8. d Commands

8.1. d-path-length-ignore

d-path-length-ignore

Syntax 
[no] d-path-length-ignore
Context 
[Tree] (config>router>bgp>path-selection d-path-length-ignore)
[Tree] (config>service>vprn>bgp>path-selection d-path-length-ignore)
[Tree] (config>service>vprn d-path-length-ignore)
Full Contexts 
configure router bgp best-path-selection d-path-length-ignore
configure service vprn bgp best-path-selection d-path-length-ignore
configure service vprn d-path-length-ignore
Description 

This command enables and disables the ability of the router to ignore D-PATH domain segment length during best-path selection. At the base router level (or vprn>bgp level for PE-CE routers), this command allows BGP to ignore the D-PATH domain segment length for best-path selection purposes. The D-PATH length is ignored when comparing two VPN routes or two IFL routes within the same RD. However, these VPN/IFL routes are processed in Main-BGP instance.

At the VPRN router level, this command allows the VPRN RTM to ignore the D-PATH domain segment length for best path selection purposes (for routes in VPRN). The user can control whether the D-PATH length is considered when two VPN routes with different RDs are compared.

Best-path selection for EVPN-IFF routes against other owners (for example, EVPN-IFL or IPVPN) still relies on RTM preference. When EVPN-IFF RTM preference matches the RTM preference of another BGP owner, the existing RTM selection applies and D-PATH is not considered, irrespective of the d-path-length-ignore configuration.

The no form of this command disables the ability to ignore the D-PATH domain segment length.

Default 

no d-path-length-ignore

Platforms 

All

8.2. dack-timeout

dack-timeout

Syntax 
dack-timeout dack-timeout
no dack-timeout
Context 
[Tree] (config>app-assure>group>tcp-optimizer dack-timeout)
Full Contexts 
configure application-assurance group tcp-optimizer dack-timeout
Description 

This command configures a delayed ACK (DACK) timeout for the TCP optimizer. By entering this command a default of 200 ms timeout is enabled for delayed acknowledgment. This value is not configurable.

The no form of this command disables the delayed acknowledgment timeout.

Default 

no dack-timeout

Parameters 
dack-timeout—
Specifies the delayed acknowledgment timeout in ms.
Default—
200
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.3. dad-disable

dad-disable

Syntax 
[no] dad-disable
Context 
[Tree] (config>router>if>ipv6 dad-disable)
[Tree] (config>service>ies>if>ipv6 dad-disable)
[Tree] (config>service>vprn>if>ipv6 dad-disable)
Full Contexts 
configure router interface ipv6 dad-disable
configure service ies interface ipv6 dad-disable
configure service vprn interface ipv6 dad-disable
Description 

This command disables duplicate address detection (DAD) on a per-interface basis. This prevents the router from performing a DAD check on the interface. All IPv6 addresses of an interface with DAD disabled, immediately enter a preferred state, without checking for uniqueness on the interface. This is useful for interfaces which enter a looped state during troubleshooting and operationally disable themselves when the loop is detected, requiring manual intervention to clear the DAD violation.

The no form of this command turns off dad-disable on the interface.

Default 

no dad-disable

Platforms 

All

8.4. dad-snooping

dad-snooping

Syntax 
[no] dad-snooping
Context 
[Tree] (config>service>ies>sub-if>grp-if>ipv6>nd dad-snooping)
[Tree] (config>service>vprn>sub-if>grp-if>ipv6>nd dad-snooping)
Full Contexts 
configure service ies subscriber-interface group-interface ipv6 nd dad-snooping
configure service vprn subscriber-interface group-interface ipv6 nd dad-snooping
Description 

This command allows the router to populate the neighbor discovery table through snooping subscribers’ duplicate address detection messages.

The no form of this command reverts to the default.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.5. damp-peer-oscillations

damp-peer-oscillations

Syntax 
damp-peer-oscillations [idle-hold-time initial-wait second-wait max-wait] [error-interval minutes]
Context 
[Tree] (config>service>vprn>bgp damp-peer-oscillations)
[Tree] (config>service>vprn>bgp>group damp-peer-oscillations)
[Tree] (config>service>vprn>bgp>group>neighbor damp-peer-oscillations)
Full Contexts 
configure service vprn bgp damp-peer-oscillations
configure service vprn bgp group damp-peer-oscillations
configure service vprn bgp group neighbor damp-peer-oscillations
Description 

This command controls how long a BGP peer session remains in the idle-state after some type of error causes the session to reset. In the idle state, BGP does not initiate or respond to attempts to establish a new session. Repeated errors that occur a short while after each session reset cause longer and longer hold times in the idle state. This command supports the DampPeerOscillations FSM behavior described in section 8.1 of RFC 4271, A Border Gateway Protocol 4 (BGP-4).

The default behavior, which applies when no damp-peer-oscillations is configured, is to immediately transition out of the idle-state after every reset.

Default 

no damp-peer-oscillations

Parameters 
initial-wait—
Specifies the amount of time, in minutes, that a session remains in the idle-state after it has been stable for a while.
Values—
0 to 2048

 

Default—
0
second-wait—
Specifies the period of time, in minutes, that is doubled after each repeated session failure that occurs within a relatively short span of time.
Values—
0 to 2048

 

Default—
5
max-wait—
Specifies the maximum amount of time, in minutes, that a session remains in the idle-state after it has experienced repeated instability.
Values—
0 to 2048

 

Default—
60
minutes —
Specifies the interval of time, in minutes after a session reset, during which the session must be error-free in order to reset the penalty counter and return to idle-hold-time to initial-wait.
Values—
0 to 2048

 

Default—
30
Platforms 

All

damp-peer-oscillations

Syntax 
damp-peer-oscillations [idle-hold-time initial-wait second-wait max-wait] [error-interval minutes]
Context 
[Tree] (config>router>bgp damp-peer-oscillations)
[Tree] (config>router>bgp>group damp-peer-oscillations)
[Tree] (config>router>bgp>group>neighbor damp-peer-oscillations)
Full Contexts 
configure router bgp damp-peer-oscillations
configure router bgp group damp-peer-oscillations
configure router bgp group neighbor damp-peer-oscillations
Description 

This command controls how long a BGP peer session remains in the idle-state after some type of error causes the session to reset. In the idle state, BGP does not initiate or respond to attempts to establish a new session. Repeated errors that occur a short while after each session reset cause longer and longer hold times in the idle state. This command supports the DampPeerOscillations FSM behavior described in section 8.1 of RFC 4271, A Border Gateway Protocol 4 (BGP-4).

The default behavior, which applies when no damp-peer-oscillations is configured, is to immediately transition out of the idle-state after every reset.

Default 

no damp-peer-oscillations

Parameters 
initial-wait—
The amount of time, in minutes, that a session remains in the idle-state after it has been stable for a while.
Values—
0 to 2048

 

Default—
0
second-wait—
A period of time, in minutes, that is doubled after each repeated session failure that occurs within a relatively short span of time.
Values—
1 to 2048

 

Default—
5
max-wait—
The maximum amount of time, in minutes, that a session remains in the idle-state after it has experienced repeated instability.
Values—
1 to 2048

 

Default—
60
minutes —
The interval of time, in minutes after a session reset, during which the session must be error-free in order to reset the penalty counter and return from idle-hold-time to initial-wait.
Values—
0 to 2048

 

Default—
30
Platforms 

All

8.6. dampening

dampening

Syntax 
dampening
Context 
[Tree] (config>port>ethernet dampening)
Full Contexts 
configure port ethernet dampening
Description 

Commands in this context configure exponential port dampening for an Ethernet port.

Exponential Port Dampening (EPD) reduces the number of physical link transitions reported to upper layer protocols, potentially reducing upper layer protocol churn caused by a faulty link. Penalties are added against a port whenever the port’s physical link state transitions from a link up state to a link down state. When the penalties exceed a configurable threshold, port-up and port-down transitions are no longer advertised to upper layers and the port’s operational state will remain down until the penalty amount drops below a configurable reuse threshold. Each transition of link up state to link down state increments the accumulated penalty value by 1000. The accumulated penalties for a port are reduced at an exponential decay rate according to a configurable half-life parameter.

Platforms 

All

8.7. damping

damping

Syntax 
[no] damping
Context 
[Tree] (config>subscr-mgmt>bgp-prng-plcy damping)
Full Contexts 
configure subscriber-mgmt bgp-peering-policy damping
Description 

This command enables BGP route damping for learned routes which are defined within the route policy. Use damping to reduce the number of update messages sent between BGP peers and reduce the load on peers without affecting the route convergence time for stable routes. Damping parameters are set via route the policy definition.

The no form of this command used at the global level disables route damping.

When damping is enabled and the route policy does not specify a damping profile, the default damping profile is used. This profile is always present and consists of the following parameters:

Half-life:

15 minutes

Max-suppress:

60 minutes

Suppress-threshold:

3000

Reuse-threshold

750

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

damping

Syntax 
[no] damping
Context 
[Tree] (config>service>vprn>bgp damping)
[Tree] (config>service>vprn>bgp>group damping)
[Tree] (config>service>vprn>bgp>group>neighbor damping)
Full Contexts 
configure service vprn bgp damping
configure service vprn bgp group damping
configure service vprn bgp group neighbor damping
Description 

This command enables BGP route damping for learned routes which are defined within the route policy. Use damping to reduce the number of update messages sent between BGP peers and reduce the load on peers without affecting the route convergence time for stable routes. Damping parameters are set via route policy definition.

The no form of this command used at the global level disables route damping.

The no form of this command used at the group level reverts to the value defined at the global level.

The no form of this command used at the neighbor level reverts to the value defined at the group level.

When damping is enabled and the route policy does not specify a damping profile, the default damping profile is used. This profile is always present and consists of the following parameters:

Half-life: 15 minutes

Max-suppress: 60 minutes

Suppress-threshold: 3000

Reuse-threshold: 750

Default 

no damping — Learned route damping is disabled.

Platforms 

All

damping

Syntax 
[no] damping
Context 
[Tree] (config>router>bgp damping)
[Tree] (config>router>bgp>group damping)
[Tree] (config>router>bgp>group>neighbor damping)
Full Contexts 
configure router bgp damping
configure router bgp group damping
configure router bgp group neighbor damping
Description 

This command enables BGP route damping for learned routes which are defined within the route policy. Use damping to reduce the number of update messages sent between BGP peers and reduce the load on peers without affecting the route convergence time for stable routes. Damping parameters are set via route policy definition.

The no form of this command used at the global level reverts route damping.

The no form of this command used at the group level reverts to the value defined at the global level.

The no form of this command used at the neighbor level reverts to the value defined at the group level.

When damping is enabled and the route policy does not specify a damping profile, the default damping profile is used. This profile is always present and consists of the following parameters:

  1. Half-life: 15 minutes
  2. Max-suppress: 60 minutes
  3. Suppress-threshold: 3000
  4. Reuse-threshold: 750
Default 

no damping

Platforms 

All

damping

Syntax 
[no] damping name
Context 
[Tree] (config>router>policy-options damping)
Full Contexts 
configure router policy-options damping
Description 

This command creates a context to configure a route damping profile to use in route policy entries.

The no form of this command deletes the named route damping profile.

Default 

no damping

Parameters 
name—
Specifies the damping profile name. Allowed values are any string up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms 

All

damping

Syntax 
damping {name | none}
no damping
Context 
[Tree] (config>router>policy-options>policy-statement>default-action damping)
[Tree] (config>router>policy-options>policy-statement>entry>action damping)
Full Contexts 
configure router policy-options policy-statement default-action damping
configure router policy-options policy-statement entry action damping
Description 

This command configures a damping profile used for routes matching the route policy statement entry.

If no damping criteria is specified, the default damping profile is used.

The no form of this command removes the damping profile associated with the route policy entry.

Default 

no damping

Parameters 
name—
The damping profile name. Allowed values are any string up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes. Policy parameters must be enclosed by at-signs (@) and may be midstring; for example, "@variable@," "start@variable@end"," @variable@end", or "start@variable@".

The name specified must already be defined.

none—
Disables route damping for the route policy.
Platforms 

All

8.8. data

data

Syntax 
data [group grp-ip-address] [source ip-address] [detail]
no data
Context 
[Tree] (debug>router>pim data)
Full Contexts 
debug router pim data
Description 

This command enables debugging for PIM data exception.

The no form of this command disables PIM data exception debugging.

Parameters 
grp-ip-address
Debugs information associated with the specified data exception.
Values—
multicast group address (ipv4, ipv6)

 

ip-address
Debugs information associated with the specified data exception.
Values—
source address (ipv4, ipv6)

 

detail—
Debugs detailed IP data exception information.
Platforms 

All

8.9. data-bearer

data-bearer

Syntax 
[no] data-bearer data-bearer-id
Context 
[Tree] (config>router>lmp>te-link data-bearer)
Full Contexts 
configure router lmp te-link data-bearer
Description 

This command creates a data bearer assigned to a TE Link. Only one data bearer may be configured within a given TE Link.

Default 

no data-bearer

Parameters 
data-bearer-id—
Specifies the ID of the data bearer.
Values—
1 to 4294967295

 

Platforms 

7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.10. data-delay-interval

data-delay-interval

Syntax 
data-delay-interval seconds
no data-delay-interval
Context 
[Tree] (config>service>vpls>provider-tunnel>inclusive data-delay-interval)
Full Contexts 
configure service vpls provider-tunnel inclusive data-delay-interval
Description 

This command configures the I-PMSI data delay timer.

This delay timer is intended to allow time for the RSVP control plane to signal and bring up the S2L sub-LSP to each destination PE participating in the VPLS/B-VPLS service. The delay timer is started as soon as the P2MP LSP instance becomes operationally up after the user performed a ‘no shutdown’ under the inclusive node, i.e., as soon as the first S2L sub-LSP is up. In general, it is started when the P2MP LSP instance transitions from the operationally down state to the up state.

For a mLDP P2MP LSP, the delay timer is started as soon as the P2MP FEC corresponding to the I-PMSI is resolved and installed at the root node. The user must factor in the value configured in the data-delay-interval at the root node any delay configured in IGP-LDP sync timer (config>router>if>ldp-sync-timer) on interfaces over the network. This is because the mLDP P2MP LSP may move to a different interface at the expiry of this timer since the routing upstream of the LDP Label Mapping message may change when this timer expires and the interface metric is restored.

At the expiry of this timer, the VPLS/B-VPLS will begin forwarding of BUM packets over the P2MP LSP instance even if not all the S2L paths are up.

The no version of this command re-instates the default value for this delay timer.

Parameters 
seconds—
Specifies the delay time value in seconds
Values—
3 to 180

 

Default—
15
Platforms 

All

data-delay-interval

Syntax 
data-delay-interval value
no data-delay-interval
Context 
[Tree] (config>service>vprn>mvpn>pt>selective data-delay-interval)
Full Contexts 
configure service vprn mvpn provider-tunnel selective data-delay-interval
Description 

This command specifies the interval, in seconds, before a PE router connected to the source switches traffic from the inclusive provider tunnel to the selective provider tunnel.

This command is not applicable to multi-stream S-PMSI.

The no form of this command reverts the value to the default.

Default 

data-delay-interval 3

Parameters 
value —
Specifies the data delay interval, in seconds.
Values—
3 to 180

 

Platforms 

All

data-delay-interval

Syntax 
data-delay-interval value
no data-delay-interval
Context 
[Tree] (config>router>gtm>provider-tunnel>selective data-delay-interval)
Full Contexts 
configure router gtm provider-tunnel selective data-delay-interval
Description 

This command specifies the interval, in seconds, before a PBR connected to the source switches traffic from the inclusive provider tunnel to the selective provider tunnel.

This command is not applicable to multi-stream S-PMSIs.

The no form of this command reverts the value to the default.

Default 

data-delay-interval 3

Parameters 
value —
Specifies the data delay interval, in seconds.
Values—
3 to 180

 

Default—
3
Platforms 

All

8.11. data-encapsulation

data-encapsulation

Syntax 
[no] data-encapsulation
Context 
[Tree] (config>service>vprn>msdp data-encapsulation)
Full Contexts 
configure service vprn msdp data-encapsulation
Description 

This command configures a rendezvous point (RP) using Multicast Source Discovery Protocol (MSDP) to encapsulate multicast data received in MSDP register messages inside forwarded MSDP source-active messages.

Default 

data-encapsulation

Platforms 

All

data-encapsulation

Syntax 
[no] data-encapsulation
Context 
[Tree] (config>router>msdp data-encapsulation)
Full Contexts 
configure router msdp data-encapsulation
Description 

This command configures a rendezvous point (RP) using Multicast Source Discovery Protocol (MSDP) to encapsulate multicast data received in MSDP register messages inside forwarded MSDP source-active messages.

Default 

data-encapsulation

Platforms 

All

8.12. data-threshold

data-threshold

Syntax 
data-threshold {c-grp-ip-addr/mask | c-grp-ip-addr netmask} s-pmsi-threshold [pe-threshold-add pe-threshold-add] [pe-threshold-delete pe-threshold-delete]
data-threshold c-grp-ipv6-addr/prefix-length s-pmsi-threshold [pe-threshold-add pe-threshold-add] [pe-threshold-delete pe-threshold-delete]
no data-threshold {c-grp-ip-addr/mask | c-grp-ip-addr netmask}
no data-threshold c-grp-ipv6-addr/prefix-length
Context 
[Tree] (config>service>vprn>mvpn>pt>selective data-threshold)
Full Contexts 
configure service vprn mvpn provider-tunnel selective data-threshold
Description 

This command specifies the data rate threshold that triggers the switch from the inclusive provider tunnel to the selective provider tunnel for (C-S, C-G) within the group range. Optionally, PE thresholds for creating/deleting ng-MVPN S-PMSI may also be specified. Omitting the PE thresholds, preserves the currently set value (or defaults if never set). Multiple statements (one per a unique group) are allowed in the configuration.

This command is not applicable to multi-stream S-PMSI.

The no form of this command removes the values from the configuration.

Default 

no data-threshold

Parameters 
group-address/mask —
Specifies a multicast group address and netmask length.
c-grp-ip-addr/mask | c-grp-ip-addr netmask—
Specifies an IPv4 multicast group address and netmask length or network mask.
c-grp-ipv6-addr/prefix-length—
Specifies an IPv6 multicast group address and prefix length.
s-pmsi-threshold —
Specifies the rate, in kb/s. If the rate for a (C-S, C-G)) within the specified group range exceeds the threshold, traffic for the (C-S, C-G) is switched to the selective provider tunnel. Threshold 0 is supported. When threshold 0 is configured, the (C-S, C-G) switches to S-PMSI as soon as it is learned in the MVPN and without traffic flowing for that (C-S, C-G).
s-pmsi-threshold-add —
Specifies the number of receiver PEs for creating S-PMSI. When the number of receiver PEs for a given multicast group configuration is non-zero and below the threshold and BW threshold is satisfied, S-PMSI is created.
s-pmsi-threshold-delete—
Specifies the number of receiver PEs for deleting S-PMSI. When the number of receiver PEs for a given multicast group configuration is above the threshold, S-PMSI is deleted and the multicast group is moved to I-PMSI or a wildcard S-PMSI. It is recommended that the delete threshold be significantly larger than the add threshold, to avoid re-signaling of S-PMSI as the receiver PE count fluctuates.
Values—

c-grp-ip-addr

: multicast group address a.b.c.d

mask

[4 to 32]

netmask

: a.b.c.d (network bits all 1 and host bits all 0)

s-pmsi-threshold

: [0 to 4294967294] (threshold in kb/s)

c-grp-ipv6-addr

: multicast ipv6-address x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x [0 to FFFF]H

d [0 to 255]D

prefix-length [1 to 128]

pe-threshold-add:

[1 to 65535], if never specified, 65535 is used (add threshold always met)

pe-threshold-delete:

[2 to 65535], if never specified, 65535 is used (delete threshold never met)

 

Platforms 

All

data-threshold

Syntax 
data-threshold {c-grp-ip-addr/mask | c-grp-ip-addr netmask} s-pmsi-threshold [pe-threshold-add pe-threshold-add] [pe-threshold-delete pe-threshold-delete]
data-threshold c-grp-ipv6-addr/prefix-length s-pmsi-threshold [pe-threshold-add pe-threshold-add] [pe-threshold-delete pe-threshold-delete]
no data-threshold {c-grp-ip-addr/mask | c-grp-ip-addr netmask}
no data-threshold c-grp-ipv6-addr/prefix-length
Context 
[Tree] (config>router>gtm>provider-tunnel>selective data-threshold)
Full Contexts 
configure router gtm provider-tunnel selective data-threshold
Description 

This command specifies the data rate threshold that triggers the switch from the inclusive provider tunnel to the selective provider tunnel for (C-S, C-G) within the group range. Optionally, PBR thresholds for creating or deleting NG-MVPN S-PMSI may also be specified. Omitting the PBR thresholds preserves currently set values (or defaults if never set). Multiple statements (one per a unique group) are allowed in the configuration.

This command is not applicable to multi-stream S-PMSIs.

The no form of this command removes the values from the configuration.

Default 

no data-threshold

Parameters 
c-grp-ip-addr/mask | c-grp-ip-addr netmask—
Specifies an IPv4 multicast group address and netmask length or network mask.
Values—
mask: 4 to 32

 

c-grp-ipv6-addr/prefix-length—
Specifies an IPv6 multicast group address and prefix length.
s-pmsi-threshold —
Specifies the rate, in kb/s. If the rate for a (C-S, C-G) within the specified group range exceeds the threshold, traffic for the (C-S, C-G) will be switched to the selective provider tunnel.
s-pmsi-threshold-add —
Specifies the number of receiver PBRs for creating S-PMSI. When the number of receiver PBRs for a given multicast group configuration is non-zero and below the threshold and BW threshold is satisfied, S-PMSI is created.
s-pmsi-threshold-delete—
Specifies the number of receiver PBRs for deleting S-PMSI. When the number of receiver PBRs for a given multicast group configuration is above the threshold, S-PMSI is deleted and the multicast group is moved to I-PMSI or a wildcard S-PMSI. It is recommended that the delete threshold be significantly larger than the add threshold to avoid re-signaling of S-PMSI as the receiver PBR count fluctuates.
Values—

c-grp-ip-addr

multicast group address a.b.c.d

mask

4 to 32

netmask

a.b.c.d (network bits all 1 and host bits all 0)

s-pmsi-threshold

1 to 4294967294 (threshold in kb/s)

c-grp-ipv6-addr

multicast ipv6-address x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x [0 to FFFF]H

d [0 to 255]D

prefix-length [1 to 128]

pe-threshold-add

1 to 65535 Default: 65535 (delete threshold always met)

pe-threshold-delete

2 to 65535 Default: 65535:(delete threshold always met)

 

Platforms 

All

8.13. data-tlv-size

data-tlv-size

Syntax 
data-tlv-size octets
no data-tlv-size
Context 
[Tree] (config>oam-pm>session>ethernet>slm data-tlv-size)
[Tree] (config>oam-pm>session>ethernet>dmm data-tlv-size)
Full Contexts 
configure oam-pm session ethernet dmm data-tlv-size
configure oam-pm session ethernet slm data-tlv-size
Description 

This command allows the operator to add an optional Data TLV to PDU and increase the frame on the wire by the specified amount. Note that this command only configures the size of the padding added to the PDU, and does not configure the total size of the frame on the wire.

The no form of this command removes the optional TLV.

Parameters 
octets—
Specifies the size, in octets, of the optional Data TLV.
Values—
0, 3 to 2000

 

Default—
0
Platforms 

All

8.14. data-trigger

data-trigger

Syntax 
data-trigger
Context 
[Tree] (config>service>vprn>sub-if>grp-if data-trigger)
[Tree] (config>service>ies>sub-if>grp-if data-trigger)
Full Contexts 
configure service ies subscriber-interface group-interface data-trigger
configure service vprn subscriber-interface group-interface data-trigger
Description 

Commands in this context configure data-triggered subscriber management entities.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.15. data-triggered

data-triggered

Syntax 
[no] data-triggered
Context 
[Tree] (config>service>ies>sub-if>grp-if>sap>static-host-mgmt>mac-learning-options data-triggered)
[Tree] (config>service>vprn>sub-if>grp-if>sap>static-host-mgmt>mac-learning-options data-triggered)
Full Contexts 
configure service ies subscriber-interface group-interface sap static-host-mgmt mac-learning-options data-triggered
configure service vprn subscriber-interface group-interface sap static-host-mgmt mac-learning-options data-triggered
Description 

This command enables learning of MAC addresses from data packets.

The no form of this command disables learning of MAC addresses from data packets.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

data-triggered

Syntax 
[no] data-triggered
Context 
[Tree] (config>subscr-mgmt>wlan-gw>ue-query>state data-triggered)
Full Contexts 
configure subscriber-mgmt wlan-gw ue-query state data-triggered
Description 

This command enables matching on UEs currently in a data-triggered state. This query only filters UEs that are currently authenticating due to a data trigger, not UEs that were originally authenticated due to data trigger, such as those in an ESM, DSM, or portal state.

The no form of this command disables matching on UEs in a data-triggered state, unless all state matching is disabled.

Default 

no data-triggered

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.16. data-triggered-ue-creation

data-triggered-ue-creation

Syntax 
[no] data-triggered-ue-creation
Context 
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range data-triggered-ue-creation)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range data-triggered-ue-creation)
Full Contexts 
configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range data-triggered-ue-creation
configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range data-triggered-ue-creation
Description 

This command enables data-triggered subscriber creation for WIFI subscribers. Data- triggered UE creation is currently only supported for UDP and TCP packets.

The no form of this command disables the data-triggered subscriber creation for WIFI subscribers.

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.17. data-triggers

data-triggers

Syntax 
[no] data-triggers
Context 
[Tree] (debug>dynsvc data-triggers)
Full Contexts 
debug dynamic-services data-triggers
Description 

Commands in this context configure dynamic services data trigger capture SAP debugging. The no form of this command removes all dynamic services data trigger capture SAP debug configurations.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.18. database

database

Syntax 
database [group grp-ip-address] [source ip-address] [detail]
no database
Context 
[Tree] (debug>service>id>pim-snooping database)
Full Contexts 
debug service id pim-snooping database
Description 

This command enables or disables debugging for the PIM database.

Parameters 
grp-ip-address
Debugs information associated with all PIM modules
Values—
multicast group address (IPv4 or IPv6) or zero

 

ip-address
Debugs information associated with the specified database
Platforms 

All

8.19. database-export

database-export

Syntax 
database-export [identifier id] [bgp-ls-identifier bgp-ls-id]
no database-export
Context 
[Tree] (config>router>isis database-export)
Full Contexts 
configure router isis database-export
Description 

This command enables the population of the extended TE Database (TE-DB) with the link-state information from a given IGP instance.

The extended TE-DB is used as a central point for importing all link-state information, link, node, and prefix, from IGP instances on the router or the vSROS controller of the NSP and to exporting it to BGP-LS on the router and to Java-VM proxy on the vSROS controller. This information includes the IGP, TE, and the SR information, prefix SID sub-TLV, adjacency SID sub-TLV, and router SR capability TLV.

The no form of this command disables database exportation.

Parameters 
identifier—
This parameter is used to uniquely identify the IGP instance in the BGP-LS NLRI when a router has interfaces participating in multiple IGP instances. This parameter defaults to the IGP instance ID assigned by SR OS. However, given that the concept of instance ID defined in IS-IS (RFC 6822) is unique within a routing domain while the one specified for OSPF is local subnet significant (RFC 6549), the user can remove any overlap by configuring the new identifier value to be unique within a given IGP domain when this router sends the IGP link-state information using BGP-LS.
id—
Specifies an entry ID to export.
Values—
0 to 18446744073709551615

 

bgp-ls-identifier—
This parameter is used, along with the Autonomous System Number (ASN) to correlate the BGP-LS NLRI advertisements of multiples BGP-LS speakers of the same IGP domain. If an NRC-P network domain has multiple IGP domains, BGP-LS speakers within each IGP domain must be configured with the same unique {bgp-ls-identifier, asn} tuple.

The BGP-LS identifier is optional and is only sent in a BGP-LS NLRI if configured in the IGP instance of an IGP domain.

Note that if this IGP instance participates in traffic engineering with RSVP-TE or SR-TE, the traffic-engineering option is not strictly required because enabling the extended TE-DB populates this information automatically. It is, however, recommended to enable it to make the configuration consistent with other routers in the network that do not require the enabling of the extended TE-DB.

bgp-ls-id—
Specifies a BGP LS ID to export.
Values—
0 to 4294967295

 

Platforms 

All

database-export

Syntax 
database-export [identifier id] [bgp-ls-identifier bgp-ls-id]
no database-export
Context 
[Tree] (config>router>ospf database-export)
[Tree] (config>router>ospf3 database-export)
Full Contexts 
configure router ospf database-export
configure router ospf3 database-export
Description 

This command enables the population of the extended TE Database (TE-DB) with the link-state information from a given IGP instance.

The extended TE-DB is used as a central point for importing all link-state information, link, node, and prefix, from IGP instances on the router or the vSROS controller of the NSP and to exporting it to BGP-LS on the router and to Java-VM proxy on the vSROS controller. This information includes the IGP, TE, and the SR information, prefix SID sub-TLV, adjacency SID sub-TLV, and router SR capability TLV.

The no form of this command disables database exportation.

Default 

no database-export

Parameters 
identifier—
Identifies the IGP instance in the BGP-LS NLRI when a router has interfaces participating in multiple IGP instances. This parameter defaults to the IGP instance ID assigned by SR OS. The concept of instance ID specified for OSPF is local subnet significant (RFC 6549). The user can remove router specific overlap by configuring the new identifier value to be unique within a given IGP domain when this router sends the IGP link-state information using BGP-LS.
id—
Specifies an entry ID to export.
Values—
0 to 18446744073709551615

 

bgp-ls-identifier—
This parameter is used, along with the Autonomous System Number (ASN), to correlate the BGP-LS NLRI advertisements of multiples BGP-LS speakers of the same IGP domain. If an NRC-P network domain has multiple IGP domains, BGP-LS speakers within each IGP domain must be configured with the same unique {bgp-ls-identifier, asn} tuple.

The BGP-LS identifier is optional and is only sent in a BGP-LS NLRI if configured in the IGP instance of an IGP domain.

Note that if this IGP instance participates in traffic engineering with RSVP-TE or SR-TE, the traffic-engineering option is not strictly required because enabling the extended TE-DB populates this information automatically. It is, however, recommended to enable it to make the configuration consistent with other routers in the network that do not require the enabling of the extended TE-DB.

bgp-ls-id—
Specifies a BGP LS ID to export.
Values—
0 to 4294967295

 

Platforms 

All

8.20. database-export-exclude

database-export-exclude

Syntax 
[no] database-export-exclude
Context 
[Tree] (config>router>isis>level database-export-exclude)
Full Contexts 
configure router isis level database-export-exclude
Description 

This command allows the user to prune the IGP link-state information of a specific IS-IS level from being exported into the extended TE-DB.

The no form of this command returns to the default behavior inherited from the database-export command at the IS-IS instance level.

Platforms 

All

database-export-exclude

Syntax 
[no] database-export-exclude
Context 
[Tree] (config>router>ospf>area database-export-exclude)
Full Contexts 
configure router ospf area database-export-exclude
Description 

This command allows the user to prune the IGP link-state information of a specific OSPF level or OSPF area from being exported into the extended TE-DB. The no form of this command returns to the default behavior inherited from the database-export command at the IS-IS or OSPF instance level.

Default 

no database-export-exclude

Platforms 

All

8.21. datapath-cpu-high-wmark

datapath-cpu-high-wmark

Syntax 
datapath-cpu-high-wmark high-watermark
datapath-cpu-high-wmark max
Context 
[Tree] (config>app-assure datapath-cpu-high-wmark)
Full Contexts 
configure application-assurance datapath-cpu-high-wmark
Description 

This command configures the system-wide high watermark threshold as a percentage of the per-ISA datapath core CPU utilization, where an alarm will be raised by the agent. CPU usage is the average usage across all datapath cores.

Default 

datapath-cpu-high-wmark 95

Parameters 
high-watermark—
Specifies the high watermark for datapath CPU usage alarms.
Values—
1 to 100

 

max—
Disables the high watermark for datapath CPU usage alarms
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.22. datapath-cpu-low-wmark

datapath-cpu-low-wmark

Syntax 
datapath-cpu-low-wmark low-watermark
Context 
[Tree] (config>app-assure datapath-cpu-low-wmark)
Full Contexts 
configure application-assurance datapath-cpu-low-wmark
Description 

This command configures the system-wide low watermark threshold as a percentage of the per-ISA datapath core CPU utilization, where an alarm will be raised by the agent. CPU usage is the average usage across all datapath cores.

Default 

datapath-cpu-low-wmark 90

Parameters 
low-watermark—
Specifies the low watermark for datapath CPU usage alarms.
Values—
1 to 100

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.23. day-of-month

day-of-month

Syntax 
day-of-month {day-number [..day-number] all}
no day-of-month
Context 
[Tree] (config>system>cron>sched day-of-month)
Full Contexts 
configure system cron schedule day-of-month
Description 

This command specifies which days of the month that the schedule will occur. Multiple days of the month can be specified. When multiple days are configured, each of them will cause the schedule to trigger. If a day-of-month is configured without configuring month, weekday, hour, and minute, the event will not execute.

Using the weekday command as well as the day-of-month command will cause the script to run twice. For example, consider that today is Monday January 1. If Tuesday January 5 is configured, the script will run on Tuesday (tomorrow) as well as January 5 (Friday).

The no form of this command removes the specified day-of-month from the list.

Default 

no day-of-month

Parameters 
day-number—
Specifies the positive integers specify the day of the month counting from the first of the month. The negative integers specify the day of the month counting from the last day of the month. For example, configuring day-of-month -5, 5 in a month that has 31 days will specify the schedule to occur on the 27th and 5th of that month.

Integer values must map to a valid day for the month in question. For example, February 30 is not a valid date.

Values—
1 to 31, -31 to -1 (maximum 62 day-numbers)

 

all—
Specifies all days of the month.
Platforms 

All

8.24. db

db

Syntax 
db [group grp-ip-address] [source ip-address] [detail]
no db
Context 
[Tree] (debug>router>pim db)
Full Contexts 
debug router pim db
Description 

This command enables debugging for PIM database.

The no form of this command disables PIM database debugging.

Parameters 
grp-ip-address
Debugs information associated with the specified database.
Values—
multicast group address (ipv4, ipv6) or zero

 

ip-address
Debugs information associated with the specified database.
Values—
source address (ipv4, ipv6)

 

detail—
Debugs detailed IP database information.
Platforms 

All

8.25. dbw-accounting

dbw-accounting

Syntax 
[no] dbw-accounting
Context 
[Tree] (config>router>rsvp dbw-accounting)
Full Contexts 
configure router rsvp dbw-accounting
Description 

This command enables dark bandwidth accounting and enters the context to configure the associated parameters. When dark bandwidth accounting is enabled, the system polls the dark bandwidth counters, performs sample and average rate computations, and generates IGP-TE updates if required. To enable dark bandwidth accounting, auxiliary MPLS statistics must first be enabled using the command config>router>mpls>aux-stats.

The no form of this command disables dark bandwidth accounting, resets all global parameters to their default values, and results in an immediate IGP-TE update for which dark bandwidth is null.

Default 

no dbw-accounting

8.26. dbw-down-threshold

dbw-down-threshold

Syntax 
dbw-down-threshold percent-change [bw absolute-change]
no dbw-down-threshold
Context 
[Tree] (config>router>rsvp>interface dbw-down-threshold)
Full Contexts 
configure router rsvp interface dbw-down-threshold
Description 

This command sets the minimum change (in percent of the latest advertised value) above which an decrease in MRLB (IS-IS TE sub-TLV 10) or MRB (OSPF TE sub-TLV 7) triggers an IGP-TE update. This configuration only applies to a change in MRLB or MRB caused by dark bandwidth. Other events affecting MRLB/MRB (such as the change of the subscription factor or the loss of link in a LAG over which the RSVP interface is defined) trigger an immediate TE update, regardless of the importance of the impact.

Optionally, the threshold can also be expressed as an absolute value. In this case, the evaluation of the change is made using the percent change and the absolute change. An IGP-TE update is sent if both thresholds are crossed. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.

By default, the multiplier inherits the global value, unless it is specifically set using this command. The no form of this command sets this parameter to inherit the value of the corresponding global parameter.

Parameters 
percent-change—
Specifies the minimum decrease in MRLB/MRB, expressed in percent.
Values—
0 to 100

 

absolute-change—
Specifies the minimum decrease in MRLB/MRB, expressed in Mb/s.
Values—
0 to 1000000

 

8.27. dbw-multiplier

dbw-multiplier

Syntax 
dbw-multiplier percent
Context 
[Tree] (config>router>rsvp>dbw-accounting dbw-multiplier)
Full Contexts 
configure router rsvp dbw-accounting dbw-multiplier
Description 

This command sets the dark bandwidth multiplier to the specified value. Choosing 0% will lead to no IGP-TE updates based on dark bandwidth evolution being sent. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.

Default 

dbw-multiplier 100

Parameters 
percent—
Specifies the multiplier, expressed in percent.
Values—
0 to 1000

 

dbw-multiplier

Syntax 
dbw-multiplier percent
no dbw-multiplier
Context 
[Tree] (config>router>rsvp>interface dbw-multiplier)
Full Contexts 
configure router rsvp interface dbw-multiplier
Description 

This command sets the dark bandwidth multiplier to the specified value. Choosing 0% will lead to no IGP-TE updates based on dark bandwidth evolution being sent. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.

By default, the multiplier inherits the global value, unless it is specifically set using this command. The no form of this command sets this parameter to inherit the value of the corresponding global parameter.

Parameters 
percent—
Specifies the multiplier, expressed in percent.
Values—
0 to 1000

 

8.28. dbw-up-threshold

dbw-up-threshold

Syntax 
dbw-up-threshold percent-change [bw absolute-change]
no dbw-up-threshold
Context 
[Tree] (config>router>rsvp>interface dbw-up-threshold)
Full Contexts 
configure router rsvp interface dbw-up-threshold
Description 

This command sets the minimum change (in percent of the latest advertised value) above which an increase in MRLB (IS-IS TE sub-TLV 10) or MRB (OSPF TE sub-TLV 7) triggers an IGP-TE update. This configuration only applies to a change in MRLB or MRB caused by dark bandwidth. Other events affecting MRLB/MRB (such as the change of the subscription factor or the loss of link in a LAG over which the RSVP interface is defined) trigger an immediate TE update, regardless of the importance of the impact.

Optionally, the threshold can also be expressed as an absolute value. In this case, the evaluation of the change uses the percent change and the absolute change. An IGP-TE update is sent if both thresholds are crossed. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.

By default, the multiplier inherits the global value, unless it is specifically set using this command. The no form of this command sets this parameter to inherit the value of the corresponding global parameter.

Parameters 
percent-change—
Specifies the minimum increase in MRLB/MRB, expressed in percent.
Values—
0 to 100

 

absolute-change—
Specifies the minimum increase in MRLB/MRB, expressed in Mb/s.
Values—
0 to 1000000

 

8.29. ddm-events

ddm-events

Syntax 
[no] ddm-events
Context 
[Tree] (config>port ddm-events)
Full Contexts 
configure port ddm-events
Description 

This command enables Digital Diagnostic Monitoring (DDM) events for the port.

The no form of this command disables DDM events.

Platforms 

All

8.30. de-1-out-profile

de-1-out-profile

Syntax 
[no] de-1-out-profile
Context 
[Tree] (config>qos>sap-ingress>fc de-1-out-profile)
Full Contexts 
configure qos sap-ingress fc de-1-out-profile
Description 

This command, when enabled on a parent forwarding class, applies a color profile mode to the packets stored in the queue associated with this forwarding class. The queue associated with the parent forwarding class must be of type profile-mode.

When this QoS policy is applied to the ingress of a Frame Relay VLL SAP, the system will treat the received FR frames with DE bit set as out-of-profile, regardless of their previous marking as the result of the default classification or on a match with an IP filter. It also adjusts the CIR of the ingress SAP queue to consider out-of-profile frames that were sent while the SAP queue was in the “< CIR” state of the bucket. This makes sure that the CIR of the SAP is achieved.

All received DE = 0 frames that are classified into this parent forwarding class or any of its subclasses have their profile unchanged by enabling this option. That is, the DE = 0 frame profile could be undetermined (default), in-profile, or out-of-profile as per previous classification. The DE = 0 frames that have a profile of undetermined will be evaluated by the system CIR marking algorithm and will be marked appropriately.

The priority option, if used, has no effect. All FR VLL DE = 1 frames have their priority automatically set to low while DE = 0 frames have their priority set to high. Furthermore, DE = 1 frames have the drop-preference bit set in the internal header. The internal settings of the priority bit and of the drop-preference bit of the frame is independent of the use of the profile mode.

All other capabilities of the Fpipe service are maintained. This includes remarking of the DE bit on egress SAP, and FR PW control word on egress network port for the packets that were classified into “out-of-profile” at ingress SAP.

This de-1-out-profile keyword has an effect when applied to the ingress of a SAP that is part of an Fpipe service. It can also be used on the ingress of an Epipe or VPLS SAP.

The no form of this command disables the color profile mode of operation on all SAPs to which this ingress QoS policy is applied.

Default 

no de-1-out-profile

Platforms 

All

8.31. de-mark

de-mark

Syntax 
de-mark [force de-value]
no demark
Context 
[Tree] (config>qos>sap-egress>fc de-mark)
Full Contexts 
configure qos sap-egress fc de-mark
Description 

This command is used to explicitly define the marking of the DE bit for fc fc-name according to the inplus-profile/in-profile or out-of-profile/exceed-profile status of the packet (fc-name may be used to identify the dot1p-value).

If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile or in-profile packets, 1 for out-of-profile or exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.

In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the DE bit for both the BVID and ITAG.

If this command is not used, the DE bit should be preserved if an ingress TAG exist; otherwise, set to zero.

If the DE value is included in the command line, this value is to be used for all the packets of this forwarding class regardless of their profile status.

The commands de-mark-inner and de-mark-outer take precedence over the de-mark command if both are specified in the same policy.

Parameters 
de-value—
Specifies the DE marking value.
Values—
0 or 1

 

Platforms 

All

de-mark

Syntax 
de-mark [force de-value]
no de-mark
Context 
[Tree] (config>qos>network>egress>fc de-mark)
Full Contexts 
configure qos network egress fc de-mark
Description 

This command is used to explicitly define the marking of the DE bit for fc fc-name according to the inplus-profile or in-profile and out-of-profile or exceed-profile status of the packet (fc-name may be used to identify the dot1p value).

Parameters 
de-value—
Specifies that this value is to be used for all the packets of this forwarding class regardless of their profile status.

If no DE value is present, the default values are used for the marking of the DE bit; that is, 0 for inplus-profile and in-profile packets, 1 for out-of-profile and exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.

In the PBB case, use the following rules for a network port (B-SDP):

  1. the outer VID follows the rules for regular SDP
  2. for packets originating from a local I-VPLS/PBB-Epipe, this command dictates the marking of the DE bit for both the outer (link level) BVID and ITAG; if the command is not used, the DE bit is set to zero.
  3. for transit packets (B-SAP/B-SDP to B-SDP), the related ITAG bits are preserved, the same as for BVID.
Values—
0, 1

 

Platforms 

All

8.32. de-mark-inner

de-mark-inner

Syntax 
de-mark-inner [force de-value]
no de-mark-inner
Context 
[Tree] (config>qos>sap-egress>fc de-mark-inner)
Full Contexts 
configure qos sap-egress fc de-mark-inner
Description 

This command is used to explicitly define the marking of the DE bit in the inner VLAN tag for fc fc-name on a QinQ SAP, according to the in- and out-of-profile status of the packet.

If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile or in-profile packets, 1 for out-of-profile or exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.

If the DE value is included in the command line, this value is used for all the inner tags of packets of this forwarding class, regardless of their profile status.

This command takes precedence over the de-mark command if both are specified in the same policy and over the default action.

The configuration of qinq-mark-top-only under the SAP egress takes precedence over the use of the de-mark-inner in the policy. That is, the inner VLAN tag is not remarked when qinq-mark-top-only is configured (the marking used for the inner VLAN tag is based on the current default, which is governed by the marking of the packet received at the ingress to the system).

If no de-mark commands are used, the DE bit is preserved if an ingress inner tag exists; otherwise, set to 0.

Remarking the inner DE bit is not supported based on the profile result of egress policing.

Parameters 
de-value—
Specifies the DE marking value.
Values—
0 or 1

 

Platforms 

All

8.33. de-mark-outer

de-mark-outer

Syntax 
de-mark-outer [force de-value]
no de-mark-outer
Context 
[Tree] (config>qos>sap-egress>fc de-mark-outer)
Full Contexts 
configure qos sap-egress fc de-mark-outer
Description 

This command is used to explicitly define the marking of the DE bit in the outer or single VLAN tag on a qinq or dot1q SAP, respectively, according to the in, out, or exceed-profile status of the packet.

If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile/in-profile packets, 1 for out-of-profile/exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.

If the DE value is included in the command line, this value is used for all the outer or single tags of packets of this forwarding class, regardless of their profile status.

In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the DE bit for both the BVID and ITAG.

This command takes precedence over the de-mark command if both are specified in the same policy and over the default action.

If no de-mark commands are used, the DE bit is preserved if an ingress outer or single tag exists; otherwise, set to 0.

Parameters 
de-value—
Specifies the DE marking value.
Values—
0 or 1

 

Platforms 

All

8.34. dead-interval

dead-interval

Syntax 
dead-interval seconds
no dead-interval
Context 
[Tree] (config>service>vprn>ospf>area>if dead-interval)
[Tree] (config>service>vprn>ospf>area>virtual-link dead-interval)
[Tree] (config>service>vprn>ospf3>area>if dead-interval)
[Tree] (config>service>vprn>ospf3>area>virtual-link dead-interval)
[Tree] (config>service>vprn>ospf>area>sham-link dead-interval)
Full Contexts 
configure service vprn ospf area interface dead-interval
configure service vprn ospf area sham-link dead-interval
configure service vprn ospf area virtual-link dead-interval
configure service vprn ospf3 area interface dead-interval
configure service vprn ospf3 area virtual-link dead-interval
Description 

This command configures the time, in seconds, that OSPF waits before declaring a neighbor router down. If no Hello packets are received from a neighbor for the duration of the dead interval, the router is assumed to be down. The minimum interval must be two times the Hello interval.

The no form of this command reverts to the default value.

Default 

dead-interval 40

Special Cases 
OSPF Interface—
If the configured dead-interval applies to an interface, then all nodes on the subnet must have the same dead interval.
Virtual Link—
If the configured dead-interval applies to a virtual link, then the interval on both termination points of the virtual link must have the same dead interval.

Sham-link — If the configured dead-interval applies to a sham-link, then the interval on both endpoints of the sham-link must have the same dead interval.

Parameters 
seconds—
The dead interval expressed as a decimal integer.
Values—
2 to 65535 seconds

 

Platforms 

All

dead-interval

Syntax 
dead-interval seconds
no dead-interval
Context 
[Tree] (config>router>ospf>area>interface dead-interval)
[Tree] (config>router>ospf>area>virtual-link dead-interval)
[Tree] (config>router>ospf3>area>interface dead-interval)
[Tree] (config>router>ospf3>area>virtual-link dead-interval)
Full Contexts 
configure router ospf area interface dead-interval
configure router ospf area virtual-link dead-interval
configure router ospf3 area interface dead-interval
configure router ospf3 area virtual-link dead-interval
Description 

This command configures the time, in seconds, that OSPF waits before declaring a neighbor router down. If no hello packets are received from a neighbor for the duration of the dead interval, the router is assumed to be down. The minimum interval must be two times the hello interval.

The no form of this command reverts to the default value.

Default 

dead-interval 40

Special Cases 
OSPF Interface—
If the dead-interval configured applies to an interface, then all nodes on the subnet must have the same dead interval.
Virtual Link—
If the dead-interval configured applies to a virtual link, then the interval on both termination points of the virtual link must have the same dead interval.
Parameters 
seconds—
The dead interval expressed in seconds.
Values—
2 to 65535

 

Platforms 

All

8.35. dead-timer

dead-timer

Syntax 
dead-timer seconds
no dead-timer
Context 
[Tree] (config>router>pcep>pcc dead-timer)
[Tree] (config>router>pcep>pce dead-timer)
Full Contexts 
configure router pcep pcc dead-timer
configure router pcep pce dead-timer
Description 

This command configures the PCEP session dead timer value, which is the amount of time a PCEP speaker (PCC or PCE) will wait after the receipt of the last PCEP message before declaring its peer down.

The keep-alive mechanism is asymmetric, meaning that each PCEP speaker can propose a different dead timer value to its peer to use to detect session timeout.

The no form of the command returns the dead timer to the default value.

Default 

dead-timer 120

Parameters 
seconds—
the dead timer value, in seconds
Values—
1 to 255

 

Platforms 

All

8.36. debounce

debounce

Syntax 
[no] debounce
Context 
[Tree] (config>redundancy>mc>peer>mcr>ring>in-band-control-path debounce)
[Tree] (config>redundancy>mc>peer>mc>l3-ring>in-band-control-path debounce)
Full Contexts 
configure redundancy multi-chassis peer multi-chassis l3-ring in-band-control-path debounce
configure redundancy multi-chassis peer mc-ring ring in-band-control-path debounce
Description 

This command enables the inband control path debouncing. The no form of this command disables inband control path debouncing.

The no form of this command reverts to the default.

Default 

debounce

Platforms 

All

debounce

Syntax 
debounce occurrences [within seconds]
no debounce
Context 
[Tree] (config>log>event-trigger>event>trigger-entry debounce)
Full Contexts 
configure log event-trigger event trigger-entry debounce
Description 

This command configures when to trigger, for example after one or more event occurrences. The number of occurrences of an event can be bounded by a time window or left open.

The no form of this command removes the debounce configuration.

Parameters 
occurrences—
Specifies the number of times an event must occur for EHS to trigger a response.
Values—
2 to 15

 

within seconds
Specifies the time window within which a specific event must occur a number of times equivalent to the specified occurrences for EHS to trigger a response.
Values—
1 to 604800

 

Platforms 

All

8.37. debug

debug

Syntax 
debug
Context 
[Tree] (debug)
Full Contexts 
debug
Description 

Commands in this context specify debugging options.

Platforms 

All

8.38. debug-output

debug-output

Syntax 
[no] debug-output
Context 
[Tree] (config>call-trace>trace-profile debug-output)
Full Contexts 
configure call-trace trace-profile debug-output
Description 

This command enables output to the debug log. Traced messages are decoded as text and sent to debug logging. This allows for real-time debugging but is not recommended on live systems because of the decode overhead.

This command disables logging to the compact flash. The debug-output and live-output commands are mutually exclusive.

The no form of this command disables output to the debug log.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.39. debug-save

debug-save

Syntax 
debug-save [file-url]
Context 
[Tree] (admin debug-save)
Full Contexts 
admin debug-save
Description 

This command saves existing debug configuration (configuration done under the debug branch of CLI). Debug configurations are not saved by the admin save command and not preserved across a node reboot or CPM switchover. The debug-save command makes the debug configuration available for the operator to execute after a reboot by using the exec command or after a CPM switchover by using the switchover-exec command, if desired.

Parameters 
file-url—
Specifies the file URL location to save the debug configuration. If no file-url is specified then the debug configuration is saved at the same location as the standard configuration file (bof>primary-config/bof>secondary-config/bof>tertiary-config) with the same file name as the standard configuration file but with a .dbg suffix.
Note:

IPv6-address applies only to 7750 SR and 7950 XRS.

Values—

file url

local-url | remote-url: 255 chars max

local-url

[cflash-id/][file-path] 200 chars max, including cflash-id file-path 199 chars max

remote-url

[{ftp:// | tftp://}login:pswd@remote-locn/][file-path]

255 chars max

directory length 99 chars max each

remote-locn

{hostname | ipv4-address | [ipv6-address]}

ipv4-address

a.b.c.d

ipv6-address

x:x:x:x:x:x:x:x[-interface]

x:x:x:x:x:x:d.d.d.d[-interface]

x - [0 to FFFF]H

d - [0 to 255]D

interface - 32 chars max, for link local addresses 255

cflash-id

cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:

 

Platforms 

All

8.40. decrypt-key

decrypt-key

Syntax 
decrypt-key key | hash-key | hash2-key [hash | hash2 | custom]
no decrypt-key
Context 
[Tree] (config>app-assure>group>url-list decrypt-key)
Full Contexts 
configure application-assurance group url-list decrypt-key
Description 

In case the file is encrypted this command is used to configure the decryption key used to read the file.

The no form of this command removes the url-list object.

Default 

no decrypt-key

Parameters 
key | hash-key | hash2-key—
Specifies the Application-Assurance url-list decryption key.
hash—
Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
hash2—
Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
custom—
Specifies the custom encryption to management interface.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.41. def-app-profile

def-app-profile

Syntax 
def-app-profile app-profile-name
no def-app-profile
Context 
[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt def-app-profile)
[Tree] (config>service>ies>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-app-profile)
[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt def-app-profile)
[Tree] (config>service>vprn>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-app-profile)
[Tree] (config>service>vpls>sap>sub-sla-mgmt def-app-profile)
[Tree] (config>subscriber-mgmt>msap-policy>sub-sla-mgmt def-app-profile)
Full Contexts 
configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-app-profile
configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-app-profile
configure service vpls sap sub-sla-mgmt def-app-profile
configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-app-profile
configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-app-profile
configure subscriber-mgmt msap-policy sub-sla-mgmt def-app-profile
Description 

This command specifies the default application profile to be used by a subscriber host.

The no form of this command removes the application profile name from the configuration.

Parameters 
app-profile-name—
Specifies an existing application profile to be mapped to the subscriber profile by default up to 32 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  1. configure service vpls sap sub-sla-mgmt def-app-profile
  2. configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-app-profile
  3. configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-app-profile
  4. configure subscriber-mgmt msap-policy sub-sla-mgmt def-app-profile

7750 SR, 7750 SR-e, 7750 SR-s, VSR

  1. configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-app-profile
  2. configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-app-profile

def-app-profile

Syntax 
def-app-profile profile-name
no def-app-profile
Context 
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>dsm def-app-profile)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>dsm def-app-profile)
Full Contexts 
configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt def-app-profile
configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt def-app-profile
Description 

This command configures the default application profile.

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

def-app-profile

Syntax 
def-app-profile app-profile-name
no def-app-profile
Context 
[Tree] (config>app-assure>group>transit-ip-policy def-app-profile)
Full Contexts 
configure application-assurance group transit-ip-policy def-app-profile
Description 

This command configures a default application profile.

Default 

no def-app-profile

Parameters 
app-profile-name—
Specifies the application profile name, up to 32 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.42. def-instance-sharing

def-instance-sharing

Syntax 
def-instance-sharing {per-sap | per-session}
Context 
[Tree] (config>subscr-mgmt>sla-prof def-instance-sharing)
Full Contexts 
configure subscriber-mgmt sla-profile def-instance-sharing
Description 

This command configures the default SPI sharing method for IPoE or PPPoE sessions from the same subscriber, having the same SLA profile associated, that are active on the same SAP. SPI sharing can be per-SAP or a dedicated SPI per-session.

Default 

def-instance-sharing per-sap

Parameters 
per-sap —
Specifies that IPoE or PPP sessions from the same subscriber, having the same SLA profile associated, and active on the same SAP share an SPI.
per-session—
Specifies that IPoE or PPP sessions from the same subscriber, having the same SLA profile associated, and active on the same SAP obtain a dedicated SPI per session.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.43. def-inter-dest-id

def-inter-dest-id

Syntax 
def-inter-dest-id string string
def-inter-dest-id {use-top-q | use-vpi}
no def-inter-dest-id
Context 
[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt def-inter-dest-id)
[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt def-inter-dest-id)
[Tree] (config>subscr-mgmt>msap-policy>sub-sla-mgmt def-inter-dest-id)
Full Contexts 
configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-inter-dest-id
configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-inter-dest-id
configure subscriber-mgmt msap-policy sub-sla-mgmt def-inter-dest-id
Description 

This command specifies a default destination string for all subscribers associated with the SAP. The command also accepts the use-top-q flag that automatically derives the string based on the top most delineating Dot1Q tag from the SAP’s encapsulation.

The no form of this command removes the default subscriber identification string from the configuration.

Parameters 
string—
A RADIUS VSA (Alc-Int-Dest-Id-Str, type 28) obtained during the subscriber authentication phase contains the destination string name that is matched against the string defined under the Vport. In this fashion the subscriber host is associated with the corresponding Vport.

Alternatively, the destination string can be defined in LUDB.

use-top-q—
This is applicable only to Ethernet ports.
use-vpi—
VP Identifier (VPI) is used to make the association between the subscriber and the Vport automatically.

The control plane is aware of the VPI during the session initiation phase. This VPI is used to make the association between the host and the Vport with the same name (VPI number).

Note:

In this case the Vport name under the configure>port>sonet-sdh>path>access>egress context must be the VPI number.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

def-inter-dest-id

Syntax 
def-inter-dest-id {string string | use-top-q}
no def-inter-dest-id
Context 
[Tree] (config>service>vpls>sap>sub-sla-mgmt def-inter-dest-id)
Full Contexts 
configure service vpls sap sub-sla-mgmt def-inter-dest-id
Description 

This command specifies a default destination string for all subscribers associated with the SAP. The command also accepts the use-top-q flag that automatically derives the string based on the top most delineating Dot1Q tag from the SAP’s encapsulation.

The no form of this command removes the default subscriber identification string from the configuration.

no def-sub-id

Default 

no def-inter-dest-id

Parameters 
use-top-q—
Specifies to derive the string based on the top most delineating Dot1Q tag from the SAP’s encapsulation
string string
Specifies the subscriber identification applicable for a subscriber host.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.44. def-recv-evpn-encap

def-recv-evpn-encap

Syntax 
def-recv-evpn-encap {mpls | vxlan}
no def-recv-evpn-encap
Context 
[Tree] (config>router>bgp>group>neighbor def-recv-evpn-encap)
[Tree] (config>router>bgp>group def-recv-evpn-encap)
Full Contexts 
configure router bgp group def-recv-evpn-encap
configure router bgp group neighbor def-recv-evpn-encap
Description 

This command defines how the BGP will treat a received EVPN route without RC5512 BGP encapsulation extended community. If no encapsulation is received, BGP will validate the route as MPLS or VXLAN depending on how this command is configured.

Default 

no def-recv-evpn-encap

Parameters 
mpls —
Specifies that mpls is the default encapsulation value in the case where no RFC5512 extended community is received in the incoming BGP-EVPN route.
vxlan —
Specifies that vxlan is the default encapsulation value.
Platforms 

All

8.45. def-sla-profile

def-sla-profile

Syntax 
def-sla-profile default-sla-profile-name
no def-sla-profile
Context 
[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt def-sla-profile)
[Tree] (config>service>ies>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sla-profile)
[Tree] (config>service>vpls>sap>sub-sla-mgmt def-sla-profile)
[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt def-sla-profile)
[Tree] (config>service>vprn>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sla-profile)
[Tree] (config>subscr-mgmt>msap-policy>sub-sla-mgmt def-sla-profile)
Full Contexts 
configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sla-profile
configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sla-profile
configure service vpls sap sub-sla-mgmt def-sla-profile
configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-sla-profile
configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sla-profile
configure subscriber-mgmt msap-policy sub-sla-mgmt def-sla-profile
Description 

This command specifies a default SLA profile for this SAP. The SLA profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sla-profile context.

If a subscriber is not explicitly associated with an SLA profile during the authentication phase, a default profile will be assigned to it.

The no form of this command removes the default SLA profile from the SAP configuration.

Parameters 
default-sla-profile-name—
Specifies a default SLA profile for this SAP.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  1. configure service vpls sap sub-sla-mgmt def-sla-profile
  2. configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-sla-profile
  3. configure subscriber-mgmt msap-policy sub-sla-mgmt def-sla-profile
  4. configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sla-profile

7750 SR, 7750 SR-e, 7750 SR-s, VSR

  1. configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sla-profile
  2. configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sla-profile

8.46. def-sub-id

def-sub-id

Syntax 
def-sub-id use-auto-id
def-sub-id use-sap-id
def-sub-id string sub-id
no def-sub-id
Context 
[Tree] (config>subscr-mgmt>msap-policy>sub-sla-mgmt def-sub-id)
[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt def-sub-id)
[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt def-sub-id)
[Tree] (config>service>vpls>sap>sub-sla-mgmt def-sub-id)
Full Contexts 
configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sub-id
configure service vpls sap sub-sla-mgmt def-sub-id
configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-sub-id
configure subscriber-mgmt msap-policy sub-sla-mgmt def-sub-id
Description 

This command specifies the explicit default sub-id for dynamic subscriber hosts (including ARP hosts) in case that the sub-id string is not supplied through RADIUS or LUDB.

The sub-id is assigned to a new subscriber host in the following order of priority:

  1. RADIUS
  2. LUDB
  3. Explicit default – The def-sub-id command is used to explicitly set the sub-id name of the host as one of the following:
    1. The SAP ID to which the new host is associated
    2. An explicit string
    3. An auto-generated string consisting of the concatenated subscriber identification fields defined under the subscr-mgmt>auto-sub-id-key node. The fields are taken in the order in which they are configured and are separated by a ‘|‘character. The subscriber host identification fields are separately defined for IPoE and PPPoE host types.
  4. Implicit default – If the sub-id string is not returned via RADIUS or LUDB and there is no def-sub-id configured, the sub-id name is generated as a random 10 character encoded string based on the auto-sub-id-keys. This 10 characters encoded string is unique per chassis as well as in dual-homed environment. It is generated based on auto-sub-id-keys. If auto-sub-id-keys are not explicitly configured, the default ones are:
    1. mac, sap-id, or session-id for PPP type hosts
    2. mac or sap-id for IPoE type hosts.

This command does not apply to static subscribers.

The no form of this command reverts to the default.

Parameters 
use-sap-id —
Specifies the sub-id name-id on which the original request for host creation arrived (DHCP Discover, or PADI or ARP Request).
sub-id
Explicitly configured sub-id name up to 32 characters.
use-auto-id —
Specifies the concatenated string of auto-sub-id-keys separated by a “| ” character.
Default—
no def-sub-id
Implicit default   If the sub-id string is not supplied through RADIUS, LUDB, or def-sub-id configuration, then a random 10 character encoded sub-id name is generated. This random sub-id name is based on the subscriber identification keys defined under the subscr-mgmt>auto-sub-id-key node. In case that the auto-sub-id-keys are not defined explicitly, the default ones are:
  1. mac, sap-id, or session-id for PPPoE type hosts
  2. mac or sap-id for IPoE type hosts
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

def-sub-id

Syntax 
def-sub-id string sub-id
def-sub-id use-auto-id
no def-sub-id
Context 
[Tree] (config>service>vprn>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sub-id)
[Tree] (config>service>ies>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sub-id)
Full Contexts 
configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-id
configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-id
Description 

This command configures the default subscriber ID. The default is used if no other source (like RADIUS) provides a subscriber identification string.

Parameters 
sub-id
Specifies the default subscriber identification up to 32 characters.
use-auto-id—
Specifies that the auto-generated subscriber identification string, is used as the default subscriber identification string.
Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.47. def-sub-profile

def-sub-profile

Syntax 
def-sub-profile default-subscriber-profile-name
Context 
[Tree] (config>subscr-mgmt>msap-policy>sub-sla-mgmt def-sub-profile)
Full Contexts 
configure subscriber-mgmt msap-policy sub-sla-mgmt def-sub-profile
Description 

This command specifies a default subscriber profile for an MSAP.

A subscriber profile defines the aggregate QoS for all hosts within a subscriber context. This is done through the definition of the egress and ingress scheduler policies that govern the aggregate SLA for subscriber using the subscriber profile.

The no form of this command removes the default SLA profile from the SAP configuration.

Parameters 
default-sub-profile—
Specifies a default subscriber profile for this SAP up to 32 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

def-sub-profile

Syntax 
def-sub-profile default-subscriber-profile-name
Context 
[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt def-sub-profile)
[Tree] (config>service>ies>if>sap>sub-sla-mgmt def-sub-profile)
[Tree] (config>service>ies>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sub-profile)
[Tree] (config>service>vprn>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sub-profile)
Full Contexts 
configure service ies interface sap sub-sla-mgmt def-sub-profile
configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sub-profile
configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-profile
configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-profile
Description 

This command specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.

A subscriber profile defines the aggregate QoS for all hosts within a subscriber context. This is done through the definition of the egress and ingress scheduler policies that govern the aggregate SLA for subscriber using the subscriber profile. Subscriber profiles also allow for specific SLA profile definitions when the default definitions from the subscriber identification policy must be overridden.

The no form of this command removes the default SLA profile from the SAP configuration.

Parameters 
default-sub-profile—
Specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  1. configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sub-profile

7750 SR, 7750 SR-e, 7750 SR-s, VSR

  1. configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-profile
  2. configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-profile

def-sub-profile

Syntax 
def-sub-profile default-subscriber-profile-name
Context 
[Tree] (config>service>vpls>sap>sub-sla-mgmt def-sub-profile)
Full Contexts 
configure service vpls sap sub-sla-mgmt def-sub-profile
Description 

This command specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.

A subscriber profile defines the aggregate QoS for all hosts within a subscriber context. This is done through the definition of the egress and ingress scheduler policies that govern the aggregate SLA for subscriber using the subscriber profile. Subscriber profiles also allow for specific SLA profile definitions when the default definitions from the subscriber identification policy must be overridden.

The no form of this command removes the default SLA profile from the SAP configuration.

Parameters 
default-sub-profile—
Specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.48. default

default

Syntax 
[no] default
Context 
[Tree] (config>log>accounting-policy default)
Full Contexts 
configure log accounting-policy default
Description 

This command configures the default accounting policy to be used with all SAPs that do not have an accounting policy.

If no access accounting policy is defined on a SAP, accounting records are produced in accordance with the default access policy. If no default access policy is created, then no accounting records will be collected other than the records for the accounting policies that are explicitly configured.

If no network accounting policy is defined on a network port, accounting records will be produced in accordance with the default network policy. If no network default policy is created, then no accounting records will be collected other than the records for the accounting policies explicitly configured.

Only one access accounting policy ID can be designated as the default access policy. Likewise, only one network accounting policy ID can be designated as the default network accounting policy.

The record name must be specified prior to assigning an accounting policy as default.

If a policy is configured as the default policy, then a no default command must be issued before a new default policy can be configured.

The no form of this command removes the default policy designation from the policy ID. The accounting policy will be removed from all SAPs or network ports that do not have this policy explicitly defined.

Platforms 

All

8.49. default-accounting-server-policy

default-accounting-server-policy

Syntax 
default-accounting-server-policy policy-name
no default-accounting-server-policy
Context 
[Tree] (config>router>radius-proxy>server default-accounting-server-policy)
[Tree] (config>service>vprn>radius-proxy>server default-accounting-server-policy)
Full Contexts 
configure router radius-proxy server default-accounting-server-policy
configure service vprn radius-proxy server default-accounting-server-policy
Description 

This command specifies the default radius-server-policy for RADIUS accounting. This policy is used when there is no specific match based on username.

The no form of this command removes the policy name from the configuration.

Parameters 
policy-name—
Specifies the name of the default RADIUS server policy associated with this RADIUS Proxy server for accounting purposes.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.50. default-action

default-action

Syntax 
default-action {bypass-host-creation | drop}
no default-action
Context 
[Tree] (config>filter>dhcp-filter default-action)
Full Contexts 
configure filter dhcp-filter default-action
Description 

This command specifies the default action for DHCP filters when no entries match.

The no form of this command reverts to the default.

Parameters 
bypass-host-creation—
Specifies to bypass ESM host creation options.
drop—
Specifies to drop and not process the DHCP message.
Platforms 

All

default-action

Syntax 
default-action bypass-host-creation [na] [pd]
default-action drop
no default-action
Context 
[Tree] (config>filter>dhcp6-filter default-action)
Full Contexts 
configure filter dhcp6-filter default-action
Description 

This command specifies the default action for DHCP6 filters when no entries match.

The no form of this command reverts to the default.

Parameters 
bypass-host-creation—
Specifies to bypass ESM host creation options.
Values—
na — Bypasses the DHCP NA hosts creation.
pd — Bypasses the DHCP PD hosts creation.

 

drop—
Specifies to drop and not process the DHCP6 message.
Platforms 

All

default-action

Syntax 
default-action {drop | forward}
no default-action
Context 
[Tree] (config>subscr-mgmt>isa-filter default-action)
[Tree] (config>subscr-mgmt>isa-filter>ipv6 default-action)
Full Contexts 
configure subscriber-mgmt isa-filter default-action
configure subscriber-mgmt isa-filter ipv6 default-action
Description 

This command specifies what should happen to packets that do not match any of the configured entries.

The no form of this command reverts to the default value.

Default 

default-action drop

Parameters 
drop—
Specifies that packets matching the filter entry are dropped.
forward—
Specifies that packets matching the filter entry are forwarded.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax 
default-action {block | allow}
Context 
[Tree] (config>service>mrp>mrp-policy default-action)
Full Contexts 
configure service mrp mrp-policy default-action
Description 

This command specifies the action to be applied to the MMRP attributes (Group B-MACs) whose ISIDs do not match the specified criteria in all of the entries of the mrp-policy.

When multiple default-action commands are entered, the last command will overwrite the previous command.

Default 

default-action allow

Parameters 
block—
Specifies that all MMRP attributes will not be declared or registered unless there is a specific mrp-policy entry which causes them to be allowed on this SAP or SDP.
allow—
Specifies that all MMRP attributes will be declared and registered unless there is a specific mrp-policy entry which causes them to be blocked on this SAP or SDP.
Platforms 

All

default-action

Syntax 
default-action {drop | forward}
no default-action
Context 
[Tree] (config>service>vprn>log>filter default-action)
Full Contexts 
configure service vprn log filter default-action
Description 

The default action specifies the action that is applied to events when no action is specified in the event filter entries or when an event does not match the specified criteria.

When multiple default-action commands are entered, the last command overwrites the previous command.

The no form of this command reverts the default action to the default value (forward).

Default 

default-action forward — The events which are not explicitly dropped by an event filter match are forwarded.

Parameters 
drop—
The events which are not explicitly forwarded by an event filter match are dropped.
forward—
The events which are not explicitly dropped by an event filter match are forwarded.
Platforms 

All

default-action

Syntax 
default-action {permit | deny} [event-log event-log-name]
Context 
[Tree] (config>app-assure>group>sess-fltr default-action)
Full Contexts 
configure application-assurance group session-filter default-action
Description 

This command specifies the default action to take for packets that do not match any filter entries.

The no form of this command reverts the default action to the default value (forward).

Default 

default-action deny

Parameters 
deny—
Indicates that packets matching the criteria are denied.
permit—
Indicates that packets matching the criteria are permitted.
event-log-name—
Specifies the event log name, up to 32 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax 
default-action direction direction [create]
no default-action direction direction
Context 
[Tree] (config>app-assure>group>statistics>tca>gtp-fltr>msg default-action)
Full Contexts 
configure application-assurance group statistics threshold-crossing-alert gtp-filter message-type default-action
Description 

This command configures a TCA for the counter capturing hits for the specified GTP filter default action. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.

Parameters 
direction—
Specifies the traffic direction.
Values—
from-sub, to-sub

 

create—
Keyword used to create the TCA.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax 
default-action direction direction [create]
no default-action direction direction
Context 
[Tree] (config>app-assure>group>statistics>tca>gtp-fltr>msg-gtpv2 default-action)
Full Contexts 
configure application-assurance group statistics threshold-crossing-alert gtp-filter message-type-gtpv2 default-action
Description 

This command configures a TCA for the counter capturing hits due to the default action specified for the GTPv2 message type filter. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.

Parameters 
direction—
Specifies the traffic direction.
Values—
from-sub, to-sub

 

create—
Keyword used to create the TCA.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax 
default-action direction direction [create]
no default-action direction direction
Context 
[Tree] (config>app-assure>group>statistics>tca>gtp-fltr>imsi-apn default-action)
Full Contexts 
configure application-assurance group statistics threshold-crossing-alert gtp-filter imsi-apn default-action
Description 

This command configures a TCA for the counter capturing hits for the specified GTP IMSI-APN filter default action. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.

Parameters 
direction—
Specifies the traffic direction.
Values—
from-sub, to-sub

 

create—
Keyword used to create the TCA.

default-action

Syntax 
default-action direction direction [create]
Context 
[Tree] (config>app-assure>group>statistics>tca>sctp-fltr>ppid default-action)
Full Contexts 
configure application-assurance group statistics threshold-crossing-alert sctp-filter ppid default-action
Description 

This command configures a TCA for the counter capturing hits for the specified SCTP filter default PPID. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.

Parameters 
direction—
Specifies the traffic direction.
Values—
from-sub, to-sub

 

create—
Keyword used to create the TCA.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax 
default-action direction direction [create]
no default-action direction direction
Context 
[Tree] (config>app-assure>group>statistics>tca>session-filter default-action)
Full Contexts 
configure application-assurance group statistics threshold-crossing-alert session-filter default-action
Description 

This command configures a TCA for the counter capturing hits for the specified session filter default action. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.

Parameters 
direction—
Specifies the traffic direction.
Values—
from-sub, to-sub

 

create—
Keyword used to create the TCA.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax 
default-action {permit | deny}
Context 
[Tree] (config>app-assure>group>gtp>gtp-fltr>imsi-apn-fltr default-action)
Full Contexts 
configure application-assurance group gtp gtp-filter imsi-apn-filter default-action
Description 

This command configures the default action for the IMSI-APN filter.

Default 

default-action permit

Parameters 
permit—
Specifies to permit packets that do not match any message entries.
deny—
Specifies to deny packets that do not match any message entries.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax 
default-action {permit | deny}
Context 
[Tree] (config>app-assure>group>gtp>gtp-fltr>msg default-action)
[Tree] (config>app-assure>group>gtp>gtp-fltr>msg-gtpv2 default-action)
Full Contexts 
configure application-assurance group gtp gtp-filter message-type default-action
configure application-assurance group gtp gtp-filter message-type-gtpv2 default-action
Description 

This command configures the default action for all GTP message types.

Default 

default-action permit

Parameters 
permit—
Specifies to permit packets that do not match any message entries.
deny—
Specifies to deny packets that do not match any message entries.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax 
default-action {permit | deny}
Context 
[Tree] (config>app-assure>group>sctp-fltr>ppid default-action)
Full Contexts 
configure application-assurance group sctp-filter ppid default-action
Description 

This command configures the default action for all SCTP PPIDs.

Default 

default-action permit

Parameters 
permit—
Specifies to permit packets that do not match any PPID entries.
deny—
Specifies to deny packets that do not match any PPID entries.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax 
default-action allow
default-action block-all
default-action block-http-redirect http-redirect-name
no default-action
Context 
[Tree] (config>app-assure>group>policy>aqp>entry>action>url-filter default-action)
Full Contexts 
configure application-assurance group policy app-qos-policy entry action url-filter default-action
Description 

This command configures the default action to take when the ICAP server is unreachable.

Default 

no default-action

Parameters 
allow—
Allows all requests.
block-all—
Blocks all requests.
block-http-redirect http-redirect-name
Blocks and redirects requests.

default-action

Syntax 
default-action {dnat | forward} [ip-address ip-address]
Context 
[Tree] (config>service>nat>nat-classifier default-action)
Full Contexts 
configure service nat nat-classifier default-action
Description 

This command specifies the default action to take for packets in this nat-classifier. The default-action will apply to packet that do not match any configured criteria within nat-classifier. The no form of this command equals action forward.

Default 

default-action forward

Parameters 
dnat—
Performs the DNAT function. The destination IP address of the packet traversing the router in the direction from inside to outside is replaced by the configured IP address. Destination port is not translated. In the opposite direction (from outside to inside), the source address in the returning packet is restored to the original value.
forward—
The forward action will ensure that the packet is transparently passed through the nat-classifier.
ip-address ip-address
The destination IP address that will replace the original IP address in the packet traveling from inside to outside.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax 
default-action {accept | discard}
Context 
[Tree] (config>router>mcac>policy default-action)
Full Contexts 
configure router mcac policy default-action
Description 

This command specifies the action to be applied to multicast streams (channels) when the streams do not match any of the multicast addresses defined in the MCAC policy.

When multiple default-action commands are entered, the last command will overwrite the previous command.

Default 

default-action discard

Parameters 
accept—
Specifies multicast streams (channels) not defined in the MCAC policy will be accepted.
discard—
Specifies multicast streams (channels) not defined in the MCAC policy will be dropped.
Platforms 

All

default-action

Syntax 
default-action fc fc-name profile {in | out}
Context 
[Tree] (config>qos>network>ingress default-action)
Full Contexts 
configure qos network ingress default-action
Description 

This command defines or edits the default action to be taken for packets that have an undefined DSCP or MPLS EXP bit set. The default-action command specifies the forwarding class to which such packets are assigned.

Multiple default-action commands will overwrite each previous default-action command.

Default 

default-action fc be profile out

Parameters 
fc-name
Specifies the forwarding class name. All packets with DSCP value or MPLS EXP or dot1p bits that are not defined will be placed in this forwarding class.
Values—
be, l2, af, l1, h2, ef, h1, nc

 

profile {in | out}—
All packets that are assigned to this forwarding class will be considered in-profile or out-of-profile based on this command. In case of congestion, the in-profile packets are preferentially queued over the out-of-profile packets.
Values—
in, out

 

Platforms 

All

default-action

Syntax 
default-action {drop | forward}
Context 
[Tree] (config>filter>ip-filter default-action)
[Tree] (config>filter>ipv6-filter default-action)
[Tree] (config>filter>mac-filter default-action)
Full Contexts 
configure filter ip-filter default-action
configure filter ipv6-filter default-action
configure filter mac-filter default-action
Description 

This command defines the default action to be applied to packets not matching any entry in this ACL filter policy or to packets for that match a PBF/PBR filter entry for which the PBF/PBR target is down and pbr-down-action-override per-entry is set to filter-default-action.

Default 

default-action drop

Parameters 
drop—
Specifies the default action is to drop a packet.
forward—
Specifies the default action is to forward a packet.
Platforms 

All

default-action

Syntax 
default-action {drop | forward}
no default-action
Context 
[Tree] (config>log>filter default-action)
Full Contexts 
configure log filter default-action
Description 

The default action specifies the action that is applied to events when no action is specified in the event filter entries or when an event does not match the specified criteria.

When multiple default-action commands are entered, the last command overwrites the previous command.

The no form of this command reverts the default action to the default value (forward).

Default 

default-action forward

Parameters 
drop—
The events which are not explicitly forwarded by an event filter match are dropped.
forward—
The events which are not explicitly dropped by an event filter match are forwarded.
Platforms 

All

default-action

Syntax 
default-action {permit | deny | deny-host-unreachable}
Context 
[Tree] (config>system>security>mgmt-access-filter>ip-filter default-action)
[Tree] (config>system>security>mgmt-access-filter>ipv6-filter default-action)
[Tree] (config>system>security>mgmt-access-filter>mac-filter default-action)
Full Contexts 
configure system security management-access-filter ip-filter default-action
configure system security management-access-filter ipv6-filter default-action
configure system security management-access-filter mac-filter default-action
Description 

This command creates the default action for management access in the absence of a specific management access filter match.

The default-action is applied to a packet that does not satisfy any match criteria in any of the management access filters. Whenever management access filters are configured, the default-action must be defined.

Parameters 
permit—
Specifies that packets not matching the configured selection criteria in any of the filter entries will be permitted.
deny—
Specifies that packets not matching the selection criteria be denied and that an ICMP host unreachable message will not be issued.
deny-host-unreachable—
Specifies that packets not matching the selection criteria be denied access and that an ICMP host unreachable message will be issued.

The deny-host-unreachable only applies to ip-filter and ipv6filter.

Platforms 

All

default-action

Syntax 
default-action {accept | drop}
Context 
[Tree] (config>system>security>cpm-filter default-action)
Full Contexts 
configure system security cpm-filter default-action
Description 

This command specifies the action to take on the traffic when there are no filter entry matches. If there are no filter entries defined, the packets received are either dropped or forwarded based on that default action.

Default 

default-action accept

Parameters 
accept—
Specifies that packets matching the filter entry are forwarded.
drop—
Specifies that packets matching the filter entry are dropped.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

default-action

Syntax 
default-action {deny-all | permit-all | none | read-only-all}
Context 
[Tree] (config>system>security>profile default-action)
Full Contexts 
configure system security profile default-action
Description 

This command specifies the default action to be applied when no match conditions are met.

Parameters 
deny-all—
Sets the default of the profile to deny access to all commands.
permit-all—
Sets the default of the profile to permit access to all commands.
Note:

In classic CLI but not in MD-CLI the permit-all parameter does not change access to security commands. Specific entries must be created in a command authorization profile in order to give access to security commands. The system populated “administrative” profile contains rules to access security commands.

none—
Sets the default of the profile to no-action. This option is useful to assign multiple profiles to a user.

For example, if a user is a member of two profiles and the default action of the first profile is permit-all, then the second profile is never evaluated because the permit-all is executed first. Set the first profile default action to none and if no match conditions are met in the first profile, then the second profile is evaluated. If the default action of the last profile is none and no explicit match is found, then the command is denied.

read-only-all—
Sets the default of the profile to allow read-only access to all commands.
Platforms 

All

default-action

Syntax 
default-action {accept | next-entry | next-policy | drop | reject}
no default-action
Context 
[Tree] (config>router>policy-options>policy-statement default-action)
Full Contexts 
configure router policy-options policy-statement default-action
Description 

Commands in this context configure actions to apply to routes that do not match any entries of a route policy statement.

The no form of this command deletes the default-action context for the policy statement.

Default 

no default-action

Parameters 
accept—
Specifies that routes not matched by any entry should be allowed or accepted. This parameter provides a context for modifying route properties.
next-entry—
Specifies that routes not matched by any entry should be evaluated by the next sequential entry in the policy chain, after route properties are possibly modified by the default action of the current policy.
next-policy—
Specifies that routes not matched by any entry should be evaluated by the next sequential policy in the policy chain, after route properties are possibly modified by the default action of the current policy.
drop—
Specifies that routes not matched by any entry should be disallowed or rejected. This parameter provides a context for modifying route properties.
reject—
Specifies that routes not matched by any entry should be disallowed or rejected. This parameter does not provide a context for modifying route properties.
Platforms 

All

default-action

Syntax 
default-action allow
default-action block-all
default-action block-http-redirect http-redirect-name
no default-action
Context 
[Tree] (config>app-assure>group>url-filter>icap default-action)
[Tree] (config>app-assure>group>url-filter>web-service default-action)
[Tree] (config>app-assure>group>url-filter>local-filtering default-action)
Full Contexts 
configure application-assurance group url-filter icap default-action
configure application-assurance group url-filter local-filtering default-action
configure application-assurance group url-filter web-service default-action
Description 

This command configures a default action for the URL filter. The default action takes effect when the URL filter cannot be used. This may happen in the following scenarios.

  1. In the case of a local URL list, when the URL list is shutdown or the file is not loaded due to an error.
  2. In the case of ICAP or web filtering, when all TCP connections are busy or down.

The no form of this command removes the default-action for the URL filter.

Default 

no default-action

Parameters 
allow—
Specifies to allows traffic.
block-all—
Specifies to block traffic.
block-http-redirect http-redirect-name
Specifies to block traffic and redirect the user to an information page, which can be different than the page the user is redirected to when the site they attempted to access was found in the URL filter; this page is configured using the config>aa>group>url-filter>http-redirect command.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.51. default-authentication-server-policy

default-authentication-server-policy

Syntax 
default-authentication-server-policy policy-name
no default-authentication-server-policy
Context 
[Tree] (config>router>radius-proxy>server default-authentication-server-policy)
[Tree] (config>service>vprn>radius-proxy>server default-authentication-server-policy)
Full Contexts 
configure router radius-proxy server default-authentication-server-policy
configure service vprn radius-proxy server default-authentication-server-policy
Description 

This command specifies the default radius-server-policy for RADIUS authentication. This policy is used when there is no specific match based on username.

The no form of this command removes the policy name from the configuration.

Parameters 
policy-name—
Specifies the name of the default RADIUS server policy associated with this RADIUS proxy server for authentication purposes.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.52. default-brg-profile

default-brg-profile

Syntax 
default-brg-profile profile-name
no default-brg-profile
Context 
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>vlan-ranges>range>vrgw>brg default-brg-profile)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>brg default-brg-profile)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>brg default-brg-profile)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>vlan-ranges>range>vrgw>brg default-brg-profile)
[Tree] (config>service>vprn>sub-if>grp-if>brg default-brg-profile)
[Tree] (config>service>ies>sub-if>grp-if>brg default-brg-profile)
 
Full Contexts 
configure service ies subscriber-interface group-interface brg default-brg-profile
configure service ies subscriber-interface group-interface wlan-gw ranges range brg default-brg-profile
configure service ies subscriber-interface group-interface wlan-gw vlan-ranges range vrgw brg default-brg-profile
configure service vprn subscriber-interface group-interface brg default-brg-profile
configure service vprn subscriber-interface group-interface wlan-gw ranges range brg default-brg-profile
configure service vprn subscriber-interface group-interface wlan-gw vlan-ranges range vrgw brg default-brg-profile
Description 

This command indicates that the default BRG profile must be used for new BRGs. This profile can be overridden by RADIUS.

Parameters 
profile-name—
Specifies the name of the brg-profile to be applied.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.53. default-category-map

default-category-map

Syntax 
default-category-map category-map-name
no default-category-map
Context 
[Tree] (config>subscr-mgmt>credit-control-policy default-category-map)
Full Contexts 
configure subscriber-mgmt credit-control-policy default-category-map
Description 

This command configures the default category map.

The no form of this command reverts to the default.

Parameters 
category-map-name—
Specifies the category map name, up to 32 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.54. default-charging-group

default-charging-group

Syntax 
default-charging-group charging-group-name
no default-charging-group
Context 
[Tree] (config>app-assure>group>policy default-charging-group)
Full Contexts 
configure application-assurance group policy default-charging-group
Description 

This command associates a charging group to any applications or app-groups that are not explicitly assigned to a charging group, for an application assurance policy.

The no form of this command deletes the default charging group from the configuration.

Default 

no default-charging-group

Parameters 
charging-group-name —
A string of up to 32 characters uniquely identifying an existing charging group in the system.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.55. default-credit

default-credit

Syntax 
default-credit volume credits [bytes | kilobytes | megabytes | gigabytes]
default-credit time seconds
no default-credit
Context 
[Tree] (config>subscr-mgmt>cat-map>category default-credit)
Full Contexts 
configure subscriber-mgmt category-map category default-credit
Description 

This command configures the default credit values for RADIUS credit control and Diameter Gy application credit control.

For RADIUS credit control, this command configures the default time or volume credit for this category. The default credit is used during initial setup when no quota is received from the RADIUS server.

For Diameter Gy credit control, this command specifies the interim credit assigned to this category (rating group) when Extended Failure Handling (EFH) is enabled. This command is ignored when EFH is disabled.

The no form of this command reverts to the default.

Parameters 
volume credits [bytes | kilobytes | megabytes | gigabytes]
Specifies the default value for the volume credit and the unit in which the default value is expressed.
Values—
1 to 4294967295 (minimum 1 byte)

 

time seconds
Specifies the default value for the time credit, in seconds.
Values—
1 to 4294967295 (minimum 1 second)

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.56. default-dnat-ip-address

default-dnat-ip-address

Syntax 
default-dnat-ip-address ip-address
no default-dnat-ip-address
Context 
[Tree] (config>service>nat>nat-classifier default-dnat-ip-address)
Full Contexts 
configure service nat nat-classifier default-dnat-ip-address
Description 

This command configures the IP address to substitute for the destination IP address of the packets

Default 

no default-dnat-ip-address

Parameters 
ip-address—
Specifies the default DNAP IP address.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.57. default-dns

default-dns

Syntax 
default-dns ip-address [secondary ip-address]
no default-dns
Context 
[Tree] (config>service>ies>sub-if default-dns)
[Tree] (config>service>vprn>sub-if default-dns)
Full Contexts 
configure service ies subscriber-interface default-dns
configure service vprn subscriber-interface default-dns
Description 

This command configures last resort IP DNS addresses that can be used for name resolution by IPoE hosts (IA_NA, IA_PD and SLAAC) and PPPoE hosts (IA_NA, IA_PD and SLAAC).

The no form of this command reverts to the default.

Parameters 
ip-address—
Specifies the IP address of the primary DNS server.
secondary ip-address—
Specifies the IP address of the secondary DNS server (optional).
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-dns

Syntax 
default-dns ipv6-address [secondary ipv6-address]
no default-dns
Context 
[Tree] (config>service>ies>sub-if>ipv6 default-dns)
[Tree] (config>service>vprn>sub-if>ipv6 default-dns)
Full Contexts 
configure service ies subscriber-interface ipv6 default-dns
configure service vprn subscriber-interface ipv6 default-dns
Description 

This command configures last resort IPv6 DNS addresses that can be used for name resolution by IPoEv6 hosts (IA_NA, IA_PD and SLAAC) and PPPoEv6 hosts (IA_NA, IA_PD and SLAAC).

The no form of this command reverts to the default.

Parameters 
ipv6-address—
Specifies the IPv6 address of the primary DNS server.
secondary ipv6-address—
Specifies the IPv6 address of the secondary DNS server (optional).
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.58. default-domain

default-domain

Syntax 
default-domain dns-name
no default-domain
Context 
[Tree] (config>service>vprn>dns default-domain)
Full Contexts 
configure service vprn dns default-domain
Description 

This command configures the DNS domain name to be added in DNS retries when a DNS query is not replied or an empty DNS reply is received.

The no form of this command prevents DNS retries when the DNS query is not replied or an empty DNS reply is received.

Parameters 
dns-name—
Specifies the name of the default domain, up to 255 characters. Allowed values for characters are alphabetical (A-Z), numeric (0-9), the minus sign (-), and the period (.). For example, “3gpp-network.org”.
Platforms 

All

default-domain

Syntax 
default-domain
Context 
[Tree] (config>eth-cfm default-domain)
Full Contexts 
configure eth-cfm default-domain
Description 

Commands in this context configure MIP creation parameters per index (bridge-identifier bridge-id vlan vlan-id) if the MIP creation statement exists as part of the service connection. The mip creation statement must be present on the connection before any configuration can occur for a MIP under this context. The determining factor for MIP creation is based on the authoritative properties of the eth-cfm domain association configuration. The individual indexes in this table are used for MIP creation only when the association context is not authoritative; this includes the lack of association for a matching index.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.59. default-fc

default-fc

Syntax 
default-fc fc-name
no default-fc
Context 
[Tree] (config>qos>sap-ingress default-fc)
Full Contexts 
configure qos sap-ingress default-fc
Description 

This command configures the default forwarding class for the policy. In the event that an ingress packet does not match a higher priority (more explicit) classification command, the default forwarding class or subclass will be associated with the packet. Unless overridden by an explicit forwarding class classification rule, all packets received on an ingress SAP using this ingress QoS policy will be classified to the default forwarding class. Optionally, the default ingress enqueuing priority for the traffic can be overridden as well.

The default forwarding class is best effort (be). The default-fc settings are displayed in the show configuration and save output regardless of inclusion of the detail keyword.

Default 

default-fc “be”

Parameters 
fc-name —
Specify the forwarding class name for the queue. The value given for fc-name must be one of the predefined forwarding classes in the system.

The subclass-name parameter is optional and used with the fc-name parameter to define a preexisting subclass. The fc-name and subclass-name parameters must be separated by a period (dot). If subclass-name does not exist in the context of fc -name, an error will occur. If subclass-name is removed using the no fc fc-name.subclass-name force command, the default-fc command will automatically drop the subclass-name and only use fc-name (the parent forwarding class for the subclass) as the forwarding class.

Values—

fc:

class[.subclass]

class: be, l2, af, l1, h2, ef, h1, nc

subclass: 29 characters max

 

Platforms 

All

8.60. default-filter-action

default-filter-action

Syntax 
default-filter-action default-action
Context 
[Tree] (debug>app-assure>group>http-host>filter default-filter-action)
Full Contexts 
debug application-assurance group http-host-recorder filter default-filter-action
Description 

This command configures the recorder filter default action to either record or no-record. This parameter applies to http-host values not matching any expressions defined in the filter context.

Parameters 
default-action—
Specifies the default action.
Values—
record, no-record

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.61. default-group-interface

default-group-interface

Syntax 
default-group-interface ip-int-name service-id service-id
default-group-interface ip-int-name service-name svc-name
no default-group-interface
Context 
[Tree] (config>router>l2tp>group>ppp default-group-interface)
[Tree] (config>router>l2tp>group>tunnel>ppp default-group-interface)
[Tree] (config>service>vprn>l2tp>group>ppp default-group-interface)
[Tree] (config>service>vprn>l2tp>group>tunnel>ppp default-group-interface)
Full Contexts 
configure router l2tp group ppp default-group-interface
configure router l2tp group tunnel ppp default-group-interface
configure service vprn l2tp group ppp default-group-interface
configure service vprn l2tp group tunnel ppp default-group-interface
Description 

This command configures the group interface where the PPP sessions are established when the authentication server does not specify the group interface.

The no form of this command removes the interface name or service ID from the configuration.

Parameters 
ip-int-name—
Specifies an IP interface name, up to 32 characters.
service-id service-id—
Specifies an existing service identification number.

This variant of the command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic). The default-group-interface ip-int-name service-name svc-name variant can be used in all configuration modes.

Values—
{id | svc-name}

id:

1 to 2147483647

svc-name:

up to 64 characters (svc-name is an alias for input only. The svc-name gets replaced with an id automatically by SR OS in the configuration).

 

service-name svc-name—
Specifies an existing service name up to 64 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.62. default-gtp-tunnel-endpoint-limit

default-gtp-tunnel-endpoint-limit

Syntax 
default-gtp-tunnel-endpoint-limit direction direction [create]
no default-gtp-tunnel-endpoint-limit direction direction
Context 
[Tree] (config>app-assure>group>statistics>tca>gtp-filter default-gtp-tunnel-endpoint-limit)
Full Contexts 
configure application-assurance group statistics threshold-crossing-alert gtp-filter default-gtp-tunnel-endpoint-limit
Description 

This command configures a TCA for the counter capturing drops due to the GTP endpoint limits create requests exceeding the configured allowed limit (set by the default-tunnel-endpoint-limit command). A default-gtp-tunnel-endpoint-limit drop TCA can be created for traffic generated from the subscriber side of AA (from-sub). The create keyword is mandatory when creating a TCA.

Parameters 
direction—
Specifies the traffic direction.
Values—
from-sub

 

create—
Keyword used to create the TCA.

8.63. default-host

default-host

Syntax 
default-host ipv4-prefix/mask | ipv6-prefix/prefix-length next-hop ipv4-address | ipv6-address
no default-host ipv4-prefix/mask | ipv6-prefix/prefix-length
Context 
[Tree] (config>service>ies>sub-if>grp-if>sap default-host)
[Tree] (config>service>vprn>sub-if>grp-if>sap default-host)
Full Contexts 
configure service ies subscriber-interface group-interface sap default-host
configure service vprn subscriber-interface group-interface sap default-host
Description 

This command configures the default-host. More than one default host can be configured per SAP.

The no form of this command removes the values from the configuration.

Parameters 
ipv4prefix/prefix-length—
Specifies an IPv4 prefix and prefix length.
Values—

ipv4-prefix

a.b.c.d (host bits must be 0

prefix-length 0 to 32

 

ipv6-prefix/prefix-length—
Specifies an IPv6 prefix and prefix length.
Values—

ipv6-prefix

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x - [0 to FFFF]H

d - [0 to 255]D

prefix-length - [0 to 128]

 

next-hop—
Assigns the next hop IP address.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.64. default-instance

default-instance

Syntax 
[no] default-instance
Context 
[Tree] (config>service>vprn>isis>if default-instance)
Full Contexts 
configure service vprn isis interface default-instance
Description 

This command enables a non-MI capable router to establish an adjacency and operate with an SR OS in a non-zero instance. If the router does not receive IID-TLVs, it will establish an adjacency in a single instance. Instead of establishing an adjacency in the standard instance 0, the router will establish an adjacency in the configured non-zero instance. The router will then operate in the configured non-zero instance so that it appears to be in the standard instance 0 to its neighbor. This feature is supported on point-to-point interfaces, broadcast interfaces are not supported.

The no form of this command disables the functionality so that the router can only establish adjacencies in the standard instance 0.

Default 

no default-instance

Platforms 

All

default-instance

Syntax 
[no] default-instance
Context 
[Tree] (config>router>isis>interface default-instance)
Full Contexts 
configure router isis interface default-instance
Description 

This command enables a non-MI capable router to establish an adjacency and operate with a router in a non-zero instance. If the router does not receive IID-TLVs, it will establish an adjacency in a single instance. Instead of establishing an adjacency in the standard instance 0, the router will establish an adjacency in the configured non-zero instance. The router will then operate in the configured non-zero instance so that it appears to be in the standard instance 0 to its neighbor. This feature is supported on point-to-point interfaces, broadcast interfaces are not supported.

This feature must be configured on the router connected to non-MI capable routers and on all other SR OS routers in the area, so that they receive non-MI LSPs in the correct instance and not in the base instance.

The no form of this command disables the functionality so that the router can only establish adjacencies in the standard instance 0.

Default 

no default-instance

Platforms 

All

8.65. default-ipv4-multicast-metric

default-ipv4-multicast-metric

Syntax 
default-ipv4-multicast-metric metric
no default-ipv4-multicast-metric
Context 
[Tree] (config>service>vprn>isis>level default-ipv4-multicast-metric)
Full Contexts 
configure service vprn isis level default-ipv4-multicast-metric
Description 

This command configures the default metric to be used for the IS-IS interface in the IPv4 multicast topology (MT3).

The no form of this command deletes the specified default metric and reverts to using the system default of 10.

Default 

default-ipv4-multicast-metric 10

Parameters 
metric—
Specifies the default metric for interfaces in the IPv4 multicast topology (MT3).
Values—
1 to 16777215

 

Platforms 

All

default-ipv4-multicast-metric

Syntax 
default-ipv4-multicast-metric metric
no default-ipv4-multicast-metric
Context 
[Tree] (config>router>isis>level default-ipv4-multicast-metric)
Full Contexts 
configure router isis level default-ipv4-multicast-metric
Description 

This command configures the default metric to be used for the IS-IS interface in the IPv4 multicast topology (MT3).

The no form of this command deletes the specified default metric and reverts to using the system default of 10.

Default 

default-ipv4-multicast-metric 10

Parameters 
metric—
Specifies the default metric for interfaces in the IPv4 multicast topology (MT3).
Values—
1 to 16777215

 

Platforms 

All

8.66. default-ipv6-multicast-metric

default-ipv6-multicast-metric

Syntax 
default-ipv6-multicast-metric metric
no default-ipv6-multicast-metric
Context 
[Tree] (config>service>vprn>isis>level default-ipv6-multicast-metric)
Full Contexts 
configure service vprn isis level default-ipv6-multicast-metric
Description 

This command configures the default metric to be used for the IS-IS interface in the IPv6 multicast topology (MT4).

The no form of this command deletes the specified default metric and reverts to using the system default of 10.

Default 

default-ipv6-multicast-metric 10

Parameters 
metric—
Specifies the default metric for interfaces in the IPv4 multicast topology (MT4).

1 to 16777215

default-ipv6-multicast-metric

Syntax 
default-ipv6-multicast-metric metric
no default-ipv6-multicast-metric
Context 
[Tree] (config>router>isis>level default-ipv6-multicast-metric)
Full Contexts 
configure router isis level default-ipv6-multicast-metric
Description 

This command configures the default metric to be used for the IS-IS interface in the IPv6 multicast topology (MT4).

The no form of this command deletes the specified default metric and reverts to using the system default of 10.

Default 

default-ipv6-multicast-metric 10

Parameters 
metric—
Specifies the default metric for interfaces in the IPv4 multicast topology (MT4).

1 to 16777215

Platforms 

All

8.67. default-ipv6-unicast-metric

default-ipv6-unicast-metric

Syntax 
default-ipv6-unicast-metric ipv6 metric
no default-ipv6-unicast-metric
Context 
[Tree] (config>service>vprn>isis>level default-ipv6-unicast-metric)
Full Contexts 
configure service vprn isis level default-ipv6-unicast-metric
Description 

This command specifies the default metric for IPv6 unicast.

Default 

default-ipv6-unicast-metric 10

Parameters 
ipv6-metric—
Specifies the default metric for IPv6 unicast.
Values—
1 to 16777215

 

Platforms 

All

default-ipv6-unicast-metric

Syntax 
default-ipv6-unicast-metric ipv6 metric
no default-ipv6-unicast-metric
Context 
[Tree] (config>router>isis>level default-ipv6-unicast-metric)
Full Contexts 
configure router isis level default-ipv6-unicast-metric
Description 

This command specifies the default metric for IPv6 unicast.

The no form of this command reverts to the default value.

Default 

default-ipv6-unicast-metric 10

Parameters 
ipv6-metric—
Specifies the default metric for IPv6 unicast.
Values—
1 to 16777215

 

Platforms 

All

8.68. default-label-preference

default-label-preference

Syntax 
default-label-preference [ebgp ebgp label preference] [ibgp ibgp label preference]
no default-label-preference
Context 
[Tree] (config>router>bgp default-label-preference)
[Tree] (config>router>bgp>group default-label-preference)
[Tree] (config>router>bgp>group>neighbor default-label-preference)
Full Contexts 
configure router bgp default-label-preference
configure router bgp group default-label-preference
configure router bgp group neighbor default-label-preference
Description 

This command specifies a route-table preference value to use for EBGP or IBGP routes carrying labeled-unicast prefixes and received from peers covered by the context of the command. Route-table preference comes into play when the route-table has multiple routes for the same IP prefix. In this case the route with the numerically lowest preference value is usually the route that is activated and installed into the IP FIB. By default all BGP routes have a route-table preference value of 170.

This command overrides the preference value assigned by the label-preference command; that other command does not distinguish between EBGP and IBGP routes. Overriding happens even when the default-label-preference value is inherited from a higher level of configuration and competes with an explicitly configured label-preference value at a lower level of configuration in the BGP hierarchy.

Note:

The preference value assigned by the default-label-preference command can always be overwritten by a route policy entry that accepts the route with a preference command in the action.

The no form of the command lets BGP route-table preference for labeled-unicast routes to be controlled by other means.

Default 

no default-label-preference

Parameters 
ebgp label preference—
Specifies the EBGP default preference label value.
Values—
0 to 255

 

ibgp label preference—
Specifies the IBGP default preference label value.
Values—
0 to 255

 

Platforms 

All

8.69. default-metric

default-metric

Syntax 
default-metric metric
no default-metric
Context 
[Tree] (config>aaa>route-downloader default-metric)
Full Contexts 
configure aaa route-downloader default-metric
Description 

This command sets the default metric that routes imported by the RTM will acquire.

The no form of this command removes the metric.

Default 

default-metric 2

Parameters 
metric—
Specifies the default metric of the routes imported.
Values—
0 to 254

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-metric

Syntax 
default-metric ipv4 metric
no default-metric
Context 
[Tree] (config>service>vprn>isis>level default-metric)
Full Contexts 
configure service vprn isis level default-metric
Description 

This command specifies the configurable default metric used for all IS-IS interfaces on this level. This value is not used if a metric is configured for an interface.

Default 

default-metric 10

Parameters 
ipv4 metric—
Specifies the default metric for IPv4 unicast.
Values—
1 to 16777214

 

Platforms 

All

default-metric

Syntax 
default-metric metric
no default-metric
Context 
[Tree] (config>service>vprn>ospf>area>stub default-metric)
[Tree] (config>service>vprn>ospf3>area>stub default-metric)
Full Contexts 
configure service vprn ospf area stub default-metric
configure service vprn ospf3 area stub default-metric
Description 

This command configures the metric used by the area border router (ABR) for the default route into a stub area. The default metric should only be configured on an ABR of a stub area. An ABR generates a default route if the area is a stub area.

The no form of this command reverts to the default value.

Default 

default-metric 1

Parameters 
metric—
The metric expressed as a decimal integer for the default route cost to be advertised into the stub area.
Values—
1 to 16777214

 

Platforms 

All

default-metric

Syntax 
default-metric ipv4 metric
no default-metric
Context 
[Tree] (config>router>isis>level default-metric)
Full Contexts 
configure router isis level default-metric
Description 

This command specifies the configurable default metric used for all IS-IS interfaces on this level. This value is not used if a metric is configured for an interface.

The no form of this command reverts to the default value.

Default 

default-metric 10

Parameters 
ipv4 metric—
Specifies the default metric for IPv4 unicast.
Values—
1 to 16777214

 

Platforms 

All

default-metric

Syntax 
default-metric metric
no default-metric
Context 
[Tree] (config>router>ospf>area>stub default-metric)
[Tree] (config>router>ospf3>area>stub default-metric)
Full Contexts 
configure router ospf area stub default-metric
configure router ospf3 area stub default-metric
Description 

This command configures the metric used by the area border router (ABR) for the default route into a stub area.

The default metric should only be configured on an ABR of a stub area.

An ABR generates a default route if the area is a stub area.

The no form of this command reverts to the default value.

Default 

default-metric 1

Parameters 
metric—
Specifies the metric expressed as a decimal integer for the default route cost to be advertised into the stub area.
Values—
1 to 16777214

 

Platforms 

All

8.70. default-msap-policy

default-msap-policy

Syntax 
default-msap-policy policy-name
no default-msap-policy
Context 
[Tree] (config>service>vpls>sap default-msap-policy)
Full Contexts 
configure service vpls sap default-msap-policy
Description 

This command specifies the default managed SAP policy to use to create MSAPs when the response from the RADIUS server does not specify a managed SAP policy.

The policy-name parameter is only valid for a SAP with the keywords capture-sap specified in the SAP’s configuration. The capture-sap keyword in the SAP configuration captures the SAP where triggering packets is sent to the CPM. Non-triggering packets captured by the capture SAP is dropped.

The managed SAP policy must already be defined in the config>subscr-mgmt>msap-policy context.

The no form of this command removes the policy-name from the configuration.

Parameters 
policy-name—
Specifies an existing default managed SAP policy.

8.71. default-pap-password

default-pap-password

Syntax 
default-pap-password password [hash | hash2 | custom]
no default-pap-password
Context 
[Tree] (config>subscr-mgmt>ppp-policy default-pap-password)
Full Contexts 
configure subscriber-mgmt ppp-policy default-pap-password
Description 

This command configures the default PAP password for RADIUS authentication when the Password-Length=0 in the PAP Authenticate-Request.

RADIUS authentication cannot be initiated when the Password-Length=0 in the PAP Authenticate-Request and no default-pap-password is configured. The PPP session terminates in this case.

Parameters 
password—
Specifies a default PAP password up to 64 characters.
hash—
Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
hash2—
Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
custom—
Specifies the custom encryption to management interface.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.72. default-path

default-path

Syntax 
default-path path-name
Context 
[Tree] (config>router>mpls>lsp-template default-path)
Full Contexts 
configure router mpls lsp-template default-path
Description 

A default path binding must be provided before the LSP template can be used for signaling LSP. The LSP template must be shutdown to modify default-path binding.

Parameters 
path-name —
Configures the default path binding
Platforms 

All

8.73. default-peer

default-peer

Syntax 
[no] default-peer
Context 
[Tree] (config>aaa>diam>node>peer default-peer)
Full Contexts 
configure aaa diameter node peer default-peer
Description 

This command designates a peer as a default peer. Traffic that is destined to realms that are not associated with locally configured peers, is sent to the default-peer. In effect, the default peer becomes a default route for Diameter realms.

This command is mandatory in multi-chassis redundancy where the inter-chassis peer is designated as default peer. Then, the SR with no open connections towards agents or servers, forwards all traffic to the inter-peer which maintains, as part of MCS, open connections with agents and servers.

The no form of this command reverts to the default.

Default 

no default-peer

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-peer

Syntax 
default-peer
no default-peer
Context 
[Tree] (config>service>vprn>msdp>group>peer default-peer)
[Tree] (config>service>vprn>msdp>peer default-peer)
Full Contexts 
configure service vprn msdp group peer default-peer
configure service vprn msdp peer default-peer
Description 

Using the default peer mechanism, a peer can be selected as the default Multicast Source Discovery Protocol (MSDP) peer. As a result, all source-active messages from the peer will be accepted without the usual peer-reverse-path-forwarding (RPF) check.

The MSDP peer-RPF check is different from the normal multicast RPF checks. The peer-RPF check is used to stop source-active messages from looping. A router validates source-active messages originated from other routers in a deterministic fashion.

A set of rules is applied in order to validate received source-active messages, and the first rule that applies determines the peer-RPF neighbor. All source-active messages from other routers are rejected. The rules applied to source-active messages originating at Router S received at Router R from Router N are as follows:

  1. If Router N and router S are one and the same, then the message is originated by a direct peer-RPF neighbor and will be accepted.
  2. If Router N is a configured peer, or a member of the Router R mesh group then its source-active messages are accepted.
  3. If Router N is the Border Gateway Protocol (BGP) next hop of the active multicast RPF route toward Router S then Router N is the peer-RPF neighbor and its source-active messages are accepted.
  4. If Router N is an external BGP peer of Router R and the last autonomous system (AS) number in the BGP AS-path to Router S is the same as Router N’s AS number, then Router N is the peer-RPF neighbor, and its source-active messages are accepted.
  5. If Router N uses the same next hop as the next hop to Router S, then Router N is the peer-RPF neighbor, and its source-active messages are accepted.
  6. If Router N fits none of the above rules, then Router N is not a peer-RPF neighbor, and its source-active messages are rejected.
Default 

no default-peer

Platforms 

All

default-peer

Syntax 
[no] default-peer
Context 
[Tree] (config>router>msdp>peer default-peer)
[Tree] (config>router>msdp>group>peer default-peer)
Full Contexts 
configure router msdp group peer default-peer
configure router msdp peer default-peer
Description 

Using the default peer mechanism, a peer can be selected as the default Multicast Source Discovery Protocol (MSDP) peer. As a result, all source-active messages from the peer will be accepted without the usual peer-reverse-path-forwarding (RPF) check.

The MSDP peer-RPF check is different from the normal multicast RPF checks. The peer-RPF check is used to stop source-active messages from looping. A router validates source-active messages originated from other routers in a deterministic fashion.

A set of rules is applied in order to validate received source-active messages, and the first rule that applies determines the peer-RPF neighbor. All source-active messages from other routers are rejected. The rules applied to source-active messages originating at Router S received at Router R from Router N are as follows:

  1. If Router N and router S are one and the same, then the message is originated by a direct peer-RPF neighbor and will be accepted.
  2. If Router N is a configured peer, or a member of the Router R mesh group then its source-active messages are accepted.
  3. If Router N is the Border Gateway Protocol (BGP) next hop of the active multicast RPF route toward Router S then Router N is the peer-RPF neighbor and its source-active messages are accepted.
  4. If Router N is an external BGP peer of Router R and the last autonomous system (AS) number in the BGP AS-path to Router S is the same as Router N’s AS number, then Router N is the peer-RPF neighbor, and its source-active messages are accepted.
  5. If Router N uses the same next hop as the next hop to Router S, then Router N is the peer-RPF neighbor, and its source-active messages are accepted.
  6. If Router N fits none of the above rules, then Router N is not a peer-RPF neighbor, and its source-active messages are rejected.
Default 

no default-peer (No default peer is established and all active source messages must be RPF checked)

Platforms 

All

8.74. default-pool

default-pool

Syntax 
default-pool pool-name
no default-pool
Context 
[Tree] (config>service>ies>sub-if>grp-if>local-address-assignment default-pool)
[Tree] (config>service>ies>sub-if>local-address-assignment default-pool)
[Tree] (config>service>vprn>sub-if>grp-if>local-address-assignment default-pool)
[Tree] (config>service>vprn>sub-if>local-address-assignment default-pool)
Full Contexts 
configure service ies subscriber-interface group-interface local-address-assignment default-pool
configure service ies subscriber-interface local-address-assignment default-pool
configure service vprn subscriber-interface group-interface local-address-assignment default-pool
configure service vprn subscriber-interface local-address-assignment default-pool
Description 

This command references a default DHCP address pool for local PPPoX pool management in case that the pool-name is not returned via Radius or LUDB.

Parameters 
pool-name—
Specifies the name of the local DHCP server pool.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.75. default-preference

default-preference

Syntax 
default-preference [ebgp ebgp preference] [ibgp ibgp preference]
no default-preference
Context 
[Tree] (config>router>bgp default-preference)
[Tree] (config>router>bgp>group default-preference)
[Tree] (config>router>bgp>group>neighbor default-preference)
Full Contexts 
configure router bgp default-preference
configure router bgp group default-preference
configure router bgp group neighbor default-preference
Description 

This command specifies a route-table preference value to use for EBGP or IBGP routes carrying unlabeled prefixes and received from peers covered by the context of the command. Route-table preference comes into play when the route-table has multiple routes for the same IP prefix. In this case, the route with the numerically lowest preference value is usually the route that is activated and installed into the IP FIB. By default all BGP routes have a route-table preference value of 170.

This command overrides the preference value assigned by the preference command; that other command does not distinguish between EBGP and IBGP routes. Overriding happens even when the default-preference value is inherited from a higher level of configuration and competes with an explicitly configured preference value at a lower level of configuration in the BGP hierarchy.

Note:

The preference value assigned by the default-preference command can always be overwritten by a route policy entry that accepts the route with a preference command in the action.

The no form of the command lets BGP route-table preference to be controlled by other means.

Default 

no default-preference

Parameters 
ebgp preference—
Specifies the EBGP default preference value.
Values—
0 to 255

 

ibgp preference—
Specifies the IBGP default preference value.
Values—
0 to 255

 

Platforms 

All

8.76. default-priority

default-priority

Syntax 
default-priority {high | low}
no default-priority
Context 
[Tree] (config>qos>sap-ingress default-priority)
Full Contexts 
configure qos sap-ingress default-priority
Description 

This command configures the default enqueuing priority for all packets received on an ingress SAP using this policy. To change the default priority for the policy, the fc-name must be defined whether it is being changed or not.

Default 

default-priority low

Parameters 
high—
Setting the enqueuing parameter to high for a packet increases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
low—
Setting the enqueuing parameter to low for a packet decreases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
Platforms 

All

8.77. default-profile

default-profile

Syntax 
default-profile profile-name
no default-profile
Context 
[Tree] (config>app-assure>group>url-filter>web-service default-profile)
Full Contexts 
configure application-assurance group url-filter web-service default-profile
Description 

This command configures the default category profile to use when no category profile is explicitly selected for the subscriber.

The no form of this command removes the selected default profile configuration.

Default 

no default-profile

Parameters 
profile-name—
Specifies a configured category profile to use as the default profile name, up to 256 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.78. default-result

default-result

Syntax 
default-result {revoked | good}
no default-result
Context 
[Tree] (config>service>ies>if>ipsec>ipsec-tunnel>dyn>cert>status-verify default-result)
[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel>dyn>cert>status-verify default-result)
[Tree] (config>service>ies>if>sap>ipsec-gw>cert>status-verify default-result)
[Tree] (config>service>vprn>if>sap>ipsec-gw>cert>status-verify default-result)
[Tree] (config>service>vprn>if>sap>ipsec-tun>dyn>cert>status-verify default-result)
[Tree] (config>router>if>ipsec>ipsec-tun>dyn>cert>status-verify default-result)
[Tree] (config>ipsec>trans-mode-prof>dyn>cert>status-verify default-result)
Full Contexts 
configure ipsec ipsec-transport-mode-profile dynamic-keying cert default-result
configure router interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
configure service ies interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
configure service ies interface sap ipsec-gw cert status-verify default-result
configure service vprn interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
configure service vprn interface sap ipsec-gw cert status-verify default-result
configure service vprn interface sap ipsec-tunnel dynamic-keying cert status-verify default-result
Description 

This command specifies the default certificate revocation status that is used result when both the primary and secondary CSV methods fail to verify the status.

Default 

default-result revoked

Parameters 
good—
Specifies that the certificate is considered as acceptable.
revoked—
Specifies that the certificate is considered as revoked.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  1. configure service vprn interface sap ipsec-tunnel dynamic-keying cert status-verify default-result
  2. configure service vprn interface sap ipsec-gw cert status-verify default-result
  3. configure service ies interface sap ipsec-gw cert status-verify default-result

VSR

  1. configure service ies interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
  2. configure service vprn interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
  3. configure router interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result

8.79. default-retail-svc-id

default-retail-svc-id

Syntax 
default-retail-svc-id service-id
no default-retail-svc-id
Context 
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>vlan-tag-ranges default-retail-svc-id)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>vlan-tag-ranges default-retail-svc-id)
Full Contexts 
configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges default-retail-svc-id
configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges default-retail-svc-id
Description 

This command specifies the id of default retail service if there is no match found in VLAN to retail map configuration (specified by the vlan command). For DSM and migrant, this command is only applicable for non-NAT stacks.

Parameters 
service-id—
Specifies the identifier of the retail service to be used by default of a value in the retail service map of this interface.
Values—
1 to 2147483650
svc-name: up to 64 characters

 

default-retail-svc-id

Syntax 
default-retail-svc-id service-id
Context 
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges default-retail-svc-id)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges default-retail-svc-id)
Full Contexts 
configure service ies subscriber-interface group-interface wlan-gw ranges default-retail-svc-id
configure service vprn subscriber-interface group-interface wlan-gw ranges default-retail-svc-id
Description 

This command configures the default retailer service for WIFI users.

8.80. default-route-tag

default-route-tag

Syntax 
default-route-tag tag
no default-route-tag
Context 
[Tree] (config>service>epipe>bgp-evpn>mpls default-route-tag)
[Tree] (config>service>epipe>bgp-evpn>srv6 default-route-tag)
[Tree] (config>service>epipe>bgp-evpn>vxlan default-route-tag)
[Tree] (config>service>vpls>bgp-evpn>vxlan default-route-tag)
[Tree] (config>service>vpls>bgp-evpn>mpls default-route-tag)
[Tree] (config>service>vprn>bgp-evpn>mpls default-route-tag)
[Tree] (config>service>vprn>bgp-ipvpn>srv6 default-route-tag)
Full Contexts 
configure service epipe bgp-evpn mpls default-route-tag
configure service epipe bgp-evpn segment-routing-v6 default-route-tag
configure service epipe bgp-evpn vxlan default-route-tag
configure service vpls bgp-evpn mpls default-route-tag
configure service vpls bgp-evpn vxlan default-route-tag
configure service vprn bgp-evpn mpls default-route-tag
configure service vprn bgp-ivpn segment-routing-v6 default-route-tag
Description 

This command configures a route tag that EVPN and IP-VPN use when sending a route to the BGP application (for the corresponding service and BGP instance). If the corresponding BGP EVPN instance is enabled, the command cannot be changed. Additionally, EVPN services can add tags to routes with proxy-arp/nd>evpn-route-tag or the route table tag (added using the import policy). Only one tag is passed from EVPN to the BGP for matching on export policies. In case of a conflict with other route tags pushed by EVPN, the default route tag has the least priority.

The following are examples of the conflict priority handling:

  1. If a service is configured with both default-route-tag X and proxy-arp>evpn-route-tag Y, EVPN uses route tag Y when sending EVPN proxy-arp routes to the BGP RIB for advertisement.
  2. If a given IP-prefix route is tagged in the route-table with tag A and the R-VPLS, in which the route is advertised, uses B as the default-route-tag, then EVPN keeps tag A when sending the route to the BGP RIB.

The default-route-tag configuration is only supported on EVPN and IP-VPN service routes. The route tag for ES and AD per-ES routes is always zero.

The no form of this command removes the default-route-tag (that is, it sets the route tag to zero).

Default 

no default-route-tag

Parameters 
tag—
Specifies the route tag.
Values—
1 to 255

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

  1. configure service epipe bgp-evpn segment-routing-v6 default-route-tag

All

  1. configure service vprn bgp-evpn mpls default-route-tag
  2. configure service vpls bgp-evpn mpls default-route-tag
  3. configure service epipe bgp-evpn mpls default-route-tag
  4. configure service epipe bgp-evpn vxlan default-route-tag
  5. configure service vpls bgp-evpn vxlan default-route-tag

default-route-tag

Syntax 
default-route-tag tag
no default-route-tag
Context 
[Tree] (config>service>vprn>isis default-route-tag)
Full Contexts 
configure service vprn isis default-route-tag
Description 

This command configures the route tag for default route for the router or VPRN service.

Parameters 
tag—
Assigns a default tag.
Values—
1 — 4294967295

 

Platforms 

All

default-route-tag

Syntax 
default-route-tag tag
no default-route-tag
Context 
[Tree] (config>router>isis default-route-tag)
Full Contexts 
configure router isis default-route-tag
Description 

This command configures the route tag for default route.

Parameters 
tag—
Assigns a default tag.
Values—
1 to 4294967295

 

Platforms 

All

8.81. default-route-target

default-route-target

Syntax 
[no] default-route-target
Context 
[Tree] (config>router>bgp>group default-route-target)
[Tree] (config>router>bgp>group>neighbor default-route-target)
Full Contexts 
configure router bgp group default-route-target
configure router bgp group neighbor default-route-target
Description 

This command originates the default RTC route (zero prefix length) towards the selected peers.

Default 

no default-route-target

Platforms 

All

8.82. default-router

default-router

Syntax 
default-router ip-address [ip-address]
no default-router
Context 
[Tree] (config>router>dhcp>server>pool>subnet>options default-router)
[Tree] (config>service>vprn>dhcp6>server>pool>subnet default-router)
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options default-router)
Full Contexts 
configure router dhcp local-dhcp-server pool subnet options default-router
configure service vprn dhcp6 server pool subnet default-router
configure subscriber-mgmt local-user-db ipoe host options default-router
Description 

This command configures the IP address of the default router for a DHCP client. Up to four IP addresses can be specified.

The no form of this command removes the address(es) from the configuration.

Parameters 
ip-address—
Specifies up to four default router IP addresses. Each address must be unique within the subnet and specified in dotted decimal notation. Allowed values are IP addresses in the range 1.0.0.0 – 223.255.255.255 (with support of /31 subnets).
Values—
a.b.c.d

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.83. default-sap

default-sap

Syntax 
[no] default-sap
Context 
[Tree] (config>service>vpls>sap>managed-vlan-list default-sap)
Full Contexts 
configure service vpls sap managed-vlan-list default-sap
Description 

This command adds a default SAP to the managed VLAN list.

The no form of this command removes the default SAP to the managed VLAN list.

Platforms 

All

8.84. default-secure-service

default-secure-service

Syntax 
default-secure-service service-id interface ip-int-name
no default-secure-service
Context 
[Tree] (config>service>ies>if>sap>ipsec-gateway default-secure-service)
[Tree] (config>service>vprn>if>sap>ipsec-gateway default-secure-service)
Full Contexts 
configure service ies interface sap ipsec-gateway default-secure-service
configure service vprn interface sap ipsec-gateway default-secure-service
Description 

This command specifies a service ID or service name of the default security service used by this SAP IPsec gateway.

Parameters 
service-id—
Specifies a default secure service.
Values—
service-id: 1 to 2147483647svc-name: An existing service name up to 64 characters.

 

ip-int-name—
The name of private IPsec tunnel interface.

8.85. default-set

default-set

Syntax 
default-set set-id
no default-set
Context 
[Tree] (config>router>mpls>class-forwarding-policy default-set)
Full Contexts 
configure router mpls class-forwarding-policy default-set
Description 

This command configures the default forwarding set.

Parameters 
set-id —
Specifies the class forwarding set.
Values—
1 to 4 (in system profile None/A)
1 to 6 (in system profile B)

 

Platforms 

All

8.86. default-tag

default-tag

Syntax 
default-tag tag
no default-tag
Context 
[Tree] (config>aaa>route-downloader default-tag)
Full Contexts 
configure aaa route-downloader default-tag
Description 

This command sets the default tag that routes processed by the AAA route downloader will take.

Note:

Any route received with a specific tag retains the specific tag. The tag value is passed to the Route Table Manager and is available as match condition on the export statement of other routing protocols.

The no form of this command reverts to the default.

Default 

default-tag 0

Parameters 
tag—
Specifies the default tag of the routes imported.
Values—
0 to 4294967295

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.87. default-tunnel-endpoint-limit

default-tunnel-endpoint-limit

Syntax 
default-tunnel-endpoint-limit default-endpoint
no default-tunnel-endpoint-limit
Context 
[Tree] (config>app-assure>group>gtp>gtp-fltr>gtp-tunnel-database default-tunnel-endpoint-limit)
Full Contexts 
configure application-assurance group gtp gtp-filter gtp-tunnel-database default-tunnel-endpoint-limit
Description 

This command configures the maximum number of GTP endpoints requested in GTP-C messages by using, for example, the PDP Context Create message type.

The validate-gtp-tunnels command must be enabled before using this command.

The no form of this command sets the limit to 4294967295 (the maximum number of GTP endpoints supported by AA FW minus one).

Default 

no default-tunnel-endpoint-limit

Parameters 
default-endpoint—
Specifies the limit.
Values—
1 to 4294967295

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.88. default-tunnel-template

default-tunnel-template

Syntax 
default-tunnel-template ipsec-template-identifier
no default-tunnel-template
Context 
[Tree] (config>service>ies>if>sap>ipsec-gateway default-tunnel-template)
[Tree] (config>service>vprn>if>sap>ipsec-gateway default-tunnel-template)
Full Contexts 
configure service ies interface sap ipsec-gateway default-tunnel-template
configure service vprn interface sap ipsec-gateway default-tunnel-template
Description 

This command configures a default tunnel policy template for the gateway.

8.89. default-user-name

default-user-name

Syntax 
default-user-name ppp-username
no default-user-name
Context 
[Tree] (config>subscr-mgmt>ppp-policy default-user-name)
Full Contexts 
configure subscriber-mgmt ppp-policy default-user-name
Description 

This command configures the default username for authentication when not provided in PAP/CHAP authentication (no Name field in CHAP Response message or Peer-Id-Length=0 in PAP Authenticate-Request).

The PPP session terminates when no username is provided in PAP/CHAP authentication and no default-user-name is configured.

Parameters 
ppp-username —
Specifies a default username up to 253 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.90. default-value

default-value

Syntax 
default-value value-name
no default-value
Context 
[Tree] (config>app-assure>group>policy>aso>char default-value)
Full Contexts 
configure application-assurance group policy app-service-options characteristic default-value
Description 

This command assigns one of the characteristic values as default.

When a default value is specified, app-profile entries that do not explicitly include this characteristic inherit the default value and use it as part of the AQP match criteria based on that app-profile.

A default-value is required for each characteristic. This is evaluated at commit time.

The no form of this command removes the default value for the characteristic.

Parameters 
value-name—
Specifies the name of an existing characteristic value.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.91. defaults

defaults

Syntax 
defaults
Context 
[Tree] (config>router>dhcp6>server defaults)
Full Contexts 
configure router dhcp6 local-dhcp-server defaults
Description 

Commands in this context configure server default timer and option parameters. These can be overridden on a per-pool and per-prefix basis.

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

defaults

Syntax 
defaults
Context 
[Tree] (config>subscr-mgmt>gtp>apn-policy>apn defaults)
Full Contexts 
configure subscriber-mgmt gtp apn-policy apn defaults
Description 

Commands in this context configure default parameters for the GTP connection that can be used when the parameters are not returned in authentication.

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.92. delay

delay

Syntax 
delay
Context 
[Tree] (config>router>if>if-attribute delay)
Full Contexts 
configure router interface if-attribute delay
Description 

Commands in this context configure or apply delay interface attributes such as static delay.

Platforms 

All

delay

Syntax 
delay interval
Context 
[Tree] (config>system>management-interface>cli>md-cli>environment>progress-indicator delay)
Full Contexts 
configure system management-interface cli md-cli environment progress-indicator delay
Description 

This command sets the delay before the progress indicator is displayed in the MD-CLI.

Default 

delay 500

Parameters 
interval—
Specifies the delay interval, in milliseconds.
Values—
1 to 10000

 

Platforms 

All

delay

Syntax 
delay delay-measurement-type
Context 
[Tree] (config>test-oam>link-meas>template delay)
Full Contexts 
configure test-oam link-measurement measurement-template delay
Description 

This command configures the type of delay measurement statistic used in both the sample window and aggregate sample window.

The no form of this command reverts to the default value.

Default 

delay min

Parameters 
delay-measurement-type—
Specifies the type of delay measurement that is used for comparison and reporting.
Values—
min — Keyword to take the minimum of a series of measurements for comparison and reporting.
max — Keyword to take the maximum of a series of measurements for comparison and reporting.
avg — Keyword to compute the average of a series of measurements for comparison and reporting.

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.93. delay-event

delay-event

Syntax 
delay-event {forward | backward | round-trip} lowest-bin bin-number thresholdraise-threshold [clear clear-threshold]
no delay-event {forward | backward | round-trip}
Context 
[Tree] (config>oam-pm>bin-group>bin-type delay-event)
Full Contexts 
configure oam-pm bin-group bin-type delay-event
Description 

This command sets the bin number, the threshold and the direction that is monitored to determine if a delay metric threshold crossing event has occurred or has cleared. It requires a bin number, a rising threshold value and a direction. If the clear-threshold value is not specified, the traffic crossing alarm is stateless. Stateless means the state is not carried forward to other measurement intervals. Each measurement interval is analyzed independently and without regard to any previous window. When a raise threshold is reached, the log event is generated. Each unique threshold can only be raised once for the threshold within measurement interval. If the optional clear threshold is specified, the traffic crossing alarm uses stateful behavior. Stateful means each unique previous event state is carried forward to following measurement intervals. If a threshold crossing event is raised another is not raised until a measurement interval completes, and the clear threshold has not been exceeded. A clear event is raised under that condition. In general, alarms are generated when there is a state change. The thresholds configured are applied to the count in specified bin and all higher number bins.

The no form of this command removes thresholding for this delay metric. The complete command must be configured in order to remove the specific threshold.

Parameters 
forward—
Specifies the threshold is applied to the forward direction bin.
backward—
Specifies the threshold is applied to the backward direction bin.
round-trip—
Specifies the threshold is applied to the roundtrip direction bin.
bin-number—
Specifies the number of the bin that the threshold is applied to. This bin and all higher bins are monitored to determine if the sum total results in these bins have reached or crossed the configured threshold.
Values—
0 to 9

 

raise-threshold—
Specifies the rising numerical value in the range that determines when the event is to be generated, when value reached.
Values—
1 to 864000

 

clear-threshold—
Specifies an optional numerical value in the range threshold used to indicate stateful behavior that allows the operator to configure a lower value than the rising threshold that determines when the clear event should be generated. Clear is generated when the end of measurement interval count is less than or equal to the configured value. If this option is not configured the behavior is stateless. Zero means no results can exist in the lower bin or any higher.
Values—
0 to 863999

 

Default—
Clear threshold disabled
Platforms 

All

8.94. delay-event-exclusion

delay-event-exclusion

Syntax 
delay-event-exclusion {forward | backward | round-trip} lowest-bin bin-number
no delay-event-exclusion {forward | backward | round-trip}
Context 
[Tree] (config>oam-pm>bin-group>bin-type delay-event-exclusion)
Full Contexts 
configure oam-pm bin-group bin-type delay-event-exclusion
Description 

This optional command allows results from probes that map to the specified bin and higher bins to be excluded from the TCA count. The TCA count is used to determine if a threshold has been reached by the event monitoring function. Individual counters are incremented in the bin, but the counts in the specified bin and higher bins are not included in the TCA threshold computation. A delay-event must be configured in the same direction, and the lowest-bin configured as part of the delay-event-exclusion command must be higher than the lowest bin specified by the corresponding delay-event command.

The bin group allows this optional command to be added, modified, or deleted while tests are actively referencing the bin group. The bin group does not need to be shut down during delay-event-exclusion configuration. If the values are modified while the active tests are executing, all configured TCAs for the specified direction within the bin group enters a pending (p) state until the start of the next measurement interval. Any existing stateful TCAs that were raised are cleared without creating a log event, and no further processing for the affected TCAs occur in the active window. Depending on timing, the pending state may continue past the adjacent measurement interval until the start of the following measurement interval.

The no form of this command does not exclude any values from the configured TCA threshold.

Default 

no delay-event-exclusion forward

no delay-event-exclusion backward

no delay-event-exclusion round-trip

Parameters 
forward—
Specifies the forward direction bin.
backward—
Specifies the backward direction bin.
round-trip—
Specifies the round-trip direction bin.
bin-number—
Specifies the number of the lowest bin that the exclusion is applied to. This bin and all higher bins are excluded from the delay-event (TCA) count. If no bin numbers are configured, this command is ignored.
Values—
1 to 9

 

Platforms 

All

8.95. delay-events

delay-events

Syntax 
[no] delay-events
Context 
[Tree] (config>oam-pm>session>measurement-interval>event-mon delay-events)
Full Contexts 
configure oam-pm session measurement-interval event-mon delay-events
Description 

This enables the monitoring of all configured delay events. Adding this functionality starts the monitoring of the configured delay events at the start of the next measurement interval. If the function is removed using the no command, all monitoring of configured delay events, logging, and recording of new events for that session are suspended. Any existing events at the time of the shut down are maintained until the active measurement window in which the removal was performed has completed. The state of this monitoring function can be changed without having to shutdown all the tests in the session.

The no form of this command disables the monitoring of all configured delay events.

8.96. delay-selection

delay-selection

Syntax 
delay-selection {static | dynamic | static-preferred | dynamic-preferred}
no delay-selection
Context 
[Tree] (config>router>if>if-attr>delay delay-selection)
Full Contexts 
configure router interface if-attribute delay delay-selection
Description 

This command selects the delay source to be advertised by the IGP for this interface.

The no form of this command reverts to the default value.

Default 

delay-selection static-preferred

Parameters 
static —
Keyword to use only statically configured delay and ignore dynamic delay measurements generated by link-measurement.
dynamic —
Keyword to use only dynamic delay measurements generated by link-measurement and ignore statically configured delay.
static-preferred —
Keyword to prefer the configured static delay over the dynamic delay. If static delay is not configured, the delay reported using link-measurement is used.
dynamic-preferred —
Keyword to prefer the dynamic reported delay over the statically configured delay. If no dynamic delay has been reported using link-measurement, the statically configured delay is used.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.97. delay-start-time

delay-start-time

Syntax 
delay-start-time delay
no delay-start-time
Context 
[Tree] (config>subscr-mgmt>acct-plcy delay-start-time)
Full Contexts 
configure subscriber-mgmt radius-accounting-policy delay-start-time
Description 

It is recommended to only use this command when session-accounting is used. By default, a dual stack subscriber generates a RADIUS accounting interim message for each new host update (IPv4, IPv6 WAN, and IPv6 PD). This command delays the trigger of a RADIUS accounting start message and allows all hosts to connect first. When the delay timer expires, a single RADIUS accounting start message containing all the host currently connected to the BNG is sent to the server. Subsequent host connections will trigger interim-updates if host-update is enabled on session-accounting. For all other accounting modes, this command will delay the trigger of an accounting start when a host connects.

The no form of this command reverts to the default.

Default 

no delay-start-time

Parameters 
delay—
Specifies the accounting start delay, in seconds.
Values—
1 to 10

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.98. delay-template

delay-template

Syntax 
delay-template delay-template-name
no delay-template
Context 
[Tree] (config>oam-pm>session>ethernet>dmm delay-template)
Full Contexts 
configure oam-pm session ethernet dmm delay-template
Description 

This command specifies a reference to a config>oam-pm>streaming delay-template for the Ethernet DMM test. It is possible to include a delay template reference that is not configured under config>oam-pm>streaming. In this case, the streaming of the results is not in effect. Refer to the config>oam-pm>streaming delay-template command for session to template interaction behaviors.

The no form of this command deletes the delay template from the test.

Default 

no delay-template

Parameters 
delay-template-name—
Specifies the delay template name, up to 64 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

delay-template

Syntax 
delay-template delay-template-name
no delay-template
Context 
[Tree] (config>oam-pm>session>ip>twamp-light delay-template)
Full Contexts 
configure oam-pm session ip twamp-light delay-template
Description 

This command specifies a reference to a config>oam-pm>streaming delay-template for the IP TWAMP LIGHT test. It is possible to include a delay template reference that is not configured under config>oam-pm>streaming. In this case, streaming of results are not in effect. Refer to the config>oam-pm>streaming delay-template command for session to template interaction behaviors.

The no form of this command deletes the delay template from the test.

Default 

no delay-template

Parameters 
delay-template-name—
Specifies the delay template name, up to 64 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

delay-template

Syntax 
delay-template delay-template-name
no delay-template
Context 
[Tree] (config>oam-pm>session>mpls>dm delay-template)
Full Contexts 
configure oam-pm session mpls dm delay-template
Description 

This command specifies a reference to a config>oam-pm>streaming delay-template for the MPLS DM test. It is possible to include a delay template reference that is not configured under config>oam-pm>streaming. In this case, streaming of results are not in effect. Refer to the config>oam-pm>streaming delay-template command for session to template interaction behaviors.

The no form of this command deletes the delay template from the test.

Default 

no delay-template

Parameters 
delay-template-name—
Specifies the delay template name, up to 64 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

delay-template

Syntax 
delay-template template-name [create]
no delay-template template-name
Context 
[Tree] (config>oam-pm>streaming delay-template)
Full Contexts 
configure oam-pm streaming delay-template
Description 

This command specifies a template for streaming delay metrics that can be referenced under the oam-pm>session technology delay style test.

The delay-template must be configured under the technology delay test oam-pm>session to allow the delay specific test to stream results using the configured template attributes.

The no form of this command deletes the specified delay template.

Parameters 
template-name—
Specifies the template name, up to 64 characters.
create—
Creates the template.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.99. delegated-ipv6-prefix

delegated-ipv6-prefix

Syntax 
[no] delegated-ipv6-prefix
Context 
[Tree] (config>subscr-mgmt>acct-plcy>include-radius-attribute delegated-ipv6-prefix)
Full Contexts 
configure subscriber-mgmt radius-accounting-policy include-radius-attribute delegated-ipv6-prefix
Description 

This command enables the generation of the delegated-ipv6-prefix RADIUS attribute.

The no form of this command disables the generation of the delegated-ipv6-prefix RADIUS attribute.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.100. delegated-prefix-length

delegated-prefix-length

Syntax 
delegated-prefix-length [minimum prefix-length] [maximum prefix-length]
no delegated-prefix-length
Context 
[Tree] (config>router>dhcp6>server>pool delegated-prefix-length)
[Tree] (config>service>vprn>dhcp6>server>pool delegated-prefix-length)
Full Contexts 
configure router dhcp6 local-dhcp-server pool delegated-prefix-length
configure service vprn dhcp6 local-dhcp-server pool delegated-prefix-length
Description 

This command configures the delegated prefix length that is used if the DHCPv6 client does not specify a prefix length hint.

The DHCPv6 client prefix length hint is limited by the range specified by the minimum and maximum parameters. If the hint is smaller than the minimum, the allocated prefix length is equal to the minimum length. If the hint is larger than the maximum, the allocated prefix length is equal to the maximum length.

The no form of this command reverts to the default.

Default 

delegated-prefix-length 64 minimum 48 maximum 64

Parameters 
prefix-length—
Specifies the minimum or maximum allowed prefix length, in bits.
Values—
48 to 127

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

delegated-prefix-length

Syntax 
delegated-prefix-length bits
delegated-prefix-length variable
no delegated-prefix-length
Context 
[Tree] (config>service>ies>sub-if>ipv6 delegated-prefix-length)
[Tree] (config>service>vprn>sub-if>ipv6 delegated-prefix-length)
Full Contexts 
configure service ies subscriber-interface ipv6 delegated-prefix-length
configure service vprn subscriber-interface ipv6 delegated-prefix-length
Description 

This command configures the subscriber interface level setting for delegated prefix length. The delegated prefix length for a subscriber- interface can be either set to a fixed value that is explicitly configured under the subscriber interface CLI hierarchy or a variable value that can be obtained from various sources. This command can be changed only when no IPv6 prefixes are configured under the subscriber-interface context.

The no form of this command reverts to the default.

Default 

no delegated-prefix-length (the delegated prefix length is 64)

Parameters 
bits—
Specifies the delegated prefix length in bits. This value is applicable to the entire subscriber interface. In case that the delegated prefix length is also supplied via other means (LUDB, RADIUS or DHCP Server), such supplied value must match the value configured under the subscriber-interface context. Otherwise, the prefix instantiation in the router fails.
Values—
48 to 64

 

variable—
Specifies that the delegated prefix value can be of any length between 48 to 64. The value itself can vary between the prefixes and is provided at the time of prefix instantiation. The order of priority for the source of the delegated prefix length is:
  1. LUDB
  2. RADIUS
  3. DHCPv6 server
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.101. delete

delete

Syntax 
delete file-url [force] [no-redirect] [client-tls-profile profile] [proxy proxy-url]
Context 
[Tree] (file delete)
Full Contexts 
file delete
Description 

This command deletes the specified file.

The optional wildcard (*) can be used to delete multiple files that share a common (partial) prefix and/or (partial) suffix. When the wildcard is entered, the following prompt displays for each file that matches the wildcard:

“Delete file <filename> (y/n)?”

Parameters 
file-url—
Specifies the file name to delete.
Values—

local-url

[cflash-id/][file-path] up to 200 characters, including cflash-id directory length up to 99 each

remote-url

[{ftp:// | tftp:// | http:// | https://}login:pswd@remote-locn/][file-path]

up to 247 characters

directory length up to 99 characters each

remote-locn

[hostname | ipv4-address | [ipv6-address]]

ipv4-address

a.b.c.d

ipv6-address

x:x:x:x:x:x:x:x[-interface]

x:x:x:x:x:x:d.d.d.d[-interface]

x - [0 to FFFF]H

d - [0 to 255]D

interface - up to 32 characters, for link local addresses 255

cflash-id

cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:

 

force—
Forces an immediate deletion of the specified file(s). The command file delete * force deletes all the wildcard matching files without displaying a user prompt message. This command also automatically accepts HTTP redirects unless overridden by the no-redirect parameter.
profile—
Specifies the TLS client profile configured under config>system>security>tls>client-tls-profile to use.
proxy-url—
Specifies the URL of an HTTP proxy. For example, http://proxy.mydomain.com:8000. This URL must be an HTTP URL and not an HTTPS URL.
no-redirect—
Specifies to automatically refuse any HTTP redirects without prompting the user.
Platforms 

All

delete

Syntax 
delete [line]
Context 
[Tree] (candidate delete)
Full Contexts 
candidate delete
Description 

This command deletes the selected CLI node (which includes all sub-branches). The deleted lines are also copied into a temporary buffer that can be used for a subsequent insert.

Parameters 
line—
Indicates which line to delete.
Values—

line, offset, first, edit-point, last

line

absolute line number

offset

relative line number to current edit point. Prefixed with '+' or '-'

first

keyword - first line

edit-point

keyword - current edit point

last

keyword - last line that is not 'exit'

 

delete

Syntax 
delete [{checkpoint-id | rescue | latest-rb}]
Context 
[Tree] (admin>rollback delete)
Full Contexts 
admin rollback delete
Description 

This command deletes a rollback checkpoint and causes the suffixes to be adjusted (decremented) for all checkpoints older that the one that was deleted (to close the hole in the list of checkpoint files and create room to create another checkpoint).

If config redundancy rollback-sync is enabled, a rollback delete will also delete the equivalent checkpoint on the standby CF and shuffle the suffixes on the standby CF.

It is not advised to manually delete a rollback checkpoint (for example, using a file delete command). If a rollback checkpoint file is manually deleted without using the admin rollback delete command then the suffixes of the checkpoint files are not shuffled, nor is the equivalent checkpoint file deleted from the standby CF. This manual deletion creates a hole in the checkpoint file list until enough new checkpoints have been created to roll the hole off the end of the list.

Parameters 
checkpoint-id—
An ID indicating a specific rollback checkpoint. A checkpoint-id of 1 indicates the rollback checkpoint file (at the configured rollback location) with *.rb.1 as the suffix, 2 for file *.rb.2, and so on.
Values—
1 to 9

 

latest-rb—
Specifies the most recently created rollback checkpoint (corresponds to the file-url.rb rollback checkpoint file).
rescue—
Deletes the rescue checkpoint. No checkpoint suffix numbers are changed.
Platforms 

All

8.102. delete-config

delete-config

Syntax 
[no] delete-config
Context 
[Tree] (configure>system>security>profile>netconf>base-op-authorization delete-config)
Full Contexts 
configure system security profile netconf base-op-authorization delete-config
Description 

This command enables the NETCONF delete-config operation.

The no form of this command disables the operation.

Default 

no delete-config

Note:

The operation is enabled by default in the built-in system-generated administrative profile.

Platforms 

All

8.103. delete-pending

delete-pending

Syntax 
[no] delete-pending
Context 
[Tree] (config>subscr-mgmt>wlan-gw>ue-query>state delete-pending)
Full Contexts 
configure subscriber-mgmt wlan-gw ue-query state delete-pending
Description 

This command enables matching on UEs that are in a delete-pending state.

The no form of this command disables matching on UEs in a delete pending-state, unless all state matching is disabled.

Default 

no delete-pending

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.104. delivery-service

delivery-service

Syntax 
delivery-service service-id
delivery-service name service-name
no delivery-service
Context 
[Tree] (config>service>ies>if>sap>ip-tunnel delivery-service)
[Tree] (config>service>vprn>if>sap>ip-tunnel delivery-service)
Full Contexts 
configure service ies interface sap ip-tunnel delivery-service
configure service vprn interface sap ip-tunnel delivery-service
Description 

This command sets the delivery service for GRE encapsulated packets associated with a particular GRE tunnel. This is the IES or VPRN service where the GRE encapsulated packets are injected and terminated. The delivery service may be the same service that owns the private tunnel SAP associated with the GRE tunnel. The GRE tunnel does not come up until a valid delivery service is configured.

The no form of this command deletes the delivery-service from the GRE tunnel configuration.

Parameters 
service-id—
Identifies the service used to originate and terminate the GRE encapsulated packets belonging to the GRE tunnel.

This variant of the command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic). The delivery-service name service-name variant can be used in all configuration modes.

Values—
{id | svc-name}

id:

1 to 2147483647

svc-name:

up to 64 characters (svc-name is an alias for input only. The svc-name gets replaced with an id automatically by SR OS in the configuration).

 

service-name—
Identifies the service used to originate and terminate the GRE encapsulated packets belonging to the GRE tunnel.
Values—
1 to 64 characters

 

Platforms 

All

8.105. delta-consumed-agg-rate

delta-consumed-agg-rate

Syntax 
delta-consumed-agg-rate percent percent-of-delta-consumed-agg-rate
no delta-consumed-agg-rate
Context 
[Tree] (config>qos>adv-config-policy>child-control>bandwidth-distribution>above-offered-allowance delta-consumed-agg-rate)
Full Contexts 
configure qos adv-config-policy child-control bandwidth-distribution above-offered-allowance delta-consumed-agg-rate
Description 

This command configures the percentage of the delta (from the beginning to the end of the current H-QoS below CIR or above CIR pass) of the aggregate rate consumed by its other members that can be given to a queue at the end of an H-QoS below CIR pass and above CIR pass. This command is only applicable when the port scheduler is configured to use the above-offered-allowance-control algorithm, otherwise it is ignored.

The no form of this command reverts the delta-consumed-agg-rate percent to its default value.

Default 

delta-consumed-agg-rate 20.00

Parameters 
percent-of-delta-consumed-agg-rate—
Specifies the percentage of the delta (over the current H-QoS below CIR or above CIR pass) consumed aggregate rate that can be given to a queue.
Values—
0.00 to 100.00

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.106. delta-consumed-higher-tier-rate

delta-consumed-higher-tier-rate

Syntax 
delta-consumed-higher-tier-rate percent percent-of-delta-consumed-high-tier-rate
no delta-consumed-higher-tier-rate
Context 
[Tree] (config>qos>adv-config-policy>child-control>bandwidth-distribution>above-offered-allowance delta-consumed-higher-tier-rate)
Full Contexts 
configure qos adv-config-policy child-control bandwidth-distribution above-offered-allowance delta-consumed-higher-tier-rate
Description 

This command configures the percentage of the delta (from the beginning to the end of the current H-QoS below CIR or above CIR pass) of the higher tier rate consumed by its other members that can be given to a queue at the end of an H-QoS below CIR pass and above CIR pass. Higher tier refers to the Vport aggregate rate and port scheduler level, group, and maximum rates.

This command is only applicable when the port scheduler is configured to use the above-offered-allowance-control algorithm, otherwise it is ignored.

The no form of this command reverts the delta-consumed-higher-tier-rate percent to its default value.

Default 

delta-consumed-higher-tier-rate 5.00

Parameters 
percent-of-delta-consumed-high-tier-rate—
Specifies the percentage of the delta (over the current H-QoS below CIR or above CIR pass) consumed higher tier rate that can be given to a queue.
Values—
0.00 to 100.00

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.107. delta-in-use-limit

delta-in-use-limit

Syntax 
delta-in-use-limit limit
no delta-in-use-limit
Context 
[Tree] (config>vrrp>policy delta-in-use-limit)
Full Contexts 
configure vrrp policy delta-in-use-limit
Description 

This command sets a lower limit on the virtual router in-use priority that can be derived from the delta priority control events.

Each vrrp-priority-id places limits on the delta priority control events to define the in-use priority of the virtual router instance. Setting this limit prevents the sum of the delta priority events from lowering the in-use priority value of the associated virtual router instances below the configured value.

The limit has no effect on explicit priority control events. Explicit priority control events are controlled by setting the in-use priority to any value between 1 and 254.

Only non-owner virtual router instances can be associated with VRRP priority control policies and their priority control events.

Once the total sum of all delta events is calculated and subtracted from the base priority of the virtual router instance, the result is compared to the delta-in-use-limit value. If the result is less than the limit, the delta-in-use-limit value is used as the virtual router in-use priority value. If an explicit priority control event overrides the delta priority control events, the delta-in-use-limit has no effect.

Setting the limit to a higher value than the default of 1 limits the effect of the delta priority control events on the virtual router instance base priority value. This allows for multiple priority control events while minimizing the overall effect on the in-use priority.

Changing the in-use-priority-limit causes an immediate re-evaluation of the in-use priority values for all virtual router instances associated with this vrrp-policy-id based on the current sum of all active delta control policy events.

The no form of the command reverts to the default value.

Default 

delta-in-use-limit 1 — Specifies the lower limit of 1 for the in-use priority, as modified, by delta priority control events.

Parameters 
limit—
Specifies the lower limit of the in-use priority base, as modified by priority control policies. The in-use-priority-limit has the same range as the non-owner virtual router instance base-priority parameter. If the result of the total delta priority control events minus the virtual router instances base-priority, is less than the in-use-priority-limit, the in-use-priority-limit value is used as the virtual router instances in-use priority value.

Setting the in-use-priority-limit to a value equal to or larger than the virtual router instance base-priority prevents the delta priority control events from having any effect on the virtual router instance in-use priority value.

Values—
1 to 254

 

Platforms 

All

8.108. dent-threshold

dent-threshold

Syntax 
dent-threshold threshold
no dent-threshold
Context 
[Tree] (config>mcast-mgmt>mcast-info-plcy>video-policy>video-if>hd dent-threshold)
[Tree] (config>mcast-mgmt>mcast-info-plcy>video-policy>video-if>pip dent-threshold)
[Tree] (config>mcast-mgmt>mcast-info-plcy>video-policy>video-if>sd dent-threshold)
Full Contexts 
configure mcast-management multicast-info-policy video-policy video-interface hd dent-threshold
configure mcast-management multicast-info-policy video-policy video-interface pip dent-threshold
configure mcast-management multicast-info-policy video-policy video-interface sd dent-threshold
Description 

This command sets the threshold value below which the FCC server will dent/drop unicast data sent to the FCC client during a fast channel change. Within the RTP extension header, the packet priority (PRI) (2 bits) and the fine-grained priority (FPRI) (3 bits) indicate the “importance” of the frame as to how essential it is to the video stream.

This parameter is only applicable if the FCC server mode is dent.

The no form of the command returns the parameter to the default value.

Default 

dent-threshold 16 (only B frames are dropped)

Parameters 
threshold—
Specifies the threshold value is used by the FCC server to compare with the concatenation of the PRI and FPRI to determine whether to send the packet to the FCC client. If the PRI and FPRI expressed as a decimal integer is greater than or equal to the threshold value, the packet will be sent.
Values—
1 to 31

 

Platforms 

7450 ESS, 7750 SR-7/12/12e, 7750 SR-14s

8.109. deny-list

deny-list

Syntax 
[no] deny-list deny-list-name
Context 
[Tree] (config>app-assure>group>url-filter>local-filtering deny-list)
Full Contexts 
configure application-assurance group url-filter local-filtering deny-list
Description 

This command adds a deny-list URL list to the local URL filter policy.

The no form of this command removes the URL list object.

Default 

no deny-list

Parameters 
deny-list-name—
Specifies the URL list name.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.110. depleted-event

depleted-event

Syntax 
[no] depleted-event
Context 
[Tree] (config>service>vprn>dhcp6>server>pool>prefix>thresholds>minimum-free depleted-event)
[Tree] (config>router>dhcp6>server>pool>prefix>thresholds>minimum-free depleted-event)
Full Contexts 
configure router dhcp6 local-dhcp-server pool prefix thresholds minimum-free depleted-event
configure service vprn dhcp6 local-dhcp-server pool prefix thresholds minimum-free depleted-event
Description 

This command enables the system to send out a warning when the prefix with a configured length is no longer available in the provisioned prefix.

For example:

prefix 2001:0:0:ffe0::/50 pd wan-host create
   thresholds
       minimum-free prefix-length 64
           depleted-event

With the above configuration, the system will send out a warning when there is no available /64 that can be allocated out of 2001:0:0:ffe0::/50.

The no form of this command disables the warnings.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

depleted-event

Syntax 
[no] depleted-event
Context 
[Tree] (config>service>vprn>dhcp6>server>pool>thresholds>minimum-free depleted-event)
[Tree] (config>router>dhcp6>server>pool>thresholds>minimum-free depleted-event)
Full Contexts 
configure router dhcp6 local-dhcp-server pool thresholds minimum-free depleted-event
configure service vprn dhcp6 local-dhcp-server pool thresholds minimum-free depleted-event
Description 

This command enables the system to send out warnings when the prefix with the configured length is no longer available in the pool.

The no form of this command disables the warnings.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.111. derived-id

derived-id

Syntax 
derived-id derived-id-string
no derived-id
Context 
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>host-ident derived-id)
[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>host-ident derived-id)
Full Contexts 
configure subscriber-mgmt local-user-db ipoe host host-identification derived-id
configure subscriber-mgmt local-user-db ppp host host-identification derived-id
Description 

This command configures an ASCII string that uniquely identifies a host and is derived by a Python script from packet content available during a DHCP transaction or PPPoE session establishment.

Note:

This command is only used when derived-id is configured as one of the match-list parameters.

The no form of this command removes the derived-id from the configuration.

Parameters 
derived-id-string—
Specifies the host ID to be derived by a python script from DHCP or PPPoE packets, up to 255 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.112. description

description

Syntax 
description tiny-description-string
no description
Context 
[Tree] (config>ipsec>static-sa description)
Full Contexts 
configure ipsec static-sa description
Description 

This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.

The no form of this command removes the string from the configuration.

Parameters 
tiny-description-string—
Specifies the description character string. Allowed values are any string, up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms 

All

description

Syntax 
description short-description-string
no description
Context 
[Tree] (config>bmp>station description)
[Tree] (config>router>bgp description)
[Tree] (config>router>bgp>group description)
[Tree] (config>router>bgp>group>neighbor description)
[Tree] (config>card>fp>ingress>access>queue-group description)
[Tree] (config>card>fp>ingress>network>queue-group description)
[Tree] (config>eth-tunnel>path>eth-cfm>mep description)
[Tree] (config>fwd-path-ext>fpe description)
[Tree] (config>lag>link-map-profile description)
[Tree] (config>port>ethernet>access>egr>qgrp description)
[Tree] (config>port>ethernet>access>egr>vport description)
[Tree] (config>port>ethernet>access>ing>qgrp description)
[Tree] (config>port>ethernet>eth-cfm>mep description)
[Tree] (config>port>ethernet>network>egr>qgrp description)
[Tree] (config>port>ethernet>egress>hs-sec-shaper description)
[Tree] (config>port-xc>pxc description)
[Tree] (config>qos>fp-resource-policy description)
[Tree] (config>redundancy>multi-chassis>peer description)
[Tree] (config>connection-profile description)
[Tree] (config>service>apipe description)
[Tree] (config>service>apipe>endpoint description)
[Tree] (config>service>cpipe description)
[Tree] (config>service>cpipe>endpoint description)
[Tree] (config>service>epipe description)
[Tree] (config>service>epipe>spoke-sdp description)
[Tree] (config>service>epipe>endpoint description)
[Tree] (config>service>fpipe description)
[Tree] (config>service>fpipe>endpoint description)
[Tree] (config>service>ipipe description)
[Tree] (config>service>ipipe>endpoint description)
[Tree] (config>service>ipipe>spoke-sdp description)
[Tree] (config>eth-tunnel>path description)
[Tree] (config>filter>dhcp-filter description)
[Tree] (config>ipsec>client-db description)
[Tree] (config>ipsec>client-db>client description)
[Tree] (config>ipsec>ike-policy description)
[Tree] (config>ipsec>tnl-temp description)
[Tree] (config>isa>ipsec-group description)
[Tree] (config>isa>tunnel-mem-pool description)
[Tree] (config>isa>tunnel-group description)
[Tree] (config>qos>hw-agg-shap-sched-plcy description)
[Tree] (config>router>dhcp>server description)
[Tree] (config>router>dhcp>server>pool description)
[Tree] (config>router>dhcp6>server description)
[Tree] (config>router>dhcp6>server>pool description)
[Tree] (config>service>ies>aarp-interface>spoke-sdp description)
[Tree] (config>service>ies>if>dhcp description)
[Tree] (config>service>ies>if>ipv6>dhcp6-relay description)
[Tree] (config>service>ies>if>sap>eth-cfm>mep description)
[Tree] (config>service>ies>if>sap>ip-tunnel description)
[Tree] (config>service>ies>if>spoke-sdp description)
[Tree] (config>service>ies>if>spoke-sdp>eth-cfm>mep description)
[Tree] (config>service>ies>sub-if>dhcp description)
[Tree] (config>service>ies>sub-if>grp-if>dhcp description)
[Tree] (config>service>ies>sub-if>grp-if>sap>eth-cfm>mep description)
[Tree] (config>service>ies>sub-if>grp-if>srrp description)
[Tree] (config>service>ies>sub-if>grp-if>ppp description)
[Tree] (config>service>ies>sub-if>grp-if>pppoe description)
[Tree] (config>service>ies>sub-if>ipv6>dhcp6>relay description)
[Tree] (config>service>vpls>sap>ipoe-session description)
[Tree] (config>service>vprn>if>dhcp description)
[Tree] (config>service>vprn>if>sap description)
[Tree] (config>service>vprn>if>sap>ip-tunnel description)
[Tree] (config>service>vprn>if>sap>ipsec-tunnel description)
[Tree] (config>service>vprn>sub-if>ipv6>dhcp6>relay description)
[Tree] (config>service>vprn>sub-if>grp-if>pppoe description)
[Tree] (config>subscr-mgmt>loc-user-db description)
[Tree] (config>subscr-mgmt>ppp-policy description)
[Tree] (config>subscr-mgmt>acct-plcy description)
[Tree] (config>subscr-mgmt>rip-plcy description)
[Tree] (config>filter>gre-tun-tmp description)
[Tree] (config>filter>ip-exception description)
[Tree] (config>filter>ip-exception>entry description)
[Tree] (config>filter>ip-filter description)
[Tree] (config>filter>ip-filter>entry description)
[Tree] (config>filter>ipv6-filter description)
[Tree] (config>filter>ipv6-filter>entry description)
[Tree] (config>filter>ipv6-exception description)
[Tree] (config>filter>ipv6-exception>entry description)
[Tree] (config>filter>log description)
[Tree] (config>filter>mac-filter description)
[Tree] (config>filter>mac-filter>entry description)
[Tree] (config>filter>redirect-policy description)
[Tree] (config>filter>redirect-policy>destination description)
[Tree] (config>filter>match-list>ip-prefix-list description)
[Tree] (config>filter>match-list>ipv6-prefix-list description)
[Tree] (config>filter>match-list>port-list description)
[Tree] (config>filter>match-list>protocol-list description)
[Tree] (config>qos>match-list>ip-prefix-list description)
[Tree] (config>qos>match-list>ipv6-prefix-list description)
[Tree] (config>qos>match-list>port-list description)
[Tree] (config>qos>network-queue description)
[Tree] (config>qos>policer-control-policy description)
[Tree] (config>qos>policer-control-policy>tier>arbiter description)
[Tree] (config>qos>post-policer-mapping description)
[Tree] (config>router>fad>flex-algo description)
[Tree] (config>router>if>dhcp description)
[Tree] (config>router>if>eth-cfm>mep description)
[Tree] (config>router>if>vrrp description)
[Tree] (config>router>network-domains>network-domain description)
[Tree] (config>router>origin-validation>rpki-session description)
[Tree] (config>router>pcp-server>server description)
[Tree] (config>router>route-next-hop-policy>template description)
[Tree] (config>router>mcac>if-policy description)
[Tree] (config>router>mcac>policy description)
[Tree] (config>router>mcac>policy>bundle description)
[Tree] (config>router>rip description)
[Tree] (config>router>rip>group description)
[Tree] (config>router>rip>group>neighbor description)
[Tree] (config>router>ripng description)
[Tree] (config>router>ripng>group description)
[Tree] (config>router>ripng>group>neighbor description)
[Tree] (config>router>static-route-entry>black-hole description)
[Tree] (config>router>static-route-entry>indirect description)
[Tree] (config>router>static-route-entry>next-hop description)
[Tree] (config>service>ies description)
[Tree] (config>subscr-mgmt>gtp>peer-profile description)
[Tree] (config>service>sdp>binding>pw-port description)
[Tree] (config>service>vpls>endpoint description)
[Tree] (config>service>vprn>aarp-interface>spoke-sdp description)
[Tree] (config>service>vprn>bgp description)
[Tree] (config>service>vprn>bgp>group description)
[Tree] (config>service>vprn>bgp>group>neighbor description)
[Tree] (config>service>vprn>l2tp description)
[Tree] (config>service>vprn>red-if>spoke-sdp description)
[Tree] (config>service>vprn>rip description)
[Tree] (config>service>vprn>rip>group description)
[Tree] (config>service>vprn>rip>group>neighbor description)
[Tree] (config>service>vprn>ripng description)
[Tree] (config>service>vprn>ripng>group description)
[Tree] (config>service>vprn>ripng>group>neighbor description)
[Tree] (config>service>vprn>spoke-sdp description)
[Tree] (config>service>vprn>static-route-entry>black-hole description)
[Tree] (config>service>vprn>static-route-entry>indirect description)
[Tree] (config>service>vprn>static-route-entry>next-hop description)
[Tree] (config>service>vprn>static-route-entry>grt description)
[Tree] (config>service>vprn>static-route-entry>ipsec-tunnel description)
[Tree] (config>subscr-mgmt>git description)
[Tree] (config>subscr-mgmt>pfcp-association description)
[Tree] (config>subscr-mgmt>sap-template description)
[Tree] (config>system>bluetooth>device description)
[Tree] (config>system>cron>sched description)
[Tree] (config>system>grpc-tunnel>destination-group description)
[Tree] (config>system>grpc-tunnel>tunnel description)
[Tree] (config>system>management-interface>remote-management>manager description)
[Tree] (config>system>persistence>ancp description)
[Tree] (config>system>persistence>dhcp-server description)
[Tree] (config>system>persistence>nat-fwd description)
[Tree] (config>system>persistence>python-policy-cache description)
[Tree] (config>system>persistence>sub-mgmt description)
[Tree] (config>system>script-control>script description)
[Tree] (config>system>satellite>eth-sat description)
[Tree] (config>system>satellite>local-forward description)
[Tree] (config>system>satellite>local-forward>sap description)
[Tree] (config>system>satellite>port-template description)
[Tree] (config>system>satellite>tdm-sat description)
[Tree] (config>system>software-repository description)
[Tree] (config>ipsec>trans-mode-prof description)
Full Contexts 
configure bmp station description
configure card fp ingress access queue-group description
configure card fp ingress network queue-group description
configure connection-profile description
configure eth-tunnel path description
configure eth-tunnel path eth-cfm mep description
configure filter dhcp-filter description
configure filter gre-tunnel-template description
configure filter ip-exception description
configure filter ip-exception entry description
configure filter ip-filter description
configure filter ip-filter entry description
configure filter ipv6-exception description
configure filter ipv6-exception entry description
configure filter ipv6-filter description
configure filter ipv6-filter entry description
configure filter log description
configure filter mac-filter description
configure filter mac-filter entry description
configure filter match-list ip-prefix-list description
configure filter match-list ipv6-prefix-list description
configure filter match-list port-list description
configure filter match-list protocol-list description
configure filter redirect-policy description
configure filter redirect-policy destination description
configure fwd-path-ext fpe description
configure ipsec client-db client description
configure ipsec client-db description
configure ipsec ike-policy description
configure ipsec tunnel-template description
configure ipsec ipsec-transport-mode-profile description
configure isa ipsec-group description
configure isa tunnel-group description
configure isa tunnel-member-pool description
configure lag link-map-profile description
configure port ethernet access egress queue-group description
configure port ethernet access egress vport description
configure port ethernet access ingress queue-group description
configure port ethernet egress hs-secondary-shaper description
configure port ethernet eth-cfm mep description
configure port ethernet network egress queue-group description
configure port-xc pxc description
configure qos fp-resource-policy description
configure qos hw-agg-shaper-scheduler-policy description
configure qos match-list ip-prefix-list description
configure qos match-list ipv6-prefix-list description
configure qos match-list port-list description
configure qos network-queue description
configure qos policer-control-policy description
configure qos policer-control-policy tier arbiter description
configure qos post-policer-mapping description
configure redundancy multi-chassis peer description
configure router bgp description
configure router bgp group description
configure router bgp group neighbor description
configure router dhcp local-dhcp-server description
configure router dhcp local-dhcp-server pool description
configure router dhcp6 local-dhcp-server description
configure router dhcp6 local-dhcp-server pool description
configure router flexible-algorithm-definitions flex-algo description
configure router interface dhcp description
configure router interface eth-cfm mep description
configure router interface vrrp description
configure router mcac if-policy description
configure router mcac policy bundle description
configure router mcac policy description
configure router network-domains network-domain description
configure router origin-validation rpki-session description
configure router pcp-server server description
configure router rip description
configure router rip group description
configure router rip group neighbor description
configure router ripng description
configure router ripng group description
configure router ripng group neighbor description
configure router route-next-hop-policy template description
configure router static-route-entry black-hole description
configure router static-route-entry indirect description
configure router static-route-entry next-hop description
configure service apipe description
configure service apipe endpoint description
configure service cpipe description
configure service cpipe endpoint description
configure service epipe description
configure service epipe endpoint description
configure service epipe spoke-sdp description
configure service fpipe description
configure service fpipe endpoint description
configure service ies aarp-interface spoke-sdp description
configure service ies description
configure service ies interface dhcp description
configure service ies interface ipv6 dhcp6-relay description
configure service ies interface sap eth-cfm mep description
configure service ies interface sap ip-tunnel description
configure service ies interface spoke-sdp description
configure service ies interface spoke-sdp eth-cfm mep description
configure service ies subscriber-interface dhcp description
configure service ies subscriber-interface group-interface dhcp description
configure service ies subscriber-interface group-interface ppp description
configure service ies subscriber-interface group-interface pppoe description
configure service ies subscriber-interface group-interface sap eth-cfm mep description
configure service ies subscriber-interface group-interface srrp description
configure service ies subscriber-interface ipv6 dhcp6 relay description
configure service ipipe description
configure service ipipe endpoint description
configure service ipipe spoke-sdp description
configure service sdp binding pw-port description
configure service vpls endpoint description
configure service vpls sap ipoe-session description
configure service vprn aarp-interface spoke-sdp description
configure service vprn bgp description
configure service vprn bgp group description
configure service vprn bgp group neighbor description
configure service vprn interface dhcp description
configure service vprn interface sap description
configure service vprn interface sap ip-tunnel description
configure service vprn interface sap ipsec-tunnel description
configure service vprn l2tp description
configure service vprn redundant-interface spoke-sdp description
configure service vprn rip description
configure service vprn rip group description
configure service vprn rip group neighbor description
configure service vprn ripng description
configure service vprn ripng group description
configure service vprn ripng group neighbor description
configure service vprn spoke-sdp description
configure service vprn static-route-entry black-hole description
configure service vprn static-route-entry grt description
configure service vprn static-route-entry indirect description
configure service vprn static-route-entry ipsec-tunnel description
configure service vprn static-route-entry next-hop description
configure service vprn subscriber-interface group-interface pppoe description
configure service vprn subscriber-interface ipv6 dhcp6 relay description
configure subscriber-mgmt radius-accounting-policy description
configure subscriber-mgmt group-interface-template description
configure subscriber-mgmt gtp peer-profile description
configure subscriber-mgmt local-user-db description
configure subscriber-mgmt pfcp-association description
configure subscriber-mgmt ppp-policy description
configure subscriber-mgmt rip-policy description
configure subscriber-mgmt sap-template description
configure system bluetooth device description
configure system cron schedule description
configure system grpc-tunnel destination-group description
configure system grpc-tunnel tunnel description
configure system management-interface remote-management manager description
configure system persistence ancp description
configure system persistence dhcp-server description
configure system persistence nat-port-forwarding description
configure system persistence python-policy-cache description
configure system persistence subscriber-mgmt description
configure system satellite eth-sat description
configure system satellite local-forward description
configure system satellite local-forward sap description
configure system satellite port-template description
configure system satellite tdm-sat description
configure system script-control script description
configure system software-repository description
Description 

This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.

The no form of this command removes the string from the configuration.

Default 

no description

Parameters 
short-description-string—
Specifies the description entered as a character string up to 80 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s

  1. configure service ies subscriber-interface group-interface sap eth-cfm mep description

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  1. configure port ethernet eth-cfm mep description
  2. configure service fpipe description
  3. configure service fpipe endpoint description
  4. configure qos match-list port-list description
  5. configure service ies interface spoke-sdp eth-cfm mep description
  6. configure eth-tunnel path eth-cfm mep description
  7. configure system satellite eth-sat description
  8. configure system software-repository description
  9. configure system satellite port-template description
  10. configure eth-tunnel path description
  11. configure service cpipe description
  12. configure system satellite local-forward sap description
  13. configure router interface eth-cfm mep description
  14. configure service ies interface sap eth-cfm mep description
  15. configure system satellite local-forward description
  16. configure service cpipe endpoint description

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  1. configure subscriber-mgmt ppp-policy description
  2. configure service ies subscriber-interface dhcp description
  3. configure router dhcp6 local-dhcp-server description
  4. configure router dhcp local-dhcp-server description
  5. configure subscriber-mgmt sap-template description
  6. configure service ies subscriber-interface ipv6 dhcp6 relay description
  7. configure system persistence dhcp-server description
  8. configure service vprn subscriber-interface ipv6 dhcp6 relay description
  9. configure subscriber-mgmt local-user-db description
  10. configure subscriber-mgmt rip-policy description
  11. configure service ies subscriber-interface group-interface srrp description
  12. configure router dhcp local-dhcp-server pool description
  13. configure subscriber-mgmt group-interface-template description
  14. configure router dhcp6 local-dhcp-server pool description
  15. configure subscriber-mgmt pfcp-association description
  16. configure service ies subscriber-interface group-interface pppoe description
  17. configure service vprn redundant-interface spoke-sdp description
  18. configure subscriber-mgmt radius-accounting-policy description
  19. configure service vpls sap ipoe-session description
  20. configure system persistence subscriber-mgmt description
  21. configure service ies subscriber-interface group-interface dhcp description
  22. configure service ies subscriber-interface group-interface ppp description
  23. configure service vprn subscriber-interface group-interface pppoe description

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, 7950 XRS, VSR

  1. configure qos post-policer-mapping description
  2. configure qos policer-control-policy description
  3. configure card fp ingress access queue-group description
  4. configure card fp ingress network queue-group description
  5. configure qos policer-control-policy tier arbiter description

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  1. configure service ies aarp-interface spoke-sdp description
  2. configure isa tunnel-group description
  3. configure isa tunnel-member-pool description
  4. configure service vprn interface sap ipsec-tunnel description
  5. configure ipsec ipsec-transport-mode-profile description
  6. configure system persistence nat-port-forwarding description
  7. configure ipsec ike-policy description
  8. configure ipsec client-db description
  9. configure ipsec tunnel-template description
  10. configure router pcp-server server description
  11. configure service vprn aarp-interface spoke-sdp description

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

  1. configure qos fp-resource-policy description

7450 ESS, 7750 SR-7/12/12e

  1. configure connection-profile description

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

  1. configure system satellite tdm-sat description

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e, 7950 XRS

  1. configure service apipe description
  2. configure service apipe endpoint description

7750 SR, 7750 SR-e, 7750 SR-s, VSR

  1. configure subscriber-mgmt gtp peer-profile description

7750 SR-1, 7750 SR-s

  1. configure qos hw-agg-shaper-scheduler-policy description
  2. configure system bluetooth device description

7750 SR-7/12/12e

  1. configure port ethernet egress hs-secondary-shaper description

All

  1. configure service ies interface dhcp description
  2. configure service vprn rip description
  3. configure router flexible-algorithm-definitions flex-algo description
  4. configure filter match-list ip-prefix-list description
  5. configure system grpc-tunnel tunnel description
  6. configure redundancy multi-chassis peer description
  7. configure service vprn spoke-sdp description
  8. configure qos match-list ip-prefix-list description
  9. configure router mcac if-policy description
  10. configure service ipipe description
  11. configure service vprn static-route-entry indirect description
  12. configure service ies description
  13. configure service vprn static-route-entry next-hop description
  14. configure service vpls endpoint description
  15. configure filter ip-filter description
  16. configure filter redirect-policy description
  17. configure service epipe description
  18. configure service vprn ripng group neighbor description
  19. configure service epipe endpoint description
  20. configure service ies interface ipv6 dhcp6-relay description
  21. configure router mcac policy bundle description
  22. configure port-xc pxc description
  23. configure router static-route-entry indirect description
  24. configure filter match-list protocol-list description
  25. configure service vprn bgp group description
  26. configure router bgp description
  27. configure qos match-list ipv6-prefix-list description
  28. configure router origin-validation rpki-session description
  29. configure fwd-path-ext fpe description
  30. configure port ethernet access egress vport description
  31. configure filter mac-filter description
  32. configure port ethernet access ingress queue-group description
  33. configure qos network-queue description
  34. configure router ripng group description
  35. configure service vprn rip group neighbor description
  36. configure filter match-list ipv6-prefix-list description
  37. configure service vprn bgp group neighbor description
  38. configure system management-interface remote-management manager description
  39. configure router mcac policy description
  40. configure filter mac-filter entry description
  41. configure port ethernet access egress queue-group description
  42. configure router rip description
  43. configure service vprn interface sap description
  44. configure router interface dhcp description
  45. configure router static-route-entry black-hole description
  46. configure router bgp group neighbor description
  47. configure service ies interface spoke-sdp description
  48. configure system persistence python-policy-cache description
  49. configure service vprn rip group description
  50. configure router bgp group description
  51. configure filter match-list port-list description
  52. configure service ipipe endpoint description
  53. configure service vprn static-route-entry grt description
  54. configure router ripng description
  55. configure filter ip-filter entry description
  56. configure service vprn interface dhcp description
  57. configure service vprn ripng group description
  58. configure filter ipv6-filter entry description
  59. configure lag link-map-profile description
  60. configure service epipe spoke-sdp description
  61. configure filter log description
  62. configure service vprn interface sap ip-tunnel description
  63. configure service vprn static-route-entry black-hole description
  64. configure filter redirect-policy destination description
  65. configure service ies interface sap ip-tunnel description
  66. configure router rip group neighbor description
  67. configure system grpc-tunnel destination-group description
  68. configure router ripng group neighbor description
  69. configure router rip group description
  70. configure filter ipv6-filter description
  71. configure system cron schedule description
  72. configure service vprn ripng description
  73. configure router route-next-hop-policy template description
  74. configure service vprn bgp description
  75. configure service vprn static-route-entry ipsec-tunnel description
  76. configure system script-control script description
  77. configure bmp station description
  78. configure system persistence ancp description
  79. configure filter dhcp-filter description
  80. configure router network-domains network-domain description
  81. configure service ipipe spoke-sdp description
  82. configure filter gre-tunnel-template description
  83. configure port ethernet network egress queue-group description
  84. configure router static-route-entry next-hop description

VSR

  1. configure filter ip-exception description
  2. configure filter ipv6-exception description
  3. configure filter ip-exception entry description
  4. configure filter ipv6-exception entry description

description

Syntax 
description short-description-string
no description
Context 
[Tree] (config>service>vpls>sap description)
[Tree] (config>service>vpls>wlan-gw description)
[Tree] (config>service>vprn description)
[Tree] (config>service>vprn>if>sap>ip-tunnel description)
[Tree] (config>service>mac-list description)
[Tree] (config>service>vpls description)
[Tree] (config>service>vpls>gsmp>group description)
[Tree] (config>service>vpls>gsmp>group>neighbor description)
[Tree] (config>service>vpls>igmp-snooping>mvr description)
[Tree] (config>service>vpls>split-horizon-group description)
[Tree] (config>service>vpls>mesh-sdp description)
[Tree] (config>service>vpls>spoke-sdp description)
[Tree] (config>service>vpls>sap>dhcp description)
[Tree] (config>service>vpls>mld-snooping>mvr description)
[Tree] (config>subscr-mgmt>accu-stats-policy description)
[Tree] (config>subscr-mgmt>authentication-policy description)
[Tree] (config>subscr-mgmt>host-tracking description)
[Tree] (config>subscr-mgmt>pim-policy description)
[Tree] (config>subscr-mgmt>sla-profile description)
[Tree] (config>subscr-mgmt>sub-ident-pol description)
[Tree] (config>subscr-mgmt>sub-profile description)
[Tree] (config>subscr-mgmt>mld-policy description)
[Tree] (config>service>vprn>sub-if>grp-if>sap description)
[Tree] (config>service>vprn>sub-if>grp-if>srrp description)
[Tree] (config>service>vprn>sub-if>grp-if>ipoe-session description)
[Tree] (config>service>vprn>sub-if>grp-if>arp-host description)
[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt description)
[Tree] (config>service>vprn>sub-if>grp-if>wpp description)
[Tree] (config>service>vprn>gsmp>group description)
[Tree] (config>service>vprn>gsmp>group>neighbor description)
[Tree] (config>subscr-mgmt>cat-map description)
[Tree] (config>subscr-mgmt>ipoe-session-policy description)
[Tree] (config>subscr-mgmt>diam-appl-plcy description)
[Tree] (config>subscr-mgmt>credit-cntrl-plcy description)
[Tree] (config>subscr-mgmt>host-lockout-plcy description)
[Tree] (config>subscr-mgmt>sub-mcac-policy description)
[Tree] (config>aaa>route-downloader description)
[Tree] (config>aaa>diam-peer-plcy description)
[Tree] (config>aaa>wpp>portal-groups>portal-group description)
[Tree] (config>port>ethernet>access>egress description)
[Tree] (config>subscr-mgmt>cat-map>category description)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ip>entry description)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ipv6>entry description)
[Tree] (config>call-trace>trace-profile description)
[Tree] (config>aaa>diam>node description)
[Tree] (config>aaa>l2tp-acct-plcy description)
[Tree] (config>mcast-mgmt>bandwidth-policy description)
[Tree] (config>mcast-mgmt>multicast-info-policy description)
[Tree] (config>mcast-mgmt>mcast-rprt-dest description)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle description)
[Tree] (config>card>fp>ingress>mcast-mgmt description)
[Tree] (config>python>py-policy description)
[Tree] (config>python>python-script description)
[Tree] (config>aaa>radius-script-policy description)
[Tree] (config>service>dynsvc>policy description)
[Tree] (config>service>dynsvc>ladb description)
[Tree] (config>service>dynsvc>ladb>user description)
[Tree] (config>subscr-mgmt>isa-svc-chain>evpn description)
[Tree] (config>subscr-mgmt>isa-svc-chain>vas-filter description)
[Tree] (config>aaa>acct-on-off-grp description)
[Tree] (config>aaa>radius-srv-plcy description)
[Tree] (config>isa>wlan-gw-group description)
[Tree] (config>router>radius-server>server description)
[Tree] (config>router>radius-proxy>server description)
[Tree] (config>service>vprn>radius-proxy>server description)
[Tree] (config>service>vprn>radius-server>server description)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw description)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw description)
[Tree] (config>service>ies>sub-if>grp-if>sap-parameters description)
[Tree] (config>service>vprn>sub-if>grp-if>sap-parameters description)
[Tree] (config>subscr-mgmt>isa-filter description)
[Tree] (config>subscr-mgmt>isa-filter>ipv6>entry description)
[Tree] (config>subscr-mgmt>isa-filter>entry description)
[Tree] (config>subscr-mgmt>isa-policer description)
[Tree] (config>app-assure>aarp description)
[Tree] (config>app-assure>group description)
[Tree] (config>app-assure>group>statistics>aa-sub description)
[Tree] (config>app-assure>group>cflowd>collector description)
[Tree] (config>app-assure>group>cflowd>collector description)
[Tree] (config>app-assure>group>cflowd>direct-export>collector description)
[Tree] (config>app-assure>group>certificate-profile description)
[Tree] (config>app-assure>group>dns-ip-cache description)
[Tree] (config>app-assure>group>event-log>syslog description)
[Tree] (config>app-assure>group>gtp>gtp-filter description)
[Tree] (config>app-assure>group>http-enrich description)
[Tree] (config>app-assure>group>http-error-redirect description)
[Tree] (config>app-assure>group>http-notification description)
[Tree] (config>app-assure>group>http-redirect description)
[Tree] (config>app-assure>group>ip-prefix-list description)
[Tree] (config>app-assure>group>policer description)
[Tree] (config>app-assure>group>policer>tod-override description)
[Tree] (config>app-assure>group>policy>app-filter>entry description)
[Tree] (config>app-assure>group>policy>app-group description)
[Tree] (config>app-assure>group>policy>application description)
[Tree] (config>app-assure>group>policy>app-profile description)
[Tree] (config>app-assure>group>policy>app-qos-policy>entry description)
[Tree] (config>app-assure>group>policy>aqp>entry>action>url-filter description)
[Tree] (config>app-assure>group>policy>charging-group description)
[Tree] (config>app-assure>group>policy>custom-protocol description)
[Tree] (config>app-assure>group>policy>transit-ip-policy description)
[Tree] (config>app-assure>group>port-list description)
[Tree] (config>app-assure>group>sctp-filter description)
[Tree] (config>app-assure>group>session-filter description)
[Tree] (config>app-assure>group>session-filter>entry description)
[Tree] (config>app-assure>group>tcp-validate description)
[Tree] (config>app-assure>group>transit-prefix-policy description)
[Tree] (config>app-assure>group>url-filter description)
[Tree] (config>app-assure>group>url-filter>icap>server description)
[Tree] (config>app-assure>group>url-filter>web-service>profile description)
[Tree] (config>app-assure>group>url-list description)
[Tree] (config>app-assure>protocol description)
[Tree] (config>app-assure>rad-acct-plcy description)
[Tree] (config>isa description)
[Tree] (config>isa>aa-group description)
[Tree] (config>system>persistence>application-assurance description)
[Tree] (config>aaa>isa-radius-plcy description)
[Tree] (config>isa>nat-group description)
[Tree] (config>router>firewall>domain>prefix description)
[Tree] (config>router>nat>inside>subscriber-id description)
[Tree] (config>router>nat>outside>pool description)
[Tree] (config>router>nat>outside>pool>address-range description)
[Tree] (config>router>vrgw>lanext description)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>vrgw>lanext description)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>vrgw>lanext>network description)
[Tree] (config>service>ipfix>ipfix-export-policy description)
[Tree] (config>service>nat>firewall-policy description)
[Tree] (config>service>nat>map-domain>mapping-rule description)
[Tree] (config>service>nat>nat-classifier description)
[Tree] (config>service>nat>nat-classifier>entry description)
[Tree] (config>service>nat>nat-policy description)
[Tree] (config>service>nat>pcp-server-policy description)
[Tree] (config>service>nat>up-nat-policy description)
[Tree] (config>service>upnp>upnp-policy description)
[Tree] (config>service>vprn>firewall>domain>prefix description)
[Tree] (config>service>vprn>nat>outside>pool>address-range description)
[Tree] (config>service>vprn>nat>outside>pool description)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>vrgw>lanext description)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>vrgw>lanext>network description)
[Tree] (config>subscr-mgmt>vrgw>brg>brg-profile description)
[Tree] (config>subscr-mgmt>pppoe-client-policy description)
[Tree] (config>subscr-mgmt>vrgw>brg>brg-profile description)
[Tree] (config>macsec>connectivity-association description)
[Tree] (config>pw-port description)
[Tree] (config>esa description)
[Tree] (config>esa>vm description)
[Tree] (config>mirror>mirror-dest description)
[Tree] (config>mirror>mirror-dest>endpoint description)
[Tree] (config>li>log>log-id description)
[Tree] (config>li>li-filter>li-mac-filter description)
[Tree] (config>li>li-filter>li-mac-filter>entry description)
[Tree] (config>li>li-filter>li-ip-filter description)
[Tree] (config>li>li-filter>li-ip-filter>entry description)
[Tree] (config>li>li-filter>li-ipv6-filter description)
[Tree] (config>li>li-filter>li-ipv6-filter>entry description)
[Tree] (config>li>li-filter-block-reservation>li-reserved-block description)
[Tree] (config>li>x-interfaces>lics>lic description)
[Tree] (config>service>vprn>ip-mirror-interface>spoke-sdp description)
[Tree] (config>oam-pm>bin-group description)
[Tree] (config>oam-pm>session description)
[Tree] (config>oam-pm>streaming>delay-template description)
[Tree] (config>saa>test description)
[Tree] (config>test-oam>twamp>server>prefix description)
[Tree] (config>router>twamp-light>reflector>prefix description)
[Tree] (config>service>vprn>twamp-light>reflector>prefix description)
[Tree] (config>router>twamp-light>reflector description)
[Tree] (config>service>vprn>twamp-light>reflector description)
[Tree] (config>qos>sap-egress description)
[Tree] (config>qos>sap-egress>ip-criteria>entry description)
[Tree] (config>qos>sap-egress>ipv6-criteria>entry description)
[Tree] (config>qos>sap-egress>policer description)
[Tree] (config>qos>sap-ingress description)
[Tree] (config>qos>sap-ingress>ip-criteria>entry description)
[Tree] (config>qos>sap-ingress>ipv6-criteria>entry description)
[Tree] (config>qos>sap-ingress>mac-criteria>entry description)
[Tree] (config>qos>sap-ingress>policer description)
[Tree] (config>qos>mc-fr-profile-egress description)
[Tree] (config>qos>mc-fr-profile-ingress description)
[Tree] (config>qos>network description)
[Tree] (config>qos>network>egress>ip-criteria>entry description)
[Tree] (config>qos>network>egress>ipv6-criteria>entry description)
[Tree] (config>qos>network>ingress>ip-criteria>entry description)
[Tree] (config>qos>network>ingress>ipv6-criteria>entry description)
[Tree] (cfg>qos>qgrps>egr>qgrp description)
[Tree] (cfg>qos>qgrps>ing>qgrp description)
[Tree] (cfg>qos>qgrps>egr>qgrp>policer description)
[Tree] (cfg>qos>qgrps>ing>qgrp>policer description)
[Tree] (config>cflowd>collector description)
[Tree] (config>vrrp>policy description)
[Tree] (config>router>policy-options>policy-statement description)
[Tree] (config>router>policy-options>policy-statement>entry description)
[Tree] (config>test-oam>link-meas>template description)
[Tree] (config>subscr-mgmt>steering-profile description)
Full Contexts 
configure qos queue-group-templates egress queue-group description
configure qos queue-group-templates egress queue-group policer description
configure qos queue-group-templates ingress queue-group description
configure qos queue-group-templates ingress queue-group policer description
configure aaa acct-on-off-group description
configure aaa diameter node description
configure aaa diameter-peer-policy description
configure aaa isa-radius-policy description
configure aaa l2tp-accounting-policy description
configure aaa radius-script-policy description
configure aaa radius-server-policy description
configure aaa route-downloader description
configure aaa wpp portal-groups portal-group description
configure application-assurance aarp description
configure application-assurance group certificate-profile description
configure application-assurance group cflowd collector description
configure application-assurance group cflowd direct-export collector description
configure application-assurance group description
configure application-assurance group dns-ip-cache description
configure application-assurance group event-log syslog description
configure application-assurance group gtp gtp-filter description
configure application-assurance group http-enrich description
configure application-assurance group http-error-redirect description
configure application-assurance group http-notification description
configure application-assurance group http-redirect description
configure application-assurance group ip-prefix-list description
configure application-assurance group policer description
configure application-assurance group policer tod-override description
configure application-assurance group policy app-filter entry description
configure application-assurance group policy app-group description
configure application-assurance group policy app-profile description
configure application-assurance group policy app-qos-policy entry description
configure application-assurance group policy application description
configure application-assurance group policy app-qos-policy entry action url-filter description
configure application-assurance group policy charging-group description
configure application-assurance group policy custom-protocol description
configure application-assurance group policy transit-ip-policy description
configure application-assurance group port-list description
configure application-assurance group sctp-filter description
configure application-assurance group session-filter description
configure application-assurance group session-filter entry description
configure application-assurance group statistics aa-sub description
configure application-assurance group tcp-validate description
configure application-assurance group transit-prefix-policy description
configure application-assurance group url-filter description
configure application-assurance group url-filter icap server description
configure application-assurance group url-filter web-service profile description
configure application-assurance group url-list description
configure application-assurance protocol description
configure application-assurance radius-accounting-policy description
configure call-trace trace-profile description
configure card fp ingress mcast-management description
configure cflowd collector description
configure esa description
configure esa vm description
configure isa aa-group description
configure isa description
configure isa nat-group description
configure isa wlan-gw-group description
configure li li-filter li-ip-filter description
configure li li-filter li-ip-filter entry description
configure li li-filter li-ipv6-filter description
configure li li-filter li-ipv6-filter entry description
configure li li-filter li-mac-filter description
configure li li-filter li-mac-filter entry description
configure li li-filter-block-reservation li-reserved-block description
configure li log log-id description
configure li x-interfaces lics lic description
configure macsec connectivity-association description
configure mcast-management bandwidth-policy description
configure mcast-management multicast-info-policy bundle description
configure mcast-management mcast-reporting-dest description
configure mcast-management multicast-info-policy description
configure mirror mirror-dest description
configure mirror mirror-dest endpoint description
configure oam-pm bin-group description
configure oam-pm session description
configure oam-pm streaming delay-template description
configure port ethernet access egress description
configure pw-port description
configure python python-policy description
configure python python-script description
configure qos mc-fr-profile-egress description
configure qos mc-fr-profile-ingress description
configure qos network description
configure qos network egress ip-criteria entry description
configure qos network egress ipv6-criteria entry description
configure qos network ingress ip-criteria entry description
configure qos network ingress ipv6-criteria entry description
configure qos sap-egress description
configure qos sap-egress ip-criteria entry description
configure qos sap-egress ipv6-criteria entry description
configure qos sap-egress policer description
configure qos sap-ingress description
configure qos sap-ingress ip-criteria entry description
configure qos sap-ingress ipv6-criteria entry description
configure qos sap-ingress mac-criteria entry description
configure qos sap-ingress policer description
configure router firewall domain prefix description
configure router nat inside subscriber-id description
configure router nat outside pool address-range description
configure router nat outside pool description
configure router policy-options policy-statement description
configure router policy-options policy-statement entry description
configure router radius-proxy server description
configure router radius-server server description
configure router twamp-light reflector description
configure router twamp-light reflector prefix description
configure router vrgw lanext description
configure saa test description
configure service dynamic-services local-auth-db description
configure service dynamic-services local-auth-db user-name description
configure service dynamic-services dynamic-services-policy description
configure service ies subscriber-interface group-interface sap-parameters description
configure service ies subscriber-interface group-interface wlan-gw description
configure service ies subscriber-interface group-interface wlan-gw ranges range vrgw lanext description
configure service ies subscriber-interface group-interface wlan-gw ranges range vrgw lanext network description
configure service ipfix ipfix-export-policy description
configure service mac-list description
configure service nat firewall-policy description
configure service nat map-domain mapping-rule description
configure service nat nat-classifier description
configure service nat nat-classifier entry description
configure service nat nat-policy description
configure service nat pcp-server-policy description
configure service nat up-nat-policy description
configure service upnp upnp-policy description
configure service vpls description
configure service vpls gsmp group description
configure service vpls gsmp group neighbor description
configure service vpls igmp-snooping mvr description
configure service vpls mesh-sdp description
configure service vpls mld-snooping mvr description
configure service vpls sap description
configure service vpls sap dhcp description
configure service vpls split-horizon-group description
configure service vpls spoke-sdp description
configure service vpls wlan-gw description
configure service vprn description
configure service vprn firewall domain prefix description
configure service vprn gsmp group description
configure service vprn gsmp group neighbor description
configure service vprn interface sap ip-tunnel description
configure service vprn ip-mirror-interface spoke-sdp description
configure service vprn nat outside pool address-range description
configure service vprn nat outside pool description
configure service vprn radius-proxy server description
configure service vprn radius-server server description
configure service vprn subscriber-interface group-interface arp-host description
configure service vprn subscriber-interface group-interface ipoe-session description
configure service vprn subscriber-interface group-interface sap description
configure service vprn subscriber-interface group-interface sap sub-sla-mgmt description
configure service vprn subscriber-interface group-interface sap-parameters description
configure service vprn subscriber-interface group-interface srrp description
configure service vprn subscriber-interface group-interface wlan-gw description
configure service vprn subscriber-interface group-interface wlan-gw ranges range vrgw lanext description
configure service vprn subscriber-interface group-interface wlan-gw ranges range vrgw lanext network description
configure service vprn subscriber-interface group-interface wpp description
configure service vprn twamp-light reflector description
configure service vprn twamp-light reflector prefix description
configure subscriber-mgmt accu-stats-policy description
configure subscriber-mgmt authentication-policy description
configure subscriber-mgmt category-map category description
configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ip-filter-entries entry description
configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ipv6-filter-entries entry description
configure subscriber-mgmt category-map description
configure subscriber-mgmt credit-control-policy description
configure subscriber-mgmt diameter-application-policy description
configure subscriber-mgmt host-lockout-policy description
configure subscriber-mgmt host-tracking description
configure subscriber-mgmt ipoe-session-policy description
configure subscriber-mgmt isa-filter description
configure subscriber-mgmt isa-filter entry description
configure subscriber-mgmt isa-filter ipv6 entry description
configure subscriber-mgmt isa-policer description
configure subscriber-mgmt isa-service-chaining evpn description
configure subscriber-mgmt isa-service-chaining vas-filter description
configure subscriber-mgmt mld-policy description
configure subscriber-mgmt pim-policy description
configure subscriber-mgmt pppoe-client-policy description
configure subscriber-mgmt sla-profile description
configure subscriber-mgmt steering-profile description
configure subscriber-mgmt sub-ident-policy description
configure subscriber-mgmt sub-mcac-policy description
configure subscriber-mgmt sub-profile description
configure subscriber-mgmt vrgw brg brg-profile description
configure system persistence application-assurance description
configure test-oam link-measurement measurement-template description
configure test-oam twamp server prefix description
configure vrrp policy description
Description 

This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.

The no form of this command removes the string from the configuration.

Parameters 
short-description-string—
Specifies the description character string. Allowed values are any string, up to 80 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s

  1. configure subscriber-mgmt sub-mcac-policy description

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  1. configure oam-pm streaming delay-template description
  2. configure qos mc-fr-profile-ingress description
  3. configure test-oam link-measurement measurement-template description
  4. configure service vprn twamp-light reflector description
  5. configure qos mc-fr-profile-egress description
  6. configure test-oam twamp server prefix description
  7. configure li x-interfaces lics lic description
  8. configure router twamp-light reflector prefix description
  9. configure service vprn twamp-light reflector prefix description
  10. configure router twamp-light reflector description

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  1. configure call-trace trace-profile description
  2. configure service vprn subscriber-interface group-interface ipoe-session description
  3. configure aaa l2tp-accounting-policy description
  4. configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ipv6-filter-entries entry description
  5. configure subscriber-mgmt credit-control-policy description
  6. configure subscriber-mgmt isa-policer description
  7. configure subscriber-mgmt category-map category description
  8. configure subscriber-mgmt sub-ident-policy description
  9. configure subscriber-mgmt diameter-application-policy description
  10. configure aaa radius-script-policy description
  11. configure service vprn radius-proxy server description
  12. configure subscriber-mgmt host-lockout-policy description
  13. configure subscriber-mgmt mld-policy description
  14. configure service vprn subscriber-interface group-interface sap description
  15. configure service dynamic-services local-auth-db user-name description
  16. configure subscriber-mgmt category-map description
  17. configure subscriber-mgmt steering-profile description
  18. configure service dynamic-services local-auth-db description
  19. configure aaa route-downloader description
  20. configure aaa wpp portal-groups portal-group description
  21. configure subscriber-mgmt authentication-policy description
  22. configure subscriber-mgmt accu-stats-policy description
  23. configure aaa acct-on-off-group description
  24. configure subscriber-mgmt isa-filter entry description
  25. configure aaa radius-server-policy description
  26. configure service vprn subscriber-interface group-interface srrp description
  27. configure aaa diameter-peer-policy description
  28. configure subscriber-mgmt pim-policy description
  29. configure subscriber-mgmt isa-filter description
  30. configure router radius-proxy server description
  31. configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ip-filter-entries entry description
  32. configure aaa diameter node description
  33. configure service vprn radius-server server description
  34. configure subscriber-mgmt isa-filter ipv6 entry description
  35. configure subscriber-mgmt sla-profile description
  36. configure subscriber-mgmt ipoe-session-policy description
  37. configure subscriber-mgmt vrgw brg brg-profile description
  38. configure subscriber-mgmt sub-profile description
  39. configure subscriber-mgmt pppoe-client-policy description
  40. configure router radius-server server description
  41. configure service dynamic-services dynamic-services-policy description

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s

  1. configure esa vm description
  2. configure esa description

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, 7950 XRS, VSR

  1. configure qos sap-egress policer description
  2. configure qos queue-group-templates egress queue-group policer description
  3. configure qos queue-group-templates ingress queue-group policer description
  4. configure qos sap-ingress policer description

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  1. configure service vprn nat outside pool address-range description
  2. configure application-assurance group certificate-profile description
  3. configure subscriber-mgmt isa-service-chaining evpn description
  4. configure application-assurance group gtp gtp-filter description
  5. configure subscriber-mgmt isa-service-chaining vas-filter description
  6. configure application-assurance group session-filter entry description
  7. configure application-assurance group url-list description
  8. configure application-assurance group port-list description
  9. configure application-assurance group cflowd direct-export collector description
  10. configure application-assurance group policy app-qos-policy entry description
  11. configure application-assurance group cflowd collector description
  12. configure application-assurance group url-filter icap server description
  13. configure aaa isa-radius-policy description
  14. configure application-assurance aarp description
  15. configure application-assurance group policy custom-protocol description
  16. configure application-assurance group http-redirect description
  17. configure application-assurance group http-enrich description
  18. configure service nat nat-classifier entry description
  19. configure application-assurance group event-log syslog description
  20. configure application-assurance group policy application description
  21. configure application-assurance group ip-prefix-list description
  22. configure service nat nat-classifier description
  23. configure router nat outside pool description
  24. configure application-assurance group policy app-profile description
  25. configure application-assurance group http-notification description
  26. configure application-assurance radius-accounting-policy description
  27. configure application-assurance group dns-ip-cache description
  28. configure service nat pcp-server-policy description
  29. configure application-assurance group sctp-filter description
  30. configure application-assurance group http-error-redirect description
  31. configure service upnp upnp-policy description
  32. configure system persistence application-assurance description
  33. configure isa nat-group description
  34. configure application-assurance group policy app-filter entry description
  35. configure application-assurance group policer tod-override description
  36. configure service nat nat-policy description
  37. configure application-assurance group policer description
  38. configure service nat up-nat-policy description
  39. configure service vprn nat outside pool description
  40. configure application-assurance group url-filter description
  41. configure router nat outside pool address-range description
  42. configure application-assurance group url-filter web-service profile description
  43. configure application-assurance group tcp-validate description
  44. configure application-assurance group session-filter description
  45. configure application-assurance group policy app-group description
  46. configure application-assurance group policy charging-group description
  47. configure application-assurance group description
  48. configure application-assurance group transit-prefix-policy description

7450 ESS, 7750 SR-7/12/12e, 7750 SR-s, 7950 XRS, VSR

  1. configure mcast-management bandwidth-policy description

7750 SR, 7750 SR-e, 7750 SR-s, VSR

  1. configure service nat firewall-policy description
  2. configure isa wlan-gw-group description
  3. configure service ies subscriber-interface group-interface sap-parameters description
  4. configure service vprn firewall domain prefix description
  5. configure service vprn subscriber-interface group-interface sap-parameters description
  6. configure service vpls wlan-gw description
  7. configure router firewall domain prefix description

All

  1. configure service vpls igmp-snooping mvr description
  2. configure li li-filter li-ipv6-filter description
  3. configure li li-filter-block-reservation li-reserved-block description
  4. configure qos network egress ip-criteria entry description
  5. configure qos sap-ingress description
  6. configure router policy-options policy-statement entry description
  7. configure service vprn interface sap ip-tunnel description
  8. configure oam-pm session description
  9. configure python python-policy description
  10. configure mirror mirror-dest endpoint description
  11. configure router policy-options policy-statement description
  12. configure cflowd collector description
  13. configure qos sap-ingress mac-criteria entry description
  14. configure qos network description
  15. configure li li-filter li-ipv6-filter entry description
  16. configure qos queue-group-templates egress queue-group description
  17. configure mirror mirror-dest description
  18. configure service vpls sap description
  19. configure li li-filter li-ip-filter description
  20. configure li log log-id description
  21. configure li li-filter li-ip-filter entry description
  22. configure service vpls gsmp group neighbor description
  23. configure saa test description
  24. configure qos sap-ingress ipv6-criteria entry description
  25. configure service vpls spoke-sdp description
  26. configure service vpls mld-snooping mvr description
  27. configure service vprn ip-mirror-interface spoke-sdp description
  28. configure macsec connectivity-association description
  29. configure service vprn gsmp group neighbor description
  30. configure pw-port description
  31. configure service vpls sap dhcp description
  32. configure qos sap-egress description
  33. configure service vpls gsmp group description
  34. configure service ipfix ipfix-export-policy description
  35. configure service vprn description
  36. configure service vpls mesh-sdp description
  37. configure qos network ingress ip-criteria entry description
  38. configure service vpls description
  39. configure qos network egress ipv6-criteria entry description
  40. configure mcast-management mcast-reporting-dest description
  41. configure service mac-list description
  42. configure service vprn gsmp group description
  43. configure mcast-management multicast-info-policy bundle description
  44. configure qos network ingress ipv6-criteria entry description
  45. configure li li-filter li-mac-filter entry description
  46. configure vrrp policy description
  47. configure oam-pm bin-group description
  48. configure qos sap-ingress ip-criteria entry description
  49. configure qos sap-egress ipv6-criteria entry description
  50. configure qos sap-egress ip-criteria entry description
  51. configure mcast-management multicast-info-policy description
  52. configure python python-script description
  53. configure li li-filter li-mac-filter description
  54. configure service vpls split-horizon-group description
  55. configure qos queue-group-templates ingress queue-group description

VSR

  1. configure service nat map-domain mapping-rule description

description

Syntax 
description short-description-string
no description
Context 
[Tree] (config>connection-profile-vlan description)
[Tree] (config>service>cust description)
[Tree] (config>service>cust>multi-service-site description)
[Tree] (config>service>mrp>mrp-policy description)
[Tree] (config>service>mrp>mrp-policy>entry description)
[Tree] (config>service>pw-template description)
[Tree] (config>service>pw-template>split-horizon-group description)
[Tree] (config>service>sdp description)
[Tree] (config>eth-ring description)
[Tree] (config>eth-ring>path description)
[Tree] (config>eth-ring>path>eth-cfm>mep description)
[Tree] (config>grp-encryp>encryp-keygrp description)
[Tree] (config>isa>video-group description)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>video description)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>video description)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>video>analyzer description)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>source-override>video description)
[Tree] (config>service>ies>video-interface description)
[Tree] (config>service>vpls>video-interface description)
[Tree] (config>service>vprn>video-interface description)
[Tree] (config>service>ies>video-interface>channel description)
[Tree] (config>service>vprn>video-interface>channel description)
[Tree] (config>qos>adv-config-policy description)
[Tree] (config>qos>atm-td-profile description)
[Tree] (config>qos>hs-attachment-policy description)
[Tree] (config>qos>hs-pool-policy description)
[Tree] (config>qos>hs-port-pool-policy description)
[Tree] (config>qos>hs-scheduler-policy description)
[Tree] (config>qos>mlppp-profile-egress description)
[Tree] (config>qos>mlppp-profile-ingress description)
[Tree] (config>qos>port-scheduler-policy description)
[Tree] (config>qos>scheduler-policy description)
[Tree] (config>qos>scheduler-policy>tier>scheduler description)
[Tree] (config>qos>shared-queue description)
[Tree] (config>qos>slope-policy description)
[Tree] (config>log>event-handling>handler>action-list>entry description)
[Tree] (config>log>filter description)
[Tree] (config>log>filter>entry description)
[Tree] (config>log>log-id description)
[Tree] (config>log>accounting-policy description)
[Tree] (config>log>event-handling>handler description)
[Tree] (config>log>event-trigger>event description)
[Tree] (config>log>event-trigger>event>trigger-entry description)
[Tree] (config>log>file-id description)
[Tree] (config>log>syslog description)
[Tree] (config>log>snmp-trap-group description)
[Tree] (cfg>sys>sec>cpm>mac-filter>entry description)
[Tree] (config>system>security>mgmt-access-filter>ip-filter>entry description)
[Tree] (config>system>security>mgmt-access-filter>ipv6-filter>entry description)
[Tree] (config>sys>security>cpm-filter>ip-filter>entry description)
[Tree] (config>sys>security>cpm-filter>ipv6-filter>entry description)
[Tree] (config>system>security>dist-cpu-protection>policy description)
[Tree] (config>system>security>keychain description)
[Tree] (config>system>security>keychain>direction>bi>entry description)
[Tree] (config>system>security>keychain>direction>uni>receive>entry description)
[Tree] (config>system>security>keychain>direction>uni>send>entry description)
[Tree] (config>system>security>pki>ca-profile description)
[Tree] (config>sys>security>cpu-protection>policy description)
[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry description)
[Tree] (config>system>security>user>public-keys>ecdsa>ecdsa-key description)
[Tree] (config>system>security>user>public-keys>rsa>rsa-key description)
[Tree] (config>system>telemetry>destination-group description)
[Tree] (config>system>telemetry>persistent-subscriptions>subscription description)
[Tree] (config>system>telemetry>sensor-groups>sensor-group description)
Full Contexts 
configure system security cpm-filter mac-filter entry description
configure connection-profile-vlan description
configure eth-ring description
configure eth-ring path description
configure eth-ring path eth-cfm mep description
configure group-encryption encryption-keygroup description
configure isa video-group description
configure log accounting-policy description
configure log event-handling handler action-list entry description
configure log event-handling handler description
configure log event-trigger event description
configure log event-trigger event trigger-entry description
configure log file-id description
configure log filter description
configure log filter entry description
configure log log-id description
configure log snmp-trap-group description
configure log syslog description
configure mcast-management multicast-info-policy bundle channel source-override video description
configure mcast-management multicast-info-policy bundle channel video analyzer description
configure mcast-management multicast-info-policy bundle channel video description
configure mcast-management multicast-info-policy bundle video description
configure qos adv-config-policy description
configure qos atm-td-profile description
configure qos hs-attachment-policy description
configure qos hs-pool-policy description
configure qos hs-port-pool-policy description
configure qos hs-scheduler-policy description
configure qos mlppp-profile-egress description
configure qos mlppp-profile-ingress description
configure qos port-scheduler-policy description
configure qos scheduler-policy description
configure qos scheduler-policy tier scheduler description
configure qos shared-queue description
configure qos slope-policy description
configure service customer description
configure service customer multi-service-site description
configure service ies video-interface channel description
configure service ies video-interface description
configure service mrp mrp-policy description
configure service mrp mrp-policy entry description
configure service pw-template description
configure service pw-template split-horizon-group description
configure service sdp description
configure service vpls video-interface description
configure service vprn video-interface channel description
configure service vprn video-interface description
configure system security cpm-filter ip-filter entry description
configure system security cpm-filter ipv6-filter entry description
configure system security cpu-protection policy description
configure system security dist-cpu-protection policy description
configure system security keychain description
configure system security keychain direction bi entry description
configure system security keychain direction uni receive entry description
configure system security keychain direction uni send entry description
configure system security management-access-filter ip-filter entry description
configure system security management-access-filter ipv6-filter entry description
configure system security management-access-filter mac-filter entry description
configure system security pki ca-profile description
configure system security user public-keys ecdsa ecdsa-key description
configure system security user public-keys rsa rsa-key description
configure system telemetry destination-group description
configure system telemetry persistent-subscriptions subscription description
configure system telemetry sensor-groups sensor-group description
Description 

This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.

The no form of this command removes the string from the configuration.

Default 

No description is associated with the configuration context.

Parameters 
short-description-string—
Specifies the description character string. Allowed values are any string, up to 80 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  1. configure qos mlppp-profile-egress description
  2. configure eth-ring path description
  3. configure eth-ring path eth-cfm mep description
  4. configure qos mlppp-profile-ingress description
  5. configure system security cpm-filter ip-filter entry description
  6. configure system security cpm-filter mac-filter entry description
  7. configure eth-ring description
  8. configure system security cpm-filter ipv6-filter entry description

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  1. configure group-encryption encryption-keygroup description

7450 ESS, 7750 SR-7/12/12e, 7750 SR-14s

  1. configure service vprn video-interface channel description
  2. configure service vprn video-interface description
  3. configure isa video-group description
  4. configure mcast-management multicast-info-policy bundle channel video analyzer description
  5. configure service ies video-interface description
  6. configure service vpls video-interface description
  7. configure service ies video-interface channel description

7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS

  1. configure system security cpu-protection policy description

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e, 7950 XRS

  1. configure qos atm-td-profile description

7750 SR-7/12/12e

  1. configure qos hs-port-pool-policy description
  2. configure qos hs-attachment-policy description
  3. configure qos hs-scheduler-policy description
  4. configure qos hs-pool-policy description

All

  1. configure system security dist-cpu-protection policy description
  2. configure connection-profile-vlan description
  3. configure service customer multi-service-site description
  4. configure log event-trigger event description
  5. configure service mrp mrp-policy description
  6. configure service mrp mrp-policy entry description
  7. configure qos port-scheduler-policy description
  8. configure qos shared-queue description
  9. configure system security management-access-filter mac-filter entry description
  10. configure qos scheduler-policy tier scheduler description
  11. configure system telemetry persistent-subscriptions subscription description
  12. configure system security pki ca-profile description
  13. configure log syslog description
  14. configure log log-id description
  15. configure system security user public-keys rsa rsa-key description
  16. configure log event-handling handler description
  17. configure qos slope-policy description
  18. configure service customer description
  19. configure log accounting-policy description
  20. configure system security management-access-filter ip-filter entry description
  21. configure log event-trigger event trigger-entry description
  22. configure system telemetry sensor-groups sensor-group description
  23. configure system security keychain description
  24. configure system telemetry destination-group description
  25. configure log event-handling handler action-list entry description
  26. configure system security management-access-filter ipv6-filter entry description
  27. configure service sdp description
  28. configure log filter entry description
  29. configure log filter description
  30. configure log snmp-trap-group description
  31. configure service pw-template split-horizon-group description
  32. configure qos adv-config-policy description
  33. configure system security user public-keys ecdsa ecdsa-key description
  34. configure log file-id description
  35. configure qos scheduler-policy description

description

Syntax 
description medium-description-string
no description
Context 
[Tree] (config>service>ies>interface>sap description)
[Tree] (config>service>ies>sub-if>grp-if>sap description)
[Tree] (config>port>sonet-sdh>path description)
[Tree] (config>port>tdm>ds1>channel-group description)
[Tree] (config>port>tdm>ds3 description)
[Tree] (config>port>tdm>e1>channel-group description)
[Tree] (config>port>tdm>e3 description)
[Tree] (config>service>apipe>sap description)
[Tree] (config>service>cpipe>sap description)
[Tree] (config>service>epipe>sap description)
[Tree] (config>service>fpipe>sap description)
[Tree] (config>service>ipipe>sap description)
[Tree] (config>service>ies>aarp-interface description)
[Tree] (config>gmpls-tun-grp description)
Full Contexts 
configure gmpls-tun-grp description
configure port sonet-sdh path description
configure port tdm ds1 channel-group description
configure port tdm ds3 description
configure port tdm e1 channel-group description
configure port tdm e3 description
configure service apipe sap description
configure service cpipe sap description
configure service epipe sap description
configure service fpipe sap description
configure service ies aarp-interface description
configure service ies interface sap description
configure service ies subscriber-interface group-interface sap description
configure service ipipe sap description
Description 

This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.

The no form of this command removes the string from the configuration.

Default 

no description

Parameters 
medium-description-string—
Specifies the description character string. Allowed values are any string, up to 160 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  1. configure service fpipe sap description
  2. configure service cpipe sap description
  3. configure port sonet-sdh path description

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  1. configure service ies subscriber-interface group-interface sap description

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  1. configure service ies aarp-interface description

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

  1. configure port tdm ds3 description
  2. configure port tdm e1 channel-group description
  3. configure port tdm e3 description
  4. configure port tdm ds1 channel-group description

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e, 7950 XRS

  1. configure service apipe sap description

7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  1. configure gmpls-tun-grp description

All

  1. configure service epipe sap description
  2. configure service ies interface sap description
  3. configure service ipipe sap description

description

Syntax 
description medium-description-string
no description
Context 
[Tree] (config>service>ies>aa-interface>sap description)
[Tree] (config>service>vprn>aa-interface>sap description)
Full Contexts 
configure service ies aa-interface sap description
configure service vprn aa-interface sap description
Description 

This command creates a text description which is stored in the configuration file to help identify the content of the entity.

The no form of this command removes the string from the configuration.

Parameters 
medium-description-string—
Specifies the text string to describe the entity, up to 160 characters. Allowed values are any string composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description

Syntax 
description long-description-string
no description
Context 
[Tree] (config>service>vprn>isis>link-group description)
[Tree] (config>open-flow>of-switch description)
[Tree] (config>router>isis>link-group description)
Full Contexts 
configure open-flow of-switch description
configure router isis link-group description
configure service vprn isis link-group description
Description 

This command creates a text description stored in the configuration file for a configuration context.

The description command associates a text string with a configuration context to help identify the content in the configuration file.

The no form of this command removes the string from the configuration.

Default 

no description

Parameters 
long-description-string—
Specifies the description character string. Allowed values are any string, up to 255-256 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms 

All

description

Syntax 
description long-description-string
no description
Context 
[Tree] (config>router>if description)
[Tree] (config>port description)
[Tree] (config>lag description)
[Tree] (config>service>ies>aa-interface description)
[Tree] (config>service>ies>interface description)
[Tree] (config>service>ies>redundant-interface description)
[Tree] (config>service>ies>sub-if description)
[Tree] (config>service>ies>sub-if>grp-if description)
[Tree] (config>service>vpls>interface description)
[Tree] (config>service>vprn>aa-interface description)
[Tree] (config>service>vprn>aarp-interface description)
[Tree] (config>service>vprn>if description)
[Tree] (config>service>vprn>ip-mirror-interface description)
[Tree] (config>service>vprn>nw-if description)
[Tree] (config>service>vprn>red-if description)
[Tree] (config>service>vprn>subscriber-interface description)
[Tree] (config>service>vprn>sub-if>grp-if description)
Full Contexts 
configure lag description
configure port description
configure router interface description
configure service ies aa-interface description
configure service ies interface description
configure service ies redundant-interface description
configure service ies subscriber-interface description
configure service ies subscriber-interface group-interface description
configure service vpls interface description
configure service vprn aa-interface description
configure service vprn aarp-interface description
configure service vprn interface description
configure service vprn ip-mirror-interface description
configure service vprn network-interface description
configure service vprn redundant-interface description
configure service vprn subscriber-interface group-interface description
configure service vprn subscriber-interface description
Description 

This command creates a text description stored in the configuration file for a configuration context.

The description command associates a text string with a configuration context to help identify the content in the configuration file.

The no form of this command removes the string from the configuration.

Parameters 
long-description-string—
Specifies the description character string. Allowed values are any string up to 255-256 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  1. configure service vprn subscriber-interface description
  2. configure service vprn redundant-interface description
  3. configure service ies subscriber-interface description
  4. configure service vprn subscriber-interface group-interface description
  5. configure service ies redundant-interface description
  6. configure service ies subscriber-interface group-interface description

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  1. configure service vprn aarp-interface description
  2. configure service vprn aa-interface description
  3. configure service ies aa-interface description

All

  1. configure lag description
  2. configure service vpls interface description
  3. configure service ies interface description
  4. configure service vprn ip-mirror-interface description
  5. configure service vprn network-interface description
  6. configure port description
  7. configure router interface description
  8. configure service vprn interface description

description

Syntax 
description medium-description-string
no description
Context 
[Tree] (config>eth-tunnel description)
Full Contexts 
configure eth-tunnel description
Description 

This command adds a text description for the eth-tunnel.

The no form of this command removes the text description.

Default 

Eth-tunnel

Parameters 
medium-description-string—
Specifies the text description up to 160 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

description

Syntax 
description description-string
no description
Context 
[Tree] (config>service>vsd>domain description)
Full Contexts 
configure service vsd domain description
Description 

This command provides a description for a vsd-domain. This description must be added before the domain is activated using the no shutdown command.

Parameters 
description-string —
Specifies the text for the description.
Platforms 

All

description

Syntax 
description description-string
no description
Context 
[Tree] (config>isa>lns-group description)
[Tree] (config>port-policy description)
[Tree] (config>subscr-mgmt>up-resiliency>fsg-template description)
Full Contexts 
configure isa lns-group description
configure port-policy description
configure subscriber-mgmt up-resiliency fate-sharing-group-template description
Description 

This command creates a text description which is stored in the configuration file to help identify the content of the entity.

The no form of the command removes the string from the configuration.

Parameters 
string—
Specifies the description character string. Allowed values are any string composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on.), the entire string must be enclosed within double quotes.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  1. configure subscriber-mgmt up-resiliency fate-sharing-group-template description

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  1. configure isa lns-group description
  2. configure port-policy description

description

Syntax 
[no] description
Context 
[Tree] (config>service>nat>pcp-server-policy>option description)
Full Contexts 
configure service nat pcp-server-policy option description
Description 

This command enables/disables support for the description option.

Default 

no description

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description

Syntax 
description description-string
no description
Context 
[Tree] (config>bfd>seamless-bfd>reflector description)
Full Contexts 
configure bfd seamless-bfd reflector description
Description 

This command specifies a description of a S-BFD reflector.

Parameters 
description-string—
Specifies the S-BFD reflector description.
Platforms 

All

description

Syntax 
description description-string
no description
Context 
[Tree] (config>system>alarm-contact-input description)
Full Contexts 
configure system alarm-contact-input description
Description 

This command configures a text description of an alarm contact input pin. The description is stored in the CLI configuration file. It indicates the usage or attribute of the pin, and helps the user to identify the purpose of the pin. The description is included in the log event when the pin changes state.

The no form of this command reverts the description string to the default.

Parameters 
description-string—
Specifies a printable character string, up to 80 characters.
Default—
“Pin x”, where x is the alarm contact input pin number.
Platforms 

7750 SR-a

8.113. descriptor-type

descriptor-type

Syntax 
descriptor-type type
Context 
[Tree] (config>qos>atm-td-profile descriptor-type)
Full Contexts 
configure qos atm-td-profile descriptor-type
Description 

This command is used to specify the type of the traffic descriptor profile as per ATM Forum Traffic Management Specification Version 4.1.

Default 

The following table lists the default values of descriptor type based on a service category.

Service Category

Default Descriptor Type

CBR

P0_1

UBR

P0_1

UBR with MIR

P0_1

rt-VBR or nrt-VBR

P0_1andS0_1

Parameters 
type—
Defines interpretation of traffic parameters that are specified for this profile.
Values—
P0_1, P0_1andS0_Tag, P0_1andS0, P0_1andS0_1

 

The following table describes these rules. Setting the descriptor type to a value not compatible with the service category generates an error.

Descriptor Type

Rates Interpretation

Applicable Service Categories

P0_1

PIR applies to CLP=0 and CLP=1 cell flows

CBR, UBR, UBR with MIR

P0_1andS0_1

PIR applies to CLP=0 and CLP=1 cell flows

SCR applies to CLP=0 and CLP=1 cell flows

rt-VBR and nrt-VBR

P0_1andS0

PIR applies to CLP=0 and CLP=1 cell flows

SCR applies to CLP=0 cell flow

rt-VBR and nrt-VBR

Platforms 

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e, 7950 XRS

8.114. designated-role

designated-role

Syntax 
designated-role {standby | active}
no designated-role
Context 
[Tree] (config>redundancy>multi-chassis>ipsec-domain designated-role)
Full Contexts 
configure redundancy multi-chassis ipsec-domain designated-role
Description 

This command sets the designated role for the tunnel group in the IPsec domain.

The no form of this command reverts to the default value.

Default 

designated-role standby

Parameters 
standby—
Sets the designated role to standby.
active—
Sets the designated role to active.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.115. dest-class

dest-class

Syntax 
dest-class dest-class
no dest-class
Context 
[Tree] (config>router>policy-options>policy-statement>entry dest-class)
[Tree] (config>router>policy-options>policy-statement>default-action dest-class)
Full Contexts 
configure router policy-options policy-statement default-action dest-class
configure router policy-options policy-statement entry dest-class
Description 

This command specifies the policy accounting destination class index to associate with matched routes.

Default 

no dest-class

Parameters 
dest-class—
Specifies the destination class.
Values—
1 to 255

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

8.116. dest-global-id

dest-global-id

Syntax 
dest-global-id dest-global-id
no dest-global-id
Context 
[Tree] (config>router>mpls>lsp dest-global-id)
Full Contexts 
configure router mpls lsp dest-global-id
Description 

This optional command configures the MPLS-TP Global ID of the far end node of the MPLS-TP LSP. This command is only allowed for MPLS-TP LSPs. Global ID values of 0 indicate that the local node’s configured global ID is used. If the local global-id is 0, then the dest-global-id must also be 0. The dest-global-id cannot be changed if an LSP is in use by an SDP.

Default 

dest-global-id 0

Parameters 
dest-global-id—
Specifies the destination global ID.
Values—
0 to 4294967295

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.117. dest-ip

dest-ip

Syntax 
[no] dest-ip ip-address
Context 
[Tree] (config>service>ies>if>sap>ip-tunnel dest-ip)
[Tree] (config>service>vprn>if>sap>ip-tunnel dest-ip)
[Tree] (config>service>vprn>sap>ipsec-tunnel dest-ip)
Full Contexts 
configure service ies interface sap ip-tunnel dest-ip
configure service vprn interface sap ip-tunnel dest-ip
configure service vprn sap ipsec-tunnel dest-ip
Description 

This command configures a private IPv4 or IPv6 address of the remote tunnel endpoint. A tunnel can have up to 16 dest-ip commands. At least one dest-ip address is required in the configuration of a tunnel. A tunnel does not come up operationally unless all dest-ip addresses are reachable (part of a local subnet).

Unnumbered interfaces are not supported.

The no form of this command deletes the destination IP of the tunnel.

Parameters 
ip-address —
Specifies the private IPv4 or IPv6 address of the remote IP tunnel endpoint. If this remote IP address is not within the subnet of the IP interface associated with the tunnel then the tunnel will not come up.
Values—

<ip-address>

ipv4-address

a.b.c.d

ipv6-address

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x - [0 to FFFF]H

d - [0 to 255]D

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.118. dest-ip-addr

dest-ip-addr

Syntax 
dest-ip-addr ip-address
no dest-ip-addr
Context 
[Tree] (config>mcast-mgmt>mcast-rprt-dest dest-ip-addr)
Full Contexts 
configure mcast-management mcast-reporting-dest dest-ip-addr
Description 

This command specifies the IP address of the external node to which IGMP events are exported. The destination IP address can only be reachable from the global routing table (no vrf access).

The no form of this command removes the destination address from the configuration.

Parameters 
ip-addr—
Specifies the IP address of the multicast reporting destination.
Platforms 

All

8.119. dest-mac

dest-mac

Syntax 
dest-mac {nearest-bridge | nearest-non-tpmr | nearest-customer}
Context 
[Tree] (config>port>ethernet>lldp dest-mac)
Full Contexts 
configure port ethernet lldp dest-mac
Description 

This command configures destination MAC address parameters.

Default 

dest-mac nearest-bridge

Parameters 
nearest-bridge—
Specifies to use the nearest bridge.
nearest-non-tpmr—
Specifies to use the nearest non-Two-Port MAC Relay (TPMR).
nearest-customer—
Specifies to use the nearest customer.
Platforms 

All

dest-mac

Syntax 
dest-mac ieee-address
no dest-mac
Context 
[Tree] (config>oam-pm>session>ethernet dest-mac)
Full Contexts 
configure oam-pm session ethernet dest-mac
Description 

This command defines the destination MAC address of the peer MEP and sets the destination MAC address in the layer two header to match. This must be a unicast address.

The no form of this command removes session parameter.

Parameters 
ieee-address—
Specifies the Layer 2 unicast MAC address of the destination MEP.
Values—
xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

 

Platforms 

All

8.120. dest-mac-address

dest-mac-address

Syntax 
dest-mac-address mac-address [create]
no dest-mac-address mac-address
Context 
[Tree] (config>macsec>mac-policy dest-mac-address)
Full Contexts 
configure macsec mac-policy dest-mac-address
Description 

This command specifies the destination MAC address.

The no form of this command removes the MAC address.

Parameters 
mac-address—
Specifies the value of the MAC address policy.
Values—
xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

 

create—
Mandatory to create the configuration.
Platforms 

All

8.121. dest-mac-rewrite

dest-mac-rewrite

Syntax 
dest-mac-rewrite ieee-address
no dest-mac-rewrite
Context 
[Tree] (config>service>vpls>sap>egress dest-mac-rewrite)
Full Contexts 
configure service vpls sap egress dest-mac-rewrite
Description 

This commands enables the overwriting of a destination MAC address to an operator-configured value for all unicast packets egressing the specified SAP. The command is intended to be deployed with L2 PBF SAP redirect when a remote end of the SAP interface is an L3 interface with a MAC address different from the MAC address of the non-PBF-ed L3 interface. See Filter Policy in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Router Configuration Guide for more details.

The no form disables the option.

Default 

no dest-mac-rewrite

Parameters 
ieee-address
Specifies the MAC address
Values—
1xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx
Cannot be all zeros

 

Platforms 

All

8.122. dest-realm

dest-realm

Syntax 
dest-realm realm
no dest-realm
Context 
[Tree] (debug>diameter dest-realm)
Full Contexts 
debug diameter dest-realm
Description 

This command restricts the output to a specific destination-realm.

The no form of this command disables debugging.

Parameters 
realm—
Specifies the realm up to 80 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.123. dest-realm-learning

dest-realm-learning

Syntax 
[no] dest-realm-learning
Context 
[Tree] (config>subscr-mgmt>diam-appl-plcy>gx dest-realm-learning)
[Tree] (config>subscr-mgmt>diam-appl-plcy>gy dest-realm-learning)
Full Contexts 
configure subscriber-mgmt diameter-application-policy gx dest-realm-learning
configure subscriber-mgmt diameter-application-policy gy dest-realm-learning
Description 

This command configures destination realm learning that is used in outgoing Gx and Gy Credit Control Request (CCR) messages. Destination realm is a mandatory configuration parameter.

The configured destination realm is always used in the initial CCR-I message. The consecutive request message of a Gx or Gy session can use the destination realm as learned from replies within a DIAMETER session (if learning is enabled), or they can ignore the realm from the reply and always use the configured destination realm in Gx and Gy request messages (learning is disabled).

The no form of this command ignores the realm from the reply.

Default 

dest-realm-learning

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.124. dest-tunnel-number

dest-tunnel-number

Syntax 
dest-tunnel-number dest-tunnel-number
no dest-tunnel-number
Context 
[Tree] (config>router>mpls>lsp dest-tunnel-number)
Full Contexts 
configure router mpls lsp dest-tunnel-number
Description 

This optional command configures the MPLS-TP tunnel number of the LSP at the far end node of the MPLS-TP LSP. This command is only allowed for MPLS-TP LSPs. If it is not entered, then the system will take the dest-tunnel-number to be the same as the src-tunnel-num for the LSP.

Default 

The default value is the configured src-tunnel-num.

Parameters 
dest-tunnel-number—
Specifies the destination tunnel number.
Values—
1 to 61440

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.125. dest-udp-port

dest-udp-port

Syntax 
dest-udp-port udp-port-number
no dest-udp-port
Context 
[Tree] (config>oam-pm>session>ip dest-udp-port)
Full Contexts 
configure oam-pm session ip dest-udp-port
Description 

This command defines the destination UDP port on outbound TWAMP Light packets sent from the session controller. The destination UDP port must match the UDP port value configured on the TWAMP Light reflector that is responding to this specific TWAMP Light test.

The no form of this command removes the destination UDP port setting.

Parameters 
udp-port-number—
Specifies the UDP source port.
Values—
1 to 65535

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dest-udp-port

Syntax 
dest-udp-port port-number
Context 
[Tree] (config>test-oam>link-meas>template>twl dest-udp-port)
Full Contexts 
configure test-oam link-measurement measurement-template twamp-light dest-udp-port
Description 

This command configures the destination UDP port used by the link measurement tests.

Default 

dest-udp-port 862

Parameters 
port-number—
Specifies the destination UDP port copied into the UDP header of each Echo request packet launched for each link measurement test belonging to the specified template.
Values—
1 to 65535

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.126. destination

destination

Syntax 
destination ip-address
no destination
Context 
[Tree] (config>oam-pm>session>ip destination)
Full Contexts 
configure oam-pm session ip destination
Description 

This command defines the destination IP address that is assigned to the TWAMP Light packets. The destination address must be included in the prefix list on the session reflector within the configured context in order to allow the reflector to process the inbound TWAMP Light packets.

The no form of this command removes the destination parameters.

Parameters 
ip-address—
Specifies the IP address of the IP peer to which the packet is directed.
Values—

ipv4-address:

a.b.c.d

ipv6-address:

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x:

[0 to FFFF]H

d:

[0 to 255]D

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

destination

Syntax 
destination ip-address [create]
no destination ip-address
Context 
[Tree] (config>filter>redirect-policy destination)
Full Contexts 
configure filter redirect-policy destination
Description 

This command defines a destination in a redirect policy. More than one destination can be configured. Whether a destination IPv4/IPv6 address will receive redirected packets depends on the effective priority value after evaluation.

The most preferred destination is programmed in hardware as action forward next-hop. If all destinations are down (as determined by the supported tests), action forward is programmed in hardware. All destinations within a given policy must be either IPv4 or (exclusive) IPv6. The redirect policy with IPv4 destinations configured can only be used by IPv4 filter policies. The redirect policy with IPv6 destinations configured can only be used by IPv6 filter policies.

Default 

no destination

Parameters 
ip-address—
Specifies the IPv4 address (in dotted decimal notation) or IPv6 address to send the redirected traffic to.
Values—
IPv4 address:         ip-address: a.b.c.d
IPv6-address:         x:x:x:x:x:x:x:x (eight 16-bit pieces)
                               x:x:x:x:x:x:d.d.d.d
                               x: [0..FFFF]H
                               d: [0..255]D

 

Platforms 

All

destination

Syntax 
destination memory num-entries
destination syslog syslog-id
no destination
Context 
[Tree] (config>filter>log destination)
Full Contexts 
configure filter log destination
Description 

This command configures the destination for filter log entries for the filter log ID.

Filter logs can be sent to either memory (memory) or to an existing Syslog server definition (syslog).

If the filter log destination is memory, the maximum number of entries in the log must be specified.

The no form of the command deletes the filter log association.

Default 

destination memory 1000

Parameters 
memory num-entries
Specifies the destination of the filter log ID is a memory log. The num-entries value is the maximum number of entries in the filter log expressed as a decimal integer.
Values—
10 to 50000

 

syslog syslog-id
Specifies the destination of the filter log ID is a Syslog server. The syslog-id parameter is the number of the Syslog server definition.
Values—
1 to 10

 

Platforms 

All

destination

Syntax 
destination {ip-address | fqdn} port port [create]
no destination {ip-address | fqdn} port port
Context 
[Tree] (config>system>grpc-tunnel>destination-group destination)
[Tree] (config>system>telemetry>destination-group destination)
Full Contexts 
configure system grpc-tunnel destination-group destination
configure system telemetry destination-group destination
Description 

This command configures a destination IP address and port for a specific destination within a destination group. Up to two destinations can be defined within a destination group. Each destination is an IPv4 address, an IPv6 address, or the Fully Qualified Domain Name (FQDN).

The no form of this command removes the destination from the destination group.

Parameters 
ip-address—
Specifies the IPv4 address (in dotted decimal notation) or IPv6 address.
Values—
IPv4 address:         ip-address: a.b.c.d
IPv6-address:         x:x:x:x:x:x:x:x (eight 16-bit pieces)
                               x:x:x:x:x:x:d.d.d.d
                               x: [0..FFFF]H
                               d: [0..255]D

 

fqdn—
Specifies the FQDN.
port—
Specifies the TCP destination port number.
Values—
1 to 65535

 

create
Keyword used to create a destination.
Platforms 

All

destination

Syntax 
destination ip-address
no destination
Context 
[Tree] (config>router>if>if-attr>delay>dyn>twamp>ipv4 destination)
Full Contexts 
configure router interface if-attribute delay dynamic twamp-light ipv4 destination
Description 

This command configures the unicast IPv4 destination address for the TWAMP Light test packet. When this command is not configured, the destination IPv4 address is auto-assigned for interfaces configured with a prefix length of 30 and 31. All other interface prefix lengths and unnumbered interfaces are unable to auto- assign the destination IPv4 address. If the interface does not use a prefix length of 30 or 31, the destination must be configured.

Deleting a configured destination removes the specified address and causes the source address to be auto-assigned for prefix length of 30 and 31.

Configuration modifications are allowed without administratively disabling the IPv4 protocol.

The no form of this command removes the IPv4 address from the configuration.

Default 

no destination

Parameters 
ip-address—
Specifies the IPv4 destination address.
Values—
a.b.c.d

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

destination

Syntax 
destination ipv6-address
no destination
Context 
[Tree] (config>router>if>if-attr>delay>dyn>twamp>ipv6 destination)
Full Contexts 
configure router interface if-attribute delay dynamic twamp-light ipv6 destination
Description 

This command configures the IPv6 destination address of the TWAMP Light test packet. When this command is not configured, no destination address is present and an error is raised to prevent the transmission of the test packet.

The IPv6 protocol can be enabled without addressing. However, the test does not transmit packets.

The link local address must be in the form fe80::/60 in accordance with RFC 4291, IP Version 6 Addressing Architecture.

The no form of this command removes the IPv6 address from the configuration.

Default 

no destination

Parameters 
ipv6-address—
Specifies the TWAMP Light IPv6 destination address
Values—

ipv6-address:

x:x:x:x:x:x:x:x

x - [0 to FFFF]H

unicast and link local IPv6 address only

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.127. destination-address

destination-address

Syntax 
[no] destination-address ip-address
Context 
[Tree] (config>filter>gre-tun-tmp>ipv4 destination-address)
Full Contexts 
configure filter gre-tunnel-template ipv4 destination-address
Description 

This command defines one or more destinations for the GRE IP header used to encapsulate the matching IPv4/IPv6 packet.

Traffic matching the associated IPv4 or IPv6 filter are hashed across all available destination address. If no destination address is available, then matching traffic follows the configured pbr-down-action-override action, if configured.

The no form of this command removes the specified destination IP address configuration from the associated GRE tunnel template.

Parameters 
ip-address—
Specifies up to 16 IPv4 addresses to be used as the destination address.
Platforms 

All

destination-address

Syntax 
destination-address ip-address
no destination-address
Context 
[Tree] (config>service>ies>if>ping-template destination-address)
[Tree] (config>service>vprn>if>ping-template destination-address)
Full Contexts 
configure service ies interface ping-template destination-address
configure service vprn interface ping-template destination-address
Description 

This command configures the address to where the ICMP echo requests are directed to test connectivity. The source of the ICMP echo request is the primary IPv4 address of the interface under which the ping-template is configured. The destination address must be on the same subnet as the source IP address. A configuration warning message displays if the primary IPv4 address and the destination are not on the same subnet, INFO: PIP #2092 Ping template misconfiguration - destination-address and primary IP address should fall in the same subnet. Unnumbered interfaces and loopback addresses are not supported.

The config>service>ies|vprn>interface>ping-template must be in the no shutdown state to remove or change the destination-address ip-address.

The no form of this command removes the destination address from the configuration.

Parameters 
ip-address—
Specifies the destination address to where the ICMP echo requests are directed to test connectivity, in a.b.c.d format.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.128. destination-class

destination-class

Syntax 
destination-class index
no destination-class index
no destination-class all
Context 
[Tree] (config>router>policy-acct-template destination-class)
Full Contexts 
configure router policy-acct-template destination-class
Description 

Commands in this context create a destination class index for the template.

The no form of this command removes the index from the configuration.

Parameters 
index—
Specifies the destination index value.
Values—
1 to 255

 

all—
Deletes all destination class indexes from this configuration.
Platforms 

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

destination-class

Syntax 
destination-class dest-index
no destination-class [dest-index]
Context 
[Tree] (config>service>vprn>static-route-entry>indirect destination-class)
[Tree] (config>service>vprn>static-route-entry>ipsec-tunnel destination-class)
Full Contexts 
configure service vprn static-route-entry indirect destination-class
configure service vprn static-route-entry ipsec-tunnel destination-class
Description 

This command configures the policy accounting destination-class index to be used when incrementing accounting statistic for traffic matching the associated static route.

The no form of this command removes the associated destination-class from the associated static route nexthop.

Default 

no destination-class

Parameters 
dest-index—
The destination index integer value.
Values—
1 to 255

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

destination-class

Syntax 
destination-class dest-index
no destination-class
Context 
[Tree] (config>filter>ip-filter>entry>match destination-class)
[Tree] (config>filter>ipv6-filter>entry>match destination-class)
Full Contexts 
configure filter ip-filter entry match destination-class
configure filter ipv6-filter entry match destination-class
Description 

This command configures the BGP destination-class value match criterion. Filtering egress traffic on destination-class requires the destination-class-lookup command to be enabled on the interface that the packet ingresses on.

The no form of the command removes the destination-class value match criterion.

Default 

no destination-class

Parameters 
dest-index—
Specifies the destination index integer value.
Values—
1 to 255

 

Platforms 

All

destination-class

Syntax 
destination-class dest-index
no destination-class [dest-index]
Context 
[Tree] (config>router>static-route-entry>indirect destination-class)
[Tree] (config>router>static-route-entry>next-hop destination-class)
Full Contexts 
configure router static-route-entry indirect destination-class
configure router static-route-entry next-hop destination-class
Description 

This command configures the policy accounting destination-class index to be used when incrementing accounting statistic for traffic matching the associated static route.

The no form of this command removes the associated destination-class from the associated static route next hop.

Default 

no destination-class

Parameters 
dest-index—
Specifies the destination index integer value.
Values—
1 to 255

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

8.129. destination-class-lookup

destination-class-lookup

Syntax 
[no] destination-class-lookup
Context 
[Tree] (config>service>ies>if>ingress destination-class-lookup)
Full Contexts 
configure service ies interface ingress destination-class-lookup
Description 

This command enables BGP destination-class lookup for packets on this interface ingress and is supported on FP3-based cards and later. It is used in combination with an IP filter or IPv6 filter destination-class to filter traffic egress of the router based on BGP destination classes.

The command is supported on network, IES, VPRN and R-VPLS interfaces. It is not supported on subscriber interfaces, tunnel interfaces or VPRN network interfaces.

Default 

no destination-class-lookup

Platforms 

All

destination-class-lookup

Syntax 
[no] destination-class-lookup
Context 
[Tree] (config>service>vprn>if>ingress destination-class-lookup)
Full Contexts 
configure service vprn interface ingress destination-class-lookup
Description 

This command enables BGP destination-class lookup for packets on this interface ingress and is supported on FP3-based cards and later. It is used in combination with an IP filter or IPv6 filter destination-class to filter traffic egress of the router based on BGP destination classes.

The command is supported on network, IES, VPRN and R-VPLS interfaces. It is not supported on subscriber interfaces, tunnel interfaces and VPRN network interfaces.

Default 

no destination-class-lookup

Platforms 

All

destination-class-lookup

Syntax 
[no] destination-class-lookup
Context 
[Tree] (config>router>if>ingress destination-class-lookup)
Full Contexts 
configure router interface ingress destination-class-lookup
Description 

This command enables BGP destination-class lookup for packets on this interface ingress. It is used in combination with an IP filter or IPv6 filter destination-class to filter traffic egress of the router based on BGP destination classes.

The command is supported on network, IES, VPRN and R-VPLS interfaces. It is not supported on subscriber interfaces, tunnel interfaces or VPRN network interfaces.

The no form of this command reverts to the default value.

Default 

no destination-class-lookup

Platforms 

All

8.130. destination-group

destination-group

Syntax 
destination-group name [create]
no destination-group name
Context 
[Tree] (config>system>grpc-tunnel destination-group)
[Tree] (config>system>telemetry destination-group)
Full Contexts 
configure system grpc-tunnel destination-group
configure system telemetry destination-group
Description 

Commands in this context configure commands for destination groups.

The no form of this command removes the destination group name.

Parameters 
name—
Specifies the destination group name, up to 32 characters.
create
Keyword used to create a destination group.
Platforms 

All

destination-group

Syntax 
destination-group name
no destination-group
Context 
[Tree] (config>system>grpc-tunnel>tunnel destination-group)
Full Contexts 
configure system grpc-tunnel tunnel destination-group
Description 

This command assigns the specified destination group to a gRPC tunnel.

The no form of this command removes the specified destionation group from the gRPC tunnel.

Default 

no destination-group

Parameters 
name—
Specifies the destination group name, up to 32 characters
Platforms 

All

destination-group

Syntax 
destination-group name
no destination-group
Context 
[Tree] (config>system>telemetry>persistent-subscriptions>subscription destination-group)
Full Contexts 
configure system telemetry persistent-subscriptions subscription destination-group
Description 

This command assigns an existing destination group to the specified persistent subscription. The assigned destination-group must already exist before the configured persistent subscription can be activated.

The no form of this command removes the destination group name from the persistent subscription.

Parameters 
name—
Specifies the destination group name, up to 32 characters.
Platforms 

All

8.131. destination-host

destination-host

Syntax 
destination-host destination-host-string
no destination-host
Context 
[Tree] (config>aaa>diam-peer-plcy>peer destination-host)
Full Contexts 
configure aaa diameter-peer-policy peer destination-host
Description 

This command configures the Destination-Host AVP that is sent in CCR-I/U/T and RAA messages. If the destination host name is not explicitly set by configuration, it is learned from CCA or RAR messages. In other words, the origin host name received in the CCA or RAR message is used to populate or replace the destination host name for a session in SR OS node.

This command is applicable only to legacy implementations of Diameter base in the SR OS.

The no form of this command reverts to the default.

Parameters 
destination-host-string—
Specifies the destination host name, up to 80 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.132. destination-ip

destination-ip

Syntax 
[no] destination-ip
Context 
[Tree] (config>service>nat>syslog>syslog-export-policy>include destination-ip)
Full Contexts 
configure service nat syslog syslog-export-policy include destination-ip
Description 

This command includes the destination IP address in the flow log. The destination-ip is significant in Destination Based NAT (DNAT) where the foreign IP address is translated. A foreign IP address is the original IP address toward the destination node and in DNAT it is replaced by the destination-ip. More clearly, on the inside (private side), the IP address of the destination node is referred to as foreign IP (original destination IP), and once this address is translated by DNAT, it is referred to as destination IP (translated destination IP) on the outside (public side).

The no form of the command disables the feature.

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.133. destination-port

destination-port

Syntax 
destination-port [destination-port]
Context 
[Tree] (config>service>nat>syslog>syslog-export-policy>collector destination-port)
Full Contexts 
configure service nat syslog syslog-export-policy collector destination-port
Description 

This command configures the destination port (collector port) to which UDP stream containing the syslog flow records are sent.

Default 

destination-port 514

Parameters 
destination-port—
Specifies the destination port to which UDP streams are sent.
Values—
1 to 65535

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.134. destination-prefix

destination-prefix

Syntax 
destination-prefix ip-prefix/length [nat-policy nat-policy-name]
no destination-prefix ip-prefix/length
Context 
[Tree] (config>service>vprn>nat>inside destination-prefix)
[Tree] (config>router>nat>inside destination-prefix)
Full Contexts 
configure router nat inside destination-prefix
configure service vprn nat inside destination-prefix
Description 

This command configures a destination prefix. An (internal) static route will be created for this prefix. All traffic that hits this route will be subject to NAT. The system will not allow a destination-prefix to be configured if the configured nat-policy refers to an IP pool that resides in the same service (as this would result in a routing loop).

Parameters 
ip-prefix—
Specifies the IP prefix; host bits must be zero (0).
Values—
a.b.c.d

 

length—
Specifies the prefix length.
Values—
0 to 32

 

nat-policy-name—
Specifies the NAT policy name, up to 32 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

destination-prefix

Syntax 
[no] destination-prefix
Context 
[Tree] (config>cflowd>collector>aggregation destination-prefix)
Full Contexts 
configure cflowd collector aggregation destination-prefix
Description 

This command specifies that the aggregation data is based on destination prefix information.

The no form removes this type of aggregation from the collector configuration.

Platforms 

All

8.135. destination-realm

destination-realm

Syntax 
destination-realm destination-realm-string
no destination-realm
Context 
[Tree] (config>aaa>diam-peer-plcy>peer destination-realm)
Full Contexts 
configure aaa diameter-peer-policy peer destination-realm
Description 

This command configures the destination-realm AVP that is sent in CCR-I/U/T and RAA messages. The destination realm name cannot be learned dynamically from the CCA or RAR messages and therefore it should be explicitly configured in SR OS node. Once configured, it cannot be changed while peers are open.

This command is applicable only to legacy implementations of Diameter base in the SR OS.

The no form of this command reverts to the default.

Parameters 
destination-realm-string—
Specifies the destination realm name, up to 80 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.136. destruct-timeout

destruct-timeout

Syntax 
destruct-timeout destruct-timeout
no destruct-timeout
Context 
[Tree] (config>router>l2tp destruct-timeout)
[Tree] (config>router>l2tp>group destruct-timeout)
[Tree] (config>router>l2tp>group>tunnel destruct-timeout)
[Tree] (config>service>vprn>l2tp destruct-timeout)
[Tree] (config>service>vprn>l2tp>group destruct-timeout)
[Tree] (config>service>vprn>l2tp>group>tunnel destruct-timeout)
Full Contexts 
configure router l2tp destruct-timeout
configure router l2tp group destruct-timeout
configure router l2tp group tunnel destruct-timeout
configure service vprn l2tp destruct-timeout
configure service vprn l2tp group destruct-timeout
configure service vprn l2tp group tunnel destruct-timeout
Description 

This command configures the period of time that the data of a disconnected tunnel will persist before being removed.

The no form of this command removes the value from the configuration.

Default 

no destruct-timeout

Parameters 
destruct-timeout—
Specifies the automatic removal of dynamic L2TP sessions, in seconds, that are no longer active.
Default—
no destruct-timeout
Values—
60 to 86400

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.137. detail-level

detail-level

Syntax 
detail-level {low | medium | high}
no detail-level
Context 
[Tree] (debug>router>ip>dhcp detail-level)
[Tree] (debug>router>ip>dhcp6 detail-level)
[Tree] (debug>router>local-dhcp-server detail-level)
Full Contexts 
debug router ip dhcp detail-level
debug router ip dhcp6 detail-level
debug router local-dhcp-server detail-level
Description 

This command debugs the DHCP tracing detail level.

Parameters 
low—
Displays a low detail level for DHCP debugging.
medium—
Displays a medium detail level for DHCP debugging.
high—
Displays a high detail level for DHCP debugging.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  1. debug router local-dhcp-server detail-level

All

  1. debug router ip dhcp6 detail-level
  2. debug router ip dhcp detail-level

detail-level

Syntax 
detail-level detail-level
Context 
[Tree] (debug>router>l2tp>assignment-id>packet detail-level)
[Tree] (debug>router>l2tp>group>packet detail-level)
[Tree] (debug>router>l2tp>packet detail-level)
Full Contexts 
debug router l2tp assignment-id packet detail-level
debug router l2tp group packet detail-level
debug router l2tp packet detail-level
Description 

This command configures the L2TP packet debugging level of detail.

Parameters 
detail-level—
Specifies the detail level.
Values—
low, high

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

detail-level

Syntax 
detail-level {low | medium | high}
no detail-level
Context 
[Tree] (debug>service>id>ppp>packet detail-level)
Full Contexts 
debug service id ppp packet detail-level
Description 

This command specify the detail level of PPP packet debug output.

The no form of this command disables debugging.

Parameters 
low | medium | high—
Specifies the detail level of PPP packet debug output.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

detail-level

Syntax 
detail-level level
Context 
[Tree] (debug>diameter detail-level)
Full Contexts 
debug diameter detail-level
Description 

This command configures the detail level of debug output.

The no form of this command disables debugging.

Parameters 
level—
Specifies the detail level.
Values—
low, medium, high

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

detail-level

Syntax 
detail-level {low | medium | high}
no detail-level
Context 
[Tree] (debug>router>radius detail-level)
Full Contexts 
debug router radius detail-level
Description 

This command specifies the output detail level of command debug router radius.

Default 

detail-level medium

Parameters 
low—
Specifies that the output includes packet type, server address, length, radius-server-policy name.
medium—
Specifies all output in low level including the RADIUS attributes in the packet.
high—
Specifies all output in medium level including the hex packet dump.
Platforms 

All

detail-level

Syntax 
detail-level detail-level
Context 
[Tree] (debug>router>wpp detail-level)
[Tree] (debug>router>wpp>packet detail-level)
[Tree] (debug>router>wpp>portal>packet detail-level)
Full Contexts 
debug router wpp detail-level
debug router wpp packet detail-level
debug router wpp portal packet detail-level
Description 

This command specifies the detail level of WPP packet debugging.

Parameters 
detail-level—
specifies the detail level of WPP packet debugging.
Values—
high — Specifies a high detail level for WPP packet debugging
low — Specifies a low detail for WPP packet debugging

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

detail-level

Syntax 
detail-level {low | medium | high}
Context 
[Tree] (debug>subscr-mgmt>vrgw>brg>pppoe-client>brg-id detail-level)
Full Contexts 
debug subscriber-mgmt vrgw brg pppoe-client brg-id detail-level
Description 

This command specifies the amount of detail present in debugging the specified PPPoE client.

Default 

detail-level high

Parameters 
low—
Specifies a low level of detail during debugging.
medium—
Specifies a medium level of detail during debugging.
high—
Specifies a high level of detail during debugging.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

detail-level

Syntax 
detail-level {low | medium | high}
no detail-level
Context 
[Tree] (debug>service>id>igmp-snooping detail-level)
Full Contexts 
debug service id igmp-snooping detail-level
Description 

This command enables and configures the IGMP tracing detail level.

The no form of this command disables the IGMP tracing detail level.

Platforms 

All

detail-level

Syntax 
detail-level {low | medium | high}
no detail-level
Context 
[Tree] (debug>service>id>mld detail-level)
Full Contexts 
debug service id mld-snooping detail-level
Description 

This command enables and configures the MLD tracing detail level.

The no form of this command disables the MLD tracing detail level.

Platforms 

All

detail-level

Syntax 
detail-level {low | medium | high}
no detail-level
Context 
[Tree] (debug>service>id>dhcp detail-level)
Full Contexts 
debug service id dhcp detail-level
Description 

This command configures the DHCP tracing detail level.

The no form of the command disables debugging.

Parameters 
low—
Displays a low detail level for DHCP debugging.
medium—
Displays a medium detail level for DHCP debugging.
high—
Displays a high detail level for DHCP debugging.
Platforms 

All

detail-level

Syntax 
detail-level detail-level
Context 
[Tree] (debug>router>pcp>pcp-server>packet detail-level)
Full Contexts 
debug router pcp pcp-server packet detail-level
Description 

This command configures the packet debugging level of detail.

Parameters 
detail-level—
Specifies the detail level.
Values—
low, high

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.138. detailed-acct-attributes

detailed-acct-attributes

Syntax 
[no] detailed-acct-attributes
Context 
[Tree] (config>subscr-mgmt>acct-plcy>include detailed-acct-attributes)
Full Contexts 
configure subscriber-mgmt radius-accounting-policy include-radius-attribute detailed-acct-attributes
Description 

This command enables detailed reporting of per queue and per policer octet and packet counters using RADIUS VSAs. Enabled by default. It can be enabled simultaneously with aggregate counters (std-acct-attributes).

The no form of this command excludes the detailed counter VSAs from the RADIUS accounting messages.

Default 

detailed-acct-attributes

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.139. detect

detect

Syntax 
detect num-moves num-moves window minutes
Context 
[Tree] (config>service>vpls>bgp-evpn>mac-duplication detect)
Full Contexts 
configure service vpls bgp-evpn mac-duplication detect
Description 

The mac-duplication featured is always enabled by default. This command modifies the default behavior. mac-duplication monitors the number of moves of a MAC address for a period of time (window).

Default 

detect num-moves 5 window 3

Parameters 
num-moves—
Identifies the number of MAC moves in a VPLS service. The counter is incremented when a specified MAC is locally relearned in the FDB or flushed from the FDB due to the reception of a better remote EVPN route for that MAC.
Values—
3 to 10

 

Default—
5
minutes—
Specifies the length of the window in minutes.
Values—
1 to 15

 

Default—
3
Platforms 

All

8.140. detect-seen-ip

detect-seen-ip

Syntax 
[no] detect-seen-ip
Context 
[Tree] (config>app-assure>group>transit-ip-policy detect-seen-ip)
Full Contexts 
configure application-assurance group transit-ip-policy detect-seen-ip
Description 

This command enables the detection of transit subscribers based on the IP address.

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.141. detection-time

detection-time

Syntax 
detection-time seconds
no detection-time
Context 
[Tree] (config>sys>security>dist-cpu-protection>policy>protocol>dynamic-parameters detection-time)
Full Contexts 
configure system security dist-cpu-protection policy protocol dynamic-parameters detection-time
Description 

When a dynamic enforcing policer is instantiated, it remains allocated until at least a contiguous conforming period of detection-time passes.

Default 

detection-time 30

Parameters 
seconds—
Specifies the detection time.
Values—
1 to 128000

 

Platforms 

All

detection-time

Syntax 
detection-time seconds
Context 
[Tree] (config>sys>security>dist-cpu-protection>policy>static-policer detection-time)
Full Contexts 
configure system security dist-cpu-protection policy static-policer detection-time
Description 

When a policer is declared as in an “exceed” state, it remains as exceeding until a contiguous conforming period of detection-time passes. The detection-time only starts after the exceed-action hold-down is complete. If the policer detects another exceed during the detection count down then a hold-down is once again triggered before the policer re-enters the detection time (that is, the countdown timer starts again at the configured value). During the hold-down (and the detection-time), the policer is considered as in an “exceed” state.

Default 

detection-time 30

Parameters 
seconds—
Specifies the detection time.
Values—
1 to 128000

 

Platforms 

All

8.142. deterministic

deterministic

Syntax 
deterministic
Context 
[Tree] (config>service>vprn>nat>inside deterministic)
[Tree] (config>router>nat>inside deterministic)
Full Contexts 
configure router nat inside deterministic
configure service vprn nat inside deterministic
Description 

Commands in this context configure deterministic NAT.

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

deterministic

Syntax 
deterministic
Context 
[Tree] (config>service>vprn>nat>outside>pool deterministic)
Full Contexts 
configure service vprn nat outside pool deterministic
Description 

This command configures deterministic NAT for this pool.

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.143. deterministic-med

deterministic-med

Syntax 
[no] deterministic-med
Context 
[Tree] (config>service>vprn>bgp>best-path-selection deterministic-med)
Full Contexts 
configure service vprn bgp best-path-selection deterministic-med
Description 

This command controls how the BGP decision process compares routes on the basis of MED. When deterministic-med is configured, BGP groups paths that are equal up to the MED comparison step based on neighbor AS, and then compares the best path from each group to arrive at the overall best path. This change to the BGP decision process makes best path selection completely deterministic in all cases. Without deterministic-med, the overall best path selection is sometimes dependent on the order of the route arrival because of the rule that MED cannot be compared in routes from different neighbor AS.

Default 

no deterministic-med

Platforms 

All

deterministic-med

Syntax 
[no] deterministic-med
Context 
[Tree] (config>router>bgp>best-path-selection deterministic-med)
Full Contexts 
configure router bgp best-path-selection deterministic-med
Description 

This command controls how the BGP decision process compares routes on the basis of MED. When deterministic-med is configured, BGP groups paths that are equal up to the MED comparison step based on neighbor AS, and then compares the best path from each group to arrive at the overall best path. This change to the BGP decision process makes best path selection completely deterministic in all cases. Without deterministic-med, the overall best path selection is sometimes dependent on the order of the route arrival because of the rule that MED cannot be compared in routes from different neighbor AS.

Default 

no deterministic-med

Platforms 

All

8.144. deterministic-script

deterministic-script

Syntax 
deterministic-script
Context 
[Tree] (config>service>nat deterministic-script)
Full Contexts 
configure service nat deterministic-script
Description 

This command configures the script generated for deterministic NAT.

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.145. device

device

Syntax 
device ieee-address [create]
no device ieee-address
Context 
[Tree] (config>system>bluetooth device)
Full Contexts 
configure system bluetooth device
Description 

This command is used to add and remove devices from the Bluetooth allowlist or to enter the context to configure the MAC. The router only accepts pairing requests with devices that are in the allowlist. The devices are identified through their IEEE 802 MAC addresses. There can be up to six devices defined in the allowlist.

The create keyword must be used to add a new device.

The no form of this command removes the indicated device from the allowlist.

Parameters 
ieee-address—
Specifies the MAC address of the external Bluetooth device.
Values—
6-byte unicast MAC address (xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx)

 

Platforms 

7750 SR-1, 7750 SR-s

8.146. device-label

device-label

Syntax 
device-label name
no device-label
Context 
[Tree] (config>system>management-interface>remote-management device-label)
Full Contexts 
configure system management-interface remote-management device-label
Description 

This command configures the metadata label that is supplied to all remote managers. This label can be used to group devices (network-nodes) that serve a common purpose or role.

If this command is also configured for a specific remote manager in the config>system> management-interface>remote-management>manager context, that configuration takes precedence.

The no form of this command causes an empty string to be used.

Parameters 
name—
Specifies the device-label name, up to 64 characters.
Platforms 

All

device-label

Syntax 
device-label name
no device-label
Context 
[Tree] (config>system>management-interface>remote-management>manager device-label)
Full Contexts 
configure system management-interface remote-management manager device-label
Description 

This command configures the metadata label that is supplied to this remote manager. This label can be used to group devices (network-nodes) with a common purpose/role.

This command takes precedence over the same command configured in the global context (config>system>management-interface>remote-management).

The no form of this command causes the device-label name to be inherited from the global context (config>system>management-interface>remote-management).

Parameters 
name—
Specifies the device-label name, up to 64 characters.
Platforms 

All

8.147. device-name

device-name

Syntax 
device-name name
no device-name
Context 
[Tree] (config>system>management-interface>remote-management device-name)
 
Full Contexts 
configure system management-interface remote-management device-name
Description 

This command configures a device name that is supplied to all remote managers. This name identifies the specified SR OS node in the network.

If this command is also configured for a specific manager in the config>system> management-interface>remote-management>manager context, that configuration takes precedence.

The no form of this command causes the system to use the default device name (system-name).

Default 

system-name

Parameters 
name—
Specifies the device name, up to 64 characters.
Platforms 

All

device-name

Syntax 
device-name name
no device-name
Context 
[Tree] (config>system>management-interface>remote-management>manager device-name)
Full Contexts 
configure system management-interface remote-management manager device-name
Description 

This command configures a device name that is supplied to the specific manager. This name identifies the specified SR OS node in the network.

This command takes precedence over the same command configured in the global context (config>system>management-interface>remote-management).

The no form of this command causes the device name to be inherited from the global context (config>system>management-interface>remote-management).

Default 

system-name

Parameters 
name—
Specifies the device name, up to 64 characters.
Platforms 

All

8.148. df-bit-lac

df-bit-lac

Syntax 
df-bit-lac {always | never}
no df-bit-lac
Context 
[Tree] (config>router>l2tp df-bit-lac)
[Tree] (config>service>vprn>l2tp df-bit-lac)
Full Contexts 
configure router l2tp df-bit-lac
configure service vprn l2tp df-bit-lac
Description 

By default, the LAC df-bit-lac is always set and sends all L2TP packets with the DF bit set to 1. The DF bit is configurable to allow downstream routers to fragment the L2TP packets. The LAC itself will not fragment L2TP packets. L2TP packets that have a larger MTU size than what the LAC egress ports allows are dropped.

The no form of this command reverts to the default.

Default 

df-bit-lac always

Parameters 
always—
Specifies that the LAC sends all L2TP packets with the DF bit set to 1.
never—
Specifies that the LAC sends all L2TP packets with the DF bit set to 0.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

df-bit-lac

Syntax 
df-bit-lac {always | never | default}
no df-bit-lac
Context 
[Tree] (config>router>l2tp>group df-bit-lac)
[Tree] (config>router>l2tp>group>tunnel df-bit-lac)
[Tree] (config>service>vprn>l2tp>group df-bit-lac)
[Tree] (config>service>vprn>l2tp>group>tunnel df-bit-lac)
Full Contexts 
configure router l2tp group df-bit-lac
configure router l2tp group tunnel df-bit-lac
configure service vprn l2tp group df-bit-lac
configure service vprn l2tp group tunnel df-bit-lac
Description 

By default, the LAC df-bit-lac is set to default and sends all L2TP packets with the DF bit set to 1. The DF bit is configurable to allow downstream routers to fragment the L2TP packets. The LAC will not fragment L2TP packets. L2TP packets that have a larger MTU size than what the LAC egress ports allows are dropped. The configuration of the df-bit can be overridden at different levels: l2tp, tunnel, and group. The configuration at the tunnel level overrides the configuration on both the group and l2tp levels. The configuration at the group level overrides the configuration on l2tp.

The no form of this command reverts to the default.

Default 

df-bit-lac default

Parameters 
always—
Specifies that the LAC sends all L2TP packets with the DF bit set to 1.
never—
Specifies that the LAC sends all L2TP packets with the DF bit set to 0.
default—
Follows the DF-bit configuration specified on upper levels.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.149. dh-group

dh-group

Syntax 
dh-group {1 | 2 | 5 | 14 | 15 | 19 | 20 | 21}
Context 
[Tree] (config>ipsec>ike-transform dh-group)
Full Contexts 
configure ipsec ike-transform dh-group
Description 

This command specifies the Diffie-Hellman group to be used in this IKE transform instance.

Default 

dh-group 2 (1024-bit — More Modular Exponential (MODP))

Parameters 
dh-group {1 | 2 | 5 | 14 | 15 | 19 | 20 | 21} —
Specifies which Diffie-Hellman group to use for calculating session keys. More bits provide a higher level of security, but require more processing. Three groups are supported with IKE-v1:

Group   1: 768 bits

Group   2: 1024 bits

Group   5: 1536 bits

Group 14: 2048 bits

Group 15: 3072 bits

Group 19: P-256 ECC Curve, 256 bits

Group 20: P-384 ECC Curve, 384 bits

Group 21: P-512 ECC Curve, 512 bits

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.150. dhcp

dhcp

Syntax 
dhcp
Context 
[Tree] (config>subscr-mgmt>msap-policy>vpls-only-sap-parameters dhcp)
Full Contexts 
configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp
Description 

Commands in this context configure DHCP parameters.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp

Syntax 
dhcp
Context 
[Tree] (config>service>ies>if dhcp)
[Tree] (config>service>ies>sub-if dhcp)
[Tree] (config>service>ies>sub-if>grp-if dhcp)
[Tree] (config>service>vpls>sap dhcp)
[Tree] (config>service>vpls>spoke-sdp dhcp)
[Tree] (config>service>vpls>mesh-sdp dhcp)
[Tree] (config>service>vprn dhcp)
[Tree] (config>service>vprn>if dhcp)
[Tree] (config>service>vprn>sub-if dhcp)
[Tree] (config>service>vprn>sub-if>grp-if dhcp)
Full Contexts 
configure service ies interface dhcp
configure service ies subscriber-interface dhcp
configure service ies subscriber-interface group-interface dhcp
configure service vpls mesh-sdp dhcp
configure service vpls sap dhcp
configure service vpls spoke-sdp dhcp
configure service vprn dhcp
configure service vprn interface dhcp
configure service vprn subscriber-interface dhcp
configure service vprn subscriber-interface group-interface dhcp
Description 

Commands in this context configure DHCP parameters.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  1. configure service ies subscriber-interface dhcp
  2. configure service vprn dhcp
  3. configure service vprn subscriber-interface dhcp
  4. configure service ies subscriber-interface group-interface dhcp
  5. configure service vprn subscriber-interface group-interface dhcp

All

  1. configure service vprn interface dhcp
  2. configure service vpls spoke-sdp dhcp
  3. configure service vpls sap dhcp
  4. configure service ies interface dhcp
  5. configure service vpls mesh-sdp dhcp

dhcp

Syntax 
[no] dhcp [interface ip-int-name]
[no] dhcp mac ieee-address
[no] dhcp sap sap-id
Context 
[Tree] (debug>router>ip dhcp)
Full Contexts 
debug router ip dhcp
Description 

This command enables DHCP debugging.

The no form of this command disables debugging.

Parameters 
ip-int-name—
Specifies the name of the IP interface, up to 32 characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
ieee-address—
Specifies the 48-bit MAC address for the static ARP in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee, and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.
sap-id—
Specifies the physical port identifier portion of the SAP definition.
Platforms 

All

dhcp

Syntax 
dhcp type direction {ingress | egress} script script
no dhcp type direction {ingress | egress}
Context 
[Tree] (config>python>py-policy dhcp)
Full Contexts 
configure python python-policy dhcp
Description 

This command specifies the Python script for the specified DHCPv4 packet type in the specified direction.

Multiple dhcp command configurations are allowed in the same Python policy.

The no form of this command reverts to the default.

Parameters 
type—
Specifies the message type of the event.
Values—
discover, offer, request, decline, ack, nak, release, inform, force-renew, lease-query, lease-unassigned, lease-unknown, lease-active

 

direction {ingress | egress}
Specifies whether the packet is being received by the system or being sent by the system.
script script
Specifies the name of the Python script, up to 32 characters, that is used to handle the specified message.
Platforms 

All

dhcp

Syntax 
dhcp
Context 
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges dhcp)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges dhcp)
Full Contexts 
configure service ies subscriber-interface group-interface wlan-gw ranges dhcp
configure service vprn subscriber-interface group-interface wlan-gw ranges dhcp
Description 

Commands in this context create DHCP configuration for WLAN-GW ISA subscribers (such as migrant subscribers).

dhcp

Syntax 
[no] dhcp
Context 
[Tree] (debug>service>id dhcp)
Full Contexts 
debug service id dhcp
Description 

Commands in this context perform DHCP debugging.

The no form of the command disables DHCP debugging.

Platforms 

All

dhcp

Syntax 
dhcp
Context 
[Tree] (config>app-assure>group>transit-ip-policy dhcp)
Full Contexts 
configure application-assurance group transit-ip-policy dhcp
Description 

This command enables dynamic DHCP-based management of transit aa-subs for the transit-ip-policy. This is mutually exclusive to other types management of transit subs for a given transit-ip-policy.

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dhcp

Syntax 
[no] dhcp
Context 
[Tree] (config>service>ies>if>sap>ipsec-gateway dhcp)
[Tree] (config>service>vprn>if>sap>ipsec-gateway dhcp)
Full Contexts 
configure service ies interface sap ipsec-gateway dhcp
configure service vprn interface sap ipsec-gateway dhcp
Description 

Commands in this context configure DHCPv4-based address assignment for IKEv2 remote-access tunnels.

The system acts as a DHCPv4 client on behalf of the IPsec client, and also a relay agent to relay DHCPv4 packets to the DHCPv4 server.

DHCPv4 DORA(Discovery/Offer/Request/Ack) exchange happens during IKEv2 remote-access tunnel setup. The system also supports standard renew.

In order to use this feature, the relay-proxy must be enabled on the corresponding interface (either the private interface or the interface that has the gi-address as the interface address).

Default 

no dhcp

dhcp

Syntax 
dhcp
Context 
[Tree] (config>router>if dhcp)
Full Contexts 
configure router interface dhcp
Description 

Commands in this context configure DHCP parameters.

Platforms 

All

dhcp

Syntax 
dhcp [include-user-class] [timeout timeout]
dhcp client-id [string ascii-string] [hex hex-string] [include-user-class] [timeout timeout]
no dhcp
Context 
[Tree] (bof>autoconfigure>ipv4 dhcp)
Full Contexts 
bof autoconfigure ipv4 dhcp
Description 

This command configures the IPv4 DHCP client for OOB management. The OOB management IPv4 can be set using a DHCP server offer.

The no form of this command disables IPv4 DHCP OOB management.

Default 

no dhcp

Parameters 
include-user-class—
Specifies to include Option 77 user class data in the offer.
client-id—
Specifies to include the client ID for IPv4 Option 61 for auto-discovery. The identifier is opaque and is in string format. By default, this is the chassis serial number.
timeout—
Specifies the DHCP offer timeout, in seconds.
Values—
1 to 65535

 

Default—
30
ascii-string—
Specifies the string format for this option, up to 127 characters.
hex-string—
Specifies the hexadecimal format for this option, up to 254 hex nibbles.
Values—
0x0 to 0xFFFFFFFF

 

Platforms 

7450 ESS-7, 7750 SR-1, 7750 SR-7, 7750 SR-1e, 7750 SR-s

dhcp

Syntax 
dhcp [include-user-class] [timeout timeout]
dhcp client-id duid-type [string ascii-string] [hex hex-string] [include-user-class] [timeout timeout]
no dhcp
Context 
[Tree] (bof>autoconfigure>ipv6 dhcp)
Full Contexts 
bof autoconfigure ipv6 dhcp
Description 

This command configures the IPv6 DHCP client for out-of-band (OOB) management. The OOB management IPv6 can be set using a DHCP server offer.

The no form of this command disables IPv6 DHCP client OOB management.

Default 

no dhcp

Parameters 
include-user-class—
Specifies to include Option 15 user class data in the offer.
client-id—
Specifies to include the client ID for IPv6 DHCP Option 1 for auto-discovery. The identifier is opaque and is in string format. By default, this is the chassis serial number.
seconds—
Specifies the DHCP client ID timeout, in seconds.
Values—
1 to 65535

 

duid-type—
Specifies the type code of the server DUID.
Values—
duid-link-local, duid-enterprise

 

ascii-string—
Specifies the string format for this option, up to 124 characters.
hex-string—
Specifies the hexadecimal format for this option, up to 248 hex nibbles.
Values—
0x0 to 0xFFFFFFFF

 

timeout—
Specifies the DHCP offer timeout, in seconds.
Values—
1 to 65535

 

Default—
30
Platforms 

7450 ESS-7, 7750 SR-1, 7750 SR-7, 7750 SR-1e, 7750 SR-s

dhcp

Syntax 
[no] dhcp
Context 
[Tree] (config>sys>security>cpu-protection>ip>included-protocols dhcp)
Full Contexts 
configure system security cpu-protection ip-src-monitoring included-protocols dhcp
Description 

This command includes the extracted IPv4 DHCP packets for ip-src-monitoring. IPv4 DHCP packets will be subject to the per-source-rate of CPU protection policies.

Default 

dhcp (Note this is different from the other protocols)

Platforms 

7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS

8.151. dhcp-client

dhcp-client

Syntax 
[no] dhcp-client
Context 
[Tree] (debug>router>l2tp>assignment-id>packet dhcp-client)
[Tree] (debug>router>l2tp>group>packet dhcp-client)
[Tree] (debug>router>l2tp>packet dhcp-client)
[Tree] (debug>router>l2tp>peer>packet dhcp-client)
Full Contexts 
debug router l2tp assignment-id packet dhcp-client
debug router l2tp group packet dhcp-client
debug router l2tp packet dhcp-client
debug router l2tp peer packet dhcp-client
Description 

This command enables debugging for DHCP client packet.

The no form of this command disables debugging for DHCP client packet.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp-client

Syntax 
dhcp-client [terminate-only]
no dhcp-client
Context 
[Tree] (debug>service>id>ppp>event dhcp-client)
Full Contexts 
debug service id ppp event dhcp-client
Description 

This command enable PPP event debug for DHCP client.

The no form of this command disables PPP event debugging for the DHCP client.

Parameters 
terminate-only—
Enables debug for local terminated PPP session.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp-client

Syntax 
[no] dhcp-client
Context 
[Tree] (debug>service>id>ppp>packet dhcp-client)
Full Contexts 
debug service id ppp packet dhcp-client
Description 

This command enables debugging for specific DHCP client packets.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp-client

Syntax 
dhcp-client
Context 
[Tree] (config>service>ies>sub-if>grp-if>pppoe dhcp-client)
[Tree] (config>service>vprn>sub-if>grp-if>pppoe dhcp-client)
Full Contexts 
configure service ies subscriber-interface group-interface pppoe dhcp-client
configure service vprn subscriber-interface group-interface pppoe dhcp-client
Description 

Commands in this context configure the PPPoE-to-DHCP options.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.152. dhcp-filter

dhcp-filter

Syntax 
dhcp-filter filter-id [create]
no dhcp-filter
Context 
[Tree] (config>filter dhcp-filter)
Full Contexts 
configure filter dhcp-filter
Description 

Commands in this context create and configure the specified DHCP filter policy.

Parameters 
filter-id—
Specifies the DHCP filter policy ID expressed as a decimal integer.
Values—
1 to 65535

 

create—
Keyword required to create the configuration context.
Platforms 

All

8.153. dhcp-leasetime-threshold

dhcp-leasetime-threshold

Syntax 
dhcp-leasetime-threshold [days days] [hrs hours] [min minutes] [sec seconds]
no dhcp-leasetime-threshold
Context 
[Tree] (config>system>persistence>options dhcp-leasetime-threshold)
Full Contexts 
configure system persistence options dhcp-leasetime-threshold
Description 

This command configures Dynamic Data Persistence (DDP) compact flash access optimization for DHCP leases.

The DHCP lease-time threshold controls the eligibility of a DHCP lease for persistency updates when no data other than the lease expiry time is to be updated. When the offered lease time of the DHCP lease is less than the configured threshold, the lease is flagged to skip persistency updates and will be installed with its full lease time upon a persistency recovery after a reboot.

The dhcp-leasetime-threshold command controls persistency updates for DHCPv4 and DHCPv6 leases for a DHCP relay or proxy and DHCPv4 leases for DHCP snooping (enabled with subscriber-mgmt) and a DHCP server (enabled with dhcp-server).

The no form of the command disables the DHCP lease time threshold.

Default 

no dhcp-leasetime-threshold

Parameters 
days—
Specifies the threshold in days.
Values—
0 to 7305

 

hours—
Specifies the threshold in hours.
Values—
0 to 23

 

minutes—
Specifies the threshold in minutes.
Values—
0 to 59

 

seconds—
Specifies the threshold in seconds.
Values—
0 to 59

 

Platforms 

All

dhcp-leasetime-threshold

Syntax 
dhcp-leasetime-threshold [days days] [hrs hours] [min minutes] [sec seconds]
no dhcp-leasetime-threshold
Context 
[Tree] (config>redundancy>multi-chassis>options>sub-mgmt dhcp-leasetime-threshold)
Full Contexts 
configure redundancy multi-chassis options sub-mgmt dhcp-leasetime-threshold
Description 

This command configures the DHCP lease time threshold to be eligible for MCS synchronization.

DHCP leases for the sub-mgmt MCS applications are eligible to skip synchronization if the committed lease time is less than the active threshold on a multi-chassis peer. The active threshold is the minimum value of the thresholds configured on the nodes at each end of a multi-chassis peer. The threshold is inactive when it is unconfigured on at least one end of the multi-chassis peer.

The no form of the command disables the DHCP lease time threshold.

Default 

no dhcp-leasetime-threshold

No threshold is active and all sub-mgmt DHCP leases are synchronized.

Parameters 
days—
Specifies the threshold in days.
Values—
0 to 1

 

hours—
Specifies the threshold in hours.
Values—
0 to 23

 

minutes—
Specifies the threshold in minutes.
Values—
0 to 59

 

seconds—
Specifies the threshold in seconds.
Values—
0 to 59

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.154. dhcp-options

dhcp-options

Syntax 
[no] dhcp-options
Context 
[Tree] (config>subscr-mgmt>auth-plcy>include-radius-attribute dhcp-options)
Full Contexts 
configure subscriber-mgmt authentication-policy include-radius-attribute dhcp-options
Description 

This command enables insertion of RADIUS VSA containing all DHCP options from DHCP discover (or DHCP request) message. The VSA contains all DHCP options in a form of the string. If required (the total length of all DHCP options exceeds 255B), multiple VSAs are included.

The no form of this command reverts to the default.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp-options

Syntax 
[no] dhcp-options
Context 
[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes dhcp-options)
[Tree] (config>aaa>isa-radius-plcy>auth-include-attributes dhcp-options)
Full Contexts 
configure aaa isa-radius-policy acct-include-attributes dhcp-options
configure aaa isa-radius-policy auth-include-attributes dhcp-options
Description 

This command enables insertion of RADIUS VSA containing all dhcp-options from dhcp-discover (or dhcp-request) message. The VSA contains all dhcp-options in a form of the string. If required (the total length of all dhcp-options exceeds 255B), multiple VSAs are included.

Default 

no dhcp-options

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.155. dhcp-pool

dhcp-pool

Syntax 
dhcp-pool
Context 
[Tree] (config>subscr-mgmt>vrgw>brg>brg-profile dhcp-pool)
Full Contexts 
configure subscriber-mgmt vrgw brg brg-profile dhcp-pool
Description 

Commands in this context configure per-subscriber IPv4 address pool parameters to be used for address allocation. Pools for different subscribers can overlap. Specific pool parameters can be overridden by RADIUS.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.156. dhcp-python-policy

dhcp-python-policy

Syntax 
dhcp-python-policy policy-name
no dhcp-python-policy
Context 
[Tree] (config>service>vpls>sap dhcp-python-policy)
Full Contexts 
configure service vpls sap dhcp-python-policy
Description 

This command specifies the name of the Python policy. The Python policy is created in the config>python>python-policy name context.

The no form of this command reverts to the default.

Parameters 
policy-name—
Specifies a Python policy name, up to 32 characters.
Platforms 

All

8.157. dhcp-server

dhcp-server

Syntax 
dhcp-server
Context 
[Tree] (config>system>persistence dhcp-server)
Full Contexts 
configure system persistence dhcp-server
Description 

This command configures DHCP server persistence parameters.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.158. dhcp-triggered

dhcp-triggered

Syntax 
[no] dhcp-triggered
Context 
[Tree] (config>subscr-mgmt>wlan-gw>ue-query>state dhcp-triggered)
Full Contexts 
configure subscriber-mgmt wlan-gw ue-query state dhcp-triggered
Description 

This command enables matching on UEs currently in a DHCP-triggered state. This query only filters UEs that are currently authenticating due to a DHCP, DHCPv6, or RS trigger, not RADIUS-authenticated UEs in an ESM, DSM, or portal state that were originally authenticated due to a DHCP, DHCPv6, or RS trigger.

The no form of this command disables matching on UEs in a DHCP-triggered state, unless all state matching is disabled.

Default 

no dhcp-triggered

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.159. dhcp-user-db

dhcp-user-db

Syntax 
dhcp-user-db local-user-db-name
no dhcp-user-db
Context 
[Tree] (config>service>vpls>sap dhcp-user-db)
Full Contexts 
configure service vpls sap dhcp-user-db
Description 

This command enabled access to LUDB for DHCPv4 hosts under the capture SAP. The name of this local user database must match the name of local user database configured under the config>service>vprn/ies>sub-if>group-if>dhcp context.

Parameters 
local-user-db—
Specifies the name of the local user database name up to 32 characters.
Platforms 

All

8.160. dhcp-vendor-class-id

dhcp-vendor-class-id

Syntax 
[no] dhcp-vendor-class-id
Context 
[Tree] (config>subscr-mgmt>auth-plcy>include-radius-attribute dhcp-vendor-class-id)
[Tree] (config>subscr-mgmt>acct-plcy>include-radius-attribute dhcp-vendor-class-id)
Full Contexts 
configure subscriber-mgmt radius-accounting-policy include-radius-attribute dhcp-vendor-class-id
configure subscriber-mgmt authentication-policy include-radius-attribute dhcp-vendor-class-id
Description 

This command includes the [26-6527-36] Alc-DHCP-Vendor-Class-Id attribute in authentication or RADIUS accounting messages. The content of the DHCP Vendor-Class-Identifier option (60) is mapped in this attribute.

The no form of this command reverts to the default.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp-vendor-class-id

Syntax 
[no] dhcp-vendor-class-id
Context 
[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes dhcp-vendor-class-id)
[Tree] (config>aaa>isa-radius-plcy>auth-include-attributes dhcp-vendor-class-id)
Full Contexts 
configure aaa isa-radius-policy acct-include-attributes dhcp-vendor-class-id
configure aaa isa-radius-policy auth-include-attributes dhcp-vendor-class-id
Description 

This command includes the “[26-6527-36] Alc-DHCP-Vendor-Class-Id” attribute in authentication or RADIUS accounting messages. The content of the DHCP Vendor-Class-Identifier option (60) is mapped in this attribute.

Default 

no dhcp-vendor-class-id

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.161. dhcp6

dhcp6

Syntax 
dhcp6
Context 
[Tree] (config>service>vpls>spoke-sdp dhcp6)
[Tree] (config>service>vpls>mesh-sdp dhcp6)
[Tree] (config>service>vpls>sap dhcp6)
[Tree] (config>service>ies>if dhcp6)
[Tree] (config>service>vprn dhcp6)
[Tree] (config>service>vprn>interface dhcp6)
[Tree] (config>service>vprn>sub-if dhcp6)
[Tree] (config>service>vprn>sub-if>grp-if dhcp6)
[Tree] (config>service>vprn>sub-if>grp-if>ipv6 dhcp6)
[Tree] (config>service>ies>sub-if>grp-if>ipv6 dhcp6)
[Tree] (config>service>ies>sub-if dhcp6)
[Tree] (config>service>ies>sub-if>grp-if dhcp6)
Full Contexts 
configure service ies interface dhcp6
configure service ies subscriber-interface dhcp6
configure service ies subscriber-interface group-interface dhcp6
configure service ies subscriber-interface group-interface ipv6 dhcp6
configure service vpls mesh-sdp dhcp6
configure service vpls sap dhcp6
configure service vpls spoke-sdp dhcp6
configure service vprn dhcp6
configure service vprn interface dhcp6
configure service vprn subscriber-interface dhcp6
configure service vprn subscriber-interface group-interface dhcp6
configure service vprn subscriber-interface group-interface ipv6 dhcp6
Description 

Commands in this context configure DHCPv6 parameters.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp6

Syntax 
dhcp6
Context 
[Tree] (config>system dhcp6)
Full Contexts 
configure system dhcp6
Description 

Commands in this context configure system-wide DHCPv6 parameters.

Platforms 

All

dhcp6

Syntax 
[no] dhcp6 [ip-int-name]
[no] dhcp6 client-identifier duid duid-hex-string [mask mask-hex-string]
[no] dhcp6 client-identifier link-layer-address lla-hex-string
[no] dhcp6 interface ip-int-name
[no] dhcp6 sap sap-id
Context 
[Tree] (debug>router>ip dhcp6)
Full Contexts 
debug router ip dhcp6
Description 

This command enables DHCPv6 debugging with optional interface, SAP, and client-identifier match criteria to filter the debug output.

The no form of this command disables debugging.

Parameters 
ip-int-name—
Specifies the name of an existing IP interface, up to 32 characters. Up to four DHCPv6 interface match criteria can be specified per routing instance.
client-identifier
Specifies a client identifier option match criteria.
duid duid-hex-string—
Specifies a hexadecimal value for an opaque match on the client DUID in the client identifier option. When the actual length of the client DUID is longer than the length of the specified hex-string, only the left most octets are matched. Up to four DHCPv6 client-identifier match criteria can be specified per routing instance.
Values—
0x0 to 0xFFFFFFFF (maximum 260 hex nibbles)

 

mask mask-hex-string—
Specifies an optional substring match criteria. When a mask is specified, both hex-string lengths must be equal.
Values—
0x0 to 0xFFFFFFFF (maximum 260 hex nibbles)

 

link-layer-address lla-hex-string—
Specifies a hexadecimal value for a link layer address field match of a type 1 (DUID-LLT) or type 3 (DUID-LL) client DUID in the client identifier option. When the actual length of the link layer address field is longer than the length of the specified hex-string, only the left most octets are matched. Up to four DHCPv6 client-identifier match criteria can be specified per routing instance.
Values—
0x0 to 0xFFFFFFFF (maximum 252 hex nibbles)

 

sap-id—
Specifies an existing SAP identifier. Up to four DHCPv6 SAP match criteria can be specified per routing instance.
Platforms 

All

dhcp6

Syntax 
dhcp6 type direction {ingress | egress} script script
no dhcp6 type direction {ingress | egress}
Context 
[Tree] (config>python>py-policy dhcp6)
Full Contexts 
configure python python-policy dhcp6
Description 

This command specifies the Python script for the specified DHCPv6 packet type in the specified direction.

Multiple dhcps command configurations are allowed in the same Python policy.

The no form of this command reverts to the default.

Parameters 
type—
Specifies the message type of the event.
Values—
solicit, advertise, request, confirm, renew, rebind, reply, release, decline, reconfigure, info-request, relay-forward, relay-reply

 

direction {ingress | egress}
Specifies whether the event is incoming or outgoing.
script
Specifies the name of the Python script, up to 32 characters, that will be used to handle the specified message.
Platforms 

All

dhcp6

Syntax 
dhcp6
Context 
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges dhcp6)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges dhcp6)
Full Contexts 
configure service ies subscriber-interface group-interface wlan-gw ranges dhcp6
configure service vprn subscriber-interface group-interface wlan-gw ranges dhcp6
Description 

Commands in this context create DHCPv6 configuration for WLAN-GW ISA subscribers.

dhcp6

Syntax 
[no] dhcp6
Context 
[Tree] (config>service>ies>if>sap>ipsec-gateway dhcp6)
[Tree] (config>service>vprn>if>sap>ipsec-gateway dhcp6)
Full Contexts 
configure service ies interface sap ipsec-gateway dhcp6
configure service vprn interface sap ipsec-gateway dhcp6
Description 

Commands in this context configure DHCPv6-based address assignment for IKEv2 remote-access tunnels.

The system acts as a DHCPv6 client on behalf of the IPsec client, and also acts as a relay agent to relay DHCPv6 packets to the DHCPv6 server.

DHCPv6 exchange happens during IKEv2 remote-access tunnel setup. The system also supports standard renew.

Default 

no dhcp6

8.162. dhcp6-address

dhcp6-address

Syntax 
dhcp6-address ipv6-address
no dhcp6-address
Context 
[Tree] (config>subscr-mgmt>wlan-gw>ue-query dhcp6-address)
Full Contexts 
configure subscriber-mgmt wlan-gw ue-query dhcp6-address
Description 

This command enables matching on UEs with the specified DHCPv6 IA-NA address.

The no form of this command disables matching on the IA-NA address.

Default 

no dhcp6-address

Parameters 
ipv6-address—
Specifies the IA-NA address.
Values—

ipv6-address

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x: [0 to FFFF]H

d: [0 to 255]D

 

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.163. dhcp6-filter

dhcp6-filter

Syntax 
dhcp6-filter filter-id [create]
no dhcp6-filter
Context 
[Tree] (config>filter dhcp6-filter)
Full Contexts 
configure filter dhcp6-filter
Description 

Commands in this context create and configure the specified DHCPv6 filter policy.

The no form of this command reverts to the default.

Parameters 
filter-id—
Specifies the DHCPv6 filter policy ID expressed as a decimal integer.
Values—
1 to 65535

 

create—
Keyword required to create the configuration context.
Platforms 

All

8.164. dhcp6-options

dhcp6-options

Syntax 
[no] dhcp6-options
Context 
[Tree] (config>subscr-mgmt>auth-plcy>include dhcp6-options)
Full Contexts 
configure subscriber-mgmt authentication-policy include-radius-attribute dhcp6-options
Description 

This command copies DHCPv6 options from received DHCPv6 messages on ingress access and pass them to the RADIUS server in Accept-Request. The messages is carried in the RADIUS VSA Alc-ToServer-Dhcp6-Options.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp6-options

Syntax 
[no] dhcp6-options
Context 
[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes dhcp6-options)
Full Contexts 
configure aaa isa-radius-policy acct-include-attributes dhcp6-options
Description 

If a DHCPv6 stack is active for a UE, this attribute defines if options received in the last DHCPv6 message should be reflected.

Default 

no dhcp6-options

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

dhcp6-options

Syntax 
[no] dhcp6-options
Context 
[Tree] (config>aaa>isa-radius-plcy>auth-include-attributes dhcp6-options)
Full Contexts 
configure aaa isa-radius-policy auth-include-attributes dhcp6-options
Description 

If authentication was triggered by DHCPv6, this knob defines if options received in that DHCPv6 message should be reflected in the radius Access-Request.

Default 

no dhcp6-options

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.165. dhcp6-python-policy

dhcp6-python-policy

Syntax 
dhcp6-python-policy policy-name
no dhcp6-python-policy
Context 
[Tree] (config>service>vpls>sap dhcp6-python-policy)
Full Contexts 
configure service vpls sap dhcp6-python-policy
Description 

This command specified the Python policy for DHCPv6 packets sent/received on the capture SAP.

The no form of this command removes the policy name from the configuration.

Parameters 
policy name—
Specifies an existing Python policy name, up to 256 characters.
Platforms 

All

8.166. dhcp6-relay

dhcp6-relay

Syntax 
[no] dhcp6-relay
Context 
[Tree] (config>service>ies>if>ipv6 dhcp6-relay)
[Tree] (config>service>vprn>if>ipv6 dhcp6-relay)
Full Contexts 
configure service ies interface ipv6 dhcp6-relay
configure service vprn interface ipv6 dhcp6-relay
Description 

Commands in this context configure DHCPv6 relay parameters for the interface.

The no form of this command disables DHCPv6 relay.

Platforms 

All

8.167. dhcp6-server

dhcp6-server

Syntax 
[no] dhcp6-server
Context 
[Tree] (config>service>ies>if>ipv6 dhcp6-server)
[Tree] (config>service>vprn>if>ipv6 dhcp6-server)
Full Contexts 
configure service ies interface ipv6 dhcp6-server
configure service vprn interface ipv6 dhcp6-server
Description 

Commands in this context configure DHCPv6 server parameters for the interface.

The no form of this command disables the DHCP6 server.

Platforms 

All

8.168. dhcp6-user-db

dhcp6-user-db

Syntax 
dhcp6-user-db local-user-db
no dhcp6-user-db
Context 
[Tree] (config>service>vpls>sap dhcp6-user-db)
Full Contexts 
configure service vpls sap dhcp6-user-db
Description 

This command enabled access to LUDB for DHCPv6 hosts under the capture SAP. The name of this LUDB must match the name of the LUDB configured under the config>service>vprn/ies>sub-if>grp-if>dhcp hierarchy.

The no form of this command reverts to the default.

Parameters 
local-user-db —
Specifies the name of the local-user-database, up to 32 characters.
Platforms 

All

8.169. dhcpv4-nat

dhcpv4-nat

Syntax 
dhcpv4-nat
Context 
[Tree] (config>service>ies>sub-if>wlan-gw>pool-manager>dhcp6-client dhcpv4-nat)
[Tree] (config>service>vprn>sub-if>wlan-gw>pool-manager>dhcp6-client dhcpv4-nat)
Full Contexts 
configure service ies subscriber-interface wlan-gw pool-manager dhcpv6-client dhcpv4-nat
configure service vprn subscriber-interface wlan-gw pool-manager dhcpv6-client dhcpv4-nat
Description 

This node enables address pools for DHCPv4 NAT inside addresses. This configuration is only available in wholesale interfaces.

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.170. dhcpv6-client

dhcpv6-client

Syntax 
dhcpv6-client
Context 
[Tree] (config>service>ies>sub-if>wlan-gw>pool-manager dhcpv6-client)
[Tree] (config>service>vprn>sub-if>wlan-gw>pool-manager dhcpv6-client)
Full Contexts 
configure service ies subscriber-interface wlan-gw pool-manager dhcpv6-client
configure service vprn subscriber-interface wlan-gw pool-manager dhcpv6-client
Description 

This command configures the DHCPv6 client for the pool manager.

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.171. diameter

diameter

Syntax 
diameter type direction {ingress | egress} script script
no diameter type direction {ingress | egress}
Context 
[Tree] (config>python>py-policy diameter)
Full Contexts 
configure python python-policy diameter
Description 

This command specifies the Python script to use for the specified Diameter message type in the specified direction.

Multiple diameter command configurations are allowed in the same Python policy.

The no form of this command reverts to the default.

Parameters 
type—
Specifies the message type.

Message type

Application

Direction

aaa – AA Answer

Nasreq

ingress

aar – AA Request

Nasreq

egress

asa – Abort Session Answer

Gx, Gy

egress

asr – Abort Session Request

Gx, Gy

ingress

cca – Credit Control Answer

Gx, Gy

ingress

ccr – Credit Control Request

Gx, Gy

egress

cea – Capabilities Exchange Answer

Base

ingress

cer – Capabilities Exchange Request

Base

egress

dpa – Disconnect Peer Answer

Base

ingress/egress

dpr – Disconnect Peer Request

Base

ingress/egress

dwa – Device Watchdog Answer

Base

ingress/egress

dwr – Device Watchdog Request

Base

ingress/egress

raa – Re-Authentication Answer

Gx, Gy

egress

rar – Re-Authentication Request

Gx, Gy

ingress

direction {ingress | egress}
Specifies if the message is incoming or outgoing.
script
Specifies the name of the Python script, up to 32 characters, that is used to handle the specified message.
Platforms 

All

diameter

Syntax 
diameter
Context 
[Tree] (config>aaa diameter)
Full Contexts 
configure aaa diameter
Description 

Commands in this context configure Diameter parameters.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

diameter

Syntax 
[no] diameter
Context 
[Tree] (debug diameter)
Full Contexts 
debug diameter
Description 

This command enables debugging for diameter.

The no form of this command disables debugging.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

diameter

Syntax 
diameter
Context 
[Tree] (config>app-assure>group>transit-ip diameter)
Full Contexts 
configure application-assurance group transit-ip-policy diameter
Description 

Commands in this context configure dynamic Diameter-based management of transit AA subs for the transit IP policy. This is mutually exclusive to other types of management of transit subs for a given transit IP policy.

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.172. diameter-application-policy

diameter-application-policy

Syntax 
diameter-application-policy policy-name
no diameter-application-policy
Context 
[Tree] (config>service>vpls>sap diameter-application-policy)
[Tree] (config>service>ies>sub-if>grp-if diameter-application-policy)
[Tree] (config>service>vprn>sub-if>grp-if diameter-application-policy)
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host diameter-application-policy)
[Tree] (config>subscr-mgmt>loc-user-db>ppp>host diameter-application-policy)
Full Contexts 
configure service ies subscriber-interface group-interface diameter-application-policy
configure service vpls sap diameter-application-policy
configure service vprn subscriber-interface group-interface diameter-application-policy
configure subscriber-mgmt local-user-db ipoe host diameter-application-policy
configure subscriber-mgmt local-user-db ppp host diameter-application-policy
Description 

This command applies the diameter-application-policy to the processing of the host attachment requests.

The no form of this command reverts to the default value.

Parameters 
policy-name—
Specifies the name of the diameter policy, up to 32 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

diameter-application-policy

Syntax 
diameter-application-policy application-policy-name [create]
no diameter-application-policy application-policy-name
Context 
[Tree] (config>subscr-mgmt diameter-application-policy)
Full Contexts 
configure subscriber-mgmt diameter-application-policy
Description 

Commands in this context create and configure diameter application policy.

The no form of this command reverts to the default.

Parameters 
application-policy-name—
Specifies the name of the diameter policy, up to 32 characters.
create—
Specifies the keyword used to create a diameter application policy. The create keyword requirement can be enabled or disabled in the environment>create context.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.173. diameter-auth-policy

diameter-auth-policy

Syntax 
diameter-auth-policy name
no diameter-auth-policy
Context 
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host diameter-auth-policy)
[Tree] (config>subscr-mgmt>loc-user-db>ppp>host diameter-auth-policy)
Full Contexts 
configure subscriber-mgmt local-user-db ipoe host diameter-auth-policy
configure subscriber-mgmt local-user-db ppp host diameter-auth-policy
Description 

This command is used to configure the Diameter NASREQ application policy to use for authentication.

The no form of this command reverts to the default.

Parameters 
name—
Specifies the name of the Diameter NASREQ application policy, up to 32 characters, to use for authentication.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

diameter-auth-policy

Syntax 
diameter-auth-policy diameter-authentication-policy-name
no diameter-auth-policy
Context 
[Tree] (config>subscr-mgmt>gtp>apn-policy>apn diameter-auth-policy)
Full Contexts 
configure subscriber-mgmt gtp apn-policy apn diameter-auth-policy
Description 

This command configures the Diameter authentication policy with which the GTP connection is authenticated.

The no form of this command removes the authentication policy. Only new session setups are affected.

Default 

no diameter-auth-policy

Parameters 
diameter-authentication-policy-name—
Specifies the name of the authentication policy to be used, up to 32 characters.
Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

diameter-auth-policy

Syntax 
diameter-auth-policy name
no diameter-auth-policy
Context 
[Tree] (config>service>vpls>sap diameter-auth-policy)
Full Contexts 
configure service vpls sap diameter-auth-policy
Description 

This command is used to configure the Diameter NASREQ application policy to use for authentication.

The no form of this command reverts to the default value.

Parameters 
name—
Specifies the name of the Diameter NASREQ application policy, up to 32 characters, to use for authentication.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

diameter-auth-policy

Syntax 
diameter-auth-policy name
no diameter-auth-policy
Context 
[Tree] (config>service>ies>sub-if>grp-if diameter-auth-policy)
[Tree] (config>service>vprn>sub-if>grp-if diameter-auth-policy)
Full Contexts 
configure service ies subscriber-interface group-interface diameter-auth-policy
configure service vprn subscriber-interface group-interface diameter-auth-policy
Description 

This command is used to configure the Diameter NASREQ application policy to use for authentication.

The no form of this command reverts to the default.

Parameters 
name—
Specifies the name of the Diameter NASREQ application policy, up to 32 characters, to use for authentication.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.174. diameter-node

diameter-node

Syntax 
diameter-node origin-host-string destination-realm destination-realm-string
no diameter-node
Context 
[Tree] (config>subscr-mgmt>diam-appl-plcy diameter-node)
Full Contexts 
configure subscriber-mgmt diameter-application-policy diameter-node
Description 

This command configures the Diameter node for this Diameter application policy.

Parameters 
origin-host-string—
Specifies the Origin-Host AVP used by this Diameter policy, up to 80 characters.
destination-realm-string—
Specifies the Destination-Realm AVP used by this Diameter policy peer, up to 80 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.175. diameter-peer

diameter-peer

Syntax 
diameter-peer peer [psm-events]
no diameter-peer
Context 
[Tree] (debug>diameter diameter-peer)
Full Contexts 
debug diameter diameter-peer
Description 

This command restricts output to a specific peer.

The no form of this command disables debugging.

Parameters 
peer—
Specifies the peer, up to 32 characters.
psm-events—
Specifies to restrict output to the peer’s state machine (PSM).
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

diameter-peer

Syntax 
diameter-peer peer [psm-events]
no diameter-peer
Context 
[Tree] (debug>diam>diam-peer-plcy diameter-peer)
Full Contexts 
debug diameter diameter-peer-policy diameter-peer
Description 

This command restricts the debug output to messages on a specific peer within the diameter peer policy. Overrides the debug>diam>diam-peer debug command for the specified diameter peer policy. A single peer can be specified per diameter peer policy.

When no peer is specified at the diameter peer policy level, the debug output is restricted to the peer configured at the debug>diam level.

The no form of this command removes the peer from the debug>diam>diam-peer-plcy debug output.

Parameters 
peer—
Specifies a peer name, up to 32 characters.
psm-events—
Specifies to include Peer State Machine (PSM) events in the debug output.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.176. diameter-peer-policy

diameter-peer-policy

Syntax 
diameter-peer-policy peer-policy-name [role {client | proxy}] [create]
no diameter-peer-policy peer-policy-name
Context 
[Tree] (config>aaa diameter-peer-policy)
Full Contexts 
configure aaa diameter-peer-policy
Description 

This command is the foundation of the legacy Diameter base implementation in the SR OS node. It defines a Diameter client node in the SR OS and within, where the peering connections are defined. Various diameter applications (NASREQ, Gx, and Gy) can reference this policy.

This command applies only to the legacy Diameter base.

The no form of this command removes the Diameter node origin host string and destination realm from the configuration.

Parameters 
peer-policy-name—
Specifies the peer policy name, up to 32 characters.
role client—
Specifies that Diameter is configured as a client. The client initiates peering connections towards the server or Diameter proxy. Various applications such as NASREQ, Gx, and Gy are layered directly on top of the Diameter client.
Default—
role client
role proxy—
Specifies that the SR OS node is configured as an intermediary Diameter node in dual-homed topology. In such topology, there are two Diameter proxy nodes placed between dual-homed Diameter clients on one side and Diameter server on the other. Diameter proxy can assume an active or standby state.
create—
Keyword used to create the Diameter peer policy. The create keyword requirement can be enabled or disabled in the environment>create context.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

diameter-peer-policy

Syntax 
diameter-peer-policy referenced-policy-name
no diameter-peer-policy
Context 
[Tree] (config>service>ies>sub-if>grp-if diameter-peer-policy)
Full Contexts 
configure service ies subscriber-interface group-interface diameter-peer-policy
Description 

This command is used by an application (DCCA, Gx, policy-management application, and so on) to reference a base diameter peer policy that the application will use.

The no form of this command reverts to the default.

Parameters 
referenced-policy-name—
Specifies the name of the referenced policy.

diameter-peer-policy

Syntax 
diameter-peer-policy peer-policy-name
no diameter-peer-policy
Context 
[Tree] (config>subscr-mgmt>diam-appl-plcy diameter-peer-policy)
Full Contexts 
configure subscriber-mgmt diameter-application-policy diameter-peer-policy
Description 

The diameter-peer-policy command contain a legacy Diameter client node definition in SR OS is referenced by an application (NASREQ, Gx, and Gy). The application will then use this diameter-peer-policy to communicate with external Diameter nodes.

This command applies only to legacy implementations of Diameter base and it is mutually exclusive with the diameter-node command under the same hierarchy.

The no form of this command removes the peer policy name from the configuration.

Parameters 
peer-policy-name—
Specifies the peer policy name, up to 32 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

diameter-peer-policy

Syntax 
diameter-peer-policy policy
no diameter-peer-policy policy
Context 
[Tree] (debug>diam diameter-peer-policy)
Full Contexts 
debug diameter diameter-peer-policy
Description 

This command restricts the debug output to messages on peers of a specific diameter peer policy. Up to eight diameter peer policies can be specified.

The no form of this command removes the specified diameter peer policy and all debug statement under this policy from the debug configuration.

Parameters 
policy—
Specifies the diameter peer policy name, up to 32 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.177. diameter-proxy

diameter-proxy

Syntax 
[no] diameter-proxy
Context 
[Tree] (configure>redundancy>multi-chassis>peer>sync diameter-proxy)
Full Contexts 
configure redundancy multi-chassis peer sync diameter-proxy
Description 

This command enables Diameter redundancy in dual-homed environment. This command is used to synchronize Diameter proxy parameters between two redundant SR OS nodes. The parameters that are synchronized are:

  1. chassis system MAC
  2. Diameter proxy states
  3. Origin-State-Id

This command is applicable only to legacy implementations of Diameter base in the SR OS.

The no form of this command disables Diameter redundancy.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.178. diff

diff

Syntax 
diff
Context 
[Tree] (config>app-assure>group>policy diff)
Full Contexts 
configure application-assurance group policy diff
Description 

This command compares the newly configured policy against the operational policy.

8.179. diffserv-te

diffserv-te

Syntax 
diffserv-te [mam | rdm]
no diffserv-te
Context 
[Tree] (config>router>rsvp diffserv-te)
Full Contexts 
configure router rsvp diffserv-te
Description 

This command enabled Diff-Serv TE on the node.

When this command is enabled, IS-IS and OSPF will start advertising available bandwidth for each TE class configured under the diffserv-te node. This command will only have effect if the operator has already enabled TE at the IS-IS and/or OSPF routing protocol levels:

config>router>isis>traffic-engineering

and/or:

config>router>ospf>traffic-engineering

IGP will advertise for each RSVP interface in the system the available bandwidth in each TE class in the unreserved bandwidth TE parameter for that class. In addition, IGP will continue to advertise the existing Maximum Reservable Link Bandwidth TE parameter to mean the maximum bandwidth that can be booked on a given interface by all classes. The value advertised is adjusted with the link subscription percentage factor configured in the config>router>rsvp>interface context.

The user configures the following parameters for the operation of Diff-Serv:

  1. Definition of TE classes, TE Class = {Class Type (CT), LSP priority}.
  2. Mapping of the system forwarding classes to the Diff-Serv Class Type (CT).
  3. Configuration of the percentage of RSVP interface bandwidth each CT shares, that is, the Bandwidth Constraint (BC).

When Diff-Serv TE is enabled, the system will automatically enable the Max Allocation Model (MAM) Admission Control Policy. MAM represents the bandwidth constraint model for the admission control of an LSP reservation to a link. This is the only Admission Control Policy supported in this release.

Each CT shares a percentage of the Maximum Reservable Link Bandwidth through the user-configured Bandwidth Constraint (BC) for this CT. The Maximum Reservable Link Bandwidth is the link bandwidth multiplied by the RSVP interface subscription factor.

The sum of all BC values across all CTs will not exceed the Maximum Reservable Link Bandwidth. In other words, the following rule is enforced:

SUM (BCc) =< Max-Reservable-Bandwidth, 0 <= c <= 7

An LSP of class-type CTc, setup priority p, holding priority h (h=<p), and bandwidth B is admitted into a link if the following condition is satisfied:

B <= Unreserved Bandwidth for TE-Class[i]

where TE-Class [i] maps to < CTc , p > in the definition of the TE classes on the node. The bandwidth reservation is effected at the holding priority, that is, in TE-class [j] = <CTc, h>. Thus, the reserved bandwidth for CTc and the unreserved bandwidth for the TE classes using CTc are updated as follows:

Reserved(CTc) = Reserved(CTc) + B

Unreserved TE-Class [j] = BCc - SUM (Reserved(CTc,q)) for 0<= q <= h

Unreserved TE-Class [i] = BCc - SUM (Reserved(CTc,q)) for 0<= q <= p

The same is done to update the unreserved bandwidth for any other TE class making use of the same CTc. These new values are advertised to the rest of the network at the next IGP-TE flooding.

The Russian Doll Model (RDM) LSP admission control policy allows bandwidth sharing across Class Types. It provides a hierarchical model by which the reserved bandwidth of a CT is the sum of the reserved bandwidths of the numerically equal and higher CTs.

The RDM model is defined using the following equations:

SUM (Reserved (CTc)) <= BCb,

where the SUM is across all values of c in the range b <= c <= (MaxCT - 1), and BCb is the bandwidth constraint of CTb.

BC0= Max-Reservable-Bandwidth, so that

SUM (Reserved(CTc)) <= Max-Reservable-Bandwidth,

where the SUM is across all values of c in the range 0 <= c <= (MaxCT - 1).

When Diff-Serv is disabled on the node, this model degenerates into a single default CT internally with eight preemption priorities and a non-configurable BC equal to the Maximum Reservable Link Bandwidth. This would behave exactly like CT0 with eight preemption priorities and BC= Maximum Reservable Link Bandwidth if Diff-Serv was enabled.

The enabling or disabling of Diff-Serv TE on the system requires the RSVP and MPLS protocol be shutdown.

The no form of this command reverts to the default value.

Default 

no diffserv-te

Parameters 
mam —
Defines the default admission control policy for Diff-Serv LSPs.
rdm—
Defines Russian doll model for the admission control policy of Diff-Serv LSPs.
Platforms 

All

8.180. digest-type

digest-type

Syntax 
digest-type {default | none | md5 | sha1}
no digest-type
Context 
[Tree] (config>service>vprn>l2tp>l2tpv3 digest-type)
[Tree] (config>service>vprn>l2tp>group>l2tpv3 digest-type)
Full Contexts 
configure service vprn l2tp group l2tpv3 digest-type
configure service vprn l2tp l2tpv3 digest-type
Description 

This command configures the hashing algorithm used to calculate the message digest.

The no form of this command returns the digest-type to none.

Default 

no digest-type

Parameters 
none—
Specifies that no digest should be used.
md5—
Specifies that the MD5 algorithm should be used.
sha1—
Specifies that the SHA1 algorithm should be used.
default—
When specified within the config>service>vprn>l2tp>group>l2tpv3 context, this is referencing to the digest-type configuration within the config>service>vprn>l2tp>l2tpv3 context.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.181. digital-coherent-optics

digital-coherent-optics

Syntax 
[no] digital-coherent-optics
Context 
[Tree] (config>port>transceiver digital-coherent-optics)
Full Contexts 
configure port transceiver digital-coherent-optics
Description 

This command specifies if a digital coherent optics module is used for this port.

The no form of this command specifies that the optical module used in this port is not a digital coherent optics module.

Default 

no digital-coherent-optics

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.182. dir

dir

Syntax 
dir [file-url] [sort-order {d | n | s}] [reverse]
Context 
[Tree] (file dir)
Full Contexts 
file dir
Description 

This command displays a list of files and subdirectories in a directory.

Parameters 
file-url—
Specifies the path or directory name.

Use the file-url with the optional wildcard (*) to reduce the number of files to list.

sort-order {d | n | s}—
Specifies the sort order.
Values—
d — date
n — name
s — size

 

reverse—
Reverses the sort order.
Default—
Lists all files in the current working directory.

local-url

[cflash-id/][file-path] up to 200 characters, including cflash-id directory length up to 99 each

remote-url

[{ftp:// | tftp://}login:pswd@remote-locn/][file-path]

up to 247 characters

directory length up to 99 characters each

remote-locn

[hostname | ipv4-address | [ipv6-address]]

ipv4-address

a.b.c.d

ipv6-address

x:x:x:x:x:x:x:x[-interface]

x:x:x:x:x:x:d.d.d.d[-interface]

x - [0 to FFFF]H

d - [0 to 255]D

interface - up to 32 characters, for link local addresses 255

cflash-id

cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:

Output 

The following output is an example of directory information.

Sample Output
A:cses-E12>file cf3:\ # dir
  - dir [<file-url>] [sort-order { d | n | s}] [reverse]
 
 <file-url>           : <local-url> | <remote-url>
                        local-url      - [<cflash-id>/][<file-path>]
                                         200 chars max, including cflash-id
                                         directory length 99 chars max each
                        remote-url     - [ftp://<login>:<pswd>@<remote-locn>/
                                         ][<file-path>]
                                         255 chars max
                                         directory length 99 chars max each
                        remote-locn    - [ <hostname> | <ipv4-address> |
                                         [<ipv6-address>]]
                        ipv4-address   - a.b.c.d
                        ipv6-address   - x:x:x:x:x:x:x:x[-interface]
                                         x:x:x:x:x:x:d.d.d.d[-interface]
                                         x - [0..FFFF]H
                                         d - [0..255]D
                                         interface - 32 chars max, for link
                                         local addresses
                        cflash-id      - cf1:|cf1-A:|cf1-B:|cf2:|cf2-A:|
                                         cf2-B:|cf3:|cf3-A:|cf3-B:
 < d | n | s>         : Sort order: d - date, n - name, s - size
 <reverse>            : keyword - reverse order
A:cses-E12>file cf3:\ # dir
Platforms 

All

8.183. direction

direction

Syntax 
direction direction
Context 
[Tree] (debug>router>l2tp>assignment-id>packet direction)
[Tree] (debug>router>l2tp>group>packet direction)
[Tree] (debug>router>l2tp>packet direction)
[Tree] (debug>router>l2tp>peer>packet direction)
Full Contexts 
debug router l2tp assignment-id packet direction
debug router l2tp group packet direction
debug router l2tp packet direction
debug router l2tp peer packet direction
Description 

This command enables debugging for packet direction.

Parameters 
direction—
Specifies the packet direction.
Values—
ingress, egress, both

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

direction

Syntax 
direction {ingress | egress | both}
Context 
[Tree] (debug>subscr-mgmt>vrgw>brg>pppoe-client>brg-id direction)
Full Contexts 
debug subscriber-mgmt vrgw brg pppoe-client brg-id direction
Description 

This command specifies if debugging should only include ingress, egress or all messages.

Default 

direction both

Parameters 
ingress—
Specifies that debugging only includes ingress messages.
egress—
Specifies that debugging only includes egress messages.
both—
Specifies that debugging includes both ingress and egress messages.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

direction

Syntax 
direction ipsec-direction
no direction
Context 
[Tree] (config>ipsec>static-sa direction)
Full Contexts 
configure ipsec static-sa direction
Description 

This command configures the direction for an IPsec manual SA.

The no form of this command reverts to the default value.

Default 

direction bidirectional

Parameters 
ipsec-direction—
Identifies the direction to which this static SA entry can be applied.
Values—
inbound, outbound, bidirectional

 

Platforms 

All

direction

Syntax 
direction direction
Context 
[Tree] (debug>router>pcp>pcp-server>packet direction)
Full Contexts 
debug router pcp pcp-server packet direction
Description 

This command enables debugging for packet direction.

Parameters 
direction—
Specifies the packet direction.
Values—
ingress, egress, both

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction

Syntax 
direction
Context 
[Tree] (config>system>security>keychain direction)
Full Contexts 
configure system security keychain direction
Description 

This command specifies the data type that indicates the TCP stream direction to apply the keychain.

Platforms 

All

8.184. direction-bit

direction-bit

Syntax 
[no] direction-bit
Context 
[Tree] (config>mirror>mirror-dest>encap>layer-3-encap direction-bit)
Full Contexts 
configure mirror mirror-dest encap layer-3-encap direction-bit
Description 

This command is used to steal one bit from the intercept-id in the LI-Shim and use it to indicate the direction of traffic flow for an LI session. Using a direction bit may be used by a LI Mediation Gateway to distinguish between the two directions of traffic flow for an LI session when both directions share a common mirror-dest, intercept-id and session-id. If the direction bit is enabled then the Mirror Header Version (2 bit mhv) in the LI-Shim will be set to binary 01, and the next bit after the mhv is set to 0 for ingress traffic and 1 for egress traffic.

For NAT based LI, ingress means the traffic is arriving at the node from the subscriber host (applies to the 7450 ESS and 7750 SR).

No changes are allowed to the direction-bit configuration once a gateway is configured.

Platforms 

All

direction-bit

Syntax 
[no] direction-bit
Context 
[Tree] (config>li>mirror-dest-template>layer-3-encap direction-bit)
Full Contexts 
configure li mirror-dest-template layer-3-encap direction-bit
Description 

This command enables and disables the use of one bit from the interception ID field in the LI-Shim header to be used to indicate the direction of mirrored traffic flow for an LI session. An LI Mediation Gateway can use a direction bit to distinguish between the two directions of traffic flow for an LI session when both directions share a common mirror destination, interception ID, and session ID. If the direction bit is enabled, the Mirror Header Version (2-bit MHV) in the LI-Shim header will be set to binary 01, and the next bit after the MHV is set to 0 for ingress traffic and 1 for egress traffic.

For NAT-based LI, ingress traffic arrives at the node from the subscriber host. No changes are allowed to the direction bit configuration after a gateway is configured.

The no form of this command disables the use of the bit as a direction indicator.

Platforms 

All

8.185. disable

disable

Syntax 
[no] disable
Context 
[Tree] (config>call-trace>location disable)
Full Contexts 
configure call-trace location disable
Description 

When configured, the specified compact flash will not be used by call-trace. The no form of this command enables the compact flash for use by call-trace.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.186. disable-4byte-asn

disable-4byte-asn

Syntax 
[no] disable-4byte-asn
Context 
[Tree] (config>subscr-mgmt>bgp-prng-plcy disable-4byte-asn)
Full Contexts 
configure subscriber-mgmt bgp-peering-policy disable-4byte-asn
Description 

This command disables the use of 4-byte ASNs. It can be configured at all 3 level of the hierarchy so it can be specified down to the per peer basis.

If this command is enabled 4-byte ASN support should not be negotiated with the associated remote peer.

The no form of this command resets the behavior to the default which is to enable the use of 4-byte ASN.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-4byte-asn

Syntax 
[no] disable-4byte-asn
Context 
[Tree] (config>service>vprn>bgp disable-4byte-asn)
[Tree] (config>service>vprn>bgp>group disable-4byte-asn)
[Tree] (config>service>vprn>bgp>group>neighbor disable-4byte-asn)
Full Contexts 
configure service vprn bgp disable-4byte-asn
configure service vprn bgp group disable-4byte-asn
configure service vprn bgp group neighbor disable-4byte-asn
Description 

This command disables the use of 4-byte ASNs. It can be configured at all 3 level of the hierarchy so it can be specified down to the per peer basis.

If this command is enabled 4-byte ASN support should not be negotiated with the associated remote peer(s).

The no form of this command resets the behavior to the default which is to enable the use of 4-byte ASN.

Platforms 

All

disable-4byte-asn

Syntax 
[no] disable-4byte-asn
Context 
[Tree] (config>router>bgp disable-4byte-asn)
[Tree] (config>router>bgp>group disable-4byte-asn)
[Tree] (config>router>bgp>group>neighbor disable-4byte-asn)
Full Contexts 
configure router bgp disable-4byte-asn
configure router bgp group disable-4byte-asn
configure router bgp group neighbor disable-4byte-asn
Description 

This command disables the support of 4-byte ASNs. It can be configured at all three levels of the hierarchy so it can be specified down to the per-peer basis.

If this command is enabled, 4-byte ASN support should not be negotiated with the associated remote peers.

The no form of this command resets the behavior to the default which is to enable the support of 4-byte ASN.

Default 

no disable-4byte-asn

Platforms 

All

8.187. disable-aging

disable-aging

Syntax 
[no] disable-aging
Context 
[Tree] (config>service>vpls disable-aging)
[Tree] (config>service>vpls>sap disable-aging)
[Tree] (config>service>vpls>spoke-sdp disable-aging)
[Tree] (config>service>template>vpls-template disable-aging)
[Tree] (config>service>vpls>vxlan disable-aging)
Full Contexts 
configure service template vpls-template disable-aging
configure service vpls disable-aging
configure service vpls sap disable-aging
configure service vpls spoke-sdp disable-aging
configure service vpls vxlan disable-aging
Description 

This command disables MAC address aging across a VPLS service, on a VPLS service SAP or spoke-SDP, or VXLAN instance with static binds. Learned MACs can be aged out if no packets are sourced from the MAC address for a period of time (aging time). In each VPLS service instance, there are independent aging timers for local learned MAC and remote learned MAC entries in the VPLS forwarding database (FDB).

The disable-aging command turns off aging for local and remote learned MAC addresses. When no disable-aging is specified for a VPLS, aging can be disabled for specific SAPs, spoke-SDPs, and VXLAN instances (or any combination) by entering the disable-aging command at the appropriate level.

When the disable-aging command is entered at the VPLS level, the aging state of individual SAPs or SDPs or VXLAN instance is ignored.

The no form of this command enables aging on the VPLS service.

Default 

no disable-aging

Except for VXLAN instances, where the disable-aging is the default mode

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  1. configure service vpls vxlan disable-aging

All

  1. configure service template vpls-template disable-aging
  2. configure service vpls disable-aging
  3. configure service vpls sap disable-aging
  4. configure service vpls spoke-sdp disable-aging

disable-aging

Syntax 
[no] disable-aging
Context 
[Tree] (config>service>pw-template disable-aging)
Full Contexts 
configure service pw-template disable-aging
Description 

This command disables MAC address aging across a service.

The no form of this command enables aging.

Default 

no disable-aging

Platforms 

All

8.188. disable-capability-negotiation

disable-capability-negotiation

Syntax 
[no] disable-capability-negotiation
Context 
[Tree] (config>service>vprn>bgp>group disable-capability-negotiation)
[Tree] (config>service>vprn>bgp>group>neighbor disable-capability-negotiation)
Full Contexts 
configure service vprn bgp group disable-capability-negotiation
configure service vprn bgp group neighbor disable-capability-negotiation
Description 

This command disables the exchange of capabilities. When command is enabled and after the peering is flapped, any new capabilities are not negotiated and strictly supports IPv4 routing exchanges with that peer.

The no form of this command removes this command from the configuration and restores the normal behavior.

Default 

no disable-capability-negotiation

Platforms 

All

disable-capability-negotiation

Syntax 
[no] disable-capability-negotiation
Context 
[Tree] (config>router>bgp>group disable-capability-negotiation)
[Tree] (config>router>bgp>group>neighbor disable-capability-negotiation)
Full Contexts 
configure router bgp group disable-capability-negotiation
configure router bgp group neighbor disable-capability-negotiation
Description 

This command disables capability negotiation. When the command is enabled and after the peering is flapped, any new capabilities are not negotiated and will strictly support IPv4 routing exchanges with that peer.

The no form of this command removes this command from the configuration and restores the normal behavior.

Default 

no disable-capability-negotiation

Platforms 

All

8.189. disable-client-reflect

disable-client-reflect

Syntax 
[no] disable-client-reflect
Context 
[Tree] (config>subscr-mgmt>bgp-prng-plcy disable-client-reflect)
Full Contexts 
configure subscriber-mgmt bgp-peering-policy disable-client-reflect
Description 

This command disables the reflection of routes by the route reflector to the group or neighbor. This only disables the reflection of routes from other client peers. Routes learned from non-client peers are still reflected to all clients.

The no form re-enables client reflection of routes to all client peers.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-client-reflect

Syntax 
[no] disable-client-reflect
Context 
[Tree] (config>service>vprn>bgp disable-client-reflect)
[Tree] (config>service>vprn>bgp>group disable-client-reflect)
[Tree] (config>service>vprn>bgp>group>neighbor disable-client-reflect)
Full Contexts 
configure service vprn bgp disable-client-reflect
configure service vprn bgp group disable-client-reflect
configure service vprn bgp group neighbor disable-client-reflect
Description 

This command disables the reflection of routes by the route reflector to the group or neighbor. This only disables the reflection of routes from other client peers. Routes learned from non-client peers are still reflected to all clients.

The no form re-enables client reflection of routes.

Default 

no disable-client-reflect

Platforms 

All

disable-client-reflect

Syntax 
[no] disable-client-reflect
Context 
[Tree] (config>router>bgp disable-client-reflect)
[Tree] (config>router>bgp>group disable-client-reflect)
[Tree] (config>router>bgp>group>neighbor disable-client-reflect)
Full Contexts 
configure router bgp disable-client-reflect
configure router bgp group disable-client-reflect
configure router bgp group neighbor disable-client-reflect
Description 

This command determines whether routes received from neighbors considered to be RR clients are reflected to other clients.

The no form enables client reflection of routes.

Default 

no disable-client-reflect

Platforms 

All

8.190. disable-communities

disable-communities

Syntax 
disable-communities [standard] [extended]
no disable-communities
Context 
[Tree] (config>subscr-mgmt>bgp-prng-plcy disable-communities)
Full Contexts 
configure subscriber-mgmt bgp-peering-policy disable-communities
Description 

This command configures BGP to disable sending communities.

The no form of this command reverts to the default.

Parameters 
standard—
Specifies standard communities that existed before VPRNs or 2547.
extended—
Specifies BGP communities used were expanded after the concept of 2547 was introduced, to include handling the VRF target.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-communities

Syntax 
disable-communities [standard] [extended] [large]
no disable-communities
Context 
[Tree] (config>service>vprn>bgp disable-communities)
[Tree] (config>service>vprn>bgp>group disable-communities)
[Tree] (config>service>vprn>bgp>group>neighbor disable-communities)
Full Contexts 
configure service vprn bgp disable-communities
configure service vprn bgp group disable-communities
configure service vprn bgp group neighbor disable-communities
Description 

This command configures BGP to disable sending standard, extended, or large communities to specific peers.

By default, all communities that are attached to a BGP route (any address family) are not stripped from the route when it is advertised to any type of peer: IBGP, EBGP or confed-EBGP.

Default 

no disable-communities

Parameters 
standard—
Specifies that standard 4-byte communities should be removed.
extended—
Specifies that 8-byte extended communities (of all types) should be removed.
large—
Specifies that 12-byte large communities should be removed.
Platforms 

All

disable-communities

Syntax 
disable-communities [standard] [extended] [large]
no disable-communities
Context 
[Tree] (config>router>bgp disable-communities)
[Tree] (config>router>bgp>group disable-communities)
[Tree] (config>router>bgp>group>neighbor disable-communities)
Full Contexts 
configure router bgp disable-communities
configure router bgp group disable-communities
configure router bgp group neighbor disable-communities
Description 

This command configures BGP to disable sending standard, extended, or large communities to specific peers.

By default, all communities that are attached to a BGP route (any address family) are not stripped from the route when it is advertised to any type of peer: IBGP, EBGP, or confed-EBGP.

Default 

no disable-communities

Parameters 
standard—
Advertise the Communities attribute to peers.
extended—
Advertise the Extended Communities attribute to peers.
large—
Advertise the Large Communities attribute to peers.
Platforms 

All

8.191. disable-cookies

disable-cookies

Syntax 
[no] disable-cookies
Context 
[Tree] (config>subscr-mgmt>ppp-policy disable-cookies)
Full Contexts 
configure subscriber-mgmt ppp-policy disable-cookies
Description 

This command disables the use of cookies.

The no form of this command enables cookies.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.192. disable-explicit-null

disable-explicit-null

Syntax 
[no] disable-explicit-null
Context 
[Tree] (config>router>bgp>label-allocation>label-ipv6 disable-explicit-null)
Full Contexts 
configure router bgp label-allocation label-ipv6 disable-explicit-null
Description 

This command controls the allocation and use of explicit null MPLS labels with labeled-unicast ipv6 routes.

When this command is enabled (no disable-explicit-null), the following behaviors apply:

  1. during the times when the router is required to act as the BGP next-hop of a label-unicast IPv6 route that it is advertising, it sets the BGP label value to IPv6 explicit null (value 2), forcing a POP behavior for received packets.
  2. received label-unicast IPv6 routes never create tunnels in TTM that can be used to resolve other BGP routes (with an IPv6 next-hop).
  3. a received label-unicast IPv6 route can be resolved by a label-ipv4 BGP tunnel that is transported over a stacked tunnel (SR-TE LSP or LDPoRSVP LSP)

When this command is disabled (disable-explicit-null), the following behaviors apply:

  1. during those times when the router is required to act as the BGP next-hop of a label-unicast IPv6 route that it is advertising, it sets the BGP label value to a proper value in the dynamic label range and programs a POP or SWAP operation for that label, depending on the origin of the route and various import policy actions that could apply to the route
  2. received label-unicast IPv6 routes that have a prefix length of 128 bits are automatically installed in TTM so that they can be used to resolve other (non-labeled-unicast) BGP routes (with an IPv6 next-hop)
  3. a received label-unicast ipv6 route cannot be resolved by a label-ipv4 BGP tunnel that is transported over a stacked tunnel (SR-TE LSP or LDPoRSVP LSP)
  4. the label-ipv6 routes used for ECMP towards an IPv6 destination cannot be a mix of routes with regular label values and routes with special (IPv6 explicit null) label values

Changes in the operational status do not cause the BGP sessions of the base router to reset.

Platforms 

All

8.193. disable-fast-external-failover

disable-fast-external-failover

Syntax 
[no] disable-fast-external-failover
Context 
[Tree] (config>subscr-mgmt>bgp-prng-plcy disable-fast-external-failover)
Full Contexts 
configure subscriber-mgmt bgp-peering-policy disable-fast-external-failover
Description 

This command configures BGP fast external failover.

The no form of this command reverts to the default.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-fast-external-failover

Syntax 
[no] disable-fast-external-failover
Context 
[Tree] (config>service>vprn>bgp disable-fast-external-failover)
[Tree] (config>service>vprn>bgp>group disable-fast-external-failover)
[Tree] (config>service>vprn>bgp>group>neighbor disable-fast-external-failover)
Full Contexts 
configure service vprn bgp disable-fast-external-failover
configure service vprn bgp group disable-fast-external-failover
configure service vprn bgp group neighbor disable-fast-external-failover
Description 

This command configures BGP fast external failover.

Platforms 

All

disable-fast-external-failover

Syntax 
[no] disable-fast-external-failover
Context 
[Tree] (config>router>bgp disable-fast-external-failover)
[Tree] (config>router>bgp>group disable-fast-external-failover)
[Tree] (config>router>bgp>group>neighbor disable-fast-external-failover)
Full Contexts 
configure router bgp disable-fast-external-failover
configure router bgp group disable-fast-external-failover
configure router bgp group neighbor disable-fast-external-failover
Description 

This command configures BGP fast external failover.

Default 

no disable-fast-external-failover

Platforms 

All

8.194. disable-graceful-shutdown

disable-graceful-shutdown

Syntax 
[no] disable-graceful-shutdown
Context 
[Tree] (config>system>login-control>ssh disable-graceful-shutdown)
Full Contexts 
configure system login-control ssh disable-graceful-shutdown
Description 

This command enables graceful shutdown of SSH sessions.

The no form of this command disables graceful shutdown of SSH sessions.

Platforms 

All

8.195. disable-ldp-sync

disable-ldp-sync

Syntax 
[no] disable-ldp-sync
Context 
[Tree] (config>router>isis disable-ldp-sync)
Full Contexts 
configure router isis disable-ldp-sync
Description 

This command disables the IGP-LDP synchronization feature on all interfaces participating in the OSPF or IS-IS routing protocol. When this command is executed, IGP immediately advertises the actual value of the link cost for all interfaces which have the IGP-LDP synchronization enabled if the currently advertised cost is different. It will then disable IGP-LDP synchronization for all interfaces. This command does not delete the interface configuration. The no form of this command has to be entered to re-enable IGP-LDP synchronization for this routing protocol.

The no form of this command restores the default settings and re-enables IGP-LDP synchronization on all interfaces participating in the OSPF or IS-IS routing protocol and for which the ldp-sync-timer is configured.

Default 

no disable-ldp-sync

Platforms 

All

disable-ldp-sync

Syntax 
[no] disable-ldp-sync
Context 
[Tree] (config>router>ospf disable-ldp-sync)
[Tree] (config>router>ospf3 disable-ldp-sync)
Full Contexts 
configure router ospf disable-ldp-sync
configure router ospf3 disable-ldp-sync
Description 

This command disables the IGP-LDP synchronization feature on all interfaces participating in the OSPF routing protocol. When this command is executed, IGP immediately advertises the actual value of the link cost for all interfaces which have the IGP-LDP synchronization enabled if the currently advertised cost is different. It will then disable IGP-LDP synchronization for all interfaces. This command does not delete the interface configuration. The no form of this command has to be entered to re-enable IGP-LDP synchronization for this routing protocol.

The no form of this command restores the default settings and re-enables IGP-LDP synchronization on all interfaces participating in the OSPF or IS-IS routing protocol and for which the ldp-sync-timer is configured.

Default 

no disable-ldp-sync

Platforms 

All

8.196. disable-learning

disable-learning

Syntax 
[no] disable-learning
Context 
[Tree] (config>service>vpls disable-learning)
[Tree] (config>service>vpls>sap disable-learning)
[Tree] (config>service>vpls>spoke-sdp disable-learning)
[Tree] (config>service>template>vpls-template disable-learning)
[Tree] (config>service>vpls>vxlan disable-learning)
Full Contexts 
configure service template vpls-template disable-learning
configure service vpls disable-learning
configure service vpls sap disable-learning
configure service vpls spoke-sdp disable-learning
configure service vpls vxlan disable-learning
Description 

This command disables learning of new MAC addresses in the VPLS forwarding database (FDB) for the service instance, SAP instance, spoke-SDP instance, or VXLAN instance.

When disable-learning is enabled, new source MAC addresses are not entered in the VPLS service forwarding database. This applies for both local and remote MAC addresses.

When no disable-learning is specified for a VPLS on a 7450 ESS, it is possible to disable learning for specific SAPs and/or spoke SDPs by entering the disable-learning command at the appropriate level.

When disable-learning is disabled, new source MAC addresses are learned and entered into the VPLS forwarding database.

This parameter is mainly used in conjunction with the discard-unknown command.

The no form of this command enables learning of MAC addresses.

Default 

no disable-learning

Normal MAC learning is enabled. The default mode for VXLAN instances is disable-learning.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  1. configure service vpls vxlan disable-learning

All

  1. configure service vpls disable-learning
  2. configure service template vpls-template disable-learning
  3. configure service vpls sap disable-learning
  4. configure service vpls spoke-sdp disable-learning

disable-learning

Syntax 
[no] disable-learning
Context 
[Tree] (config>service>pw-template disable-learning)
Full Contexts 
configure service pw-template disable-learning
Description 

This command enables learning of new MAC addresses.

This parameter is mainly used in conjunction with the discard-unknown command.

The no form of this command enables learning of MAC addresses.

Default 

no disable-learning (Normal MAC learning is enabled)

Platforms 

All

8.197. disable-route-table-install

disable-route-table-install

Syntax 
[no] disable-route-table-install
Context 
[Tree] (config>router>bgp disable-route-table-install)
Full Contexts 
configure router bgp disable-route-table-install
Description 

This command disables the installation of all IPv4, label-ipv4, IPv6 and label-ipv6 routes into the route table and tunnel table associated with the BGP instance.

Configuring this command prevents the advertisement of all IPv4, label-ipv4, IPv6 and label-ipv6 routes if there is a change of the BGP next-hop to one of the router’s own addresses. Typically, this is only useful on a router that is a control-plane route reflector (not in the datapath).

The no form of the command enables the installation of all IPv4, label-ipv4, IPv6 and label-ipv6 routes into the route table and tunnel table associated with the BGP instance.

Default 

no disable-route-table-install

Platforms 

All

disable-route-table-install

Syntax 
[no] disable-route-table-install
Context 
[Tree] (config>router>policy-options>policy-statement>default-action disable-route-table-install)
[Tree] (config>router>policy-options>policy-statement>entry>action disable-route-table-install)
Full Contexts 
configure router policy-options policy-statement default-action disable-route-table-install
configure router policy-options policy-statement entry action disable-route-table-install
Description 

This command specifies that BGP routes (IPv4, IPv6, label-ipv4, label-ipv6) matching the policy entry (or, depending on the context, the policy’s default-action) should not be installed in the route table, tunnel table (in the case of label-ipv4 routes), or IP FIB table.

This policy action has an effect only in BGP peer import policies. This policy action does not prevent the matched routes from contributing toward aggregate routes and does not prevent the matched routes from being advertised, even if next-hop-self has been applied. This means that incorrect use of this feature can blackhole traffic.

Marking label-ipv4 routes with this action does not prevent label-swap (ILM) entries from being programmed when such routes are re-advertised with a new BGP next-hop and label.

The no form of this command provides the default behavior of installing routes that are selected as the best path, ECMP path or backup path, depending on the circumstances.

Default 

no disable-route-table-install

Platforms 

All

8.198. disable-router-alert-check

disable-router-alert-check

Syntax 
[no] disable-router-alert-check
Context 
[Tree] (config>router>igmp>group-interface disable-router-alert-check)
[Tree] (config>router>igmp>if disable-router-alert-check)
[Tree] (config>router>mld>group-interface disable-router-alert-check)
[Tree] (config>service>vprn>igmp>group-interface disable-router-alert-check)
[Tree] (config>service>vprn>mld>group-interface disable-router-alert-check)
Full Contexts 
configure router igmp group-interface disable-router-alert-check
configure router igmp interface disable-router-alert-check
configure router mld group-interface disable-router-alert-check
configure service vprn igmp group-interface disable-router-alert-check
configure service vprn mld group-interface disable-router-alert-check
Description 

This command disables router alert checking for IGMP/MLD messages received on this interface.

The no form of this command enables router alert checking.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  1. configure router igmp group-interface disable-router-alert-check
  2. configure service vprn igmp group-interface disable-router-alert-check
  3. configure service vprn mld group-interface disable-router-alert-check
  4. configure router mld group-interface disable-router-alert-check

All

  1. configure router igmp interface disable-router-alert-check

disable-router-alert-check

Syntax 
[no] disable-router-alert-check
Context 
[Tree] (config>router>mld>if disable-router-alert-check)
Full Contexts 
configure router mld interface disable-router-alert-check
Description 

This command enables router alert checking for MLD messages received on this interface.

The no form of this command disables router alert checking.

Platforms 

All

disable-router-alert-check

Syntax 
[no] disable-router-alert-check
Context 
[Tree] (config>subscr-mgmt>igmp-policy disable-router-alert-check)
Full Contexts 
configure subscriber-mgmt igmp-policy disable-router-alert-check
Description 

This command disables router alert checking for IGMP messages received on this interface.

The no form of this command reverts to the default value.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-router-alert-check

Syntax 
[no] disable-router-alert-check
Context 
[Tree] (config>service>vprn>sub-if>grp-if>sap>igmp-host-tracking disable-router-alert-check)
Full Contexts 
configure service vprn subscriber-interface group-interface sap igmp-host-tracking disable-router-alert-check
Description 

This command disables the IGMP router alert check option.

The no form of this command enables the router alert check.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-router-alert-check

Syntax 
[no] disable-router-alert-check
Context 
[Tree] (config>subscr-mgmt>mld-policy disable-router-alert-check)
Full Contexts 
configure subscriber-mgmt mld-policy disable-router-alert-check
Description 

This command disables router alert checking for MLD messages received on this interface.

The no form of this command enables router alert checking.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-router-alert-check

Syntax 
[no] disable-router-alert-check
Context 
[Tree] (config>service>vpls>mesh-sdp>igmp-snooping disable-router-alert-check)
[Tree] (config>service>vpls>mesh-sdp>mld-snooping disable-router-alert-check)
[Tree] (config>service>vpls>sap>igmp-snooping disable-router-alert-check)
[Tree] (config>service>vpls>sap>igmp-host-tracking disable-router-alert-check)
[Tree] (config>service>vpls>sap>mld-snooping disable-router-alert-check)
[Tree] (config>service>vpls>spoke-sdp>igmp-snooping disable-router-alert-check)
[Tree] (config>service>vpls>spoke-sdp>mld-snooping disable-router-alert-check)
Full Contexts 
configure service vpls mesh-sdp igmp-snooping disable-router-alert-check
configure service vpls mesh-sdp mld-snooping disable-router-alert-check
configure service vpls sap igmp-host-tracking disable-router-alert-check
configure service vpls sap igmp-snooping disable-router-alert-check
configure service vpls sap mld-snooping disable-router-alert-check
configure service vpls spoke-sdp igmp-snooping disable-router-alert-check
configure service vpls spoke-sdp mld-snooping disable-router-alert-check
Description 

This command disables the IGMP or MLD router alert check option.

The no form of this command enables the router alert check.

Default 

no disable-router-alert-check

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  1. configure service vpls sap igmp-host-tracking disable-router-alert-check

All

  1. configure service vpls sap igmp-snooping disable-router-alert-check
  2. configure service vpls mesh-sdp igmp-snooping disable-router-alert-check
  3. configure service vpls sap mld-snooping disable-router-alert-check
  4. configure service vpls spoke-sdp igmp-snooping disable-router-alert-check
  5. configure service vpls spoke-sdp mld-snooping disable-router-alert-check
  6. configure service vpls mesh-sdp mld-snooping disable-router-alert-check

disable-router-alert-check

Syntax 
[no] disable-router-alert-check
Context 
[Tree] (config>service>ies>sub-if>grp-if>sap>igmp-host-tracking disable-router-alert-check)
[Tree] (config>service>vprn>igmp>if disable-router-alert-check)
Full Contexts 
configure service ies subscriber-interface group-interface sap igmp-host-tracking disable-router-alert-check
configure service vprn igmp interface disable-router-alert-check
Description 

This command disables the IGMP router alert check option.

The no form of this command enables the router alert check.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  1. configure service ies subscriber-interface group-interface sap igmp-host-tracking disable-router-alert-check

All

  1. configure service vprn igmp interface disable-router-alert-check

disable-router-alert-check

Syntax 
[no] disable-router-alert-check
Context 
[Tree] (config>service>vprn>mld>if disable-router-alert-check)
Full Contexts 
configure service vprn mld interface disable-router-alert-check
Description 

This command disables router alert checking for MLD messages received on this interface.

The no form of this command enables the router alert checking.

Platforms 

All

8.199. disable-selective-fib

disable-selective-fib

Syntax 
[no] disable-selective-fib
Context 
[Tree] (config>service>vprn disable-selective-fib)
Full Contexts 
configure service vprn disable-selective-fib
Description 

This command specifies whether the system level selective FIB setting is overridden on this instance.

The no form of this command enables the selective FIB.

Default 

no disable-selective-fib

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

disable-selective-fib

Syntax 
[no] disable-selective-fib
Context 
[Tree] (config>router disable-selective-fib)
Full Contexts 
configure router disable-selective-fib
Description 

This command disables the selective FIB.

The no form of this command enables the selective FIB.

Default 

no disable-selective-fib

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.200. disable-send-bvpls-evpn-flush

disable-send-bvpls-evpn-flush

Syntax 
[no] disable-send-bvpls-evpn-flush
Context 
[Tree] (config>service>vpls>sap disable-send-bvpls-evpn-flush)
[Tree] (config>service>vpls>spoke-sdp disable-send-bvpls-evpn-flush)
Full Contexts 
configure service vpls sap disable-send-bvpls-evpn-flush
configure service vpls spoke-sdp disable-send-bvpls-evpn-flush
Description 

This command disables the ISID-based C-MAC flush indication when the corresponding SAP or spoke-SDP enters the operationally down state.

If the send-bvpls-evpn-flush is properly enabled, the no version of the command enables B-MAC/ISID route updates to be sent when the SAP or spoke-SDP is operationally down.

Default 

no disable-send-bvpls-evpn-flush

Platforms 

All

8.201. disable-shcv

disable-shcv

Syntax 
[no] disable-shcv [alarm] [hold-time seconds]
Context 
[Tree] (config>subscr-mgmt>ancp>policy>port-dwn disable-shcv)
Full Contexts 
configure subscriber-mgmt ancp ancp-policy port-down disable-shcv
Description 

When this command is configured, the node suspends SHCV for the hosts defined with this ANCP policy until the access node sends a port-up message. When the hold-time parameter is used, the node suspends SHCV for the period of time defined. If the hold-time parameter is not defined the node will suspend SHCV until a port-up message is received.

If the optional alarm flag is used, the node sends a SHCV alarm before suspending.

The no form of this command reverts to the default.

Parameters 
alarm—
Specifies that the node sends an alarm before suspending SHCV.
seconds—
Specifies the time that the node suspends SHCV.
Values—
0 to 7200

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.202. disable-soft-reset-extension

disable-soft-reset-extension

Syntax 
[no] disable-soft-reset-extension
Context 
[Tree] (config>lag>bfd disable-soft-reset-extension)
Full Contexts 
configure lag bfd disable-soft-reset-extension
Description 

This command disables the automatic extension of BFD timers during an IOM/IMM soft-reset. Normally, BFD session timers are automatically extended during a soft-reset operation on the IOMs and IMMs to avoid BFD sessions timing out and causing protocol events. However, in some cases this behavior is not desired as it could delay fast re-route transitions if the timers are in place. The disable-soft-reset-extension command controls this behavior.

Default 

no disable-soft-reset-extension

Platforms 

All

8.203. disable-stickiness

disable-stickiness

Syntax 
[no] disable-stickiness
Context 
[Tree] (config>aaa>radius-srv-plcy>servers disable-stickiness)
Full Contexts 
configure aaa radius-server-policy servers disable-stickiness
Description 

This command disables a subscriber RADIUS accounting session from sticking with a single server under normal working conditions. If a direct algorithm is used, all subscriber RADIUS sessions will go directly to the server with the lowest configured index. If a failure occurs, a new in-service server with the next lowest index is used. When the original server recovers, if stickiness is not disabled, all existing sessions will continue to use the new server. This command disables stickiness, and as a result, the recovered original RADIUS server will again service every subscriber. If a round-robin algorithm is used and stickiness is not disabled, an accounting session for a particular subscriber (or host, depending on the accounting mode) will stay with the same server. This command removes the stickiness and all subscriber accounting messages will go through the list of servers in a round-robin manner.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.204. disable-targeted-session

disable-targeted-session

Syntax 
[no] disable-targeted-session
Context 
[Tree] (config>router>ldp>targ-session disable-targeted-session)
Full Contexts 
configure router ldp targeted-session disable-targeted-session
Description 

This command disables support for SDP triggered automatic generated targeted sessions. Targeted sessions are LDP sessions between non-directly connected peers. The discovery messages for an indirect LDP session are addressed to the specified peer and not to the multicast address.

The no form of this command enables the set up of any targeted sessions.

Default 

no disable-targeted-session

Platforms 

All

8.205. disallow-igp

disallow-igp

Syntax 
[no] disallow-igp
Context 
[Tree] (config>router>static-route-entry>indirect>tunnel-next-hop disallow-igp)
Full Contexts 
configure router static-route-entry indirect tunnel-next-hop disallow-igp
Description 

This optional command determines if the associated static route can be resolved via an IGP next-hop in the RTM if no tunnel next-hops are found in TTM.

When configured, the associated static route will not be resolved to an available IGP route in the RTM.

The no form of this command returns the behavior to the default, which allows the static route to be resolved via an IGP route in the RTM if no tunnel next-hop can be found in the TTM.

Default 

no disallow-igp

Platforms 

All

8.206. discard

discard

Syntax 
discard [now]
Context 
[Tree] (candidate discard)
Full Contexts 
candidate discard
Description 

This command deletes the entire contents of the candidate configuration and exits the edit-cfg mode. Undo cannot be used to recover a candidate that has been discarded with candidate discard.

Parameters 
now—
Avoids a confirmation prompt for the discard.

8.207. discard-changes

discard-changes

Syntax 
[no] discard-changes
Context 
[Tree] (configure>system>security>profile>netconf>base-op-authorization discard-changes)
Full Contexts 
configure system security profile netconf base-op-authorization discard-changes
Description 

This command enables the NETCONF discard-changes operation.

The no form of this command disables the operation.

Default 

no discard-changes

Note:

The operation is enabled by default in the built-in system-generated administrative profile.

Platforms 

All

8.208. discard-rx-pause-frames

discard-rx-pause-frames

Syntax 
[no] discard-rx-pause-frames
Context 
[Tree] (config>port>ethernet discard-rx-pause-frames)
Full Contexts 
configure port ethernet discard-rx-pause-frames
Description 

This command discards received pause frames. Pause frames are used for local link flow control.

The no form of this command processes pause frames upon reception and the transmit side of the receiving port pauses in its transmissions.

Default 

no discard-rx-pause-frames

Platforms 

All

8.209. discard-unknown

discard-unknown

Syntax 
[no] discard-unknown
Context 
[Tree] (config>service>vpls discard-unknown)
[Tree] (config>service>template>vpls-template discard-unknown)
Full Contexts 
configure service template vpls-template discard-unknown
configure service vpls discard-unknown
Description 

By default, packets with unknown destination MAC addresses are flooded. If discard-unknown is enabled at the VPLS level, packets with unknown destination MAC address will be dropped instead (even when configured FDB size limits for VPLS or SAP are not yet reached).

The no form of this command allows flooding of packets with unknown destination MAC addresses in the VPLS.

Default 

no discard-unknown

Platforms 

All

8.210. discard-unknown-source

discard-unknown-source

Syntax 
[no] discard-unknown-source
Context 
[Tree] (config>service>template>vpls-sap-template discard-unknown-source)
[Tree] (config>service>template>vpls-template discard-unknown-source)
[Tree] (config>service>vpls>sap discard-unknown-source)
[Tree] (config>service>vpls>spoke-sdp discard-unknown-source)
[Tree] (config>service>vpls>vxlan discard-unknown-source)
Full Contexts 
configure service template vpls-sap-template discard-unknown-source
configure service template vpls-template discard-unknown-source
configure service vpls sap discard-unknown-source
configure service vpls spoke-sdp discard-unknown-source
configure service vpls vxlan discard-unknown-source
Description 

When this command is enabled, packets received on a SAP, a spoke-SDP, or a static VXLAN instance with an unknown source MAC address will be dropped only if the maximum number of MAC addresses for that SAP or spoke-SDP (see max-nbr-mac-addr [config>service>vpls>sap max-nbr-mac-addr, config>service>vpls>spoke-sdp max-nbr-mac-addr]) has been reached. If max-nbr-mac-addr has not been set for the SAP or spoke-SDP, enabling discard-unknown-source has no effect.

When disabled, the packets are forwarded based on the destination MAC addresses.

The no form of this command causes packets with an unknown source MAC addresses to be forwarded by destination MAC addresses in VPLS.

Default 

no discard-unknown-source

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  1. configure service vpls vxlan discard-unknown-source

All

  1. configure service vpls sap discard-unknown-source
  2. configure service vpls spoke-sdp discard-unknown-source
  3. configure service template vpls-sap-template discard-unknown-source

discard-unknown-source

Syntax 
[no] discard-unknown-source
Context 
[Tree] (config>service>pw-template discard-unknown-source)
Full Contexts 
configure service pw-template discard-unknown-source
Description 

When this command is enabled, packets received with an unknown source MAC address will be dropped only if the maximum number of MAC addresses have been reached.

When disabled, the packets are forwarded based on the destination MAC addresses.

The no form of this command causes packets with an unknown source MAC addresses to be forwarded by destination MAC addresses.

Default 

no discard-unknown-source

Platforms 

All

8.211. disconnect

disconnect

Syntax 
disconnect [address ip-address | session-id session-id | username user-name | {console | bluetooth | telnet | ftp | ssh | netconf | grpc}]
Context 
[Tree] (admin disconnect)
Full Contexts 
admin disconnect
Description 

This command disconnects a user from a session.

Issuing the disconnect command without any parameters will disconnect the session in which the command was executed.

If any of the session type options (for example, console, bluetooth, telnet, FTP, SSH) are specified, then only the respective sessions are affected.

If no session type options are specified, then all sessions from the IP address or from the specified user are disconnected.

Any task that the user is executing is terminated. FTP files accessed by the user will not be removed.

A major severity security log event is created specifying what was terminated and by whom.

Parameters 
ip-address
Specifies the IP address to disconnect, specified in dotted decimal notation.
Note:

IPv6 is supported on the 7750 SR and 7950 XRS.

Values—

ipv4-address

a.b.c.d

ipv6-address

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x - [0 to FFFF]H

d - [0 to 255]D

 

session-id—
The model-driven session ID. Can be obtained using the show system management-interface datastore-locks [detail] command.
user-name
Specifies the name of the user. The name can be up to 32 characters.
console—
Disconnects the console session.
bluetooth—
Disconnects the bluetooth session.
telnet—
Disconnects the Telnet session.
ftp—
Disconnects the FTP session.
ssh—
Disconnects the SSH session.
netconf—
Disconnects the NETCONF session.
grpc—
Disconnects the GRPC session.
Platforms 

All

8.212. discover-delay

discover-delay

Syntax 
discover-delay delay
no discover-delay
Context 
[Tree] (config>service>ies>sub-if>grp-if>dhcp>osel discover-delay)
[Tree] (config>service>vprn>sub-if>dhcp>osel discover-delay)
[Tree] (config>service>vprn>sub-if>grp-if>dhcp>osel discover-delay)
Full Contexts 
configure service ies subscriber-interface group-interface dhcp offer-selection discover-delay
configure service vprn subscriber-interface dhcp offer-selection discover-delay
configure service vprn subscriber-interface group-interface dhcp offer-selection discover-delay
Description 

This command configures the default time to delay DHCP Discover messages. The delay is applied to all DHCP Discover messages for which no per DHCP server or per client MAC delay is configured.

The no form of this command removes the delay.

Parameters 
delay
Specifies the default time to delay DHCP Discover messages, in deciseconds.
Values—
1 to 100

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

discover-delay

Syntax 
discover-delay delay
no discover-delay
Context 
[Tree] (config>service>ies>sub-if>grp-if>dhcp>osel>clnt-mac discover-delay)
[Tree] (config>service>vprn>sub-if>dhcp>osel>clnt-mac discover-delay)
[Tree] (config>service>vprn>sub-if>grp-if>dhcp>osel>clnt-mac discover-delay)
Full Contexts 
configure service ies subscriber-interface group-interface dhcp offer-selection client-mac discover-delay
configure service vprn subscriber-interface dhcp offer-selection client-mac discover-delay
configure service vprn subscriber-interface group-interface dhcp offer-selection client-mac discover-delay
Description 

This command configures the amount of time to delay DHCP Discover messages from odd or even source MAC addresses.

The no form of this command removes the delay.

Parameters 
delay
Specifies the amount of time to delay DHCP Discover messages from odd or even source MAC addresses, in deciseconds.
Values—
1 to 100

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

discover-delay

Syntax 
discover-delay delay
no discover-delay
Context 
[Tree] (config>service>ies>sub-if>grp-if>dhcp>osel>srvr discover-delay)
[Tree] (config>service>vprn>sub-if>dhcp>osel>srvr discover-delay)
[Tree] (config>service>vprn>sub-if>grp-if>dhcp>osel>srvr discover-delay)
Full Contexts 
configure service ies subscriber-interface group-interface dhcp offer-selection server discover-delay
configure service vprn subscriber-interface dhcp offer-selection server discover-delay
configure service vprn subscriber-interface group-interface dhcp offer-selection server discover-delay
Description 

This command configures the amount of time to delay DHCP Discover messages relayed to the server.

The no form of this command removes the delay.

Parameters 
delay
Specifies the amount of time to delay DHCP Discover messages relayed to the server, in deciseconds.
Values—
1 to 100

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.213. discovery

discovery

Syntax 
discovery [padi] [pado] [padr] [pads] [padt]
no discovery
Context 
[Tree] (debug>service>id>ppp>packet discovery)
Full Contexts 
debug service id ppp packet discovery
Description 

This command enables debugging for specific PPP discovery packets.

Parameters 
padi—
Enables debugging for PADI PPP discovery packets.
pado—
Enables debugging for PADO PPP discovery packets.
padr—
Enables debugging for PADR PPP discovery packets.
pads—
Enables debugging for PADS PPP discovery packets.
padt—
Enables debugging for PADT PPP discovery packets.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

discovery

Syntax 
discovery [padi] [pado] [padr] [pads] [padt]
Context 
[Tree] (debug>subscr-mgmt>vrgw>brg>pppoe-client>brg-id discovery)
Full Contexts 
debug subscriber-mgmt vrgw brg pppoe-client brg-id discovery
Description 

This command, limits debugging only to the specified messages in the discovery phase.

Parameters 
padi—
Limits debugging only to padi messages.
pado—
Limits debugging only to pado messages.
padr—
Limits debugging only to padr messages.
pads—
Limits debugging only to pads messages.
padt—
Limits debugging only to padt messages.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

discovery

Syntax 
discovery
Context 
[Tree] (config>port>ethernet>efm-oam discovery)
Full Contexts 
configure port ethernet efm-oam discovery
Description 

This is the top level of the hierarchy containing various discovery parameters that allow the operator to control certain aspects of the negotiation process as well as what action to take when there is a mismatch in peer capabilities.

Platforms 

All

8.214. discovery-interval

discovery-interval

Syntax 
discovery-interval interval-secs [boot interval-secs]
no discovery-interval
Context 
[Tree] (config>redundancy>multi-chassis>peer>mc-ipsec discovery-interval)
Full Contexts 
configure redundancy multi-chassis peer mc-ipsec discovery-interval
Description 

This command specifies the time interval of tunnel-group stays in the Discovery state. Interval-1 is used as discovery-interval when a new tunnel-group is added to multi-chassis redundancy (mp-ipsec); interval-2 is used as discovery-interval when the system boots up, it is optional, when it is not specified, the interval-1 will be used.

Default 

discovery-interval 300 boot 300

Parameters 
interval-secs—
Specifies the maximum duration, in seconds, of the discovery interval during which a newly activated multi- chassis IPsec tunnel-group will remain dormant while trying to contact its redundant peer. Groups held dormant in this manner will neither pass traffic nor negotiate security keys. This interval ends when either the redundant peer is contacted and a master election occurs, or when the maximum duration expires.
Values—
1 to 1800

 

boot interval-secs
Specifies the maximum duration of an interval immediately following system startup. When the normal discovery interval for a group would expire while the post-boot discovery interval is still active, then the group's discovery interval is extended until the post-boot discovery interval expires. This allows an extension to the normal discovery stage of groups following a chassis reboot, to account for the larger variance in routing.
Values—
1 to 1800

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.215. discriminator

discriminator

Syntax 
discriminator discriminator
no discriminator
Context 
[Tree] (config>bfd>seamless-bfd>reflector discriminator)
Full Contexts 
configure bfd seamless-bfd reflector discriminator
Description 

This command specifies the S-BFD discriminator.

The no form of this command removes the discriminator.

Parameters 
discriminator—
Specifies the discriminator value.
Values—
524288 to 526335

 

Platforms 

All

discriminator

Syntax 
discriminator discriminator
no discriminator
Context 
[Tree] (config>router>bfd>seamless-bfd>peer discriminator)
Full Contexts 
configure router bfd seamless-bfd peer discriminator
Description 

This command specifies the seamless BFD reflector discriminator for the remote peer node in the mapping table used by seamless BFD sessions initiated on the router.

The no form of this command removes the discriminator.

Parameters 
discriminator—
Specifies the discriminator of the remote node.
Values—
1 to 4294967295

 

Platforms 

All

8.216. disjointness-reference

disjointness-reference

Syntax 
[no] disjointness-reference
Context 
[Tree] (config>router>pcep>pcc>pce-assoc>div disjointness-reference)
Full Contexts 
configure router pcep pcc pce-associations diversity disjointness-reference
Description 

This command configures the value conveyed in the P-flag of the DISJOINTNESS-CONFIGURATION TLV. When enabled, it indicates that this LSP path is the reference path for the disjoint set of paths. The PCE must first compute the path of this LSP and then apply the requested disjointness type to compute the path of all other paths in the same diversity association ID.

The no form of this command sets the P-flag to false.

Default 

P-flag to false

Platforms 

All

8.217. disjointness-type

disjointness-type

Syntax 
disjointness-type {loose | strict}
no disjointness-type
Context 
[Tree] (config>router>pcep>pcc>pce-assoc>div disjointness-type)
Full Contexts 
configure router pcep pcc pce-associations diversity disjointness-type
Description 

This command configures the disjointness type for the association group.

The no form of this command reverts to the default value.

Default 

disjointness-type loose

Parameters 
loose—
Keyword to specify the loose disjointness type.
strict—
Keyword to specify the strict disjointness type.
Platforms 

All

8.218. dispersion

dispersion

Syntax 
dispersion dispersion
Context 
[Tree] (config>port>dwdm>coherent dispersion)
Full Contexts 
configure port dwdm coherent dispersion
Description 

This command configures the residual chromatic dispersion to be compensated when the coherent receiver is operating in manual dispersion control mode.

Default 

0

Parameters 
dispersion—
Specifies the dispersion compensation.
Values—
-50000 to 50000

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.219. display

display

Syntax 
display type {type} url-string format {format} [password [32 chars max]]
Context 
[Tree] (admin>certificate display)
Full Contexts 
admin certificate display
Description 

This command displays the content of an input file in plain text.

Note:

When displaying the key file content, only the key size and type are displayed.

The following list summarizes the formats supported by this command:

  1. System
    1. system format
    2. PKCS #12
    3. PKCS #7 PEM encoded
    4. PKCS #7 DER encoded
    5. RFC4945
  2. Certificate Request
    1. PKCS #10
  3. Key
    1. system format
    2. PKCS #12
  4. CRL
    1. system format
    2. PKCS #7 PEM encoded
    3. PKCS #7 DER encoded
    4. RFC4945
Parameters 
url-string—
Specifies the local CF card url of the input file.
Values—

url-string

<local-url> [up to 99 characters]

local-url

<cflash-id>/<file-path>

cflash-id

cf1: | cf2: | cf3:

 

type—
Specifies the type of input file.
Values—
cert, key, crl, cert-request

 

format—
Specifies the format of input file.
Values—
pkcs10, pkcs12, pkcs7-der, pkcs7-pem, pem, der

 

password—
Specifies the password to decrypt the input file in case that it is an encrypted PKCS#12 file, up to 99 characters.
Platforms 

All

8.220. display-config

display-config

Syntax 
display-config [detail | index]
Context 
[Tree] (admin display-config)
Full Contexts 
admin display-config
Description 

This command displays the system’s running configuration.

By default, only non-default settings are displayed.

Specifying the detail option displays all default and non-default configuration parameters.

Parameters 
detail—
Displays default and non-default configuration parameters.
index—
Displays only persistent-indices.
Platforms 

All

8.221. display-key

display-key

Syntax 
display-key type {ike | esp} gateway name name dynamic-tunnel ip-address:port
display-key type {ike | esp} tunnel ipsec-tunnel-name
Context 
[Tree] (admin>ipsec display-key)
Full Contexts 
admin ipsec display-key
Description 

This command displays existing IKE-SA or CHILD-SA keys..

Note:

This command does not work if config>ipsec>no show-ipsec-keys or no max-history-{esp|ike}-key-records is configured under corresponding ipsec-gw or ipsec-tunnel.

Parameters 
name—
The name, up to 32 characters.
ip-address—
The IP address of the remote client.
Values—

<ip-address>

ip-address

a.b.c.d

ipv6-address

x:x:x:x:x:x:x:x

x:x:x:x:x:x:d.d.d.d

x - [0 to FFFF]H

d - [0 to 255]D

 

port—
The port of the remote client.
Values—
0 to 65535

 

ipsec-tunnel-name—
The IPsec tunnel name, up to 32 characters.
Output 

The following outputs are examples of the admin ipsec display-key command.

Sample Output
admin ipsec display-key type ike gateway name "rw" dynamic-tunnel 11.1.1.100:500  
===============================================================================
IKE-SA history: max-num-records 3 current-num-saved-records 1
                local: 172.16.100.1 remote: 11.1.1.100 
record [0]: established time: 01/25/2018 20:51:55
  Initiator-SPI: d67ac71d73656496 Responder-SPI: d67ac71d73656496  Ike Version: 2
  SK_er: aes128, len: 16, val: a5da1c57f09a7eb7dbe9526cd52e2189
  SK_ar: sha1, len: 20, val: c11797bb8ebe5a1fadf46363bf5e763552bb45d0
  SK_ei: aes128, len: 16, val: 467124009cc577a8b23882a81ab9df70
  SK_ai: sha1, len: 20, val: 7dfef89bad31cb72d1ca8da2c04a9521993c7f9
Sample Output
admin ipsec display-key type esp gateway name "rw" dynamic-tunnel 11.1.1.100:500                              
ESP-SA history: max-num-records 48 current-num-saved-records 2ynamic-tunnel 11.1.1.100:500 
                local: 172.16.100.1 remote: 11.1.1.100 
record [0]: established time: 01/25/2018 20:54:56
  InSpi:  154532(0x00025ba4)
          encr-alg: aes128 len: 16 val: 0xd26aa32d8bd328b1e8332fa5c7b5eeaa
          auth-alg: sha1 len: 20 val: 0x0b37ddb824a43921d3b0ee81a6910eed065a9845
  OutSpi: 3286259439(0xc3e056ef)
          encr-alg: aes128 len: 16 val: 0x3acd95376ce04fcded2e0c80cc4289cf
          alg: sha1 len: 20 val: 0x9f5a46b5cdc572972b44cdbd36b5f824ab060634
record [1]: established time: 01/25/2018 20:51:55
  InSpi:  261186(0x0003fc42)
          encr-alg: aes128 len: 16 val: 0x8bf97675d37de3e3f6e634e3e11fc3aa
          auth-alg: sha1 len: 20 val: 0xf10c0f0821488cc14f8715cc323441fc967a79dd
  OutSpi: 3246917342(0xc18806de)
          encr-alg: aes128 len: 16 val: 0xf36aaaa7a3a09734fe4fc6cd0ac9043e
          alg: sha1 len: 20 val: 0x40c13a444e4fb1d42a13812f70b17041ed0f56ee
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.222. dist-cpu-protection

dist-cpu-protection

Syntax 
dist-cpu-protection policy-name
no dist-cpu-protection
Context 
[Tree] (config>subscr-mgmt>msap-policy dist-cpu-protection)
[Tree] (config>service>vprn>sub-if>grp-if>sap dist-cpu-protection)
Full Contexts 
configure service vprn subscriber-interface group-interface sap dist-cpu-protection
configure subscriber-mgmt msap-policy dist-cpu-protection
Description 

This command assigns a Distributed CPU Protection (DCP) policy to an MSAP policy. The DCP policy is automatically assigned to MSAPs created with this policy. A non-existent DCP policy can be assigned to an msap-policy because an MSAP policy is similar to a template that is applied in the MSAP creation. The DCP policy is validated at the time that the MSAP is created, and the MSAP creation is blocked (and an appropriate log event created) if the DCP policy does not exist.

Note:

For other types of objects (for example, normal non-MSAP SAPs and network interfaces) the DCP policy must exist before it can be assigned to the SAP.

The no form of this command removes the policy name from the configuration.

If no dist-cpu-protection policy is assigned to an MSAP policy, then the default access DCP policy (_default-access-policy) is used.

If no DCP functionality is required on the MSAP policy, then an empty DCP policy can be created and explicitly assigned to the MSAP policy.

Parameters 
policy-name—
Specifies the name of the DCP policy, up to 32 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dist-cpu-protection

Syntax 
dist-cpu-protection policy-name
no dist-cpu-protection
Context 
[Tree] (config>subscr-mgmt>sap-template dist-cpu-protection)
Full Contexts 
configure subscriber-mgmt sap-template dist-cpu-protection
Description 

This command assigns a DCP policy to a SAP template. The policy is automatically assigned to SAPs that are autocreated with this SAP template. The dist-cpu-protection policy must exit before it is assigned to a SAP template.

The no form of this command removes the policy name from the configuration.

If a DCP policy is not assigned to an SAP template, the default access DCP policy (_defaultaccess-policy) is used.

If no DCP functionality is required on the autocreated SAPs, an empty DCP policy can be created and explicitly assigned to the SAP template.

Default 

no dist-cpu-protection

Parameters 
policy-name—
Specifies the name of the DCP policy, up to 32 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dist-cpu-protection

Syntax 
dist-cpu-protection policy-name
no dist-cpu-protection
Context 
[Tree] (config>service>apipe>sap dist-cpu-protection)
[Tree] (config>service>cpipe>sap dist-cpu-protection)
[Tree] (config>service>epipe>sap dist-cpu-protection)
[Tree] (config>service>fpipe>sap dist-cpu-protection)
[Tree] (config>service>ipipe>sap dist-cpu-protection)
Full Contexts 
configure service apipe sap dist-cpu-protection
configure service cpipe sap dist-cpu-protection
configure service epipe sap dist-cpu-protection
configure service fpipe sap dist-cpu-protection
configure service ipipe sap dist-cpu-protection
Description 

This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid existing DCP policy can be assigned to a SAP or a network interface (this rule does not apply to templates, such as an msap-policy template).

If no dist-cpu-protection policy is assigned to a SAP, then the default access DCP policy (_default-access-policy) is used.

If no DCP functionality is required on the SAP, then an empty DCP policy can be created and explicitly assigned to the SAP.

Parameters 
policy-name—
Specifies the name of the DCP policy, up to 32 characters in length
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  1. configure service cpipe sap dist-cpu-protection
  2. configure service fpipe sap dist-cpu-protection

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e, 7950 XRS

  1. configure service apipe sap dist-cpu-protection

All

  1. configure service epipe sap dist-cpu-protection
  2. configure service ipipe sap dist-cpu-protection

dist-cpu-protection

Syntax 
dist-cpu-protection policy-name
no dist-cpu-protection
Context 
[Tree] (config>service>vpls>sap dist-cpu-protection)
Full Contexts 
configure service vpls sap dist-cpu-protection
Description 

This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid existing DCP policy can be assigned to a SAP or a network interface (this rule does not apply to templates, such as an msap-policy template).

Default 

If no dist-cpu-protection policy is assigned to a SAP, then the default access DCP policy (_default-access-policy) is used. If no DCP functionality is required on the SAP, then an empty DCP policy can be created and explicitly assigned to the SAP.

Parameters 
policy-name—
Specifies the name of the DCP policy, up to 32 characters in length
Platforms 

All

dist-cpu-protection

Syntax 
dist-cpu-protection policy-name
no dist-cpu-protection
Context 
[Tree] (config>service>ies>sub-if>grp-if>sap dist-cpu-protection)
[Tree] (config>service>ies>if>sap dist-cpu-protection)
Full Contexts 
configure service ies interface sap dist-cpu-protection
configure service ies subscriber-interface group-interface sap dist-cpu-protection
Description 

This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid DCP policy can be assigned to a SAP or a network interface. This rule does not apply to templates such as an msap-policy.

Default 

If no dist-cpu-protection policy is assigned to an SAP, then the default access DCP policy (default-access-policy) is used. If no DCP functionality is required on the SAP, then an empty DCP policy can be created and explicitly assigned to the SAP policy.

Parameters 
policy-name—
Specifies the name of the DCP policy, up to 32 characters in length
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  1. configure service ies subscriber-interface group-interface sap dist-cpu-protection

All

  1. configure service ies interface sap dist-cpu-protection

dist-cpu-protection

Syntax 
dist-cpu-protection policy-name
no dist-cpu-protection
Context 
[Tree] (config>service>vprn>nw-if dist-cpu-protection)
Full Contexts 
configure service vprn network-interface dist-cpu-protection
Description 

This command assigns a Distributed CPU Protection (DCP) policy to the network interface. Only a valid created DCP policy can be assigned to a network interface (this rule does not apply to templates such as an msap-policy).

Default 

If no dist-cpu-protection policy is assigned to the VPRN network interface, then the default network DCP policy (_default-network-policy) is used.

If no DCP functionality is required on the VPRN network interface then an empty DCP policy can be created and explicitly assigned to the VPRN network interface.

Parameters 
policy-name—
Specifies the name of the DCP policy, up to 32 characters in length
Platforms 

All

dist-cpu-protection

Syntax 
dist-cpu-protection policy-name
no dist-cpu-protection
Context 
[Tree] (config>service>vprn>if>sap dist-cpu-protection)
Full Contexts 
configure service vprn interface sap dist-cpu-protection
Description 

This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid created DCP policy can be assigned to a SAP or a network interface (This rule does not apply to templates such as an msap-policy).

Default 

If no dist-cpu-protection policy is assigned to an SAP policy, then the default access DCP policy (default-access-policy) is used. If no DCP functionality is required on the SAP policy, then an empty DCP policy can be created and explicitly assigned to the SAP policy.

Parameters 
policy-name—
Specifies the name of the DCP policy, up to 32 characters in length
Platforms 

All

dist-cpu-protection

Syntax 
dist-cpu-protection policy-name
no dist-cpu-protection
Context 
[Tree] (config>router>if dist-cpu-protection)
Full Contexts 
configure router interface dist-cpu-protection
Description 

This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid created DCP policy can be assigned to a SAP or a network interface (note that this rule does not apply to templates such as an msap-policy).

Default 

no dist-cpu-protection

Parameters 
policy-name—
Specifies the name of the DCP policy, up to 32 characters in length
Platforms 

All

dist-cpu-protection

Syntax 
dist-cpu-protection
Context 
[Tree] (config>system>security dist-cpu-protection)
Full Contexts 
configure system security dist-cpu-protection
Description 

Commands in this context configure the Distributed CPU Protection (DCP) feature.

Platforms 

All

8.223. dist-lag-rate-shared

dist-lag-rate-shared

Syntax 
[no] dist-lag-rate-shared
Context 
[Tree] (config>qos>port-scheduler-policy dist-lag-rate-shared)
Full Contexts 
configure qos port-scheduler-policy dist-lag-rate-shared
Description 

This command enables sharing of rates when the port on which this port-scheduler-policy is configured is part of a LAG configured in distribute mode.

When enabled, the absolute rate values configured as part of the max-rate, PIR/CIR group rates and PIR/CIR level rates are shared across the member ports of the LAG when configured in distribute mode.

This command does not have any effect when the port on which this port-scheduler-policy is configured is part of a LAG in link or port-fair mode. Similarly, when rates are configured as a percent-rate, this parameter is ignored.

Platforms 

All

8.224. distinguisher

distinguisher

Syntax 
distinguisher id
no distinguisher
Context 
[Tree] (config>router>segment-routing>sr-policies>static-policy distinguisher)
Full Contexts 
configure router segment-routing sr-policies static-policy distinguisher
Description 

This command associates a distinguisher value with a statically defined segment routing policy. This is a mandatory parameter and configuration command for non-local segment routing policies (for which the head-end parameter is set to a value other than “local”). Every non-local segment routing policy must have a unique distinguisher value. When a non-local static segment routing policy is imported into BGP and originated as a BGP route, the configured distinguisher value is copied into the NLRI of the route.

The no form of this command removes the distinguisher association.

Default 

no distinguisher

Parameters 
id—
Specifies the distinguisher ID.
Values—
1 to 4294967295

 

Platforms 

All

distinguisher

Syntax 
distinguisher distinguisher-id
no distinguisher
Context 
[Tree] (config>router>policy-options>policy-statement>entry>from distinguisher)
Full Contexts 
configure router policy-options policy-statement entry from distinguisher
Description 

This command configures an SR Policy distinguisher as a route policy match criterion. This match criterion is only used in import policies.

The no form of this command removes the distinguisher ID match criterion from the configuration.

Parameters 
distinguisher-id—
Specifies the SR policy distinguisher ID.
Values—
0 to 4294967295

 

Platforms 

All

8.225. distributed-sub-mgmt

distributed-sub-mgmt

Syntax 
distributed-sub-mgmt
Context 
[Tree] (config>service>vprn>wlan-gw distributed-sub-mgmt)
Full Contexts 
configure service vprn wlan-gw distributed-sub-mgmt
Description 

Commands in this context configure Distributed Subscriber Management (DSM) for soft GRE group interface and for ranges of IEEE 802.1q VLAN tags in soft GRE group interfaces.

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

distributed-sub-mgmt

Syntax 
distributed-sub-mgmt
Context 
[Tree] (config>subscr-mgmt>wlan-gw distributed-sub-mgmt)
[Tree] (config>router>wlan-gw distributed-sub-mgmt)
[Tree] (config>service>vprn>wlan-gw distributed-sub-mgmt)
Full Contexts 
configure router wlan-gw distributed-sub-mgmt
configure service vprn wlan-gw distributed-sub-mgmt
configure subscriber-mgmt wlan-gw distributed-sub-mgmt
Description 

Commands in this context configure profiles, templates and policies that can be applied to DSM subscribers.

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

distributed-sub-mgmt

Syntax 
[no] distributed-sub-mgmt
Context 
[Tree] (config>isa>wlan-gw-group distributed-sub-mgmt)
Full Contexts 
configure isa wlan-gw-group distributed-sub-mgmt
Description 

This command configures the WLAN gateway distributed subscriber management.

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

distributed-sub-mgmt

Syntax 
distributed-sub-mgmt
Context 
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range distributed-sub-mgmt)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range distributed-sub-mgmt)
Full Contexts 
configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt
configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt
Description 

Commands in this context configure distributed-sub-mgmt configuration per vlan-range. This also includes vlan-range default, which makes this configuration applicable to the wlan-gw group-interface.

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.226. diversity

diversity

Syntax 
[no] diversity association-name
Context 
[Tree] (config>router>pcep>pcc>pce-assoc diversity)
Full Contexts 
configure router pcep pcc pce-associations diversity
Description 

This command creates a named diversity association from which the parameters for the specified diversity association are configured.

The no form of the command deletes the specified diversity association.

Parameters 
association-name—
Specifies the name of the diversity association, up to 32 characters.
Platforms 

All

diversity

Syntax 
[no] diversity diversity-assoc-name
Context 
[Tree] (config>router>mpls>lsp>pce-assoc diversity)
[Tree] (config>router>mpls>lsp-template>pce-assoc diversity)
Full Contexts 
configure router mpls lsp pce-associations diversity
configure router mpls lsp-template pce-associations diversity
Description 

This command binds the LSP to a named diversity association. The diversity association must exist under the PCC. Up to five diversity associations can be configured per LSP.

The no form of the command removes the LSP binding from the specified diversity association.

Parameters 
diversity-assoc-name—
Specifies the name of an existing diversity association, up to 32 characters.
Platforms 

All

8.227. diversity-type

diversity-type

Syntax 
diversity-type {link | node | srlg-link | srlg-node}
no diversity-type
Context 
[Tree] (config>router>pcep>pcc>pce-assoc>div diversity-type)
Full Contexts 
configure router pcep pcc pce-associations diversity diversity-type
Description 

This command configures the diversity type for the association group. This command is mandatory. If the command is not configured, the system does not validate the association configuration.

The no form of the command reverts to the default value.

Default 

no diversity-type

Parameters 
link—
Keyword to specify the link diversity type.
node—
Keyword to specify the node diversity type.
srlg-link—
Keyword to specify the SRLG-link diversity type.
srlg-node—
Keyword to specify the SRLG-node diversity type.
Platforms 

All

8.228. divert

divert

Syntax 
[no] divert
Context 
[Tree] (config>app-assure>group>policy>app-profile divert)
Full Contexts 
configure application-assurance group policy app-profile divert
Description 

This command enables the redirection of traffic to AA ISA for the system-wide forwarding classes diverted to application assurance (divert-fc) for AA subscribers using this application profile.

The no form of this command stops redirect of traffic to AA ISAs for the AA subscribers using this application profile.

Default 

no divert

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.229. divert-fc

divert-fc

Syntax 
[no] divert-fc fc-name
Context 
[Tree] (config>isa>aa-grp divert-fc)
Full Contexts 
configure isa application-assurance-group divert-fc
Description 

This command selects a forwarding class in the system to be diverted to an application assurance engine for this application assurance group. Only traffic to/from subscribers with application assurance enabled is diverted.

To divert multiple forwarding classes, the command needs to be executed multiple times specifying each forwarding class to be diverted at a time.

The no form of this command stops diverting of the traffic to an application assurance engine for this application assurance group.

Parameters 
fc-name—
Creates a class instance of the forwarding class fc-name.
Values—
be, l2, af, l1, h2, ef, h1, nc

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.230. dm

dm

Syntax 
dm [test-id test-id] [create]
no dm
Context 
[Tree] (config>oam-pm>session>mpls dm)
Full Contexts 
configure oam-pm session mpls dm
Description 

This command assigns an identifier to the DM test and creates the individual test.

The no form of this command removes the DM test function from the OAM-PM session.

Parameters 
test-id—
Specifies the value of the 26-bit test identifier sent as session identifier in the DM PDU.
Values—
0 to 67108863

 

create—
Creates the DM test. The create keyword requirement can be enabled/disabled in the environment>create context.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.231. dmm

dmm

Syntax 
dmm [test-id test-id] [create]
no dmm
Context 
[Tree] (config>oam-pm>session>ethernet dmm)
Full Contexts 
configure oam-pm session ethernet dmm
Description 

This command defines the test ID to be assigned to the delay test and creates the container to allow the individual test parameters to be configured.

The no form of this command removes the DMM test function from the PM Session.

Parameters 
test-id—
Specifies the value to be placed in the 4-byte test ID field of an ETH-DMM PDU.
Values—
0 to 2147483647

 

create—
Creates the test.
Platforms 

All

8.232. dmr-prefix

dmr-prefix

Syntax 
dmr-prefix dmr-prefix
no dmr-prefix
Context 
[Tree] (config>service>nat>map-domain dmr-prefix)
Full Contexts 
configure service nat map-domain dmr-prefix
Description 

This command configures the IPv6 prefix of the BR (dmr-prefix), which is used as a default MAP rule (route) in the CEs. Each MAP domain in the VSR has a unique dmr-prefix.

Parameters 
dmr-prefix—
Specifies the IPv6 prefix associated with a MAP domain in the BR. The prefix represents a dmr-rule in the CE.
Values—
<ipv6-prefix/prefix-length> :
     ipv6-prefix —— x:x:x:x:x:x:x:x (eight 16-bit pieces)
     x:x:x:x:x:x:d.d.d.d
x—[0 to FFFF]H
d—[0 to 255]D
prefix-length—[0 to 96]

 

Platforms 

VSR

8.233. dnat

dnat

Syntax 
[no] dnat
Context 
[Tree] (config>service>nat>nat-policy dnat)
Full Contexts 
configure service nat nat-policy dnat
Description 

This command defines context for destination NAT (DNAT) specific configuration under the nat-policy.

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.234. dnat-only

dnat-only

Syntax 
dnat-only router router-instance nat-group nat-group-id
no dnat-only
Context 
[Tree] (config>service>nat>nat-policy>dnat dnat-only)
Full Contexts 
configure service nat nat-policy dnat dnat-only
Description 

This command configures outside routing context and nat-group in which DNAT translation shout take place. This command is mutually exclusive with the pool command in nat-policy. When DNAT-only is enabled, no source and port NAT (SNAPT) is performed. In other words, only the destination IP address (going from inside to outside) is translated while the source IP address and port are not translated.

Parameters 
router router-instance
Specifies the routing context on the outside (public side).
nat-group nat-group-id
Specifies the NAT group IP.
Values—
1 to 4

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dnat-only

Syntax 
dnat-only
Context 
[Tree] (config>router>nat>inside dnat-only)
[Tree] (config>router>nat>outside dnat-only)
[Tree] (config>service>vprn>nat>inside dnat-only)
[Tree] (config>service>vprn>nat>outside dnat-only)
Full Contexts 
configure router nat inside dnat-only
configure router nat outside dnat-only
configure service vprn nat inside dnat-only
configure service vprn nat outside dnat-only
Description 

Commands in this context configure the dnat-only parameters.

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.235. dns

dns

Syntax 
dns ip-address [secondary ip-address]
dns secondary ip-address
no dns [ip-address] [secondary ip-address]
Context 
[Tree] (config>service>ies>if>ipcp dns)
Full Contexts 
configure service ies interface ipcp dns
Description 

This command defines the DNS address to be assigned to the far-end of the associated PPP or MLPPP link through IPCP extensions. This command is only applicable if the associated SAP or port is a PPP or MLPPP interface with an IPCP encapsulation.

The no form of this command deletes either the specified primary DNS address, secondary DNS address or both addresses from the IPCP extension peer-ip-address configuration.

Default 

no dns

Parameters 
ip-address—
Specifies a unicast IPv4 address for the primary DNS server to be signaled to the far-end of the associate PPP or MLPPP link via IPCP extensions.
secondary ip-address
Specifies a unicast IPv4 address for the secondary DNS server to be signaled to the far-end of the associate PPP or MLPPP link using IPCP extensions.
Platforms 

All

dns

Syntax 
[no] dns
Context 
[Tree] (config>service>vprn dns)
Full Contexts 
configure service vprn dns
Description 

Commands in this context configure domain name servers.

The no form of this command disables DNS for this service.

Platforms 

All

dns

Syntax 
dns ip-address [secondary ip-address]
dns secondary ip-address
no dns [ip-address] [secondary ip-address]
Context 
[Tree] (config>service>vprn>if>ipcp dns)
Full Contexts 
configure service vprn interface ipcp dns
Description 

This command defines the dns address(es) to be assigned to the far-end of the associated PPP/MLPPP link via IPCP extensions.

This command is only applicable if the associated SAP/port is a PPP/MLPPP interface with an IPCP encapsulation.

The no form of this command deletes either the specified primary DNS address, secondary DNS address or both addresses from the IPCP extension peer-ip-address configuration.

Default 

no dns

Parameters 
ip-address—
Specifies a unicast IPv4 address for the primary DNS server to be signaled to the far-end of the associate PPP/MLPPP link via IPCP extensions.
secondary ip-address
Specifies a unicast IPv4 address for the secondary DNS server to be signaled to the far-end of the associate PPP/MLPPP link via IPCP extensions.
Platforms 

All

dns

Syntax 
dns target-addr dns-name name-server ip-address [source ip-address] [count send-count] [timeout timeout] [interval interval] [record-type {ipv4-a-record | ipv6-aaaa-record}] [router-instance router-instance]
Context 
[Tree] (oam dns)
[Tree] (config>saa>test>type dns)
Full Contexts 
configure saa test type dns
oam dns
Description 

This command performs DNS name resolution. If ipv4-a-record is specified, DNS target addresses are queried for A records only. If ipv6-aaaa-record is specified, AAAA records are queried first, and if a successful response is not received, the DNS server is queried for A records (applies to the 7750 SR and 7950 XRS).

Parameters 
dns-name—
Specifies the DNS domain name, up to 255 characters.
interval—
Specifies the time, in seconds, used to override the default request message send interval and defines the minimum amount of time that must expire before the next message request is sent.

If the interval is set to 1 second, and the timeout value is set to 10 seconds, then the maximum time between message requests is 10 seconds and the minimum is 1 second. This depends upon the receipt of a message response corresponding to the outstanding message request.

Values—
1 to 10

 

Default—
1
ip-address—
Specifies the IP address of the primary DNS server.

ipv4-address:

a.b.c.d

ipv6-address:

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x:

0 to FFFF]H

d:

[0 to 255]D

record-type —
Specifies a record type (applies to the 7750 SR and 7950 XRS only).
Values—
ipv4-a-record — A record-specific mapping of a host name to an IPv4 address.
ipv6-aaaa-record — A record-specific mapping to the Internet class that stores a single IPv6 address.

 

send-count—
Specifies the number of messages to send. The send-count parameter overrides the default number of message requests sent. Each message request must either time out or receive a reply before the next message request is sent. The message interval value must have expired before the next message request is sent.
Values—
1 to 100

 

Default—
1
timeout—
Specifies the time, in seconds, to override the default timeout value and is the amount of time that the router waits for a message response after sending the message request. Upon the expiration of the message time out, the requesting router assumes that the message response is not received. Any response received after the request times out is silently discarded.
Values—
1 to 120

 

Default—
5
router-instance—
Specifies the preferred method to enter a service name or routing instance from which to launch the DNS query. This value is stored as the service name. This is the only service-linking function allowed for both mixed-mode and model-driven configuration modes.
Values—

router-name

Base

Specifies a base routing instance

management

Specifies a management routing instance

_Base_and_management

Specifies a base routing instance and a management routing instance: if no response is received from the base, a management routing instance is used.

vprn-svc-name

Specifies a service name, up to 64 characters

 

Default—
_Base_and_management
Platforms 

All

dns

Syntax 
dns
Context 
[Tree] (config>router dns)
Full Contexts 
configure router dns
Description 

This command configures the DNS.

Default 

dns

Platforms 

All

dns

Syntax 
dns
Context 
[Tree] (config>system dns)
Full Contexts 
configure system dns
Description 

This command configures DNS settings.

Platforms 

All

8.236. dns-domain

dns-domain

Syntax 
dns-domain dns-name
no dns-domain
Context 
[Tree] (bof dns-domain)
Full Contexts 
bof dns-domain
Description 

This command configures the domain name used when performing DNS address resolution. This is a required parameter if DNS address resolution is required. Only a single domain name can be configured. If multiple domain statements are configured, the last one encountered is used.

The no form of this command removes the domain name from the configuration.

Default 

no dns-domain

Parameters 
dns-name—
Specifies the DNS domain name, up to 178 characters.
Platforms 

All

8.237. dns-ip-cache

dns-ip-cache

Syntax 
dns-ip-cache dns-ip-cache-name [create]
no dns-ip-cache dns-ip-cache-name
Context 
[Tree] (config>app-assure>group dns-ip-cache)
Full Contexts 
configure application-assurance group dns-ip-cache
Description 

This command configures a DNS IP cache used to snoop DNS requests generated by subscribers to populate a cache of IP addresses matching a specified list of domain names. In the context of URL content charging strengthening, it is also mandatory to specify a list of trusted DNS servers to populate the DNS IP cache.

Parameters 
dns-ip-cache-name—
Specifies the Application Assurance DNS IP cache name, up to 32 characters.
create—
Specifies a keyword used to create the DNS IP cache.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-ip-cache

Syntax 
dns-ip-cache dns-ip-cache-name
Context 
[Tree] (config>app-assure>group>sess-fltr>entry>match dns-ip-cache)
Full Contexts 
configure application-assurance group session-filter entry match dns-ip-cache
Description 

This command configures a DNS IP cache using session filter DST IP match criteria. It is typically combine with an allow action in the context of captive-redirect.

Parameters 
dns-ip-cache-name—
Specifies the name of the DNS IP cache name, up to 32 characters.

8.238. dns-match

dns-match

Syntax 
dns-match
Context 
[Tree] (config>app-assure>group>dns-ip-cache dns-match)
Full Contexts 
configure application-assurance group dns-ip-cache dns-match
Description 

Commands in this context configure match parameters in the DNS IP cache.

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.239. dns-options

dns-options

Syntax 
[no] dns-options
Context 
[Tree] (config>subscr-mgmt>rtr-adv-plcy dns-options)
Full Contexts 
configure subscriber-mgmt router-advertisement-policy dns-options
Description 

Commands in this context configure IPv6 DNS options for SLAAC hosts.

The no form of this command returns the command to the default setting.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dns-options

Syntax 
[no] dns-options
Context 
[Tree] (config>service>ies>sub-if>ipv6>rtr-adv dns-options)
[Tree] (config>service>ies>sub-if>grp-if>ipv6>rtr-adv dns-options)
[Tree] (config>service>vprn>router-advert dns-options)
[Tree] (config>service>vprn>router-advertisement dns-options)
[Tree] (config>service>vprn>router-advert>if dns-options)
[Tree] (config>service>vprn>sub-if>ipv6>rtr-adv dns-options)
[Tree] (config>service>vprn>sub-if>grp-if>ipv6>rtr-adv dns-options)
Full Contexts 
configure service ies subscriber-interface group-interface ipv6 router-advertisements dns-options
configure service ies subscriber-interface ipv6 router-advertisements dns-options
configure service vprn router-advertisement dns-options
configure service vprn router-advertisement interface dns-options
configure service vprn router-advertisement dns-options
configure service vprn subscriber-interface group-interface ipv6 router-advertisements dns-options
configure service vprn subscriber-interface ipv6 router-advertisements dns-options
Description 

Commands in this context configure DNS information for Stateless Address Auto-Configuration (SLAAC) hosts.

When specified at the router-advertisement level in the routing context, this command allows configuration of service-wide parameters. These can then be inherited at the interface level by specifying the config>service>vprn>router-advert>if>dns-options>include-dns command.

The no form of this command disables configuration of DNS information for Stateless Address Auto-Configuration (SLAAC) hosts.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  1. configure service ies subscriber-interface ipv6 router-advertisements dns-options
  2. configure service ies subscriber-interface group-interface ipv6 router-advertisements dns-options
  3. configure service vprn subscriber-interface group-interface ipv6 router-advertisements dns-options
  4. configure service vprn subscriber-interface ipv6 router-advertisements dns-options

All

  1. configure service vprn router-advertisement interface dns-options
  2. configure service vprn router-advertisement dns-options

dns-options

Syntax 
[no] dns-options
Context 
[Tree] (config>router>router-advert dns-options)
[Tree] (config>router>router-advert>if dns-options)
Full Contexts 
configure router router-advertisement dns-options
configure router router-advertisement interface dns-options
Description 

Commands in this context configure DNS information for Stateless Address Auto-Configuration (SLAAC) hosts. When specified at the router-advertisement level in the routing context, this command allows configuration of service-wide parameters. These can then be inherited at the interface level by specifying the config>router>router-advert>if>dns-options>include-dns command.

The no form of this command disables configuration of DNS information for Stateless Address Auto-Configuration (SLAAC) hosts.

Platforms 

All

8.240. dns-server

dns-server

Syntax 
dns-server ip-address [ip-address]
no dns-server
Context 
[Tree] (config>router>dhcp>server>pool>options dns-server)
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options dns-server)
[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>options dns-server)
[Tree] (config>service>vprn>dhcp>server>pool>options dns-server)
Full Contexts 
configure router dhcp local-dhcp-server pool options dns-server
configure service vprn dhcp local-dhcp-server pool options dns-server
configure subscriber-mgmt local-user-db ipoe host options dns-server
configure subscriber-mgmt local-user-db ppp host options dns-server
Description 

This command configures the IPv4 address of the DNS server.

The no form of this command removes the IPv4 address of the DNS server from the configuration.

Parameters 
ip-address—
Specifies up to four DNS server IP addresses.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dns-server

Syntax 
dns-server ipv6-address [ipv6-address]
no dns-server
Context 
[Tree] (config>router>dhcp6>server>defaults>options dns-server)
[Tree] (config>router>dhcp6>server>pool>options dns-server)
[Tree] (config>router>dhcp6>server>pool>prefix>options dns-server)
[Tree] (config>service>vprn>dhcp6>server>defaults>options dns-server)
[Tree] (config>service>vprn>dhcp6>server>pool>options dns-server)
[Tree] (config>service>vprn>dhcp6>server>pool>prefix>options dns-server)
[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>options6 dns-server)
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options6 dns-server)
Full Contexts 
configure router dhcp6 local-dhcp-server defaults options dns-server
configure router dhcp6 local-dhcp-server pool options dns-server
configure router dhcp6 local-dhcp-server pool prefix options dns-server
configure service vprn dhcp6 local-dhcp-server defaults options dns-server
configure service vprn dhcp6 local-dhcp-server pool options dns-server
configure service vprn dhcp6 local-dhcp-server pool prefix options dns-server
configure subscriber-mgmt local-user-db ipoe host options6 dns-server
configure subscriber-mgmt local-user-db ppp host options6 dns-server
Description 

This command configures IPv6 DNS server addresses that can be used for name resolution.

The no form of this command removes the IPv6 address of the DNS server from the configuration.

Parameters 
ipv6-address—
Specifies up to four IPv6 DNS server addresses.
Values—
ipv6-address: x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x - [0 to FFFF]H
d - [0 to 255]D

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  1. configure router dhcp6 local-dhcp-server pool options dns-server
  2. configure router dhcp6 local-dhcp-server pool prefix options dns-server
  3. configure subscriber-mgmt local-user-db ppp host options6 dns-server
  4. configure service vprn dhcp6 local-dhcp-server pool prefix options dns-server
  5. configure service vprn dhcp6 local-dhcp-server pool options dns-server
  6. configure subscriber-mgmt local-user-db ipoe host options6 dns-server

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  1. configure router dhcp6 local-dhcp-server defaults options dns-server
  2. configure service vprn dhcp6 local-dhcp-server defaults options dns-server

dns-server

Syntax 
dns-server ip-address
no dns-server
Context 
[Tree] (config>app-assure>group>url-filter>web-service dns-server)
Full Contexts 
configure application-assurance group url-filter web-service dns-server
Description 

This command configures the DNS server that is used to resolve the web service host name.

The no form of this command removes the DNS server configuration.

Default 

no dns-server

Parameters 
ip-address—
Specifies the IP address of the DNS server to use.
Values—
a.b.c.d[/mask] (IPv4),
x:x:x:x:x:x:x:x/prefix-length (IPv6)
x:x:x:x:x:x:d.d.d.d
x - [0..FFFF] H
d - [0..255] D
prefix-length [0..128]

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.241. dnssec

dnssec

Syntax 
dnssec
Context 
[Tree] (config>system>dns dnssec)
Full Contexts 
configure system dns dnssec
Description 

This command configures system Domain Name System Security Extensions (DNSSEC) settings.

Platforms 

All

8.242. do-not-fragment

do-not-fragment

Syntax 
[no] do-not-fragment
Context 
[Tree] (config>oam-pm>session>ip do-not-fragment)
Full Contexts 
configure oam-pm session ip do-not-fragment
Description 

This command configures the Do Not Fragment (DF) bit in the IPv4 header of the TWAMP Light test packet in order to prevent packet fragmentation. This is only applicable to IPv4. IPv6 does not include the bit as part of the specification. This parameter is ignored but not blocked when the address is IPv6.

The no form of this command allows packet fragmentation.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.243. dod-label-distribution

dod-label-distribution

Syntax 
[no] dod-label-distribution
Context 
[Tree] (config>router>ldp>session-params>peer dod-label-distribution)
Full Contexts 
configure router ldp session-parameters peer dod-label-distribution
Description 

This command enables the use of the LDP Downstream-on-Demand (DoD) label distribution procedures.

When this option is enabled, LDP will set the A-bit in the Label Initialization message when the LDP session to the peer is established. When both peers set the A-bit, they will both use the DoD label distribution method over the LDP session (RFC 5036).

This feature can only be enabled on a link-level LDP session and therefore will apply to prefix labels only, not service labels.

As soon as the link LDP session comes up, the router will send a label request to its DoD peer for the FEC prefix corresponding to the peer’s LSR-id. The DoD peer LSR-id is found in the basic Hello discovery messages the peer used to establish the Hello adjacency with the router.

Similarly if the router and the directly attached DoD peer entered into extended discovery and established a targeted LDP session, the router will immediately send a label request for the FEC prefix corresponding to the peer’s LSR-id found in the extended discovery messages.

However, the router will not advertise any <FEC, label> bindings, including the FEC of its own LSR-id, unless the DoD peer requested it using a Label Request Message.

When the DoD peer sends a label request for any FEC prefix, the router will reply with a <FEC, label> binding for that prefix if the FEC was already activated on the router. If not, the router replies with a notification message containing the status code of “no route.” The router will not attempt in the latter case to send a label request to the next-hop for the FEC prefix when the LDP session to this next-hop uses the DoD label distribution mode. Hence the reference to single-hop LDP DoD procedures.

As soon as the link LDP session comes up, the router will send a label request to its DoD peer for the FEC prefix corresponding to the peer’s LSR-id. The DoD peer LSR-id is found in the basic Hello discovery messages the peer used to establish the Hello adjacency with the router.

Similarly if the router and the directly attached DoD peer entered into extended discovery and established a targeted LDP session, the router immediately sends a label request for the FEC prefix corresponding to the peer’s LSR-id found in the extended discovery messages. Peer address has to be the peer LSR-ID address.

The no form of this command disables the DoD label distribution with an LDP neighbor.

Default 

no dod-label-distribution

Platforms 

All

8.244. domain

domain

Syntax 
domain name [type {l2-domain | vrf-gre | vrf-vxlan | l2-domain-irb}] [create]
no domain name
Context 
[Tree] (config>service>vsd domain)
Full Contexts 
configure service vsd domain
Description 

This command configures a vsd-domain that can be associated to a VPLS or VPRN service.

Parameters 
name—
Specifies the name of the vsd-domain. 32 characters maximum.
l2-domain—
Assigns the l2-domain type to the domain. l2-domain-type domains must be associated to a VPLS service.
vrf-gre—
Assigns the vrf-gre type to the domain. vrf-gre-type domains must be associated to a VPRN service.
vrf-vxlan—
Assigns the vrf-vxlan type to the domain. vrf-vxlan-type domains must be associated to a VPLS service.
l2-domain-irb—
Assigns the l2-domain-irb type to the domain. l2-domain-irb-type domains must be associated to a VPLS service.
create—
This keyword is mandatory when creating the vsd-domain.
Platforms 

All

domain

Syntax 
domain domain-name expression expression
no domain domain-name
Context 
[Tree] (config>app-assure>group>dns-ip-cache>dns-match domain)
Full Contexts 
configure application-assurance group dns-ip-cache dns-match domain
Description 

This command configures a domain expression to populate the DNS IP cache. Up to 32 domains can be configured.

Parameters 
domain-name—
Specifies the name of the domain expression entry.
expression
Specifies a domain name expression string, up to 64 characters, used to define a pattern match. This domain expression uses the same syntax as the expressions used in app-filters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

domain

Syntax 
domain domain-name [nat-group nat-group-id] [create]
no domain domain-name
Context 
[Tree] (config>router>firewall domain)
[Tree] (config>service>vprn>firewall domain)
Full Contexts 
configure router firewall domain
configure service vprn firewall domain
Description 

This command configures a domain to contain firewall parameters. Each domain must be assigned to a NAT group where firewall functionality will be performed.

The no form of the command removes the domain.

Parameters 
create—
Mandatory keyword used when creating the domain.
domain-name—
Specifies the name of the domain, up to 32 characters maximum.
nat-group-id—
Specifies the ID of the NAT group where the firewall functionality will be performed.
Values—
1 to 4

 

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

domain

Syntax 
domain router router-name name domain-name
no domain
Context 
[Tree] (config>service>nat>firewall-policy domain)
Full Contexts 
configure service nat firewall-policy domain
Description 

This command specifies a router and domain to which the firewall policy will be applied. All associated traffic must be part of the prefixes specified by this domain.

The no form of the command removes the domain association from the firewall policy.

Default 

no domain

Parameters 
domain-name—
Specifies the name of the firewall domain in the specified router instance. 32 characters maximum.
router-name—
Specifies the name of the router instance to use.
Values—
router-name | vprn-svc-id
router-name — “Base”, “management”
vprn-svc-id — 1 to 2147483647

 

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

domain

Syntax 
domain md-index [format {format}] [name md-name] level level [admin-name admin-name]
domain md-index
no domain md-index
Context 
[Tree] (config>eth-cfm domain)
Full Contexts 
configure eth-cfm domain
Description 

This command configures Connectivity Fault Management domain parameters.

The no form of the command removes the MD index parameters from the configuration.

Parameters 
md-index—
Specifies the Maintenance Domain (MD) index value.
Values—
1 to 4294967295

 

format format
Specifies a value that represents the type (format).
Values—
dns, mac, none, string

dns:

Specifies the DNS name format.

mac:

X:X:X:X:X:X-u

X: [0..FF]h

u: [0..65535]d

none:

Specifies a Y.1731 domain format and the only format allowed to execute Y.1731 specific functions.

string

Specifies an ASCII string.

 

Default—
string
name md-name
Specifies a generic Maintenance Domain (MD) name.
Values—
1 to 43 characters

 

level level
Specifies the integer identifying the maintenance domain level (MD Level). Higher numbers correspond to higher maintenance domains, those with the greatest physical reach, with the highest values for customers' CFM packets. Lower numbers correspond to lower maintenance domains, those with more limited physical reach, with the lowest values for single bridges or physical links.
Values—
0 to 7

 

admin-name admin-name
Specifies a creation time required parameter that allows the operator to assign a name value to the domain container. This is used for information and migration purposes. This value cannot be modified without destroying the domain. If no admin-name exists, the configured md-index value will be converted into a character string to become the admin-name reference. When upgrading from a release that does not include the admin-name configuration option, the md-index will be converted into a character string. Once a value is assigned to this admin-name value it cannot be modified.
Values—
1 to 64 characters

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

domain

Syntax 
domain domain
no domain
Context 
[Tree] (config>system>ptp domain)
Full Contexts 
configure system ptp domain
Description 

This command configures the PTP domain.

Note:

Some profiles may require a domain number in a restricted range. The operator must ensure that the value aligns with the expected range for the profile.

The domain cannot be changed unless PTP is shutdown. If the PTP profile setting is changed, the domain is changed to the default domain for the new PTP profile.

The no form of this command reverts to the default configuration. The default value is dependent upon the configured profile, as detailed below.

Default 

domain 0 — profile ieee1588-2008

domain 4 — profile g8265dot1-2010

domain 24 — profile g8275dot1-2014

Parameters 
domain—
Specifies the PTP domain.
Values—
0 to 255 for ieee1588-2008
0 to 255 for g8265dot1-2010
24 to 43 for g8275dot1-2014

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

domain

Syntax 
domain [value] [create]
no domain [value]
Context 
[Tree] (config>redundancy>multi-chassis>peer>mc-ipsec domain)
Full Contexts 
configure redundancy multi-chassis peer mc-ipsec domain
Description 

This command configures domain information. This command is mutually exclusive to the tunnel-group command.

The no form of this command removes the multi-chassis IPsec domain value.

Parameters 
value—
Specifies the domain multi-chassis IPsec domain, up to 255 characters.
create—
Keyword used to create the command instance.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.245. domain-id

domain-id

Syntax 
domain-id global-field:local-field
no domain-id
Context 
[Tree] (config>service>vprn>bgp domain-id)
[Tree] (config>service>vprn>bgp-evpn>mpls domain-id)
[Tree] (config>service>vprn>bgp-evpn>srv6 domain-id)
[Tree] (config>service>vprn>bgp-ipvpn>mpls domain-id)
[Tree] (config>service>vprn>bgp-ipvpn>srv6 domain-id)
Full Contexts 
configure service vprn bgp domain-id
configure service vprn bgp-evpn mpls domain-id
configure service vprn bgp-evpn segment-routing-v6 domain-id
configure service vprn bgp-ipvpn mpls domain-id
configure service vprn bgp-ipvpn segment-routing-v6 domain-id
Description 

This command specifies the domain ID that identifies the network from which a BGP route was received before that route is exported to a different neighbor. The domain ID is part of a domain, represented as domain-id:isf_safi_type in the D-PATH attribute, as described in draft-ietf-bess-evpn-ipvpn-interworking. The D-PATH attribute is modified by gateway routers, where a gateway is defined as a PE where a VPRN is instantiated, and that VPRN advertises or receives routes from multiple BGP owners (for example, EVPN-IFL and BGP-IPVPN) or multiple instances of the same owner (for example, VPRN with two BGP-IPVPN instances).

In the following example, consider that a gateway receives prefix P in an EVPN-IFL instance with the following D-PATH from neighbor N:

Seg Len=1 / 65000:1:128

If the router imports the route in VPRN-1, BGP-EVPN SRv6 instance with domain 65000:2, it readvertises it to its BGP-IPVPN MPLS instance as follows:

Seg Len=2 / 65000:2:70 / 65000:1:128

That is, the gateway prepends the local domain ID and family to the D-PATH before readvertising the route into a different instance.

The D-PATH attribute is used on gateways to detect loops (for received routes where the D-PATH contains a local domain ID) and to make BGP best-path selection decisions based on the D-PATH length (shorter D-PATH is preferred).

The no form of this command removes the configured domain ID.

Default 

no domain-id

Parameters 
global-field:local-field—
Specifies the domain ID.
Values—

4byte-GlobalAdminValue:2byte-LocalAdminValue

4byte-GlobalAdminValue:

0 to 4294967295

2byte-LocalAdminValue

0 to 65535

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

  1. configure service vprn bgp-evpn segment-routing-v6 domain-id
  2. configure service vprn bgp-ipvpn segment-routing-v6 domain-id

All

  1. configure service vprn bgp-ipvpn mpls domain-id
  2. configure service vprn bgp-evpn mpls domain-id
  3. configure service vprn bgp domain-id

8.246. domain-name

domain-name

Syntax 
domain-name domain-name
no domain-name
Context 
[Tree] (config>router>dhcp>server>pool>options domain-name)
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options domain-name)
[Tree] (config>router>dhcp6>server>defaults>options domain-name)
[Tree] (config>router>dhcp6>server>pool>options domain-name)
[Tree] (config>router>dhcp6>server>pool>prefix>options domain-name)
[Tree] (config>service>vprn>dhcp>server>pool>options domain-name)
[Tree] (config>service>vprn>dhcp6>server>pool>options domain-name)
[Tree] (config>service>vprn>dhcp6>server>pool>prefix>options domain-name)
Full Contexts 
configure router dhcp local-dhcp-server pool options domain-name
configure router dhcp6 local-dhcp-server defaults options domain-name
configure router dhcp6 local-dhcp-server pool options domain-name
configure router dhcp6 local-dhcp-server pool prefix options domain-name
configure service vprn dhcp local-dhcp-server pool options domain-name
configure service vprn dhcp6 local-dhcp-server pool options domain-name
configure service vprn dhcp6 local-dhcp-server pool prefix options domain-name
configure subscriber-mgmt local-user-db ipoe host options domain-name
Description 

This command configures the default domain for a DHCP client that the router uses to complete unqualified host names (without a dotted-decimal domain name).

The no form of this command removes the name from the configuration.

Parameters 
domain-name—
Specifies the domain name for the client, up to 127 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  1. configure router dhcp local-dhcp-server pool options domain-name
  2. configure router dhcp6 local-dhcp-server pool prefix options domain-name
  3. configure service vprn dhcp6 local-dhcp-server pool options domain-name
  4. configure service vprn dhcp local-dhcp-server pool options domain-name
  5. configure subscriber-mgmt local-user-db ipoe host options domain-name
  6. configure router dhcp6 local-dhcp-server pool options domain-name
  7. configure service vprn dhcp6 local-dhcp-server pool prefix options domain-name

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  1. configure router dhcp6 local-dhcp-server defaults options domain-name

8.247. dot1p

dot1p

Syntax 
dot1p dot1p-priority [fc fc-name] [priority {low | high}]
no dot1p dot1p-priority
Context 
[Tree] (config>qos>sap-ingress dot1p)
Full Contexts 
configure qos sap-ingress dot1p
Description 

This command explicitly sets the forwarding class or subclass or enqueuing priority when a packet is marked with a dot1p-priority specified. Adding a dot1p rule on the policy forces packets that match the dot1p-priority specified to override the forwarding class and enqueuing priority based on the parameters included in the dot1p rule. When the forwarding class is not specified in the rule, a matching packet preserves (or inherits) the existing forwarding class derived from earlier matches in the classification hierarchy. When the enqueuing priority is not specified in the rule, a matching packet preserves (or inherits) the existing enqueuing priority derived from earlier matches in the classification hierarchy.

The dot1p-priority is derived from the most significant three bits in the IEEE 802.1q or IEEE 802.1p header. The three dot1p bits define 8 Class-of-Service (CoS) values commonly used to map packets to per-hop QoS behavior.

The no form of this command removes the explicit dot1p classification rule from the SAP ingress policy. Removing the rule on the policy immediately removes the rule on all ingress SAPs using the policy.

Parameters 
dot1p-priority—
This value is a required parameter that specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.

A maximum of eight dot1p rules are allowed on a single policy.

Values—
0 to 7

 

fc fc-name
Specifies the value given for the fc-name parameter must be one of the predefined forwarding classes in the system. Specifying the fc-name is optional. When a packet matches the rule, the forwarding class is only overridden when the fc fc-name parameter is defined on the rule. If the packet matches and the forwarding class is not explicitly defined in the rule, the forwarding class is inherited based on previous rule matches.
priority —
This parameter overrides the default enqueuing priority for all packets received on an ingress SAP using this policy that match this rule. Specifying the priority is optional. When a packet matches the rule, the enqueuing priority is only overridden when the priority parameter is defined on the rule. If the packet matches and priority is not explicitly defined in the rule, the enqueuing priority is inherited based on previous rule matches.
Default—
Inherits the priority defined by the default-priority statement.
high—
This parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to high for a packet increases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
low—
This parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to low for a packet decreases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
Platforms 

All

dot1p

Syntax 
dot1p dot1p-value [dot1p-mask]
no dot1p
Context 
[Tree] (config>qos>sap-ingress>mac-criteria>entry>match dot1p)
Full Contexts 
configure qos sap-ingress mac-criteria entry match dot1p
Description 

The IEEE 802.1p value to be used as the match criterion.

Use the no form of this command to remove the dot1p value as the match criterion.

Default 

no dot1p

Parameters 
dot1p-value—
Specifies the IEEE 802.1p value in decimal.
Values—
0 to 7

 

dot1pmask—
This 3-bit mask can be configured using the following formats:

Format Style

Format Syntax

Example

Decimal

D

4

Hexadecimal

0xH

0x4

Binary

0bBBB

0b100

To select a range from 4 up to 7, specify p-value of 4 and a mask of 0b100 for value and mask.

Values—
0 to 7 (decimal hex or binary)

 

Default—
7
Platforms 

All

dot1p

Syntax 
dot1p dot1p-value [fc fc-name] [profile {in | out | use-de | exceed | inplus}]
no dot1p dot1p-value
Context 
[Tree] (config>qos>sap-egress dot1p)
Full Contexts 
configure qos sap-egress dot1p
Description 

This command defines a specific dot1p value that must be matched to perform the associated reclassification actions. If an egress packet on the SAP matches the specified dot1p value, the forwarding class or profile may be overridden. By default, the forwarding class and profile of the packet is derived from ingress classification and profiling functions.

The dot1p priority is derived from the most significant three bits in the IEEE 802.1q or IEEE 802.1p header. The three dot1p bits define 8 Class-of-Service (CoS) values commonly used to map packets to per-hop QoS behavior.

The reclassification actions from a dot1p reclassification rule may be overridden by a DSCP, IP precedence, or IP flow matching event.

The fc keyword is optional. When specified, the egress classification rule will overwrite the forwarding class derived from ingress. The new forwarding class is used for egress remarking and queue mapping decisions. If a DSCP, IP precedence, IPv6 criteria, or IP criteria match occurs after the dot1p match, the new forwarding class may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new FC, the FC from the dot1p match will be used.

The profile keyword is optional. When specified, the egress classification rule will overwrite the profile of the packet derived from ingress. The new profile value is used for egress remarking and queue congestion behavior. If a DSCP, IP precedence, IPv6 criteria, or IP criteria match occurs after the dot1p match, the new profile may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new profile, the profile from the dot1p match will be used.

The no form of this command removes the reclassification rule from the SAP egress QoS policy.

Parameters 
dot1p-value—
This value is a required parameter that specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.

A maximum of eight dot1p rules are allowed on a single policy.

Values—
0 to 7

 

fc fc-name
Specifies the value given for the fc-name parameter must be one of the predefined forwarding classes in the system. Specifying the FC name is optional. When a packet matches the rule, the forwarding class is only overridden when the fc fc-name parameter is defined on the rule. If the packet matches and the forwarding class is not explicitly defined in the rule, the forwarding class is inherited based on previous rule matches.
profile {in |  out |  use-de | exceed | inplus}—
Specifies the profile reclassification action is optional. When specified, packets matching the dot1p value will be explicitly reclassified to the profile specified regardless of the ingress profiling decision. The explicit profile reclassification may be overwritten by a DSCP, IP precedence, IPv6 criteria, or IP criteria reclassification match. To remove the profile reclassification action for the specified dotp1 value, the dot1p command must be re-executed without the profile reclassification action defined.
Values—
in — Specifies that any packets matching the reclassification rule will be treated as in-profile by the egress forwarding plane.
out — Specifies that any packets matching the reclassification rule will be treated as out-of-profile by the egress forwarding plane.
use-de — Specifies that the DE bit is used to determine the profile of the packet (in-profile is used when DE = 0 and out-of-profile is used when DE = 1).
exceed — Specifies that any packets matching the reclassification rule will be treated as exceed-profile by the egress forwarding plane.
inplus — Specifies that any packets matching the reclassification rule will be treated as inplus-profile by the egress forwarding plane.

 

Platforms 

All

dot1p

Syntax 
dot1p {dot1p-value | in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value]}
no dot1p
Context 
[Tree] (config>qos>sap-egress>fc dot1p)
Full Contexts 
configure qos sap-egress fc dot1p
Description 

This command explicitly defines the egress IEEE 802.1p (dot1p) bits marking for fc-name. When the marking is set, all packets of fc-name that have either an IEEE 802.1q or IEEE 802.1p encapsulation use the explicitly defined dot1p-value. If the egress packets for fc-name are not IEEE 802.1q or IEEE 802.1p encapsulated, the dot1p command has no effect.

The optional in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value] parameters added to the existing dot1p command adds the capability to mark on an egress SAP the in, out, and exceed-profile status via a certain dot1p combination, similarly with the DE options. All inplus-profile traffic is marked with the same value as in-profile traffic.

When the in-profile keyword is added, the out-profile keyword must be specified; however, exceed-profile is optional. If the optional exceed-profile dot1p-value is not included, any exceed-profile traffic will be marked with the same dot1p value as configured for the out-of-profile traffic.

The command with the additional structure may be used on the SAP when the internal in, out, and exceed-profile status needs to be communicated to an access network or customer device that does not support the DE bit.

When these commands are used, the DE bit or the equivalent field is left unchanged by the egress processing if a tag exists. If a new tag is added, the related DE bit is set to 0.

When the previous command (dot1p dot1p-value) is used without the new structure, it means that the dot1p value is used for the entire forwarding class, as it did before. The two versions of the command are mutually exclusive.

The in-profile or out-of-profile/exceed-profile status may be indicated via the DE bit setting if the de-mark command is used. The DE value used for exceed-profile is the same as that used for out-of-profile.

In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the dot1p bits for both the BVID and ITAG.

The commands dot1p-inner and dot1p-outer take precedence over the dot1p command if both are specified in the same policy.

The no form of this command sets the IEEE 802.1p or IEEE 802.1q priority bits to 0.

Default 

no dot1p

Parameters 
in-profile dot1p-value
Specifies the 802.1p value to set for in-profile frames in this forwarding class.
Values—
0 to 7

 

out-profile dot1p-value
Specifies the 802.1p value to set for out-profile frames in this forwarding class.
Values—
0 to 7

 

exceed-profile dot1p-value
Specifies the 802.1p value to set for exceed-profile frames in this forwarding class.
Values—
0 to 7

 

Platforms 

All

dot1p

Syntax 
dot1p dot1p-priority fc fc-name profile {in | out | use-de}
no dot1p
Context 
[Tree] (config>qos>network>ingress dot1p)
Full Contexts 
configure qos network ingress dot1p
Description 

This command explicitly sets the forwarding class or enqueuing priority and profile of the packet when a packet is marked with a dot1p-priority specified. Adding a dot1p rule on the policy forces packets that match the dot1p-priority specified to override and be assigned to the forwarding class and enqueuing priority and profile of the packet, based on the parameters included in the dot1p rule. When the forwarding class is not specified in the rule, a matching packet preserves (or inherits) the existing forwarding class derived from earlier matches in the classification hierarchy. When the enqueuing priority is not specified in the rule, a matching packet preserves (or inherits) the existing enqueuing priority derived from earlier matches in the classification hierarchy.

The dot1p-priority is derived from the most significant three bits in the IEEE 802.1q or IEEE 802.1p header. The three dot1p bits define 8 Class-of-Service (CoS) values commonly used to map packets to per-hop Quality of Service (QoS) behavior.

The no form of this command removes the explicit dot1p classification rule from the policy. Removing the rule on the policy immediately removes the rule on all ingress SAPs using the policy.

Parameters 
dot1p-priority—
This value is a required parameter that specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.

A maximum of eight dot1p rules are allowed on a single policy.

Values—
0 to 7

 

fc-name
Specifies the value given for the fc-name parameter must be one of the predefined forwarding classes in the system. Specifying the fc-name is optional. When a packet matches the rule, the forwarding class is only overridden when the fc fc-name parameter is defined on the rule. If the packet matches and the forwarding class is not explicitly defined in the rule, the forwarding class is inherited based on previous rule matches.
Values—
be, l2, af, l1, h2, ef, h1, nc

 

profile {in | out | use-de}—
All packets that are assigned to this forwarding class will be considered in-profile or out-of-profile based on this command or will use the DE bit to determine the profile of the packets (in-profile is used when DE = 0 and out-of-profile is used when DE = 1). In case of congestion, the in-profile packets are preferentially queued over the out-of-profile packets.
Platforms 

All

dot1p

Syntax 
dot1p dot1p-priority
no dot1p
Context 
[Tree] (config>qos>network>egress>fc dot1p)
Full Contexts 
configure qos network egress fc dot1p
Description 

This command is used whenever the dot1p bits are set to a common value regardless of the internal profile of the packets. Although it is not mandatory, this command should be used in combination with the de-mark command to enable the marking of the DE bit according to the internal profile of the packet.

This command acts as a shortcut for configuring the two existing commands with the same dot1p priority.

The dot1p dot1p-priority command is saved in the configuration as dot1p-in-profile dot1p-priority and dot1p-out-profile dot1p-priority. The inplus-profile traffic is marked with the same value as in-profile traffic. The exceed-profile traffic is marked with the same value as out-of-profile traffic.

Platforms 

All

dot1p

Syntax 
dot1p dot1p-value [dot1p-mask]
no dot1p
Context 
[Tree] (config>filter>mac-filter>entry>match dot1p)
Full Contexts 
configure filter mac-filter entry match dot1p
Description 

Configures an IEEE 802.1p value or range to be used as a MAC filter match criterion.

When a frame is missing the 802.1p bits, specifying an dot1p match criterion will fail for the frame and result in a non-match for the MAC filter entry.

The no form of the command removes the criterion from the match entry.

Egress dot1p value matching will only match if the customer payload contains the 802.1p bits. For example, if a packet ingresses on a null encapsulated SAP and the customer packet is IEEE 802.1Q or 802.1p tagged, the 802.1p bits will be present for a match evaluation. On the other hand, if a customer tagged frame is received on a dot1p encapsulated SAP, the tag will be stripped on ingress and there will be no 802.1p bits for a MAC filter match evaluation; in this case, any filter entry with a dot1p match criterion specified will fail.

Default 

no dot1p

Parameters 
dot1p-value—
Specifies the IEEE 802.1p value in decimal.
Values—
0 to 7

 

dot1p-mask—
Specifies a 3-bit mask that can be configured using the decimal integer, hexadecimal or binary format.

Format Style

Format Syntax

Example

Decimal

D

4

Hexadecimal

0xH

0x4

Binary

0bBBB

0b100

To select a range from 4 up to 7 specify dot1p-value of 4 and a dot1p-mask of 0b100 for value and mask.

Default—
7 (decimal)
Values—
1 to 7 (decimal)

 

Platforms 

All

dot1p

Syntax 
dot1p dot1p-value [dot1p-mask]
Context 
[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry>match dot1p)
Full Contexts 
configure system security management-access-filter mac-filter entry match dot1p
Description 

This command configures Dot1p match conditions.

Table 40:  Management Access Filter dot1p Mask Format

Format Style

Format Syntax

Example

Decimal

D

4

Hexadecimal

0xH

0x4

Binary

0bBBB

0b100

Parameters 
dot1p-value—
Specifies the IEEE 802.1p value in decimal.
Values—
0 to 7

 

mask—
Specifies the 3-bit mask can be configured using the following formats.
Platforms 

All

dot1p

Syntax 
dot1p dot1p-name
no dot1p
Context 
[Tree] (config>test-oam>icmp>ping-template dot1p)
Full Contexts 
configure test-oam icmp ping-template dot1p
Description 

This command specifies values of the outer and inner dot1p bits for the VLAN when dot1q or qinq encapsulation is used. This field is not exposed to egress QoS policies.

The no form of this command reverts to the default value.

Default 

dot1p 7

Parameters 
dot1p-name—
Specifies the IEEE 802.1p value in decimal format.
Values—
0 to 7

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.248. dot1p-in-profile

dot1p-in-profile

Syntax 
dot1p-in-profile dot1p-priority
no dot1p-in-profile
Context 
[Tree] (config>qos>network>egress>fc dot1p-in-profile)
Full Contexts 
configure qos network egress fc dot1p-in-profile
Description 

This command specifies dot1p in-profile mappings. The inplus-profile traffic is marked with the same value as in-profile traffic.

The no form of this command resets the configuration to the default in-profile dot1p-priority setting for policy-id 1.

Parameters 
dot1p-priority—
Specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.

A maximum of eight dot1p rules are allowed on a single policy.

Values—
0 to 7

 

Platforms 

All

8.249. dot1p-inner

dot1p-inner

Syntax 
dot1p-inner {dot1p-value | in-profile dot1p-value out-profile dot1p-value}
no dot1p-inner
Context 
[Tree] (config>qos>sap-egress>fc dot1p-inner)
Full Contexts 
configure qos sap-egress fc dot1p-inner
Description 

This command explicitly defines the egress inner VLAN tag IEEE 802.1p (dot1p) bits marking for fc-name. When the marking is set, all packets of fc-name that have either an inner IEEE 802.1q or IEEE 802.1p encapsulation on a qinq SAP will use the explicitly defined dot1p-value. If the egress packets for fc-name are not IEEE 802.1q or IEEE 802.1p qinq encapsulated, this command has no effect.

The optional in-profile | dot1p-value out-profile dot1p-value parameters on the dot1p-inner command add the capability to mark the in-profile and out-of-profile status on an egress qinq SAP. The command with the additional parameters may be used on the SAP when the internal in-profile and out-of-profile status needs to be communicated to an access network or customer device that does not support the DE bit. When the in-profile keyword is added, the rest of the structure must be specified. All inplus-profile traffic is marked with the same value as in-profile traffic and all exceed-profile traffic is marked with the same value as out-of-profile traffic.

When these commands are used, the DE bit or the equivalent field is left unchanged by the egress processing if an inner tag exists. If a new inner tag is added, the related DE bit is set to 0. The inplus/in or out/exceed-profile status may be indicated via the setting of the DE bit setting if the de-mark(-inner) command is used.

The two versions of the command (with and without parameters) are mutually exclusive.

This command takes precedence over the dot1p command if both are specified in the same policy, and over the default action where the marking is taken from a packet received at ingress.

The configuration of qinq-mark-top-only under the SAP egress takes precedence over the use of the dot1p-inner in the policy; that is, the inner VLAN tag is not remarked when qinq-mark-top-only is configured (the marking used for the inner VLAN tag is based on the current default, which is governed by the marking of the packet received at the ingress to the system).

The no form of the command sets the inner IEEE 802.1p or IEEE 802.1q priority bits to 0.

Remarking the inner dot1p is not supported based on the profile result of egress policing.

Default 

no dot1p-inner

Parameters 
dot1p-value—
Specifies the 802.1p value to set for in-profile frames in this forwarding class.
Values—
0 to 7

 

in-profile dot1p-value
Specifies the 802.1p value to set for in-profile frames in this forwarding class.
Values—
0 to 7

 

out-profile dot1p-value
Specifies the 802.1p value to set for out-of-profile frames in this forwarding class.
Values—
0 to 7

 

Platforms 

All

8.250. dot1p-out-profile

dot1p-out-profile

Syntax 
dot1p-out-profile dot1p-priority
no dot1p-out-profile
Context 
[Tree] (config>qos>network>egress>fc dot1p-out-profile)
Full Contexts 
configure qos network egress fc dot1p-out-profile
Description 

This command specifies dot1p out-of-profile mappings.

The exceed-profile traffic is marked with the same value as out-of-profile traffic.

The no form of this command resets the configuration to the default out-profile dot1p-priority setting for policy-id 1.

Parameters 
dot1p-priority—
Specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.

A maximum of eight dot1p rules are allowed on a single policy.

Values—
0 to 7

 

Platforms 

All

8.251. dot1p-outer

dot1p-outer

Syntax 
dot1p-outer {dot1p-value | in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value]}
no dot1p-outer
Context 
[Tree] (config>qos>sap-egress>fc dot1p-outer)
Full Contexts 
configure qos sap-egress fc dot1p-outer
Description 

This command explicitly defines the egress outer or single VLAN tag IEEE 802.1p (dot1p) bits marking for fc-name. When the marking is set, all packets of fc-name that have either an outer or single IEEE 802.1q or IEEE 802.1p encapsulation on a qinq or a dot1p SAP, respectively, will use the explicitly defined dot1p-value. If the egress packets for fc-name are not IEEE 802.1q or IEEE 802.1p encapsulated, this command has no effect.

The optional in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value] parameters on the dot1p-outer command add the capability to mark the in, out, and exceed-profile status on an egress qinq or dot1p SAP. The command with the additional parameters may be used on the SAP when the internal in, out, and exceed-profile status needs to be communicated to an access network or customer device that does not support the DE bit.

When the in-profile keyword is added, the out-profile keyword must be specified; however, exceed-profile is optional. If the optional exceed-profile dot1p-value is not included, any exceed-profile traffic will be marked with the same dot1p value as configured for the out-of-profile traffic. All inplus-profile traffic is marked with the same value as in-profile traffic.

When these commands are used, the DE bit or the equivalent field is left unchanged by the egress processing if a single or outer tag exists. If a new tag is added, the related DE bit is set to 0. The in, out, or exceed-profile status may be indicated via the setting of the DE bit setting if the de-mark(-outer) command is used. The DE value used for inplus is the same as that used for in-profile and the one used for exceed-profile is the same as that used for out of profile.

In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the dot1p bits for both the BVID and ITAG.

The two versions of the command (with and without parameters) are mutually exclusive.

This command takes precedence over the dot1p command if both are specified in the same policy, and over the default action where the marking is taken from a packet received at ingress.

The no form of the command sets the IEEE 802.1p or IEEE 802.1q priority bits to 0.

Default 

no dot1p-outer

Parameters 
dot1p-value —
Specifies the 802.1p value to set for in-profile frames in this forwarding class.
Values—
0 to 7

 

in-profile dot1p-value
Specifies the 802.1p value to set for in-profile frames in this forwarding class.
Values—
0 to 7

 

out-profile dot1p-value
Specifies the 802.1p value to set for out-of-profile frames in this forwarding class.
Values—
0 to 7

 

exceed-profile dot1p-value
Specifies the 802.1p value to set for exceed-profile frames in this forwarding class.
Values—
0 to 7

 

Platforms 

All

8.252. dot1q

dot1q

Syntax 
dot1q
Context 
[Tree] (config>service>system>bgp-evpn>eth-seg dot1q)
Full Contexts 
configure service system bgp-evpn ethernet-segment dot1q
Description 

This command creates the dot1q context for q-tag additions to the port or LAG virtual ES.

Platforms 

All

dot1q

Syntax 
dot1q
Context 
[Tree] (config>test-oam>build-packet>header dot1q)
[Tree] (debug>oam>build-packet>packet>field-override>header dot1q)
Full Contexts 
configure test-oam build-packet header dot1q
debug oam build-packet packet field-override header dot1q
Description 

This command creates a Dot1Q header and enables the context to define the associated parameters.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.253. dot1q-etype

dot1q-etype

Syntax 
dot1q-etype value
no dot1q-etype
Context 
[Tree] (config>port>ethernet dot1q-etype)
Full Contexts 
configure port ethernet dot1q-etype
Description 

This command specifies the Ethertype expected when the port's encapsulation type is dot1q. Dot1q encapsulation is supported only on Ethernet interfaces.

The no form of this command reverts to the default value.

Parameters 
value—
Specifies the Ethertype to expect, in either decimal or hex.
Values—
1536 to 65535 (0x0600 to 0xffff)

 

Default—
If the encap-type is dot1p, then the default is 0x8100. If the encap-type is qinq, then the default is 0x8100.
Platforms 

All

dot1q-etype

Syntax 
dot1q-etype dot1q-etype
no dot1q-etype
Context 
[Tree] (config>pw-port dot1q-etype)
Full Contexts 
configure pw-port dot1q-etype
Description 

This command configures the Dot1q Ethertype on the PW port. The PW port is used to extract a customer's Ethernet traffic that is transported in a tunnel over an IP/MPLS network. The Dot1q-etype represents the first two bytes (TPID) in the 802.1Q header of a single-tagged Ethernet frame or the inner 802.1Q header of the double-tagged Ethernet frame inside the tunnel.

The no form of this command removes the configuration.

Parameters 
dot1q-etype—
The value for the dot1q-etype field, in hexadecimal format.
Values—
0x0600..0xFFFF

 

Default—
0x8100
Platforms 

All

8.254. dot1x

dot1x

Syntax 
dot1x
Context 
[Tree] (config>port>ethernet dot1x)
Full Contexts 
configure port ethernet dot1x
Description 

This command enables access to the context to configure port-specific 802.1x authentication attributes. This context can only be used when configuring a Fast Ethernet, Gigabit or 10-Gb Ethernet LAN ports on an appropriate MDA.

Platforms 

All

dot1x

Syntax 
[no] dot1x
Context 
[Tree] (config>system>security dot1x)
Full Contexts 
configure system security dot1x
Description 

This command creates the context to configure 802.1x network access control on the router.

The no form of this command removes the 802.1x configuration.

Platforms 

All

8.255. down

down

Syntax 
down ip seconds [init-only]
no down ip
down ipv6 seconds [init-only]
no down ipv6
Context 
[Tree] (config>router>if>hold-time down)
[Tree] (config>service>ies>if>hold-time down)
[Tree] (config>service>ies>sub-if>hold-time down)
[Tree] (config>service>ies>red-if>hold-time down)
[Tree] (config>service>vpls>if>hold-time down)
[Tree] (config>service>vprn>if>hold-time down)
[Tree] (config>service>vprn>nw-if>hold-time down)
[Tree] (config>service>vprn>red-if>hold-time down)
[Tree] (config>service>vprn>sub-if>hold-time down)
Full Contexts 
configure router interface hold-time down
configure service ies interface hold-time down
configure service ies redundant-interface hold-time down
configure service ies subscriber-interface hold-time down
configure service vpls interface hold-time down
configure service vprn interface hold-time down
configure service vprn network-interface hold-time down
configure service vprn redundant-interface hold-time down
configure service vprn subscriber-interface hold-time down
Description 

This command causes a delay in the activation of the associated IP interface by the specified number of seconds. The delay is invoked whenever the system attempts to bring the associated IP interface up, unless the init-only option is configured. If the init-only option is configured, the delay is only applied when the IP interface is first configured or after a system reboot.

The no form of this command removes the command from the active configuration and removes the delay in activating the associated IP interface. If the configuration is removed during a delay period, the currently running delay will continue until it completes.

Default 

no down ip

Parameters 
seconds—
The time delay, in seconds, to make the interface operational.
Values—
1 to 1200

 

init-only
Specifies that the down delay is only applied when the interface is configured or after a reboot.
Values—
1 to 1200

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  1. configure service vprn subscriber-interface hold-time down
  2. configure service vprn redundant-interface hold-time down
  3. configure service ies subscriber-interface hold-time down
  4. configure service ies redundant-interface hold-time down

All

  1. configure service vprn network-interface hold-time down
  2. configure router interface hold-time down
  3. configure service ies interface hold-time down
  4. configure service vpls interface hold-time down
  5. configure service vprn interface hold-time down

8.256. down-count

down-count

Syntax 
down-count down-count
no down-count
Context 
[Tree] (config>port>sonet-sdh>path>cisco-hdlc down-count)
[Tree] (config>port>tdm>ds1>channel-group>cisco-hdlc down-count)
[Tree] (config>port>tdm>ds3>cisco-hdlc down-count)
[Tree] (config>port>tdm>e1>channel-group>cisco-hdlc down-count)
[Tree] (config>port>tdm>e3>cisco-hdlc down-count)
Full Contexts 
configure port sonet-sdh path cisco-hdlc down-count
configure port tdm ds1 channel-group cisco-hdlc down-count
configure port tdm ds3 cisco-hdlc down-count
configure port tdm e1 channel-group cisco-hdlc down-count
configure port tdm e3 cisco-hdlc down-count
Description 

This command configures the number of keepalive intervals that must pass without receiving a keepalive packet before the link is declared down. It is expected that the nodes at the two endpoints of the cHDLC link are provisioned with the same values.

Default 

down-count 3

Parameters 
down-count—
Specifies the number of keep alive intervals that must pass without receiving a keep alive packet before the link is declared down.
Values—
3 to 16

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  1. configure port sonet-sdh path cisco-hdlc down-count

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

  1. configure port tdm ds1 channel-group cisco-hdlc down-count
  2. configure port tdm e3 cisco-hdlc down-count
  3. configure port tdm e1 channel-group cisco-hdlc down-count
  4. configure port tdm ds3 cisco-hdlc down-count

8.257. down-link

down-link

Syntax 
down-link gbr rate mbr rate
no down-link
Context 
[Tree] (config>subscr-mgmt>gtp>peer-profile>ggsn>qos down-link)
[Tree] (config>subscr-mgmt>gtp>peer-profile>pgw>qos down-link)
[Tree] (config>subscr-mgmt>gtp>peer-profile>mme>qos down-link)
Full Contexts 
configure subscriber-mgmt gtp peer-profile ggsn qos down-link
configure subscriber-mgmt gtp peer-profile mme qos down-link
configure subscriber-mgmt gtp peer-profile pgw qos down-link
Description 

This command configures the down-link bitrate in kb/s to be used in the GTP messages.

The no form of this command reverts to the default.

Default 

down-link gbr 2000 mbr 2000

down-link gbr 2000 mbr 2000 - for ggsn

down-link gbr 0 mbr 0 - for mme and pgw

Parameters 
gbr rate
Specifies the downlink Guaranteed Bit Rate (GBR) to be used in the GTP messages as QOS IE (GTPv1) or Bearer QOS (GTPv2).
mbr rate
Specifies the downlink Maximum Bit Rate (MBR) to be used in the GTP messages as QOS IE (GTPv1) or Bearer QOS (GTPv2).
Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.258. down-on-internal-error

down-on-internal-error

Syntax 
down-on-internal-error [tx-disable]
no down-on-internal-error
Context 
[Tree] (config>port>ethernet down-on-internal-error)
Full Contexts 
configure port ethernet down-on-internal-error
Description 

This command configures the system to bring a port operationally down in the event the system has detected internal MAC transmit errors (Int MAC Tx Errs).

Default 

no down-on-internal-error

Parameters 
tx-disable—
Specifies that the laser should be disabled if an internal MAC transmit error is encountered. When used, this option requires that the operator explicitly cycle the admin state of the port to clear the error and re-enable the laser.
Platforms 

All

8.259. down-on-peer-tldp-pw-status-faults

down-on-peer-tldp-pw-status-faults

Syntax 
down-on-peer-tldp-pw-status-faults
no down-on-peer-tldp-pw-status-faults
Context 
[Tree] (config>service>epipe>pw-port down-on-peer-tldp-pw-status-faults)
Full Contexts 
configure service epipe pw-port down-on-peer-tldp-pw-status-faults
Description 

This command enables the PW port configured on an Epipe to go locally operationally down if any of the following status bits are received on a mate spoke-SDP across an FPE:

  1. 0x00000001 - Pseudowire Not Forwarding
  2. 0x00000002 - Local Attachment Circuit (ingress) Receive Fault
  3. 0x00000004 - Local Attachment Circuit (egress) Transmit Fault
  4. 0x00000008 - Local PSN-facing PW (ingress) Receive Fault
  5. 0x00000010 - Local PSN-facing PW (egress) Transmit Fault

The no form of the command specifies that the mate PW status fault bits are not taken into account in the operational state of the PW port.

Default 

no down-on-peer-tldp-pw-status-faults

Platforms 

All

8.260. down-threshold

down-threshold

Syntax 
down-threshold percent-change [bw absolute-change]
Context 
[Tree] (config>router>rsvp>dbw-accounting down-threshold)
Full Contexts 
configure router rsvp dbw-accounting down-threshold
Description 

This command sets the minimum change (in percent of the latest advertised value) above which a decrease in Maximum Reservable Link Bandwidth (MRLB) (IS-IS TE sub-TLV 10) or Maximum Reservable Bandwidth (MRB) (OSPF TE sub-TLV 7) triggers an IGP-TE update. This configuration only applies to a change in MRLB or MRB caused by dark bandwidth. Other events affecting MRLB/MRB (such as the change of the subscription factor or the loss of link in a LAG over which the RSVP interface is defined) trigger an immediate TE update, regardless of the importance of the impact.

Optionally, the threshold can also be expressed as an absolute value. In this case, the evaluation of the change is made using the percent change and the absolute change. An IGP-TE update is sent if both of these thresholds are crossed. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.

Default 

down-threshold 0

Parameters 
percent-change—
Specifies the minimum decrease in MRLB/MRB, expressed in percent.
Values—
0 to 100

 

absolute-change—
Specifies the minimum decrease in MRLB/MRB, expressed in Mb/s.
Values—
0 to 1000000

 

8.261. down-timeout

down-timeout

Syntax 
[no] down-timeout
Context 
[Tree] (config>aaa>radius-srv-plcy>servers>health-check down-timeout)
Full Contexts 
configure aaa radius-server-policy servers health-check down-timeout
Description 

This command determines the interval to wait for a RADIUS reply message from the RADIUS server before a RADIUS server is declared out-of-service. By default, the value of the down-timeout is the number of retries multiplied by the timeout interval. Each host will use the configured timeout and retry value under the AAA RADIUS server policy.

timeout refers to the waiting period before the next retry attempt.

retry refers the number of times the host will attempt to contact the RADIUS server.

If a RADIUS server is declared out-of-service, the host pending retry attempts will move on to the next RADIUS server.

The no form of this command reverts to the default.

Parameters 
minutes —
Specifies the timer to wait, in minutes, before declaring the RADIUS server that is down.
Values—
1 to 5

 

seconds—
Specifies the timer to wait, in seconds, before declaring the RADIUS server that is down.
Values—
1 to 59

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.262. down-when-looped

down-when-looped

Syntax 
down-when-looped
Context 
[Tree] (config>port>ethernet down-when-looped)
Full Contexts 
configure port ethernet down-when-looped
Description 

This command configures Ethernet loop detection attributes.

Platforms 

All

8.263. downlink

downlink

Syntax 
downlink aggregate-rate
downlink arbiter arbiter-name
downlink policer policer-id
downlink queue queue-id
downlink scheduler scheduler-name
no downlink
Context 
[Tree] (config>subscr-mgmt>gtp>apn-policy>apn>ambr-qos-mapping downlink)
Full Contexts 
configure subscriber-mgmt gtp apn-policy apn ambr-qos-mapping downlink
Description 

When enabled, the downlink rate in the APN-AMBR IE in an incoming GTP message is interpreted as a rate override for the specified egress QoS object. For queues and policers, the PIR is overridden.

This override uses standard SR OS QoS overrides. Therefore, a subsequent Gx/RADIUS-based override removes this override.

The no form of this command disables the override mechanism.

Default 

no downlink

Parameters 
aggregate-rate—
Specifies the aggregate rate.
arbiter-name—
Specifies the name of the arbiter to be overridden, up to 32 characters.
policer-id—
Specifies the ID of the policer to be overridden.
Values—
1 to 63

 

queue-id—
Specifies the ID of the queue to be overridden.
Values—
1 to 8

 

scheduler-name—
Specifies the name of the scheduler to be overridden, up to 32 characters.
Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.264. downlink-mbr-gbr

downlink-mbr-gbr

Syntax 
downlink-mbr-gbr aggregate-rate
downlink-mbr-gbr arbiter arbiter-name
downlink-mbr-gbr policer policer-id
downlink-mbr-gbr queue queue-id
downlink-mbr-gbr scheduler scheduler-name
no downlink-mbr-gbr
Context 
[Tree] (config>subscr-mgmt>sla-prof>pfcp>seq downlink-mbr-gbr)
Full Contexts 
configure subscriber-mgmt sla-profile pfcp-mappings session-qer downlink-mbr-gbr
Description 

This command configures the downlink MBR/GBR to QoS override mapping.

The no form of the command disables the downlink MBR/GBR mapping.

Default 

no downlink-mbr-gbr

Parameters 
aggregate-rate —
Maps the MBR/GBR to a rate override for the aggregate rate.
arbiter-name—
Specifies the arbiter target of the MBR/GBR override. The arbiter name can be up to 32 characters.
policer-id—
Specifies the policer ID target of the MBR/GBR override.
Values—
1 to 63

 

queue-id—
Specifies the queue ID target of the MBR/GBR override.
Values—
1 to 8

 

scheduler-name—
Specifies the scheduler name target of the MBR/GBR override. The scheduler name can be up to 32 characters.
Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.265. download-interval

download-interval

Syntax 
download-interval minutes
no download-interval
Context 
[Tree] (config>aaa>route-downloader download-interval)
Full Contexts 
configure aaa route-downloader download-interval
Description 

This command sets the time interval, in minutes, that the system waits for between two consecutive runs of the route-download process. The time is counted from the start-time of the run, thus, if an route-download process is still ongoing by the time the timer expires, the process will restart from count=1.

The no form of this command reverts to the default value.

Default 

download-interval 720

Parameters 
minutes—
Specifies the time interval, in minutes, between the start of the last route downloader run and the start of the next route downloader run.
Values—
1 to 1440

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.266. downstream-ip-filter

downstream-ip-filter

Syntax 
downstream-ip-filter filter-id
no downstream-ip-filter
Context 
[Tree] (config>service>vprn>nat>inside downstream-ip-filter)
Full Contexts 
configure service vprn nat inside downstream-ip-filter
Description 

This command assigns an IPv4 filter policy to the downstream NAT interface. This filter is applied to downstream traffic after the NAT function is applied but before it enters the inside VPRN instance.

The no form of the command removes the filter from the configuration.

Default 

no downstream-ip-filter

Parameters 
filter-id—
Specifies an existing IPv4 filter policy. Values can be expressed either as a decimal integer or as an ASCII string of up to 64 characters.
Values—
1 to 65535, or ASCII string of up to 64 characters

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

downstream-ip-filter

Syntax 
downstream-ip-filter filter-id
no downstream-ip-filter
Context 
[Tree] (config>router>nat>outside downstream-ip-filter)
[Tree] (config>service>vprn>nat>outside downstream-ip-filter)
Full Contexts 
configure router nat outside downstream-ip-filter
configure service vprn nat outside downstream-ip-filter
Description 

This command specifies a filter to apply to the downstream traffic after routing in the outside virtual router instance and before the NAT function; it is useful for traffic that bypasses the egress filters applied in the inside virtual router instance, such as DS-Lite traffic.

The no form of the command removes the filter from the configuration.

Default 

no downstream-ip-filter

Parameters 
filter-id—
Specifies a filter up to 64 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.267. downstream-ipv6-filter

downstream-ipv6-filter

Syntax 
downstream-ipv6-filter filter-id
no downstream-ipv6-filter
Context 
[Tree] (config>router>nat>outside downstream-ipv6-filter)
[Tree] (config>service>vprn>nat>outside downstream-ipv6-filter)
Full Contexts 
configure router nat outside downstream-ipv6-filter
configure service vprn nat outside downstream-ipv6-filter
Description 

This command configures the ipv6-filter for downstream traffic. This filter is applied to downstream traffic after it leaves the outside virtual router instance but before the NAT function is applied. This is useful for shared v6 filters that apply to all v6 DSM hosts.

The no form of the command removes the filter from the configuration.

Default 

no downstream-ipv6-filter

Parameters 
filter-id—
Specifies an IPv6 filter up to 64 characters in length.
Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.268. downstream-map-tlv

downstream-map-tlv

Syntax 
downstream-map-tlv downstream-map-tlv
no downstream-map-tlv
Context 
[Tree] (config>saa>test>type-multi-line>lsp-trace>sr-policy downstream-map-tlv)
Full Contexts 
configure saa test type-multi-line lsp-trace sr-policy downstream-map-tlv
Description 

This command configures the downstream mapping TLV that provides a mechanism for the sender and responder nodes to exchange and validate interface and label stack information for each downstream hop in the path of the LDP FEC an RSVP LSP, or a BGP IPv4 or IPv6 label route.

The following downstream mapping TLVs are supported: the original Downstream Mapping (DSMAP) TLV defined in RFC 4379 (obsoleted by RFC 8029) and the Downstream Detailed Mapping (DDMAP) TLV defined in RFC 6424.

The no form of this command removes the configuration.

Parameters 
downstream-map-tlv—
Specifies which format of the downstream mapping TLV to use in the LSP trace packet. The DSMAP TLV is the original format in RFC 4379 (obsoleted by RFC 8029). The DDMAP is the new enhanced format specified in RFC 6424. The user can also choose not to include the downstream mapping TLV by entering the value none. When lsp-trace is used on a MPLS-TP LSP (static option), it can only be executed if the control-channel is set to none. In addition, the DSMAP/DDMAP TLV is only included in the echo request message if the egress interface is either a numbered IP interface or an unnumbered IP interface. The TLV is not included if the egress interface is of type unnumbered-mpls-tp.
Values—
ddmap: Sends a detailed downstream mapping TLV.
dsmap: Sends a downstream mapping TLV.
none: No mapping TLV is sent.

 

Default—
Inherited from global configuration of downstream mapping TLV in option mpls-echo-request-downstream-map {dsmap | ddmap}.
Platforms 

All

8.269. dpd

dpd

Syntax 
dpd [interval interval] [max-retries max-retries] [reply-only]
no dpd
Context 
[Tree] (config>ipsec>ike-policy dpd)
Full Contexts 
configure ipsec ike-policy dpd
Description 

This command controls the dead peer detection mechanism.

The no form of this command removes the parameters from the configuration.

Default 

no dpd

Parameters 
interval
Specifies the DPD interval, in seconds. Since more time is necessary to determine if there is incoming traffic, the actual time needed to bring down the tunnel is larger than the DPD interval multiplied by max-retries.
Values—
10 to 300

 

Default—
30
max-retries
Specifies the maximum number of retries before the tunnel is removed.
Values—
2 to 5

 

Default—
3
reply-only—
Specifies whether to initiate a DPD request if there is an incoming ESP or IKE packet. Issuing the command without the reply-only keyword does not initiate a DPD request if there is an incoming ESP packet.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.270. dr-activation-timer

dr-activation-timer

Syntax 
dr-activation-timer seconds
Context 
[Tree] (config>service>vpls>bind>evpn-mcast-gateway dr-activation-timer)
Full Contexts 
configure service vpls allow-ip-int-bind evpn-mcast-gateway dr-activation-timer
Description 

This command configures the designated router (DR) activation timer for the EVPN gateway.

After the DR activation timer expires, each provider edge router (PE) runs the MEG or PEG DR election. The timer allows the PE to collect Inclusive Multicast Ethernet Tag routes from other MEG/PEG gateways and avoid running the DR election multiple times. The DR triggers the MEG/PEG first-hop and last-hop router actions on the router.

Default 

dr-activation-timer 3

Parameters 
seconds—
Specifies DR election wait time, in seconds.
Values—
0 to 100

 

Platforms 

All

8.271. drain

drain

Syntax 
[no] drain
Context 
[Tree] (config>service>vprn>dhcp>server>pool>subnet drain)
Full Contexts 
configure service vprn dhcp local-dhcp-server pool subnet drain
Description 

This command means no new leases can be assigned from this subnet and existing leases are cleaned up upon renew/rebind.

The no form of this command means the subnet is active and new leases can be assigned from it.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

drain

Syntax 
[no] drain
Context 
[Tree] (config>service>vprn>nat>outside>pool>address-range drain)
[Tree] (config>router>nat>outside>pool>address-range drain)
Full Contexts 
configure router nat outside pool address-range drain
configure service vprn nat outside pool address-range drain
Description 

This command starts or stops draining this NAT address range. When an address-range is being drained, it will not be used to serve new hosts. Existing hosts, however, will still be able to use the address that was assigned to them even if it is being drained. An address-range can only be deleted if the parent pool is shut down or if the range itself is effectively drained (hosts are no longer using the addresses).

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.272. drop

drop

Syntax 
[no] drop
Context 
[Tree] (config>app-assure>group>policy>aqp>entry>action drop)
Full Contexts 
configure application-assurance group policy app-qos-policy entry action drop
Description 

This command configures the drop action on flows matching this AQP entry. When enabled, all flow traffic matching this AQP entry will be dropped. When drop action is part of a set of multiple actions to be applied to a single flow as result of one or more AQP entry match, drop action will be performed first and no other action will be invoked on that flow.

The no form of this command disables the drop action on flows matching this AQP entry.

Default 

no drop

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

drop

Syntax 
drop
drop packet-length {lt | gt | eq} packet-length-value
drop packet-length range packet-length-value packet-length-value
drop pattern expression expression mask mask offset-type offset-type offset-value offset-value
drop ttl {lt | gt | eq} ttl-value
drop ttl range ttl-value ttl-value
Context 
[Tree] (config>filter>ip-filter>entry>action drop)
Full Contexts 
configure filter ip-filter entry action drop
Description 

This command configures the drop action for the traffic that matches this filter entry.

Traffic can, also, be dropped based on pkt-length, packet-length range, ttl, ttl range, or a pattern of conditional match criteria.

Packets that match the filter entry match criteria, and not the conditional match criteria value, are implicitly forwarded with no further match in the following filter entries.

For pattern match:

  1. the expression is left-aligned for odd number bytes, for example, the expression 0xABC is programmed 0x0ABC in the line card
  1. the 'data' offset requires protocol UDP or TCP to be selected in the filter entry match criteria.
Parameters 
packet-length—
Specifies drop packets matching both the filter entry match criteria and the packet-length value defined in the drop action statement. Packets matching the filter entry match criteria and not matching the packet-length value, as defined in the drop action statement, are implicitly forwarded with no further match in the following filter entries.
Values—
lt — Specifies “less than”. The lt parameter cannot be used with the lowest possible numerical value for the parameter.
gt — Specifies “greater than”. The gt parameter cannot be used with the highest possible numerical value for the parameter.
eq — Specifies “equal to”.

 

packet-length-value—
Specifies the packet length value for the rate limit action.
Values—
0 to 65535

 

range —
Specifies an inclusive range. When range is used, the start of the range (the first value entered) must be smaller than the end of the range (the second value entered).
expression—
Specifies the hexadecimal pattern to match; up to eight bytes.
Values—
0x0000000000000001 to 0xffffffffffffffff

 

mask —
Specifies the mask for the pattern expression, up to eight bytes.
Values—
0x0000000000000001 to 0xffffffffffffffff

 

offset-type —
Specifies the starting point reference for the offset-value of this pattern.
Values—
layer-3, layer-4, data, dns-qtype

 

offset-value —
Specifies the offset value for the pattern expression. Dns-qtype supports offset value of 0.
Values—
0 to 255

 

ttl-value
Specifies drop packets matching both the filter entry match criteria and the TTL value defined in the drop action statement. Packets matching the filter entry match criteria and not matching the TTL value, as defined in the drop action statement, are implicitly forwarded with no further match in the following filter entries.
Values—
0 to 255

 

Platforms 

All

drop

Syntax 
drop
drop hop-limit {lt | gt | eq} hop-limit-value
drop hop-limit range hop-limit-value hop-limit-value
drop pattern expression expression mask mask offset-type offset-type offset-value offset-value
drop payload-length {lt | gt | eq} payload-length-value
drop payload-length range payload-length-value payload-length-value
Context 
[Tree] (config>filter>ipv6-filter>entry>action drop)
Full Contexts 
configure filter ipv6-filter entry action drop
Description 

This command configures the drop action for the traffic that matches this filter entry.

Traffic can, also, be dropped based on payload-length, payload-length range, hop-limit, hop-limit range, or a pattern of conditional match criteria.

Packets that match the filter entry match criteria, but do not match the conditional match criteria value, are implicitly forwarded with no further match in the following filter entries.

For pattern match:

  1. the expression is left-aligned for the odd number bytes, for example, the expression 0xABC is programmed 0x0ABC in the line card
  2. the 'data' offset requires protocol UDP or TCP to be selected in the filter entry match criteria
Parameters 
hop-limit—
Specifies the hop-limit value for the drop action.
Values—
lt — Specifies “less than”. The lt parameter cannot be used with the lowest possible numerical value for the parameter.
eq — Specifies “equal to”.
gt — Specifies “greater than”. The gt parameter cannot be used with the highest possible numerical value for the parameter.

 

hop-limit-value
Specifies the hop-limit value for the drop action.
Values—
0 to 255

 

range —
Specifies an inclusive range. When the range parameter is used, the start of the range (the first value entered) must be smaller than the end of the range (the second value entered).
expression—
Specifies the hexadecimal pattern to match; up to eight bytes.
Values—
0x0000000000000001 to 0xffffffffffffffff

 

mask —
Specifies the mask for the pattern expression, up to eight bytes.
Values—
0x0000000000000001 to 0xffffffffffffffff

 

offset-type —
Specifies the starting point reference for the offset-value of this pattern.
Values—
layer-3, layer-4, data, dns-qtype

 

offset-value —
Specifies the offset value for the pattern expression. Dns-qtype supports offset value of 0.
Values—
0 to 255

 

payload-length—
Specifies drop packets matching both the filter entry match criteria and the payload-length-value defined in the drop action statement. Packets matching the filter entry match criteria and not matching the payload-length-value, as defined in the drop action statement, are implicitly forwarded with no further match in the following filter entries.
Values—
lt — Specifies “less than”. The lt parameter cannot be used with the lowest possible numerical value for the parameter.
gt — Specifies “greater than”. The gt parameter cannot be used with the highest possible numerical value for the parameter.
eq — Specifies “equal to”.

 

payload-length-value—
Specifies the payload length value for the drop action.
Values—
0 to 65535

 

Platforms 

All

drop

Syntax 
drop
Context 
[Tree] (config>filter>mac-filter>entry>action drop)
Full Contexts 
configure filter mac-filter entry action drop
Description 

This command sets the MAC filter entry action to drop.

Platforms 

All

8.273. drop-count

drop-count

Syntax 
drop-count count
no drop-count
Context 
[Tree] (config>service>vprn>static-route-entry>indirect>cpe-check drop-count)
[Tree] (config>service>vprn>static-route-entry>next-hop>cpe-check drop-count)
Full Contexts 
configure service vprn static-route-entry indirect cpe-check drop-count
configure service vprn static-route-entry next-hop cpe-check drop-count
Description 

This optional parameter specifies the number of consecutive ping-replies that must be missed to declare the CPE down and to deactivate the associated static route.

Default 

drop-count 3

Parameters 
count—
An integer count value.
Values—
1 to 255

 

Platforms 

All

drop-count

Syntax 
drop-count consecutive-failures [hold-down seconds]
no drop-count
Context 
[Tree] (config>filter>redirect-policy>dest>ping-test drop-count)
Full Contexts 
configure filter redirect-policy destination ping-test drop-count
Description 

This command specifies the number of consecutive requests that must fail for the destination to be declared unreachable and the time to hold destination unreachable before repeating tests.

Default 

drop-count 3 hold-down 0

Parameters 
consecutive-failures—
Specifies the number of consecutive ping test failures before declaring the destination down.
Values—
1 to 60

 

hold-down seconds
Specifies the amount of time, in seconds, that the system should be held down if any of the test has marked it unreachable.
Values—
0 to 86400

 

Platforms 

All

drop-count

Syntax 
drop-count count
no drop-count
Context 
[Tree] (config>router>static-route-entry>indirect>cpe-check drop-count)
[Tree] (config>router>static-route-entry>next-hop>cpe-check drop-count)
Full Contexts 
configure router static-route-entry indirect cpe-check drop-count
configure router static-route-entry next-hop cpe-check drop-count
Description 

This optional parameter specifies the number of consecutive ping-replies that must be missed to declare the CPE down and to deactivate the associated static route.

Default 

drop-count 3

Parameters 
count—
Specifies the integer count value.
Values—
1 to 255

 

Platforms 

All

drop-count

Syntax 
drop-count count
no drop-count
Context 
[Tree] (config>vrrp>policy>priority-event>host-unreachable drop-count)
Full Contexts 
configure vrrp policy priority-event host-unreachable drop-count
Description 

This command configures the number of consecutively sent ICMP echo request messages that must fail before the host unreachable priority control event is set.

The drop-count command is used to define the number of consecutive message send attempts that must fail for the host-unreachable priority event to enter the set state. Each unsuccessful attempt increments the event’s consecutive message drop counter. With each successful attempt, the event’s consecutive message drop counter resets to zero.

If the event’s consecutive message drop counter reaches the drop-count value, the host-unreachable priority event enters the set state.

The event’s hold-set value defines how long the event must stay in the set state even when a successful message attempt clears the consecutive drop counter. The event is not cleared until the consecutive drop counter is less than the drop-count value and the hold-set timer has a value of zero (expired).

The no form of the command reverts to the default value.

Default 

drop-count 3 — 3 consecutive ICMP echo request failures are required before the host unreachable priority control event is set.

Parameters 
count—
The number of ICMP echo request message attempts that must fail for the event to enter the set state. It also defines the threshold so a lower consecutive number of failures can clear the event state.
Values—
1 to 60

 

Platforms 

All

8.274. drop-extracted-traffic

drop-extracted-traffic

Syntax 
drop-extracted-traffic
Context 
[Tree] (config>filter>ip-filter>entry>action drop-extracted-traffic)
[Tree] (config>filter>ipv6-filter>entry>action drop-extracted-traffic)
Full Contexts 
configure filter ip-filter entry action drop-extracted-traffic
configure filter ipv6-filter entry action drop-extracted-traffic
Description 

This command specifies that a packet matching this filter entry is dropped if extracted to the CPM. Packets matching the filter entry match criteria and not extracted to the CPM are forwarded with no further match in the following filter entries.

Platforms 

All

8.275. drop-routes-with-srv6-tlvs

drop-routes-with-srv6-tlvs

Syntax 
[no] drop-routes-with-srv6-tlvs
Context 
[Tree] (config>router>bgp>group>srv6>route drop-routes-with-srv6-tlvs)
[Tree] (config>router>bgp>group>neighbor>srv6>route drop-routes-with-srv6-tlvs)
Full Contexts 
configure router bgp group neighbor segment-routing-v6 route-advertisement drop-routes-with-srv6-tlvs
configure router bgp group segment-routing-v6 route-advertisement drop-routes-with-srv6-tlvs
Description 

This command configures the router to drop and not advertise BGP routes (that belong to any address family) with SRv6 TLVs.

The no form of this command configures the router to advertise BGP routes with SRv6 TLVs.

Default 

no drop-routes-with-srv6-tlvs

Platforms 

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

8.276. drop-tail

drop-tail

Syntax 
drop-tail
Context 
[Tree] (config>mcast-mgmt>bw-plcy>t2>prim-path>queue drop-tail)
[Tree] (config>mcast-mgmt>bw-plcy>t2>sec-path>queue drop-tail)
Full Contexts 
configure mcast-management bandwidth-policy t2-paths primary-path queue-parameters drop-tail
configure mcast-management bandwidth-policy t2-paths secondary-path queue-parameters drop-tail
Description 

Commands in this context configure queue drop-tail parameters.

Platforms 

7450 ESS, 7750 SR-7/12/12e, 7750 SR-s, 7950 XRS, VSR

drop-tail

Syntax 
drop-tail
Context 
[Tree] (config>service>ies>if>sap>egress>queue-override>queue drop-tail)
[Tree] (config>service>ies>if>sap>ingress>queue-override>queue drop-tail)
[Tree] (config>service>vpls>sap>egress>queue-override>queue drop-tail)
[Tree] (config>service>vpls>sap>ingress>queue-override>queue drop-tail)
Full Contexts 
configure service ies interface sap egress queue-override queue drop-tail
configure service ies interface sap ingress queue-override queue drop-tail
configure service vpls sap egress queue-override queue drop-tail
configure service vpls sap ingress queue-override queue drop-tail
Description 

Commands in this context configure queue drop tail parameters.

Platforms 

All

drop-tail

Syntax 
drop-tail
Context 
[Tree] (config>port>eth>access>ing>qgrp>qover>q drop-tail)
[Tree] (config>port>eth>access>egr>qgrp>qover>q drop-tail)
[Tree] (config>port>ethernet>network>egr>qgrp>qover>q drop-tail)
Full Contexts 
configure port ethernet access egress queue-group queue-overrides queue drop-tail
configure port ethernet access ingress queue-group queue-overrides queue drop-tail
configure port ethernet network egress queue-group queue-overrides queue drop-tail
Description 

Commands in this context configure queue drop tail parameters.

Platforms 

All

drop-tail

Syntax 
drop-tail
Context 
[Tree] (config>service>apipe>sap>egress>queue-override>queue drop-tail)
[Tree] (config>service>apipe>sap>ingress>queue-override>queue drop-tail)
[Tree] (config>service>cpipe>sap>egress>queue-override>queue drop-tail)
[Tree] (config>service>cpipe>sap>ingress>queue-override>queue drop-tail)
[Tree] (config>service>epipe>sap>egress>queue-override>queue drop-tail)
[Tree] (config>service>epipe>sap>ingress>queue-override>queue drop-tail)
[Tree] (config>service>fpipe>sap>egress>queue-override>queue drop-tail)
[Tree] (config>service>fpipe>sap>ingress>queue-override>queue drop-tail)
[Tree] (config>service>ipipe>sap>egress>queue-override>queue drop-tail)
[Tree] (config>service>ipipe>sap>ingress>queue-override>queue drop-tail)
Full Contexts 
configure service apipe sap egress queue-override queue drop-tail
configure service apipe sap ingress queue-override queue drop-tail
configure service cpipe sap egress queue-override queue drop-tail
configure service cpipe sap ingress queue-override queue drop-tail
configure service epipe sap egress queue-override queue drop-tail
configure service epipe sap ingress queue-override queue drop-tail
configure service fpipe sap egress queue-override queue drop-tail
configure service fpipe sap ingress queue-override queue drop-tail
configure service ipipe sap egress queue-override queue drop-tail
configure service ipipe sap ingress queue-override queue drop-tail
Description 

Commands in this context configure queue drop tail parameters.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  1. configure service cpipe sap ingress queue-override queue drop-tail
  2. configure service fpipe sap ingress queue-override queue drop-tail
  3. configure service fpipe sap egress queue-override queue drop-tail
  4. configure service cpipe sap egress queue-override queue drop-tail

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e, 7950 XRS

  1. configure service apipe sap ingress queue-override queue drop-tail
  2. configure service apipe sap egress queue-override queue drop-tail

All

  1. configure service epipe sap egress queue-override queue drop-tail
  2. configure service ipipe sap egress queue-override queue drop-tail
  3. configure service epipe sap ingress queue-override queue drop-tail
  4. configure service ipipe sap ingress queue-override queue drop-tail

drop-tail

Syntax 
drop-tail
Context 
[Tree] (config>service>vprn>if>sap>egress>queue-override>queue drop-tail)
[Tree] (config>service>vprn>if>sap>ingress>queue-override>queue drop-tail)
Full Contexts 
configure service vprn interface sap egress queue-override queue drop-tail
configure service vprn interface sap ingress queue-override queue drop-tail
Description 

Commands in this context configure queue drop tail parameters.

Platforms 

All

drop-tail

Syntax 
drop-tail
Context 
[Tree] (config>qos>sap-egress>queue drop-tail)
[Tree] (config>qos>sap-ingress>queue drop-tail)
Full Contexts 
configure qos sap-egress queue drop-tail
configure qos sap-ingress queue drop-tail
Description 

Commands in this context configure queue drop tail parameters.

Platforms 

All

drop-tail

Syntax 
drop-tail
Context 
[Tree] (config>qos>network-queue>queue drop-tail)
Full Contexts 
configure qos network-queue queue drop-tail
Description 

Commands in this context configure queue drop tail parameters.

Platforms 

All

drop-tail

Syntax 
drop-tail
Context 
[Tree] (config>qos>qgrps>ing>qgrp>queue drop-tail)
[Tree] (config>qos>qgrps>egr>qgrp>queue drop-tail)
Full Contexts 
configure qos queue-group-templates egress queue-group queue drop-tail
configure qos queue-group-templates ingress queue-group queue drop-tail
Description 

Commands in this context configure queue drop-tail parameters.

Platforms 

All

drop-tail

Syntax 
drop-tail
Context 
[Tree] (config>qos>shared-queue>queue drop-tail)
Full Contexts 
configure qos shared-queue queue drop-tail
Description 

Commands in this context configure queue drop tail parameters.

Platforms 

All

8.277. drop-unidentified-traffic

drop-unidentified-traffic

Syntax 
[no] drop-unidentified-traffic
Context 
[Tree] (config>router>nat>inside>subscriber-identification drop-unidentified-traffic)
[Tree] (config>service>vprn>nat>inside>subscriber-identification drop-unidentified-traffic)
Full Contexts 
configure router nat inside subscriber-identification drop-unidentified-traffic
configure service vprn nat inside subscriber-identification drop-unidentified-traffic
Description 

When this command denies address translation to subscribers that have not been identified via accounting messages sent by BNG and received by Radius accounting proxy. This command has effect only in Subscriber Aware Application.

Default 

no drop-unidentified-traffic

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.278. drop-zero-ipv4-checksum

drop-zero-ipv4-checksum

Syntax 
[no] drop-zero-ipv4-checksum
Context 
[Tree] (config>service>vprn>inside>nat64 drop-zero-ipv4-checksum)
Full Contexts 
configure service vprn inside nat64 drop-zero-ipv4-checksum
Description 

This command specifies if UDP datagrams with zero IPv4 checksum are dropped.

If this command is disabled, the system calculates the IPv6 checksum for each such datagram.

drop-zero-ipv4-checksum

Syntax 
[no] drop-zero-ipv4-checksum
Context 
[Tree] (config>service>vprn>nat>inside>nat64 drop-zero-ipv4-checksum)
[Tree] (config>router>nat>inside>nat64 drop-zero-ipv4-checksum)
Full Contexts 
configure router nat inside nat64 drop-zero-ipv4-checksum
configure service vprn nat inside nat64 drop-zero-ipv4-checksum
Description 

This command enables the NAT64 node to drop received UDP datagrams with zero IPv4 checksum. By default, checksum is re-calculated for non-fragmented datagrams.

The no form of the command disables the command.

Default 

disabled

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.279. dropped-only

dropped-only

Syntax 
[no] dropped-only
Context 
[Tree] (debug>subscr-mgmt>vrgw>brg>pppoe-client>brg-id dropped-only)
Full Contexts 
debug subscriber-mgmt vrgw brg pppoe-client brg-id dropped-only
Description 

This command specifies that only packets that are dropped by the vRGW will be shown in debugging.

Default 

dropped-only

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.280. ds1

ds1

Syntax 
[no] ds1 ds1-id
Context 
[Tree] (config>port>tdm ds1)
Full Contexts 
configure port tdm ds1
Description 

Commands in this context configure digital signal level 1 (DS-1) frame parameters. The T-Carrier system was the first successful system that supported digitized voice transmission. The original transmission rate (1.544 Mb/s) in the T-1 (DS-1) line is commonly used by Internet service providers (ISPs) to connect to the Internet.

North America uses the T-Carrier system while Europe uses the E-Carrier system of transmission, using multiples of the DS- system. Digital signals are carried inside the carrier systems.

T-1 transmits DS-1-formatted data at 1.544 Mb/s through the network. The corresponding European carrier is E-1 with a data rate of 2.048 Mb/s. E-1 and T-1 (DS-1) can be interconnected for international use.

The no form of this command disables DS-1 capabilities.

Parameters 
ds1-id —
Identifies the DS-1 channel being created.
Values—
DS1: 1 to 28, ds1-sonet-sdh-index

 

Platforms 

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

8.281. ds3

ds3

Syntax 
[no] ds3 [sonet-sdh-index]
Context 
[Tree] (config>port>tdm ds3)
Full Contexts 
configure port tdm ds3
Description 

Commands in this context configure DS-3 parameters. DS-3 lines provide a speed of 44.736 Mb/s and is also frequently used by service providers. DS-3 lines carry 28 DS-1 signals and a 44.736 Mb/s data rate.

A DS-3 connection typically supports data rates of about 43 Mb/s. A T-3 line actually consists of 672 individual channels, each supporting 64 kb/s. T-3 lines are used mainly by Service Providers to connect to the Internet backbone and for the backbone itself.

Depending on the MDA type, the DS-3 parameters must be disabled if clear channel is enabled by default (for example, on the m12-ds3 MDA). Clear channel is a channel that uses out-of-band signaling, not in-band signaling, so the channel's entire bit rate is available. Channelization must be explicitly specified. Note that if DS-3 nodes are provisioned on a channelized SONET/SDH MDA you must provision the parent STS-1 SONET/STM0 SDH path first.

North America uses the T-Carrier system while Europe uses the E-Carrier system of transmission, using multiples of the DS system. Digital signals are carried inside the carrier systems.

The no form of this command disables DS-3 capabilities.

Parameters 
sonet-sdh-index—
Specifies the components making up the specified SONET/SDH Path. Depending on the type of SONET/SDH port the sonet-sdh-index must specify more path indexes to specify the payload location of the path. The sonet-sdh-index differs for SONET and SDH ports.
Platforms 

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

8.282. dsap

dsap

Syntax 
dsap dsap-value [dsap-mask]
no dsap
Context 
[Tree] (config>qos>sap-ingress>mac-criteria>entry>match dsap)
Full Contexts 
configure qos sap-ingress mac-criteria entry match dsap
Description 

Configures an Ethernet 802.2 LLC DSAP value or range for an ingress SAP QoS policy match criterion.

This is a 1-byte field that is part of the 802.2 LLC header of the IEEE 802.3 Ethernet Frame.

The snap-pid field, etype field, ssap, and dsap fields are mutually exclusive and cannot be part of the same match criteria.

Use the no form of this command to remove the dsap value as the match criterion.

Default 

no dsap

Parameters 
dsap-value—
The 8-bit dsap match criteria value in hexadecimal.
Values—
0x00 to 0xFF (hex)

 

dsap-mask—
This is optional and can be used when specifying a range of dsap values to use as the match criteria.

This 8-bit mask can be configured using the following formats:

Format Style

Format Syntax

Example

Decimal

DDD

240

Hexadecimal

0xHH

0xF0

Binary

0bBBBBBBBB

0b11110000

Values—
0x00 to 0xFF (hex)

 

Default—
FF
Platforms 

All

dsap

Syntax 
dsap dsap-value [dsap-mask]
no dsap
Context 
[Tree] (config>filter>mac-filter>entry>match dsap)
Full Contexts 
configure filter mac-filter entry match dsap
Description 

Configures an Ethernet 802.2 LLC DSAP value or range for a MAC filter match criterion.

This is a one-byte field that is part of the 802.2 LLC header of the IEEE 802.3 Ethernet Frame.

The snap-pid field, etype field, ssap and dsap fields are mutually exclusive and may not be part of the same match criteria.

Use the no form of the command to remove the dsap value as the match criterion.

Default 

no dsap

Parameters 
dsap-value—
Specifies the 8-bit dsap match criteria value which can be expressed in decimal integer, hexadecimal or binary format.
Values—
0 to 255

 

dsap-mask—
Specifies an optional parameter that may be used when specifying a range of dsap values to use as the match criteria.

This 8 bit mask can be configured using the decimal integer, hexadecimal or binary formats described in the following table.

Format Style

Format Syntax

Example

Decimal

DDD

240

Hexadecimal

0xHH

0xF0

Binary

0bBBBBBBBB

0b11110000

Default—
255 (exact match)
0x00 to 0xFF
Values—
0 to 255

 

Platforms 

All

dsap

Syntax 
dsap dsap-value [dsap-mask]
Context 
[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry>match dsap)
Full Contexts 
configure system security management-access-filter mac-filter entry match dsap
Description 

This command configures DSAP match conditions.

Parameters 
dsap-value—
Specifies the 8-bit DSAP match criteria value in hexadecimal.
Values—
0x00 to 0xFF (hex)

 

mask—
Specifies a range of DSAP values to use as the match criteria.

This 8 bit mask can be configured using the formats described in Table 41:

Table 41:  Format Styles

Format Style

Format Syntax

Example

Decimal

DDD

240

Hexadecimal

0xHH

0xF0

Binary

0bBBBBBBBB

0b11110000

Default—
FF (hex) (exact match)
Values—
0x00 to 0xFF

 

Platforms 

All

8.283. dscp

dscp

Syntax 
dscp dscp-name
no dscp
Context 
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ip>entry>match dscp)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ipv6>entry>match dscp)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ip>entry>match dscp)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ipv6>entry>match dscp)
Full Contexts 
configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ip-filter-entries entry match dscp
configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ipv6-filter-entries entry match dscp
configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ip-filter-entries entry match dscp
configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ipv6-filter-entries entry match dscp
Description 

This command configures DSCP match conditions.

The no form of this command reverts to the default.

Parameters 
dscp-name—
Specifies the DSCP name, up to 32 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dscp

Syntax 
dscp dscp-name
no dscp
Context 
[Tree] (config>service>ies>if>sap>ip-tunnel dscp)
Full Contexts 
configure service ies interface sap ip-tunnel dscp
Description 

This command sets the DSCP code-point in the outer IP header of encapsulated packets associated with a particular tunnel.

The no form of this command copies the DSCP value from the inner IP header (after remarking by the private tunnel SAP egress qos policy) to the outer IP header.

Default 

no dscp

Parameters 
dscp—
Specifies the DSCP code-point to be used.
Values—
be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dscp

Syntax 
dscp dscp-name fc fc-name
no dscp dscp-name
Context 
[Tree] (config>router>sgt-qos dscp)
[Tree] (config>service>vprn>sgt-qos dscp)
Full Contexts 
configure router sgt-qos dscp
configure service vprn sgt-qos dscp
Description 

This command creates a mapping between the DiffServ Code Point (DSCP) of the self-generated traffic and the forwarding class.

Self-generated traffic that matches the specified DSCP will be assigned to the corresponding forwarding class. Multiple commands can be entered to define the association of some or all 64 DSCPs to the forwarding class.

All DSCP names that define a DSCP value must be explicitly defined.

The no form of this command removes the DSCP-to-forwarding class association.

Parameters 
dscp-name—
Specifies the name of the DSCP to be associated with the forwarding class. DiffServ code point can only be specified by its name and only an existing DiffServ code point can be specified. The software provides names for the well-known code points.
Values—
be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5, nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29, cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63

 

fc fc-name
Specifies the forwarding class name. All packets with a DSCP value or MPLS EXP bit that are not defined will be placed in this forwarding class.
Values—
be, l2, af, l1, h2, ef, h1, nc

 

Platforms 

All

dscp

Syntax 
dscp dscp-name
no dscp
Context 
[Tree] (config>service>vprn>if>sap>ip-tunnel dscp)
Full Contexts 
configure service vprn interface sap ip-tunnel dscp
Description 

This command sets the DSCP code-point in the outer IP header of GRE encapsulated packets associated with a particular GRE tunnel. The default, set using the no form of this command, is to copy the DSCP value from the inner IP header (after remarking by the private tunnel SAP egress qos policy) to the outer IP header.

Default 

no dscp

Parameters 
dscp—
Specifies the DSCP code-point to be used.
Values—
be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dscp

Syntax 
dscp in-profile dscp-name out-profile dscp-name
no dscp
Context 
[Tree] (config>app-assure>group>policy>aqp>entry>action>remark dscp)
Full Contexts 
configure application-assurance group policy app-qos-policy entry action remark dscp
Description 

Commands in this context configure DSCP remark action or actions on flows matching this AQP entry. When enabled, all packets for all flows matching this AQP entry will be remarked to the configured DSCP name.

DSCP remark can only be applied when the entry remarks forwarding class or forwarding class and priority. In-profile and out-of profile of a given packet for DSCP remark is assessed after all AQP policing and priority remarking actions took place.

The no form of this command stops DSCP remarking action on flows matching this AQP entry.

Default 

no dscp

Parameters 
in-profile dscp-name
Specifies the DSCP name to use to remark in-profile flows that match this policy.
out-profile dscp-name
Specifies the DSCP name to use to remark out-of-profile flows that match this policy.
Values—
be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dscp

Syntax 
dscp {eq | neq} dscp-name
no dscp
Context 
[Tree] (config>app-assure>group>policy>aqp>entry>match dscp)
[Tree] (config>app-assure>group>sess-fltr>entry>match dscp)
Full Contexts 
configure application-assurance group policy app-qos-policy entry match dscp
configure application-assurance group session-filter entry match dscp
Description 

This command adds a DSCP name to the match criteria used by this entry.

The no form of this command removes dscp from match criteria for this entry.

Default 

no dscp

Parameters 
eq—
Specifies that the value configured and the value in the flow are equal.
neq —
Specifies that the value configured differs from the value in the flow.
dscp-name —
Specifies the DSCP name to be used in the match.
Values—
be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dscp

Syntax 
dscp dscp-name
no dscp
Context 
[Tree] (config>test-oam>build-packet>header>ipv4 dscp)
[Tree] (debug>oam>build-packet>packet>field-override>header>ipv4 dscp)
Full Contexts 
configure test-oam build-packet header ipv4 dscp
debug oam build-packet packet field-override header ipv4 dscp
Description 

This command defines the DSCP value to be used in the IPv4 header.

The no form of this command reverts to the default.

Default 

dscp be

Parameters 
dscp-name—
Specifies the DSCP value to be used in the IPv4 header.
Values—
be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5, nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29, cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dscp

Syntax 
dscp dscp-name
no dscp
Context 
[Tree] (config>test-oam>build-packet>header>ipv6 dscp)
[Tree] (debug>oam>build-packet>packet>field-override>header>ipv6 dscp)
Full Contexts 
configure test-oam build-packet header ipv6 dscp
debug oam build-packet packet field-override header ipv6 dscp
Description 

This command defines the DSCP value to be used in the IPv6 header.

The no form of this command removes the DSCP name.

Parameters 
dscp-name—
Specifies the DSCP value to be used in the IPv6 header.
Values—
be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5, nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dscp

Syntax 
dscp dscp-name
dscp resolve
Context 
[Tree] (config>oam-pm>session>ip dscp)
Full Contexts 
configure oam-pm session ip dscp
Description 

This command can be used to explicitly configure the DSCP value to the specified dscp-name, or to use the configured fc and profile values to derive the DSCP value from the egress network QoS policy 1.

Default 

dscp resolve

Parameters 
dscp-name—
Specifies the Diffserv code point name.
Values—
be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5, nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29, cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63

 

resolve—
Specifies to use the configured fc and profile values to derive the DSCP value from the egress network QoS policy 1.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dscp

Syntax 
dscp dscp-name
no dscp
Context 
[Tree] (config>oam-pm>session>mpls dscp)
Full Contexts 
configure oam-pm session mpls dscp
Description 

This command can be used to explicitly configure the DSCP value that is carried in the DM PDU. This value is not used on the launch point or the reflector to influence the QoS behavior on the network elements. The frame itself has no IP information because it uses the General Associated Channel Header (G-Ach). The fc and profile values are used to influence QoS behavior on the launch point and the responder.

The no form of this command reverts the dscp carried in the DM PDU to default.

Default 

dscp be

Parameters 
dscp-name—
Specifies the Diffserv code point name.
Values—
be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5,nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41,af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29, cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63

 

Values—
be

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dscp

Syntax 
dscp dscp-name [dscp-name] fc fc-name [priority {low | high}]
no dscp dscp-name [dscp-name]
Context 
[Tree] (config>qos>sap-ingress dscp)
Full Contexts 
configure qos sap-ingress dscp
Description 

This command explicitly sets the forwarding class or subclass or enqueuing priority when a packet is marked with the DiffServ Code Point (DSCP) value contained in the dscp-name. A list of up to eight dscp-names can be entered on a single command. The lists of dscp-names within the configuration are managed by the system to ensure that each list does not exceed eight names. Entering more than eight dscp-names with the same parameters (fc, priority) will result in multiple lists being created. Conversely, multiple lists with the same parameters (fc, priority) are merged and the lists repacked to a maximum of eight per list if DSCP names are removed or the parameters changed so the multiple lists use the same parameters. Also, if a subset of a list is entered with different parameters, then a new list will be created for the subset. When the list is stored in the configuration, the DSCP names are sorted by their DSCP value in ascending numerical order; consequently, the order in the configuration may not be exactly what the user entered.

Adding a DSCP rule on the policy forces packets that match the DSCP value specified to override the forwarding class and enqueuing priority based on the parameters included in the DSCP rule. When the forwarding class is not specified in the rule, a matching packet preserves (or inherits) the existing forwarding class derived from earlier matches in the classification hierarchy. When the enqueuing priority is not specified in the rule, a matching packet preserves (or inherits) the existing enqueuing priority derived from earlier matches in the classification hierarchy.

The DSCP value (referred to here by dscp-name) is derived from the most significant six bits in the IPv4 header ToS byte field (DSCP bits) or the Traffic Class field from the IPv6 header. If the packet does not have an IP header, DSCP-based matching is not performed. The six DSCP bits define 64 DSCP values used to map packets to per-hop Quality of Service (QoS) behavior. The most significant three bits in the IP header ToS byte field are also commonly used in a more traditional manner to specify an IP precedence value, causing an overlap between the precedence space and the DSCP space. Both IP precedence and DSCP classification rules are supported.

DSCP rules have a higher match priority than IP precedence rules and where a dscp-name DSCP value overlaps an ip-prec-value, the DSCP rule takes precedence.

The no form of this command removes the specified the dscp-names from the explicit DSCP classification rule in the SAP ingress policy. As dscp-names are removed, the system repacks the lists of dscp-names with the same parameters (up to eight per list). As the no command does not have any additional parameters, it is possible to remove multiple dscp-names from multiple DSCP statements having different parameters with one command. If a dscp-name specified in a no command does not exist in any DSCP statement, then the command is aborted at that point with an error message displayed; any DSCP names in the list before the failed entry will be processed as normal but the processing will stop at the failed entry so that the remainder of the list is not processed.

Removing the dscp-name from the policy immediately removes the DSCP name on all ingress SAPs using the policy.

Parameters 
dscp-name—
The DSCP name is a required parameter that specifies the unique IP header ToS byte DSCP bits value that will match the DSCP rule. If the command is executed multiple times with the same dscp-name, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.

A maximum of 64 DSCP rules are allowed on a single policy and a maximum of eight dscp-names can be specified in a single statement.

The specified name must exist as a dscp-name. SR OS software provides names for the well-known code points; these can be shown using the show qos dscp-table command.

fc fc-name
The value given for fc-name must be one of the predefined forwarding classes in the system. Specifying the fc-name is optional. When a packet matches the rule, the forwarding class is only overridden when the fc fc-name parameter is defined on the rule. If the packet matches and the forwarding class is not explicitly defined in the rule, the forwarding class is inherited based on previous rule matches.

The subclass-name parameter is optional and used with the fc-name parameter to define a preexisting subclass. The fc-name and subclass-name parameters must be separated by a period (.). If subclass-name does not exist in the context of fc-name, an error will occur. If subclass-name is removed using the no fc fc-name.subclass-name force command, the default-fc command will automatically drop the subclass-name and only use fc-name (the parent forwarding class for the subclass) as the forwarding class.

Values—

fc:

class[.subclass]

class: be, l2, af, l1, h2, ef, h1, nc

subclass: 29 characters max

 

Default—
Inherit (when fc fc-name is not defined, the rule preserves the previous forwarding class of the packet).
priority —
This parameter overrides the default enqueuing priority for all packets received on an ingress SAP using this policy that match this rule. Specifying the priority is optional. When a packet matches the rule, the enqueuing priority is only overridden when the priority parameter is defined on the rule. If the packet matches and priority is not explicitly defined in the rule, the enqueuing priority is inherited based on previous rule matches.
Default—
Inherits the priority defined by the default-priority statement.
high—
This parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to high for a packet increases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
low—
This parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to low for a packet decreases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
Platforms 

All

dscp

Syntax 
dscp dscp-name
no dscp
Context 
[Tree] (config>qos>sap-ingress>ip-criteria>entry>match dscp)
[Tree] (config>qos>sap-egress>ip-criteria>entry>match dscp)
[Tree] (config>qos>sap-ingress>ipv6-criteria>entry>match dscp)
[Tree] (config>qos>sap-egress>ipv6-criteria>entry>match dscp)
Full Contexts 
configure qos sap-egress ip-criteria entry match dscp
configure qos sap-egress ipv6-criteria entry match dscp
configure qos sap-ingress ip-criteria entry match dscp
configure qos sap-ingress ipv6-criteria entry match dscp
Description 

This command configures a DSCP code point to be used as a SAP QoS policy match criterion.

The no form of this command removes the DSCP match criterion.

Default 

no dscp

Parameters 
dscp-name—
Specifies a dscp name that has been previously mapped to a value using the dscp-name command. The DiffServ code point can only be specified by its name.
Values—
be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, c p35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

 

Platforms 

All

dscp

Syntax 
dscp dscp-name [dscp-name] [fc fc-name] [profile {in | out | exceed | inplus}]
no dscp dscp-name [dscp-name]
Context 
[Tree] (config>qos>sap-egress dscp)
Full Contexts 
configure qos sap-egress dscp
Description 

This command defines IP Differentiated Services Code Point (DSCP) names that must be matched to perform the associated reclassification actions. The specified name must exist as a DSCP name. SR OS software provides names for the well-known code points. A list of up to eight DSCP names can be entered on a single command. The lists of DSCP names within the configuration are managed by the system to ensure that each list does not exceed eight names. Entering more than eight DSCP names with the same parameters (fc and profile) results in multiple lists being created. Conversely, multiple lists with the same parameters (fc and profile) are merged and the lists repacked to a maximum of eight per list if DSCP names are removed or the parameters changed so the multiple lists use the same parameters. Also, if a subset of a list is entered with different parameters, a new list is created for the subset. When the list is stored in the configuration, the DSCP names are sorted by their DSCP value in ascending numerical order; consequently, the order in the configuration may not be exactly what the user entered.

If an egress packet on the SAP matches an IP DSCP value corresponding to a specified DSCP name, the forwarding class, profile egress queue accounting behavior may be overridden. By default, the forwarding class and profile of the packet is derived from ingress classification and profiling functions. Matching a DSCP-based reclassification rule will override all IP precedence-based reclassification rule actions.

The IP DSCP bits used to match against DSCP reclassification rules come from the Type of Service (ToS) field within the IPv4 header or the traffic class field from the IPv6 header. If the packet does not have an IP header, DSCP-based matching is not performed.

The reclassification actions from a DSCP reclassification rule may be overridden by an IP flow match event.

The fc keyword is optional. When specified, the egress classification rule will overwrite the forwarding class derived from ingress. The new forwarding class is used for egress remarking and queue mapping decisions. If an IP criteria match occurs after the DSCP match, the new forwarding class may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new fc, the fc from the dscp match will be used.

The profile keyword is optional. When specified, the egress classification rule will overwrite the profile of the packet derived from ingress. The new profile value is used for egress remarking and queue congestion behavior. If an IP criteria match occurs after the DSCP match, the new profile may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new profile, the profile from the DSCP match will be used.

The no form of this command removes the specified the dscp-names from the reclassification rule in the SAP egress QoS policy. As dscp-names are removed, the system repacks the lists of dscp-names with the same parameters (up to 8 per list). As the no command does not have any additional parameters, it is possible to remove multiple dscp-names from multiple DSCP statements having different parameters with one command. If a dscp-name specified in a no command does not exist in any DSCP statement, the command is aborted at that point with an error message displayed. Any dscp-names in the list before the failed entry will be processed as normal but the processing will stop at the failed entry so that the remainder of the list is not processed.

Parameters 
dscp-name—
The dscp-name parameter is required when defining a DSCP reclassification rule. The specified name must exist as a DSCP name. A maximum of eight DSCP names can be specified in a single statement. SR OS software provides names for the well-known code points, which can be shown using the show qos dscp-table command.
fc-name:—
The fc reclassification action is optional. When specified, packets matching the IP DSCP value corresponding to a specified dscp-name will be explicitly reclassified to the forwarding class specified as fc-name regardless of the ingress classification decision. The explicit forwarding class reclassification may be overwritten by an IP criteria reclassification match. The fc name defined must be one of the eight forwarding classes supported by the system. To remove the forwarding class reclassification action for the specified DSCP value, the dscp command must be re-executed without the fc reclassification action defined.
Values—
be, l1, af, l2, h1, ef, h2 or nc

 

counter-id—
Specifies the counter ID.
profile—
The profile reclassification action is optional. When specified, packets matching the IP DSCP value corresponding to a specified dscp-name will be explicitly reclassified to the specified profile regardless of the ingress profiling decision. The explicit profile reclassification may be overwritten by an IPv6 criteria or IP criteria reclassification match. To remove the profile reclassification action for the specified dscp-name, the dscp command must be re-executed without the profile reclassification action defined.
in—
Specifies that any packets matching the reclassification rule will be treated as in-profile by the egress forwarding plane.
out—
Specifies that any packets matching the reclassification rule will be treated as out-of-profile by the egress forwarding plane.
exceed—
Specifies that when exceed is specified, any packets matching the reclassification rule will be treated as exceed-profile by the egress forwarding plane.
inplus—
Specifies that any packets matching the reclassification rule will be treated as inplus-profile by the egress forwarding plane.
Platforms 

All

dscp

Syntax 
dscp {dscp-name | in-profile dscp-name out-profile dscp-name [exceed-profile dscp-name]}
no dscp
Context 
[Tree] (config>qos>sap-egress>fc dscp)
Full Contexts 
configure qos sap-egress fc dscp
Description 

This command configures a DSCP to be used for remarking packets from the specified FC. If the optional exceed-profile, in-profile, or out-profile keyword is specified, the command will remark different DSCP depending on whether the packet was classified to be exceed, in-profile, or out-of-profile ingress to the node. All inplus-profile traffic is marked with the same value as in-profile traffic.

Default 

no dscp

Parameters 
dscp-name—
Specifies a DSCP name that has been previously mapped to a value using the dscp-name command. The DSCP can only be specified by its name.
Values—
be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, c p35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

 

exceed-profile dscp-name
This optional parameter specifies the DSCP name to be used to remark the traffic that is exceed-profile. If not specified, this defaults to the same value configured for out-profile parameter.
in-profile dscp-name
Specifies the DSCP name to be used to remark the traffic that is in-profile.
out-profile dscp-name
Specifies the DSCP name to be used to remark the traffic that is out-of-profile.
Platforms 

All

dscp

Syntax 
dscp dscp-name fc fc-name profile {in | out}
no dscp
Context 
[Tree] (config>qos>network>ingress dscp)
Full Contexts 
configure qos network ingress dscp
Description 

This command creates a mapping between the DiffServ Code Point (DSCP) of the network ingress traffic and the forwarding class.

Ingress traffic that matches the specified DSCP will be assigned to the corresponding forwarding class. Multiple commands can be entered to define the association of some or all 64 DiffServ code points to the forwarding class. For undefined code points, packets are assigned to the forwarding class specified under the default-action command.

The no form of this command removes the DiffServ code point-to-forwarding class association. The default-action then applies to that code point value.

Parameters 
dscp-name—
The name of the DiffServ code point to be associated with the forwarding class. DiffServ code point can only be specified by its name and only an existing DiffServ code point can be specified. The software provides names for the well-known code points.

The system-defined names available are as follows. The system-defined names must be referenced as all lowercase, exactly as shown in the first column in Table 42 and Table 43.

Additional names-to-code point value associations can be added using the ‘dscp-name dscp-name dscp-value’ command.

The actual mapping is being done on the dscp-value, not the dscp-name that references the dscp-value. If a second dscp-name that references the same dscp-value is mapped within the policy, an error will occur. The second name will not be accepted until the first name is removed.

Table 42:  Default DSCP Names to DSCP Value Mapping

DSCP Name

DSCP Value Decimal

DSCP Value

Hexadecimal

DSCP Value Binary

nc1

48

0x30

0b110000

nc2

56

0x38

0b111000

ef

46

0x2e

0b101110

af41

34

0x22

0b100010

af42

36

0x24

0b100100

af43

38

0x26

0b100110

af31

26

0x1a

0b011010

af32

28

0x1c

0b011100

af33

30

0x1d

0b011110

af21

18

0x12

0b010010

af22

20

0x14

0b010100

af23

22

0x16

0b010110

af11

10

0x0a

0b001010

af12

12

0x0c

0b001100

af13

14

0x0e

0b001110

default

0

0x00

0b000000

Table 43:  Default Class Selector Code Points to DSCP Value Mapping

DSCP Name

DSCP Value Decimal

DSCP Value

Hexadecimal

DSCP Value Binary

cs7

56

0x38

0b111000

cs6

48

0X30

0b110000

cs5

40

0x28

0b101000

cs4

32

0x20

0b100000

cs3

24

0x18

0b011000

cs2

16

0x10

0b010000

cs1

08

0x8

0b001000

fc-name
Enter this required parameter to specify the fc-name with which the code point will be associated.
Values—
be, l2, af, l1, h2, ef, h1, nc

 

profile {in | out}—
Enter this required parameter to indicate whether the DiffServ code point value is the in-profile or out-of-profile value. For every DSCP value defined, the profile must be indicated. If a DSCP value is not mapped, the default-action forwarding class and profile state will be used for that value.

DSCP values mapping to forwarding classes Expedited (ef), High-1 (h1) and Network-Control (nc) can only be set to in-profile.

DSCP values mapping to forwarding class “be” can only be set to out-of-profile.

Values—
in, out

 

Platforms 

All

dscp

Syntax 
dscp dscp-name fc fc-name profile {in | out | exceed | inplus}
no dscp dscp-name
Context 
[Tree] (config>qos>network>egress dscp)
Full Contexts 
configure qos network egress dscp
Description 

This command configures an IP Differentiated Services Code Point (DSCP) value that must be matched to perform the associated reclassification actions. If an egress packet on an IES/VPRN interface spoke SDP, on a CSC network interface in a VPRN, or on a network interface that the network QoS policy is applied to, matches the specified IP DSCP value, the forwarding class and profile may be overridden.

By default, the forwarding class and profile of the packet are derived from ingress classification and profiling functions. Matching a DHCP-based reclassification rule will override all IP precedence-based reclassification rule actions.

The IP DSCP bits used to match against DSCP reclassification rules come from the Type of Service (ToS) field within the IPv4 header or the Traffic Class field from the IPv6 header. If the packet does not have an IP header, DSCP-based matching is not performed.

The configuration of egress DSCP classification and the configuration of an egress IP criteria or IPv6 criteria entry statement within a network QoS policy are mutually exclusive.

The IP precedence- and DSCP-based reclassification are supported on a network interface, on a CSC network interface in a VPRN, and on a PW used in an IES or VPRN spoke interface. The CLI will block the application of a network QoS policy with the egress reclassification commands to the spoke SDP part of a Layer 2 service.

Conversely, the CLI will not allow the user to add the egress reclassification commands to a network QoS policy if the policy is being used by a Layer 2 spoke SDP.

The egress reclassification commands will only take effect if the redirection of the spoke SDP or CSC interface to use an egress port queue group succeeds. For example, the following CLI command would be successful:

config>service>vprn>if>spoke-sdp>egress>qos network-policy-id port-redirect-group queue-group-name instance instance-id

config>service>ies>if>spoke-sdp>egress>qos network-policy-id port-redirect-group queue-group-name instance instance-id

config>service>vprn>nw-if>qos network-policy-id port-redirect-group queue-group-name instance instance-id

If the redirection command fails, the PW will use the network QoS policy assigned to the network IP interface, however any reclassification in the network QoS policy applied to the network interface will be ignored.

The no form of this command removes the egress reclassification rule.

Parameters 
dscp-name—
be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5, nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29, cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63
fc fc-name—
be, l2, af, l1, h2, ef, h1, nc
profile {in |  out | exceed | inplus}
The profile reclassification action is mandatory. When specified, packets matching the DSCP value will be explicitly reclassified to the profile specified regardless of the ingress profiling decision. To remove the profile reclassification action for the specified DSCP value, the no dscp command must be executed.

in - Specifies that any packets matching the reclassification rule will be treated as in-profile by the egress forwarding plane.

out - Specifies that any packets matching the reclassification rule will be treated as out-of-profile by the egress forwarding plane.

exceed - Specifies that any packets matching the reclassification rule will be treated as exceed-profile by the egress forwarding plane.

inplus - Specifies that any packets matching the reclassification rule will be treated as inplus-profile by the egress forwarding plane.

Platforms 

All

dscp

Syntax 
dscp dscp-name
no dscp
Context 
[Tree] (config>qos>network>ingress>ip-criteria>entry>match dscp)
[Tree] (config>qos>network>ingress>ipv6-criteria>entry>match dscp)
[Tree] (config>qos>network>egress>ip-criteria>entry>match dscp)
[Tree] (config>qos>network>egress>ipv6-criteria>entry>match dscp)
Full Contexts 
configure qos network egress ip-criteria entry match dscp
configure qos network egress ipv6-criteria entry match dscp
configure qos network ingress ip-criteria entry match dscp
configure qos network ingress ipv6-criteria entry match dscp
Description 

This command configures a DSCP to be used as a network QoS policy match criterion.

The no form of this command removes the DSCP match criterion.

Parameters 
dscp-name—
Specifies a DSCP name that has been previously mapped to a value using the dscp-name command. The DSCP can only be specified by its name.
Values—
be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, c p35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

 

Platforms 

All

dscp

Syntax 
dscp dscp-name
no dscp
Context 
[Tree] (config>filter>ip-filter>entry>match dscp)
[Tree] (config>filter>ipv6-filter>entry>match dscp)
Full Contexts 
configure filter ip-filter entry match dscp
configure filter ipv6-filter entry match dscp
Description 

This command configures a DiffServ Code Point (DSCP) name to be used as an IP filter match criterion.

The no form of the command removes the DSCP match criterion.

Default 

no dscp

Parameters 
dscp-name—
Configures a DSCP name. The DiffServ code point may only be specified by its name.
Values—
be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5, nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29, cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63

 

Platforms 

All

dscp

Syntax 
dscp dscp-name
no dscp
Context 
[Tree] (cfg>sys>sec>cpm>ip-filter>entry>match dscp)
[Tree] (cfg>sys>sec>cpm>ipv6-filter>entry>match dscp)
Full Contexts 
configure system security cpm-filter ip-filter entry match dscp
configure system security cpm-filter ipv6-filter entry match dscp
Description 

This command configures a DiffServ Code Point (DSCP) name to be used as an IP filter match criterion.

The no form of this command removes the DSCP match criterion.

Default 

no dscp

Parameters 
dscp-name—
Configures a dscp name that has been previously mapped to a value using the dscp-name command. The DiffServ code point may only be specified by its name.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dscp

Syntax 
dscp dscp-name
no dscp
Context 
[Tree] (config>test-oam>icmp>ping-template dscp)
Full Contexts 
configure test-oam icmp ping-template dscp
Description 

This command specifies the DSCP to be carried in the IP header. This value is not exposed to egress QoS policies. This command uses well-known DSCP names.

The no form of this command reverts to the default value.

Default 

dscp nc1

Parameters 
dscp-name—
Specifies the DSCP name, up to 32 characters.
Values—
be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dscp

Syntax 
dscp dscp-name
Context 
[Tree] (config>test-oam>link-meas>template>twl dscp)
Full Contexts 
configure test-oam link-measurement measurement-template twamp-light dscp
Description 

This command configures the DSCP to be copied into the IP header of each TWAMP Light echo request packet launched for the test.

Default 

dscp nc1

Parameters 
dscp-name—
Specifies the DSCP code point to be used.
Values—
be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5, nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29, cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.284. dscp-in-profile

dscp-in-profile

Syntax 
dscp-in-profile dscp-name
no dscp-in-profile
Context 
[Tree] (config>qos>network>egress>fc dscp-in-profile)
Full Contexts 
configure qos network egress fc dscp-in-profile
Description 

This command specifies the in-profile DSCP name for the forwarding class. The corresponding DSCP value will be used for all IP packets that require marking at egress on this forwarding class queue, and that are in-profile. The inplus-profile traffic is marked with the same value as in-profile traffic.

When multiple DSCP names are associated with the forwarding class at network egress, the last name entered will overwrite the previous value.

The no form of this command resets the configuration to the factory default in-profile DSCP name setting for policy-id 1.

Parameters 
dscp-name—
Specifies the system- or user-defined, case-sensitive dscp-name.
Values—
Any defined system- or user-defined dscp-name

 

Platforms 

All

8.285. dscp-out-profile

dscp-out-profile

Syntax 
dscp-out-profile dscp-name
no dscp-out-profile
Context 
[Tree] (config>qos>network>egress>fc dscp-out-profile)
Full Contexts 
configure qos network egress fc dscp-out-profile
Description 

This command specifies the out-of-profile DSCP name for the forwarding class. The corresponding DSCP value will be used for all IP packets requiring marking the egress on this forwarding class queue that are out-of-profile. The exceed-profile traffic is marked with the same value as out-of-profile traffic.

When multiple DSCP names are associated with the forwarding class at network egress, the last name entered will overwrite the previous value.

The no form of this command resets the configuration to the factory default out-of-profile DSCP name setting for policy-id 1.

Default 

Policy-id 1:

Factory setting

Policy-id 2 to 65535:

Policy-id setting

Parameters 
dscp-name—
Specifies the system- or user-defined, case-sensitive dscp-name.
Values—
Any defined system- or user-defined dscp-name

 

Platforms 

All

8.286. dslite-lsn-sub

dslite-lsn-sub

Syntax 
[no] dslite-lsn-sub router router-instance b4 ipv6-prefix
Context 
[Tree] (config>li>li-source>nat dslite-lsn-sub)
Full Contexts 
configure li li-source nat dslite-lsn-sub
Description 

This command configures the Dual-Stack Lite LSN subscriber source.

The no form of this command removes the value from the configuration.

Parameters 
router-instance
Specifies the router instance the pool belongs to, either by router name or service ID.
Values—
router-name: “Base” or “management”

 

Default—
Base
ipv6-prefix
Specifies the IPv6 address.
Values—

ipv6-prefix:

<prefix>/<length>

prefix

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x to [0 to FFFF]H

d to [0 to 255]D

<length>

[0 to 128]

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.287. dslite-max-subscriber-limit

dslite-max-subscriber-limit

Syntax 
dslite-max-subscriber-limit max
no dslite-max-subscriber-limit
Context 
[Tree] (config>service>vprn>nat>inside dslite-max-subscriber-limit)
[Tree] (config>router>nat>inside>dslite dslite-max-subscriber-limit)
Full Contexts 
configure router nat inside dslite dslite-max-subscriber-limit
configure service vprn nat inside dslite-max-subscriber-limit
Description 

This command sets the value for the number of high order bits of the source IPv6 address that will be considered as DS-Lite subscriber. The remaining bits of the source IPv6 address will be masked off, effectively aggregation all IPv6 source addresses under the configured prefix length into a single DS-Lite subscriber. Source IPv4 addresses/ports of the traffic carried within the DS-Lite subscriber will be translated into a single outside IPv4 address and the corresponding deterministic port-block (port-blocks can be extended).

The range of values for subscriber-prefix-length in non-deterministic DS-Lite is limited from 32 to 64 (a prefix will be considered as a DS-Lite subscriber) or it can be set to a value of 128 (the source IPv6 address is considered as a DS-Lite subscriber).

In cases where deterministic DS-Lite is enabled in a giver inside routing context, the range of values of the subscriber-prefix-length depends on the value of dslite-max-subscriber-limit parameter as follows:

subscriber-prefix-length – n = [32..64,128]

where n = log2(dslite-max-subscriber-limit)

[or in an alternate form: dslite-max-subscriber-limit = 2^n.]

In other words the largest prefix length for the deterministic DS-Lite subscriber will be 32+n, where n = log2(dslite-max-subscriber-limit). The subscriber prefix length can extend up to 64 bits. Beyond 64 bits for the subscriber prefix length, there only one value is allowed: 128. In the case n must be 0, which means that the mapping between B4 elements (or IPv6 address) and the IPv4 outside addresses is in 1:1 ratio (no sharing of outside IPv4 addresses).

This parameter can be changed only when there are no deterministic prefixes configured in the same routing context.

Default 

128

Parameters 
max—
In non-deterministic DS-Lite this value can be 32 to 64,128, assuming that the deterministic DS-Lite is not concurrently enabled in the same inside routing context.

In case that deterministic DS-Lite is enabled, this value can be within the range [(32+n)..64,128] where n = log2(dslite-max-subscriber-limit). The value of 128 is allowed only when n=0 (each subscriber is mapped to a single outside IPv4 IP address).

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.288. dsm

dsm

Syntax 
[no] dsm
Context 
[Tree] (config>subscr-mgmt>wlan-gw>tunnel-query>ue-state dsm)
Full Contexts 
configure subscriber-mgmt wlan-gw tunnel-query ue-state dsm
Description 

This command enables matching on DSM UEs.

The no form of this command disables matching on DSM UEs, unless UE state matching is disabled altogether.

Default 

no dsm

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

dsm

Syntax 
[no] dsm
Context 
[Tree] (config>subscr-mgmt>wlan-gw>ue-query>state dsm)
Full Contexts 
configure subscriber-mgmt wlan-gw ue-query state dsm
Description 

This command enables matching on UEs in a DSM state.

The no form of this command disables matching on UEs in a DSM state, unless all state matching is disabled.

Default 

no dsm

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.289. dsm-ip-filter

dsm-ip-filter

Syntax 
dsm-ip-filter dsm-ip-filter-name
no dsm-ip-filter
Context 
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>dsm dsm-ip-filter)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>dsm dsm-ip-filter)
Full Contexts 
configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt dsm-ip-filter
configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt dsm-ip-filter
Description 

This command configures an IP filter that is distributed on ISA cards.

This command specifies the IP filter applied to all UEs corresponding to default vlan-range (such as a group-interface) or the specified vlan-range. The IP filter can be created in the config>subscr-mgmt>isa-filter context, and can contain up to 1024 match entries. The IP filter can be overridden per UE from RADIUS via access-accept or COA.

The no form of this command reverts to the default.

Parameters 
dsm-ip-filter-name—
Specifies the identifier of the distributed-sub-mgmt IP filter.
Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.290. dsm-subscriber

dsm-subscriber

Syntax 
[no] dsm-subscriber mac mac-address
Context 
[Tree] (config>li>li-source>wlan-gw dsm-subscriber)
Full Contexts 
configure li li-source wlan-gw dsm-subscriber
Description 

This command configures the DSM UE source.

Parameters 
mac-address
Specifies the MAC address.
Values—
mac-addr: xx:xx:xx:xx:xx:xx example: 00:0c:f1:99:85:b8
or XX:XX:XX:XX:XX:XX example: 00-0C-F1-99-85-B8

 

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.291. dsmap

dsmap

Syntax 
dsmap if-num
no dsmap
Context 
[Tree] (config>router>mpls>lsp>working-tp-path>mep dsmap)
[Tree] (config>router>mpls>lsp>protect-tp-path>mep dsmap)
[Tree] (config>router>mpls>lsp>transit-path>forward-path>mip dsmap)
[Tree] (config>router>mpls>lsp>transit-path>reverse-path>mip dsmap)
Full Contexts 
configure router mpls lsp protect-tp-path mep dsmap
configure router mpls lsp transit-path forward-path mip dsmap
configure router mpls lsp transit-path reverse-path mip dsmap
configure router mpls lsp working-tp-path mep dsmap
Description 

This command is used to configure the values to use in the DSMAP TLV sent by a node in an LSP Trace echo request for a static MPLS-TP LSP. A node sending a DSMAP TLV will include the in-if-num and out-if-num values. Additionally, it will include the out-label for the LSP in the Label TLV for the DSMAP in the echo request message.

The no form of this command equals to a value 0 (this means no interface validation will be performed).

Default 

no dsmap

Parameters 
if-num—
This is a 32-bit value corresponding to the expected ingress interface if-num used by an MPLS-TP LSP for the next hop downstream.
Values—
0 to 4294967295

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.292. dst-ip

dst-ip

Syntax 
dst-ip {ipv6-address | prefix-length}
dst-ip {ip-address/mask | ip-address netmask
no dst-ip
Context 
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ip>entry>match dst-ip)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ipv6>entry>match dst-ip)
Full Contexts 
configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ip-filter-entries entry match dst-ip
configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ipv6-filter-entries entry match dst-ip
Description 

This command configures the destination IP match condition.

The no form of this command reverts to the default.

Parameters 
ip-address/mask—
Specifies the IPv4 address and mask.
Values—

ip-address

a.b.c.d

mask

0 to 32

 

netmask—
Specifies the mask, expressed as a dotted quad.
Values—
a.b.c.d

 

ipv6-address—
Specifies the IPv6 address (applies only to the 7750 SR).
Values—

ipv6-address

x:x:x:x:x:x:x:x (where x is [0 to FFFF]H)

:x:x:x:x:x:d.d.d.d (where d is [0 to 255]D)

 

prefix-length—
Specifies the prefix length (applies only to the 7750 SR).
Values—
1 to 128

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dst-ip

Syntax 
dst-ip ip-address
no dst-ip
Context 
[Tree] (config>redundancy>mc>peer>mcr>ring>in-band-control-path dst-ip)
[Tree] (config>redundancy>mc>peer>mcr>node>cv dst-ip)
[Tree] (config>redundancy>mc>peer>mc>l3-ring>in-band-control-path dst-ip)
Full Contexts 
configure redundancy multi-chassis peer multi-chassis l3-ring in-band-control-path dst-ip
configure redundancy multi-chassis peer mc-ring ring ring-node connectivity-verify dst-ip
configure redundancy multi-chassis peer mc-ring ring in-band-control-path dst-ip
Description 

This command specifies the destination IP address used in the inband control connection. If the address is not configured, the ring cannot become operational.

Default 

no dst-ip

Parameters 
ip-address—
Specifies the destination IP address.
Values—
a.b.c.d (no multicast address)

 

Platforms 

All

dst-ip

Syntax 
dst-ip ip-prefix/length
no dst-ip
Context 
[Tree] (config>subscr-mgmt>isa-filter>entry>match dst-ip)
[Tree] (config>subscr-mgmt>isa-filter>ipv6>entry>match dst-ip)
Full Contexts 
configure subscriber-mgmt isa-filter entry match dst-ip
configure subscriber-mgmt isa-filter ipv6 entry match dst-ip
Description 

This command specifies that the packet’s destination IP address must match the specified IP prefix and mask.

The no form of this command disables the match on the destination IP.

Parameters 
ip-prefix/length
Specifies the IP prefix to match.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dst-ip

Syntax 
dst-ip ip-address protocol ip-protocol dst-port port-number
dst-ip ip-address protocol ip-protocol dst-port port-number prefix-length prefix-length
no dst-ip ip-address protocol ip-protocol dst-port port-number
Context 
[Tree] (config>subscr-mgmt>http-rdr-plcy>fwd-entries dst-ip)
Full Contexts 
configure subscriber-mgmt http-redirect-policy forward-entries dst-ip
Description 

This command configures traffic flow to be forwarded via match in the redirect policy.

Parameters 
ip-address—
Specifies the IPv4 or IPv6 address to match the destination address in the IP header of the traffic received from the subscriber.
prefix-length—
Specifies the length of the prefix specified by the ip-address.
Values—
1 to 128 for IPv6
1 to 32 for IPv4

 

ip-protocol
Specifies the protocol to match the IP protocol in the IP header of the traffic received from the subscriber.
Values—
tcp, udp

 

port-number
Specifies the port to match the destination port in the HTTP request.
Values—
1 to 65535

 

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-ip

Syntax 
dst-ip {eq | neq} ip-address
dst-ip {eq | neq} ip-prefix-list ip-prefix-list-name
no dst-ip
Context 
[Tree] (config>app-assure>group>policy>aqp>entry>match dst-ip)
Full Contexts 
configure application-assurance group policy app-qos-policy entry match dst-ip
Description 

This command specifies a destination IP address to use as match criteria.

Default 

no dst-ip

Parameters 
eq—
Specifies that a successful match occurs when the flow matches the specified address or prefix.
neq —
Specifies that a successful match occurs when the flow does not match the specified address or prefix.
ip-address—
Specifies a valid unicast address.
Values—

ipv4-address

a.b.c.d[/mask]

  mask - [1..32]

ipv6-address

x:x:x:x:x:x:x:x/prefix-length

x:x:x:x:x:x:d.d.d.d

  x - [0..FFFF]H

  d - [0..255]D

prefix-length   [1..128]

 

ip-prefix-list-name—
Specifies the name of an IP prefix list, up to 32 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-ip

Syntax 
dst-ip ip-address
dst-ip dns-ip-cache dns-ip-cache-name
dst-ip ip-prefix-list ip-prefix-list-name
no dst-ip
Context 
[Tree] (config>app-assure>group>sess-fltr>entry>match dst-ip)
Full Contexts 
configure application-assurance group session-filter entry match dst-ip
Description 

This command configures the destination IP address to match.

Default 

no dst-ip

Parameters 
ip-address—
Specifies a valid unicast address.
Values—

ipv4-address

a.b.c.d[/mask]

  mask - [1..32]

ipv6-address

x:x:x:x:x:x:x:x/prefix-length

x:x:x:x:x:x:d.d.d.d

  x - [0..FFFF]H

  d - [0..255]D

prefix-length   [1..128]

 

dns-ip-cache-name—
Specifies the name of the dns-ip-cache policy.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-ip

Syntax 
dst-ip {eq | neq} ip-address
no dst-ip
Context 
[Tree] (debug>app-assure>group>traffic-capture>match dst-ip)
Full Contexts 
debug application-assurance group traffic-capture match dst-ip
Description 

This command configures debugging on a destination IP address.

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-ip

Syntax 
dst-ip {ip-address/mask | ip-address ipv4-address-mask}
Context 
[Tree] (config>li>li-filter>li-ip-filter>entry>match dst-ip)
Full Contexts 
configure li li-filter li-ip-filter entry match dst-ip
Description 

This command configures destination IP address LI filter match criterion.

The no form of this command removes any configured destination IP address. The match criterion is ignored.

Parameters 
ip-address—
Specifies any address specified as dotted quad.
Values—
a.b.c.d

 

mask—
Specifies eight 16-bit hexadecimal pieces representing bit match criteria.
Values—
1 to 32

 

ipv4-address-mask—
Specifies a mask expressed in dotted quad notation.
Values—
0.0.0.0 to 255.255.255.255

 

Platforms 

All

dst-ip

Syntax 
dst-ip {ipv6-address/prefix-length | ipv6-address ipv6-address-mask}
no dst-ip
Context 
[Tree] (config>li>li-filter>li-ipv6-filter>entry>match dst-ip)
Full Contexts 
configure li li-filter li-ipv6-filter entry match dst-ip
Description 

This command configures destination IPv6 address LI filter match criterion.

The no form of this command removes any configured destination IPv6 address. The match criterion is ignored.

Parameters 
ipv6-address—
Specifies any IPv6 address entered as:.
Values—
x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x - [0 to FFFF]H
d - [0 to 255]D

 

prefix-length—
Specifies the prefix length.
Values—
1 to 128

 

ipv6-address-mask—
Specifies any IPv6 address mask expressed as:
Values—
x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x - [0 to FFFF]H
d - [0 to 255]D

 

Platforms 

All

dst-ip

Syntax 
dst-ip {ip-address/mask | ip-address [ipv4-address-mask] | ip-prefix-list prefix-list-name}
no dst-ip
Context 
[Tree] (config>qos>sap-ingress>ip-criteria>entry>match dst-ip)
[Tree] (config>qos>sap-egress>ip-criteria>entry>match dst-ip)
Full Contexts 
configure qos sap-egress ip-criteria entry match dst-ip
configure qos sap-ingress ip-criteria entry match dst-ip
Description 

This command configures a destination address range to be used as a SAP QoS policy match criterion.

To match on the IPv4 destination address, specify the address and its associated mask, e.g., 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 can also be used for IPv4.

The no form of this command removes the destination IPv4 address match criterion.

Default 

no dst-ip

Parameters 
ip-address—
Specifies the destination IPv4 address specified in dotted decimal notation.
Values—
ip-address: a.b.c.d

 

mask—
Specifies the length in bits of the subnet mask.
Values—
1 to 32

 

ipv4-address-mask—
Specifies the subnet mask in dotted decimal notation.
Values—
a.b.c.d (dotted quad equivalent of mask length)

 

prefix-list-name —
Specifies the IPv4 prefix list name, a string of up to 32 printable ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms 

All

dst-ip

Syntax 
dst-ip {ipv6-address/prefix-length | ipv6-address ipv6-address-mask | ipv6-prefix-list ipv6-prefix-list-name}
no dst-ip
Context 
[Tree] (config>qos>sap-ingress>ipv6-criteria>entry>match dst-ip)
[Tree] (config>qos>sap-egress>ipv6-criteria>entry>match dst-ip)
Full Contexts 
configure qos sap-egress ipv6-criteria entry match dst-ip
configure qos sap-ingress ipv6-criteria entry match dst-ip
Description 

This command configures a destination address range to be used as a SAP QoS policy match criterion.

To match on the IPv6 destination address, specify the address and its associated mask, e.g. 2001:db8:1000::/64.

The no form of this command removes the destination IPv6 address match criterion.

Default 

no dst-ip

Parameters 
ipv6-address—
Specifies the IPv6 address for the IP match criterion in hexadecimal digits (applies to the 7750 SR and 7950 XRS).
Values—
x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x: [0 to FFFF]H
d: [0 to 255]D

 

prefix-length—
Specifies the IPv6 prefix length for the IPv6 address expressed as a decimal integer (applies to the 7750 SR and 7950 XRS).
Values—
1 to 128

 

ipv6-address-mask —
Specifies the IPv6 address mask.
Values—
x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x: [0 to FFFF]H
d: [0 to 255]D

 

ipv6-prefix-list-name—
Specifies the IPv6 prefix list name, a string of up to 32 printable ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms 

All

dst-ip

Syntax 
dst-ip {ip-address/mask | ip-address ipv4-address-mask}
dst-ip {ipv6-address/mask | ipv6-address ipv6-address-mask}
no dst-ip
Context 
[Tree] (config>qos>network>egress>ip-criteria>entry>match dst-ip)
[Tree] (config>qos>network>egress>ipv6-criteria>entry>match dst-ip)
Full Contexts 
configure qos network egress ip-criteria entry match dst-ip
configure qos network egress ipv6-criteria entry match dst-ip
Description 

This command configures a destination address range to be used as a network QoS policy match criterion.

To match on the destination address, specify the address and its associated mask, for example, when specifying an IPv4 address, 10.1.0.0/16 or 10.1.0.0 255.255.0.0 can be used.

The no form of this command removes the destination IP address match criterion.

Parameters 
ip-address—
Specifies the source IPv4 address specified in dotted decimal notation.
Values—
ip-address: a.b.c.d

 

mask—
Specifies the length in bits of the subnet mask.
Values—
1 to 32

 

ipv4-address-mask—
Specifies the subnet mask in dotted decimal notation.
Values—
a.b.c.d (dotted quad equivalent of mask length)

 

ipv6-address—
Specifies the IPv6 prefix for the IP match criterion in hex digits.
Values—

ipv6-address:

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x: [0 to FFFF]H

d: [0 to 255]D

 

mask—
Specifies the length of the IPv6 address expressed as a decimal integer.
Values—
1 to 128

 

ipv6-address-mask—
Specifies the eight 16-bit hexadecimal pieces representing bit match criteria.
Values—
x:x:x:x:x:x:x (eight 16-bit pieces)

 

Platforms 

All

dst-ip

Syntax 
dst-ip {ip-address/mask | ip-address ipv4-address-mask | ip-prefix-list ip-prefix-list-name}
dst-ip {ipv6-address/mask | ipv6-address ipv6-address-mask | ipv6-prefix-list ipv6-prefix-list-name}
no dst-ip
Context 
[Tree] (config>qos>network>ingress>ip-criteria>entry>match dst-ip)
[Tree] (config>qos>network>ingress>ipv6-criteria>entry>match dst-ip)
Full Contexts 
configure qos network ingress ip-criteria entry match dst-ip
configure qos network ingress ipv6-criteria entry match dst-ip
Description 

This command configures a destination address range to be used as a network QoS policy match criterion.

To match on the destination address, specify the address and its associated mask, for example, when specifying an IPv4 address, 10.1.0.0/16 or 10.1.0.0 255.255.0.0 can be used.

The no form of this command removes the destination IP address match criterion.

Parameters 
ip-address—
Specifies the source IPv4 address specified in dotted decimal notation.
Values—
ip-address: a.b.c.d

 

mask—
Specifies the length in bits of the subnet mask.
Values—
1 to 32

 

ipv4-address-mask—
Specifies the subnet mask in dotted decimal notation.
Values—
a.b.c.d (dotted quad equivalent of mask length)

 

ip-prefix-list-name—
Specifies an IPv4 prefix list which contains IPv4 address prefixes to be matched. IP prefix lists are only supported at a network ingress.
Values—
A string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.

 

ipv6-address—
Specifies the IPv6 prefix for the IP match criterion in hex digits.
Values—

ipv6-address:

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x: [0 to FFFF]H

d: [0 to 255]D

 

mask—
Specifies the length of the IPv6 address expressed as a decimal integer.
Values—
1 to 128

 

ipv6-address-mask—
Specifies the eight 16-bit hexadecimal pieces representing bit match criteria.
Values—
x:x:x:x:x:x:x (eight 16-bit pieces)

 

ipv6-prefix-list-name—
Specifies an IPv6 prefix list which contains IPv6 address prefixes to be matched. IPv6 prefix lists are only supported at a network ingress.
Values—
A string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.

 

Platforms 

All

dst-ip

Syntax 
IPv4:
dst-ip {ip-address/mask | ip-address ipv4-address-mask | ip-prefix-list prefix-list-name}
IPv6:
dst-ip {ipv6-address/prefix-length | ipv6-address ipv6-address-mask | ipv6-prefix-list prefix-list-name}
no dst-ip
Context 
[Tree] (config>filter>ip-exception>entry>match dst-ip)
[Tree] (config>filter>ip-filter>entry>match dst-ip)
[Tree] (config>filter>ipv6-exception>entry>match dst-ip)
[Tree] (config>filter>ipv6-filter>entry>match dst-ip)
Full Contexts 
configure filter ip-exception entry match dst-ip
configure filter ip-filter entry match dst-ip
configure filter ipv6-exception entry match dst-ip
configure filter ipv6-filter entry match dst-ip
Description 

This command configures a destination address range to be used as a filter policy match criterion.

To match on the destination address, specify the address and its associated mask, e.g., 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 can also be used for IPv4.

The no form of this command removes the destination IPv4 or IPv6 address match criterion.

Default 

no dst-ip

Parameters 
ip-address—
Specifies the destination IPv4 address in dotted decimal notation.
Values—
a.b.c.d

 

mask—
Specifies the length in bits of the subnet mask.
Values—
1 to 32

 

ipv4-address-mask—
Specifies the subnet mask in dotted decimal notation.
Values—
a.b.c.d (dotted quad equivalent of mask length)

 

ip-prefix-list or ipv6-prefix-list prefix-list-name —
Specifies to use a list of IP prefixes referred to by prefix-list-name, which is a string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.
ipv6-address —
Specifies the IPv6 prefix for the IP match criterion in hex digits.
Values—
x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x: [0..FFFF]H
d: [0..255]D

 

prefix-length —
Specifies the IPv6 prefix length for the ipv6-address as a decimal integer.
Values—
1 to 128

 

ipv6-address-mask —
Specifies the eight 16-bit hexadecimal pieces representing bit match criteria.
Values—
x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x: [0..FFFF]H
d: [0..255]D

 

Platforms 

All

  1. configure filter ip-filter entry match dst-ip
  2. configure filter ipv6-filter entry match dst-ip

VSR

  1. configure filter ipv6-exception entry match dst-ip
  2. configure filter ip-exception entry match dst-ip

dst-ip

Syntax 
dst-ip ip-address/mask
dst-ip ip-address netmask
dst-ip ip-prefix-list ip-prefix-list-name
no dst-ip
Context 
[Tree] (cfg>sys>sec>cpm>ip-filter>entry>match dst-ip)
Full Contexts 
configure system security cpm-filter ip-filter entry match dst-ip
Description 

This command configures a destination IP address range to be used as an IP filter match criterion.

To match on the destination IP address, specify the address and its associated mask, for example, 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 may also be used.

The no form of this command removes the destination IP address match criterion.

Default 

no dst-ip

Parameters 
ip-address—
Specifies the IP address for the IP match criterion in dotted decimal notation.
Values—
0.0.0.0 to 255.255.255.255

 

ip-prefix-list —
Creates a list of IPv4 prefixes for match criteria in IPv4 ACL and CPM filter policies.
ip-prefix-list-name—
A string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.
mask—
Specifies the subnet mask length expressed as a decimal integer.
Values—
1 to 32

 

netmask—
Specifies the dotted quad equivalent of the mask length.
Values—
0.0.0.0 to 255.255.255.255

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dst-ip

Syntax 
dst-ip [ipv6-address /prefix-length] [ipv6-prefix-list ipv6-prefix-list-name]
no dst-ip
Context 
[Tree] (cfg>sys>sec>cpm>ipv6-filter>entry>match dst-ip)
Full Contexts 
configure system security cpm-filter ipv6-filter entry match dst-ip
Description 

This command configures a destination IPv6 address range to be used as an IPv6 filter match criterion.

To match on the destination IPv6 address, specify the address.

The no form of this command removes the destination IP address match criterion.

This command only applies to the 7750 SR and 7950 XRS.

Default 

no dst-ip

Parameters 
ipv6-address/prefix-length—
Specifies the IPv6 address for the IPv6 match criterion in dotted decimal notation. An IPv6 IP address is written as eight 4-digit (16-bit) hexadecimal numbers separated by colons. One string of zeros per address can be left out, so that 2001:db8::0:217A is the same as 2001:db8:0:0:0:0:0:217A.
Values—

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x:

[0 to .FFFF]H

d:

[0 to 255]D

prefix-length:

1 to 128

 

ipv6-prefix-list —
Creates a list of IPv4 prefixes for match criteria in IPv4 ACL and CPM filter policies.
ipv6-prefix-list-name—
Specifies a string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.293. dst-ipv4-address

dst-ipv4-address

Syntax 
dst-ipv4-address a.b.c.d
no dst-ipv4-address
Context 
[Tree] (config>test-oam>build-packet>header>ipv4 dst-ipv4-address)
[Tree] (debug>oam>build-packet>packet>field-override>header>ipv4 dst-ipv4-address)
Full Contexts 
configure test-oam build-packet header ipv4 dst-ipv4-address
debug oam build-packet packet field-override header ipv4 dst-ipv4-address
Description 

This command defines the destination IPv4 address to be used in the IPv4 header.

The no form of this command removes the destination IPv4 address value.

Default 

dst-ipv4-address 0.0.0.0

Parameters 
a.b.c.d—
Specifies the IPv4 destination address to be used in the IPv4 header.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.294. dst-ipv6-address

dst-ipv6-address

Syntax 
dst-ipv6-address ipv6-address
no dst-ipv6-address
Context 
[Tree] (config>test-oam>build-packet>header>ipv6 dst-ipv6-address)
[Tree] (debug>oam>build-packet>packet>field-override>header>ipv6 dst-ipv6-address)
Full Contexts 
configure test-oam build-packet header ipv6 dst-ipv6-address
debug oam build-packet packet field-override header ipv6 dst-ipv6-address
Description 

This command defines the destination IPv6 address to be used in the IPv6 header.

The no form of this command removes the IPv6 address.

Parameters 
ipv6-address—
Specifies the IPv6 destination address to be used in the IPv6 header.
Values—

ipv6-address:

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x:

0 to FFFF]H

d:

[0 to 255]D

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.295. dst-mac

dst-mac

Syntax 
dst-mac ieee-address [ieee-address-mask]
no dst-mac
Context 
[Tree] (config>li>li-filter>li-mac-filter>entry>match dst-mac)
Full Contexts 
configure li li-filter li-mac-filter entry match dst-mac
Description 

This command configures a destination MAC address or range to be used as a MAC filter match criterion.

The no form of this command removes the destination mac address as the match criterion.

Parameters 
ieee-address—
Specifies the 48-bit IEEE mac address to be used as a match criterion.
Values—
HH:HH:HH:HH:HH:HH or HH-HH-HH-HH-HH-HH where H is a hexadecimal digit

 

ieee-address-mask—
Specifies a 48-bit mask that can be configured using:

Format Style

Format Syntax

Example

Decimal

DDDDDDDDDDDDDD

281474959933440

Hexadecimal

0xHHHHHHHHHHHH

0x0FFFFF000000

Binary

0bBBBBBBB...B

0b11110000...B

To configure so that all packets with a destination MAC OUI value of 00-03-FA are subject to a match condition then the entry should be specified as: 003FA000000 0xFFFFFF000000

Default—
0xFFFFFFFFFFFF (exact match)
Values—
0x00000000000000 — 0xFFFFFFFFFFFF

 

Platforms 

All

dst-mac

Syntax 
dst-mac ieee-address [ieee-address-mask]
no dst-mac
Context 
[Tree] (config>qos>sap-ingress>mac-criteria>entry>match dst-mac)
Full Contexts 
configure qos sap-ingress mac-criteria entry match dst-mac
Description 

Configures a destination MAC address or range to be used as a Service Ingress QoS policy match criterion.

The no form of this command removes the destination MAC address as the match criterion.

Default 

no dst-mac

Parameters 
ieee-address—
The MAC address to be used as a match criterion.
Values—
HH:HH:HH:HH:HH:HH or HH-HH-HH-HH-HH-HH where H is a hexadecimal digit

 

ieee-address-mask—
A 48-bit mask to match a range of MAC address values.

This 48-bit mask can be configured using the following formats:

Format Style

Format Syntax

Example

Decimal

DDDDDDDDDDDDDD

281474959933440

Hexadecimal

0xHHHHHHHHHHHH

0xFFFFFF000000

Binary

0bBBBBBBB...B

0b11110000...B

All packets with a source MAC OUI value of 00-03-FA, subject to a match condition, should be specified as: 0003FA000000 0x0FFFFF000000

Values—
0x00000000000000 to 0xFFFFFFFFFFFF (hex)

 

Default—
0xFFFFFFFFFFFF
Platforms 

All

dst-mac

Syntax 
dst-mac ieee-address [ieee-address-mask]
no dst-mac
Context 
[Tree] (config>filter>mac-filter>entry>match dst-mac)
Full Contexts 
configure filter mac-filter entry match dst-mac
Description 

Configures a destination MAC address or range to be used as a MAC filter match criterion.

The no form of the command removes the destination mac address as the match criterion.

Default 

no dst-mac

Parameters 
ieee-address—
Specifies the MAC address to be used as a match criterion.
Values—
HH:HH:HH:HH:HH:HH or HH-HH-HH-HH-HH-HH where H is a hexadecimal digit. Note that both upper and lower case are supported.

 

ieee-address-mask—
Specifies a 48-bit mask to match a range of MAC address values.

To configure so that all packets with a destination MAC OUI value of 00:03:FA are subject to a match condition then the entry should be specified as: 00:03:FA:00:00:00 FF:FF:FF:00:00:00.

Default—
ff:ff:ff:ff:ff:ff (exact match)
Values—
HH:HH:HH:HH:HH:HH or HH-HH-HH-HH-HH-HH
where H is a hexadecimal digit. to 0xFFFFFFFFFFFF
Note that both upper and lower case are supported.

 

Platforms 

All

dst-mac

Syntax 
dst-mac ieee-address [ieee-address-mask]
no dst-mac
Context 
[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry>match dst-mac)
Full Contexts 
configure system security management-access-filter mac-filter entry match dst-mac
Description 

This command configures the destination MAC match condition.

Parameters 
ieee-address—
Specifies the MAC address to be used as a match criterion.
Values—
HH:HH:HH:HH:HH:HH or HH-HH-HH-HH-HH-HH where H is a hexadecimal digit

 

mask—
Specifies a 48-bit mask to match a range of MAC address values.
Platforms 

All

8.296. dst-mac-address

dst-mac-address

Syntax 
dst-mac-address ieee-address
no dst-mac-address
Context 
[Tree] (config>test-oam>build-packet>header>ethernet dst-mac-address)
[Tree] (debug>oam>build-packet>packet>field-override>header>ethernet dst-mac-address)
Full Contexts 
configure test-oam build-packet header ethernet dst-mac-address
debug oam build-packet packet field-override header ethernet dst-mac-address
Description 

This command defines the destination MAC address for the Ethernet header.

The no form of this command deletes the configured MAC address.

Default 

dst-mac-address 00:00:00:00:00:00

Parameters 
ieee-address—
Specifies the destination Ethernet MAC address to be used in the Ethernet header. Specifies the 48-bit MAC address.
Values—
xx:xx:xx:xx:xx:xx

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.297. dst-port

dst-port

Syntax 
dst-port {lt | gt | eq} dst-port-number
dst-port range start end
no dst-port
Context 
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ip>entry>match dst-port)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ipv6>entry>match dst-port)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ip>entry>match dst-port)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ipv6>entry>match dst-port)
Full Contexts 
configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ip-filter-entries entry match dst-port
configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ipv6-filter-entries entry match dst-port
configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ip-filter-entries entry match dst-port
configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ipv6-filter-entries entry match dst-port
Description 

This command configures the destination port match condition.

The no form of this command reverts to the default.

Parameters 
lt | gt | eq
Specifies the operator.
dst-port-number—
Specifies the destination port number as a decimal hex or binary.
Values—
0 to 65535

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dst-port

Syntax 
dst-port operator port-number
no dst-port
Context 
[Tree] (config>subscr-mgmt>isa-filter>entry>match dst-port)
[Tree] (config>subscr-mgmt>isa-filter>ipv6>entry>match dst-port)
Full Contexts 
configure subscriber-mgmt isa-filter entry match dst-port
configure subscriber-mgmt isa-filter ipv6 entry match dst-port
Description 

This command specifies that the packet’s UDP/TCP dst-port must match a specific value. This command is not valid in a match context that is not specific to UDP or TCP.

The no form of this command removes matching of the layer-4 port.

Parameters 
operator
Specifies that the only supported value is eq (equal to). The destination port value must be equal to the port-number value.
port-number
Specifies the number of the port to match.
Values—
0 to 65535

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dst-port

Syntax 
dst-port tcp-port
no dst-port
Context 
[Tree] (config>subscr-mgmt>http-rdr-plcy dst-port)
Full Contexts 
configure subscriber-mgmt http-redirect-policy dst-port
Description 

This command specifies the port to match the destination port in the HTTP request.

HTTP traffic that does not match this port, is not redirected.

The no form of this command reverts to the default.

Default 

dst-port 80

Parameters 
tcp-port—
Specifies the TCP port.
Values—
1 to 65535

 

Platforms 

7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-port

Syntax 
dst-port {eq | neq} port-num
dst-port {eq | neq} port-list port-list-name
dst-port {eq | neq} range start-port-num end-port-num
no dst-port
Context 
[Tree] (config>app-assure>group>policy>aqp>entry>match dst-port)
Full Contexts 
configure application-assurance group policy app-qos-policy entry match dst-port
Description 

This command specifies a destination TCP/UDP port, destination port list, or destination range to use as match criteria.

The no form of this command removes the parameters from the configuration.

Default 

no dst-port

Parameters 
eq—
Specifies that a successful match occurs when the flow matches the specified port.
neq —
Specifies that a successful match occurs when the flow does not match the specified port.
port-num—
Specifies the destination port number.
Values—
0 to 65535

 

start-port-num end-port-num—
Specifies the start or end destination port number.
Values—
0 to 65535

 

port-list-name —
Specifies a named port-list, up to 32 characters, containing a set of ports or ranges of ports.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-port

Syntax 
dst-port {eq | gt | lt} port-num
dst-port port-list port-list-name
dst-port range start-port-num end-port-num
no dst-port
Context 
[Tree] (config>app-assure>group>sess-fltr>entry>match dst-port)
Full Contexts 
configure application-assurance group session-filter entry match dst-port
Description 

This command specifies a destination TCP/UDP port, destination port list, or destination range to use as match criteria.

The no form of this command removes the parameters from the configuration.

Default 

no dst-port

Parameters 
eq—
Specifies that a successful match occurs when the flow matches the specified port.
gt —
Specifies all port numbers greater than the port-number match.
lt —
Specifies all port numbers less than the port-number match.
port-num—
Specifies the destination port number.
Values—
0 to 65535

 

start-port-num end-port-num—
Specifies the start or end destination port number.
Values—
0 to 65535

 

port-list-name —
Specifies a named port-list, up to 32 characters, containing a set of ports or ranges of ports.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-port

Syntax 
dst-port {eq | neq} port-num
no dst-port
Context 
[Tree] (debug>app-assure>group>traffic-capture>match dst-port)
Full Contexts 
debug application-assurance group traffic-capture match dst-port
Description 

This command configures debugging on a destination port.

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-port

Syntax 
dst-port {lt | gt | eq} dst-port-number
dst-port range dst-port-number dst-port-number
no dst-port
Context 
[Tree] (config>li>li-filter>li-ip-filter>entry>match dst-port)
[Tree] (config>li>li-filter>li-ipv6-filter>entry>match dst-port)
Full Contexts 
configure li li-filter li-ip-filter entry match dst-port
configure li li-filter li-ipv6-filter entry match dst-port
Description 

This command configures a destination TCP or UDP port number or port range for an IP LI filter match criterion. Note that an entry containing Layer 4 match criteria will not match non-initial (second, third, and so on) fragments of a fragmented packet since only the first fragment contains the Layer 4 information.

The no form of this command removes the destination port match criterion.

Parameters 
lt—
Specifies all port numbers less than dst-port-number match.
gt—
Specifies all port numbers greater than dst-port-number match.
eq—
Specifies that dst-port-number must be an exact match.
dst-port-number
Specifies an inclusive range of port numbers to be used as a match criteria. The destination port numbers start-port and end-port are expressed as decimal integers.
Values—
[0..65535]D
[0x0..0xFFFF]H
[0b0..0b1111111111111111]B

 

Platforms 

All

dst-port

Syntax 
dst-port {lt | gt | eq} dst-port-number
dst-port range start end
no dst-port
Context 
[Tree] (config>qos>sap-ingress>ip-criteria>entry>match dst-port)
[Tree] (config>qos>sap-egress>ip-criteria>entry>match dst-port)
[Tree] (config>qos>sap-ingress>ipv6-criteria>entry>match dst-port)
[Tree] (config>qos>sap-egress>ipv6-criteria>entry>match dst-port)
Full Contexts 
configure qos sap-egress ip-criteria entry match dst-port
configure qos sap-egress ipv6-criteria entry match dst-port
configure qos sap-ingress ip-criteria entry match dst-port
configure qos sap-ingress ipv6-criteria entry match dst-port
Description 

This command configures a destination TCP or UDP port number or port range for a SAP QoS policy match criterion.

The no form of this command removes the destination port match criterion.

Default 

no dst-port

Parameters 
{lt | gt | eq} dst-port-number
The TCP or UDP port numbers to match, specified as less than (lt), greater than (gt), or equal to (eq) to the destination port value, specified as a decimal integer.
Values—
1 to 65535 (decimal)

 

range start end
The range of TCP or UDP port values to match, specified as between the start and end destination port values inclusive.
Values—
1 to 65535 (decimal)

 

Platforms 

All

dst-port

Syntax 
dst-port {lt | gt | eq} dst-port-number
dst-port port-list port-list-name
dst-port range start end
no dst-port
Context 
[Tree] (config>qos>network>ingress>ip-criteria>entry>match dst-port)
[Tree] (config>qos>network>ingress>ipv6-criteria>entry>match dst-port)
[Tree] (config>qos>network>egress>ip-criteria>entry>match dst-port)
[Tree] (config>qos>network>egress>ipv6-criteria>entry>match dst-port)
Full Contexts 
configure qos network egress ip-criteria entry match dst-port
configure qos network egress ipv6-criteria entry match dst-port
configure qos network ingress ip-criteria entry match dst-port
configure qos network ingress ipv6-criteria entry match dst-port
Description 

This command configures a destination TCP or UDP port number, port range, or a port list for a network QoS policy match criterion.

The no form of this command removes the destination port match criterion.

Parameters 
lt —
Keyword used to specify TCP or UDP port numbers to match that are less than the destination port value.
gt —
Keyword used to specify TCP or UDP port numbers to match that are greater than the destination port value.
eq —
Keyword used to specify TCP or UDP port numbers to match that are equal to the destination port value.
dst-port-number
Specifies the TCP or UDP port numbers to match, specified as less than (lt), greater than (gt), or equal to (eq) the destination port value, specified as a decimal integer.
Values—
1 to 65535

 

port-list-name
Specifies a port list name, up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.
start
Specifies the starting range of TCP or UDP port values to match.
Values—
1 to 65535

 

end
Specifies the end range of TCP or UDP port values to match.
Values—
1 to 65535

 

Platforms 

All

dst-port

Syntax 
dst-port {lt | gt | eq} dst-port-number
dst-port port-list port-list-name
dst-port range dst-port-number dst-port-number
no dst-port
Context 
[Tree] (config>filter>ip-exception>entry>match dst-port)
[Tree] (config>filter>ip-filter>entry>match dst-port)
[Tree] (config>filter>ipv6-exception>entry>match dst-port)
[Tree] (config>filter>ipv6-filter>entry>match dst-port)
Full Contexts 
configure filter ip-exception entry match dst-port
configure filter ip-filter entry match dst-port
configure filter ipv6-exception entry match dst-port
configure filter ipv6-filter entry match dst-port
Description 

This command configures a destination TCP, UDP, or SCTP port number or port range for an IP filter or IP exception match criterion. An entry containing Layer 4 non-zero match criteria will not match non-initial (2nd, 3rd, etc) fragments of a fragmented packet since only the first fragment contains the Layer 4 information. Similarly an entry containing the “dst-port eq 0” match criterion, may match non-initial fragments when the destination port value is not present in a packet fragment and other match criteria are also met.

The no form of the command removes the destination port match criterion.

Default 

no dst-port

Parameters 
lt—
Specifies that all port numbers less than the dst-port-number match.
gt—
Specifies that all port numbers greater than the dst-port-number match.
eq—
Specifies that the dst-port-number must be an exact match.
dst-port-number—
Specifies the destination port number to be used as a match criteria expressed as a decimal integer, as well as in hexadecimal or binary format. The following value is for decimal integer format only.
Values—
0 to 65535

 

port-list-name—
Specifies to use a list of ports referred to by port-list-name, which is a string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.
dst-port-number dst-port-number
Specifies inclusive port range between two dst-port-number values.
Platforms 

All

  1. configure filter ip-filter entry match dst-port
  2. configure filter ipv6-filter entry match dst-port

VSR

  1. configure filter ip-exception entry match dst-port
  2. configure filter ipv6-exception entry match dst-port

dst-port

Syntax 
dst-port value [mask]
no dst-port
Context 
[Tree] (config>system>security>mgmt-access-filter>ip-filter>entry dst-port)
[Tree] (config>system>security>mgmt-access-filter>ipv6-filter>entry dst-port)
Full Contexts 
configure system security management-access-filter ip-filter entry dst-port
configure system security management-access-filter ipv6-filter entry dst-port
Description 

This command configures a destination TCP or UDP port number or port range for a management access filter match criterion.

The no form of this command removes the destination port match criterion.

Parameters 
value—
Specifies the destination TCP or UDP port number as match criteria.
Values—
1 to 65535 (decimal)

 

mask—
Specifies the mask used to specify a range of destination port numbers as the match criterion.

This 16 bit mask can be configured using the formats described in Table 44:

Table 44:  Format Styles to Configure Mask

Format Style

Format Syntax

Example

Decimal

DDDDD

63488

Hexadecimal

0xHHHH

0xF800

Binary

0bBBBBBBBBBBBBBBBB

0b1111100000000000

To select a range from 1024 up to 2047, specify 1024 0xFC00 for value and mask.

Default—
65535 (exact match)
Values—
1 to 65535 (decimal)

 

Platforms 

All

dst-port

Syntax 
dst-port [tcp/udp port-number] [mask]
dst-port port-list port-list-name
dst-port range tcp/udp port-number tcp/udp port-number
no dst-port
Context 
[Tree] (cfg>sys>sec>cpm>ip-filter>entry>match dst-port)
[Tree] (cfg>sys>sec>cpm>ipv6-filter>entry>match dst-port)
Full Contexts 
configure system security cpm-filter ip-filter entry match dst-port
configure system security cpm-filter ipv6-filter entry match dst-port
Description 

This command specifies the TCP/UDP port or port name to match the destination-port of the packet.

Note:

An entry containing Layer 4 match criteria will not match non-initial (2nd, 3rd, etc) fragments of a fragmented packet since only the first fragment contains the Layer 4 information.

The no form of this command removes the destination port match criterion.

Default 

no dst-port

Parameters 
tcp/udp port-number—
Specifies the destination port number to be used as a match criteria expressed as a decimal integer.
Values—
0 to 65535 (accepted in decimal hex or binary)

 

port-list-name—
Specifies the port list name to be used as a match criteria for the destination port.
mask
Specifies the 16 bit mask to be applied when matching the destination port.
Values—
[0x0000 to 0xFFFF] | [0 to 65535] | [0b0000000000000000 to 0b1111111111111111]

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.298. dst-port-range

dst-port-range

Syntax 
dst-port-range start port-number end port-number
no dst-port-range
Context 
[Tree] (config>service>nat>nat-classifier>entry>match dst-port-range)
Full Contexts 
configure service nat nat-classifier entry match dst-port-range
Description 

This command configures a destination TCP or UDP port number or port range.

Note that an entry containing Layer 4 match criteria will not match non-initial (2nd, 3rd,etc) fragments of a fragmented packet since only the first fragment contains the Layer 4 information.

The no form of the command removes the destination port match criterion.

Default 

dst-port-range start 0 end 65535

Parameters 
start port-number
Specifies the start of the port range expressed as a decimal integer.
Values—
0 to 65535

 

end port-number
Specifies the end of the port range expressed as a decimal integer.
Values—
0 to 65535

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.299. dst-tcp-port

dst-tcp-port

Syntax 
dst-tcp-port tcp-port
no dst-tcp-port
Context 
[Tree] (config>test-oam>build-packet>header>tcp dst-tcp-port)
Full Contexts 
configure test-oam build-packet header tcp dst-tcp-port
Description 

This command defines the destination TCP port to be used in the test TCP header.

The no form of this command reverts to the default.

Default 

dst-tcp-port 0

Parameters 
tcp-port—
Specifies the destination TCP port to be used in the test TCP header.
Values—
0 to 65535

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dst-tcp-port

Syntax 
dst-tcp-port tcp-port
no dst-tcp-port
Context 
[Tree] (debug>oam>build-packet>packet>field-override>header>tcp dst-tcp-port)
Full Contexts 
debug oam build-packet packet field-override header tcp dst-tcp-port
Description 

This command defines the destination TCP port to be used in the TCP header.

The no form of this command reverts to the default.

Default 

no override

Parameters 
tcp-port—
Specifies the destination TCP port to be used in the TCP header.
Values—
0 to 65535

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.300. dst-udp-port

dst-udp-port

Syntax 
dst-udp-port udp-port
no dst-udp-port
Context 
[Tree] (config>test-oam>build-packet>header>udp dst-udp-port)
Full Contexts 
configure test-oam build-packet header udp dst-udp-port
Description 

This command defines the destination TCP port to be used in the test TCP header.

The no form of this command reverts to the default.

Default 

dst-udp-port 0

Parameters 
udp-port—
Specifies the destination UDP port to be used in the test UDP header.
Values—
0 to 65535

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dst-udp-port

Syntax 
dst-udp-port udp-port
no dst-udp-port
Context 
[Tree] (debug>oam>build-packet>packet>field-override>header>udp dst-udp-port)
Full Contexts 
debug oam build-packet packet field-override header udp dst-udp-port
Description 

This command defines the destination TCP port to be used in the TCP header.

The no form of this command reverts to the default.

Default 

no override

Parameters 
udp-port—
Specifies the destination UDP port to be used in the UDP header.
Values—
0 to 65535

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.301. dst-zone

dst-zone

Syntax 
[no] dst-zone {std-zone-name | non-std-zone-name}
Context 
[Tree] (config>system>time dst-zone)
Full Contexts 
configure system time dst-zone
Description 

This command configures the start and end dates and offset for summer time or daylight savings time to override system defaults or for user defined time zones.

When configured, the time is adjusted by adding the configured offset when summer time starts and subtracting the configured offset when summer time ends.

If the time zone configured is listed in the Time Zones section, then the starting and ending parameters and offset do not need to be configured with this command unless it is necessary to override the system defaults. The command returns an error if the start and ending dates and times are not available either the Time Zones section on or entered as optional parameters in this command.

Up to five summer time zones may be configured, for example, for five successive years or for five different time zones. Configuring a sixth entry will return an error message. If no summer (daylight savings) time is supplied, it is assumed no summer time adjustment is required.

The no form of the command removes a configured summer (daylight savings) time entry.

Parameters 
std-zone-name—
Specifies the standard time zone name. The standard name must be a system-defined zone in the Time Zones section. For zone names in the table that have an implicit summer time setting, for example MDT for Mountain Daylight Saving Time, the remaining start-date, end-date and offset parameters need to be provided unless it is necessary to override the system defaults for the time zone.
Values—
ADT, NDT, AKDT, CDT, CEST, EDT, EEST, MDT, NZDT, PDT, WEST

 

non-std-zone-name—
Specifies the non-standard time zone name. Create a user-defined name created using the zone. The name can be a maximum of 5 characters in length.
Platforms 

All

8.302. dual-stack-lite

dual-stack-lite

Syntax 
dual-stack-lite
Context 
[Tree] (config>service>vprn>nat dual-stack-lite)
[Tree] (config>router>nat>inside dual-stack-lite)
Full Contexts 
configure router nat inside dual-stack-lite
configure service vprn nat dual-stack-lite
Description 

Commands in this context configure Dual-Stack Lite (DS-Lite) NAT parameters.

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.303. dual-stack-lite-address

dual-stack-lite-address

Syntax 
dual-stack-lite-address ipv6-address
no dual-stack-lite-address
Context 
[Tree] (config>router>pcp-server>server dual-stack-lite-address)
Full Contexts 
configure router pcp-server server dual-stack-lite-address
Description 

This command configures the inside dual stack lite AFTR address.

The no form of this command reverts to the default value.

Default 

no dual-stack-lite-address

Parameters 
ipv6-address—
Specifies the IPv6 address.
Values—

ipv6-address

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x [0 to FFFF]H

d [0 to 255]D

 

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.304. duid

duid

Syntax 
duid duid [iaid iaid]
no duid
Context 
[Tree] (config>service>ies>if>ipv6>dhcp6>pfx-delegate>prefix duid)
Full Contexts 
configure service ies interface ipv6 dhcp6-server prefix-delegation prefix duid
Description 

This command configures the DHCP Unique Identifier (DUID) of the DHCP client.

The no form of this command reverts to the default.

Default 

duid 2

Parameters 
duid—
Specifies the ID of the requesting router, up to a maximum of 128 hex values. If set to a non-zero value the prefix defined will only be delegated to this router. If set to zero, the prefix is delegated to any requesting router.
iaid
Specifies the identity association identification (IAID) from the requesting router that needs to match to delegate the prefix defined in this row. If set to 0 no match on the received IAID is done.
Values—
1 to 4294967295

 

Platforms 

All

8.305. dup-detect

dup-detect

Syntax 
dup-detect [anti-spoof-mac mac-address] window minutes num-moves count hold-down [minutes | max]
dup-detect anti-spoof-mac mac-address window minutes num-moves count hold-down [minutes | max] [static-black-hole]
Context 
[Tree] (config>service>vpls>proxy-arp dup-detect)
[Tree] (config>service>vpls>proxy-nd dup-detect)
Full Contexts 
configure service vpls proxy-arp dup-detect
configure service vpls proxy-nd dup-detect
Description 

This command enables a mechanism that detects duplicate IPs and ARP/ND spoofing attacks. Attempts (relevant to dynamic and EVPN entry types) to add the same IP (different MAC) are monitored for window <minutes>. When <count> is reached within that window, the proxy-ARP/ND entry for the suspected IP is marked as duplicate. An alarm is also triggered. This condition is cleared when hold-down time expires (max does not expire) or a clear command is issued.

If the anti-spoof-mac is configured, the proxy-ARP/ND offending entry's MAC is replaced with this <mac-address> and advertised in an unsolicited GARP/NA for local SAP/SDP-bindings, and in EVPN to remote PEs. This mechanism assumes that the same anti-spoof-mac is configured in all the PEs for the same service and that traffic with destination anti-spoof-mac received on SAPs/SDP-bindings will be dropped. An ingress mac-filter may be configured to drop traffic to the anti-spoof-mac.

The anti-spoof-mac can also be combined with the static-black-hole option. To use a black-hole MAC entry for the anti-spoof-mac function in a proxy-ARP/ND service, the following must be configured:

  1. static-black-hole option for the anti-spoof-mac
  2. a static black-hole MAC using the same MAC address used for the anti-spoof-mac: static-mac mac <mac-address> create black-hole command.

When both anti-spoof-mac and static-black-hole commands are configured, the MAC is advertised in EVPN as Static. Locally, the MAC will be shown in the FDB as CStatic and associated with a black-hole.

The combination of the anti-spoof-mac and the static-black-hole options ensures that any frame arriving in the system with MAC DA=anti-spoof-mac will be discarded, regardless of the ingress endpoint type (SAP/SDP-binding or EVPN) and without the need for a filter.

If the user wants to redirect the traffic with MAC DA=anti-spoof-mac instead of discarding it, redirect filters should be configured on SAPs/SDP-bindings instead of the static-black-hole option.

If the static-black-hole option is not configured for the anti-spoof-mac, the behavior is as follows:

  1. The anti-spoof-mac is not programmed in the FDB.
  2. Any attempt to add a Static MAC (or any other MAC) with the anti-spoof-mac value will be rejected by the system.
  3. A mac-filter is needed to discard traffic with MAC DA=anti-spoof-mac.

Any changes to the configuration of anti-spoof-mac require proxy-arp or proxy-nd to first be shut down. Refer to “ARP/ND Snooping and Proxy Support” in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Layer 2 Services and EVPN Guide: VLL, VPLS, PBB, and EVPN for more information.

Default 

dup-detect window 3 num-moves 5 hold-down 9

Parameters 
window minutes
Specifies the window size in minutes.
Values—
1 to 15

 

Default—
3
count
Specifies the number of moves required so that an entry is declared duplicate.
Values—
3 to 10

 

Default—
5
hold-down minutes
Specifies the hold-down time for a duplicate entry.
Values—
2 to 60

 

Default—
9
hold-down max—
Specifies permanent hold-down time for a duplicate entry.
mac-address
Specifies the optional anti-spoof-mac to use.
Platforms 

All

8.306. duplex

duplex

Syntax 
duplex {full | half}
Context 
[Tree] (config>port>ethernet duplex)
Full Contexts 
configure port ethernet duplex
Description 

This command configures the duplex of a Fast Ethernet port when autonegotiation is disabled.

This configuration command allows for the configuration of the duplex mode of a Fast Ethernet port. If the port is configured to autonegotiate this parameter is ignored.

Default 

duplex full

Parameters 
full—
Sets the link to full duplex mode.
half—
Sets the link to half duplex mode.
Platforms 

All

duplex

Syntax 
duplex {full | half}
Context 
[Tree] (bof duplex)
Full Contexts 
bof duplex
Description 

This command configures the duplex mode of the CPM management Ethernet port when autonegotiation is disabled in the running configuration and the Boot Option File (BOF). If the port is configured to autonegotiate this parameter will be ignored.

Parameters 
full—
Sets the link to full duplex mode.
half—
Sets the link to half duplex mode.
Platforms 

All

8.307. dwdm

dwdm

Syntax 
dwdm
Context 
[Tree] (config>port dwdm)
Full Contexts 
configure port dwdm
Description 

This command configures the Dense Wavelength Division Multiplexing (DWDM) parameters.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.308. dying-gasp

dying-gasp

Syntax 
[no] dying-gasp
Context 
[Tree] (config>port>ethernet>efm-oam>link-mon>local-sf-action>info-notification dying-gasp)
Full Contexts 
configure port ethernet efm-oam link-monitoring local-sf-action info-notification dying-gasp
Description 

This command sets the dying gasp Flag field in the Information OAM PDU when the local signal failure (sf-threshold) threshold is reached. This will be maintained in all subsequent Information OAM PDUs until the situation is cleared.

Interactions: The signal failure threshold will trigger these actions.

Default 

no dying-gasp

Platforms 

All

dying-gasp

Syntax 
dying-gasp local-port-action {log-only | out-of-service}
Context 
[Tree] (config>port>ethernet>efm-oam>peer-rdi-rx dying-gasp)
Full Contexts 
configure port ethernet efm-oam peer-rdi-rx dying-gasp
Description 

This command defines how to react to the reception of a dying gasp Flag field set in the informational OAMPDU.

Default 

dying-gasp local-port-action out-of-service

Parameters 
local-port-action—
Defines whether or not the local port will be affected when a dying gasp event is received from a peer.
log-only—
Keyword that prevents the port from being affected when the local peer receives a dying gasp. The dying gasp will be logged but the port will remain operational.
out-of-service —
Keyword that causes the port to enter a non-operation down state with a port state of link up. The error will be logged upon reception of dying gasp. The port will not be available to service data but will continue to carry Link OAM traffic to ensure the link is monitored.
Platforms 

All

8.309. dying-gasp-tx-on-reset

dying-gasp-tx-on-reset

Syntax 
[no] dying-gasp-tx-on-reset
Context 
[Tree] (config>system>ethernet>efm-oam dying-gasp-tx-on-reset)
[Tree] (config>port>ethernet>efm-oam dying-gasp-tx-on-reset)
Full Contexts 
configure port ethernet efm-oam dying-gasp-tx-on-reset
configure system ethernet efm-oam dying-gasp-tx-on-reset
Description 

This command enables generation of the Information OAM PDU off-cycle when the soft reset notification is received by the EFM application. The local port state remains under the control of the Soft Reset application and does not change based on this EFM function. If the port is operationally up then the local node will continue to consider the port as available for service data and forwarding. If the upstream node requires notification to route around the local node undergoing the soft reset, notification must be sent to those nodes. This is a disruptive function.

This command is disabled by default at the system level and enabled by default at the port level. The combination of the system-level and port-level configuration determines if the dying gasp on soft reset function is active on individual ports. Both the system-level and port-level commands must be enabled in order to support generation of the Information OAM PDU for soft reset. If either is disabled, dying gasp is not active on those ports. This functionality must be enabled prior to the soft reset.

When both grace-tx-enable and dying-gasp-tx-on-reset are active on the same port, grace-tx-enable takes precedence when a soft reset is invoked if the Peer Vendor OUI being received is 00:16:4d (ALU) or the configured config>port>ethernet>efm-oam grace-vendor-oui value. The grace-tx-enable command should not be configured if the Nokia Vendor Specific Grace TLV is not supported on the remote peer, including Nokia 7750 SR equipment prior to release 11.0 R4.

Default 

config>system>ethernet>efm-oam>no dying-gasp-tx-on-reset

config>port>ethernet>efm-oam>dying-gasp-tx-on-reset

Platforms 

All

8.310. dynamic

dynamic

Syntax 
dynamic ip-address [create]
no dynamic ip-address
Context 
[Tree] (config>service>vpls>proxy-arp dynamic)
[Tree] (config>service>vpls>proxy-nd dynamic)
Full Contexts 
configure service vpls proxy-arp dynamic
configure service vpls proxy-nd dynamic
Description 

This command creates a dynamic IP that can be associated to a MAC list. The configured dynamic IP is only converted to a dynamic entry when the resolve process for the IP has passed successfully.

A summary of the IP resolution process is as follows:

  1. A resolve message is sent for the configured IP as soon as the dynamic IP is configured. The message is sent with a configurable frequency of 1 to 60 minutes (using the resolve command); the default value is 5 minutes. The actual resolve interval is a “tittered” value of the configured interval.
  2. The resolve message is an ARP-request or NS message flooded to all the non-EVPN endpoints in the service, irrespective of the status of the unknown-arp-request-flood-evpn or unknown-ns-flood-evpn commands. The router sends resolve messages at the configured frequency until a dynamic entry for the IP is created in the proxy-ARP or proxy-ND table. The IP entry is created only if all of the following conditions are true.
    1. An ARP, GARP, or NA message is received for the configured IP.
    2. The associated MAC exists in the configured MAC list for the IP.
      If the MAC list is empty or not configured, the router does not create an entry for the IP.
  3. After a dynamic entry is created in the proxy-ARP or proxy-ND table, the IP->MAC entry is advertised in the EVPN.

The no form of the command deletes the dynamic IP and the associated proxy-ARP or proxy-ND entry, if it exists.

Parameters 
ip-address—
Specifies the IPv4 or IPv6 address.
Values—
ip-address: a.b.c.d
ipv6-address: x:x:x:x:x:x:x:x (eight 16-bit pieces)
                       x:x:x:x:x:x:d.d.d.d
             where:
                        x: [0 to FFFF]H
                        d: [0 to 255]D

 

Platforms 

All

dynamic

Syntax 
dynamic
Context 
[Tree] (config>router>if>if-attr>delay dynamic)
Full Contexts 
configure router interface if-attribute delay dynamic
Description 

Commands in this context configure dynamic link measurement delay options for the IP interface.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

8.311. dynamic-arp-populate

dynamic-arp-populate

Syntax 
[no] dynamic-arp-populate
Context 
[Tree] (config>service>vpls>proxy-arp dynamic-arp-populate)
Full Contexts 
configure service vpls proxy-arp dynamic-arp-populate
Description 

This command enables the addition of dynamic entries to the proxy-ARP table (disabled by default). When executed, the system will populate proxy-ARP entries from snooped GARP/ARP messages on SAPs/SDP-bindings. These entries will be shown as dynamic.

When disabled, dynamic-arp entries will be flushed from the proxy-ARP table. Enabling dynamic-arp-populate is only recommended in networks with a consistent configuration of this command in all the PEs.

Default 

no dynamic-arp-populate

Platforms 

All

8.312. dynamic-bgp

dynamic-bgp

Syntax 
[no] dynamic-bgp
Context 
[Tree] (config>router>static-route-entry>black-hole dynamic-bgp)
Full Contexts 
configure router static-route-entry black-hole dynamic-bgp
Description 

This optional command controls the behavior of the associated static route so that if a matching BGP route to the same exact prefix is present in BGP, the static route's nexthop is set to the BGP’s nexthop value. If there is no matching active BGP route, the static route's nexthop is set to be a black-hole nexthop.

Default 

no dynamic-bgp

Platforms 

All

8.313. dynamic-bypass

dynamic-bypass

Syntax 
dynamic-bypass [enable | disable]
no dynamic-bypass
Context 
[Tree] (config>router>mpls dynamic-bypass)
Full Contexts 
configure router mpls dynamic-bypass
Description 

This command disables the creation of dynamic bypass LSPs in FRR. One or more manual bypass LSPs must be configured to protect the primary LSP path at the PLR nodes.

Default 

dynamic-bypass enable

Platforms 

All

8.314. dynamic-cost

dynamic-cost

Syntax 
[no] dynamic-cost
Context 
[Tree] (config>lag dynamic-cost)
Full Contexts 
configure lag dynamic-cost
Description 

This command enables OSPF or ISIS costing of a Link Aggregation Group (LAG) based on the available aggregated, operational bandwidth.

The path cost is dynamically calculated based on the interface bandwidth. OSPF path cost can be changed through the interface metric or the reference bandwidth.

If dynamic cost is configured, then costing is applied based on the total number of links configured and the cost advertised is inversely proportional to the number of links available at the time. This is provided that the number of links that are up exceeds the configured LAG threshold value at which time the configured threshold action determines if, and at what cost, this LAG will be advertised.

For example: Assume a physical link in OSPF has a cost associated with it of 100, and the LAG consists of four physical links. The cost associated with the logical link is 25. If one link fails then the cost would automatically be adjusted to 33.

If dynamic cost is not configured and OSPF autocost is configured, then costing is applied based on the total number of links configured. This cost will remain static provided the number of links that are up exceeds the configured LAG threshold value at which time the configured threshold action determines if and at what cost this LAG will be advertised.

If dynamic-cost is configured and OSPF autocost is not configured, the cost is determined by the cost configured on the OSPF metric provided the number of links available exceeds the configured LAG threshold value at which time the configured threshold action determines if this LAG will be advertised.

If neither dynamic-cost nor OSPF autocost are configured, the cost advertised is determined by the cost configured on the OSPF metric provided the number of links available exceeds the configured LAG threshold value at which time the configured threshold action determines if this LAG will be advertised.

The no form of this command removes dynamic costing from the LAG.

Default 

no dynamic-cost

Platforms 

All

8.315. dynamic-egress-label-limit

dynamic-egress-label-limit

Syntax 
[no] dynamic-egress-label-limit
Context 
[Tree] (config>service>epipe>bgp-evpn>mpls dynamic-egress-label-limit)
[Tree] (config>service>vpls>bgp-evpn>mpls dynamic-egress-label-limit)
[Tree] (config>service>vprn>bgp-evpn>mpls dynamic-egress-label-limit)
[Tree] (config>service>vprn>bgp-ipvpn>mpls dynamic-egress-label-limit)
Full Contexts 
configure service epipe bgp-evpn mpls dynamic-egress-label-limit
configure service vpls bgp-evpn mpls dynamic-egress-label-limit
configure service vprn bgp-evpn mpls dynamic-egress-label-limit
configure service vprn bgp-ipvpn mpls dynamic-egress-label-limit
Description 

This command relaxes the egress MPLS label limit check when resolving BGP next hops in the tunnel table.

For VPRN services, the OAM label is never computed and, therefore, one more egress label is allowed.

For EVPN (Epipe and VPLS) services, the system only computes the control word and ESI label if they are used. For the control word, the system reduces the egress label limit by one label if the control word is configured in the service. When configured, the ESI label is not counted for Epipes or VPLS services without an ES.

The no form of this command, for EVPN, Epipe, and VPLS services, always accounts for the ESI label and control word.

Default 

no dynamic-egress-label-limit

Platforms 

All

8.316. dynamic-enforcement-policer-pool

dynamic-enforcement-policer-pool

Syntax 
[no] dynamic-enforcement-policer-pool number-of-policers
Context 
[Tree] (config>card>fp>ingress>dist-cpu-protection dynamic-enforcement-policer-pool)
Full Contexts 
configure card fp ingress dist-cpu-protection dynamic-enforcement-policer-pool
Description 

This command reserves a set of policers for use as dynamic enforcement policers for the Distributed CPU Protection (DCP) feature. Policers are allocated from this pool and instantiated as per-object-per-protocol dynamic enforcement policers after a local monitor is triggered for an object (such as a SAP or Network Interface). Any change to this configured value automatically clears the high water mark, timestamp, and failed allocation counts as seen under “show card x fp y dist-cpu-protection” and in the tmnxFpDcpDynEnfrcPlcrStatTable in the TIMETRA-CHASSIS-MIB. Decreasing this value to below the currently used/allocated number causes all dynamic policers to be returned to the free pool (and traffic returns to the local monitors).

Default 

no dynamic-enforcement-policer-pool

Parameters 
number-of-policers—
specifies the number of policers to be reserved.
Values—
1000 to 32000

 

Platforms 

All

8.317. dynamic-fields

dynamic-fields

Syntax 
[no] dynamic-fields
Context 
[Tree] (config>app-assure>group>cflowd>comp>template dynamic-fields)
[Tree] (config>app-assure>group>cflowd>rtp-perf>audio-template dynamic-fields)
[Tree] (config>app-assure>group>cflowd>rtp-perf>video-template dynamic-fields)
[Tree] (config>app-assure>group>cflowd>rtp-perf>voice-template dynamic-fields)
[Tree] (config>app-assure>group>cflowd>tcp-perf>template dynamic-fields)
[Tree] (config>app-assure>group>cflowd>volume>template dynamic-fields)
Full Contexts 
configure application-assurance group cflowd comprehensive template dynamic-fields
configure application-assurance group cflowd rtp-performance audio-template dynamic-fields
configure application-assurance group cflowd rtp-performance video-template dynamic-fields
configure application-assurance group cflowd rtp-performance voice-template dynamic-fields
configure application-assurance group cflowd tcp-performance template dynamic-fields
configure application-assurance group cflowd volume template dynamic-fields
Description 

Commands in this context configure which fields are included in the exported cflowd template.

The no form of this command removes all configured dynamic fields from the template.

Note:

This command is only supported if the dynamic option is configured in the field-selection command.

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.318. dynamic-keying

dynamic-keying

Syntax 
[no] dynamic-keying
Context 
[Tree] (config>service>ies>if>ipsec>ipsec-tunnel dynamic-keying)
[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel dynamic-keying)
[Tree] (config>service>vprn>if>sap>ipsec-tunnel dynamic-keying)
[Tree] (config>router>if>ipsec>ipsec-tunnel dynamic-keying)
[Tree] (config>ipsec>trans-mode-prof dynamic-keying)
Full Contexts 
configure ipsec ipsec-transport-mode-profile dynamic-keying
configure router interface ipsec ipsec-tunnel dynamic-keying
configure service ies interface ipsec ipsec-tunnel dynamic-keying
configure service vprn interface ipsec ipsec-tunnel dynamic-keying
configure service vprn interface sap ipsec-tunnel dynamic-keying
Description 

This command enables dynamic keying for the IPsec tunnel.

The no form of this command disables dynamic keying.

Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  1. configure ipsec ipsec-transport-mode-profile dynamic-keying
  2. configure service vprn interface sap ipsec-tunnel dynamic-keying

VSR

  1. configure service vprn interface ipsec ipsec-tunnel dynamic-keying
  2. configure router interface ipsec ipsec-tunnel dynamic-keying
  3. configure service ies interface ipsec ipsec-tunnel dynamic-keying

8.319. dynamic-mbs

dynamic-mbs

Syntax 
[no] dynamic-mbs
Context 
[Tree] (config>qos>qgrps>egr>qgrp>queue dynamic-mbs)
Full Contexts 
configure qos queue-group-templates egress queue-group queue dynamic-mbs
Description 

This command enables support for dynamically modifying the MBS size of a queue using HQoS in order to maintain the maximum latency for traffic in the queue based on the queue’s configured MBS and the ratio of its operational PIR to its administrative PIR. As the HQoS algorithm updates the operational PIR, by reducing or increasing it, the MBS of the queue is adjusted accordingly.

The configuration of dynamic MBS and the configuration of queue depth monitoring (monitor-queue-depth command) are mutually exclusive. Queue depth monitoring is an override on the queue where the queue group is applied.

The no form of this command disables dynamic MBS resizing.

Default 

no dynamic-mbs

Platforms 

All

8.320. dynamic-nd-populate

dynamic-nd-populate

Syntax 
[no] dynamic-nd-populate
Context 
[Tree] (config>service>vpls>proxy-nd dynamic-nd-populate)
Full Contexts 
configure service vpls proxy-nd dynamic-nd-populate
Description 

This command enables the addition of dynamic entries to the proxy-ND table. The command is disabled by default. When executed, the system will populate proxy-ND entries from snooped Neighbor Advertisement (NA) messages on SAPs/SDP-bindings, in addition to the entries coming from EVPN (if the EVPN is enabled). These entries will be shown as dynamic, as opposed to EVPN entries or static entries.

When disabled, dynamic-ND entries will be flushed from the proxy-ND table. Enabling dynamic-nd-populate is only recommended in networks with a consistent configuration of this command in all the PEs.

Default 

no dynamic-nd-populate

Platforms 

All

8.321. dynamic-neighbor

dynamic-neighbor

Syntax 
dynamic-neighbor
Context 
[Tree] (config>service>vprn>bgp>group dynamic-neighbor)
Full Contexts 
configure service vprn bgp group dynamic-neighbor
Description 

Commands in this context configure dynamic BGP sessions for a peer group.

Platforms 

All

dynamic-neighbor

Syntax 
dynamic-neighbor
Context 
[Tree] (config>router>bgp>group dynamic-neighbor)
Full Contexts 
configure router bgp group dynamic-neighbor
Description 

Commands in this context configure dynamic BGP sessions for a peer group.

Platforms 

All

8.322. dynamic-neighbor-limit

dynamic-neighbor-limit

Syntax 
dynamic-neighbor-limit peers
no dynamic-neighbor-limit
Context 
[Tree] (config>service>vprn>bgp dynamic-neighbor-limit)
[Tree] (config>service>vprn>bgp>group dynamic-neighbor-limit)
Full Contexts 
configure service vprn bgp dynamic-neighbor-limit
configure service vprn bgp group dynamic-neighbor-limit
Description 

This command configures the maximum number of dynamic BGP sessions that are accepted from remote peers associated with the entire BGP instance or a specific peer group. If accepting a new dynamic session would cause either the group limit or the instance limit to be exceeded, then the new session attempt is rejected and a Notification message is sent back to the remote peer.

The no form of this command removes the limit on the number of dynamic sessions.

Default 

no dynamic-neighbor-limit

Parameters 
peers—
Specifies the maximum number of dynamic BGP sessions.
Values—
1 to 8192

 

Platforms 

All

dynamic-neighbor-limit

Syntax 
dynamic-neighbor-limit peers
no dynamic-neighbor-limit
Context 
[Tree] (config>router>bgp dynamic-neighbor-limit)
[Tree] (config>router>bgp>group dynamic-neighbor-limit)
Full Contexts 
configure router bgp dynamic-neighbor-limit
configure router bgp group dynamic-neighbor-limit
Description 

This command configures the maximum number of dynamic BGP sessions that will be accepted from remote peers associated with the entire BGP instance or a specific peer group. If accepting a new dynamic session would cause either the group limit or the instance limit to be exceeded, then the new session attempt is rejected and a Notification message is sent back to the remote peer.

The no form of this command removes the limit on the number of dynamic sessions.

Default 

no dynamic-neighbor-limit

Parameters 
peers—
Specifies the maximum number of dynamic BGP sessions.
Values—
1 to 8192

 

Platforms 

All

8.323. dynamic-parameters

dynamic-parameters

Syntax 
dynamic-parameters
Context 
[Tree] (config>sys>security>dist-cpu-protection>policy>protocol dynamic-parameters)
Full Contexts 
configure system security dist-cpu-protection policy protocol dynamic-parameters
Description 

The dynamic-parameters are used to instantiate a dynamic enforcement policer for the protocol when the associated local-monitoring-policer is considered as exceeding its rate parameters (at the end of a minimum monitoring time of 60 seconds).

Platforms 

All

8.324. dynamic-policer

dynamic-policer

Syntax 
dynamic-policer
Context 
[Tree] (config>qos>sap-egress dynamic-policer)
[Tree] (config>qos>sap-ingress dynamic-policer)
Full Contexts 
configure qos sap-egress dynamic-policer
configure qos sap-ingress dynamic-policer
Description 

Commands in this context configure common properties for dynamic-policers. Dynamic policers are instantiated and terminated on demand due to an action request submitted by the policy server (for example, using a Gx interface). The actions types behind dynamic policers are typically related to rate-limiting or volume monitoring. The dynamic-policers can be instantiated on demand at any time during the lifetime of the sla-profile instance.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.325. dynamic-services

dynamic-services

Syntax 
dynamic-services
Context 
[Tree] (config>service>vpls>sap dynamic-services)
Full Contexts 
configure service vpls sap dynamic-services
Description 

Commands in this context configure dynamic services parameters on a capture SAP.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dynamic-services

Syntax 
dynamic-services
Context 
[Tree] (config>service dynamic-services)
Full Contexts 
configure service dynamic-services
Description 

Commands in this context configure dynamic data services. Only available on systems with multi-core CPM (CPM3 or up).

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dynamic-services

Syntax 
[no] dynamic-services
Context 
[Tree] (debug dynamic-services)
Full Contexts 
debug dynamic-services
Description 

Commands in this context configure dynamic services debugging.

Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.326. dynamic-services-policy

dynamic-services-policy

Syntax 
dynamic-services-policy dynsrv-policy-name [create]
no dynamic-services-policy dynsrv-policy-name
Context 
[Tree] (config>service>dynsvc dynamic-services-policy)
Full Contexts 
configure service dynamic-services dynamic-services-policy
Description 

This command creates a new dynamic services policy that can be used to create dynamic data services.

The no form of this command removes the dynamic services policy from the configuration. This is only allowed when there are no active dynamic data services referencing this policy.

Parameters 
dynsrv-policy-name—
Specifies a unique name of a dynamic services policy up to 32 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dynamic-services-policy

Syntax 
dynamic-services-policy name
no dynamic-services-policy
Context 
[Tree] (config>service>dynsvc>ladb>user>idx dynamic-services-policy)
[Tree] (config>service>vpls>sap>dyn-svc dynamic-services-policy)
Full Contexts 
configure service dynamic-services local-auth-db user-name index dynamic-services-policy
configure service vpls sap dynamic-services dynamic-services-policy
Description 

This command specifies the local configured dynamic data service policy to use for provisioning (local authentication database context) or authentication (capture-sap context) of this dynamic service. If not specified, the dynamic services policy with the name default is used. If the default policy does not exist, then the dynamic data service setup or authentication fails.

The no form of this command removes the dynamic services policy from the configuration.

Parameters 
name—
Specifies a dynamic services policy name, up to 32 characters.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

8.327. dynamic-topology-discover

dynamic-topology-discover

Syntax 
[no] dynamic-topology-discover
Context 
[Tree] (config>service>vpls>gsmp>group>ancp dynamic-topology-discover)
[Tree] (config>service>vprn>gsmp>group>ancp dynamic-topology-discover)
Full Contexts 
configure service vpls gsmp group ancp dynamic-topology-discover
configure service vprn gsmp group ancp dynamic-topology-discover
Description 

This command enables the ANCP dynamic topology discovery capability.

The no form of this command disables the feature.

Platforms 

All

8.328. dynamic-tunnel-redundant-next-hop

dynamic-tunnel-redundant-next-hop

Syntax 
dynamic-tunnel-redundant-next-hop ip-address
no dynamic-tunnel-redundant-next-hop
Context 
[Tree] (config>service>ies>if dynamic-tunnel-redundant-next-hop)
[Tree] (config>service>vprn>if dynamic-tunnel-redundant-next-hop)
Full Contexts 
configure service ies interface dynamic-tunnel-redundant-next-hop
configure service vprn interface dynamic-tunnel-redundant-next-hop
Description 

This command specifies redundant next-hop address on a public or private IPsec interface (with public or private tunnel-sap) for dynamic IPsec tunnel. The specified next-hop address is used by a standby node to shunt traffic to master in case it receives the address.

The next-hop address is resolved in the routing table of a corresponding service.

Default 

no dynamic-tunnel-redundant-next-hop

Parameters 
ip-address—
Specifies the dynamic ISA tunnel redundant next-hop address.
Platforms 

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

8.329. dynmldp

dynmldp

Syntax 
dynmldp [detail]
no dynmldp
Context 
[Tree] (debug>router>pim dynmldp)
Full Contexts 
debug router pim dynmldp
Description 

This command enables debugging for dynamic MLDP.

The no form of this command disables dynamic MLDP debugging.

Parameters 
detail—
Debugs detailed dynamic MLDP information.
Platforms 

All

8.330. dynsvc-password

dynsvc-password

Syntax 
dynsvc-password password [hash | hash2]
no dynsvc-password
Context 
[Tree] (config>system>security>password dynsvc-password)
Full Contexts 
configure system security password dynsvc-password
Description 
Note:

See also the description for the enable-dynamic-services-config command.

This command allows a user with admin permissions to configure a system wide password which enables a user to enter a special dynamic services configuration mode.

The minimum length of the password is determined by the minimum-length command. The complexity requirements for the password are determined by the complexity command.

The no form of this command removes the dynsvc password from the configuration.

Parameters 
password—
Configures the password which enables a user to enter a special dynamic services configuration mode. The maximum length can be up to 20 characters if unhashed, 32 characters if hashed, 54 characters if the hash2 keyword is specified.
hash—
Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
hash2—
Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
Platforms 

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR