually exclusive.
This command takes precedence over the dot1p command if both are specified in the same policy, and over the default action where the marking is taken from a packet received at ingress.
The configuration of qinq-mark-top-only under the SAP egress takes precedence over the use of the dot1p-inner in the policy; that is, the inner VLAN tag is not remarked when qinq-mark-top-only is configured (the marking used for the inner VLAN tag is based on the current default, which is governed by the marking of the packet received at the ingress to the system).
The no form of the command sets the inner IEEE 802.1p or IEEE 802.1q priority bits to 0.
Remarking the inner dot1p is not supported based on the profile result of egress policing.
no dot1p-inner
All
This command specifies dot1p out-of-profile mappings.
The exceed-profile traffic is marked with the same value as out-of-profile traffic.
The no form of this command resets the configuration to the default out-profile dot1p-priority setting for policy-id 1.
A maximum of eight dot1p rules are allowed on a single policy.
All
This command explicitly defines the egress outer or single VLAN tag IEEE 802.1p (dot1p) bits marking for fc-name. When the marking is set, all packets of fc-name that have either an outer or single IEEE 802.1q or IEEE 802.1p encapsulation on a qinq or a dot1p SAP, respectively, will use the explicitly defined dot1p-value. If the egress packets for fc-name are not IEEE 802.1q or IEEE 802.1p encapsulated, this command has no effect.
The optional in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value] parameters on the dot1p-outer command add the capability to mark the in, out, and exceed-profile status on an egress qinq or dot1p SAP. The command with the additional parameters may be used on the SAP when the internal in, out, and exceed-profile status needs to be communicated to an access network or customer device that does not support the DE bit.
When the in-profile keyword is added, the out-profile keyword must be specified; however, exceed-profile is optional. If the optional exceed-profile dot1p-value is not included, any exceed-profile traffic will be marked with the same dot1p value as configured for the out-of-profile traffic. All inplus-profile traffic is marked with the same value as in-profile traffic.
When these commands are used, the DE bit or the equivalent field is left unchanged by the egress processing if a single or outer tag exists. If a new tag is added, the related DE bit is set to 0. The in, out, or exceed-profile status may be indicated via the setting of the DE bit setting if the de-mark(-outer) command is used. The DE value used for inplus is the same as that used for in-profile and the one used for exceed-profile is the same as that used for out of profile.
In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the dot1p bits for both the BVID and ITAG.
The two versions of the command (with and without parameters) are mutually exclusive.
This command takes precedence over the dot1p command if both are specified in the same policy, and over the default action where the marking is taken from a packet received at ingress.
The no form of the command sets the IEEE 802.1p or IEEE 802.1q priority bits to 0.
no dot1p-outer
All
This command creates the dot1q context for q-tag additions to the port or LAG virtual ES.
All
This command creates a Dot1Q header and enables the context to define the associated parameters.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command specifies the Ethertype expected when the port's encapsulation type is dot1q. Dot1q encapsulation is supported only on Ethernet interfaces.
The no form of this command reverts to the default value.
All
This command configures the Dot1q Ethertype on the PW port. The PW port is used to extract a customer's Ethernet traffic that is transported in a tunnel over an IP/MPLS network. The Dot1q-etype represents the first two bytes (TPID) in the 802.1Q header of a single-tagged Ethernet frame or the inner 802.1Q header of the double-tagged Ethernet frame inside the tunnel.
The no form of this command removes the configuration.
All
This command enables access to the context to configure port-specific 802.1x authentication attributes. This context can only be used when configuring a Fast Ethernet, Gigabit or 10-Gb Ethernet LAN ports on an appropriate MDA.
All
This command creates the context to configure 802.1x network access control on the router.
The no form of this command removes the 802.1x configuration.
All
This command causes a delay in the activation of the associated IP interface by the specified number of seconds. The delay is invoked whenever the system attempts to bring the associated IP interface up, unless the init-only option is configured. If the init-only option is configured, the delay is only applied when the IP interface is first configured or after a system reboot.
The no form of this command removes the command from the active configuration and removes the delay in activating the associated IP interface. If the configuration is removed during a delay period, the currently running delay will continue until it completes.
no down ip
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
All
This command configures the number of keepalive intervals that must pass without receiving a keepalive packet before the link is declared down. It is expected that the nodes at the two endpoints of the cHDLC link are provisioned with the same values.
down-count 3
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
This command configures the down-link bitrate in kb/s to be used in the GTP messages.
The no form of this command reverts to the default.
down-link gbr 2000 mbr 2000
down-link gbr 2000 mbr 2000 - for ggsn
down-link gbr 0 mbr 0 - for mme and pgw
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the system to bring a port operationally down in the event the system has detected internal MAC transmit errors (Int MAC Tx Errs).
no down-on-internal-error
All
This command enables the PW port configured on an Epipe to go locally operationally down if any of the following status bits are received on a mate spoke-SDP across an FPE:
The no form of the command specifies that the mate PW status fault bits are not taken into account in the operational state of the PW port.
no down-on-peer-tldp-pw-status-faults
All
This command sets the minimum change (in percent of the latest advertised value) above which a decrease in Maximum Reservable Link Bandwidth (MRLB) (IS-IS TE sub-TLV 10) or Maximum Reservable Bandwidth (MRB) (OSPF TE sub-TLV 7) triggers an IGP-TE update. This configuration only applies to a change in MRLB or MRB caused by dark bandwidth. Other events affecting MRLB/MRB (such as the change of the subscription factor or the loss of link in a LAG over which the RSVP interface is defined) trigger an immediate TE update, regardless of the importance of the impact.
Optionally, the threshold can also be expressed as an absolute value. In this case, the evaluation of the change is made using the percent change and the absolute change. An IGP-TE update is sent if both of these thresholds are crossed. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.
down-threshold 0
This command determines the interval to wait for a RADIUS reply message from the RADIUS server before a RADIUS server is declared out-of-service. By default, the value of the down-timeout is the number of retries multiplied by the timeout interval. Each host will use the configured timeout and retry value under the AAA RADIUS server policy.
timeout refers to the waiting period before the next retry attempt.
retry refers the number of times the host will attempt to contact the RADIUS server.
If a RADIUS server is declared out-of-service, the host pending retry attempts will move on to the next RADIUS server.
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures Ethernet loop detection attributes.
All
When enabled, the downlink rate in the APN-AMBR IE in an incoming GTP message is interpreted as a rate override for the specified egress QoS object. For queues and policers, the PIR is overridden.
This override uses standard SR OS QoS overrides. Therefore, a subsequent Gx/RADIUS-based override removes this override.
The no form of this command disables the override mechanism.
no downlink
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the downlink MBR/GBR to QoS override mapping.
The no form of the command disables the downlink MBR/GBR mapping.
no downlink-mbr-gbr
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command sets the time interval, in minutes, that the system waits for between two consecutive runs of the route-download process. The time is counted from the start-time of the run, thus, if an route-download process is still ongoing by the time the timer expires, the process will restart from count=1.
The no form of this command reverts to the default value.
download-interval 720
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command assigns an IPv4 filter policy to the downstream NAT interface. This filter is applied to downstream traffic after the NAT function is applied but before it enters the inside VPRN instance.
The no form of the command removes the filter from the configuration.
no downstream-ip-filter
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies a filter to apply to the downstream traffic after routing in the outside virtual router instance and before the NAT function; it is useful for traffic that bypasses the egress filters applied in the inside virtual router instance, such as DS-Lite traffic.
The no form of the command removes the filter from the configuration.
no downstream-ip-filter
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the ipv6-filter for downstream traffic. This filter is applied to downstream traffic after it leaves the outside virtual router instance but before the NAT function is applied. This is useful for shared v6 filters that apply to all v6 DSM hosts.
The no form of the command removes the filter from the configuration.
no downstream-ipv6-filter
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the downstream mapping TLV that provides a mechanism for the sender and responder nodes to exchange and validate interface and label stack information for each downstream hop in the path of the LDP FEC an RSVP LSP, or a BGP IPv4 or IPv6 label route.
The following downstream mapping TLVs are supported: the original Downstream Mapping (DSMAP) TLV defined in RFC 4379 (obsoleted by RFC 8029) and the Downstream Detailed Mapping (DDMAP) TLV defined in RFC 6424.
The no form of this command removes the configuration.
All
This command controls the dead peer detection mechanism.
The no form of this command removes the parameters from the configuration.
no dpd
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the designated router (DR) activation timer for the EVPN gateway.
After the DR activation timer expires, each provider edge router (PE) runs the MEG or PEG DR election. The timer allows the PE to collect Inclusive Multicast Ethernet Tag routes from other MEG/PEG gateways and avoid running the DR election multiple times. The DR triggers the MEG/PEG first-hop and last-hop router actions on the router.
dr-activation-timer 3
All
This command means no new leases can be assigned from this subnet and existing leases are cleaned up upon renew/rebind.
The no form of this command means the subnet is active and new leases can be assigned from it.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command starts or stops draining this NAT address range. When an address-range is being drained, it will not be used to serve new hosts. Existing hosts, however, will still be able to use the address that was assigned to them even if it is being drained. An address-range can only be deleted if the parent pool is shut down or if the range itself is effectively drained (hosts are no longer using the addresses).
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the drop action on flows matching this AQP entry. When enabled, all flow traffic matching this AQP entry will be dropped. When drop action is part of a set of multiple actions to be applied to a single flow as result of one or more AQP entry match, drop action will be performed first and no other action will be invoked on that flow.
The no form of this command disables the drop action on flows matching this AQP entry.
no drop
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the drop action for the traffic that matches this filter entry.
Traffic can, also, be dropped based on pkt-length, packet-length range, ttl, ttl range, or a pattern of conditional match criteria.
Packets that match the filter entry match criteria, and not the conditional match criteria value, are implicitly forwarded with no further match in the following filter entries.
For pattern match:
All
This command configures the drop action for the traffic that matches this filter entry.
Traffic can, also, be dropped based on payload-length, payload-length range, hop-limit, hop-limit range, or a pattern of conditional match criteria.
Packets that match the filter entry match criteria, but do not match the conditional match criteria value, are implicitly forwarded with no further match in the following filter entries.
For pattern match:
All
This command sets the MAC filter entry action to drop.
All
This optional parameter specifies the number of consecutive ping-replies that must be missed to declare the CPE down and to deactivate the associated static route.
drop-count 3
All
This command specifies the number of consecutive requests that must fail for the destination to be declared unreachable and the time to hold destination unreachable before repeating tests.
drop-count 3 hold-down 0
All
This optional parameter specifies the number of consecutive ping-replies that must be missed to declare the CPE down and to deactivate the associated static route.
drop-count 3
All
This command configures the number of consecutively sent ICMP echo request messages that must fail before the host unreachable priority control event is set.
The drop-count command is used to define the number of consecutive message send attempts that must fail for the host-unreachable priority event to enter the set state. Each unsuccessful attempt increments the event’s consecutive message drop counter. With each successful attempt, the event’s consecutive message drop counter resets to zero.
If the event’s consecutive message drop counter reaches the drop-count value, the host-unreachable priority event enters the set state.
The event’s hold-set value defines how long the event must stay in the set state even when a successful message attempt clears the consecutive drop counter. The event is not cleared until the consecutive drop counter is less than the drop-count value and the hold-set timer has a value of zero (expired).
The no form of the command reverts to the default value.
drop-count 3 — 3 consecutive ICMP echo request failures are required before the host unreachable priority control event is set.
All
This command specifies that a packet matching this filter entry is dropped if extracted to the CPM. Packets matching the filter entry match criteria and not extracted to the CPM are forwarded with no further match in the following filter entries.
All
This command configures the router to drop and not advertise BGP routes (that belong to any address family) with SRv6 TLVs.
The no form of this command configures the router to advertise BGP routes with SRv6 TLVs.
no drop-routes-with-srv6-tlvs
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
Commands in this context configure queue drop-tail parameters.
7450 ESS, 7750 SR-7/12/12e, 7750 SR-s, 7950 XRS, VSR
Commands in this context configure queue drop tail parameters.
All
Commands in this context configure queue drop tail parameters.
All
Commands in this context configure queue drop tail parameters.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e, 7950 XRS
All
Commands in this context configure queue drop tail parameters.
All
Commands in this context configure queue drop tail parameters.
All
Commands in this context configure queue drop tail parameters.
All
Commands in this context configure queue drop-tail parameters.
All
Commands in this context configure queue drop tail parameters.
All
When this command denies address translation to subscribers that have not been identified via accounting messages sent by BNG and received by Radius accounting proxy. This command has effect only in Subscriber Aware Application.
no drop-unidentified-traffic
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies if UDP datagrams with zero IPv4 checksum are dropped.
If this command is disabled, the system calculates the IPv6 checksum for each such datagram.
This command enables the NAT64 node to drop received UDP datagrams with zero IPv4 checksum. By default, checksum is re-calculated for non-fragmented datagrams.
The no form of the command disables the command.
disabled
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies that only packets that are dropped by the vRGW will be shown in debugging.
dropped-only
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure digital signal level 1 (DS-1) frame parameters. The T-Carrier system was the first successful system that supported digitized voice transmission. The original transmission rate (1.544 Mb/s) in the T-1 (DS-1) line is commonly used by Internet service providers (ISPs) to connect to the Internet.
North America uses the T-Carrier system while Europe uses the E-Carrier system of transmission, using multiples of the DS- system. Digital signals are carried inside the carrier systems.
T-1 transmits DS-1-formatted data at 1.544 Mb/s through the network. The corresponding European carrier is E-1 with a data rate of 2.048 Mb/s. E-1 and T-1 (DS-1) can be interconnected for international use.
The no form of this command disables DS-1 capabilities.
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
Commands in this context configure DS-3 parameters. DS-3 lines provide a speed of 44.736 Mb/s and is also frequently used by service providers. DS-3 lines carry 28 DS-1 signals and a 44.736 Mb/s data rate.
A DS-3 connection typically supports data rates of about 43 Mb/s. A T-3 line actually consists of 672 individual channels, each supporting 64 kb/s. T-3 lines are used mainly by Service Providers to connect to the Internet backbone and for the backbone itself.
Depending on the MDA type, the DS-3 parameters must be disabled if clear channel is enabled by default (for example, on the m12-ds3 MDA). Clear channel is a channel that uses out-of-band signaling, not in-band signaling, so the channel's entire bit rate is available. Channelization must be explicitly specified. Note that if DS-3 nodes are provisioned on a channelized SONET/SDH MDA you must provision the parent STS-1 SONET/STM0 SDH path first.
North America uses the T-Carrier system while Europe uses the E-Carrier system of transmission, using multiples of the DS system. Digital signals are carried inside the carrier systems.
The no form of this command disables DS-3 capabilities.
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
Configures an Ethernet 802.2 LLC DSAP value or range for an ingress SAP QoS policy match criterion.
This is a 1-byte field that is part of the 802.2 LLC header of the IEEE 802.3 Ethernet Frame.
The snap-pid field, etype field, ssap, and dsap fields are mutually exclusive and cannot be part of the same match criteria.
Use the no form of this command to remove the dsap value as the match criterion.
no dsap
This 8-bit mask can be configured using the following formats:
Format Style | Format Syntax | Example |
Decimal | DDD | 240 |
Hexadecimal | 0xHH | 0xF0 |
Binary | 0bBBBBBBBB | 0b11110000 |
All
Configures an Ethernet 802.2 LLC DSAP value or range for a MAC filter match criterion.
This is a one-byte field that is part of the 802.2 LLC header of the IEEE 802.3 Ethernet Frame.
The snap-pid field, etype field, ssap and dsap fields are mutually exclusive and may not be part of the same match criteria.
Use the no form of the command to remove the dsap value as the match criterion.
no dsap
Format Style | Format Syntax | Example |
Decimal | DDD | 240 |
Hexadecimal | 0xHH | 0xF0 |
Binary | 0bBBBBBBBB | 0b11110000 |
All
This command configures DSAP match conditions.
This 8 bit mask can be configured using the formats described in Table 41:
Format Style | Format Syntax | Example |
Decimal | DDD | 240 |
Hexadecimal | 0xHH | 0xF0 |
Binary | 0bBBBBBBBB | 0b11110000 |
All
This command configures DSCP match conditions.
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command sets the DSCP code-point in the outer IP header of encapsulated packets associated with a particular tunnel.
The no form of this command copies the DSCP value from the inner IP header (after remarking by the private tunnel SAP egress qos policy) to the outer IP header.
no dscp
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command creates a mapping between the DiffServ Code Point (DSCP) of the self-generated traffic and the forwarding class.
Self-generated traffic that matches the specified DSCP will be assigned to the corresponding forwarding class. Multiple commands can be entered to define the association of some or all 64 DSCPs to the forwarding class.
All DSCP names that define a DSCP value must be explicitly defined.
The no form of this command removes the DSCP-to-forwarding class association.
All
This command sets the DSCP code-point in the outer IP header of GRE encapsulated packets associated with a particular GRE tunnel. The default, set using the no form of this command, is to copy the DSCP value from the inner IP header (after remarking by the private tunnel SAP egress qos policy) to the outer IP header.
no dscp
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure DSCP remark action or actions on flows matching this AQP entry. When enabled, all packets for all flows matching this AQP entry will be remarked to the configured DSCP name.
DSCP remark can only be applied when the entry remarks forwarding class or forwarding class and priority. In-profile and out-of profile of a given packet for DSCP remark is assessed after all AQP policing and priority remarking actions took place.
The no form of this command stops DSCP remarking action on flows matching this AQP entry.
no dscp
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command adds a DSCP name to the match criteria used by this entry.
The no form of this command removes dscp from match criteria for this entry.
no dscp
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command defines the DSCP value to be used in the IPv4 header.
The no form of this command reverts to the default.
dscp be
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command defines the DSCP value to be used in the IPv6 header.
The no form of this command removes the DSCP name.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command can be used to explicitly configure the DSCP value to the specified dscp-name, or to use the configured fc and profile values to derive the DSCP value from the egress network QoS policy 1.
dscp resolve
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command can be used to explicitly configure the DSCP value that is carried in the DM PDU. This value is not used on the launch point or the reflector to influence the QoS behavior on the network elements. The frame itself has no IP information because it uses the General Associated Channel Header (G-Ach). The fc and profile values are used to influence QoS behavior on the launch point and the responder.
The no form of this command reverts the dscp carried in the DM PDU to default.
dscp be
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command explicitly sets the forwarding class or subclass or enqueuing priority when a packet is marked with the DiffServ Code Point (DSCP) value contained in the dscp-name. A list of up to eight dscp-names can be entered on a single command. The lists of dscp-names within the configuration are managed by the system to ensure that each list does not exceed eight names. Entering more than eight dscp-names with the same parameters (fc, priority) will result in multiple lists being created. Conversely, multiple lists with the same parameters (fc, priority) are merged and the lists repacked to a maximum of eight per list if DSCP names are removed or the parameters changed so the multiple lists use the same parameters. Also, if a subset of a list is entered with different parameters, then a new list will be created for the subset. When the list is stored in the configuration, the DSCP names are sorted by their DSCP value in ascending numerical order; consequently, the order in the configuration may not be exactly what the user entered.
Adding a DSCP rule on the policy forces packets that match the DSCP value specified to override the forwarding class and enqueuing priority based on the parameters included in the DSCP rule. When the forwarding class is not specified in the rule, a matching packet preserves (or inherits) the existing forwarding class derived from earlier matches in the classification hierarchy. When the enqueuing priority is not specified in the rule, a matching packet preserves (or inherits) the existing enqueuing priority derived from earlier matches in the classification hierarchy.
The DSCP value (referred to here by dscp-name) is derived from the most significant six bits in the IPv4 header ToS byte field (DSCP bits) or the Traffic Class field from the IPv6 header. If the packet does not have an IP header, DSCP-based matching is not performed. The six DSCP bits define 64 DSCP values used to map packets to per-hop Quality of Service (QoS) behavior. The most significant three bits in the IP header ToS byte field are also commonly used in a more traditional manner to specify an IP precedence value, causing an overlap between the precedence space and the DSCP space. Both IP precedence and DSCP classification rules are supported.
DSCP rules have a higher match priority than IP precedence rules and where a dscp-name DSCP value overlaps an ip-prec-value, the DSCP rule takes precedence.
The no form of this command removes the specified the dscp-names from the explicit DSCP classification rule in the SAP ingress policy. As dscp-names are removed, the system repacks the lists of dscp-names with the same parameters (up to eight per list). As the no command does not have any additional parameters, it is possible to remove multiple dscp-names from multiple DSCP statements having different parameters with one command. If a dscp-name specified in a no command does not exist in any DSCP statement, then the command is aborted at that point with an error message displayed; any DSCP names in the list before the failed entry will be processed as normal but the processing will stop at the failed entry so that the remainder of the list is not processed.
Removing the dscp-name from the policy immediately removes the DSCP name on all ingress SAPs using the policy.
A maximum of 64 DSCP rules are allowed on a single policy and a maximum of eight dscp-names can be specified in a single statement.
The subclass-name parameter is optional and used with the fc-name parameter to define a preexisting subclass. The fc-name and subclass-name parameters must be separated by a period (.). If subclass-name does not exist in the context of fc-name, an error will occur. If subclass-name is removed using the no fc fc-name.subclass-name force command, the default-fc command will automatically drop the subclass-name and only use fc-name (the parent forwarding class for the subclass) as the forwarding class.
fc: | class[.subclass] | |
class: be, l2, af, l1, h2, ef, h1, nc | ||
subclass: 29 characters max |
All
This command configures a DSCP code point to be used as a SAP QoS policy match criterion.
The no form of this command removes the DSCP match criterion.
no dscp
All
This command defines IP Differentiated Services Code Point (DSCP) names that must be matched to perform the associated reclassification actions. The specified name must exist as a DSCP name. SR OS software provides names for the well-known code points. A list of up to eight DSCP names can be entered on a single command. The lists of DSCP names within the configuration are managed by the system to ensure that each list does not exceed eight names. Entering more than eight DSCP names with the same parameters (fc and profile) results in multiple lists being created. Conversely, multiple lists with the same parameters (fc and profile) are merged and the lists repacked to a maximum of eight per list if DSCP names are removed or the parameters changed so the multiple lists use the same parameters. Also, if a subset of a list is entered with different parameters, a new list is created for the subset. When the list is stored in the configuration, the DSCP names are sorted by their DSCP value in ascending numerical order; consequently, the order in the configuration may not be exactly what the user entered.
If an egress packet on the SAP matches an IP DSCP value corresponding to a specified DSCP name, the forwarding class, profile egress queue accounting behavior may be overridden. By default, the forwarding class and profile of the packet is derived from ingress classification and profiling functions. Matching a DSCP-based reclassification rule will override all IP precedence-based reclassification rule actions.
The IP DSCP bits used to match against DSCP reclassification rules come from the Type of Service (ToS) field within the IPv4 header or the traffic class field from the IPv6 header. If the packet does not have an IP header, DSCP-based matching is not performed.
The reclassification actions from a DSCP reclassification rule may be overridden by an IP flow match event.
The fc keyword is optional. When specified, the egress classification rule will overwrite the forwarding class derived from ingress. The new forwarding class is used for egress remarking and queue mapping decisions. If an IP criteria match occurs after the DSCP match, the new forwarding class may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new fc, the fc from the dscp match will be used.
The profile keyword is optional. When specified, the egress classification rule will overwrite the profile of the packet derived from ingress. The new profile value is used for egress remarking and queue congestion behavior. If an IP criteria match occurs after the DSCP match, the new profile may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new profile, the profile from the DSCP match will be used.
The no form of this command removes the specified the dscp-names from the reclassification rule in the SAP egress QoS policy. As dscp-names are removed, the system repacks the lists of dscp-names with the same parameters (up to 8 per list). As the no command does not have any additional parameters, it is possible to remove multiple dscp-names from multiple DSCP statements having different parameters with one command. If a dscp-name specified in a no command does not exist in any DSCP statement, the command is aborted at that point with an error message displayed. Any dscp-names in the list before the failed entry will be processed as normal but the processing will stop at the failed entry so that the remainder of the list is not processed.
All
This command configures a DSCP to be used for remarking packets from the specified FC. If the optional exceed-profile, in-profile, or out-profile keyword is specified, the command will remark different DSCP depending on whether the packet was classified to be exceed, in-profile, or out-of-profile ingress to the node. All inplus-profile traffic is marked with the same value as in-profile traffic.
no dscp
All
This command creates a mapping between the DiffServ Code Point (DSCP) of the network ingress traffic and the forwarding class.
Ingress traffic that matches the specified DSCP will be assigned to the corresponding forwarding class. Multiple commands can be entered to define the association of some or all 64 DiffServ code points to the forwarding class. For undefined code points, packets are assigned to the forwarding class specified under the default-action command.
The no form of this command removes the DiffServ code point-to-forwarding class association. The default-action then applies to that code point value.
The system-defined names available are as follows. The system-defined names must be referenced as all lowercase, exactly as shown in the first column in Table 42 and Table 43.
Additional names-to-code point value associations can be added using the ‘dscp-name dscp-name dscp-value’ command.
The actual mapping is being done on the dscp-value, not the dscp-name that references the dscp-value. If a second dscp-name that references the same dscp-value is mapped within the policy, an error will occur. The second name will not be accepted until the first name is removed.
DSCP Name | DSCP Value Decimal | DSCP Value Hexadecimal | DSCP Value Binary |
nc1 | 48 | 0x30 | 0b110000 |
nc2 | 56 | 0x38 | 0b111000 |
ef | 46 | 0x2e | 0b101110 |
af41 | 34 | 0x22 | 0b100010 |
af42 | 36 | 0x24 | 0b100100 |
af43 | 38 | 0x26 | 0b100110 |
af31 | 26 | 0x1a | 0b011010 |
af32 | 28 | 0x1c | 0b011100 |
af33 | 30 | 0x1d | 0b011110 |
af21 | 18 | 0x12 | 0b010010 |
af22 | 20 | 0x14 | 0b010100 |
af23 | 22 | 0x16 | 0b010110 |
af11 | 10 | 0x0a | 0b001010 |
af12 | 12 | 0x0c | 0b001100 |
af13 | 14 | 0x0e | 0b001110 |
default | 0 | 0x00 | 0b000000 |
DSCP Name | DSCP Value Decimal | DSCP Value Hexadecimal | DSCP Value Binary |
cs7 | 56 | 0x38 | 0b111000 |
cs6 | 48 | 0X30 | 0b110000 |
cs5 | 40 | 0x28 | 0b101000 |
cs4 | 32 | 0x20 | 0b100000 |
cs3 | 24 | 0x18 | 0b011000 |
cs2 | 16 | 0x10 | 0b010000 |
cs1 | 08 | 0x8 | 0b001000 |
DSCP values mapping to forwarding classes Expedited (ef), High-1 (h1) and Network-Control (nc) can only be set to in-profile.
DSCP values mapping to forwarding class “be” can only be set to out-of-profile.
All
This command configures an IP Differentiated Services Code Point (DSCP) value that must be matched to perform the associated reclassification actions. If an egress packet on an IES/VPRN interface spoke SDP, on a CSC network interface in a VPRN, or on a network interface that the network QoS policy is applied to, matches the specified IP DSCP value, the forwarding class and profile may be overridden.
By default, the forwarding class and profile of the packet are derived from ingress classification and profiling functions. Matching a DHCP-based reclassification rule will override all IP precedence-based reclassification rule actions.
The IP DSCP bits used to match against DSCP reclassification rules come from the Type of Service (ToS) field within the IPv4 header or the Traffic Class field from the IPv6 header. If the packet does not have an IP header, DSCP-based matching is not performed.
The configuration of egress DSCP classification and the configuration of an egress IP criteria or IPv6 criteria entry statement within a network QoS policy are mutually exclusive.
The IP precedence- and DSCP-based reclassification are supported on a network interface, on a CSC network interface in a VPRN, and on a PW used in an IES or VPRN spoke interface. The CLI will block the application of a network QoS policy with the egress reclassification commands to the spoke SDP part of a Layer 2 service.
Conversely, the CLI will not allow the user to add the egress reclassification commands to a network QoS policy if the policy is being used by a Layer 2 spoke SDP.
The egress reclassification commands will only take effect if the redirection of the spoke SDP or CSC interface to use an egress port queue group succeeds. For example, the following CLI command would be successful:
config>service>vprn>if>spoke-sdp>egress>qos network-policy-id port-redirect-group queue-group-name instance instance-id
config>service>ies>if>spoke-sdp>egress>qos network-policy-id port-redirect-group queue-group-name instance instance-id
config>service>vprn>nw-if>qos network-policy-id port-redirect-group queue-group-name instance instance-id
If the redirection command fails, the PW will use the network QoS policy assigned to the network IP interface, however any reclassification in the network QoS policy applied to the network interface will be ignored.
The no form of this command removes the egress reclassification rule.
in - Specifies that any packets matching the reclassification rule will be treated as in-profile by the egress forwarding plane.
out - Specifies that any packets matching the reclassification rule will be treated as out-of-profile by the egress forwarding plane.
exceed - Specifies that any packets matching the reclassification rule will be treated as exceed-profile by the egress forwarding plane.
inplus - Specifies that any packets matching the reclassification rule will be treated as inplus-profile by the egress forwarding plane.
All
This command configures a DSCP to be used as a network QoS policy match criterion.
The no form of this command removes the DSCP match criterion.
All
This command configures a DiffServ Code Point (DSCP) name to be used as an IP filter match criterion.
The no form of the command removes the DSCP match criterion.
no dscp
All
This command configures a DiffServ Code Point (DSCP) name to be used as an IP filter match criterion.
The no form of this command removes the DSCP match criterion.
no dscp
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command specifies the DSCP to be carried in the IP header. This value is not exposed to egress QoS policies. This command uses well-known DSCP names.
The no form of this command reverts to the default value.
dscp nc1
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command configures the DSCP to be copied into the IP header of each TWAMP Light echo request packet launched for the test.
dscp nc1
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command specifies the in-profile DSCP name for the forwarding class. The corresponding DSCP value will be used for all IP packets that require marking at egress on this forwarding class queue, and that are in-profile. The inplus-profile traffic is marked with the same value as in-profile traffic.
When multiple DSCP names are associated with the forwarding class at network egress, the last name entered will overwrite the previous value.
The no form of this command resets the configuration to the factory default in-profile DSCP name setting for policy-id 1.
All
This command specifies the out-of-profile DSCP name for the forwarding class. The corresponding DSCP value will be used for all IP packets requiring marking the egress on this forwarding class queue that are out-of-profile. The exceed-profile traffic is marked with the same value as out-of-profile traffic.
When multiple DSCP names are associated with the forwarding class at network egress, the last name entered will overwrite the previous value.
The no form of this command resets the configuration to the factory default out-of-profile DSCP name setting for policy-id 1.
Policy-id 1: | Factory setting |
Policy-id 2 to 65535: | Policy-id setting |
All
This command configures the Dual-Stack Lite LSN subscriber source.
The no form of this command removes the value from the configuration.
ipv6-prefix: | <prefix>/<length> |
prefix | x:x:x:x:x:x:x:x (eight 16-bit pieces) |
x:x:x:x:x:x:d.d.d.d | |
x to [0 to FFFF]H | |
d to [0 to 255]D | |
<length> | [0 to 128] |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command sets the value for the number of high order bits of the source IPv6 address that will be considered as DS-Lite subscriber. The remaining bits of the source IPv6 address will be masked off, effectively aggregation all IPv6 source addresses under the configured prefix length into a single DS-Lite subscriber. Source IPv4 addresses/ports of the traffic carried within the DS-Lite subscriber will be translated into a single outside IPv4 address and the corresponding deterministic port-block (port-blocks can be extended).
The range of values for subscriber-prefix-length in non-deterministic DS-Lite is limited from 32 to 64 (a prefix will be considered as a DS-Lite subscriber) or it can be set to a value of 128 (the source IPv6 address is considered as a DS-Lite subscriber).
In cases where deterministic DS-Lite is enabled in a giver inside routing context, the range of values of the subscriber-prefix-length depends on the value of dslite-max-subscriber-limit parameter as follows:
subscriber-prefix-length – n = [32..64,128]
where n = log2(dslite-max-subscriber-limit)
[or in an alternate form: dslite-max-subscriber-limit = 2^n.]
In other words the largest prefix length for the deterministic DS-Lite subscriber will be 32+n, where n = log2(dslite-max-subscriber-limit). The subscriber prefix length can extend up to 64 bits. Beyond 64 bits for the subscriber prefix length, there only one value is allowed: 128. In the case n must be 0, which means that the mapping between B4 elements (or IPv6 address) and the IPv4 outside addresses is in 1:1 ratio (no sharing of outside IPv4 addresses).
This parameter can be changed only when there are no deterministic prefixes configured in the same routing context.
128
In case that deterministic DS-Lite is enabled, this value can be within the range [(32+n)..64,128] where n = log2(dslite-max-subscriber-limit). The value of 128 is allowed only when n=0 (each subscriber is mapped to a single outside IPv4 IP address).
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command enables matching on DSM UEs.
The no form of this command disables matching on DSM UEs, unless UE state matching is disabled altogether.
no dsm
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command enables matching on UEs in a DSM state.
The no form of this command disables matching on UEs in a DSM state, unless all state matching is disabled.
no dsm
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures an IP filter that is distributed on ISA cards.
This command specifies the IP filter applied to all UEs corresponding to default vlan-range (such as a group-interface) or the specified vlan-range. The IP filter can be created in the config>subscr-mgmt>isa-filter context, and can contain up to 1024 match entries. The IP filter can be overridden per UE from RADIUS via access-accept or COA.
The no form of this command reverts to the default.
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the DSM UE source.
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command is used to configure the values to use in the DSMAP TLV sent by a node in an LSP Trace echo request for a static MPLS-TP LSP. A node sending a DSMAP TLV will include the in-if-num and out-if-num values. Additionally, it will include the out-label for the LSP in the Label TLV for the DSMAP in the echo request message.
The no form of this command equals to a value 0 (this means no interface validation will be performed).
no dsmap
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command configures the destination IP match condition.
The no form of this command reverts to the default.
ip-address | a.b.c.d |
mask | 0 to 32 |
ipv6-address | x:x:x:x:x:x:x:x (where x is [0 to FFFF]H) |
:x:x:x:x:x:d.d.d.d (where d is [0 to 255]D) |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies the destination IP address used in the inband control connection. If the address is not configured, the ring cannot become operational.
no dst-ip
All
This command specifies that the packet’s destination IP address must match the specified IP prefix and mask.
The no form of this command disables the match on the destination IP.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command configures traffic flow to be forwarded via match in the redirect policy.
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies a destination IP address to use as match criteria.
no dst-ip
ipv4-address | a.b.c.d[/mask] |
mask - [1..32] | |
ipv6-address | x:x:x:x:x:x:x:x/prefix-length |
x:x:x:x:x:x:d.d.d.d | |
x - [0..FFFF]H | |
d - [0..255]D | |
prefix-length [1..128] |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the destination IP address to match.
no dst-ip
ipv4-address | a.b.c.d[/mask] |
mask - [1..32] | |
ipv6-address | x:x:x:x:x:x:x:x/prefix-length |
x:x:x:x:x:x:d.d.d.d | |
x - [0..FFFF]H | |
d - [0..255]D | |
prefix-length [1..128] |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures debugging on a destination IP address.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures destination IP address LI filter match criterion.
The no form of this command removes any configured destination IP address. The match criterion is ignored.
All
This command configures destination IPv6 address LI filter match criterion.
The no form of this command removes any configured destination IPv6 address. The match criterion is ignored.
All
This command configures a destination address range to be used as a SAP QoS policy match criterion.
To match on the IPv4 destination address, specify the address and its associated mask, e.g., 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 can also be used for IPv4.
The no form of this command removes the destination IPv4 address match criterion.
no dst-ip
All
This command configures a destination address range to be used as a SAP QoS policy match criterion.
To match on the IPv6 destination address, specify the address and its associated mask, e.g. 2001:db8:1000::/64.
The no form of this command removes the destination IPv6 address match criterion.
no dst-ip
All
This command configures a destination address range to be used as a network QoS policy match criterion.
To match on the destination address, specify the address and its associated mask, for example, when specifying an IPv4 address, 10.1.0.0/16 or 10.1.0.0 255.255.0.0 can be used.
The no form of this command removes the destination IP address match criterion.
ipv6-address: | x:x:x:x:x:x:x:x (eight 16-bit pieces) |
x:x:x:x:x:x:d.d.d.d | |
x: [0 to FFFF]H | |
d: [0 to 255]D |
All
This command configures a destination address range to be used as a network QoS policy match criterion.
To match on the destination address, specify the address and its associated mask, for example, when specifying an IPv4 address, 10.1.0.0/16 or 10.1.0.0 255.255.0.0 can be used.
The no form of this command removes the destination IP address match criterion.
ipv6-address: | x:x:x:x:x:x:x:x (eight 16-bit pieces) |
x:x:x:x:x:x:d.d.d.d | |
x: [0 to FFFF]H | |
d: [0 to 255]D |
All
This command configures a destination address range to be used as a filter policy match criterion.
To match on the destination address, specify the address and its associated mask, e.g., 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 can also be used for IPv4.
The no form of this command removes the destination IPv4 or IPv6 address match criterion.
no dst-ip
All
VSR
This command configures a destination IP address range to be used as an IP filter match criterion.
To match on the destination IP address, specify the address and its associated mask, for example, 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 may also be used.
The no form of this command removes the destination IP address match criterion.
no dst-ip
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command configures a destination IPv6 address range to be used as an IPv6 filter match criterion.
To match on the destination IPv6 address, specify the address.
The no form of this command removes the destination IP address match criterion.
This command only applies to the 7750 SR and 7950 XRS.
no dst-ip
x:x:x:x:x:x:x:x (eight 16-bit pieces) | ||
x:x:x:x:x:x:d.d.d.d | ||
x: | [0 to .FFFF]H | |
d: | [0 to 255]D | |
prefix-length: | 1 to 128 |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command defines the destination IPv4 address to be used in the IPv4 header.
The no form of this command removes the destination IPv4 address value.
dst-ipv4-address 0.0.0.0
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command defines the destination IPv6 address to be used in the IPv6 header.
The no form of this command removes the IPv6 address.
ipv6-address: | x:x:x:x:x:x:x:x (eight 16-bit pieces) | |
x:x:x:x:x:x:d.d.d.d | ||
x: | 0 to FFFF]H | |
d: | [0 to 255]D |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command configures a destination MAC address or range to be used as a MAC filter match criterion.
The no form of this command removes the destination mac address as the match criterion.
Format Style | Format Syntax | Example |
Decimal | DDDDDDDDDDDDDD | 281474959933440 |
Hexadecimal | 0xHHHHHHHHHHHH | 0x0FFFFF000000 |
Binary | 0bBBBBBBB...B | 0b11110000...B |
To configure so that all packets with a destination MAC OUI value of 00-03-FA are subject to a match condition then the entry should be specified as: 003FA000000 0xFFFFFF000000
All
Configures a destination MAC address or range to be used as a Service Ingress QoS policy match criterion.
The no form of this command removes the destination MAC address as the match criterion.
no dst-mac
This 48-bit mask can be configured using the following formats:
Format Style | Format Syntax | Example |
Decimal | DDDDDDDDDDDDDD | 281474959933440 |
Hexadecimal | 0xHHHHHHHHHHHH | 0xFFFFFF000000 |
Binary | 0bBBBBBBB...B | 0b11110000...B |
All packets with a source MAC OUI value of 00-03-FA, subject to a match condition, should be specified as: 0003FA000000 0x0FFFFF000000
All
Configures a destination MAC address or range to be used as a MAC filter match criterion.
The no form of the command removes the destination mac address as the match criterion.
no dst-mac
To configure so that all packets with a destination MAC OUI value of 00:03:FA are subject to a match condition then the entry should be specified as: 00:03:FA:00:00:00 FF:FF:FF:00:00:00.
All
This command configures the destination MAC match condition.
All
This command defines the destination MAC address for the Ethernet header.
The no form of this command deletes the configured MAC address.
dst-mac-address 00:00:00:00:00:00
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command configures the destination port match condition.
The no form of this command reverts to the default.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies that the packet’s UDP/TCP dst-port must match a specific value. This command is not valid in a match context that is not specific to UDP or TCP.
The no form of this command removes matching of the layer-4 port.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies the port to match the destination port in the HTTP request.
HTTP traffic that does not match this port, is not redirected.
The no form of this command reverts to the default.
dst-port 80
7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies a destination TCP/UDP port, destination port list, or destination range to use as match criteria.
The no form of this command removes the parameters from the configuration.
no dst-port
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command specifies a destination TCP/UDP port, destination port list, or destination range to use as match criteria.
The no form of this command removes the parameters from the configuration.
no dst-port
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures debugging on a destination port.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures a destination TCP or UDP port number or port range for an IP LI filter match criterion. Note that an entry containing Layer 4 match criteria will not match non-initial (second, third, and so on) fragments of a fragmented packet since only the first fragment contains the Layer 4 information.
The no form of this command removes the destination port match criterion.
All
This command configures a destination TCP or UDP port number or port range for a SAP QoS policy match criterion.
The no form of this command removes the destination port match criterion.
no dst-port
All
This command configures a destination TCP or UDP port number, port range, or a port list for a network QoS policy match criterion.
The no form of this command removes the destination port match criterion.
All
This command configures a destination TCP, UDP, or SCTP port number or port range for an IP filter or IP exception match criterion. An entry containing Layer 4 non-zero match criteria will not match non-initial (2nd, 3rd, etc) fragments of a fragmented packet since only the first fragment contains the Layer 4 information. Similarly an entry containing the “dst-port eq 0” match criterion, may match non-initial fragments when the destination port value is not present in a packet fragment and other match criteria are also met.
The no form of the command removes the destination port match criterion.
no dst-port
All
VSR
This command configures a destination TCP or UDP port number or port range for a management access filter match criterion.
The no form of this command removes the destination port match criterion.
This 16 bit mask can be configured using the formats described in Table 44:
Format Style | Format Syntax | Example |
Decimal | DDDDD | 63488 |
Hexadecimal | 0xHHHH | 0xF800 |
Binary | 0bBBBBBBBBBBBBBBBB | 0b1111100000000000 |
To select a range from 1024 up to 2047, specify 1024 0xFC00 for value and mask.
All
This command specifies the TCP/UDP port or port name to match the destination-port of the packet.
![]() | Note: An entry containing Layer 4 match criteria will not match non-initial (2nd, 3rd, etc) fragments of a fragmented packet since only the first fragment contains the Layer 4 information. |
The no form of this command removes the destination port match criterion.
no dst-port
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command configures a destination TCP or UDP port number or port range.
Note that an entry containing Layer 4 match criteria will not match non-initial (2nd, 3rd,etc) fragments of a fragmented packet since only the first fragment contains the Layer 4 information.
The no form of the command removes the destination port match criterion.
dst-port-range start 0 end 65535
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command defines the destination TCP port to be used in the test TCP header.
The no form of this command reverts to the default.
dst-tcp-port 0
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command defines the destination TCP port to be used in the TCP header.
The no form of this command reverts to the default.
no override
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command defines the destination TCP port to be used in the test TCP header.
The no form of this command reverts to the default.
dst-udp-port 0
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command defines the destination TCP port to be used in the TCP header.
The no form of this command reverts to the default.
no override
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command configures the start and end dates and offset for summer time or daylight savings time to override system defaults or for user defined time zones.
When configured, the time is adjusted by adding the configured offset when summer time starts and subtracting the configured offset when summer time ends.
If the time zone configured is listed in the Time Zones section, then the starting and ending parameters and offset do not need to be configured with this command unless it is necessary to override the system defaults. The command returns an error if the start and ending dates and times are not available either the Time Zones section on or entered as optional parameters in this command.
Up to five summer time zones may be configured, for example, for five successive years or for five different time zones. Configuring a sixth entry will return an error message. If no summer (daylight savings) time is supplied, it is assumed no summer time adjustment is required.
The no form of the command removes a configured summer (daylight savings) time entry.
All
Commands in this context configure Dual-Stack Lite (DS-Lite) NAT parameters.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the inside dual stack lite AFTR address.
The no form of this command reverts to the default value.
no dual-stack-lite-address
ipv6-address | x:x:x:x:x:x:x:x (eight 16-bit pieces) |
x:x:x:x:x:x:d.d.d.d | |
x [0 to FFFF]H | |
d [0 to 255]D |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command configures the DHCP Unique Identifier (DUID) of the DHCP client.
The no form of this command reverts to the default.
duid 2
All
This command enables a mechanism that detects duplicate IPs and ARP/ND spoofing attacks. Attempts (relevant to dynamic and EVPN entry types) to add the same IP (different MAC) are monitored for window <minutes>. When <count> is reached within that window, the proxy-ARP/ND entry for the suspected IP is marked as duplicate. An alarm is also triggered. This condition is cleared when hold-down time expires (max does not expire) or a clear command is issued.
If the anti-spoof-mac is configured, the proxy-ARP/ND offending entry's MAC is replaced with this <mac-address> and advertised in an unsolicited GARP/NA for local SAP/SDP-bindings, and in EVPN to remote PEs. This mechanism assumes that the same anti-spoof-mac is configured in all the PEs for the same service and that traffic with destination anti-spoof-mac received on SAPs/SDP-bindings will be dropped. An ingress mac-filter may be configured to drop traffic to the anti-spoof-mac.
The anti-spoof-mac can also be combined with the static-black-hole option. To use a black-hole MAC entry for the anti-spoof-mac function in a proxy-ARP/ND service, the following must be configured:
When both anti-spoof-mac and static-black-hole commands are configured, the MAC is advertised in EVPN as Static. Locally, the MAC will be shown in the FDB as CStatic and associated with a black-hole.
The combination of the anti-spoof-mac and the static-black-hole options ensures that any frame arriving in the system with MAC DA=anti-spoof-mac will be discarded, regardless of the ingress endpoint type (SAP/SDP-binding or EVPN) and without the need for a filter.
If the user wants to redirect the traffic with MAC DA=anti-spoof-mac instead of discarding it, redirect filters should be configured on SAPs/SDP-bindings instead of the static-black-hole option.
If the static-black-hole option is not configured for the anti-spoof-mac, the behavior is as follows:
Any changes to the configuration of anti-spoof-mac require proxy-arp or proxy-nd to first be shut down. Refer to “ARP/ND Snooping and Proxy Support” in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Layer 2 Services and EVPN Guide: VLL, VPLS, PBB, and EVPN for more information.
dup-detect window 3 num-moves 5 hold-down 9
All
This command configures the duplex of a Fast Ethernet port when autonegotiation is disabled.
This configuration command allows for the configuration of the duplex mode of a Fast Ethernet port. If the port is configured to autonegotiate this parameter is ignored.
duplex full
All
This command configures the duplex mode of the CPM management Ethernet port when autonegotiation is disabled in the running configuration and the Boot Option File (BOF). If the port is configured to autonegotiate this parameter will be ignored.
All
This command configures the Dense Wavelength Division Multiplexing (DWDM) parameters.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command sets the dying gasp Flag field in the Information OAM PDU when the local signal failure (sf-threshold) threshold is reached. This will be maintained in all subsequent Information OAM PDUs until the situation is cleared.
Interactions: The signal failure threshold will trigger these actions.
no dying-gasp
All
This command defines how to react to the reception of a dying gasp Flag field set in the informational OAMPDU.
dying-gasp local-port-action out-of-service
All
This command enables generation of the Information OAM PDU off-cycle when the soft reset notification is received by the EFM application. The local port state remains under the control of the Soft Reset application and does not change based on this EFM function. If the port is operationally up then the local node will continue to consider the port as available for service data and forwarding. If the upstream node requires notification to route around the local node undergoing the soft reset, notification must be sent to those nodes. This is a disruptive function.
This command is disabled by default at the system level and enabled by default at the port level. The combination of the system-level and port-level configuration determines if the dying gasp on soft reset function is active on individual ports. Both the system-level and port-level commands must be enabled in order to support generation of the Information OAM PDU for soft reset. If either is disabled, dying gasp is not active on those ports. This functionality must be enabled prior to the soft reset.
When both grace-tx-enable and dying-gasp-tx-on-reset are active on the same port, grace-tx-enable takes precedence when a soft reset is invoked if the Peer Vendor OUI being received is 00:16:4d (ALU) or the configured config>port>ethernet>efm-oam grace-vendor-oui value. The grace-tx-enable command should not be configured if the Nokia Vendor Specific Grace TLV is not supported on the remote peer, including Nokia 7750 SR equipment prior to release 11.0 R4.
config>system>ethernet>efm-oam>no dying-gasp-tx-on-reset
config>port>ethernet>efm-oam>dying-gasp-tx-on-reset
All
This command creates a dynamic IP that can be associated to a MAC list. The configured dynamic IP is only converted to a dynamic entry when the resolve process for the IP has passed successfully.
A summary of the IP resolution process is as follows:
The no form of the command deletes the dynamic IP and the associated proxy-ARP or proxy-ND entry, if it exists.
All
Commands in this context configure dynamic link measurement delay options for the IP interface.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
This command enables the addition of dynamic entries to the proxy-ARP table (disabled by default). When executed, the system will populate proxy-ARP entries from snooped GARP/ARP messages on SAPs/SDP-bindings. These entries will be shown as dynamic.
When disabled, dynamic-arp entries will be flushed from the proxy-ARP table. Enabling dynamic-arp-populate is only recommended in networks with a consistent configuration of this command in all the PEs.
no dynamic-arp-populate
All
This optional command controls the behavior of the associated static route so that if a matching BGP route to the same exact prefix is present in BGP, the static route's nexthop is set to the BGP’s nexthop value. If there is no matching active BGP route, the static route's nexthop is set to be a black-hole nexthop.
no dynamic-bgp
All
This command disables the creation of dynamic bypass LSPs in FRR. One or more manual bypass LSPs must be configured to protect the primary LSP path at the PLR nodes.
dynamic-bypass enable
All
This command enables OSPF or ISIS costing of a Link Aggregation Group (LAG) based on the available aggregated, operational bandwidth.
The path cost is dynamically calculated based on the interface bandwidth. OSPF path cost can be changed through the interface metric or the reference bandwidth.
If dynamic cost is configured, then costing is applied based on the total number of links configured and the cost advertised is inversely proportional to the number of links available at the time. This is provided that the number of links that are up exceeds the configured LAG threshold value at which time the configured threshold action determines if, and at what cost, this LAG will be advertised.
For example: Assume a physical link in OSPF has a cost associated with it of 100, and the LAG consists of four physical links. The cost associated with the logical link is 25. If one link fails then the cost would automatically be adjusted to 33.
If dynamic cost is not configured and OSPF autocost is configured, then costing is applied based on the total number of links configured. This cost will remain static provided the number of links that are up exceeds the configured LAG threshold value at which time the configured threshold action determines if and at what cost this LAG will be advertised.
If dynamic-cost is configured and OSPF autocost is not configured, the cost is determined by the cost configured on the OSPF metric provided the number of links available exceeds the configured LAG threshold value at which time the configured threshold action determines if this LAG will be advertised.
If neither dynamic-cost nor OSPF autocost are configured, the cost advertised is determined by the cost configured on the OSPF metric provided the number of links available exceeds the configured LAG threshold value at which time the configured threshold action determines if this LAG will be advertised.
The no form of this command removes dynamic costing from the LAG.
no dynamic-cost
All
All
This command reserves a set of policers for use as dynamic enforcement policers for the Distributed CPU Protection (DCP) feature. Policers are allocated from this pool and instantiated as per-object-per-protocol dynamic enforcement policers after a local monitor is triggered for an object (such as a SAP or Network Interface). Any change to this configured value automatically clears the high water mark, timestamp, and failed allocation counts as seen under “show card x fp y dist-cpu-protection” and in the tmnxFpDcpDynEnfrcPlcrStatTable in the TIMETRA-CHASSIS-MIB. Decreasing this value to below the currently used/allocated number causes all dynamic policers to be returned to the free pool (and traffic returns to the local monitors).
no dynamic-enforcement-policer-pool
All
Commands in this context configure which fields are included in the exported cflowd template.
The no form of this command removes all configured dynamic fields from the template.
![]() | Note: This command is only supported if the dynamic option is configured in the field-selection command. |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command enables dynamic keying for the IPsec tunnel.
The no form of this command disables dynamic keying.
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
VSR
This command enables support for dynamically modifying the MBS size of a queue using HQoS in order to maintain the maximum latency for traffic in the queue based on the queue’s configured MBS and the ratio of its operational PIR to its administrative PIR. As the HQoS algorithm updates the operational PIR, by reducing or increasing it, the MBS of the queue is adjusted accordingly.
The configuration of dynamic MBS and the configuration of queue depth monitoring (monitor-queue-depth command) are mutually exclusive. Queue depth monitoring is an override on the queue where the queue group is applied.
The no form of this command disables dynamic MBS resizing.
no dynamic-mbs
All
This command enables the addition of dynamic entries to the proxy-ND table. The command is disabled by default. When executed, the system will populate proxy-ND entries from snooped Neighbor Advertisement (NA) messages on SAPs/SDP-bindings, in addition to the entries coming from EVPN (if the EVPN is enabled). These entries will be shown as dynamic, as opposed to EVPN entries or static entries.
When disabled, dynamic-ND entries will be flushed from the proxy-ND table. Enabling dynamic-nd-populate is only recommended in networks with a consistent configuration of this command in all the PEs.
no dynamic-nd-populate
All
Commands in this context configure dynamic BGP sessions for a peer group.
All
Commands in this context configure dynamic BGP sessions for a peer group.
All
This command configures the maximum number of dynamic BGP sessions that are accepted from remote peers associated with the entire BGP instance or a specific peer group. If accepting a new dynamic session would cause either the group limit or the instance limit to be exceeded, then the new session attempt is rejected and a Notification message is sent back to the remote peer.
The no form of this command removes the limit on the number of dynamic sessions.
no dynamic-neighbor-limit
All
This command configures the maximum number of dynamic BGP sessions that will be accepted from remote peers associated with the entire BGP instance or a specific peer group. If accepting a new dynamic session would cause either the group limit or the instance limit to be exceeded, then the new session attempt is rejected and a Notification message is sent back to the remote peer.
The no form of this command removes the limit on the number of dynamic sessions.
no dynamic-neighbor-limit
All
The dynamic-parameters are used to instantiate a dynamic enforcement policer for the protocol when the associated local-monitoring-policer is considered as exceeding its rate parameters (at the end of a minimum monitoring time of 60 seconds).
All
Commands in this context configure common properties for dynamic-policers. Dynamic policers are instantiated and terminated on demand due to an action request submitted by the policy server (for example, using a Gx interface). The actions types behind dynamic policers are typically related to rate-limiting or volume monitoring. The dynamic-policers can be instantiated on demand at any time during the lifetime of the sla-profile instance.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure dynamic services parameters on a capture SAP.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure dynamic data services. Only available on systems with multi-core CPM (CPM3 or up).
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
Commands in this context configure dynamic services debugging.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command creates a new dynamic services policy that can be used to create dynamic data services.
The no form of this command removes the dynamic services policy from the configuration. This is only allowed when there are no active dynamic data services referencing this policy.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command specifies the local configured dynamic data service policy to use for provisioning (local authentication database context) or authentication (capture-sap context) of this dynamic service. If not specified, the dynamic services policy with the name default is used. If the default policy does not exist, then the dynamic data service setup or authentication fails.
The no form of this command removes the dynamic services policy from the configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
This command enables the ANCP dynamic topology discovery capability.
The no form of this command disables the feature.
All
This command specifies redundant next-hop address on a public or private IPsec interface (with public or private tunnel-sap) for dynamic IPsec tunnel. The specified next-hop address is used by a standby node to shunt traffic to master in case it receives the address.
The next-hop address is resolved in the routing table of a corresponding service.
no dynamic-tunnel-redundant-next-hop
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
This command enables debugging for dynamic MLDP.
The no form of this command disables dynamic MLDP debugging.
All
![]() | Note: See also the description for the enable-dynamic-services-config command. |
This command allows a user with admin permissions to configure a system wide password which enables a user to enter a special dynamic services configuration mode.
The minimum length of the password is determined by the minimum-length command. The complexity requirements for the password are determined by the complexity command.
The no form of this command removes the dynsvc password from the configuration.
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR