application-assurance commands

configure 
application-assurance 
aarp number 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
description string
master-selection-mode keyword
peer (ipv4-address-no-zone | ipv6-address-no-zone)
peer-endpoint 
sap 
encap-type keyword
sap-id string
spoke-sdp string
priority number
apply-groups reference
apply-groups-exclude reference
cflowd 
field string 
apply-groups reference
apply-groups-exclude reference
comment string
flow-attribute 
attribute string 
apply-groups reference
apply-groups-exclude reference
comment string
group number 
apply-groups reference
apply-groups-exclude reference
certificate-profile string 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
description string
file string
cflowd 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
collector (ipv4-address-no-zone | ipv6-address-no-zone) port number 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
description string
comprehensive 
apply-groups reference
apply-groups-exclude reference
flow-rate number
flow-rate-2 number
template 
apply-groups reference
apply-groups-exclude reference
dynamic-fields 
admin-state keyword
field string 
field-selection keyword
direct-export 
collector number 
address (ipv4-address-no-zone | ipv6-address-no-zone) port number 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
apply-groups reference
apply-groups-exclude reference
description string
vlan-id number
export-override 
mode keyword
prefix string
obfuscation 
aes-128-encryption-key string
aes-256-encryption-key string
rtp-performance 
apply-groups reference
apply-groups-exclude reference
audio-template 
apply-groups reference
apply-groups-exclude reference
dynamic-fields 
admin-state keyword
field string 
field-selection keyword
flow-rate number
flow-rate-2 number
video-template 
apply-groups reference
apply-groups-exclude reference
dynamic-fields 
admin-state keyword
field string 
field-selection keyword
voice-template 
apply-groups reference
apply-groups-exclude reference
dynamic-fields 
admin-state keyword
field string 
field-selection keyword
tcp-performance 
apply-groups reference
apply-groups-exclude reference
flow-rate number
flow-rate-2 number
template 
apply-groups reference
apply-groups-exclude reference
dynamic-fields 
admin-state keyword
field string 
field-selection keyword
template-retransmit number
volume 
rate number
template 
apply-groups reference
apply-groups-exclude reference
dynamic-fields 
admin-state keyword
field string 
field-selection keyword
dns-ip-cache string 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
description string
dns-match 
domain string 
apply-groups reference
apply-groups-exclude reference
expression string
trusted-server-address (ipv4-address-no-zone | ipv6-address-no-zone) 
apply-groups reference
apply-groups-exclude reference
server-name string
ip-cache 
high-watermark number
low-watermark number
size number
static-address (ipv4-address-no-zone | ipv6-address-no-zone) 
http-enrich string 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
description string
field string 
aes-initialization-vector string
anti-spoof boolean
apply-groups reference
apply-groups-exclude reference
calling-line-id boolean
encode 
cert-profile reference
key 
type keyword
value string
md5-salt string
name string
static-string string
rat-type-enrichment 
rat-type keyword 
apply-groups reference
apply-groups-exclude reference
rat-string string
http-error-redirect string 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
description string
error-code number 
apply-groups reference
apply-groups-exclude reference
custom-message-size number
http-host string
participant-id string
template number
http-notification string 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
description string
interval (number | keyword)
script-url string
template number
http-redirect string 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
captive-redirect 
vlan-id number
description string
redirect-https boolean
redirect-url string
tcp-client-reset boolean
template number
partition number 
aa-sub-congestion-detection 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
rat-type keyword 
apply-groups reference
apply-groups-exclude reference
rtt-threshold (number | keyword)
rtt-threshold (number | keyword)
rtt-threshold-tolerance number
aa-sub-remote boolean
access-network-location 
source keyword 
apply-groups reference
apply-groups-exclude reference
rat-type keyword 
apply-groups reference
apply-groups-exclude reference
rtt-threshold (number | keyword)
rtt-threshold (number | keyword)
rtt-threshold-tolerance number
source-level keyword
apply-groups reference
apply-groups-exclude reference
aqp-initial-lookup boolean
cflowd 
export-type keyword 
admin-state keyword
app-group reference 
apply-groups reference
apply-groups-exclude reference
rate-choice keyword
application reference 
apply-groups reference
apply-groups-exclude reference
rate-choice keyword
apply-groups reference
apply-groups-exclude reference
description string
event-log string 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
buffer-type keyword
max-entries number
syslog 
address (ipv4-address-no-zone | ipv6-address-no-zone)
description string
facility keyword
port number
severity keyword
vlan-id number
gtp 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
gtp-filter string 
apply-groups reference
apply-groups-exclude reference
description string
gtp-in-gtp keyword
gtp-tunnel-database 
default-tunnel-endpoint-limit number
validate-gtp-tunnels boolean
validate-sequence-number boolean
validate-source-ip-addr boolean
imsi-apn-filter 
default-action keyword
entry number 
action keyword
apn string
apply-groups reference
apply-groups-exclude reference
imsi-mcc-mnc-prefix string
src-gsn 
ip-prefix (ipv4-prefix | ipv6-prefix)
ip-prefix-list reference
log 
action keyword
event-log reference
max-payload-length number
message-type 
default-action keyword
entry number 
action keyword
apply-groups reference
apply-groups-exclude reference
value (number | keyword)
message-type-gtp-v2 
default-action keyword
entry number 
action keyword
apply-groups reference
apply-groups-exclude reference
value (number | keyword)
gtpc-inspection boolean
log 
action keyword
event-log reference
mode keyword
http-match-all-requests boolean
http-x-online-host boolean
ip-prefix-list string 
apply-groups reference
apply-groups-exclude reference
description string
prefix (ipv4-prefix | ipv6-prefix) 
apply-groups reference
apply-groups-exclude reference
name string
policy 
app-filter 
entry number 
admin-state keyword
application reference
apply-groups reference
apply-groups-exclude reference
description string
expression number 
apply-groups reference
apply-groups-exclude reference
eq string
neq string
type keyword
flow-setup-direction keyword
http-match-all-requests boolean
http-port 
eq 
port-list reference
port-number number
neq 
port-list reference
port-number number
ip-protocol 
eq (number | keyword)
neq (number | keyword)
network-address 
eq 
ip-prefix (ipv4-prefix | ipv6-prefix)
ip-prefix-list reference
neq 
ip-prefix (ipv4-prefix | ipv6-prefix)
ip-prefix-list reference
protocol 
eq (string | named-item)
neq (string | named-item)
server-address 
eq 
dns-ip-cache reference
ip-prefix (ipv4-prefix | ipv6-prefix)
ip-prefix-list reference
masked-ip 
address (ipv4-address-no-zone | ipv6-address-no-zone)
netmask (ipv4-address-no-zone | ipv6-address-no-zone)
neq 
dns-ip-cache reference
ip-prefix (ipv4-prefix | ipv6-prefix)
ip-prefix-list reference
masked-ip 
address (ipv4-address-no-zone | ipv6-address-no-zone)
netmask (ipv4-address-no-zone | ipv6-address-no-zone)
server-port 
eq 
first-packet-policy keyword
port-list reference
port-number number
range 
end number
start number
gt 
port-number number
lt 
port-number number
neq 
port-list reference
port-number number
range 
end number
start number
app-group string 
apply-groups reference
apply-groups-exclude reference
charging-group reference
description string
export-id number
app-profile string 
aa-sub-suppressible boolean
apply-groups reference
apply-groups-exclude reference
capacity-cost number
characteristic reference 
apply-groups reference
apply-groups-exclude reference
value reference
description string
divert boolean
app-qos-policy 
entry number 
action 
abandon-tcp-optimization boolean
apply-groups reference
apply-groups-exclude reference
bandwidth-policer 
anl reference
dual-bucket reference
single-bucket reference
dns-ip-cache reference
drop boolean
error-drop 
event-log reference
flow-count-limit-policer 
event-log reference
policer-name reference
flow-setup-rate-policer 
event-log reference
policer-name reference
fragment-drop 
drop-scope keyword
event-log reference
gtp-filter reference
http-enrich reference
http-error-redirect reference
http-notification reference
http-redirect 
flow-type keyword
name reference
mirror-source 
all-inclusive boolean
mirror-service reference
overload-drop 
event-log reference
remark 
dscp 
in-profile keyword
out-profile keyword
fc keyword
priority keyword
sctp-filter reference
session-filter reference
tcp-mss-adjust number
tcp-validate reference
tls-enrich reference
url-filter 
characteristic reference
name reference
admin-state keyword
apply-groups reference
apply-groups-exclude reference
description string
match 
aa-sub 
esm 
eq string
neq string
esm-mac 
eq string
neq string
sap 
eq string
neq string
spoke-sdp 
eq string
neq string
transit 
eq string
neq string
aa-sub-tethering keyword
app-group 
eq reference
neq reference
application 
eq reference
neq reference
apply-groups reference
apply-groups-exclude reference
characteristic reference 
apply-groups reference
apply-groups-exclude reference
eq reference
neq reference
charging-group 
eq reference
neq reference
dscp 
eq keyword
neq keyword
dst-ip 
eq 
ip-prefix (ipv4-prefix | ipv6-prefix)
ip-prefix-list reference
neq 
ip-prefix (ipv4-prefix | ipv6-prefix)
ip-prefix-list reference
dst-port 
eq 
port-list reference
port-number number
range 
end number
start number
neq 
port-list reference
port-number number
range 
end number
start number
flow-attribute string 
apply-groups reference
apply-groups-exclude reference
confidence 
eq number
gte number
lt number
ip-protocol 
eq (number | keyword)
neq (number | keyword)
src-ip 
eq 
ip-prefix (ipv4-prefix | ipv6-prefix)
ip-prefix-list reference
neq 
ip-prefix (ipv4-prefix | ipv6-prefix)
ip-prefix-list reference
src-port 
eq 
port-list reference
port-number number
range 
end number
start number
neq 
port-list reference
port-number number
range 
end number
start number
traffic-direction keyword
app-service-options 
characteristic string 
apply-groups reference
apply-groups-exclude reference
default-value string
value string 
application string 
app-group reference
apply-groups reference
apply-groups-exclude reference
charging-group reference
description string
export-id number
apply-groups reference
apply-groups-exclude reference
charging-group string 
apply-groups reference
apply-groups-exclude reference
description string
export-id number
notify-start-stop keyword
custom-protocol string 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
description string
expression number 
apply-groups reference
apply-groups-exclude reference
direction keyword
eq string
offset number
ip-protocol keyword
default-charging-group reference
default-tethered-charging-group reference
policy-override 
aa-sub 
sap string 
apply-groups reference
apply-groups-exclude reference
characteristic reference 
apply-groups reference
apply-groups-exclude reference
value reference
spoke-sdp string 
apply-groups reference
apply-groups-exclude reference
characteristic reference 
apply-groups reference
apply-groups-exclude reference
value reference
transit string 
apply-groups reference
apply-groups-exclude reference
characteristic reference 
apply-groups reference
apply-groups-exclude reference
value reference
port-list string 
apply-groups reference
apply-groups-exclude reference
description string
port number 
range start number end number 
sctp-filter string 
apply-groups reference
apply-groups-exclude reference
description string
event-log reference
ppid 
default-action keyword
entry number 
action keyword
apply-groups reference
apply-groups-exclude reference
value (number | keyword)
ppid-range 
max number
min number
session-filter string 
apply-groups reference
apply-groups-exclude reference
default-action 
action keyword
event-log reference
description string
entry number 
action 
deny 
event-log reference
http-redirect reference
permit 
tcp-optimizer reference
apply-groups reference
apply-groups-exclude reference
description string
match 
dst-ip 
dns-ip-cache reference
ip-prefix (ipv4-prefix | ipv6-prefix)
ip-prefix-list reference
dst-port 
eq number
gt number
lt number
port-list reference
range 
end number
start number
ip-protocol (number | keyword)
src-ip 
ip-prefix (ipv4-prefix | ipv6-prefix)
ip-prefix-list reference
src-port 
eq number
gt number
lt number
port-list reference
range 
end number
start number
shallow-inspection boolean
statistics 
aa-admit-deny 
accounting-policy reference
apply-groups reference
apply-groups-exclude reference
collect-stats boolean
gtp-filter-stats boolean
policer-stats boolean
policer-stats-resources boolean
sctp-filter-stats boolean
session-filter-stats boolean
tcp-validate-stats boolean
aa-app-group 
accounting-policy reference
apply-groups reference
apply-groups-exclude reference
collect-stats boolean
aa-application 
accounting-policy reference
apply-groups reference
apply-groups-exclude reference
collect-stats boolean
aa-partition 
accounting-policy reference
apply-groups reference
apply-groups-exclude reference
collect-stats boolean
tethering-stats boolean
traffic-type-stats boolean
aa-protocol 
accounting-policy reference
admin-state keyword
apply-groups reference
apply-groups-exclude reference
collect-stats boolean
aa-sub 
accounting-policy reference
aggregate-stats-export-using keyword
app-group reference 
apply-groups reference
apply-groups-exclude reference
export-using keyword
application reference 
apply-groups reference
apply-groups-exclude reference
export-using keyword
apply-groups reference
apply-groups-exclude reference
charging-group reference 
apply-groups reference
apply-groups-exclude reference
export-using keyword
collect-stats boolean
exclude-tcp-retrans boolean
max-throughput-stats boolean
protocol string 
apply-groups reference
apply-groups-exclude reference
export-using keyword
radius-accounting-policy reference
usage-monitoring boolean
aa-sub-study keyword 
aa-sub 
esm string 
esm-mac string 
sap string 
spoke-sdp string 
transit string 
accounting-policy reference
apply-groups reference
apply-groups-exclude reference
collect-stats boolean
tcp-validate string 
apply-groups reference
apply-groups-exclude reference
description string
log 
all boolean
event-log reference
strict boolean
tethering-detection 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
single-device 
expected-ttl number 
threshold-crossing-alert 
criteria keyword direction keyword 
apply-groups reference
apply-groups-exclude reference
high-watermark number
low-watermark number
gtp-filter reference criteria keyword direction keyword 
apply-groups reference
apply-groups-exclude reference
high-watermark number
low-watermark number
gtp-filter-entry reference entry-id number direction keyword 
apply-groups reference
apply-groups-exclude reference
high-watermark number
low-watermark number
policer string direction keyword 
apply-groups reference
apply-groups-exclude reference
high-watermark number
low-watermark number
sctp-filter reference criteria keyword direction keyword 
apply-groups reference
apply-groups-exclude reference
high-watermark number
low-watermark number
sctp-filter-entry reference entry-id reference direction keyword 
apply-groups reference
apply-groups-exclude reference
high-watermark number
low-watermark number
session-filter reference criteria keyword direction keyword 
apply-groups reference
apply-groups-exclude reference
high-watermark number
low-watermark number
session-filter-entry reference entry-id reference direction keyword 
apply-groups reference
apply-groups-exclude reference
high-watermark number
low-watermark number
tcp-validate reference direction keyword 
apply-groups reference
apply-groups-exclude reference
high-watermark number
low-watermark number
transit-ip-policy number 
apply-groups reference
apply-groups-exclude reference
default-app-profile reference
description string
detect-seen-ip boolean
dhcp 
admin-state keyword
diameter 
admin-state keyword
application-policy reference
ipv6-address-prefix-length number
radius 
admin-state keyword
authentication-policy reference
seen-ip-radius-acct-policy reference
static-aa-sub string 
app-profile reference
apply-groups reference
apply-groups-exclude reference
ip (ipv4-unicast-address | ipv6-prefix) 
sub-ident-policy reference
transit-auto-create 
admin-state keyword
inactivity-monitor boolean
transit-prefix-policy number 
apply-groups reference
apply-groups-exclude reference
description string
entry number 
aa-sub reference
apply-groups reference
apply-groups-exclude reference
match 
aa-sub-ip (ipv4-prefix | ipv6-prefix)
network-ip (ipv4-prefix | ipv6-prefix)
static-aa-sub string 
app-profile reference
apply-groups reference
apply-groups-exclude reference
is-remote boolean
wap1x 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
policer 
anl-bandwidth-policer string 
action keyword
adaptation-rule 
pir keyword
apply-groups reference
apply-groups-exclude reference
description string
mbs number
rate-percentage number
rate-percentage-stage-2 number
dual-bucket-bandwidth-policer string 
adaptation-rule 
cir keyword
pir keyword
apply-groups reference
apply-groups-exclude reference
cbs number
cir (number | keyword)
congestion-override 
cbs number
cir (number | keyword)
mbs number
pir (number | keyword)
congestion-override-stage-2 
cbs number
cir (number | keyword)
mbs number
pir (number | keyword)
description string
mbs number
pir (number | keyword)
time-of-day-override number 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
cbs number
cir (number | keyword)
description string
mbs number
pir (number | keyword)
time-range 
daily 
all-days 
end string
on keyword
start string
weekly 
end 
day keyword
time string
start 
day keyword
time string
flow-count-limit-policer string 
action keyword
apply-groups reference
apply-groups-exclude reference
description string
granularity keyword
limit-gtp-flows boolean
peak-flow-count (number | keyword)
time-of-day-override number 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
description string
peak-flow-count (number | keyword)
time-range 
daily 
all-days 
end string
on keyword
start string
weekly 
end 
day keyword
time string
start 
day keyword
time string
flow-setup-rate-policer string 
action keyword
adaptation-rule 
peak-flow-setup-rate keyword
apply-groups reference
apply-groups-exclude reference
description string
flow-setup-rate-burst-size number
granularity keyword
peak-flow-setup-rate (number | keyword)
time-of-day-override number 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
description string
flow-setup-rate-burst-size number
peak-flow-setup-rate (number | keyword)
time-range 
daily 
all-days 
end string
on keyword
start string
weekly 
end 
day keyword
time string
start 
day keyword
time string
single-bucket-bandwidth-policer string 
action keyword
adaptation-rule 
pir keyword
apply-groups reference
apply-groups-exclude reference
congestion-override 
mbs number
pir (number | keyword)
congestion-override-stage-2 
mbs number
pir (number | keyword)
description string
granularity keyword
mbs number
pir (number | keyword)
time-of-day-override number 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
description string
mbs number
pir (number | keyword)
time-range 
daily 
all-days 
end string
on keyword
start string
weekly 
end 
day keyword
time string
start 
day keyword
time string
tcp-optimizer string 
apply-groups reference
apply-groups-exclude reference
dack-timeout number
description string
initial-cwnd number
initial-ss-threshold (number | keyword)
network-rtt-threshold number
tcp-stack keyword
url-filter string 
admin-state keyword
apply-function-specific-behaviour boolean
apply-groups reference
apply-groups-exclude reference
default-action 
allow 
block-all 
block-http-redirect reference
description string
http-redirect reference
http-request-filtering keyword
icap 
custom-x-header string
default-action 
allow 
block-all 
block-http-redirect reference
http-redirect reference
server (ipv4-address-no-zone | ipv6-address-no-zone) port number 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
description string
vlan-id number
local-filtering 
allow-list reference
deny-list reference 
apply-groups reference
apply-groups-exclude reference
default-action 
allow 
block-all 
block-http-redirect reference
http-redirect reference
web-service 
category-set number
classification-overrides 
entry number 
apply-groups reference
apply-groups-exclude reference
category-name string
expression string
classifier keyword
default-action 
allow 
block-all 
block-http-redirect reference
default-profile reference
dns-server (ipv4-address-no-zone | ipv6-address-no-zone)
fqdn string
http-redirect reference
profile string 
apply-groups reference
apply-groups-exclude reference
block 
category string 
description string
vlan-id number
url-list string 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
description string
file string
host-expressions boolean
key string
size keyword
http-enrich 
field string 
apply-groups reference
apply-groups-exclude reference
comment string
http-error-redirect 
error-code number 
apply-groups reference
apply-groups-exclude reference
comment string
template number 
apply-groups reference
apply-groups-exclude reference
comment string
http-notification 
template number 
apply-groups reference
apply-groups-exclude reference
comment string
http-redirect 
template number 
apply-groups reference
apply-groups-exclude reference
comment string
protocol string 
admin-state keyword
apply-groups reference
apply-groups-exclude reference
radius-accounting-policy string 
apply-groups reference
apply-groups-exclude reference
description string
interim-update-interval number
radius-accounting-server 
access-algorithm keyword
retry number
router-instance string
server number 
address string
apply-groups reference
apply-groups-exclude reference
port number
secret string
source-address string
timeout number
significant-change number
usage-alert-thresholds 
bit-rate-high-wmark (number | keyword)
bit-rate-low-wmark number
datapath-cpu-high-wmark (number | keyword)
datapath-cpu-low-wmark number
flow-setup-rate-high-wmark (number | keyword)
flow-setup-rate-low-wmark number
flow-table-high-wmark number
flow-table-low-wmark number
packet-rate-high-wmark (number | keyword)
packet-rate-low-wmark number

application-assurance command descriptions

application-assurance

  Synopsis Enter the application-assurance context
  Context configure application-assurance
  Tree application-assurance
 

Description

Commands in this context configure the attributes of Application Assurance (AA) operations.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aarp [aarp-id] number

  Synopsis Enter the aarp list instance
  Context configure application-assurance aarp number
  Tree aarp
 

Description

Commands in this context define an Application Assurance Redundancy Protocol (AARP) instance. This instance is paired with the same AARP ID in a peer node, as part of the configuration to provide flow and packet asymmetry removal for traffic of a multi-homed SAP or spoke SDP.

  Max. Instances 100
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[aarp-id] number
  Synopsis AARP ID
  Context configure application-assurance aarp number
  Range 1 to 65535
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the AARP instance
  Context configure application-assurance aarp number admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance aarp number description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

master-selection-mode keyword
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis AARP master selection mode
  Context configure application-assurance aarp number master-selection-mode keyword
  Tree master-selection-mode
 

Description

This command configures the AARP mode of operation with the peer instance. The modes affect the AARP state machine behavior according to the specified behavior. 

  Default minimize-switchovers
  Options minimize-switchovers, inter-chassis-efficiency, priority-based-balance
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

peer (ipv4-address-no-zone | ipv6-address-no-zone)
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis AARP peer IP address
  Context configure application-assurance aarp number peer (ipv4-address-no-zone | ipv6-address-no-zone)
  Tree peer
 

Description

This command defines the IP address of the AARP peer router, which must be a routable system IP address. If no peer is configured when the AARP is administratively enabled, it is configured as a single node AARP instance.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

peer-endpoint
  Synopsis Enter the peer-endpoint context
  Context configure application-assurance aarp number peer-endpoint
  Tree peer-endpoint
 

Description

Commands in this context specify the attributes of the peer endpoint parent AA subscriber of the AARP peer.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sap
  Synopsis Enable the sap context
  Context configure application-assurance aarp number peer-endpoint sap
  Tree sap
 

Notes

The following elements are part of a choice: sap or spoke-sdp.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

encap-type keyword
  Synopsis Encapsulation type for peer endpoint SAP
  Context configure application-assurance aarp number peer-endpoint sap encap-type keyword
  Tree encap-type
  Options null, dot1q, qinq
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sap-id string
  Synopsis AARP peer endpoint SAP ID
  Context configure application-assurance aarp number peer-endpoint sap sap-id string
  Tree sap-id
  String Length 1 to 45
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

spoke-sdp string
  Synopsis AARP peer endpoint spoke SDP
  Context configure application-assurance aarp number peer-endpoint spoke-sdp string
  Tree spoke-sdp
  String Length 3 to 16
 

Notes

The following elements are part of a choice: sap or spoke-sdp.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

priority number
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis AARP priority
  Context configure application-assurance aarp number priority number
  Tree priority
 

Description

This command defines the priority for the AARP instance. The priority value is used to determine the master and backup upon initialization or rebalance.

  Range 0 to 255
  Default 100
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cflowd

  Synopsis Enter the cflowd context
  Context configure application-assurance cflowd
  Tree cflowd
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string
  Synopsis Enter the field list instance
  Context configure application-assurance cflowd field string
  Tree field
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string
  Synopsis Cflowd record field name
  Context configure application-assurance cflowd field string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

comment string
  Synopsis User information comment
  Context configure application-assurance cflowd field string comment string
  Tree comment
  String Length 1 to 32
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-attribute

  Synopsis Enter the flow-attribute context
  Context configure application-assurance flow-attribute
  Tree flow-attribute
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

attribute [attribute-name] string
  Synopsis Enter the attribute list instance
  Context configure application-assurance flow-attribute attribute string
  Tree attribute
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[attribute-name] string
  Synopsis Attribute name
  Context configure application-assurance flow-attribute attribute string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

comment string
  Synopsis User information comment
  Context configure application-assurance flow-attribute attribute string comment string
  Tree comment
  String Length 1 to 32
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

group [aa-group-id] number

  Synopsis Enter the group list instance
  Context configure application-assurance group number
  Tree group
 

Description

Commands in this context configure an Application Assurance group and partition parameters.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[aa-group-id] number
  Synopsis AA group ID
  Context configure application-assurance group number
  Range 1 to 255
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

certificate-profile [cert-prof-name] string
  Synopsis Enter the certificate-profile list instance
  Context configure application-assurance group number certificate-profile string
  Tree certificate-profile
 

Description

Commands in this context create a certificate profile to be used for certificate-based encryption in HTTP header enrichment.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[cert-prof-name] string
  Synopsis AA group certificate profile name
  Context configure application-assurance group number certificate-profile string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the AA certificate profile
  Context configure application-assurance group number certificate-profile string admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number certificate-profile string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

file string
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis Certificate file name
  Context configure application-assurance group number certificate-profile string file string
  Tree file
  String Length 1 to 95
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cflowd
  Synopsis Enter the cflowd context
  Context configure application-assurance group number cflowd
  Tree cflowd
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of cflowd export
  Context configure application-assurance group number cflowd admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collector [ip-address] (ipv4-address-no-zone | ipv6-address-no-zone) port number
  Synopsis Enter the collector list instance
  Context configure application-assurance group number cflowd collector (ipv4-address-no-zone | ipv6-address-no-zone) port number
  Tree collector
 

Description

Commands in this context configure flow data collectors for cflowd data.

In the current release, the system supports IPv4 addresses only for the cflowd collector host.

  Max. Instances 2
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[ip-address] (ipv4-address-no-zone | ipv6-address-no-zone)
  Synopsis IP address of the remote cflowd collector host
  Context configure application-assurance group number cflowd collector (ipv4-address-no-zone | ipv6-address-no-zone) port number
 

Description

This command configures the IP address of the remote cflowd collector host.

In the current release, the system supports IPv4 addresses only for the cflowd collector host.

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port number
  Synopsis Cflowd collector host port number
  Context configure application-assurance group number cflowd collector (ipv4-address-no-zone | ipv6-address-no-zone) port number
 

Description

This command configures the UDP port number used by the remote cflowd collector host.

In the MD-CLI, the default port is 4739.

  Range 1 to 65535
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the cflowd export
  Context configure application-assurance group number cflowd collector (ipv4-address-no-zone | ipv6-address-no-zone) port number admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number cflowd collector (ipv4-address-no-zone | ipv6-address-no-zone) port number description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

comprehensive
  Synopsis Enter the comprehensive context
  Context configure application-assurance group number cflowd comprehensive
  Tree comprehensive
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-rate number
  Synopsis Cflowd flow sampling rate
  Context configure application-assurance group number cflowd comprehensive flow-rate number
  Tree flow-rate
  Range 1 to 1000
  Units flows per second
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-rate-2 number
  Synopsis Cflowd per-flow second sampling rate
  Context configure application-assurance group number cflowd comprehensive flow-rate-2 number
  Tree flow-rate-2
  Range 1 to 1000
  Units flows per second
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template
  Synopsis Enter the template context
  Context configure application-assurance group number cflowd comprehensive template
  Tree template
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dynamic-fields
  Synopsis Enter the dynamic-fields context
  Context configure application-assurance group number cflowd comprehensive template dynamic-fields
  Tree dynamic-fields
 

Description

Commands in this context configure the fields that are included in the exported cflowd template.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the dynamic fields
  Context configure application-assurance group number cflowd comprehensive template dynamic-fields admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string
  Synopsis Add a list entry for field
  Context configure application-assurance group number cflowd comprehensive template dynamic-fields field string
  Tree field
 

Description

This command adds a dynamic field to be included in the exported cflowd template.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string
  Synopsis Cflowd template dynamic field name
  Context configure application-assurance group number cflowd comprehensive template dynamic-fields field string
 

Description

This command specifies the name of the field to be included in the exported cflowd template.

  • Common to all templates are the following values: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | hostName |hostNameExtended| deviceId | deviceMfgId | deviceOsId |ipFamily | deviceOsVer1 | deviceOsVer2 | deviceOsVer3 |anlType | anlTopology | anlCongestionState | apn | chargeId |mnc | imsi | msisdn | sgw-sgsnAddr | pgw-ggsnAddr | bsid |ratType | regionId | cellId |timeZone | aaChargingGrp |flowAttr_video | flowAttr_abr_service | flowAttr_audio |flowAttr_encrypted | flowAttr_download |flowAttr_upload |flowAttr_realtime_communication | aaSubTetheringState | imei| ipTTL | imei roamingStatus | mcc | uli |chargingChar | plmnid| customerId

  • When AA is deployed in FWA SR, the following value applies: ApnExtended

  • For the rtp-voice template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpBurstCount|rtpAvgBurstLengthMs | rtpGapCount | rtpAvgGapLengthMs |MAPDV | RBurst | RGap | SSRC

  • For the rtp-video template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpRefClockRate | MOSAV | VSTQ | estimatedPSNR |GoPType | avgGoPLength | avgInterIFrameGap | imageWidth| imageHeight | frameRate |slicesPerIFrame | SSRC |videoInterlaced | IFrameReceived | IFrameImpaired |PFrameReceived | PFrameImpaired | BFrameReceived |BFrameImpaired | SIFrameReceived | SIFrameImpaired |SPFrameReceived | SPFrameImpaired |frameInterArrivalJitter| IFrameInterArrivalJitter | avgFrameArrivalDelay

  • For the rtp-audio template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | rtpBurstCount| rtpAvgBurstLengthPkts | rtpGapCount |rtpAvgGapLengthPkts | PPDVM | rtpNumAudioChannels |rtpRefClockRate |rtpPeakAudioBw | SSRC | hostName

  • For volume and comprehensive templates, the following values apply: tcpSessionEstDelay | tcpRetransmittedBytes |tcpRetransmittedPackets

  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field-selection keyword
  Synopsis Field selection method
  Context configure application-assurance group number cflowd comprehensive template field-selection keyword
  Tree field-selection
 

Description

This command configures the method for selecting the fields to be included in the exported cflowd template.

  Default legacy
  Options legacy, dynamic
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direct-export
  Synopsis Enter the direct-export context
  Context configure application-assurance group number cflowd direct-export
  Tree direct-export
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collector [collector-id] number
  Synopsis Enter the collector list instance
  Context configure application-assurance group number cflowd direct-export collector number
  Tree collector
  Max. Instances 16
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[collector-id] number
  Synopsis Cflowd direct export collector ID
  Context configure application-assurance group number cflowd direct-export collector number
  Range 1 to 65535
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

address [ip-address] (ipv4-address-no-zone | ipv6-address-no-zone) port number
  Synopsis Enter the address list instance
  Context configure application-assurance group number cflowd direct-export collector number address (ipv4-address-no-zone | ipv6-address-no-zone) port number
  Tree address
 

Description

Commands in this context configure the cflowd direct export collector IP address.

In the current release, the system supports IPv4 addresses only for the cflowd direct export collector.

  Max. Instances 2
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[ip-address] (ipv4-address-no-zone | ipv6-address-no-zone)
  Synopsis IP address of the remote cflowd collector host
  Context configure application-assurance group number cflowd direct-export collector number address (ipv4-address-no-zone | ipv6-address-no-zone) port number
 

Description

This command configures the IP address of the remote cflowd collector host.

In the current release, the system supports IPv4 addresses only for the cflowd collector host.

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port number
  Synopsis Cflowd collector host port number
  Context configure application-assurance group number cflowd direct-export collector number address (ipv4-address-no-zone | ipv6-address-no-zone) port number
 

Description

This command configures the UDP port number used by the remote cflowd collector host.

In the MD-CLI, the default port is 4739.

  Range 1 to 65535
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the direct export collector
  Context configure application-assurance group number cflowd direct-export collector number address (ipv4-address-no-zone | ipv6-address-no-zone) port number admin-state keyword
  Tree admin-state
 

Description

This command sets the administrative state of the cflowd direct export collector.

In the current release, the system supports IPv4 addresses only for the cflowd direct export collector.

  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description of the collector
  Context configure application-assurance group number cflowd direct-export collector number description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

vlan-id number
  Synopsis Cflowd direct export VLAN ID
  Context configure application-assurance group number cflowd direct-export vlan-id number
  Tree vlan-id
  Range 1 to 4094
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-override
  Synopsis Enter the export-override context
  Context configure application-assurance group number cflowd export-override
  Tree export-override
 

Description

Commands in this context configure the AA subtype used in the cflowd record export. The cflowd statistics exported to the cflowd collector look identical to AA for the type of system defined by the mode. The following cflowd export fields are affected:

  • The cflowd export observation point (field 138) mode is derived from the export-override category that is selected.

  • The cflowd export AA_Subscriber_Type (field 12) mode is modified as configured, using existing field types.

  • The cflowd interface name is used as the sub-ID field, optionally modified to use the configured mode and prefix commands for global identifiers.

All AA cflowd record types are affected by export override. To change the export override or prefix, cflowd must first be disabled. When this command is set back to the default, the prefix is also set back to its default.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mode keyword
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis AA cflowd export override mode
  Context configure application-assurance group number cflowd export-override mode keyword
  Tree mode
 

Description

This command specifies the type of system emulated for the cflowd export.

  Options mobile, ifname-obfuscate
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

prefix string
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis AA group cflowd export override prefix
  Context configure application-assurance group number cflowd export-override prefix string
  Tree prefix
 

Description

This command specifies the prefix-string associated with the export override. The prefix string specifies up to an 8 character string. If the 8 character prefix is "ABCDEFG_" for a particular node, the cflowd export override would generate IPv4 interface names such as ABCDEFG_255.255.255.255 or IPv6 as ABCDEFG_2001:DB8:EF01:2345::/64. By default, the prefix is left blank.

  String Length 1 to 8
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

obfuscation
  Synopsis Enter the obfuscation context
  Context configure application-assurance group number cflowd obfuscation
  Tree obfuscation
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aes-128-encryption-key string
  Synopsis AES-128 encryption key
  Context configure application-assurance group number cflowd obfuscation aes-128-encryption-key string
  Tree aes-128-encryption-key
 

Description

This command specifies the AES-128 key used to encrypt export cflowd fields.

  String Length 51
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aes-256-encryption-key string
  Synopsis AES-256 encryption key
  Context configure application-assurance group number cflowd obfuscation aes-256-encryption-key string
  Tree aes-256-encryption-key
 

Description

This command specifies the AES-256 key used to encrypt exported cflowd fields.

  String Length 71
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rtp-performance
  Synopsis Enter the rtp-performance context
  Context configure application-assurance group number cflowd rtp-performance
  Tree rtp-performance
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

audio-template
  Synopsis Enter the audio-template context
  Context configure application-assurance group number cflowd rtp-performance audio-template
  Tree audio-template
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dynamic-fields
  Synopsis Enter the dynamic-fields context
  Context configure application-assurance group number cflowd rtp-performance audio-template dynamic-fields
  Tree dynamic-fields
 

Description

Commands in this context configure dynamic fields to be included in the exported cflowd template.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the dynamic fields
  Context configure application-assurance group number cflowd rtp-performance audio-template dynamic-fields admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string
  Synopsis Add a list entry for field
  Context configure application-assurance group number cflowd rtp-performance audio-template dynamic-fields field string
  Tree field
 

Description

This command adds a list entry for fields to include in the exported cflowd template.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string
  Synopsis Cflowd template dynamic field name
  Context configure application-assurance group number cflowd rtp-performance audio-template dynamic-fields field string
 

Description

This command specifies the name of the field to be included in the exported cflowd template.

  • Common to all templates are the following values: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | hostName |hostNameExtended| deviceId | deviceMfgId | deviceOsId |ipFamily | deviceOsVer1 | deviceOsVer2 | deviceOsVer3 |anlType | anlTopology | anlCongestionState | apn | chargeId |mnc | imsi | msisdn | sgw-sgsnAddr | pgw-ggsnAddr | bsid |ratType | regionId | cellId |timeZone | aaChargingGrp |flowAttr_video | flowAttr_abr_service | flowAttr_audio |flowAttr_encrypted | flowAttr_download |flowAttr_upload |flowAttr_realtime_communication | aaSubTetheringState | imei| ipTTL | imei roamingStatus | mcc | uli |chargingChar | plmnid| customerId

  • When AA is deployed in FWA SR, the following value applies: ApnExtended

  • For the rtp-voice template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpBurstCount|rtpAvgBurstLengthMs | rtpGapCount | rtpAvgGapLengthMs |MAPDV | RBurst | RGap | SSRC

  • For the rtp-video template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpRefClockRate | MOSAV | VSTQ | estimatedPSNR |GoPType | avgGoPLength | avgInterIFrameGap | imageWidth| imageHeight | frameRate |slicesPerIFrame | SSRC |videoInterlaced | IFrameReceived | IFrameImpaired |PFrameReceived | PFrameImpaired | BFrameReceived |BFrameImpaired | SIFrameReceived | SIFrameImpaired |SPFrameReceived | SPFrameImpaired |frameInterArrivalJitter| IFrameInterArrivalJitter | avgFrameArrivalDelay

  • For the rtp-audio template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | rtpBurstCount| rtpAvgBurstLengthPkts | rtpGapCount |rtpAvgGapLengthPkts | PPDVM | rtpNumAudioChannels |rtpRefClockRate |rtpPeakAudioBw | SSRC | hostName

  • For volume and comprehensive templates, the following values apply: tcpSessionEstDelay | tcpRetransmittedBytes |tcpRetransmittedPackets

  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field-selection keyword
  Synopsis Field selection method
  Context configure application-assurance group number cflowd rtp-performance audio-template field-selection keyword
  Tree field-selection
 

Description

This command configures the method for selecting the fields to be included in the exported cflowd template.

  Default legacy
  Options legacy, dynamic
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-rate number
  Synopsis Cflowd flow sampling rate
  Context configure application-assurance group number cflowd rtp-performance flow-rate number
  Tree flow-rate
  Range 1 to 1000
  Units flows per second
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-rate-2 number
  Synopsis Cflowd per-flow second sampling rate
  Context configure application-assurance group number cflowd rtp-performance flow-rate-2 number
  Tree flow-rate-2
  Range 1 to 1000
  Units flows per second
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

video-template
  Synopsis Enter the video-template context
  Context configure application-assurance group number cflowd rtp-performance video-template
  Tree video-template
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dynamic-fields
  Synopsis Enter the dynamic-fields context
  Context configure application-assurance group number cflowd rtp-performance video-template dynamic-fields
  Tree dynamic-fields
 

Description

Commands in this context configure dynamic fields to be included in the exported cflowd template.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the dynamic fields
  Context configure application-assurance group number cflowd rtp-performance video-template dynamic-fields admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string
  Synopsis Add a list entry for field
  Context configure application-assurance group number cflowd rtp-performance video-template dynamic-fields field string
  Tree field
 

Description

This command adds a list entry for the fields to include in the exported cflowd template.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string
  Synopsis Cflowd template dynamic field name
  Context configure application-assurance group number cflowd rtp-performance video-template dynamic-fields field string
 

Description

This command specifies the name of the field to be included in the exported cflowd template.

  • Common to all templates are the following values: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | hostName |hostNameExtended| deviceId | deviceMfgId | deviceOsId |ipFamily | deviceOsVer1 | deviceOsVer2 | deviceOsVer3 |anlType | anlTopology | anlCongestionState | apn | chargeId |mnc | imsi | msisdn | sgw-sgsnAddr | pgw-ggsnAddr | bsid |ratType | regionId | cellId |timeZone | aaChargingGrp |flowAttr_video | flowAttr_abr_service | flowAttr_audio |flowAttr_encrypted | flowAttr_download |flowAttr_upload |flowAttr_realtime_communication | aaSubTetheringState | imei| ipTTL | imei roamingStatus | mcc | uli |chargingChar | plmnid| customerId

  • When AA is deployed in FWA SR, the following value applies: ApnExtended

  • For the rtp-voice template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpBurstCount|rtpAvgBurstLengthMs | rtpGapCount | rtpAvgGapLengthMs |MAPDV | RBurst | RGap | SSRC

  • For the rtp-video template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpRefClockRate | MOSAV | VSTQ | estimatedPSNR |GoPType | avgGoPLength | avgInterIFrameGap | imageWidth| imageHeight | frameRate |slicesPerIFrame | SSRC |videoInterlaced | IFrameReceived | IFrameImpaired |PFrameReceived | PFrameImpaired | BFrameReceived |BFrameImpaired | SIFrameReceived | SIFrameImpaired |SPFrameReceived | SPFrameImpaired |frameInterArrivalJitter| IFrameInterArrivalJitter | avgFrameArrivalDelay

  • For the rtp-audio template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | rtpBurstCount| rtpAvgBurstLengthPkts | rtpGapCount |rtpAvgGapLengthPkts | PPDVM | rtpNumAudioChannels |rtpRefClockRate |rtpPeakAudioBw | SSRC | hostName

  • For volume and comprehensive templates, the following values apply: tcpSessionEstDelay | tcpRetransmittedBytes |tcpRetransmittedPackets

  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field-selection keyword
  Synopsis Field selection method
  Context configure application-assurance group number cflowd rtp-performance video-template field-selection keyword
  Tree field-selection
 

Description

This command configures the method for selecting the fields to be included in the exported cflowd template.

  Default legacy
  Options legacy, dynamic
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

voice-template
  Synopsis Enter the voice-template context
  Context configure application-assurance group number cflowd rtp-performance voice-template
  Tree voice-template
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dynamic-fields
  Synopsis Enter the dynamic-fields context
  Context configure application-assurance group number cflowd rtp-performance voice-template dynamic-fields
  Tree dynamic-fields
 

Description

Commands in this context configure dynamic fields to be included in the exported cflowd template.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the dynamic fields
  Context configure application-assurance group number cflowd rtp-performance voice-template dynamic-fields admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string
  Synopsis Add a list entry for field
  Context configure application-assurance group number cflowd rtp-performance voice-template dynamic-fields field string
  Tree field
 

Description

This command adds a cflowd record field to the list included in the exported cflowd template.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string
  Synopsis Cflowd template dynamic field name
  Context configure application-assurance group number cflowd rtp-performance voice-template dynamic-fields field string
 

Description

This command specifies the name of the field to be included in the exported cflowd template.

  • Common to all templates are the following values: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | hostName |hostNameExtended| deviceId | deviceMfgId | deviceOsId |ipFamily | deviceOsVer1 | deviceOsVer2 | deviceOsVer3 |anlType | anlTopology | anlCongestionState | apn | chargeId |mnc | imsi | msisdn | sgw-sgsnAddr | pgw-ggsnAddr | bsid |ratType | regionId | cellId |timeZone | aaChargingGrp |flowAttr_video | flowAttr_abr_service | flowAttr_audio |flowAttr_encrypted | flowAttr_download |flowAttr_upload |flowAttr_realtime_communication | aaSubTetheringState | imei| ipTTL | imei roamingStatus | mcc | uli |chargingChar | plmnid| customerId

  • When AA is deployed in FWA SR, the following value applies: ApnExtended

  • For the rtp-voice template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpBurstCount|rtpAvgBurstLengthMs | rtpGapCount | rtpAvgGapLengthMs |MAPDV | RBurst | RGap | SSRC

  • For the rtp-video template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpRefClockRate | MOSAV | VSTQ | estimatedPSNR |GoPType | avgGoPLength | avgInterIFrameGap | imageWidth| imageHeight | frameRate |slicesPerIFrame | SSRC |videoInterlaced | IFrameReceived | IFrameImpaired |PFrameReceived | PFrameImpaired | BFrameReceived |BFrameImpaired | SIFrameReceived | SIFrameImpaired |SPFrameReceived | SPFrameImpaired |frameInterArrivalJitter| IFrameInterArrivalJitter | avgFrameArrivalDelay

  • For the rtp-audio template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | rtpBurstCount| rtpAvgBurstLengthPkts | rtpGapCount |rtpAvgGapLengthPkts | PPDVM | rtpNumAudioChannels |rtpRefClockRate |rtpPeakAudioBw | SSRC | hostName

  • For volume and comprehensive templates, the following values apply: tcpSessionEstDelay | tcpRetransmittedBytes |tcpRetransmittedPackets

  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field-selection keyword
  Synopsis Field selection method
  Context configure application-assurance group number cflowd rtp-performance voice-template field-selection keyword
  Tree field-selection
 

Description

This command configures the method for selecting the fields to be included in the exported cflowd template.

  Default legacy
  Options legacy, dynamic
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-performance
  Synopsis Enter the tcp-performance context
  Context configure application-assurance group number cflowd tcp-performance
  Tree tcp-performance
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-rate number
  Synopsis Cflowd flow sampling rate
  Context configure application-assurance group number cflowd tcp-performance flow-rate number
  Tree flow-rate
  Range 1 to 1000
  Units flows per second
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-rate-2 number
  Synopsis Cflowd per-flow second sampling rate
  Context configure application-assurance group number cflowd tcp-performance flow-rate-2 number
  Tree flow-rate-2
  Range 1 to 1000
  Units flows per second
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template
  Synopsis Enter the template context
  Context configure application-assurance group number cflowd tcp-performance template
  Tree template
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dynamic-fields
  Synopsis Enter the dynamic-fields context
  Context configure application-assurance group number cflowd tcp-performance template dynamic-fields
  Tree dynamic-fields
 

Description

Commands in this context configure the fields to be included in the exported cflowd template.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the dynamic fields
  Context configure application-assurance group number cflowd tcp-performance template dynamic-fields admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string
  Synopsis Add a list entry for field
  Context configure application-assurance group number cflowd tcp-performance template dynamic-fields field string
  Tree field
 

Description

This command adds a list entry for fields to include in the exported cflowd template.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string
  Synopsis Cflowd template dynamic field name
  Context configure application-assurance group number cflowd tcp-performance template dynamic-fields field string
 

Description

This command specifies the name of the field to be included in the exported cflowd template.

  • Common to all templates are the following values: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | hostName |hostNameExtended| deviceId | deviceMfgId | deviceOsId |ipFamily | deviceOsVer1 | deviceOsVer2 | deviceOsVer3 |anlType | anlTopology | anlCongestionState | apn | chargeId |mnc | imsi | msisdn | sgw-sgsnAddr | pgw-ggsnAddr | bsid |ratType | regionId | cellId |timeZone | aaChargingGrp |flowAttr_video | flowAttr_abr_service | flowAttr_audio |flowAttr_encrypted | flowAttr_download |flowAttr_upload |flowAttr_realtime_communication | aaSubTetheringState | imei| ipTTL | imei roamingStatus | mcc | uli |chargingChar | plmnid| customerId

  • When AA is deployed in FWA SR, the following value applies: ApnExtended

  • For the rtp-voice template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpBurstCount|rtpAvgBurstLengthMs | rtpGapCount | rtpAvgGapLengthMs |MAPDV | RBurst | RGap | SSRC

  • For the rtp-video template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpRefClockRate | MOSAV | VSTQ | estimatedPSNR |GoPType | avgGoPLength | avgInterIFrameGap | imageWidth| imageHeight | frameRate |slicesPerIFrame | SSRC |videoInterlaced | IFrameReceived | IFrameImpaired |PFrameReceived | PFrameImpaired | BFrameReceived |BFrameImpaired | SIFrameReceived | SIFrameImpaired |SPFrameReceived | SPFrameImpaired |frameInterArrivalJitter| IFrameInterArrivalJitter | avgFrameArrivalDelay

  • For the rtp-audio template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | rtpBurstCount| rtpAvgBurstLengthPkts | rtpGapCount |rtpAvgGapLengthPkts | PPDVM | rtpNumAudioChannels |rtpRefClockRate |rtpPeakAudioBw | SSRC | hostName

  • For volume and comprehensive templates, the following values apply: tcpSessionEstDelay | tcpRetransmittedBytes |tcpRetransmittedPackets

  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field-selection keyword
  Synopsis Field selection method
  Context configure application-assurance group number cflowd tcp-performance template field-selection keyword
  Tree field-selection
 

Description

This command configures the method for selecting the fields to be included in the exported cflowd template.

  Default legacy
  Options legacy, dynamic
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template-retransmit number
  Synopsis Template retransmit time
  Context configure application-assurance group number cflowd template-retransmit number
  Tree template-retransmit
  Range 10 to 600
  Default 600
  Units seconds
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

volume
  Synopsis Enter the volume context
  Context configure application-assurance group number cflowd volume
  Tree volume
 

Description

Commands in this context configure the cflowd volume export.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rate number
  Synopsis Cflowd packet sampling rate
  Context configure application-assurance group number cflowd volume rate number
  Tree rate
  Range 1 to 10000
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template
  Synopsis Enter the template context
  Context configure application-assurance group number cflowd volume template
  Tree template
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dynamic-fields
  Synopsis Enter the dynamic-fields context
  Context configure application-assurance group number cflowd volume template dynamic-fields
  Tree dynamic-fields
 

Description

Commands in this context configure the fields to be included in the exported cflowd template.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the dynamic fields
  Context configure application-assurance group number cflowd volume template dynamic-fields admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string
  Synopsis Add a list entry for field
  Context configure application-assurance group number cflowd volume template dynamic-fields field string
  Tree field
 

Description

This command adds a list entry for the fields to be included in the exported cflowd template.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string
  Synopsis Cflowd template dynamic field name
  Context configure application-assurance group number cflowd volume template dynamic-fields field string
 

Description

This command specifies the name of the field to be included in the exported cflowd template.

  • Common to all templates are the following values: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | hostName |hostNameExtended| deviceId | deviceMfgId | deviceOsId |ipFamily | deviceOsVer1 | deviceOsVer2 | deviceOsVer3 |anlType | anlTopology | anlCongestionState | apn | chargeId |mnc | imsi | msisdn | sgw-sgsnAddr | pgw-ggsnAddr | bsid |ratType | regionId | cellId |timeZone | aaChargingGrp |flowAttr_video | flowAttr_abr_service | flowAttr_audio |flowAttr_encrypted | flowAttr_download |flowAttr_upload |flowAttr_realtime_communication | aaSubTetheringState | imei| ipTTL | imei roamingStatus | mcc | uli |chargingChar | plmnid| customerId

  • When AA is deployed in FWA SR, the following value applies: ApnExtended

  • For the rtp-voice template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpBurstCount|rtpAvgBurstLengthMs | rtpGapCount | rtpAvgGapLengthMs |MAPDV | RBurst | RGap | SSRC

  • For the rtp-video template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp |rtpRefClockRate | MOSAV | VSTQ | estimatedPSNR |GoPType | avgGoPLength | avgInterIFrameGap | imageWidth| imageHeight | frameRate |slicesPerIFrame | SSRC |videoInterlaced | IFrameReceived | IFrameImpaired |PFrameReceived | PFrameImpaired | BFrameReceived |BFrameImpaired | SIFrameReceived | SIFrameImpaired |SPFrameReceived | SPFrameImpaired |frameInterArrivalJitter| IFrameInterArrivalJitter | avgFrameArrivalDelay

  • For the rtp-audio template only, the following values apply: flowStartSeconds | flowDurationMilliseconds |postIpPrecedence | aaProt | aaApp | aaAppGrp | rtpBurstCount| rtpAvgBurstLengthPkts | rtpGapCount |rtpAvgGapLengthPkts | PPDVM | rtpNumAudioChannels |rtpRefClockRate |rtpPeakAudioBw | SSRC | hostName

  • For volume and comprehensive templates, the following values apply: tcpSessionEstDelay | tcpRetransmittedBytes |tcpRetransmittedPackets

  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field-selection keyword
  Synopsis Field selection method
  Context configure application-assurance group number cflowd volume template field-selection keyword
  Tree field-selection
 

Description

This command configures the method for selecting the fields to be included in the exported cflowd template.

  Default legacy
  Options legacy, dynamic
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-ip-cache [dns-ip-cache-name] string
  Synopsis Enter the dns-ip-cache list instance
  Context configure application-assurance group number dns-ip-cache string
  Tree dns-ip-cache
 

Description

Commands in this context configure a DNS IP cache that is used to snoop DNS requests generated by subscribers, to populate a cache of IP addresses that match a specified list of domain names. In the context of strengthening URL-content charging, Operators may also specify a list of trusted DNS servers to populate the DNS IP cache.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[dns-ip-cache-name] string
  Synopsis DNS IP cache name within the AA group
  Context configure application-assurance group number dns-ip-cache string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the AA DNS IP cache object
  Context configure application-assurance group number dns-ip-cache string admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number dns-ip-cache string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-match
  Synopsis Enter the dns-match context
  Context configure application-assurance group number dns-ip-cache string dns-match
  Tree dns-match
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

domain [domain-name] string
  Synopsis Enter the domain list instance
  Context configure application-assurance group number dns-ip-cache string dns-match domain string
  Tree domain
 

Description

Commands in this context configure a domain expression to populate the DNS IP cache.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[domain-name] string
  Synopsis DNS IP cache domain name
  Context configure application-assurance group number dns-ip-cache string dns-match domain string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

expression string
  Synopsis AA DNS domain expression to match
  Context configure application-assurance group number dns-ip-cache string dns-match domain string expression string
  Tree expression
 

Description

This command specifies a domain name expression string used to define a pattern match. The domain expression uses the same syntax as the expressions used in configure application-assurance group partition policy app-filter entry app-filters configuration.

  String Length 1 to 255
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

trusted-server-address [dns-server-address] (ipv4-address-no-zone | ipv6-address-no-zone)
  Synopsis Enter the trusted-server-address list instance
  Context configure application-assurance group number dns-ip-cache string dns-match trusted-server-address (ipv4-address-no-zone | ipv6-address-no-zone)
  Tree trusted-server-address
 

Description

Commands in this context configure a trusted DNS server address. DNS responses from this DNS server are used to populate the DNS IP cache.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[dns-server-address] (ipv4-address-no-zone | ipv6-address-no-zone)
  Synopsis Trusted DNS server address
  Context configure application-assurance group number dns-ip-cache string dns-match trusted-server-address (ipv4-address-no-zone | ipv6-address-no-zone)
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server-name string
  Synopsis DNS server name
  Context configure application-assurance group number dns-ip-cache string dns-match trusted-server-address (ipv4-address-no-zone | ipv6-address-no-zone) server-name string
  Tree server-name
  String Length 1 to 32
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-cache
  Synopsis Enter the ip-cache context
  Context configure application-assurance group number dns-ip-cache string ip-cache
  Tree ip-cache
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number
  Synopsis High watermark value for the DNS IP cache
  Context configure application-assurance group number dns-ip-cache string ip-cache high-watermark number
  Tree high-watermark
 

Description

This command configures the high watermark value for the DNS IP cache. When the number of cached IP addresses exceeds the threshold, the system generates a trap.

  Range 0 to 100
  Default 90
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number
  Synopsis Low watermark value for the DNS IP cache
  Context configure application-assurance group number dns-ip-cache string ip-cache low-watermark number
  Tree low-watermark
 

Description

This command configures the low watermark value for the DNS IP cache. When the number of cached IP addresses exceeds the high watermark threshold, the system generates a trap based on the high watermark. The trap clears after the number of cached IP addresses drops below the configured low watermark value.

  Range 0 to 100
  Default 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

size number
  Synopsis Maximum number of IP addresses stored in the cache
  Context configure application-assurance group number dns-ip-cache string ip-cache size number
  Tree size
  Range 10 to 64000
  Default 10
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

static-address [static-ip-address] (ipv4-address-no-zone | ipv6-address-no-zone)
  Synopsis Add a list entry for static-address
  Context configure application-assurance group number dns-ip-cache string ip-cache static-address (ipv4-address-no-zone | ipv6-address-no-zone)
  Tree static-address
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[static-ip-address] (ipv4-address-no-zone | ipv6-address-no-zone)
  Synopsis Trusted IP address for the DNS IP cache
  Context configure application-assurance group number dns-ip-cache string ip-cache static-address (ipv4-address-no-zone | ipv6-address-no-zone)
 

Description

This command configures an IP address to be used as a trusted IP address. For packets whose destination IP address matches that of the trusted IP address, a cache hit is assumed.

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-enrich [http-enrich-name] string
  Synopsis Enter the http-enrich list instance
  Context configure application-assurance group number http-enrich string
  Tree http-enrich
 

Description

Commands in this context configure the attributes of the HTTP enrichment policy.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[http-enrich-name] string
  Synopsis HTTP header enrichment policy name
  Context configure application-assurance group number http-enrich string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the HTTP enrichment policy
  Context configure application-assurance group number http-enrich string admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number http-enrich string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string
  Synopsis Enter the field list instance
  Context configure application-assurance group number http-enrich string field string
  Tree field
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string
  Synopsis Field name to insert into the HTTP header
  Context configure application-assurance group number http-enrich string field string
 

Description

This command specifies the field type to insert into the HTTTP header. The command must be repeated for each field to be inserted. The same field cannot be inserted twice into the header under different header names.

Note: AA can insert two copies of the following fields in the same HTTP header (with a different header name):

imei-hyphenated, imei-hyphenated-2, imsi, imsi-2, static-string, static-string-2, user-location-raw, and user-location-raw2.

The following field types are supported in any deployment:

static-string - header name for the inserted string

static-string-2 - header name for the inserted string

subscriber-id - header name for the subscriber ID

subscriber-ip - header name for the subscriber IP address

The following field types are supported in Fixed Wireless Access (FWA) deployments only:

apn - complete APN string

apn-ni - APN Network Identifier (APN-NI) used by the UE

billing-type - UE charging type (charging characteristics)

dynamic-acr - dynamic Anonymous Customer Record (ACR)

static-acr - static ACR

imei-hyphenated - subscriber IMEI with format AABBBBBB-CCCCCC-EE

imei-hyphenated-2 - subscriber IMEI with format AABBBBBB-CCCCCC-EE

imei-sv - subscriber IMEI with format AABBBBBBCCCCCCEE

imsi - subscriber IMSI

imsi-2 - subscriber IMSI

msisdn - subscriber MSISDN

msisdn-ts - subscriber MSISDN appended with the UNIX timestamp

msisdn-without-cc - subscriber MSISDN without a country code

pgw-ggsn-address - PGW/GGSN address serving the UE

plmn-id - Public Land Mobile Network (PLMN) ID of the SGSN/MME

rat-type - Radio Access Technology (RAT) type

timestamp - timestamp inserted in UNIX time format; for example, 1531204313

user-location - UE LOCATION (ULI)

user-location-3gpp - ULI encoded as defined in 3GPP 29.061

user-location-raw - ULI in raw format:<ULI-TYPE1>[+<ULI-TYPE2>]=<ULI HEX>

Example: x-locinfo: TAI+ECGI=1300622c46130062014adf16

user-location-raw-2 - ULI in raw format:<ULI-TYPE1>[+<ULI-TYPE2>]=<ULI HEX>

Example: x-locinfo: TAI+ECGI=1300622c46130062014adf16

  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aes-initialization-vector string
  Synopsis Initialization vector for the AES CBC encryption
  Context configure application-assurance group number http-enrich string field string aes-initialization-vector string
  Tree aes-initialization-vector
 

Description

This command configures the initialization vector used for the AES CBC encryption. The vector consists of 34 characters, that is, 0x followed by exactly 32 hexadecimal characters.

  String Length 34
  Introduced 22.5.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

anti-spoof boolean
  Synopsis Enable anti-spoofing
  Context configure application-assurance group number http-enrich string field string anti-spoof boolean
  Tree anti-spoof
 

Description

When configured to true, this command enables the HTTP header enrichment anti-spoofing functionality.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

calling-line-id boolean
  Synopsis Enable calling line identification
  Context configure application-assurance group number http-enrich string field string calling-line-id boolean
  Tree calling-line-id
 

Description

When configured to true, this command configures the HTTP header for “x-up-calling-line-id” anti-spoofing.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

encode
  Synopsis Enter the encode context
  Context configure application-assurance group number http-enrich string field string encode
  Tree encode
 

Description

Commands in this context configure the encoding applied to the HTTP header enrichment field.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cert-profile reference
  Synopsis Certificate profile name used for encryption
  Context configure application-assurance group number http-enrich string field string encode cert-profile reference
  Tree cert-profile
 

Reference

configure application-assurance group number certificate-profile string

 

Notes

The following elements are part of a choice: cert-profile or key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

key
  Synopsis Enter the key context
  Context configure application-assurance group number http-enrich string field string encode key
  Tree key
 

Description

Commands in this context configure the encryption fields.

 

Notes

The following elements are part of a choice: cert-profile or key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

type keyword
  Synopsis Encoding type
  Context configure application-assurance group number http-enrich string field string encode key type keyword
  Tree type
 

Description

This command configures the encoding/ encryption method.

  Options md5, rc4, rc4-md5-base64, aes128, aes256, aes128cbc, aes256cbc
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value string
  Synopsis Secret key for encrypting the field
  Context configure application-assurance group number http-enrich string field string encode key value string
  Tree value
  String Length 1 to 114
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

md5-salt string
  Synopsis MD5 salt string
  Context configure application-assurance group number http-enrich string field string md5-salt string
  Tree md5-salt
 

Description

This command configures an MD5 salt string. The configured string is appended to the parameter before performing MD5 hashing of the field.

  String Length 1 to 16
  Introduced 22.5.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

name string
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.

  Synopsis HTTP header field name
  Context configure application-assurance group number http-enrich string field string name string
  Tree name
  String Length 1 to 32
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

static-string string
  Synopsis HTTP header enrichment template field static string
  Context configure application-assurance group number http-enrich string field string static-string string
  Tree static-string
  String Length 1 to 16
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rat-type-enrichment
  Synopsis Enter the rat-type-enrichment context
  Context configure application-assurance group number http-enrich string rat-type-enrichment
  Tree rat-type-enrichment
 

Description

Commands in this context configure Radio Access Type (RAT) enrichment.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rat-type [rat-type-name] keyword
  Synopsis Enter the rat-type list instance
  Context configure application-assurance group number http-enrich string rat-type-enrichment rat-type keyword
  Tree rat-type
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[rat-type-name] keyword
  Synopsis RAT type name
  Context configure application-assurance group number http-enrich string rat-type-enrichment rat-type keyword
 

Description

This command configures a customised RAT value for the specified RAT-Type.

  Options utran, geran, wlan, gan, hspa-evol, eutran, virtual, eutran-nb, ehrpd, hrpd, cdma-1x, umb, wifi, nr, lte-m
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rat-string string
  Synopsis Customised RAT type value
  Context configure application-assurance group number http-enrich string rat-type-enrichment rat-type keyword rat-string string
  Tree rat-string
  String Length 1 to 31
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-error-redirect [http-error-redirect-name] string
  Synopsis Enter the http-error-redirect list instance
  Context configure application-assurance group number http-error-redirect string
  Tree http-error-redirect
 

Description

Commands in this context configure an HTTP error redirect policy that contains important information relevant to the redirect server.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[http-error-redirect-name] string
  Synopsis HTTP error redirect policy name
  Context configure application-assurance group number http-error-redirect string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the HTTP error redirect object
  Context configure application-assurance group number http-error-redirect string admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number http-error-redirect string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

error-code [error-code-value] number
  Synopsis Enter the error-code list instance
  Context configure application-assurance group number http-error-redirect string error-code number
  Tree error-code
 

Description

Commands in this context configure the HTTP error status codes to which a redirect action is applied. Only messages with sizes less than that configured for the custom-message-size command are eligible for redirect action.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[error-code-value] number
  Synopsis HTTP error code value for an HTTP error redirect
  Context configure application-assurance group number http-error-redirect string error-code number
  Range 400 to 999
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

custom-message-size number
  Synopsis HTTP error redirect error code custom message size
  Context configure application-assurance group number http-error-redirect string error-code number custom-message-size number
  Tree custom-message-size
 

Description

This command specifies the maximum message size above which an HTTP error redirect is not performed.

  Max. Range 0 to 4294967295
  Default 1024
  Units octets
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-host string
  Synopsis HTTP host for the HTTP error redirect object
  Context configure application-assurance group number http-error-redirect string http-host string
  Tree http-host
 

Description

This command specifies the HTTP hostname of the landing server (Barefruit or Xerocole). It is used in the HTTP GET operation from the client (which is being redirected) to the redirect search landing server. The hostname must contain a valid IP address or HTTP hostname or URI for the HTTP GET from the client to the landing server.

  String Length 1 to 255
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

participant-id string
  Synopsis Participant ID for the HTTP error redirect object
  Context configure application-assurance group number http-error-redirect string participant-id string
  Tree participant-id
 

Description

This command specifies a string assigned to the operator by Barefruit. It is used by Barefruit landing servers (applies to template # 1 only).

  String Length 1 to 32
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template number
  Synopsis Template ID for the HTTP error redirect object
  Context configure application-assurance group number http-error-redirect string template number
  Tree template
 

Description

This command configures the template of parameters passed from the AA-ISA to the redirect server using JavaScript in the redirect packet. The template is specific to the redirect server used in the network. Currently, two partners are supported with AA-ISA redirect solution, Barefruit, and Xerocole.

  Max. Range 0 to 4294967295
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-notification [http-notification-name] string
  Synopsis Enter the http-notification list instance
  Context configure application-assurance group number http-notification string
  Tree http-notification
 

Description

Commands in this context configure an HTTP notification object for the subscriber in-browser notification.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[http-notification-name] string
  Synopsis HTTP notification policy name
  Context configure application-assurance group number http-notification string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the AA HTTP notification object
  Context configure application-assurance group number http-notification string admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number http-notification string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

interval (number | keyword)
  Synopsis Minimum HTTP response notification interval
  Context configure application-assurance group number http-notification string interval (number | keyword)
  Tree interval
  Range 1 to 1440
  Default one-time
  Units minutes
  Options one-time
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

script-url string
  Synopsis Script URL inserted into the HTTP response
  Context configure application-assurance group number http-notification string script-url string
  Tree script-url
 

Description

This command configures the URL of the script used by the HTTP notification policy.

  String Length 1 to 255
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template number
  Synopsis Template ID for the AA HTTP notification object
  Context configure application-assurance group number http-notification string template number
  Tree template
 

Description

This command configures the template that defines the format and attributes included in the HTTP notification message.

  Max. Range 0 to 4294967295
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-redirect [http-redirect-name] string
  Synopsis Enter the http-redirect list instance
  Context configure application-assurance group number http-redirect string
  Tree http-redirect
 

Description

Commands in this context configure the parameters of the HTTP redirect policy.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[http-redirect-name] string
  Synopsis HTTP redirect policy name
  Context configure application-assurance group number http-redirect string
 

Description

This command specifies the applied HTTP redirect name. If no redirect name is specified, HTTP redirect is not enabled.

  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the AA HTTP redirect object
  Context configure application-assurance group number http-redirect string admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

captive-redirect
  Synopsis Enter the captive-redirect context
  Context configure application-assurance group number http-redirect string captive-redirect
  Tree captive-redirect
 

Description

Commands in this context configure the captive redirect capability for an HTTP redirect policy. HTTP redirect policies using captive redirect can be used in conjunction with a session-filter policy to terminate TCP flows in the ISA-AA card before reaching the Internet to redirect subscribers to the predefined redirect URL. 

Non-HTTP TCP flows are TCP reset. Captive redirect uses the provisioned VLAN ID to send the HTTP response to subscribers; therefore, this VLAN ID must be properly assigned in the same VPN as the subscriber. 

The operator can select the URL arguments to include in the redirect URL using either a specific template ID or by configuring the redirect URL using a supported macro substitution keyword.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

vlan-id number
  Synopsis Captive redirect VLAN ID
  Context configure application-assurance group number http-redirect string captive-redirect vlan-id number
  Tree vlan-id
 

Description

This command configures the VLAN ID for a captive redirect. Captive redirect uses the provisioned VLAN ID to send the HTTP response to subscribers; therefore, this VLAN ID must be properly assigned in the same VPN as the subscriber.

  Range 1 to 4094
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number http-redirect string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

redirect-https boolean
  Synopsis Enable HTTPS redirect
  Context configure application-assurance group number http-redirect string redirect-https boolean
  Tree redirect-https
 

Description

When set to true, the HTTP redirect policy redirects HTTPS sessions to the configured redirect URL.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

redirect-url string
  Synopsis HTTP redirect URL
  Context configure application-assurance group number http-redirect string redirect-url string
  Tree redirect-url
 

Description

This command configures the HTTP redirect URL which is the URL (page) that the user is redirected to when an HTTP redirect takes effect.

The operator can select the URL arguments to include in the redirect URL, using either a specific template ID or by configuring any of the following macro substitution keywords:

  • $URL - The Request-URI in the HTTP GET Request received

  • $SUB - The subscriber ID

  • $IP - The IP address of the subscriber host

  • $RTRID - The router ID

  • $URLPRM - The HTTP URL parameter associated with the subscriber

  • $MAC - The UE MAC address

  • $SAP - The UE SAP

  • $CID - The circuit ID or interface ID of the subscriber

  • $RID - The remote ID of the subscriber

  • $CATID - The URL filter web-service rating category identifier

  • $CATNAME - The URL filter web-service rating category name

Only ESM and ESM-MAC sub types support $MAC, $SAP, $CID, and $RID macro substitution.

  String Length 1 to 255
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-client-reset boolean
  Synopsis Enable TCP client reset
  Context configure application-assurance group number http-redirect string tcp-client-reset boolean
  Tree tcp-client-reset
 

Description

When set to true, this command enables an HTTP-redirect policy to initiate a TCP reset towards the client if the AA policy results in a redirect with packet drop but the HTTP redirect cannot be delivered.  Scenarios for this include HTTP (TLS) sessions, blocking of non-HTTP TCP traffic, and blocking of existing flows after a policy re-evaluation of an existing subscriber.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template number
  Synopsis Template ID for the HTTP redirect object
  Context configure application-assurance group number http-redirect string template number
  Tree template
 

Description

This command configures the template that defines which parameters are appended to the HTTP host redirect field in the redirect message. The HTTP redirect template provides HTTP 302 redirect containing only the URL specified in the redirect policy, with no other parameters.

  Max. Range 0 to 4294967295
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

partition [aa-partition-id] number
  Synopsis Enter the partition list instance
  Context configure application-assurance group number partition number
  Tree partition
 

Description

Commands in this context configure the AA partition-related policies.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[aa-partition-id] number
  Synopsis Partition ID within the AA group
  Context configure application-assurance group number partition number
  Range 0 to 65535
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub-congestion-detection
  Synopsis Enter the aa-sub-congestion-detection context
  Context configure application-assurance group number partition number aa-sub-congestion-detection
  Tree aa-sub-congestion-detection
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of congestion detection
  Context configure application-assurance group number partition number aa-sub-congestion-detection admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rat-type [rat-type-name] keyword
  Synopsis Enter the rat-type list instance
  Context configure application-assurance group number partition number aa-sub-congestion-detection rat-type keyword
  Tree rat-type
 

Description

Commands in this context configure the RAT types for which unique RTT thresholds are configured.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[rat-type-name] keyword
  Synopsis Mobile radio access technology (RAT) type
  Context configure application-assurance group number partition number aa-sub-congestion-detection rat-type keyword
  Options utran, geran, wlan, gan, hspa-evol, eutran, virtual, eutran-nb, ehrpd, hrpd, cdma-1x, umb, wifi, nr, lte-m
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rtt-threshold (number | keyword)
  Synopsis Round trip time congestion threshold for a RAT type
  Context configure application-assurance group number partition number aa-sub-congestion-detection rat-type keyword rtt-threshold (number | keyword)
  Tree rtt-threshold
 

Description

This command configures the maximum acceptable round trip time (RTT) under no congestion. Any measured RTT above the threshold is considered an indication of possible congestion.

  Range 1 to 500
  Units milliseconds
  Options not-applicable
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rtt-threshold (number | keyword)
  Synopsis Round trip time congestion threshold
  Context configure application-assurance group number partition number aa-sub-congestion-detection rtt-threshold (number | keyword)
  Tree rtt-threshold
 

Description

This command configures the default round trip delay threshold used by the DEM gateway algorithm to determine subscriber congestion for NLB-DEM. This default value is used when the current RAT-Type is not known, or has no associated configured RTT threshold.

  Range 1 to 500
  Default 173
  Units milliseconds
  Options not-applicable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rtt-threshold-tolerance number
  Synopsis RTT threshold tolerance for congestion detection
  Context configure application-assurance group number partition number aa-sub-congestion-detection rtt-threshold-tolerance number
  Tree rtt-threshold-tolerance
 

Description

This command configures the round trip delay threshold tolerance used by the DEM gateway algorithm to determine subscriber-level congestion.

  Range 0 to 100
  Default 50
  Units percent
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub-remote boolean
  Synopsis Reverse subscriber traffic direction
  Context configure application-assurance group number partition number aa-sub-remote boolean
  Tree aa-sub-remote
 

Description

When configured to true, the direction of the from-subscriber and to-subscriber traffic is reversed for this group partition.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

access-network-location
  Synopsis Enter the access-network-location context
  Context configure application-assurance group number partition number access-network-location
  Tree access-network-location
 

Description

Commands in this context configure parameters related to dynamic experience management, also known as Access Network Location (ANL).

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

source [source-type] keyword
  Synopsis Enter the source list instance
  Context configure application-assurance group number partition number access-network-location source keyword
  Tree source
 

Description

Commands in this context configure location sources for dynamic experience management.

  Max. Instances 1
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[source-type] keyword
  Synopsis Access network location source
  Context configure application-assurance group number partition number access-network-location source keyword
 

Description

This command specifies the location or access technology. AA supports access points for WLGW access points or ULI-2gpp for mobile (for example, FWA).

  Options mobile-3g, access-point, uli-3gpp
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rat-type [rat-type-name] keyword
  Synopsis Enter the rat-type list instance
  Context configure application-assurance group number partition number access-network-location source keyword rat-type keyword
  Tree rat-type
 

Description

Commands in this context configure the RAT types for which unique RTT thresholds are configured.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[rat-type-name] keyword
  Synopsis Access network location RAT type
  Context configure application-assurance group number partition number access-network-location source keyword rat-type keyword
  Options utran, geran, wlan, gan, hspa-evol, eutran, virtual, eutran-nb, ehrpd, hrpd, cdma-1x, umb, wifi, nr, lte-m
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rtt-threshold (number | keyword)
  Synopsis RTT congestion threshold for a RAT type
  Context configure application-assurance group number partition number access-network-location source keyword rat-type keyword rtt-threshold (number | keyword)
  Tree rtt-threshold
 

Description

This command specifies the maximum acceptable round trip time (RTT) under no congestion. Any measured RTT above the threshold is considered an indication of possible congestion.

  Range 1 to 500
  Units milliseconds
  Options not-applicable
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rtt-threshold (number | keyword)
  Synopsis Source round trip time congestion threshold
  Context configure application-assurance group number partition number access-network-location source keyword rtt-threshold (number | keyword)
  Tree rtt-threshold
 

Description

This command configures the default round trip delay threshold used by the DEM gateway algorithm to determine ANL congestion. This default value is used when either the ANL RAT-Type is not known or has no associated configured RTT threshold. 

  Range 1 to 500
  Default 173
  Units milliseconds
  Options not-applicable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rtt-threshold-tolerance number
  Synopsis Source round trip time congestion threshold tolerance
  Context configure application-assurance group number partition number access-network-location source keyword rtt-threshold-tolerance number
  Tree rtt-threshold-tolerance
 

Description

This command configures the ANL round trip delay threshold tolerance used by the DEM gateway algorithm to determine ANL-level congestion.

  Range 0 to 100
  Default 50
  Units percent
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

source-level keyword
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.

  Synopsis Access network location source level
  Context configure application-assurance group number partition number access-network-location source keyword source-level keyword
  Tree source-level
  Default cell
  Options cell, transport-network-link, mac-vlan
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aqp-initial-lookup boolean
  Synopsis Enable AQP initial lookup
  Context configure application-assurance group number partition number aqp-initial-lookup boolean
  Tree aqp-initial-lookup
 

Description

When configured to true, this command allows AA to perform application QoS policy (AQP) lookups on flows prior to complete application identification. As usual, AQP will be looked up again when identification is complete. Without this, AA executes AQPs that are part of the sub-default policy. The sub-default policy is formed by regular AQPs that contain ASOs, subID, or flow direction as matching conditions.

This behavior is required, for example, to apply GTP and SCTP filtering on the first packet of a new GTP/SCTP flow (AQP matching conditions).

When configured to false, AA only performs AQP lookups when identification is complete.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cflowd
  Synopsis Enter the cflowd context
  Context configure application-assurance group number partition number cflowd
  Tree cflowd
 

Description

Commands in this context configure the AA partition-based cflowd fields.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-type [flow-export-type] keyword
  Synopsis Enter the export-type list instance
  Context configure application-assurance group number partition number cflowd export-type keyword
  Tree export-type
 

Description

Commands in this context configure the scope of traffic subjected to AA cflowd export.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[flow-export-type] keyword
  Synopsis Cflowd flow export type for the partition
  Context configure application-assurance group number partition number cflowd export-type keyword
 

Description

This command allows the operator to configure the scope of traffic that can be sampled for cflowd export for the configured cflowd template.

  Options volume, tcp-performance, rtp-performance, comprehensive
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of cflowd export
  Context configure application-assurance group number partition number cflowd export-type keyword admin-state keyword
  Tree admin-state
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-group [app-group-name] reference
  Synopsis Enter the app-group list instance
  Context configure application-assurance group number partition number cflowd export-type keyword app-group reference
  Tree app-group
 

Description

Commands in this context configure application groups for flow sampling and cflowd export.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[app-group-name] reference
  Synopsis Application group name
  Context configure application-assurance group number partition number cflowd export-type keyword app-group reference
 

Reference

configure application-assurance group number partition number policy app-group string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rate-choice keyword
  Synopsis Cflowd rate to use for sampling
  Context configure application-assurance group number partition number cflowd export-type keyword app-group reference rate-choice keyword
  Tree rate-choice
  Default flow-rate
  Options flow-rate, flow-rate-2
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

application [application-name] reference
  Synopsis Enter the application list instance
  Context configure application-assurance group number partition number cflowd export-type keyword application reference
  Tree application
 

Description

Commands in this context configure applications for flow sampling and cflowd export.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[application-name] reference
  Synopsis Application name
  Context configure application-assurance group number partition number cflowd export-type keyword application reference
 

Reference

configure application-assurance group number partition number policy application string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rate-choice keyword
  Synopsis Cflowd rate to use for sampling
  Context configure application-assurance group number partition number cflowd export-type keyword application reference rate-choice keyword
  Tree rate-choice
  Default flow-rate
  Options flow-rate, flow-rate-2
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log [event-log-name] string
  Synopsis Enter the event-log list instance
  Context configure application-assurance group number partition number event-log string
  Tree event-log
 

Description

Commands in this context configure an event log.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[event-log-name] string
  Synopsis Partition event log name
  Context configure application-assurance group number partition number event-log string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the event log
  Context configure application-assurance group number partition number event-log string admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

buffer-type keyword
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis Event log buffer type
  Context configure application-assurance group number partition number event-log string buffer-type keyword
  Tree buffer-type
  Default linear
  Options linear, circular, syslog
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

max-entries number
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis Maximum number of entries for the event log
  Context configure application-assurance group number partition number event-log string max-entries number
  Tree max-entries
  Range 1 to 100000
  Default 500
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

syslog
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis Enter the syslog context
  Context configure application-assurance group number partition number event-log string syslog
  Tree syslog
 

Description

Commands in this context configure the syslog options for the partition.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

address (ipv4-address-no-zone | ipv6-address-no-zone)
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis Syslog host IP address
  Context configure application-assurance group number partition number event-log string syslog address (ipv4-address-no-zone | ipv6-address-no-zone)
  Tree address
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number event-log string syslog description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

facility keyword
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis AA syslog facility
  Context configure application-assurance group number partition number event-log string syslog facility keyword
  Tree facility
 

Description

This command configures the syslog facility. The syslog facility is an information field associated with a syslog message. It is defined by the syslog protocol and provides an indication of which part of the system originated the message.

  Default local7
  Options kernel, user, mail, systemd, auth, syslogd, printer, netnews, uucp, cron, authpriv, ftp, ntp, logaudit, logalert, cron2, local0, local1, local2, local3, local4, local5, local6, local7
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port number
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis Syslog host UDP port
  Context configure application-assurance group number partition number event-log string syslog port number
  Tree port
 

Description

This command specifies the UDP port used by application assurance for the syslog events.

  Max. Range 0 to 65535
  Default 514
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

severity keyword
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis Syslog message severity level threshold
  Context configure application-assurance group number partition number event-log string syslog severity keyword
  Tree severity
  Default info
  Options emergency, alert, critical, error, warning, notice, info, debug
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

vlan-id number
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis ISA service port VLAN ID for sending syslog traffic
  Context configure application-assurance group number partition number event-log string syslog vlan-id number
  Tree vlan-id
 

Description

This command configures the service port VLAN ID to be used by application assurance to provide syslog events. This VLAN ID also needs to be configured for the application assurance interface.

  Range 1 to 4094
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtp
  Synopsis Enter the gtp context
  Context configure application-assurance group number partition number gtp
  Tree gtp
 

Description

Commands in this context configure GTP parameters.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of GTP
  Context configure application-assurance group number partition number gtp admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtp-filter [gtp-filter-name] string
  Synopsis Enter the gtp-filter list instance
  Context configure application-assurance group number partition number gtp gtp-filter string
  Tree gtp-filter
 

Description

Commands in this context allow AA to treat traffic on UDP port number 2152 as GTP-U. Without further specifying any other parameters within this GTP context, AA performs basic GTP-U header sanity checks and discards packets that are malformed. This GTP context also allows the operator to configure various GTP filters.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[gtp-filter-name] string
  Synopsis GTP filter name
  Context configure application-assurance group number partition number gtp gtp-filter string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number gtp gtp-filter string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtp-in-gtp keyword
  Synopsis GTP in GTP packet filtering
  Context configure application-assurance group number partition number gtp gtp-filter string gtp-in-gtp keyword
  Tree gtp-in-gtp
  Default permit
  Options deny, permit
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtp-tunnel-database
  Synopsis Enter the gtp-tunnel-database context
  Context configure application-assurance group number partition number gtp gtp-filter string gtp-tunnel-database
  Tree gtp-tunnel-database
 

Description

Commands in this context configure GTP advanced firewall functions, such as validating GTP tunnels, sequence numbers, and source IP addresses).

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-tunnel-endpoint-limit number
  Synopsis Default GTP tunnel endpoint limit
  Context configure application-assurance group number partition number gtp gtp-filter string gtp-tunnel-database default-tunnel-endpoint-limit number
  Tree default-tunnel-endpoint-limit
 

Description

This command configures the maximum number of GTP endpoints requested in GTP-C messages by using, for example, the PDP Context Create message type. 

The validate-gtp-tunnels command must be enabled before using this command.

  Range 1 to 4294967295
  Default 4294967295
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

validate-gtp-tunnels boolean
  Synopsis Enable GTP tunnel validation
  Context configure application-assurance group number partition number gtp gtp-filter string gtp-tunnel-database validate-gtp-tunnels boolean
  Tree validate-gtp-tunnels
 

Description

When configured to true, this command configures GTP tunnel validation. This allows for the validation of TEIDs and is a prerequisite for sequence checking and UE IP address validation. This command is only applicable when AA GTP FW is deployed on S8/S5/Gp/Gn interfaces. The gtpc-inspection command in the configure application-assurance group partition gtp context must be configured to true before using this command.

When configured to false, the GTP tunnels cannot be validated.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

validate-sequence-number boolean
  Synopsis Enable GTP sequence number checking
  Context configure application-assurance group number partition number gtp gtp-filter string gtp-tunnel-database validate-sequence-number boolean
  Tree validate-sequence-number
 

Description

When configured to true, this command enables GTP sequence number checking. GTP packets that fail the sequence number check are discarded.

The validate-gtp-tunnels command in the configure application-assurance group partition gtp gtp-filter gtp-tunnel-database context must be configured to true before using this command.

When configured to false, the GTP packet sequence number cannot be checked.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

validate-source-ip-addr boolean
  Synopsis Validate source IP address in GTP frames
  Context configure application-assurance group number partition number gtp gtp-filter string gtp-tunnel-database validate-source-ip-addr boolean
  Tree validate-source-ip-addr
 

Description

When configured to true, this command enables checking for spoofed or invalid UE IP addresses. Upstream GTP packets that contain invalid UE IP addresses are discarded. When a packet is dropped due to source-ip-address “invalid source IP add”, the statistics counter is updated.

The validate-gtp-tunnels command in the configure application-assurance group partition gtp gtp-filter gtp-tunnel-database context must be configured to true before using this command.

When configured to false, the spoofed or invalid UE IP addresses cannot be checked.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

imsi-apn-filter
  Synopsis Enter the imsi-apn-filter context
  Context configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter
  Tree imsi-apn-filter
 

Description

Commands in this context configure IMSI and APN filtering.

The gtpc-inspection command in the configure application-assurance group partition gtp context must be configured to true before using this command. 

This command is only applicable to the GTP packets that contain IMSI or APN information elements (IEs).

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action keyword
  Synopsis IMSI APN filter default action
  Context configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter default-action keyword
  Tree default-action
  Default permit
  Options deny, permit
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number
  Synopsis Enter the entry list instance
  Context configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter entry number
  Tree entry
 

Description

Commands in this context configure an entry within the IMSI-APN filter to allow for IMSI-APN match and action configuration.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number
  Synopsis AA IMSI-APN filter entry ID
  Context configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter entry number
 

Description

This command specifies the index in the IMSI-APN list that defines a custom filtering action.

  Range 1031 to 2030
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword
  Synopsis IMSI APN filter entry action
  Context configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter entry number action keyword
  Tree action
  Default permit
  Options deny, permit
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

apn string
  Synopsis APN as GTP filter match criterion
  Context configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter entry number apn string
  Tree apn
 

Description

This command configures a matching condition for an APN configured as a GTP filter. If no APN is specified, the entry is not checked for the APN IE in GTP-C packets. The values for this command are:

  •  string:The extracted APN must match string exactly.

  • ^string: The extracted APN must start with string.

  • string$: The extracted APN must end with string.

  • WILDCARD_APN: Special string that indicates that the extracted APN must be “*” (that is, a length octet with value one, followed by the ASCII code for the asterisk)

  • EMPTY_APN: Special string that indicates that the extracted APN must be empty (that is, “”)

  • ANY_APN: Special string that indicates that the extracted APN IE must be present and can have any value in order for the filter entry to match

  String Length 1 to 100
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

imsi-mcc-mnc-prefix string
  Synopsis IMSI (MCC-MNC) prefix as GTP filter match criterion
  Context configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter entry number imsi-mcc-mnc-prefix string
  Tree imsi-mcc-mnc-prefix
 

Description

This command configures a matching condition for the IMSI (MCC-MNC) prefix. This string represents the IMSI prefix to be matched against the IMSI IE of the packet, or the special value ANY_IMSI to indicate that an IMSI IE must be present as a matching condition regardless of the IMSI IE value. If no MCC-MNC prefix is specified, the entry will match GTP packets that have an IMSI IE containing any value.

  String Length 1 to 8
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

src-gsn
  Synopsis Enter the src-gsn context
  Context configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter entry number src-gsn
  Tree src-gsn
 

Description

Commands in this context configure a matching condition for the GSN IP address. The IP address value is checked only against the source IP address of the GTP packets that contain an APN IE or an IMSI IE.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)
  Synopsis Source GSN IP address prefix as GTP filter match criterion
  Context configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter entry number src-gsn ip-prefix (ipv4-prefix | ipv6-prefix)
  Tree ip-prefix
 

Description

This command specifies a valid unicast address associated with the IMSI-APN filter entry.

 

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference
  Synopsis Source GSN IP address prefix list as match criterion
  Context configure application-assurance group number partition number gtp gtp-filter string imsi-apn-filter entry number src-gsn ip-prefix-list reference
  Tree ip-prefix-list
 

Reference

configure application-assurance group number partition number ip-prefix-list string

 

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

log
  Synopsis Enter the log context
  Context configure application-assurance group number partition number gtp gtp-filter string log
  Tree log
 

Description

Commands in this context configure the AA group partition GTP filter log.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword
  Synopsis GTP filter action to be logged
  Context configure application-assurance group number partition number gtp gtp-filter string log action keyword
  Tree action
  Default deny
  Options deny, permit, all
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference
  Synopsis Event-log name to capture GTP filter events
  Context configure application-assurance group number partition number gtp gtp-filter string log event-log reference
  Tree event-log
 

Reference

configure application-assurance group number partition number event-log string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

max-payload-length number
  Synopsis Maximum allowed GTP payload length
  Context configure application-assurance group number partition number gtp gtp-filter string max-payload-length number
  Tree max-payload-length
  Range 0 to 65535
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

message-type
  Synopsis Enter the message-type context
  Context configure application-assurance group number partition number gtp gtp-filter string message-type
  Tree message-type
 

Description

Commands in this context configure the GTP message-type filtering. If no message type is specified within a filter, all GTP message types are allowed.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action keyword
  Synopsis GTP message type default action
  Context configure application-assurance group number partition number gtp gtp-filter string message-type default-action keyword
  Tree default-action
  Default permit
  Options deny, permit
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number
  Synopsis Enter the entry list instance
  Context configure application-assurance group number partition number gtp gtp-filter string message-type entry number
  Tree entry
 

Description

Commands in this context configure an entry for a specific GTPv1 message type value.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number
  Synopsis GTP filter entry ID
  Context configure application-assurance group number partition number gtp gtp-filter string message-type entry number
 

Description

This command specifies the index in the GTPv1 message value list that defines a custom message-type action.

  Range 1 to 255
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword
  Synopsis GTPv1 filter message entry action
  Context configure application-assurance group number partition number gtp gtp-filter string message-type entry number action keyword
  Tree action
  Options deny, permit
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value (number | keyword)
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.

  Synopsis GTPv1 filter message type value
  Context configure application-assurance group number partition number gtp gtp-filter string message-type entry number value (number | keyword)
  Tree value
  Range 1 to 255
  Options echo-request, echo-response, version-not-supported, node-alive-request, node-alive-response, redirection-request, redirection-response, create-pdp-context-request, create-pdp-context-response, update-pdp-context-request, update-pdp-context-response, delete-pdp-context-request, delete-pdp-context-response, initiate-pdp-context-activation-request, initiate-pdp-context-activation-response, error-indication, pdu-notification-request, pdu-notification-response, pdu-notification-reject-request, pdu-notification-reject-response, supported-extension-headers-notification, send-routing-information-for-gprs-request, send-routing-information-for-gprs-response, failure-report-request, failure-report-response, note-ms-gprs-present-request, note-ms-gprs-present-response, identification-request, identification-response, sgsn-context-request, sgsn-context-response, sgsn-context-acknowledge, forward-relocation-request, forward-relocation-response, forward-relocation-complete, relocation-cancel-request, relocation-cancel-response, forward-srns-context, forward-relocation-complete-acknowledge, forward-srns-context-acknowledge, ran-information-relay, mbms-notification-request, mbms-notification-response, mbms-notification-reject-request, mbms-notification-reject-response, create-mbms-context-request, create-mbms-context-response, update-mbms-context-request, update-mbms-context-response, delete-mbms-context-request, delete-mbms-context-response, mbms-registration-request, mbms-registration-response, mbms-de-registration-request, mbms-de-registration-response, mbms-session-start-request, mbms-session-start-response, mbms-session-stop-request, mbms-session-stop-response, mbms-session-update-request, mbms-session-update-response, ms-info-change-notification-request, ms-info-change-notification-response, data-record-transfer-request, data-record-transfer-response, end-marker, g-pdu
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

message-type-gtp-v2
  Synopsis Enter the message-type-gtp-v2 context
  Context configure application-assurance group number partition number gtp gtp-filter string message-type-gtp-v2
  Tree message-type-gtp-v2
 

Description

Commands in this context configure the GTPv2 message-type filtering.

If message-type GTPv2 is not specified within a filter, all GTP message types are allowed, except for the messages that are dropped by GTP-C inspection because they violate the expected GTP protocol for the deployment interface (for example, roaming deployment).

The gtpc-inspection command in the configure application-assurance group partition gtp context must be configured to true before configuring GTPv2 message-type filtering.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action keyword
  Synopsis GTPv2 message type default action
  Context configure application-assurance group number partition number gtp gtp-filter string message-type-gtp-v2 default-action keyword
  Tree default-action
  Default permit
  Options deny, permit
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number
  Synopsis Enter the entry list instance
  Context configure application-assurance group number partition number gtp gtp-filter string message-type-gtp-v2 entry number
  Tree entry
 

Description

Commands in this context configure an entry for a specific GTPv2 message type value.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number
  Synopsis GTPv2 filter entry ID
  Context configure application-assurance group number partition number gtp gtp-filter string message-type-gtp-v2 entry number
 

Description

This command configures the index in the GTP message value list that defines a custom message-type action.

  Range 516 to 770
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword
  Synopsis GTPv2 filter message entry action
  Context configure application-assurance group number partition number gtp gtp-filter string message-type-gtp-v2 entry number action keyword
  Tree action
 

Description

This command specifies the action to take for packets that match this GTPv2 filter message entry.

  Options deny, permit
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value (number | keyword)
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.

  Synopsis GTPv2 filter message type value
  Context configure application-assurance group number partition number gtp gtp-filter string message-type-gtp-v2 entry number value (number | keyword)
  Tree value
  Range 1 to 255
  Options echo-request, echo-response, version-not-supported-indication, create-session-request, create-session-response, modify-bearer-request, modify-bearer-response, delete-session-request, delete-session-response, change-notification-request, change-notification-response, remote-ue-report-notification, remote-ue-report-acknowledge, modify-bearer-command, modify-bearer-failure-indication, delete-bearer-command, delete-bearer-failure-indication, bearer-resource-command, bearer-resource-failure-indication, downlink-data-notification-failure-indication, trace-session-activation, trace-session-deactivation, stop-paging-indication, create-bearer-request, create-bearer-response, update-bearer-request, update-bearer-response, delete-bearer-request, delete-bearer-response, delete-pdn-connection-set-request, delete-pdn-connection-set-response, pgw-downlink-triggering-notification, pgw-downlink-triggering-acknowledge, identification-request, identification-response, context-request, context-response, context-acknowledge, forward-relocation-request, forward-relocation-response, forward-relocation-complete-notification, forward-relocation-complete-acknowledge, forward-access-context-notification, forward-access-context-acknowledge, relocation-cancel-request, relocation-cancel-response, configuration-transfer-tunnel, detach-notification, detach-acknowledge, cs-paging-indication, ran-information-relay, alert-mme-notification, alert-mme-acknowledge, ue-activity-notification, ue-activity-acknowledge, isr-status-indication, create-forwarding-tunnel-request, create-forwarding-tunnel-response, suspend-notification, suspend-acknowledge, resume-notification, resume-acknowledge, create-indirect-data-forwarding-tunnel-request, create-indirect-data-forwarding-tunnel-response, delete-indirect-data-forwarding-tunnel-request, delete-indirect-data-forwarding-tunnel-response, release-access-bearers-request, release-access-bearers-response, downlink-data-notification, downlink-data-notification-acknowledge, pgw-restart-notification, pgw-restart-notification-acknowledge, update-pdn-connection-set-request, update-pdn-connection-set-response, modify-access-bearers-request, modify-access-bearers-response, mbms-session-start-request, mbms-session-start-response, mbms-session-update-request, mbms-session-update-response, mbms-session-stop-request, mbms-session-stop-response
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtpc-inspection boolean
  Synopsis Enable inspection of GTP-C packets
  Context configure application-assurance group number partition number gtp gtpc-inspection boolean
  Tree gtpc-inspection
 

Description

When configured to true, this command enables the inspection of GTP-C packets. This is relevant only when AA GTP FW is deployed on S8/S5/Gp/Gn interfaces. This command must be enabled before configuring related features, such as APN filtering, GTP tunnel validation, message-type-v2 filtering, sequence number validation, and SRC IP validation.

When configured to false, GTP-C packet inspection cannot be performed.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

log
  Synopsis Enter the log context
  Context configure application-assurance group number partition number gtp log
  Tree log
 

Description

Commands in this context configure the AA group partition GTP log.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword
  Synopsis GTP log action
  Context configure application-assurance group number partition number gtp log action keyword
  Tree action
 

Description

This command specifies the action on which the GTP log is raised.

  Default deny
  Options deny, permit, all
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference
  Synopsis Event log reference for logging GTP events
  Context configure application-assurance group number partition number gtp log event-log reference
  Tree event-log
 

Reference

configure application-assurance group number partition number event-log string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mode keyword
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis GTP mode
  Context configure application-assurance group number partition number gtp mode keyword
  Tree mode
  Default filtering
  Options filtering, untunneling
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-match-all-requests boolean
  Synopsis Enable HTTP matching for all requests for an expression
  Context configure application-assurance group number partition number http-match-all-requests boolean
  Tree http-match-all-requests
 

Description

When configured to true, this command enables HTTP matching for all requests for an HTTP expression.

When configured to false, this command restores the default and removes the matching request for this particular expression.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-x-online-host boolean
  Synopsis Enable X-Online-Host header field
  Context configure application-assurance group number partition number http-x-online-host boolean
  Tree http-x-online-host
 

Description

When configured to true, this command enables the X-Online-Host header field as a replacement for the HTTP Host header field.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list [ip-prefix-list-name] string
  Synopsis Enter the ip-prefix-list list instance
  Context configure application-assurance group number partition number ip-prefix-list string
  Tree ip-prefix-list
 

Description

Commands in this context configure an IP prefix list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[ip-prefix-list-name] string
  Synopsis AA IP prefix list name
  Context configure application-assurance group number partition number ip-prefix-list string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number ip-prefix-list string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

prefix [ip-prefix] (ipv4-prefix | ipv6-prefix)
  Synopsis Enter the prefix list instance
  Context configure application-assurance group number partition number ip-prefix-list string prefix (ipv4-prefix | ipv6-prefix)
  Tree prefix
 

Description

Commands in this context configure an IP prefix within the list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[ip-prefix] (ipv4-prefix | ipv6-prefix)
  Synopsis AA IP prefix
  Context configure application-assurance group number partition number ip-prefix-list string prefix (ipv4-prefix | ipv6-prefix)
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

name string
  Synopsis AA IP prefix name
  Context configure application-assurance group number partition number ip-prefix-list string prefix (ipv4-prefix | ipv6-prefix) name string
  Tree name
  String Length 1 to 32
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

policy
  Synopsis Enter the policy context
  Context configure application-assurance group number partition number policy
  Tree policy
 

Description

Commands in this context configure the fields for the Application Assurance policy. 

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-filter
  Synopsis Enter the app-filter context
  Context configure application-assurance group number partition number policy app-filter
  Tree app-filter
 

Description

Commands in this context configure an application filter for Application Assurance.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number
  Synopsis Enter the entry list instance
  Context configure application-assurance group number partition number policy app-filter entry number
  Tree entry
 

Description

Commands in this context create an application filter entry. 

Application filter entries are an ordered list. The lowest numerical entry that matches the flow defines the application for that flow. 

An application filter entry or entries configure match attributes of an application.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number
  Synopsis Application filter entry ID
  Context configure application-assurance group number partition number policy app-filter entry number
  Range 1 to 65535
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the AA application filter entry
  Context configure application-assurance group number partition number policy app-filter entry number admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

application reference
  Synopsis Application name
  Context configure application-assurance group number partition number policy app-filter entry number application reference
  Tree application
 

Reference

configure application-assurance group number partition number policy application string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number policy app-filter entry number description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

expression [expr-index] number
  Synopsis Enter the expression list instance
  Context configure application-assurance group number partition number policy app-filter entry number expression number
  Tree expression
 

Description

Commands in this context configure string values to use in the application definition.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[expr-index] number
  Synopsis Application filter matching expression identifier
  Context configure application-assurance group number partition number policy app-filter entry number expression number
  Range 1 to 4
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq string
  Synopsis Exact match for application filter matching expression
  Context configure application-assurance group number partition number policy app-filter entry number expression number eq string
  Tree eq
  String Length 1 to 255
 

Notes

The following elements are part of a mandatory choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq string
  Synopsis Non-match for application filter matching expression
  Context configure application-assurance group number partition number policy app-filter entry number expression number neq string
  Tree neq
  String Length 1 to 255
 

Notes

The following elements are part of a mandatory choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

type keyword
  Synopsis Application filter matching expression type
  Context configure application-assurance group number partition number policy app-filter entry number expression number type keyword
  Tree type
  Options http-host, http-uri, http-referer, sip-ua, sip-uri, sip-mt, citrix-app, http-user-agent, h323-product-id, tls-cert-subj-org-name, tls-cert-subj-common-name, rtsp-host, rtsp-uri, rtsp-ua, rtmp-page-host, rtmp-page-uri, rtmp-swf-host, rtmp-swf-uri, rtmp-tc-host, rtmp-tc-uri, dns-domain-name
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-setup-direction keyword
  Synopsis Traffic flow direction for the application filter entry
  Context configure application-assurance group number partition number policy app-filter entry number flow-setup-direction keyword
  Tree flow-setup-direction
  Default both
  Options subscriber-to-network, network-to-subscriber, both
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-match-all-requests boolean
  Synopsis Enable HTTP matching for all requests
  Context configure application-assurance group number partition number policy app-filter entry number http-match-all-requests boolean
  Tree http-match-all-requests
 

Description

When configured to true, this command enables HTTP matching for all requests for an HTTP expression.

When configured to false, this command restores the default for this app-filter entry which matches the first request.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-port
  Synopsis Enter the http-port context
  Context configure application-assurance group number partition number policy app-filter entry number http-port
  Tree http-port
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq
  Synopsis Enter the eq context
  Context configure application-assurance group number partition number policy app-filter entry number http-port eq
  Tree eq
 

Description

Commands in this context configure the exact value as the match criterion.

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference
  Synopsis Port list name
  Context configure application-assurance group number partition number policy app-filter entry number http-port eq port-list reference
  Tree port-list
 

Reference

configure application-assurance group number partition number port-list string

 

Notes

The following elements are part of a choice: port-list or port-number.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number
  Synopsis Server port number
  Context configure application-assurance group number partition number policy app-filter entry number http-port eq port-number number
  Tree port-number
  Range 0 | 1 to 65535
  Default 0
 

Notes

The following elements are part of a choice: port-list or port-number.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq
  Synopsis Enter the neq context
  Context configure application-assurance group number partition number policy app-filter entry number http-port neq
  Tree neq
 

Description

Commands in this context configure the non-match criterion used. 

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference
  Synopsis Port list name
  Context configure application-assurance group number partition number policy app-filter entry number http-port neq port-list reference
  Tree port-list
 

Reference

configure application-assurance group number partition number port-list string

 

Notes

The following elements are part of a choice: port-list or port-number.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number
  Synopsis Server port number
  Context configure application-assurance group number partition number policy app-filter entry number http-port neq port-number number
  Tree port-number
  Range 0 | 1 to 65535
  Default 0
 

Notes

The following elements are part of a choice: port-list or port-number.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-protocol
  Synopsis Enter the ip-protocol context
  Context configure application-assurance group number partition number policy app-filter entry number ip-protocol
  Tree ip-protocol
 

Description

Commands in this context configure the IP protocol to use in the application definition.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq (number | keyword)
  Synopsis Exact match criterion used for the IP protocol number
  Context configure application-assurance group number partition number policy app-filter entry number ip-protocol eq (number | keyword)
  Tree eq
  Range 0 to 255
  Options tcp-udp, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route, ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq (number | keyword)
  Synopsis Non-match criterion used for the IP protocol number
  Context configure application-assurance group number partition number policy app-filter entry number ip-protocol neq (number | keyword)
  Tree neq
  Range 0 to 255
  Options tcp-udp, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route, ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

network-address
  Synopsis Enter the network-address context
  Context configure application-assurance group number partition number policy app-filter entry number network-address
  Tree network-address
 

Description

Commands in this context configure the network address to use for the application filter entry. The network address is the address on the network side of AA, independent of whether the subscriber is acting as a client or server and is not normally used in AA app-filters. The network address will match the destination IP address in a from-sub flow or the source IP address in a to-sub flow.

 

Notes

The following elements are part of a choice: network-address or server-address.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq
  Synopsis Enter the eq context
  Context configure application-assurance group number partition number policy app-filter entry number network-address eq
  Tree eq
 

Description

Commands in this context specify an exact value as the match criterion for the network address.

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)
  Synopsis IP prefix
  Context configure application-assurance group number partition number policy app-filter entry number network-address eq ip-prefix (ipv4-prefix | ipv6-prefix)
  Tree ip-prefix
 

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference
  Synopsis IP prefix list
  Context configure application-assurance group number partition number policy app-filter entry number network-address eq ip-prefix-list reference
  Tree ip-prefix-list
 

Reference

configure application-assurance group number partition number ip-prefix-list string

 

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq
  Synopsis Enter the neq context
  Context configure application-assurance group number partition number policy app-filter entry number network-address neq
  Tree neq
 

Description

Commands in this context specify the non-match criterion used for the network address. 

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)
  Synopsis IP prefix
  Context configure application-assurance group number partition number policy app-filter entry number network-address neq ip-prefix (ipv4-prefix | ipv6-prefix)
  Tree ip-prefix
 

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference
  Synopsis IP prefix list
  Context configure application-assurance group number partition number policy app-filter entry number network-address neq ip-prefix-list reference
  Tree ip-prefix-list
 

Reference

configure application-assurance group number partition number ip-prefix-list string

 

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

protocol
  Synopsis Enter the protocol context
  Context configure application-assurance group number partition number policy app-filter entry number protocol
  Tree protocol
 

Description

Commands in this context configure the protocol signature in the application definition.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq (string | named-item)
  Synopsis Exact match criterion used for the AA protocol name
  Context configure application-assurance group number partition number policy app-filter entry number protocol eq (string | named-item)
  Tree eq
  String Length 1 to 32
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq (string | named-item)
  Synopsis Non-match criterion used for the AA protocol name
  Context configure application-assurance group number partition number policy app-filter entry number protocol neq (string | named-item)
  Tree neq
  String Length 1 to 32
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server-address
  Synopsis Enter the server-address context
  Context configure application-assurance group number partition number policy app-filter entry number server-address
  Tree server-address
 

Description

Commands in this context configure the server address to use for the application filter entry. The server address is the address on the server end of a client-server session.

 

Notes

The following elements are part of a choice: network-address or server-address.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq
  Synopsis Enter the eq context
  Context configure application-assurance group number partition number policy app-filter entry number server-address eq
  Tree eq
 

Description

Commands in this context configure the attributes of the IP address used for the exact match criterion for the application flow.                                                                            

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-ip-cache reference
  Synopsis DNS IP cache name
  Context configure application-assurance group number partition number policy app-filter entry number server-address eq dns-ip-cache reference
  Tree dns-ip-cache
 

Reference

configure application-assurance group number dns-ip-cache string

 

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, ip-prefix-list, or masked-ip.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)
  Synopsis IP prefix
  Context configure application-assurance group number partition number policy app-filter entry number server-address eq ip-prefix (ipv4-prefix | ipv6-prefix)
  Tree ip-prefix
 

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, ip-prefix-list, or masked-ip.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference
  Synopsis IP prefix list
  Context configure application-assurance group number partition number policy app-filter entry number server-address eq ip-prefix-list reference
  Tree ip-prefix-list
 

Reference

configure application-assurance group number partition number ip-prefix-list string

 

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, ip-prefix-list, or masked-ip.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

masked-ip
  Synopsis Enter the masked-ip context
  Context configure application-assurance group number partition number policy app-filter entry number server-address eq masked-ip
  Tree masked-ip
 

Description

Commands in this context configure the attributes of a masked IP address.

 

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, ip-prefix-list, or masked-ip.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

address (ipv4-address-no-zone | ipv6-address-no-zone)
  Synopsis IPv4 or IPv6 address mask
  Context configure application-assurance group number partition number policy app-filter entry number server-address eq masked-ip address (ipv4-address-no-zone | ipv6-address-no-zone)
  Tree address
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

netmask (ipv4-address-no-zone | ipv6-address-no-zone)
  Synopsis IPv4 or IPv6 address mask
  Context configure application-assurance group number partition number policy app-filter entry number server-address eq masked-ip netmask (ipv4-address-no-zone | ipv6-address-no-zone)
  Tree netmask
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq
  Synopsis Enter the neq context
  Context configure application-assurance group number partition number policy app-filter entry number server-address neq
  Tree neq
 

Description

Commands in this context configure the attributes of the IP address used for non-matching criteria in the application flow. 

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-ip-cache reference
  Synopsis DNS IP cache name
  Context configure application-assurance group number partition number policy app-filter entry number server-address neq dns-ip-cache reference
  Tree dns-ip-cache
 

Reference

configure application-assurance group number dns-ip-cache string

 

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, ip-prefix-list, or masked-ip.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)
  Synopsis IP prefix
  Context configure application-assurance group number partition number policy app-filter entry number server-address neq ip-prefix (ipv4-prefix | ipv6-prefix)
  Tree ip-prefix
 

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, ip-prefix-list, or masked-ip.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference
  Synopsis IP prefix list
  Context configure application-assurance group number partition number policy app-filter entry number server-address neq ip-prefix-list reference
  Tree ip-prefix-list
 

Reference

configure application-assurance group number partition number ip-prefix-list string

 

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, ip-prefix-list, or masked-ip.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

masked-ip
  Synopsis Enter the masked-ip context
  Context configure application-assurance group number partition number policy app-filter entry number server-address neq masked-ip
  Tree masked-ip
 

Description

Commands in this context configure the attributes of a masked IP address.

 

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, ip-prefix-list, or masked-ip.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

address (ipv4-address-no-zone | ipv6-address-no-zone)
  Synopsis IPv4 or IPv6 address mask
  Context configure application-assurance group number partition number policy app-filter entry number server-address neq masked-ip address (ipv4-address-no-zone | ipv6-address-no-zone)
  Tree address
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

netmask (ipv4-address-no-zone | ipv6-address-no-zone)
  Synopsis IPv4 or IPv6 address mask
  Context configure application-assurance group number partition number policy app-filter entry number server-address neq masked-ip netmask (ipv4-address-no-zone | ipv6-address-no-zone)
  Tree netmask
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server-port
  Synopsis Enter the server-port context
  Context configure application-assurance group number partition number policy app-filter entry number server-port
  Tree server-port
 

Description

Commands in this context specify the server TCP or UDP port number to use in the application definition.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq
  Synopsis Enter the eq context
  Context configure application-assurance group number partition number policy app-filter entry number server-port eq
  Tree eq
 

Description

Commands in this context configure the exact value as the match criterion for the server TCP or UDP number in the app-filter. 

 

Notes

The following elements are part of a choice: eq, gt, lt, or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

first-packet-policy keyword
  Synopsis First packet policy
  Context configure application-assurance group number partition number policy app-filter entry number server-port eq first-packet-policy keyword
  Tree first-packet-policy
 

Description

This command configures the action to perform on the first packet.

  Options first-packet-trusted, first-packet-validate
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference
  Synopsis Port-list name used in application filter criteria
  Context configure application-assurance group number partition number policy app-filter entry number server-port eq port-list reference
  Tree port-list
 

Reference

configure application-assurance group number partition number port-list string

 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number
  Synopsis Server port number used as match criterion
  Context configure application-assurance group number partition number policy app-filter entry number server-port eq port-number number
  Tree port-number
  Range 0 | 1 to 65535
  Default 0
 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range
  Synopsis Enter the range context
  Context configure application-assurance group number partition number policy app-filter entry number server-port eq range
  Tree range
 

Description

Commands in this context specify the match value as the match criterion based on the starting or ending port number.

 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number
  Synopsis TCP/UDP ending port number
  Context configure application-assurance group number partition number policy app-filter entry number server-port eq range end number
  Tree end
  Range 0 | 1 to 65535
  Default 1
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number
  Synopsis TCP/UDP starting port number
  Context configure application-assurance group number partition number policy app-filter entry number server-port eq range start number
  Tree start
  Range 0 | 1 to 65535
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gt
  Synopsis Enter the gt context
  Context configure application-assurance group number partition number policy app-filter entry number server-port gt
  Tree gt
 

Description

Commands in this context specify the greater than value as the match criterion for the server port number for the app-filter.

 

Notes

The following elements are part of a choice: eq, gt, lt, or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number
  Synopsis Server port number used as match criterion
  Context configure application-assurance group number partition number policy app-filter entry number server-port gt port-number number
  Tree port-number
  Range 0 | 1 to 65535
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

lt
  Synopsis Enter the lt context
  Context configure application-assurance group number partition number policy app-filter entry number server-port lt
  Tree lt
 

Description

Commands in this context specify the less than value as the match criterion for the server port number for the app-filter.

 

Notes

The following elements are part of a choice: eq, gt, lt, or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number
  Synopsis Server port number used as match criterion
  Context configure application-assurance group number partition number policy app-filter entry number server-port lt port-number number
  Tree port-number
  Range 0 | 1 to 65535
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq
  Synopsis Enter the neq context
  Context configure application-assurance group number partition number policy app-filter entry number server-port neq
  Tree neq
 

Description

Commands in this context configure non-match criterion used for the server TCP or UDP number in the app-filter. 

 

Notes

The following elements are part of a choice: eq, gt, lt, or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference
  Synopsis Port-list name used in application filter criteria
  Context configure application-assurance group number partition number policy app-filter entry number server-port neq port-list reference
  Tree port-list
 

Reference

configure application-assurance group number partition number port-list string

 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number
  Synopsis Server port number used as match criterion
  Context configure application-assurance group number partition number policy app-filter entry number server-port neq port-number number
  Tree port-number
  Range 0 | 1 to 65535
  Default 0
 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range
  Synopsis Enter the range context
  Context configure application-assurance group number partition number policy app-filter entry number server-port neq range
  Tree range
 

Description

Commands in this context specify the match value as the match criterion based on the starting or ending port number.

 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number
  Synopsis TCP/UDP ending port number
  Context configure application-assurance group number partition number policy app-filter entry number server-port neq range end number
  Tree end
  Range 0 | 1 to 65535
  Default 1
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number
  Synopsis TCP/UDP starting port number
  Context configure application-assurance group number partition number policy app-filter entry number server-port neq range start number
  Tree start
  Range 0 | 1 to 65535
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-group [application-group-name] string
  Synopsis Enter the app-group list instance
  Context configure application-assurance group number partition number policy app-group string
  Tree app-group
 

Description

Commands in this context create an application group for an application assurance policy.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[application-group-name] string
  Synopsis Application group name
  Context configure application-assurance group number partition number policy app-group string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

charging-group reference
  Synopsis Charging group used in the AA application group policy
  Context configure application-assurance group number partition number policy app-group string charging-group reference
  Tree charging-group
 

Reference

configure application-assurance group number partition number policy charging-group string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number policy app-group string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-id number
  Synopsis App group export ID used in RADIUS accounting export
  Context configure application-assurance group number partition number policy app-group string export-id number
  Tree export-id
 

Description

This command assigns an export ID value to a charging group, an application group, or an application that RADIUS accounting uses for accounting export identification. This export ID is encoded in the top two bytes of the RADIUS accounting VSA to identify which charging group the counter value represents.

If no export ID is assigned, the counter cannot be added to the AA subscriber stats RADIUS export-type. After a charging group index is referenced, it cannot be deleted without removing the reference.

  Range 1 to 255
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-profile [app-profile-name] string
  Synopsis Enter the app-profile list instance
  Context configure application-assurance group number partition number policy app-profile string
  Tree app-profile
 

Description

Commands in this context create an application profile and configure the profile parameters.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[app-profile-name] string
  Synopsis App-profile name
  Context configure application-assurance group number partition number policy app-profile string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub-suppressible boolean
  Synopsis Enable AA suppression for subs with this app profile
  Context configure application-assurance group number partition number policy app-profile string aa-sub-suppressible boolean
  Tree aa-sub-suppressible
 

Description

When configured to true, this command configures the ability to suppress Application Assurance for subscribers with this application profile. 

This function is used in the context of an SRRP group interface. If an SRRP group interface is configured as configure service ies subscriber-interface group-interface suppress-aa-sub or configure service vprn subscriber-interface group-interface suppress-aa-sub, then subscribers with an application profile configured as suppressible are not diverted to Application Assurance.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

capacity-cost number
  Synopsis Application profile capacity cost
  Context configure application-assurance group number partition number policy app-profile string capacity-cost number
  Tree capacity-cost
 

Description

This command configures an application profile capacity cost. 

Capacity cost based load balancing allows a cost to be assigned to diverted SAPs (with the application profile). This allows for load balancing SAPs between ISAs and acts as a threshold to notify the operator if capacity planning is exceeded.

  Range 1 to 65535
  Default 1
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

characteristic [characteristic-name] reference
  Synopsis Enter the characteristic list instance
  Context configure application-assurance group number partition number policy app-profile string characteristic reference
  Tree characteristic
 

Description

Commands in this context assign one of the existing values of an existing application service option characteristic to the application profile.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[characteristic-name] reference
  Synopsis Application service option characteristic name
  Context configure application-assurance group number partition number policy app-profile string characteristic reference
 

Reference

configure application-assurance group number partition number policy app-service-options characteristic string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value reference
  Synopsis ASO characteristic value name
  Context configure application-assurance group number partition number policy app-profile string characteristic reference value reference
  Tree value
 

Reference

configure application-assurance group number partition number policy app-service-options characteristic string value string

 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number policy app-profile string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

divert boolean
  Synopsis Enable traffic redirection to AA ISAs or ESA VMs
  Context configure application-assurance group number partition number policy app-profile string divert boolean
  Tree divert
 

Description

When configured to true, this command enables the redirection of traffic to AA ISAs or ESA VMs for the system-wide forwarding classes diverted to Application Assurance (configure isa application-assurance-group divert-fc) for AA subscribers using this application profile.

When configured to false, this command stops the redirection of traffic to AA ISAs or ESA VMs for the AA subscribers using this application profile.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-qos-policy
  Synopsis Enter the app-qos-policy context
  Context configure application-assurance group number partition number policy app-qos-policy
  Tree app-qos-policy
 

Description

Commands in this context configure an application QoS policy.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number
  Synopsis Enter the entry list instance
  Context configure application-assurance group number partition number policy app-qos-policy entry number
  Tree entry
 

Description

Commands in this context create an application QoS policy (AQP) entry. 

A flow that matches multiple AQP entries will have multiple AQP entries actions applied. If a conflict occurs for two or more actions, the action from the AQP entry with the lowest numerical value takes precedence.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number
  Synopsis AQP entry ID
  Context configure application-assurance group number partition number policy app-qos-policy entry number
  Range 1 to 65535
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action
  Synopsis Enter the action context
  Context configure application-assurance group number partition number policy app-qos-policy entry number action
  Tree action
 

Description

Commands in this context configure AQP actions to be performed on flows that match the match criteria of the AQP entry.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

abandon-tcp-optimization boolean
  Synopsis Abandon TCPO for this entry
  Context configure application-assurance group number partition number policy app-qos-policy entry number action abandon-tcp-optimization boolean
  Tree abandon-tcp-optimization
 

Description

When configured to true, this command disables TCPO for flows matching this AQP entry.

  Default false
  Introduced 22.2.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

bandwidth-policer
  Synopsis Enter the bandwidth-policer context
  Context configure application-assurance group number partition number policy app-qos-policy entry number action bandwidth-policer
  Tree bandwidth-policer
 

Description

Commands in this context assign an existing bandwidth policer as an action on flows matching this AQP entry. 

The match criteria for the AQP entry must specify a unidirectional traffic direction before a policer action can be configured. If a policer is used in one direction in an AQP match entry, the same policer name cannot be used by another AQP entry that uses different traffic direction match criteria. 

When multiple policers apply to a single flow, the final action on a packet is the worst case of all policer outcomes (for example, if one of the policers marks packet out of profile, the final marking will reflect that).

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

anl reference
  Synopsis Access network locator bandwidth policer
  Context configure application-assurance group number partition number policy app-qos-policy entry number action bandwidth-policer anl reference
  Tree anl
 

Description

This command creates an Application Assurance policy profile for a policer instance for each ANL that limits traffic bandwidth in the scope of that ANL. For ANL, only single-bucket bandwidth policers can be configured.

 

Reference

configure application-assurance group number policer anl-bandwidth-policer string

 

Notes

The following elements are part of a choice: anl, dual-bucket, or single-bucket.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dual-bucket reference
  Synopsis Dual bucket bandwidth limiting policer
  Context configure application-assurance group number partition number policy app-qos-policy entry number action bandwidth-policer dual-bucket reference
  Tree dual-bucket
 

Description

This command creates an Application Assurance policy profile for a dual bucket (PIR) bandwidth limiting policer.

 

Reference

configure application-assurance group number policer dual-bucket-bandwidth-policer string

 

Notes

The following elements are part of a choice: anl, dual-bucket, or single-bucket.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

single-bucket reference
  Synopsis Single bucket bandwidth limiting policer
  Context configure application-assurance group number partition number policy app-qos-policy entry number action bandwidth-policer single-bucket reference
  Tree single-bucket
 

Description

This command creates an Application Assurance policy profile for a single bucket (PIR) bandwidth limiting policer.

 

Reference

configure application-assurance group number policer single-bucket-bandwidth-policer string

 

Notes

The following elements are part of a choice: anl, dual-bucket, or single-bucket.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-ip-cache reference
  Synopsis DNS IP cache name
  Context configure application-assurance group number partition number policy app-qos-policy entry number action dns-ip-cache reference
  Tree dns-ip-cache
 

Reference

configure application-assurance group number dns-ip-cache string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

drop boolean
  Synopsis Enable drop action for the AQP entry
  Context configure application-assurance group number partition number policy app-qos-policy entry number action drop boolean
  Tree drop
 

Description

When configured to true, all flow traffic matching this AQP entry is dropped. 

The drop action is performed first and no other action is invoked on that flow even if multiple other actions exist for the flow because of one or more AQP entry matches.

When configured to false, this command disables the drop action on flows matching this AQP entry.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

error-drop
  Synopsis Enable the error-drop context
  Context configure application-assurance group number partition number policy app-qos-policy entry number action error-drop
  Tree error-drop
 

Description

Commands in this context configure a drop action for error flows (for instance, bad IP checksums or TCP/UDP port 0).

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference
  Synopsis Event log action for the AQP entry
  Context configure application-assurance group number partition number policy app-qos-policy entry number action error-drop event-log reference
  Tree event-log
 

Reference

configure application-assurance group number partition number event-log string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-count-limit-policer
  Synopsis Enter the flow-count-limit-policer context
  Context configure application-assurance group number partition number policy app-qos-policy entry number action flow-count-limit-policer
  Tree flow-count-limit-policer
 

Description

Commands in this context assign an existing flow count limit policer as an action on flows matching this AQP entry. 

The match criteria for the AQP entry must specify a unidirectional traffic direction before a policer action can be configured. If a policer is used in one direction in an AQP match entry, the same policer name cannot be used by another AQP entry that uses different traffic direction match criteria. 

When multiple policers are applied to a single flow, the final action on a packet is the worst case of all policer outcomes (for example, if one of the policers marks packet out of profile, the final marking will reflect that).

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference
  Synopsis Event log name
  Context configure application-assurance group number partition number policy app-qos-policy entry number action flow-count-limit-policer event-log reference
  Tree event-log
 

Reference

configure application-assurance group number partition number event-log string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

policer-name reference
  Synopsis Policer name
  Context configure application-assurance group number partition number policy app-qos-policy entry number action flow-count-limit-policer policer-name reference
  Tree policer-name
 

Description

This command specifies the name of the flow count limit policer for flows matching the AQP entry. The policer name is configured in the configure application-assurance group policer context.

 

Reference

configure application-assurance group number policer flow-count-limit-policer string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-setup-rate-policer
  Synopsis Enter the flow-setup-rate-policer context
  Context configure application-assurance group number partition number policy app-qos-policy entry number action flow-setup-rate-policer
  Tree flow-setup-rate-policer
 

Description

Commands in this context assign an existing flow setup rate policer as an action on flows matching this AQP entry.

The match criteria for the AQP entry must specify a unidirectional traffic direction before a policer action can be configured. If a policer is used in one direction in an AQP match entry, the same policer name cannot be used for another AQP entry that uses different traffic direction match criteria.

When multiple policers are applied to a single flow, the final action on a packet is the worst case of all policer outcomes (for example, if one of the policers marks a packet out of profile, the final marking reflects that).

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference
  Synopsis Flow drop events log name due to flow-setup rate policer
  Context configure application-assurance group number partition number policy app-qos-policy entry number action flow-setup-rate-policer event-log reference
  Tree event-log
 

Reference

configure application-assurance group number partition number event-log string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

policer-name reference
  Synopsis Policer name
  Context configure application-assurance group number partition number policy app-qos-policy entry number action flow-setup-rate-policer policer-name reference
  Tree policer-name
 

Description

This command specifies the name of the flow setup rate policer for flows matching this AQP entry.

 

Reference

configure application-assurance group number policer flow-setup-rate-policer string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

fragment-drop
  Synopsis Enter the fragment-drop context
  Context configure application-assurance group number partition number policy app-qos-policy entry number action fragment-drop
  Tree fragment-drop
 

Description

Commands in this context specify the drop action options to apply to fragments.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

drop-scope keyword
  Synopsis Fragment-drop scope
  Context configure application-assurance group number partition number policy app-qos-policy entry number action fragment-drop drop-scope keyword
  Tree drop-scope
 

Description

This command specifies which fragments to drop as an action on flows matching this AQP entry.

  Options all, out-of-order
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference
  Synopsis Event log name
  Context configure application-assurance group number partition number policy app-qos-policy entry number action fragment-drop event-log reference
  Tree event-log
 

Reference

configure application-assurance group number partition number event-log string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtp-filter reference
  Synopsis GTP filter executed for flows matching this AQP entry
  Context configure application-assurance group number partition number policy app-qos-policy entry number action gtp-filter reference
  Tree gtp-filter
 

Reference

configure application-assurance group number partition number gtp gtp-filter string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-enrich reference
  Synopsis HTTP header enrichment action for the AQP entry
  Context configure application-assurance group number partition number policy app-qos-policy entry number action http-enrich reference
  Tree http-enrich
 

Description

This command configures the HTTP header enrichment template name that is applied as defined in the tmnxBsxHttpEnrichTable. An empty value specifies no HTTP header enrichment template.

 

Reference

configure application-assurance group number http-enrich string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-error-redirect reference
  Synopsis HTTP error redirect for the AQP entry
  Context configure application-assurance group number partition number policy app-qos-policy entry number action http-error-redirect reference
  Tree http-error-redirect
 

Description

This command specifies the HTTP error redirect that is applied as defined in the redirect table. An empty value specifies no HTTP error redirect.

 

Reference

configure application-assurance group number http-error-redirect string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-notification reference
  Synopsis HTTP notification to use for flows matching AQP entry
  Context configure application-assurance group number partition number policy app-qos-policy entry number action http-notification reference
  Tree http-notification
 

Reference

configure application-assurance group number http-notification string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-redirect
  Synopsis Enter the http-redirect context
  Context configure application-assurance group number partition number policy app-qos-policy entry number action http-redirect
  Tree http-redirect
 

Description

Commands in this context assign an existing HTTP redirect policy as an action on flows matching this AQP entry. 

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-type keyword
  Synopsis Flow type for HTTP redirect of flows matching the entry
  Context configure application-assurance group number partition number policy app-qos-policy entry number action http-redirect flow-type keyword
  Tree flow-type
 

Description

This command assigns an existing HTTP redirect policy as an action on flows matching this AQP entry. The redirect only takes effect if the matching flows are HTTP and the condition specified is met. 

The condition specified by dropped flows means the flow is dropped due to an AQP action, such as flow rate, count policers, or drop actions. The admitted flows condition allows the operator to redirect HTTP traffic to a web portal while allowing non-HTTP traffic matching the same AQP rule to be forwarded.

No HTTP redirect takes place if the HTTP redirect action and a drop/flow-police action are part of the default AQP policy. In this case, any flow drop actions take place before identification of the application/application-group.

  Options dropped-flows, admitted-flows
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

name reference
  Synopsis HTTP redirect policy name
  Context configure application-assurance group number partition number policy app-qos-policy entry number action http-redirect name reference
  Tree name
 

Description

This command specifies the name of an existing HTTP policy redirect.

 

Reference

configure application-assurance group number http-redirect string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mirror-source
  Synopsis Enter the mirror-source context
  Context configure application-assurance group number partition number policy app-qos-policy entry number action mirror-source
  Tree mirror-source
 

Description

Commands in this context configure an application-based policy mirroring service that uses the AQP entry of this AA ISA as a mirror source. 

When configured, the AQP entry becomes a mirror source for IP packets seen by AA. The mirrored packet is an IP packet analyzed by AA and does not include encapsulations present on the incoming interfaces.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

all-inclusive boolean
  Synopsis Mirror flows matching the AQP subscriber default policy
  Context configure application-assurance group number partition number policy app-qos-policy entry number action mirror-source all-inclusive boolean
  Tree all-inclusive
 

Description

This command specifies that all packets during the identification phase that could match a given AQP rule are mirrored in addition to packets after an application identification completes that match the AQP rule. This ensures that all packets of a flow are mirrored at a cost of sending some unidentified packets, which after the application is identified no longer match this AQP entry.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mirror-service reference
  Synopsis Mirror source service ID for flows matching the entry
  Context configure application-assurance group number partition number policy app-qos-policy entry number action mirror-source mirror-service reference
  Tree mirror-service
 

Description

This command specifies the mirror source service ID to use for flows that match this policy.

 

Reference

configure mirror mirror-dest string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

overload-drop
  Synopsis Enable the overload-drop context
  Context configure application-assurance group number partition number policy app-qos-policy entry number action overload-drop
  Tree overload-drop
 

Description

Commands in this context configure a drop action for cases where flow records are not created (overload). This command is only applicable to ISA2 hardware.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference
  Synopsis Event log name
  Context configure application-assurance group number partition number policy app-qos-policy entry number action overload-drop event-log reference
  Tree event-log
 

Reference

configure application-assurance group number partition number event-log string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

remark
  Synopsis Enter the remark context
  Context configure application-assurance group number partition number policy app-qos-policy entry number action remark
  Tree remark
 

Description

Commands in this context configure the remark action on flows matching this AQP entry.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dscp
  Synopsis Enter the dscp context
  Context configure application-assurance group number partition number policy app-qos-policy entry number action remark dscp
  Tree dscp
 

Description

Commands in this context configure the DSCP remark action or actions on flows matching this AQP entry. 

All packets for all flows matching this AQP entry are remarked to the configured DSCP name. 

DSCP remark can only be applied when the entry remarks forwarding class or forwarding class and priority. In-profile and out-of-profile of a packet for DSCP remark is assessed after all AQP policing and priority remarking actions have taken place.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

in-profile keyword
  Synopsis DSCP name to remark matching in-profile flows
  Context configure application-assurance group number partition number policy app-qos-policy entry number action remark dscp in-profile keyword
  Tree in-profile
  Options be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

out-profile keyword
  Synopsis DSCP name to remark matching out-of-profile flows
  Context configure application-assurance group number partition number policy app-qos-policy entry number action remark dscp out-profile keyword
  Tree out-profile
  Options be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

fc keyword
  Synopsis FC remark action for flows matching this entry
  Context configure application-assurance group number partition number policy app-qos-policy entry number action remark fc keyword
  Tree fc
  Options be, l2, af, l1, h2, ef, h1, nc
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

priority keyword
  Synopsis Priority to use to remark flows matching this entry
  Context configure application-assurance group number partition number policy app-qos-policy entry number action remark priority keyword
  Tree priority
  Default auto
  Options low, high, auto
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sctp-filter reference
  Synopsis SCTP filter to use for flows matching the AQP entry
  Context configure application-assurance group number partition number policy app-qos-policy entry number action sctp-filter reference
  Tree sctp-filter
 

Reference

configure application-assurance group number partition number sctp-filter string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-filter reference
  Synopsis Session filter to use for flows matching the AQP entry
  Context configure application-assurance group number partition number policy app-qos-policy entry number action session-filter reference
  Tree session-filter
 

Reference

configure application-assurance group number partition number session-filter string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-mss-adjust number
  Synopsis TCP MSS adjustment traffic action and size
  Context configure application-assurance group number partition number policy app-qos-policy entry number action tcp-mss-adjust number
  Tree tcp-mss-adjust
  Range 160 to 10240
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-validate reference
  Synopsis TCP validation policy action for entry matching flows
  Context configure application-assurance group number partition number policy app-qos-policy entry number action tcp-validate reference
  Tree tcp-validate
 

Description

This command assigns an existing TCP validation policy as an action on flows matching this AQP entry.

TCP validation can only be called from AQP entries that:

  • have no matching conditions that relate to information extracted from the incoming IP packets; for example, no application or IP address.

  • allow the following match conditions: none, aa-sub, characteristic, traffic-direction (both only), traffic-direction cannot be unidirectional (from or to sub). It can either be set to both or left unspecified.

 

Reference

configure application-assurance group number partition number tcp-validate string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tls-enrich reference
  Synopsis HTTP TLS enrichment action for the AQP entry
  Context configure application-assurance group number partition number policy app-qos-policy entry number action tls-enrich reference
  Tree tls-enrich
 

Reference

configure application-assurance group number http-enrich string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

url-filter
  Synopsis Enter the url-filter context
  Context configure application-assurance group number partition number policy app-qos-policy entry number action url-filter
  Tree url-filter
 

Description

Commands in this context configure a URL filter action for flows matching this entry.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

characteristic reference
  Synopsis URL filter characteristic used for matching AQP entries
  Context configure application-assurance group number partition number policy app-qos-policy entry number action url-filter characteristic reference
  Tree characteristic
 

Reference

configure application-assurance group number partition number policy app-service-options characteristic string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

name reference
  Synopsis URL filter name
  Context configure application-assurance group number partition number policy app-qos-policy entry number action url-filter name reference
  Tree name
 

Reference

configure application-assurance group number url-filter string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the AA AQP entry
  Context configure application-assurance group number partition number policy app-qos-policy entry number admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number policy app-qos-policy entry number description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

match
  Synopsis Enter the match context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match
  Tree match
 

Description

Commands in this context configure flow match rules for this AQP entry. A flow matches this AQP entry only if it matches all match rules defined (logical AND of all rules). If no match rule is specified, the entry will match all flows. 

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub
  Synopsis Enter the aa-sub context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub
  Tree aa-sub
 

Description

Commands in this context specify a Service Access Point (SAP) or an Enhanced Subscriber Management (ESM) subscriber as matching criteria.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

esm
  Synopsis Enter the esm context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub esm
  Tree esm
 

Description

Commands in this context configure the ESM fields for the AA subscriber match entry.

 

Notes

The following elements are part of a choice: esm, esm-mac, sap, spoke-sdp, or transit.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq string
  Synopsis Exact match criterion used for the ESM subscriber
  Context configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub esm eq string
  Tree eq
  String Length 1 to 32
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq string
  Synopsis Non-match criterion used for ESM subscriber
  Context configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub esm neq string
  Tree neq
  String Length 1 to 32
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

esm-mac
  Synopsis Enter the esm-mac context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub esm-mac
  Tree esm-mac
 

Description

Commands in this context configure the ESM MAC fields for the AA subscriber match entry.

 

Notes

The following elements are part of a choice: esm, esm-mac, sap, spoke-sdp, or transit.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq string
  Synopsis Exact match criterion used for ESM MAC subscriber
  Context configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub esm-mac eq string
  Tree eq
  String Length 1 to 32
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq string
  Synopsis Non-match criterion used for AA subscriber ESM MAC
  Context configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub esm-mac neq string
  Tree neq
  String Length 1 to 32
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sap
  Synopsis Enter the sap context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub sap
  Tree sap
 

Description

Commands in this context configure the SAP fields for the AA subscriber match entry.

 

Notes

The following elements are part of a choice: esm, esm-mac, sap, spoke-sdp, or transit.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq string
  Synopsis Exact match criterion used for the SAP subscriber
  Context configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub sap eq string
  Tree eq
  String Length 1 to 45
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq string
  Synopsis Non-match criterion used for the SAP subscriber
  Context configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub sap neq string
  Tree neq
  String Length 1 to 45
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

spoke-sdp
  Synopsis Enter the spoke-sdp context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub spoke-sdp
  Tree spoke-sdp
 

Description

Commands in this context configure the spoke SDP fields for the AA subscriber match entry.

 

Notes

The following elements are part of a choice: esm, esm-mac, sap, spoke-sdp, or transit.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq string
  Synopsis Exact match criterion used for a spoke SDP subscriber
  Context configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub spoke-sdp eq string
  Tree eq
  String Length 3 to 16
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq string
  Synopsis Non-match criterion used for a spoke SDP subscriber
  Context configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub spoke-sdp neq string
  Tree neq
  String Length 3 to 16
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

transit
  Synopsis Enter the transit context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub transit
  Tree transit
 

Description

Commands in this context configure the transit fields for the AA subscriber match entry.

 

Notes

The following elements are part of a choice: esm, esm-mac, sap, spoke-sdp, or transit.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq string
  Synopsis Exact match criterion used for a transit AA subscriber
  Context configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub transit eq string
  Tree eq
  String Length 1 to 32
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq string
  Synopsis Non-match criterion used for a transit AA subscriber
  Context configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub transit neq string
  Tree neq
  String Length 1 to 32
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub-tethering keyword
  Synopsis Tethering detection status for flow match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match aa-sub-tethering keyword
  Tree aa-sub-tethering
 

Description

This command configures the match criteria for subscribers in a tethering state.

  Default not-applicable
  Options not-applicable, detected, not-detected
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-group
  Synopsis Enter the app-group context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match app-group
  Tree app-group
 

Description

Commands in this context add an application group to the match criteria used by this AQP entry.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq reference
  Synopsis Exact match criterion used for the application group
  Context configure application-assurance group number partition number policy app-qos-policy entry number match app-group eq reference
  Tree eq
 

Reference

configure application-assurance group number partition number policy app-group string

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq reference
  Synopsis Non-match criterion used for the application group
  Context configure application-assurance group number partition number policy app-qos-policy entry number match app-group neq reference
  Tree neq
 

Reference

configure application-assurance group number partition number policy app-group string

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

application
  Synopsis Enter the application context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match application
  Tree application
 

Description

Commands in this context add an application to match criteria used by this AQP entry.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq reference
  Synopsis Exact match criterion used for the application
  Context configure application-assurance group number partition number policy app-qos-policy entry number match application eq reference
  Tree eq
 

Reference

configure application-assurance group number partition number policy application string

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq reference
  Synopsis Non-match criterion used for the application
  Context configure application-assurance group number partition number policy app-qos-policy entry number match application neq reference
  Tree neq
 

Reference

configure application-assurance group number partition number policy application string

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

characteristic [characteristic-name] reference
  Synopsis Enter the characteristic list instance
  Context configure application-assurance group number partition number policy app-qos-policy entry number match characteristic reference
  Tree characteristic
 

Description

Commands in this context configure an existing characteristic and its value to the match criteria used by this AQP entry.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[characteristic-name] reference
  Synopsis ASO characteristic name for AQP entry matching
  Context configure application-assurance group number partition number policy app-qos-policy entry number match characteristic reference
 

Reference

configure application-assurance group number partition number policy app-service-options characteristic string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq reference
  Synopsis Match criterion used for AQP match characteristic
  Context configure application-assurance group number partition number policy app-qos-policy entry number match characteristic reference eq reference
  Tree eq
 

Reference

configure application-assurance group number partition number policy app-service-options characteristic string value string

 

Notes

The following elements are part of a mandatory choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq reference
  Synopsis Non-match criterion used for AQP match characteristic
  Context configure application-assurance group number partition number policy app-qos-policy entry number match characteristic reference neq reference
  Tree neq
 

Reference

configure application-assurance group number partition number policy app-service-options characteristic string value string

 

Notes

The following elements are part of a mandatory choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

charging-group
  Synopsis Enter the charging-group context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match charging-group
  Tree charging-group
 

Description

Commands in this context add a charging group to match criteria used by this AQP entry.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq reference
  Synopsis Match criterion used for the charging group
  Context configure application-assurance group number partition number policy app-qos-policy entry number match charging-group eq reference
  Tree eq
 

Reference

configure application-assurance group number partition number policy charging-group string

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq reference
  Synopsis Non-match criterion used for the charging group
  Context configure application-assurance group number partition number policy app-qos-policy entry number match charging-group neq reference
  Tree neq
 

Reference

configure application-assurance group number partition number policy charging-group string

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dscp
  Synopsis Enter the dscp context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dscp
  Tree dscp
 

Description

Commands in this context add a DSCP name to the match criteria used by this entry.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq keyword
  Synopsis Exact match criterion used for the DSCP
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dscp eq keyword
  Tree eq
  Options be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq keyword
  Synopsis Non-match criterion used for the DSCP
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dscp neq keyword
  Tree neq
  Options be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-ip
  Synopsis Enter the dst-ip context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-ip
  Tree dst-ip
 

Description

Commands in this context configure a destination IP address to use as match criteria.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq
  Synopsis Enter the eq context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-ip eq
  Tree eq
 

Description

Commands in this context specify the exact match value as the match criterion. A successful match occurs when the flow matches the specified address or prefix.

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)
  Synopsis IP address prefix used for match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-ip eq ip-prefix (ipv4-prefix | ipv6-prefix)
  Tree ip-prefix
 

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference
  Synopsis IP address prefix list used for match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-ip eq ip-prefix-list reference
  Tree ip-prefix-list
 

Reference

configure application-assurance group number partition number ip-prefix-list string

 

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq
  Synopsis Enter the neq context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-ip neq
  Tree neq
 

Description

Commands in this context specify the non-match value as the match criterion. A successful match occurs when the flow does not match the specified address or prefix.

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)
  Synopsis IP address prefix used for match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-ip neq ip-prefix (ipv4-prefix | ipv6-prefix)
  Tree ip-prefix
 

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference
  Synopsis IP address prefix list used for match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-ip neq ip-prefix-list reference
  Tree ip-prefix-list
 

Reference

configure application-assurance group number partition number ip-prefix-list string

 

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-port
  Synopsis Enter the dst-port context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-port
  Tree dst-port
 

Description

Commands in this context configure a destination TCP/UDP port, a destination port list, or a destination range to use as match criteria.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq
  Synopsis Enter the eq context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-port eq
  Tree eq
 

Description

Commands in this context specify the exact match criterion. A successful match occurs when the flow matches the specified port.

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference
  Synopsis IP port list used as match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-port eq port-list reference
  Tree port-list
 

Reference

configure application-assurance group number partition number port-list string

 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number
  Synopsis Server port number used as match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-port eq port-number number
  Tree port-number
  Range 0 | 1 to 65535
  Default 0
 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range
  Synopsis Enter the range context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-port eq range
  Tree range
 

Description

Commands in this context specify the match value as the match criterion based on the starting or ending port number.

 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number
  Synopsis TCP/UDP ending port number
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-port eq range end number
  Tree end
  Range 0 | 1 to 65535
  Default 1
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number
  Synopsis TCP/UDP starting port number
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-port eq range start number
  Tree start
  Range 0 | 1 to 65535
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq
  Synopsis Enter the neq context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-port neq
  Tree neq
 

Description

Commands in this context specify the non-match value as the match criterion. A successful match occurs when the flow does not match the specified port.

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference
  Synopsis IP port list used as match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-port neq port-list reference
  Tree port-list
 

Reference

configure application-assurance group number partition number port-list string

 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number
  Synopsis Server port number used as match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-port neq port-number number
  Tree port-number
  Range 0 | 1 to 65535
  Default 0
 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range
  Synopsis Enter the range context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-port neq range
  Tree range
 

Description

Commands in this context specify the match value as the match criterion based on the starting or ending port number.

 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number
  Synopsis TCP/UDP ending port number
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-port neq range end number
  Tree end
  Range 0 | 1 to 65535
  Default 1
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number
  Synopsis TCP/UDP starting port number
  Context configure application-assurance group number partition number policy app-qos-policy entry number match dst-port neq range start number
  Tree start
  Range 0 | 1 to 65535
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-attribute [flow-attribute-name] string
  Synopsis Enter the flow-attribute list instance
  Context configure application-assurance group number partition number policy app-qos-policy entry number match flow-attribute string
  Tree flow-attribute
 

Description

Commands in this context configure a flow attribute to use as match criteria. The supported options are: 

  • abr_service

  • audio

  • download

  • encrypted

  • esni

  • real_time_communication

  • upload

  • video

  Max. Instances 10
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[flow-attribute-name] string
  Synopsis Flow attribute name used as match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match flow-attribute string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

confidence
  Synopsis Enter the confidence context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match flow-attribute string confidence
  Tree confidence
 

Description

Commands in this context configure the confidence level of the flow attribute for use as match criteria.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq number
  Synopsis Exact match criterion used for the flow-attribute confidence
  Context configure application-assurance group number partition number policy app-qos-policy entry number match flow-attribute string confidence eq number
  Tree eq
  Range 0 to 100
 

Notes

The following elements are part of a choice: eq, gte, or lt.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gte number
  Synopsis Greater than or equal to for confidence match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match flow-attribute string confidence gte number
  Tree gte
  Range 0 to 100
 

Notes

The following elements are part of a choice: eq, gte, or lt.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

lt number
  Synopsis Less than value for confidence match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match flow-attribute string confidence lt number
  Tree lt
  Range 1 to 100
 

Notes

The following elements are part of a choice: eq, gte, or lt.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-protocol
  Synopsis Enter the ip-protocol context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match ip-protocol
  Tree ip-protocol
 

Description

Commands in this context configure the IP protocol to use in the application definition.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq (number | keyword)
  Synopsis Exact match criterion used for the IP protocol
  Context configure application-assurance group number partition number policy app-qos-policy entry number match ip-protocol eq (number | keyword)
  Tree eq
  Range 0 to 255
  Options tcp-udp, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route, ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq (number | keyword)
  Synopsis Non-match criterion used for the IP protocol
  Context configure application-assurance group number partition number policy app-qos-policy entry number match ip-protocol neq (number | keyword)
  Tree neq
  Range 0 to 255
  Options tcp-udp, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route, ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp
 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

src-ip
  Synopsis Enter the src-ip context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-ip
  Tree src-ip
 

Description

Commands in this context configure a source IP address to use as match criteria.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq
  Synopsis Enter the eq context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-ip eq
  Tree eq
 

Description

Commands in this context specify the exact match value as the match criterion. A successful match occurs when the flow matches the specified address or prefix.

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)
  Synopsis IP address prefix used for match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-ip eq ip-prefix (ipv4-prefix | ipv6-prefix)
  Tree ip-prefix
 

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference
  Synopsis IP address prefix list used for match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-ip eq ip-prefix-list reference
  Tree ip-prefix-list
 

Reference

configure application-assurance group number partition number ip-prefix-list string

 

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq
  Synopsis Enter the neq context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-ip neq
  Tree neq
 

Description

Commands in this context specify the non-match value as the match criterion. A successful match occurs when the flow does not match the specified address or prefix.

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)
  Synopsis IP address prefix used for match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-ip neq ip-prefix (ipv4-prefix | ipv6-prefix)
  Tree ip-prefix
 

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference
  Synopsis IP address prefix list used for match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-ip neq ip-prefix-list reference
  Tree ip-prefix-list
 

Reference

configure application-assurance group number partition number ip-prefix-list string

 

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

src-port
  Synopsis Enter the src-port context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-port
  Tree src-port
 

Description

Commands in this context specify a source IP port, a source port list, or a source range to use as match criteria.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq
  Synopsis Enter the eq context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-port eq
  Tree eq
 

Description

Commands in this context specify the exact match criterion. A successful match occurs when the flow matches the specified port.

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference
  Synopsis IP port list used as match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-port eq port-list reference
  Tree port-list
 

Reference

configure application-assurance group number partition number port-list string

 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number
  Synopsis Server port number used as match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-port eq port-number number
  Tree port-number
  Range 0 | 1 to 65535
  Default 0
 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range
  Synopsis Enter the range context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-port eq range
  Tree range
 

Description

Commands in this context specify the match value as the match criterion based on the starting or ending port number.

 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number
  Synopsis TCP/UDP ending port number
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-port eq range end number
  Tree end
  Range 0 | 1 to 65535
  Default 1
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number
  Synopsis TCP/UDP starting port number
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-port eq range start number
  Tree start
  Range 0 | 1 to 65535
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

neq
  Synopsis Enter the neq context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-port neq
  Tree neq
 

Description

Commands in this context specify the non-match value as the match criterion. A successful match occurs when the flow does not match the specified port.

 

Notes

The following elements are part of a choice: eq or neq.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference
  Synopsis IP port list used as match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-port neq port-list reference
  Tree port-list
 

Reference

configure application-assurance group number partition number port-list string

 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-number number
  Synopsis Server port number used as match criterion
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-port neq port-number number
  Tree port-number
  Range 0 | 1 to 65535
  Default 0
 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range
  Synopsis Enter the range context
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-port neq range
  Tree range
 

Description

Commands in this context specify the match value as the match criterion based on the starting or ending port number.

 

Notes

The following elements are part of a choice: port-list, port-number, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number
  Synopsis TCP/UDP ending port number
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-port neq range end number
  Tree end
  Range 0 | 1 to 65535
  Default 1
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number
  Synopsis TCP/UDP starting port number
  Context configure application-assurance group number partition number policy app-qos-policy entry number match src-port neq range start number
  Tree start
  Range 0 | 1 to 65535
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

traffic-direction keyword
  Synopsis Traffic direction to which AQP match entry is applied
  Context configure application-assurance group number partition number policy app-qos-policy entry number match traffic-direction keyword
  Tree traffic-direction
  Default both
  Options subscriber-to-network, network-to-subscriber, both
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-service-options
  Synopsis Enter the app-service-options context
  Context configure application-assurance group number partition number policy app-service-options
  Tree app-service-options
 

Description

Commands in this context configure application service option characteristics.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

characteristic [characteristic-name] string
  Synopsis Enter the characteristic list instance
  Context configure application-assurance group number partition number policy app-service-options characteristic string
  Tree characteristic
 

Description

Commands in this context create the characteristic of the application service options.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[characteristic-name] string
  Synopsis ASO characteristic name
  Context configure application-assurance group number partition number policy app-service-options characteristic string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-value string
  Synopsis ASO characteristic default value
  Context configure application-assurance group number partition number policy app-service-options characteristic string default-value string
  Tree default-value
  String Length 1 to 32
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value [value-name] string
  Synopsis Add a list entry for value
  Context configure application-assurance group number partition number policy app-service-options characteristic string value string
  Tree value
 

Description

Commands in this context configure a characteristic value.

  Max. Instances 64
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[value-name] string
  Synopsis ASO characteristic value name
  Context configure application-assurance group number partition number policy app-service-options characteristic string value string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

application [application-name] string
  Synopsis Enter the application list instance
  Context configure application-assurance group number partition number policy application string
  Tree application
 

Description

Commands in this context configure the policy application of the Application Assurance group partition.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[application-name] string
  Synopsis Application name
  Context configure application-assurance group number partition number policy application string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-group reference
  Synopsis Application group associated with the application
  Context configure application-assurance group number partition number policy application string app-group reference
  Tree app-group
 

Reference

configure application-assurance group number partition number policy app-group string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

charging-group reference
  Synopsis Charging group associated with the application
  Context configure application-assurance group number partition number policy application string charging-group reference
  Tree charging-group
 

Reference

configure application-assurance group number partition number policy charging-group string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number policy application string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-id number
  Synopsis Application export ID used for RADIUS accounting
  Context configure application-assurance group number partition number policy application string export-id number
  Tree export-id
  Range 1 to 255
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

charging-group [charging-group-name] string
  Synopsis Enter the charging-group list instance
  Context configure application-assurance group number partition number policy charging-group string
  Tree charging-group
 

Description

Commands in this context create a charging group for an Application Assurance policy.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[charging-group-name] string
  Synopsis Charging group name
  Context configure application-assurance group number partition number policy charging-group string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number policy charging-group string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-id number
  Synopsis Charging group export ID used for RADIUS accounting
  Context configure application-assurance group number partition number policy charging-group string export-id number
  Tree export-id
 

Description

This command assigns an export ID value to a charging group, an app application group, or an application to be used for accounting export identification in RADIUS accounting. This ID is encoded in the top 2 bytes of the RADIUS accounting VSA to identify which charging group the counter value represents.

  Range 1 to 255
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

notify-start-stop keyword
  Synopsis Start and stop notification for the charging group
  Context configure application-assurance group number partition number policy charging-group string notify-start-stop keyword
  Tree notify-start-stop
  Default none
  Options none, flow, charging-group
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

custom-protocol [custom-protocol-id] string
  Synopsis Enter the custom-protocol list instance
  Context configure application-assurance group number partition number policy custom-protocol string
  Tree custom-protocol
 

Description

Commands in this context configure custom protocols. 

Custom protocols allow the creation of TCP and UDP-based custom protocols that employ pattern-match at offset in the protocol signature definition.

Operator-configurable custom protocols are evaluated ahead of any Nokia-provided protocol signature in order of custom protocol ID within the context the protocol is defined. The lower ID is matched first in case of flow matching multiple custom protocols.

Custom protocols must be created before they can be used in an application definition but do not have to be enabled. To reference a custom protocol in an application definition, or any other CLI configuration one must use the protocol name that is a concatenation of “custom_” and, (for example, custom_01, custom_02 ... custom_10, and so on). This concatenation is also used when reporting custom protocol statistics.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[custom-protocol-id] string
  Synopsis Custom protocol ID for the AA policy custom protocol
  Context configure application-assurance group number partition number policy custom-protocol string
 

Description

This command configures the index into the protocol list that defines a custom protocol for Application Assurance.

  String Length 9
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the custom protocol
  Context configure application-assurance group number partition number policy custom-protocol string admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number policy custom-protocol string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

expression [expr-index] number
  Synopsis Enter the expression list instance
  Context configure application-assurance group number partition number policy custom-protocol string expression number
  Tree expression
 

Description

Commands in this context configure an expression string value for pattern-based custom protocols match. 

A flow matches a custom protocol if the specified string is found at an offset of a TCP/UDP of the first payload packet.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[expr-index] number
  Synopsis Expression substring index for custom protocol matching
  Context configure application-assurance group number partition number policy custom-protocol string expression number
  Range 1
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword
  Synopsis Flow direction for custom-protocol expression matching
  Context configure application-assurance group number partition number policy custom-protocol string expression number direction keyword
  Tree direction
 

Description

This command configures the protocol direction to match against for a custom protocol.

  Options client-to-server, server-to-client, any
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq string
  Synopsis Exact match criterion for custom protocol expression
  Context configure application-assurance group number partition number policy custom-protocol string expression number eq string
  Tree eq
  String Length 1 to 255
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

offset number
  Synopsis Offset in protocol flow to start custom-protocol match
  Context configure application-assurance group number partition number policy custom-protocol string expression number offset number
  Tree offset
 

Description

This command configures the offset into the protocol payload where the expr-string match criteria starts.

  Range 0 to 127
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-protocol keyword
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.

  Synopsis IP protocol number for custom-protocol match criterion
  Context configure application-assurance group number partition number policy custom-protocol string ip-protocol keyword
  Tree ip-protocol
 

Description

This command configures the IP protocol number of the TCP and UDP-based custom protocols.

  Options tcp, udp
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-charging-group reference
  Synopsis Default charging group
  Context configure application-assurance group number partition number policy default-charging-group reference
  Tree default-charging-group
 

Description

This command associates a charging group with any applications or application groups that do not have an explicitly assigned charging group for the Application Assurance policy.  

 

Reference

configure application-assurance group number partition number policy charging-group string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-tethered-charging-group reference
  Synopsis Default charging group for tethered traffic
  Context configure application-assurance group number partition number policy default-tethered-charging-group reference
  Tree default-tethered-charging-group
 

Description

This command configures the default charging group to be assigned to all flows which are classified as tethered.

For flows that have been identified as tethered, the AA will replace the charging group configured at the application level with the charging group configured for tethered traffic (that is, configured with default-tethered-charging-group).

 

Reference

configure application-assurance group number partition number policy charging-group string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

policy-override
  Synopsis Enter the policy-override context
  Context configure application-assurance group number partition number policy-override
  Tree policy-override
 

Description

Commands in this context configure policy override parameters.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub
  Synopsis Enter the aa-sub context
  Context configure application-assurance group number partition number policy-override aa-sub
  Tree aa-sub
 

Description

Commands in this context configure the AA policy override subscriber fields.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sap [sap-id] string
  Synopsis Enter the sap list instance
  Context configure application-assurance group number partition number policy-override aa-sub sap string
  Tree sap
 

Description

Commands in this context configure the Service Access Point (SAP) within the partition.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[sap-id] string
  Synopsis AA subscriber SAP ID
  Context configure application-assurance group number partition number policy-override aa-sub sap string
  String Length 1 to 45
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

characteristic [characteristic-name] reference
  Synopsis Enter the characteristic list instance
  Context configure application-assurance group number partition number policy-override aa-sub sap string characteristic reference
  Tree characteristic
 

Description

Commands in this context configure an override characteristic and value.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[characteristic-name] reference
  Synopsis ASO characteristic name
  Context configure application-assurance group number partition number policy-override aa-sub sap string characteristic reference
 

Reference

configure application-assurance group number partition number policy app-service-options characteristic string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value reference
  Synopsis Characteristic value used in subscriber policy override
  Context configure application-assurance group number partition number policy-override aa-sub sap string characteristic reference value reference
  Tree value
 

Reference

configure application-assurance group number partition number policy app-service-options characteristic string value string

 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

spoke-sdp [sdp-bind-id] string
  Synopsis Enter the spoke-sdp list instance
  Context configure application-assurance group number partition number policy-override aa-sub spoke-sdp string
  Tree spoke-sdp
 

Description

Commands in this context configure the Service Distribution Point (SDP) for the policy override.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[sdp-bind-id] string
  Synopsis Spoke SDP ID for an AA subscriber
  Context configure application-assurance group number partition number policy-override aa-sub spoke-sdp string
  String Length 3 to 16
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

characteristic [characteristic-name] reference
  Synopsis Enter the characteristic list instance
  Context configure application-assurance group number partition number policy-override aa-sub spoke-sdp string characteristic reference
  Tree characteristic
 

Description

Commands in this context configure an override characteristic and value.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[characteristic-name] reference
  Synopsis ASO characteristic name
  Context configure application-assurance group number partition number policy-override aa-sub spoke-sdp string characteristic reference
 

Reference

configure application-assurance group number partition number policy app-service-options characteristic string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value reference
  Synopsis Characteristic value used in subscriber policy override
  Context configure application-assurance group number partition number policy-override aa-sub spoke-sdp string characteristic reference value reference
  Tree value
 

Reference

configure application-assurance group number partition number policy app-service-options characteristic string value string

 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

transit [transit-sub-name] string
  Synopsis Enter the transit list instance
  Context configure application-assurance group number partition number policy-override aa-sub transit string
  Tree transit
 

Description

Commands in this context configure the AA transit subscriber fields.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[transit-sub-name] string
  Synopsis Transit subscriber name
  Context configure application-assurance group number partition number policy-override aa-sub transit string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

characteristic [characteristic-name] reference
  Synopsis Enter the characteristic list instance
  Context configure application-assurance group number partition number policy-override aa-sub transit string characteristic reference
  Tree characteristic
 

Description

Commands in this context configure an override characteristic and value.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[characteristic-name] reference
  Synopsis ASO characteristic name
  Context configure application-assurance group number partition number policy-override aa-sub transit string characteristic reference
 

Reference

configure application-assurance group number partition number policy app-service-options characteristic string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value reference
  Synopsis Characteristic value used in subscriber policy override
  Context configure application-assurance group number partition number policy-override aa-sub transit string characteristic reference value reference
  Tree value
 

Reference

configure application-assurance group number partition number policy app-service-options characteristic string value string

 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list [port-list-name] string
  Synopsis Enter the port-list list instance
  Context configure application-assurance group number partition number port-list string
  Tree port-list
 

Description

Commands in this context define an AA group or partition named port list, which contains a list of port numbers or port ranges. 

The port list is then referenced in AA policy application filters, allowing increased flexibility in the use of server ports or HTTP proxy ports for application definition.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[port-list-name] string
  Synopsis Port list name
  Context configure application-assurance group number partition number port-list string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number port-list string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port [port-number] number
  Synopsis Add a list entry for port
  Context configure application-assurance group number partition number port-list string port number
  Tree port
 

Description

Commands in this context specify the server TCP or UDP port number to use in the port list definition.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[port-number] number
  Synopsis Port number
  Context configure application-assurance group number partition number port-list string port number
  Range 0 to 65535
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range start number end number
  Synopsis Add a list entry for range
  Context configure application-assurance group number partition number port-list string range start number end number
  Tree range
 

Description

Commands in this context configure the AA group or partition named port-list range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number
  Synopsis Start value for the port range in the AA port list
  Context configure application-assurance group number partition number port-list string range start number end number
  Range 0 to 65534
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number
  Synopsis End value for the port range in the AA port list
  Context configure application-assurance group number partition number port-list string range start number end number
  Range 1 to 65535
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sctp-filter [sctp-filter-name] string
  Synopsis Enter the sctp-filter list instance
  Context configure application-assurance group number partition number sctp-filter string
  Tree sctp-filter
 

Description

Commands in this context configure the Stream Control Transmission Protocol (SCTP) fields.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[sctp-filter-name] string
  Synopsis SCTP filter name
  Context configure application-assurance group number partition number sctp-filter string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number sctp-filter string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference
  Synopsis Event log for packets dropped by the SCTP filter
  Context configure application-assurance group number partition number sctp-filter string event-log reference
  Tree event-log
 

Reference

configure application-assurance group number partition number event-log string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ppid
  Synopsis Enter the ppid context
  Context configure application-assurance group number partition number sctp-filter string ppid
  Tree ppid
 

Description

Commands in this context configure actions for specific or default Payload Protocol Identifiers (PPIDs).

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action keyword
  Synopsis Default action for all SCTP PPIDs
  Context configure application-assurance group number partition number sctp-filter string ppid default-action keyword
  Tree default-action
  Default permit
  Options deny, permit
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number
  Synopsis Enter the entry list instance
  Context configure application-assurance group number partition number sctp-filter string ppid entry number
  Tree entry
 

Description

Commands in this context specify SCTP PPID values and the corresponding action to apply.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number
  Synopsis SCTP filter PPID entry ID
  Context configure application-assurance group number partition number sctp-filter string ppid entry number
  Range 1 to 255
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword
  Synopsis SCTP filter PPID entry action
  Context configure application-assurance group number partition number sctp-filter string ppid entry number action keyword
  Tree action
  Options deny, permit
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

value (number | keyword)
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.

  Synopsis PPID entry value
  Context configure application-assurance group number partition number sctp-filter string ppid entry number value (number | keyword)
  Tree value
  Range 0 to 4294967295
  Options iua, m2ua, m3ua, sua, m2pa, v5ua, h.248, bicc/q.2150.3, tali, dua, asap, enrp, h.323, q.ipc/q.2150.3, simco, ddp-segment-chunk, ddp-stream-session-control, s1-application-protocol, rua, hnbap, forces-hp, forces-mp, forces-lp, sbc-ap, nbap, x2ap, ircp, lcs-ap, mpich2, service-area-broadcast-protocol, fractal-generator-protocol, ping-pong-protocol, calcapp-protocol, scripting-service-protocol, netperfmeter-protocol-control-channel, netperfmeter-protocol-data-channel, echo, discard, daytime, character-generator, 3gpp-rna, 3gpp-m2ap, 3gpp-m3ap, ssh-over-sctp, diameter-in-a-sctp-data-chunk, diameter-in-a-dtls/sctp-data-chunk, r14p.-ber-encoded-asn.1-over-sctp, webrtc-control, domstring-last, binary-data-partial, binary-data-last, domstring-partial, 3gpp-pua, webrtc-string-empty, webrtc-binary-empty, 3gpp-xwap, 3gpp-xw-control-plane, 3gpp-ng-application-protocol, 3gpp-xn-application-protocol, 3gpp-f1-application-protocol, http-sctp, 3gpp-e1-application-protocol, ele2-lawful-interception, 3gpp-ngap-over-dtls-over-sctp, 3gpp-xnap-over-dtls-over-sctp, 3gpp-f1ap-over-dtls-over-sctp, 3gpp-e1ap-over-dtls-over-sctp, e2-cp, e2-up, e2-du, 3gpp-w1ap
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ppid-range
  Synopsis Enter the ppid-range context
  Context configure application-assurance group number partition number sctp-filter string ppid-range
  Tree ppid-range
 

Description

Commands in this context specify the range of PPID values that are allowed by the AA SCTP filter firewall.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

max number
  Synopsis Maximum PPID value
  Context configure application-assurance group number partition number sctp-filter string ppid-range max number
  Tree max
 

Description

This command configures the maximum SCTP Payload Protocol Identifier (PPID) to be permitted by the SCTP filter. The value must be greater or equal to the minimum PPID value.

  Range 0 to 4294967295
  Default 4294967295
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

min number
  Synopsis Minimum PPID value
  Context configure application-assurance group number partition number sctp-filter string ppid-range min number
  Tree min
 

Description

This command configures the minimum SCTP Payload Protocol Identifier (PPID) to be permitted by the SCTP filter. The value must be less than or equal to the maximum PPID value.

  Range 0 to 4294967295
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-filter [session-filter-name] string
  Synopsis Enter the session-filter list instance
  Context configure application-assurance group number partition number session-filter string
  Tree session-filter
 

Description

Commands in this context create a session filter.

  Max. Instances 300
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[session-filter-name] string
  Synopsis Session filter name
  Context configure application-assurance group number partition number session-filter string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action
  Synopsis Enter the default-action context
  Context configure application-assurance group number partition number session-filter string default-action
  Tree default-action
 

Description

Commands in this context specify the default action to take for packets that do not match any filter entries.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword
  Synopsis Default action for packets not matching filter entries
  Context configure application-assurance group number partition number session-filter string default-action action keyword
  Tree action
  Default deny
  Options deny, permit
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference
  Synopsis Event logging of default action
  Context configure application-assurance group number partition number session-filter string default-action event-log reference
  Tree event-log
 

Reference

configure application-assurance group number partition number event-log string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number session-filter string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number
  Synopsis Enter the entry list instance
  Context configure application-assurance group number partition number session-filter string entry number
  Tree entry
 

Description

Commands in this context configure an AA session filter match entry.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number
  Synopsis Entry ID for the session filter entry
  Context configure application-assurance group number partition number session-filter string entry number
  Range 1 to 65535
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action
  Synopsis Enter the action context
  Context configure application-assurance group number partition number session-filter string entry number action
  Tree action
 

Description

Commands in this context configure the action for this entry.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

deny
  Synopsis Deny sessions matching the criteria
  Context configure application-assurance group number partition number session-filter string entry number action deny
  Tree deny
 

Notes

This element is the default part of a choice.

The following elements are part of a choice: deny, http-redirect, permit, or tcp-optimizer.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference
  Synopsis Event log name used to log the action
  Context configure application-assurance group number partition number session-filter string entry number action event-log reference
  Tree event-log
 

Reference

configure application-assurance group number partition number event-log string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-redirect reference
  Synopsis HTTP redirect for matching sessions
  Context configure application-assurance group number partition number session-filter string entry number action http-redirect reference
  Tree http-redirect
 

Reference

configure application-assurance group number http-redirect string

 

Notes

The following elements are part of a choice: deny, http-redirect, permit, or tcp-optimizer.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

permit
  Synopsis Permit sessions that match the criteria
  Context configure application-assurance group number partition number session-filter string entry number action permit
  Tree permit
 

Notes

The following elements are part of a choice: deny, http-redirect, permit, or tcp-optimizer.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-optimizer reference
  Synopsis TCP optimizer to handle sessions matching the criteria
  Context configure application-assurance group number partition number session-filter string entry number action tcp-optimizer reference
  Tree tcp-optimizer
 

Reference

configure application-assurance group number tcp-optimizer string

 

Notes

The following elements are part of a choice: deny, http-redirect, permit, or tcp-optimizer.

  Introduced 22.2.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number session-filter string entry number description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

match
  Synopsis Enter the match context
  Context configure application-assurance group number partition number session-filter string entry number match
  Tree match
 

Description

Commands in this context configure session conditions for this entry.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-ip
  Synopsis Enter the dst-ip context
  Context configure application-assurance group number partition number session-filter string entry number match dst-ip
  Tree dst-ip
 

Description

Commands in this context configure the destination IP address to match.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-ip-cache reference
  Synopsis Destination IPs in specified DNS IP Cache
  Context configure application-assurance group number partition number session-filter string entry number match dst-ip dns-ip-cache reference
  Tree dns-ip-cache
 

Reference

configure application-assurance group number dns-ip-cache string

 

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)
  Synopsis Destination IP address prefix as match criterion
  Context configure application-assurance group number partition number session-filter string entry number match dst-ip ip-prefix (ipv4-prefix | ipv6-prefix)
  Tree ip-prefix
 

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference
  Synopsis IP address prefix list as match criterion
  Context configure application-assurance group number partition number session-filter string entry number match dst-ip ip-prefix-list reference
  Tree ip-prefix-list
 

Reference

configure application-assurance group number partition number ip-prefix-list string

 

Notes

The following elements are part of a choice: dns-ip-cache, ip-prefix, or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-port
  Synopsis Enter the dst-port context
  Context configure application-assurance group number partition number session-filter string entry number match dst-port
  Tree dst-port
 

Description

Commands in this context specify a destination TCP/UDP port, a destination port list, or a destination range to use as match criteria.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq number
  Synopsis Match criterion used for destination or source port
  Context configure application-assurance group number partition number session-filter string entry number match dst-port eq number
  Tree eq
  Range 0 | 1 to 65535
  Default 0
 

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gt number
  Synopsis Greater than match criterion for the port number
  Context configure application-assurance group number partition number session-filter string entry number match dst-port gt number
  Tree gt
  Range 0 | 1 to 65535
  Default 0
 

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

lt number
  Synopsis Less than match criterion for the port
  Context configure application-assurance group number partition number session-filter string entry number match dst-port lt number
  Tree lt
  Range 0 | 1 to 65535
  Default 0
 

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference
  Synopsis Destination or source port list
  Context configure application-assurance group number partition number session-filter string entry number match dst-port port-list reference
  Tree port-list
 

Reference

configure application-assurance group number partition number port-list string

 

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range
  Synopsis Enable the range context
  Context configure application-assurance group number partition number session-filter string entry number match dst-port range
  Tree range
 

Description

Commands in this context specify a destination IP port, a destination port list, or a destination range to use as match criteria.

 

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number
  Synopsis Upper bound of the port range as match criterion
  Context configure application-assurance group number partition number session-filter string entry number match dst-port range end number
  Tree end
  Range 0 | 1 to 65535
  Default 1
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number
  Synopsis Lower bound of the port range as match criterion
  Context configure application-assurance group number partition number session-filter string entry number match dst-port range start number
  Tree start
  Range 0 | 1 to 65535
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-protocol (number | keyword)
  Synopsis IP protocol as a match criterion
  Context configure application-assurance group number partition number session-filter string entry number match ip-protocol (number | keyword)
  Tree ip-protocol
  Range 0 to 255
  Options tcp-udp, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route, ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

src-ip
  Synopsis Enter the src-ip context
  Context configure application-assurance group number partition number session-filter string entry number match src-ip
  Tree src-ip
 

Description

Commands in this context specify a source IP address to use as match criteria.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix (ipv4-prefix | ipv6-prefix)
  Synopsis Source IP address prefix as match criterion
  Context configure application-assurance group number partition number session-filter string entry number match src-ip ip-prefix (ipv4-prefix | ipv6-prefix)
  Tree ip-prefix
 

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip-prefix-list reference
  Synopsis Source IP address prefix list as match criterion
  Context configure application-assurance group number partition number session-filter string entry number match src-ip ip-prefix-list reference
  Tree ip-prefix-list
 

Reference

configure application-assurance group number partition number ip-prefix-list string

 

Notes

The following elements are part of a choice: ip-prefix or ip-prefix-list.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

src-port
  Synopsis Enter the src-port context
  Context configure application-assurance group number partition number session-filter string entry number match src-port
  Tree src-port
 

Description

Commands in this context specify a source IP port, a source port list, or a source range to use as match criteria.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

eq number
  Synopsis Match criterion used for destination or source port
  Context configure application-assurance group number partition number session-filter string entry number match src-port eq number
  Tree eq
  Range 0 | 1 to 65535
  Default 0
 

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gt number
  Synopsis Greater than match criterion for the port number
  Context configure application-assurance group number partition number session-filter string entry number match src-port gt number
  Tree gt
  Range 0 | 1 to 65535
  Default 0
 

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

lt number
  Synopsis Less than match criterion for the port
  Context configure application-assurance group number partition number session-filter string entry number match src-port lt number
  Tree lt
  Range 0 | 1 to 65535
  Default 0
 

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port-list reference
  Synopsis Destination or source port list
  Context configure application-assurance group number partition number session-filter string entry number match src-port port-list reference
  Tree port-list
 

Reference

configure application-assurance group number partition number port-list string

 

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

range
  Synopsis Enable the range context
  Context configure application-assurance group number partition number session-filter string entry number match src-port range
  Tree range
 

Description

Commands in this context specify a destination IP port, a destination port list, or a destination range to use as match criteria.

 

Notes

The following elements are part of a choice: eq, gt, lt, port-list, or range.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end number
  Synopsis Upper bound of the port range as match criterion
  Context configure application-assurance group number partition number session-filter string entry number match src-port range end number
  Tree end
  Range 0 | 1 to 65535
  Default 1
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start number
  Synopsis Lower bound of the port range as match criterion
  Context configure application-assurance group number partition number session-filter string entry number match src-port range start number
  Tree start
  Range 0 | 1 to 65535
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

shallow-inspection boolean
  Synopsis Enable shallow inspection
  Context configure application-assurance group number partition number shallow-inspection boolean
  Tree shallow-inspection
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

statistics
  Synopsis Enter the statistics context
  Context configure application-assurance group number partition number statistics
  Tree statistics
 

Description

Commands in this context configure accounting and billing statistics for this AA group.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-admit-deny
  Synopsis Enter the aa-admit-deny context
  Context configure application-assurance group number partition number statistics aa-admit-deny
  Tree aa-admit-deny
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

accounting-policy reference
  Synopsis Accounting policy
  Context configure application-assurance group number partition number statistics aa-admit-deny accounting-policy reference
  Tree accounting-policy
 

Reference

configure log accounting-policy number

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collect-stats boolean
  Synopsis Collect statistics
  Context configure application-assurance group number partition number statistics aa-admit-deny collect-stats boolean
  Tree collect-stats
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtp-filter-stats boolean
  Synopsis Include GTP filter statistics in admit-deny accounting records
  Context configure application-assurance group number partition number statistics aa-admit-deny gtp-filter-stats boolean
  Tree gtp-filter-stats
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

policer-stats boolean
  Synopsis Include admit-deny policer statistics in accounting records
  Context configure application-assurance group number partition number statistics aa-admit-deny policer-stats boolean
  Tree policer-stats
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

policer-stats-resources boolean
  Synopsis Allocate ISA/ ESA resources for policer admit-deny statistics
  Context configure application-assurance group number partition number statistics aa-admit-deny policer-stats-resources boolean
  Tree policer-stats-resources
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sctp-filter-stats boolean
  Synopsis Include SCTP filter admit-deny statistics in accounting
  Context configure application-assurance group number partition number statistics aa-admit-deny sctp-filter-stats boolean
  Tree sctp-filter-stats
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-filter-stats boolean
  Synopsis Include session filter admit-deny statistics in accounting
  Context configure application-assurance group number partition number statistics aa-admit-deny session-filter-stats boolean
  Tree session-filter-stats
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-validate-stats boolean
  Synopsis Include TCP validate admit-deny statistics in accounting
  Context configure application-assurance group number partition number statistics aa-admit-deny tcp-validate-stats boolean
  Tree tcp-validate-stats
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-app-group
  Synopsis Enter the aa-app-group context
  Context configure application-assurance group number partition number statistics aa-app-group
  Tree aa-app-group
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

accounting-policy reference
  Synopsis Accounting policy ID
  Context configure application-assurance group number partition number statistics aa-app-group accounting-policy reference
  Tree accounting-policy
 

Reference

configure log accounting-policy number

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collect-stats boolean
  Synopsis Collect statistics
  Context configure application-assurance group number partition number statistics aa-app-group collect-stats boolean
  Tree collect-stats
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-application
  Synopsis Enter the aa-application context
  Context configure application-assurance group number partition number statistics aa-application
  Tree aa-application
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

accounting-policy reference
  Synopsis Accounting policy ID
  Context configure application-assurance group number partition number statistics aa-application accounting-policy reference
  Tree accounting-policy
 

Reference

configure log accounting-policy number

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collect-stats boolean
  Synopsis Collect statistics
  Context configure application-assurance group number partition number statistics aa-application collect-stats boolean
  Tree collect-stats
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-partition
  Synopsis Enter the aa-partition context
  Context configure application-assurance group number partition number statistics aa-partition
  Tree aa-partition
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

accounting-policy reference
  Synopsis Accounting policy
  Context configure application-assurance group number partition number statistics aa-partition accounting-policy reference
  Tree accounting-policy
 

Reference

configure log accounting-policy number

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collect-stats boolean
  Synopsis Collect statistics
  Context configure application-assurance group number partition number statistics aa-partition collect-stats boolean
  Tree collect-stats
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tethering-stats boolean
  Synopsis Collect tethering statistics
  Context configure application-assurance group number partition number statistics aa-partition tethering-stats boolean
  Tree tethering-stats
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

traffic-type-stats boolean
  Synopsis Collect traffic type statistics
  Context configure application-assurance group number partition number statistics aa-partition traffic-type-stats boolean
  Tree traffic-type-stats
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-protocol
  Synopsis Enter the aa-protocol context
  Context configure application-assurance group number partition number statistics aa-protocol
  Tree aa-protocol
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

accounting-policy reference
  Synopsis Accounting policy ID
  Context configure application-assurance group number partition number statistics aa-protocol accounting-policy reference
  Tree accounting-policy
 

Reference

configure log accounting-policy number

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of protocol statistics
  Context configure application-assurance group number partition number statistics aa-protocol admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collect-stats boolean
  Synopsis Collect statistics
  Context configure application-assurance group number partition number statistics aa-protocol collect-stats boolean
  Tree collect-stats
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub
  Synopsis Enter the aa-sub context
  Context configure application-assurance group number partition number statistics aa-sub
  Tree aa-sub
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

accounting-policy reference
  Synopsis Accounting policy ID
  Context configure application-assurance group number partition number statistics aa-sub accounting-policy reference
  Tree accounting-policy
 

Reference

configure log accounting-policy number

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aggregate-stats-export-using keyword
  Synopsis Method of statistics export to be used
  Context configure application-assurance group number partition number statistics aa-sub aggregate-stats-export-using keyword
  Tree aggregate-stats-export-using
  Options accounting-policy, radius-accounting-policy
  Max. Instances 2
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-group [app-group-name] reference
  Synopsis Enter the app-group list instance
  Context configure application-assurance group number partition number statistics aa-sub app-group reference
  Tree app-group
 

Description

Commands in this context configure accounting and statistics collection parameters for AA application groups for a specific AA group/partition.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[app-group-name] reference
  Synopsis Application group name
  Context configure application-assurance group number partition number statistics aa-sub app-group reference
 

Reference

configure application-assurance group number partition number policy app-group string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-using keyword
  Synopsis Method used to export statistics
  Context configure application-assurance group number partition number statistics aa-sub app-group reference export-using keyword
  Tree export-using
  Options accounting-policy, radius-accounting-policy
  Max. Instances 2
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

application [application-name] reference
  Synopsis Enter the application list instance
  Context configure application-assurance group number partition number statistics aa-sub application reference
  Tree application
 

Description

Commands in this context configure the AA subscriber accounting statistics for the export of AA applications for an AA group/partition.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[application-name] reference
  Synopsis Application name
  Context configure application-assurance group number partition number statistics aa-sub application reference
 

Reference

configure application-assurance group number partition number policy application string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-using keyword
  Synopsis Method used to export statistics
  Context configure application-assurance group number partition number statistics aa-sub application reference export-using keyword
  Tree export-using
  Options accounting-policy, radius-accounting-policy
  Max. Instances 2
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

charging-group [charging-group-name] reference
  Synopsis Enter the charging-group list instance
  Context configure application-assurance group number partition number statistics aa-sub charging-group reference
  Tree charging-group
 

Description

Commands in this context configure AA subscriber accounting statistics for the export of AA charging groups of an AA group/partition.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[charging-group-name] reference
  Synopsis Charging group name
  Context configure application-assurance group number partition number statistics aa-sub charging-group reference
 

Description

This command specifies the AA charging group to be included in the exported accounting records. 

 

Reference

configure application-assurance group number partition number policy charging-group string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-using keyword
  Synopsis Method used to export statistics
  Context configure application-assurance group number partition number statistics aa-sub charging-group reference export-using keyword
  Tree export-using
  Options accounting-policy, radius-accounting-policy
  Max. Instances 2
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collect-stats boolean
  Synopsis Collect statistics
  Context configure application-assurance group number partition number statistics aa-sub collect-stats boolean
  Tree collect-stats
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

exclude-tcp-retrans boolean
  Synopsis Exclude TCP retransmission and error statistics
  Context configure application-assurance group number partition number statistics aa-sub exclude-tcp-retrans boolean
  Tree exclude-tcp-retrans
 

Description

When configured to true, TCP errors and retransmission packets are not counted for the purpose of content-based billing. Note: This command is only applicable to EPC.This setting has no impact on app/app-group aggregate AA stats. 

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

max-throughput-stats boolean
  Synopsis Collect maximum throughput statistics
  Context configure application-assurance group number partition number statistics aa-sub max-throughput-stats boolean
  Tree max-throughput-stats
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

protocol [protocol-name] string
  Synopsis Enter the protocol list instance
  Context configure application-assurance group number partition number statistics aa-sub protocol string
  Tree protocol
 

Description

Commands in this context configure AA subscriber accounting statistics for the export of aa-sub protocols of an AA group/partition.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[protocol-name] string
  Synopsis AA protocol name
  Context configure application-assurance group number partition number statistics aa-sub protocol string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

export-using keyword
  Synopsis Method used to export statistics
  Context configure application-assurance group number partition number statistics aa-sub protocol string export-using keyword
  Tree export-using
  Options accounting-policy, radius-accounting-policy
  Max. Instances 2
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

radius-accounting-policy reference
  Synopsis RADIUS accounting policy name
  Context configure application-assurance group number partition number statistics aa-sub radius-accounting-policy reference
  Tree radius-accounting-policy
 

Reference

configure application-assurance radius-accounting-policy string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

usage-monitoring boolean
  Synopsis Collect usage monitoring statistics
  Context configure application-assurance group number partition number statistics aa-sub usage-monitoring boolean
  Tree usage-monitoring
 

Description

When configured to true, this command allows the system to activate Gx usage monitoring at AA group/partition level, if enough usage monitoring resources exist for all existing subs. 

When configured to false, this command silently removes all monitoring instances (no PCRF notifications) for AA subscribers and all subsequent AA Gx usage monitoring messages are ignored.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub-study [study-type] keyword
  Synopsis Enter the aa-sub-study list instance
  Context configure application-assurance group number partition number statistics aa-sub-study keyword
  Tree aa-sub-study
 

Description

Commands in this context configure accounting and statistics collection parameters per AA special study subscribers.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[study-type] keyword
  Synopsis Statistic type that the study is using
  Context configure application-assurance group number partition number statistics aa-sub-study keyword
  Options protocol, application
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub
  Synopsis Enter the aa-sub context
  Context configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub
  Tree aa-sub
 

Description

Commands in this context add an existing subscriber identification to a group of special study subscribers.

Identifying a group of special study subscribers allows statistics and accounting records for those subscribers to be collected for protocols and applications through Application Assurance. When adding a subscriber to the special study group, accounting records and statistics generation commence immediately. When removing a subscriber from the group, special study statistics and accounting records for that subscriber in the current interval are lost.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

esm [esm-sub-name] string
  Synopsis Add a list entry for esm
  Context configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub esm string
  Tree esm
 

Description

Commands in this context configure the ESM fields.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[esm-sub-name] string
  Synopsis ESM subscriber name
  Context configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub esm string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

esm-mac [esm-mac-sub-name] string
  Synopsis Add a list entry for esm-mac
  Context configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub esm-mac string
  Tree esm-mac
 

Description

Commands in this context configure the ESM MAC fields.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[esm-mac-sub-name] string
  Synopsis ESM MAC subscriber name
  Context configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub esm-mac string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sap [sap-id] string
  Synopsis Add a list entry for sap
  Context configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub sap string
  Tree sap
 

Description

Commands in this context configure the Service Access Point (SAP) for the purpose of enabling special study statistics.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[sap-id] string
  Synopsis AA subscriber SAP ID
  Context configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub sap string
  String Length 1 to 45
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

spoke-sdp [sdp-bind-id] string
  Synopsis Add a list entry for spoke-sdp
  Context configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub spoke-sdp string
  Tree spoke-sdp
 

Description

Commands in this context specify the spoke SDP ID and VC ID for the purpose of including the subscriber into AA special study statistics. 

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[sdp-bind-id] string
  Synopsis Spoke SDP ID for an AA subscriber
  Context configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub spoke-sdp string
  String Length 3 to 16
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

transit [transit-sub-name] string
  Synopsis Add a list entry for transit
  Context configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub transit string
  Tree transit
 

Description

Commands in the context specify an existing transit subscriber to be included in AA sub special study statistics.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[transit-sub-name] string
  Synopsis Transit subscriber name
  Context configure application-assurance group number partition number statistics aa-sub-study keyword aa-sub transit string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

accounting-policy reference
  Synopsis Accounting policy ID
  Context configure application-assurance group number partition number statistics aa-sub-study keyword accounting-policy reference
  Tree accounting-policy
 

Reference

configure log accounting-policy number

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

collect-stats boolean
  Synopsis Collect statistics
  Context configure application-assurance group number partition number statistics aa-sub-study keyword collect-stats boolean
  Tree collect-stats
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-validate [tcp-validate-name] string
  Synopsis Enter the tcp-validate list instance
  Context configure application-assurance group number partition number tcp-validate string
  Tree tcp-validate
 

Description

Commands in this context configure a TCP validation policy.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[tcp-validate-name] string
  Synopsis TCP validation policy name
  Context configure application-assurance group number partition number tcp-validate string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number tcp-validate string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

log
  Synopsis Enter the log context
  Context configure application-assurance group number partition number tcp-validate string log
  Tree log
 

Description

Commands in this context enable event logging of traffic dropped by TCP validation.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

all boolean
  Synopsis Enable logging of all dropped TCP packets
  Context configure application-assurance group number partition number tcp-validate string log all boolean
  Tree all
 

Description

When configured to true, all dropped TCP packets are logged, including the following:

  • packets received after an RST and discarded

  • packets received before TCP session establishment (before SYN) and discarded

An event log must also be configured to enable logging of all dropped packets.

When configured to false, discards related to the described cases are not captured in any event log.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

event-log reference
  Synopsis Event log name
  Context configure application-assurance group number partition number tcp-validate string log event-log reference
  Tree event-log
 

Reference

configure application-assurance group number partition number event-log string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

strict boolean
  Synopsis Enable strict checking of TCP traffic
  Context configure application-assurance group number partition number tcp-validate string strict boolean
  Tree strict
 

Description

When configured to true, the command specifies whether enforcement of TCP sequence and acknowledgment numbers are applied. If a packet does not meet the expected sequence or acknowledgment number, it is dropped. This command should only be enabled if the expected bit error rate or packet loss is low. 

For example, if acknowledgments are lost before being detected by AA, the server timeouts are triggered and retransmissions occur. If strict is enabled, these retransmissions resemble a reply attack and are dropped by AA.

When configured to false, the command removes the TCP sequence and acknowledgment number enforcement.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tethering-detection
  Synopsis Enter the tethering-detection context
  Context configure application-assurance group number partition number tethering-detection
  Tree tethering-detection
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of tethering detection
  Context configure application-assurance group number partition number tethering-detection admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

single-device
  Synopsis Enter the single-device context
  Context configure application-assurance group number partition number tethering-detection single-device
  Tree single-device
 

Description

Commands in this context configure the single-device fields and expected TTL values for flow-level tethering detection.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

expected-ttl [ttl] number
  Synopsis Add a list entry for expected-ttl
  Context configure application-assurance group number partition number tethering-detection single-device expected-ttl number
  Tree expected-ttl
 

Description

Commands in this context configure the TTL values for single-device tethering detection.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[ttl] number
  Synopsis Expected TTL traffic value from host devices
  Context configure application-assurance group number partition number tethering-detection single-device expected-ttl number
  Range 1 to 255
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

threshold-crossing-alert
  Synopsis Enter the threshold-crossing-alert context
  Context configure application-assurance group number partition number threshold-crossing-alert
  Tree threshold-crossing-alert
 

Description

Commands in this context configure the generation of threshold crossing alerts (TCAs).

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

criteria [criteria-id] keyword direction keyword
  Synopsis Enter the criteria list instance
  Context configure application-assurance group number partition number threshold-crossing-alert criteria keyword direction keyword
  Tree criteria
 

Description

Commands in this context configure the TCA criteria for the partition.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[criteria-id] keyword
  Synopsis Statistics TCA criteria ID
  Context configure application-assurance group number partition number threshold-crossing-alert criteria keyword direction keyword
  Options error-drop, fragment-drop-out-of-order, fragment-drop-all, overload-drop, gtp-sanity-drop
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword
  Synopsis Direction of traffic for the criteria statistics TCA
  Context configure application-assurance group number partition number threshold-crossing-alert criteria keyword direction keyword
  Options from-sub, to-sub
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number
  Synopsis High watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert criteria keyword direction keyword high-watermark number
  Tree high-watermark
  Range 1 to 4294967295
  Default 4294967295
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number
  Synopsis Low watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert criteria keyword direction keyword low-watermark number
  Tree low-watermark
  Range 0 to 4294967294
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtp-filter [gtp-filter-name] reference criteria keyword direction keyword
  Synopsis Enter the gtp-filter list instance
  Context configure application-assurance group number partition number threshold-crossing-alert gtp-filter reference criteria keyword direction keyword
  Tree gtp-filter
 

Description

Commands in this context configure TCA generation for a GTP filter.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[gtp-filter-name] reference
  Synopsis GTP filter name for TCA generation
  Context configure application-assurance group number partition number threshold-crossing-alert gtp-filter reference criteria keyword direction keyword
 

Reference

configure application-assurance group number partition number gtp gtp-filter string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

criteria keyword
  Synopsis Criteria ID for GTP filter TCA
  Context configure application-assurance group number partition number threshold-crossing-alert gtp-filter reference criteria keyword direction keyword
  Options max-payload-length, message-type-default-action, header-sanity, message-type-gtpv2-default-action, imsi-apn-filter-default-action, validate-gtp-tunnels, validate-sequence-number, validate-src-ip-addr, missing-mandatory-ie, gtp-in-gtp, gtp-tunnel-database-full, gtp-tunnel-endpoint-limit
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword
  Synopsis Direction of traffic for the GTP filter TCA
  Context configure application-assurance group number partition number threshold-crossing-alert gtp-filter reference criteria keyword direction keyword
  Options from-sub, to-sub
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number
  Synopsis High watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert gtp-filter reference criteria keyword direction keyword high-watermark number
  Tree high-watermark
  Range 1 to 4294967295
  Default 4294967295
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number
  Synopsis Low watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert gtp-filter reference criteria keyword direction keyword low-watermark number
  Tree low-watermark
  Range 0 to 4294967294
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

gtp-filter-entry [gtp-filter-name] reference entry-id number direction keyword
  Synopsis Enter the gtp-filter-entry list instance
  Context configure application-assurance group number partition number threshold-crossing-alert gtp-filter-entry reference entry-id number direction keyword
  Tree gtp-filter-entry
 

Description

Commands in this context configure the AA GTP filter entry TCA fields.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[gtp-filter-name] reference
  Synopsis AA GTP filter name for TCA configuration
  Context configure application-assurance group number partition number threshold-crossing-alert gtp-filter-entry reference entry-id number direction keyword
 

Reference

configure application-assurance group number partition number gtp gtp-filter string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry-id number
  Synopsis Entry ID
  Context configure application-assurance group number partition number threshold-crossing-alert gtp-filter-entry reference entry-id number direction keyword
 

Description

This command configures the identifier for the statistics TCA GTP filter V1 message type entry, V2 message type entry, or imsi-apn filter entry.

  Max. Range 0 to 4294967295
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword
  Synopsis Traffic direction for GTP filter entry TCA
  Context configure application-assurance group number partition number threshold-crossing-alert gtp-filter-entry reference entry-id number direction keyword
  Options from-sub, to-sub
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number
  Synopsis High watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert gtp-filter-entry reference entry-id number direction keyword high-watermark number
  Tree high-watermark
  Range 1 to 4294967295
  Default 4294967295
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number
  Synopsis Low watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert gtp-filter-entry reference entry-id number direction keyword low-watermark number
  Tree low-watermark
  Range 0 to 4294967294
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

policer [policer-name] string direction keyword
  Synopsis Enter the policer list instance
  Context configure application-assurance group number partition number threshold-crossing-alert policer string direction keyword
  Tree policer
 

Description

Commands in this context configure a TCA for the counter capturing drops or admit events.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[policer-name] string
  Synopsis Policer name for TCA generation
  Context configure application-assurance group number partition number threshold-crossing-alert policer string direction keyword
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword
  Synopsis Direction of traffic for the policer TCA
  Context configure application-assurance group number partition number threshold-crossing-alert policer string direction keyword
  Options from-sub, to-sub
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number
  Synopsis High watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert policer string direction keyword high-watermark number
  Tree high-watermark
  Range 1 to 4294967295
  Default 4294967295
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number
  Synopsis Low watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert policer string direction keyword low-watermark number
  Tree low-watermark
  Range 0 to 4294967294
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sctp-filter [sctp-filter-name] reference criteria keyword direction keyword
  Synopsis Enter the sctp-filter list instance
  Context configure application-assurance group number partition number threshold-crossing-alert sctp-filter reference criteria keyword direction keyword
  Tree sctp-filter
 

Description

Commands in this context configure TCA generation for an SCTP filter.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[sctp-filter-name] reference
  Synopsis SCTP filter name for TCA generation
  Context configure application-assurance group number partition number threshold-crossing-alert sctp-filter reference criteria keyword direction keyword
 

Reference

configure application-assurance group number partition number sctp-filter string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

criteria keyword
  Synopsis Criteria ID for SCTP filter TCA
  Context configure application-assurance group number partition number threshold-crossing-alert sctp-filter reference criteria keyword direction keyword
  Options ppid-default-action, packet-sanity, ppid-range
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword
  Synopsis Direction of traffic for SCTP filter TCA
  Context configure application-assurance group number partition number threshold-crossing-alert sctp-filter reference criteria keyword direction keyword
  Options from-sub, to-sub
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number
  Synopsis High watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert sctp-filter reference criteria keyword direction keyword high-watermark number
  Tree high-watermark
  Range 1 to 4294967295
  Default 4294967295
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number
  Synopsis Low watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert sctp-filter reference criteria keyword direction keyword low-watermark number
  Tree low-watermark
  Range 0 to 4294967294
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sctp-filter-entry [sctp-filter-name] reference entry-id reference direction keyword
  Synopsis Enter the sctp-filter-entry list instance
  Context configure application-assurance group number partition number threshold-crossing-alert sctp-filter-entry reference entry-id reference direction keyword
  Tree sctp-filter-entry
 

Description

Commands in this context configure the AA SCTP filter PPID entry TCA fields.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[sctp-filter-name] reference
  Synopsis AA SCTP filter name for TCA configuration
  Context configure application-assurance group number partition number threshold-crossing-alert sctp-filter-entry reference entry-id reference direction keyword
 

Reference

configure application-assurance group number partition number sctp-filter string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry-id reference
  Synopsis ID for SCTP filter entry TCA
  Context configure application-assurance group number partition number threshold-crossing-alert sctp-filter-entry reference entry-id reference direction keyword
 

Reference

configure application-assurance group number partition number sctp-filter string ppid entry number

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword
  Synopsis Direction of traffic for TCA configuration
  Context configure application-assurance group number partition number threshold-crossing-alert sctp-filter-entry reference entry-id reference direction keyword
  Options from-sub, to-sub
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number
  Synopsis High watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert sctp-filter-entry reference entry-id reference direction keyword high-watermark number
  Tree high-watermark
  Range 1 to 4294967295
  Default 4294967295
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number
  Synopsis Low watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert sctp-filter-entry reference entry-id reference direction keyword low-watermark number
  Tree low-watermark
  Range 0 to 4294967294
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-filter [session-filter-name] reference criteria keyword direction keyword
  Synopsis Enter the session-filter list instance
  Context configure application-assurance group number partition number threshold-crossing-alert session-filter reference criteria keyword direction keyword
  Tree session-filter
 

Description

Commands in this context configure TCA generation for a session filter.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[session-filter-name] reference
  Synopsis AA session filter name for TCA configuration
  Context configure application-assurance group number partition number threshold-crossing-alert session-filter reference criteria keyword direction keyword
 

Reference

configure application-assurance group number partition number session-filter string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

criteria keyword
  Synopsis ID for session filter entry TCA
  Context configure application-assurance group number partition number threshold-crossing-alert session-filter reference criteria keyword direction keyword
  Options default-action
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword
  Synopsis Direction of traffic for TCA configuration
  Context configure application-assurance group number partition number threshold-crossing-alert session-filter reference criteria keyword direction keyword
  Options from-sub, to-sub
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number
  Synopsis High watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert session-filter reference criteria keyword direction keyword high-watermark number
  Tree high-watermark
  Range 1 to 4294967295
  Default 4294967295
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number
  Synopsis Low watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert session-filter reference criteria keyword direction keyword low-watermark number
  Tree low-watermark
  Range 0 to 4294967294
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

session-filter-entry [session-filter-name] reference entry-id reference direction keyword
  Synopsis Enter the session-filter-entry list instance
  Context configure application-assurance group number partition number threshold-crossing-alert session-filter-entry reference entry-id reference direction keyword
  Tree session-filter-entry
 

Description

Commands in this context configure the AA session filter entry TCA fields for the partition.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[session-filter-name] reference
  Synopsis AA session filter name for TCA configuration
  Context configure application-assurance group number partition number threshold-crossing-alert session-filter-entry reference entry-id reference direction keyword
 

Reference

configure application-assurance group number partition number session-filter string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry-id reference
  Synopsis ID for session filter entry TCA
  Context configure application-assurance group number partition number threshold-crossing-alert session-filter-entry reference entry-id reference direction keyword
 

Reference

configure application-assurance group number partition number session-filter string entry number

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword
  Synopsis Direction of traffic for TCA configuration
  Context configure application-assurance group number partition number threshold-crossing-alert session-filter-entry reference entry-id reference direction keyword
  Options from-sub, to-sub
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number
  Synopsis High watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert session-filter-entry reference entry-id reference direction keyword high-watermark number
  Tree high-watermark
  Range 1 to 4294967295
  Default 4294967295
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number
  Synopsis Low watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert session-filter-entry reference entry-id reference direction keyword low-watermark number
  Tree low-watermark
  Range 0 to 4294967294
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-validate [tcp-validate-name] reference direction keyword
  Synopsis Enter the tcp-validate list instance
  Context configure application-assurance group number partition number threshold-crossing-alert tcp-validate reference direction keyword
  Tree tcp-validate
 

Description

Commands in this context configure TCP validation policy TCA fields for the partition.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[tcp-validate-name] reference
  Synopsis AA TCP validate name for configuration
  Context configure application-assurance group number partition number threshold-crossing-alert tcp-validate reference direction keyword
 

Reference

configure application-assurance group number partition number tcp-validate string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction keyword
  Synopsis Direction of traffic for TCA configuration
  Context configure application-assurance group number partition number threshold-crossing-alert tcp-validate reference direction keyword
  Options from-sub, to-sub
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

high-watermark number
  Synopsis High watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert tcp-validate reference direction keyword high-watermark number
  Tree high-watermark
  Range 1 to 4294967295
  Default 4294967295
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

low-watermark number
  Synopsis Low watermark threshold
  Context configure application-assurance group number partition number threshold-crossing-alert tcp-validate reference direction keyword low-watermark number
  Tree low-watermark
  Range 0 to 4294967294
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

transit-ip-policy [ip-policy-id] number
  Synopsis Enter the transit-ip-policy list instance
  Context configure application-assurance group number partition number transit-ip-policy number
  Tree transit-ip-policy
 

Description

Commands in this context define a transit AA subscriber IP policy. Transit AA subscribers are managed by the system through the use of this policy assigned to services, which determines how transit subs are created and removed for that service.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[ip-policy-id] number
  Synopsis IP transit policy ID
  Context configure application-assurance group number partition number transit-ip-policy number
  Range 1 to 65535
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-app-profile reference
  Synopsis Default AA application profile
  Context configure application-assurance group number partition number transit-ip-policy number default-app-profile reference
  Tree default-app-profile
 

Reference

configure application-assurance group number partition number policy app-profile string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number transit-ip-policy number description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

detect-seen-ip boolean
  Synopsis Detect transit subscribers based on IP address
  Context configure application-assurance group number partition number transit-ip-policy number detect-seen-ip boolean
  Tree detect-seen-ip
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dhcp
  Synopsis Enter the dhcp context
  Context configure application-assurance group number partition number transit-ip-policy number dhcp
  Tree dhcp
 

Description

Commands in this context enable dynamic DHCP-based management of transit aa-subs for the transit IP policy. Dynamic DHCP-based management and other types of management of transit subs for a transit IP policy are mutually exclusive.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state for learning DHCP dynamic transits
  Context configure application-assurance group number partition number transit-ip-policy number dhcp admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

diameter
  Synopsis Enter the diameter context
  Context configure application-assurance group number partition number transit-ip-policy number diameter
  Tree diameter
 

Description

Commands in this context configure dynamic Diameter-based management of transit AA subs for the transit IP policy. This is mutually exclusive to other types of management of transit subs for a given transit IP policy.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state for Diameter dynamic transits
  Context configure application-assurance group number partition number transit-ip-policy number diameter admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

application-policy reference
  Synopsis Diameter application policy name for IP transit policy
  Context configure application-assurance group number partition number transit-ip-policy number diameter application-policy reference
  Tree application-policy
 

Reference

configure subscriber-mgmt diameter-gx-policy string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ipv6-address-prefix-length number
  Synopsis Length of the AA transit IP policy IPv6 address prefix
  Context configure application-assurance group number partition number transit-ip-policy number ipv6-address-prefix-length number
  Tree ipv6-address-prefix-length
  Range 32 to 64
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

radius
  Synopsis Enter the radius context
  Context configure application-assurance group number partition number transit-ip-policy number radius
  Tree radius
 

Description

Commands in this context enable dynamic RADIUS-based management of transit aa-subs for the transit IP policy. This is mutually exclusive to other types of management of transit subs for a given transit IP policy.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of learning RADIUS dynamic transit
  Context configure application-assurance group number partition number transit-ip-policy number radius admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

authentication-policy reference
  Synopsis RADIUS authentication policy
  Context configure application-assurance group number partition number transit-ip-policy number radius authentication-policy reference
  Tree authentication-policy
 

Reference

configure subscriber-mgmt radius-authentication-policy string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

seen-ip-radius-acct-policy reference
  Synopsis RADIUS accounting policy to enable seen-IP notification
  Context configure application-assurance group number partition number transit-ip-policy number radius seen-ip-radius-acct-policy reference
  Tree seen-ip-radius-acct-policy
 

Reference

configure application-assurance radius-accounting-policy string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

static-aa-sub [transit-aa-sub-name] string
  Synopsis Enter the static-aa-sub list instance
  Context configure application-assurance group number partition number transit-ip-policy number static-aa-sub string
  Tree static-aa-sub
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[transit-aa-sub-name] string
  Synopsis Static transit subscriber name
  Context configure application-assurance group number partition number transit-ip-policy number static-aa-sub string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-profile reference
  Synopsis Application profile name
  Context configure application-assurance group number partition number transit-ip-policy number static-aa-sub string app-profile reference
  Tree app-profile
 

Reference

configure application-assurance group number partition number policy app-profile string

 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

ip [address] (ipv4-unicast-address | ipv6-prefix)
  Synopsis Add a list entry for ip
  Context configure application-assurance group number partition number transit-ip-policy number static-aa-sub string ip (ipv4-unicast-address | ipv6-prefix)
  Tree ip
 

Description

Commands in this context configure the IP address for a static transit aa-sub.

  Max. Instances 32
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[address] (ipv4-unicast-address | ipv6-prefix)
  Synopsis IP address for an AA static transit subscriber
  Context configure application-assurance group number partition number transit-ip-policy number static-aa-sub string ip (ipv4-unicast-address | ipv6-prefix)
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

sub-ident-policy reference
  Synopsis Subscriber identification policy
  Context configure application-assurance group number partition number transit-ip-policy number sub-ident-policy reference
  Tree sub-ident-policy
 

Description

This command defines the subscriber identification policy for the transit IP policy that will be associated with a SAP. The subscriber identification policy must be defined prior to associating the profile with a SAP in the configure subscriber-mgmt sub-ident-policy context. Subscribers are managed by the system through the use of subscriber identification strings. A subscriber identification string uniquely identifies a subscriber. For static hosts, the subscriber identification string is explicitly defined with each static subscriber host.

For dynamic hosts, the subscriber identification string must be derived from the DHCP ACK message sent to the subscriber host. The default value for the string is the content of Option 82 CIRCUIT-ID and REMOTE-ID fields interpreted as an octet string. As an option, the DHCP ACK message may be processed by a subscriber identification policy which has the capability to parse the message into an alternative ASCII or octet string value.

When multiple hosts on the same port are associated with the same subscriber identification string, they are considered to be host members of the same subscriber. A subscriber identification policy can also be used for identifying dynamic transit subscriber names.

 

Reference

configure subscriber-mgmt sub-ident-policy string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

transit-auto-create
  Synopsis Enter the transit-auto-create context
  Context configure application-assurance group number partition number transit-ip-policy number transit-auto-create
  Tree transit-auto-create
 

Description

Commands in this context enable the seen-IP auto creation of transit subscribers using the transit IP policy name and subscriber IP address as the aa-sub name. The default app-profile configured against the transit IP policy is applied to these subscribers.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the automatic dynamic transits
  Context configure application-assurance group number partition number transit-ip-policy number transit-auto-create admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

inactivity-monitor boolean
  Synopsis Monitor inactivity on auto-created transit subscribers
  Context configure application-assurance group number partition number transit-ip-policy number transit-auto-create inactivity-monitor boolean
  Tree inactivity-monitor
 

Description

When configured to true, this command enables the auto-removal of inactive transit subscribers. Periodically, AA removes any inactive auto-created subscribers. An inactive subscriber is defined as having no active flows in the last period. 

When configured to false, this command disables the auto-removal of inactive transit subscribers. 

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

transit-prefix-policy [prefix-policy-id] number
  Synopsis Enter the transit-prefix-policy list instance
  Context configure application-assurance group number partition number transit-prefix-policy number
  Tree transit-prefix-policy
 

Description

Commands in this context define a transit AA subscriber prefix policy. Transit AA subscribers are managed by the system through the use of this policy assigned to services, which determines how transit subscribers are created and removed for that service.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[prefix-policy-id] number
  Synopsis Transit prefix policy ID
  Context configure application-assurance group number partition number transit-prefix-policy number
  Range 1 to 65535
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number partition number transit-prefix-policy number description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number
  Synopsis Enter the entry list instance
  Context configure application-assurance group number partition number transit-prefix-policy number entry number
  Tree entry
 

Description

Commands in this context configure the index to a specific entry of a transit prefix policy.

  Max. Instances 4095
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number
  Synopsis ID for a transit prefix policy entry
  Context configure application-assurance group number partition number transit-prefix-policy number entry number
  Range 1 to 4294967295
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub reference
  Synopsis Name of the transit prefix AA subscriber
  Context configure application-assurance group number partition number transit-prefix-policy number entry number aa-sub reference
  Tree aa-sub
 

Reference

configure application-assurance group number partition number transit-prefix-policy number static-aa-sub string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

match
  Synopsis Enter the match context
  Context configure application-assurance group number partition number transit-prefix-policy number entry number match
  Tree match
 

Description

Commands in this context configure transit prefix policy entry match criteria.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

aa-sub-ip (ipv4-prefix | ipv6-prefix)
  Synopsis AA subscriber IP address prefix
  Context configure application-assurance group number partition number transit-prefix-policy number entry number match aa-sub-ip (ipv4-prefix | ipv6-prefix)
  Tree aa-sub-ip
 

Description

This command configures a transit prefix subscriber IP address prefix. It is used when the site is on the local side, the same side of the system as the parent SAP. The local aa-sub-ip addresses represent the source IP in the from-SAP direction and destination IP in the to-SAP direction.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

network-ip (ipv4-prefix | ipv6-prefix)
  Synopsis Network IP address prefix
  Context configure application-assurance group number partition number transit-prefix-policy number entry number match network-ip (ipv4-prefix | ipv6-prefix)
  Tree network-ip
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

static-aa-sub [transit-aa-sub-name] string
  Synopsis Enter the static-aa-sub list instance
  Context configure application-assurance group number partition number transit-prefix-policy number static-aa-sub string
  Tree static-aa-sub
  Max. Instances 4095
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[transit-aa-sub-name] string
  Synopsis Static transit subscriber name
  Context configure application-assurance group number partition number transit-prefix-policy number static-aa-sub string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

app-profile reference
  Synopsis Application profile name
  Context configure application-assurance group number partition number transit-prefix-policy number static-aa-sub string app-profile reference
  Tree app-profile
 

Reference

configure application-assurance group number partition number policy app-profile string

 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

is-remote boolean
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.

  Synopsis Set transit subscriber as remote
  Context configure application-assurance group number partition number transit-prefix-policy number static-aa-sub string is-remote boolean
  Tree is-remote
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

wap1x
  Synopsis Enter the wap1x context
  Context configure application-assurance group number partition number wap1x
  Tree wap1x
 

Description

Commands in this context configure the Wireless Application Protocol (WAP) 1.X.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of WAP1x detection
  Context configure application-assurance group number partition number wap1x admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

policer
  Synopsis Enter the policer context
  Context configure application-assurance group number policer
  Tree policer
 

Description

Commands in this context create application assurance policer profiles of a specified type. Policers can be bandwidth or flow-limiting and can have a granularity of system scope (limits traffic entering AA ISA for all or a subset of AA subscribers) or a subscriber scope (limits apply to each AA subscriber traffic).

The policer type and granularity can only be configured during creation. They cannot be modified. The policer profile must be removed from all AQPs to be removed. Changes to policer profile parameters take effect immediately for policers instantiated as a result of AQP actions using this profile.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

anl-bandwidth-policer [policer-name] string
  Synopsis Enter the anl-bandwidth-policer list instance
  Context configure application-assurance group number policer anl-bandwidth-policer string
  Tree anl-bandwidth-policer
 

Description

Commands in this context configure the AA ANL policer.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[policer-name] string
  Synopsis Policer name
  Context configure application-assurance group number policer anl-bandwidth-policer string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword
  Synopsis Action for packets violating configured policer rate
  Context configure application-assurance group number policer anl-bandwidth-policer string action keyword
  Tree action
 

Description

This command configures the action to be performed by single-bucket bandwidth policers for non-conformant traffic.

Dual bucket bandwidth policers cannot have their action configured and always mark traffic below CIR as in-profile, between CIR and PIR as out-of-profile, and drop traffic above PIR. Flow policers always discard non-conformant traffic.

When multiple application assurance policers are configured against a single flow (including policers at both subscriber and system), the flow/packet is dropped if one of the policers requires the packet to be discarded. This occurs regardless of the action of the other policers.

  Default permit-deny
  Options permit-deny, priority-mark
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

adaptation-rule
  Synopsis Enter the adaptation-rule context
  Context configure application-assurance group number policer anl-bandwidth-policer string adaptation-rule
  Tree adaptation-rule
 

Description

Commands in this context configure the AA policer adaptation rule fields and define the method used by the system to derive the operational CIR and PIR values when the queue is provisioned. For the CIR and PIR values individually, the system attempts to find the best operational rate depending on the defined option. To change the CIR adaptation rule only, the current PIR rule must be part of the command executed.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir keyword
  Synopsis Peak information rate value for the adaptation rule
  Context configure application-assurance group number policer anl-bandwidth-policer string adaptation-rule pir keyword
  Tree pir
 

Description

This command configures the adaptation rule to be used while computing the operational PIR value. The adaptation rule specifies the rules to compute the operational values while maintaining minimum offset.

  Default closest
  Options max, min, closest
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number policer anl-bandwidth-policer string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number
  Synopsis ANL bandwidth policer maximum burst size
  Context configure application-assurance group number policer anl-bandwidth-policer string mbs number
  Tree mbs
 

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends configuring MBS larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

  Range 0 to 131071
  Default 0
  Units kilobytes
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rate-percentage number
  Synopsis Rate used by Access-Network-Location policers
  Context configure application-assurance group number policer anl-bandwidth-policer string rate-percentage number
  Tree rate-percentage
 

Description

This command configures the stage 1 congestion percentage used by Access-Network-Location (ANL) policers. Because ANL total bandwidth is dynamically measured and estimated by AA, this command allows the operator to configure the ratio of that measured bandwidth to be used by the ANL policer as the policer rate.

No limiting is performed if not specified.

  Range 0 to 200
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

rate-percentage-stage-2 number
  Synopsis Rate used by Access-Network-Location policers
  Context configure application-assurance group number policer anl-bandwidth-policer string rate-percentage-stage-2 number
  Tree rate-percentage-stage-2
 

Description

This command configures the stage 2 congestion percentage rate used by Access-Network-Location (ANL) policers. Because ANL stage2 total bandwidth is dynamically measured and estimated by AA, this command allows the operator to configure the ratio of that measured bandwidth to be used by the ANL stage2 policer as the policer rate.

When unconfigured, limiting is not performed.

  Range 0 to 200
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dual-bucket-bandwidth-policer [policer-name] string
  Synopsis Enter the dual-bucket-bandwidth-policer list instance
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string
  Tree dual-bucket-bandwidth-policer
 

Description

Commands in this context configure the dual-bucket bandwidth policer.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[policer-name] string
  Synopsis Policer name
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

adaptation-rule
  Synopsis Enter the adaptation-rule context
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string adaptation-rule
  Tree adaptation-rule
 

Description

Commands in this context configure the AA policer adaptation rule fields and define the method used by the system to derive the operational CIR and PIR values when the queue is provisioned. For the CIR and PIR values individually, the system attempts to find the best operational rate depending on the defined option. To change the CIR adaptation rule only, the current PIR rule must be part of the command executed.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cir keyword
  Synopsis Committed information rate value for adaptation rule
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string adaptation-rule cir keyword
  Tree cir
 

Description

This command configures the CIR for the dual-bucket-bandwidth-policer adaptation rule policer. Nokia recommends configuring CIR larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. The CIR is configurable for dual-bucket bandwidth policers only.

  Default closest
  Options max, min, closest
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir keyword
  Synopsis Peak information rate value for the adaptation rule
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string adaptation-rule pir keyword
  Tree pir
 

Description

This command configures the adaptation rule to be used while computing the operational PIR value. The adaptation rule specifies the rules to compute the operational values while maintaining minimum offset.

  Default closest
  Options max, min, closest
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cbs number
  Synopsis Committed burst size when in congested state
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string cbs number
  Tree cbs
 

Description

This command configures the committed burst size (CBS) for a policer. Nokia recommends that CBS is configured larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. CBS is configurable for dual-bucket bandwidth policers only.

  Range 0 to 131071
  Default 0
  Units kilobytes
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cir (number | keyword)
  Synopsis Committed information rate value for the policer
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string cir (number | keyword)
  Tree cir
 

Description

This command configures the CIR for the dual-bucket-bandwidth-policer policer. Nokia recommends that the CIR is configured larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. The CIR is configurable for dual-bucket bandwidth policers only.

  Range 0 to 100000000
  Default 0
  Units kilobps
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

congestion-override
  Synopsis Enter the congestion-override context
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override
  Tree congestion-override
 

Description

Commands in this context configure the congestion bandwidth policer override rates.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cbs number
  Synopsis Committed burst size in a congested stage 2 state
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override cbs number
  Tree cbs
 

Description

This command configures the committed burst size for a policer. The configured CBS should be larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. CBS is configurable for dual-bucket bandwidth policers only.

  Range 0 to 131071
  Default 0
  Units kilobytes
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cir (number | keyword)
  Synopsis Committed information rate value for the policer override
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override cir (number | keyword)
  Tree cir
 

Description

This command configures the CIR for the dual-bucket bandwidth policer congestion override. Nokia recommends that the CIR is configured larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. The CIR is configurable for dual-bucket bandwidth policers only.

  Range 0 to 100000000
  Default 0
  Units kilobps
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number
  Synopsis Maximum burst size when in a congested state
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override mbs number
  Tree mbs
 

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends configuring MBS larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

  Range 0 to 131071
  Default 0
  Units kilobytes
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir (number | keyword)
  Synopsis Peak information rate value for the congestion override
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override pir (number | keyword)
  Tree pir
  Range 1 to 100000000
  Default max
  Units kilobps
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

congestion-override-stage-2
  Synopsis Enter the congestion-override-stage-2 context
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override-stage-2
  Tree congestion-override-stage-2
 

Description

This command enables the context to configure per-subscriber stage 2 congestion bandwidth policer override rates.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cbs number
  Synopsis Committed burst size in a congested stage 2 state
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override-stage-2 cbs number
  Tree cbs
 

Description

This command configures the committed burst size for a policer. The configured CBS should be larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. CBS is configurable for dual-bucket bandwidth policers only.

  Range 0 to 131071
  Default 0
  Units kilobytes
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cir (number | keyword)
  Synopsis Committed information rate value for the policer override
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override-stage-2 cir (number | keyword)
  Tree cir
 

Description

This command configures the CIR for the dual-bucket bandwidth policer congestion override. Nokia recommends that the CIR is configured larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. The CIR is configurable for dual-bucket bandwidth policers only.

  Range 0 to 100000000
  Default 0
  Units kilobps
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number
  Synopsis Maximum burst size when in a congested state
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override-stage-2 mbs number
  Tree mbs
 

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends configuring MBS larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

  Range 0 to 131071
  Default 0
  Units kilobytes
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir (number | keyword)
  Synopsis Peak information rate value for the congestion override
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string congestion-override-stage-2 pir (number | keyword)
  Tree pir
  Range 1 to 100000000
  Default max
  Units kilobps
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number
  Synopsis Bandwidth policer maximum burst size
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string mbs number
  Tree mbs
 

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends configuring MBS larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

  Range 0 to 131071
  Default 0
  Units kilobytes
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir (number | keyword)
  Synopsis Peak information rate value for the bandwidth policer
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string pir (number | keyword)
  Tree pir
  Range 1 to 100000000
  Default max
  Units kilobps
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time-of-day-override [tod-override-id] number
  Synopsis Enter the time-of-day-override list instance
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number
  Tree time-of-day-override
 

Description

Commands in this context configure the time of day override policy for a given policer. Rate/mbs/cbs/flow-rate/flow-count configured in each override-id will override the default policer values at the specified time of day configured in the override.

  Max. Instances 8
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[tod-override-id] number
  Synopsis ID for time of day override
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number
  Range 1 to 255
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of this time of day policer
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cbs number
  Synopsis Committed burst size for time of day override policer
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number cbs number
  Tree cbs
 

Description

This command configures the committed burst size (CBS) for a policer. Nokia recommends configuring CBS larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. CBS is configurable for dual-bucket bandwidth policers only.

  Range 0 to 131071
  Default 0
  Units kilobytes
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

cir (number | keyword)
  Synopsis Committed information rate for time of day override
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number cir (number | keyword)
  Tree cir
 

Description

This command configures the committed information rate (CIR) for the dual-bucket-bandwidth-policer policer time of day override. Nokia recommends that the CIR is configured larger than twice the maximum MTU for the traffic handled by the policer to allow for some burstiness of the traffic. The CIR is configurable for dual-bucket bandwidth policers only.

  Range 0 to 100000000
  Default 0
  Units kilobps
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number
  Synopsis Maximum burst size for the policer time of day override
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number mbs number
  Tree mbs
 

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends that MBS is configured larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

  Range 0 to 131071
  Default 0
  Units kilobytes
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir (number | keyword)
  Synopsis Peak information rate value for the time of day override
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number pir (number | keyword)
  Tree pir
  Range 1 to 100000000
  Default max
  Units kilobps
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time-range
  Synopsis Enter the time-range context
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range
  Tree time-range
 

Description

Commands in this context configure the days of the week policer override is enabled as well as the time policer override starts and ends. When using a daily override the operator can select which days during the week from Sunday to Saturday it is applicable along with the start/end hour/min time range repeated over these days.When using a weekly override the operator can select between which days in the week the policy start up to the hours/min for both start day and end day.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

daily
  Synopsis Enable the daily context
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range daily
  Tree daily
 

Description

Commands in this context configure the daily start and end times for policer override.

 

Notes

The following elements are part of a choice: daily or weekly.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

all-days
  Synopsis Enable policer override on every day
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range daily all-days
  Tree all-days
 

Notes

This element is the default part of a choice.

The following elements are part of a choice: all-days or on.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end string
  Synopsis Daily end time
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range daily end string
  Tree end
 

Description

This command configures the daily end time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

  String Length 3 to 5
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

on keyword
  Synopsis Policer override on selected days
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range daily on keyword
  Tree on
  Options sunday, monday, tuesday, wednesday, thursday, friday, saturday
  Max. Instances 6
 

Notes

The following elements are part of a choice: all-days or on.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start string
  Synopsis Daily start time
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range daily start string
  Tree start
 

Description

This command configures the daily start time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

  String Length 3 to 5
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

weekly
  Synopsis Enable the weekly context
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range weekly
  Tree weekly
 

Description

Commands in this context configure the weekly start and end times for policer override.

 

Notes

The following elements are part of a choice: daily or weekly.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end
  Synopsis Enable the end context
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range weekly end
  Tree end
 

Description

Commands in this context configure the weekly end time for policer override.When using a weekly override, the operator can select between which days in the week the policy ends up to the hours or minutes for both start of the day and end of the day.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

day keyword
  Synopsis Weekly end day
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range weekly end day keyword
  Tree day
  Options sunday, monday, tuesday, wednesday, thursday, friday, saturday
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time string
  Synopsis Weekly end time
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range weekly end time string
  Tree time
 

Description

This command configures the weekly end time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

  String Length 3 to 5
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start
  Synopsis Enable the start context
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range weekly start
  Tree start
 

Description

Commands in this context configure the weekly start time for policer override.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

day keyword
  Synopsis Weekly start day
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range weekly start day keyword
  Tree day
  Options sunday, monday, tuesday, wednesday, thursday, friday, saturday
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time string
  Synopsis Weekly start time
  Context configure application-assurance group number policer dual-bucket-bandwidth-policer string time-of-day-override number time-range weekly start time string
  Tree time
 

Description

This command configures the weekly start time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

  String Length 3 to 5
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-count-limit-policer [policer-name] string
  Synopsis Enter the flow-count-limit-policer list instance
  Context configure application-assurance group number policer flow-count-limit-policer string
  Tree flow-count-limit-policer
 

Description

Commands in this context configure the AA flow count limit policer.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[policer-name] string
  Synopsis Policer name
  Context configure application-assurance group number policer flow-count-limit-policer string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword
  Synopsis Action for packets violating configured policer rate
  Context configure application-assurance group number policer flow-count-limit-policer string action keyword
  Tree action
 

Description

This command configures the action to be performed by single-bucket bandwidth policers for non-conformant traffic.

Dual bucket bandwidth policers cannot have their action configured and always mark traffic below CIR as in-profile, between CIR and PIR as out-of-profile, and drop traffic above PIR. Flow policers always discard non-conformant traffic.

When multiple application assurance policers are configured against a single flow (including policers at both subscriber and system), the flow/packet is dropped if one of the policers requires the packet to be discarded. This occurs regardless of the action of the other policers.

  Default permit-deny
  Options permit-deny, priority-mark
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number policer flow-count-limit-policer string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

granularity keyword
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.

  Synopsis Policer granularity
  Context configure application-assurance group number policer flow-count-limit-policer string granularity keyword
  Tree granularity
  Options system, subscriber
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

limit-gtp-flows boolean
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.

  Synopsis Limit concurrent GTP flows
  Context configure application-assurance group number policer flow-count-limit-policer string limit-gtp-flows boolean
  Tree limit-gtp-flows
  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

peak-flow-count (number | keyword)
  Synopsis Peak flow count limit
  Context configure application-assurance group number policer flow-count-limit-policer string peak-flow-count (number | keyword)
  Tree peak-flow-count
  Range 0 to 100000000
  Default max
  Units flows per second
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time-of-day-override [tod-override-id] number
  Synopsis Enter the time-of-day-override list instance
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number
  Tree time-of-day-override
 

Description

Commands in this context configure the time of day override policy for a specific policer. Rate/mbs/cbs/flow-rate/flow-count configured in each override ID overrides the default policer values at the specified time of day configured in the override.

  Max. Instances 8
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[tod-override-id] number
  Synopsis ID for time of day override
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number
  Range 1 to 255
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of this time of day policer
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

peak-flow-count (number | keyword)
  Synopsis Peak flow count limit
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number peak-flow-count (number | keyword)
  Tree peak-flow-count
  Range 0 to 100000000
  Default max
  Units flows per second
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time-range
  Synopsis Enter the time-range context
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range
  Tree time-range
 

Description

Commands in this context configure the days of the week policer override is enabled as well as the time policer override starts and ends. When using a daily override the operator can select which days during the week from Sunday to Saturday it is applicable along with the start/end hour/min time range repeated over these days.When using a weekly override the operator can select between which days in the week the policy start up to the hours/min for both start day and end day.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

daily
  Synopsis Enable the daily context
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range daily
  Tree daily
 

Description

Commands in this context configure the daily start and end times for policer override.

 

Notes

The following elements are part of a choice: daily or weekly.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

all-days
  Synopsis Enable policer override on every day
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range daily all-days
  Tree all-days
 

Notes

This element is the default part of a choice.

The following elements are part of a choice: all-days or on.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end string
  Synopsis Daily end time
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range daily end string
  Tree end
 

Description

This command configures the daily end time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

  String Length 3 to 5
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

on keyword
  Synopsis Policer override on selected days
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range daily on keyword
  Tree on
  Options sunday, monday, tuesday, wednesday, thursday, friday, saturday
  Max. Instances 6
 

Notes

The following elements are part of a choice: all-days or on.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start string
  Synopsis Daily start time
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range daily start string
  Tree start
 

Description

This command configures the daily start time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

  String Length 3 to 5
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

weekly
  Synopsis Enable the weekly context
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range weekly
  Tree weekly
 

Description

Commands in this context configure the weekly start and end times for policer override.

 

Notes

The following elements are part of a choice: daily or weekly.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end
  Synopsis Enable the end context
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range weekly end
  Tree end
 

Description

Commands in this context configure the weekly end time for policer override.When using a weekly override, the operator can select between which days in the week the policy ends up to the hours or minutes for both start of the day and end of the day.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

day keyword
  Synopsis Weekly end day
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range weekly end day keyword
  Tree day
  Options sunday, monday, tuesday, wednesday, thursday, friday, saturday
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time string
  Synopsis Weekly end time
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range weekly end time string
  Tree time
 

Description

This command configures the weekly end time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

  String Length 3 to 5
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start
  Synopsis Enable the start context
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range weekly start
  Tree start
 

Description

Commands in this context configure the weekly start time for policer override.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

day keyword
  Synopsis Weekly start day
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range weekly start day keyword
  Tree day
  Options sunday, monday, tuesday, wednesday, thursday, friday, saturday
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time string
  Synopsis Weekly start time
  Context configure application-assurance group number policer flow-count-limit-policer string time-of-day-override number time-range weekly start time string
  Tree time
 

Description

This command configures the weekly start time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

  String Length 3 to 5
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-setup-rate-policer [policer-name] string
  Synopsis Enter the flow-setup-rate-policer list instance
  Context configure application-assurance group number policer flow-setup-rate-policer string
  Tree flow-setup-rate-policer
 

Description

Commands in this context configure the flow setup rate policer.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[policer-name] string
  Synopsis Policer name
  Context configure application-assurance group number policer flow-setup-rate-policer string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword
  Synopsis Action for packets violating configured policer rate
  Context configure application-assurance group number policer flow-setup-rate-policer string action keyword
  Tree action
 

Description

This command configures the action to be performed by single-bucket bandwidth policers for non-conformant traffic.

Dual bucket bandwidth policers cannot have their action configured and always mark traffic below CIR as in-profile, between CIR and PIR as out-of-profile, and drop traffic above PIR. Flow policers always discard non-conformant traffic.

When multiple application assurance policers are configured against a single flow (including policers at both subscriber and system), the flow/packet is dropped if one of the policers requires the packet to be discarded. This occurs regardless of the action of the other policers.

  Default permit-deny
  Options permit-deny, priority-mark
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

adaptation-rule
  Synopsis Enter the adaptation-rule context
  Context configure application-assurance group number policer flow-setup-rate-policer string adaptation-rule
  Tree adaptation-rule
 

Description

Commands in this context configure the AA policer adaptation rule fields and define the method used by the system to derive the operational CIR and PIR values when the queue is provisioned. For the CIR and PIR values individually, the system attempts to find the best operational rate depending on the defined option. To change the CIR adaptation rule only, the current PIR rule must be part of the command executed.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

peak-flow-setup-rate keyword
  Synopsis Peak flow setup rate adaptation rule
  Context configure application-assurance group number policer flow-setup-rate-policer string adaptation-rule peak-flow-setup-rate keyword
  Tree peak-flow-setup-rate
  Default closest
  Options max, min, closest
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number policer flow-setup-rate-policer string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-setup-rate-burst-size number
  Synopsis Maximum flow setup rate burst size
  Context configure application-assurance group number policer flow-setup-rate-policer string flow-setup-rate-burst-size number
  Tree flow-setup-rate-burst-size
  Range 0 to 131071
  Default 0
  Units flows
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

granularity keyword
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.

  Synopsis Policer granularity
  Context configure application-assurance group number policer flow-setup-rate-policer string granularity keyword
  Tree granularity
  Options system, subscriber
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

peak-flow-setup-rate (number | keyword)
  Synopsis Peak flow setup rate
  Context configure application-assurance group number policer flow-setup-rate-policer string peak-flow-setup-rate (number | keyword)
  Tree peak-flow-setup-rate
  Range 1 to 100000000
  Default max
  Units flows per second
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time-of-day-override [tod-override-id] number
  Synopsis Enter the time-of-day-override list instance
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number
  Tree time-of-day-override
 

Description

Commands in this context configure the time of day override policy for a given policer. Rate/mbs/cbs/flow-rate/flow-count configured in each override-id will override the default policer values at the specified time of day configured in the override.

  Max. Instances 8
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[tod-override-id] number
  Synopsis ID for time of day override
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number
  Range 1 to 255
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of this time of day policer
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-setup-rate-burst-size number
  Synopsis Maximum flow setup rate burst size
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number flow-setup-rate-burst-size number
  Tree flow-setup-rate-burst-size
  Range 0 to 131071
  Default 0
  Units flows
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

peak-flow-setup-rate (number | keyword)
  Synopsis Peak flow setup rate
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number peak-flow-setup-rate (number | keyword)
  Tree peak-flow-setup-rate
  Range 1 to 100000000
  Default max
  Units flows per second
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time-range
  Synopsis Enter the time-range context
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range
  Tree time-range
 

Description

Commands in this context configure the days of the week policer override is enabled as well as the time policer override starts and ends. When using a daily override the operator can select which days during the week from Sunday to Saturday it is applicable along with the start/end hour/min time range repeated over these days.When using a weekly override the operator can select between which days in the week the policy start up to the hours/min for both start day and end day.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

daily
  Synopsis Enable the daily context
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range daily
  Tree daily
 

Description

Commands in this context configure the daily start and end times for policer override.

 

Notes

The following elements are part of a choice: daily or weekly.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

all-days
  Synopsis Enable policer override on every day
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range daily all-days
  Tree all-days
 

Notes

This element is the default part of a choice.

The following elements are part of a choice: all-days or on.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end string
  Synopsis Daily end time
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range daily end string
  Tree end
 

Description

This command configures the daily end time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

  String Length 3 to 5
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

on keyword
  Synopsis Policer override on selected days
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range daily on keyword
  Tree on
  Options sunday, monday, tuesday, wednesday, thursday, friday, saturday
  Max. Instances 6
 

Notes

The following elements are part of a choice: all-days or on.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start string
  Synopsis Daily start time
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range daily start string
  Tree start
 

Description

This command configures the daily start time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

  String Length 3 to 5
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

weekly
  Synopsis Enable the weekly context
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range weekly
  Tree weekly
 

Description

Commands in this context configure the weekly start and end times for policer override.

 

Notes

The following elements are part of a choice: daily or weekly.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end
  Synopsis Enable the end context
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range weekly end
  Tree end
 

Description

Commands in this context configure the weekly end time for policer override.When using a weekly override, the operator can select between which days in the week the policy ends up to the hours or minutes for both start of the day and end of the day.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

day keyword
  Synopsis Weekly end day
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range weekly end day keyword
  Tree day
  Options sunday, monday, tuesday, wednesday, thursday, friday, saturday
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time string
  Synopsis Weekly end time
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range weekly end time string
  Tree time
 

Description

This command configures the weekly end time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

  String Length 3 to 5
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start
  Synopsis Enable the start context
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range weekly start
  Tree start
 

Description

Commands in this context configure the weekly start time for policer override.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

day keyword
  Synopsis Weekly start day
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range weekly start day keyword
  Tree day
  Options sunday, monday, tuesday, wednesday, thursday, friday, saturday
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time string
  Synopsis Weekly start time
  Context configure application-assurance group number policer flow-setup-rate-policer string time-of-day-override number time-range weekly start time string
  Tree time
 

Description

This command configures the weekly start time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

  String Length 3 to 5
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

single-bucket-bandwidth-policer [policer-name] string
  Synopsis Enter the single-bucket-bandwidth-policer list instance
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string
  Tree single-bucket-bandwidth-policer
 

Description

Commands in this context configure the single-bucket bandwidth policer.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[policer-name] string
  Synopsis Policer name
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

action keyword
  Synopsis Action for packets violating configured policer rate
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string action keyword
  Tree action
 

Description

This command configures the action to be performed by single-bucket bandwidth policers for non-conformant traffic.

Dual bucket bandwidth policers cannot have their action configured and always mark traffic below CIR as in-profile, between CIR and PIR as out-of-profile, and drop traffic above PIR. Flow policers always discard non-conformant traffic.

When multiple application assurance policers are configured against a single flow (including policers at both subscriber and system), the flow/packet is dropped if one of the policers requires the packet to be discarded. This occurs regardless of the action of the other policers.

  Default permit-deny
  Options permit-deny, priority-mark
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

adaptation-rule
  Synopsis Enter the adaptation-rule context
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string adaptation-rule
  Tree adaptation-rule
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir keyword
  Synopsis Peak information rate value for the adaptation rule
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string adaptation-rule pir keyword
  Tree pir
 

Description

This command configures the adaptation rule to be used while computing the operational PIR value. The adaptation rule specifies the rules to compute the operational values while maintaining minimum offset.

  Default closest
  Options max, min, closest
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

congestion-override
  Synopsis Enter the congestion-override context
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string congestion-override
  Tree congestion-override
 

Description

Commands in this context configure the congestion bandwidth policer override rates.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number
  Synopsis Maximum burst size when in a congested state
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string congestion-override mbs number
  Tree mbs
 

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends configuring MBS larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

  Range 0 to 131071
  Default 0
  Units kilobytes
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir (number | keyword)
  Synopsis Peak information rate value for the congestion override
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string congestion-override pir (number | keyword)
  Tree pir
  Range 1 to 100000000
  Default max
  Units kilobps
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

congestion-override-stage-2
  Synopsis Enter the congestion-override-stage-2 context
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string congestion-override-stage-2
  Tree congestion-override-stage-2
 

Description

Commands in this context configure per-subscriber stage 2 congestion bandwidth policer override rates.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number
  Synopsis Maximum burst size when in a congested state
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string congestion-override-stage-2 mbs number
  Tree mbs
 

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends configuring MBS larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

  Range 0 to 131071
  Default 0
  Units kilobytes
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir (number | keyword)
  Synopsis Peak information rate value for the congestion override
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string congestion-override-stage-2 pir (number | keyword)
  Tree pir
  Range 1 to 100000000
  Default max
  Units kilobps
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

granularity keyword
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.

  Synopsis Policer granularity
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string granularity keyword
  Tree granularity
  Options system, subscriber
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number
  Synopsis Bandwidth policer maximum burst size
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string mbs number
  Tree mbs
 

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends configuring MBS larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

  Range 0 to 131071
  Default 0
  Units kilobytes
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir (number | keyword)
  Synopsis Peak information rate value for the bandwidth policer
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string pir (number | keyword)
  Tree pir
  Range 1 to 100000000
  Default max
  Units kilobps
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time-of-day-override [tod-override-id] number
  Synopsis Enter the time-of-day-override list instance
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number
  Tree time-of-day-override
 

Description

Commands in this context configure the time of day override policy for a given policer. Rate/mbs/cbs/flow-rate/flow-count configured in each override-id will override the default policer values at the specified time of day configured in the override.

  Max. Instances 8
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[tod-override-id] number
  Synopsis ID for time of day override
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number
  Range 1 to 255
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of this time of day policer
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

mbs number
  Synopsis Bandwidth policer maximum burst size for time of day override
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number mbs number
  Tree mbs
 

Description

This command configures the maximum burst size (MBS) for the policer. Nokia recommends configuring MBS larger than twice the MTU for the traffic handled by the policer to allow for some burstiness of the traffic. MBS is configurable for single-bucket, dual-bucket bandwidth, and flow setup rate policers only.

  Range 0 to 131071
  Default 0
  Units kilobytes
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

pir (number | keyword)
  Synopsis Peak information rate value for time of day override
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number pir (number | keyword)
  Tree pir
  Range 1 to 100000000
  Default max
  Units kilobps
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time-range
  Synopsis Enter the time-range context
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range
  Tree time-range
 

Description

Commands in this context configure the days of the week policer override is enabled as well as the time policer override starts and ends. When using a daily override the operator can select which days during the week from Sunday to Saturday it is applicable along with the start/end hour/min time range repeated over these days.When using a weekly override the operator can select between which days in the week the policy start up to the hours/min for both start day and end day.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

daily
  Synopsis Enable the daily context
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range daily
  Tree daily
 

Description

Commands in this context configure the daily start and end times for policer override.

 

Notes

The following elements are part of a choice: daily or weekly.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

all-days
  Synopsis Enable policer override on every day
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range daily all-days
  Tree all-days
 

Notes

This element is the default part of a choice.

The following elements are part of a choice: all-days or on.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end string
  Synopsis Daily end time
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range daily end string
  Tree end
 

Description

This command configures the daily end time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

  String Length 3 to 5
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

on keyword
  Synopsis Policer override on selected days
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range daily on keyword
  Tree on
  Options sunday, monday, tuesday, wednesday, thursday, friday, saturday
  Max. Instances 6
 

Notes

The following elements are part of a choice: all-days or on.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start string
  Synopsis Daily start time
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range daily start string
  Tree start
 

Description

This command configures the daily start time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

  String Length 3 to 5
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

weekly
  Synopsis Enable the weekly context
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range weekly
  Tree weekly
 

Description

Commands in this context configure the weekly start and end times for policer override.

 

Notes

The following elements are part of a choice: daily or weekly.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

end
  Synopsis Enable the end context
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range weekly end
  Tree end
 

Description

Commands in this context configure the weekly end time for policer override.When using a weekly override, the operator can select between which days in the week the policy ends up to the hours or minutes for both start of the day and end of the day.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

day keyword
  Synopsis Weekly end day
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range weekly end day keyword
  Tree day
  Options sunday, monday, tuesday, wednesday, thursday, friday, saturday
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time string
  Synopsis Weekly end time
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range weekly end time string
  Tree time
 

Description

This command configures the weekly end time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

  String Length 3 to 5
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

start
  Synopsis Enable the start context
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range weekly start
  Tree start
 

Description

Commands in this context configure the weekly start time for policer override.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

day keyword
  Synopsis Weekly start day
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range weekly start day keyword
  Tree day
  Options sunday, monday, tuesday, wednesday, thursday, friday, saturday
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

time string
  Synopsis Weekly start time
  Context configure application-assurance group number policer single-bucket-bandwidth-policer string time-of-day-override number time-range weekly start time string
  Tree time
 

Description

This command configures the weekly start time of the policer override.

The time format must be [hh:mm]. The hh value is 00 to 24. The mm value is 00, 15, 30, or 45. If hh is 24, mm must be 00.

  String Length 3 to 5
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-optimizer [tcp-optimizer-name] string
  Synopsis Enter the tcp-optimizer list instance
  Context configure application-assurance group number tcp-optimizer string
  Tree tcp-optimizer
 

Description

Commands in this context configure the TCP optimizer policy. When a TCP optimizer policy is removed or deleted, the existing flows using this policy are abandoned, and optimization is stopped.

  Introduced 22.2.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[tcp-optimizer-name] string
  Synopsis TCP optimizer name
  Context configure application-assurance group number tcp-optimizer string
 

Description

This command configures the name of the TCP optimizer policy.

  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 22.2.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dack-timeout number
  Synopsis Delayed acknowledgment timeout for client and server
  Context configure application-assurance group number tcp-optimizer string dack-timeout number
  Tree dack-timeout
 

Description

This command configures a delay ACK (DACK) timeout for the TCP optimizer. By entering this command a default of 200 ms timeout is enabled for delayed acknowledgment. This value is not configurable.

  Range 200
  Units milliseconds
  Introduced 22.2.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number tcp-optimizer string description string
  Tree description
  String Length 1 to 80
  Introduced 22.2.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

initial-cwnd number
  Synopsis Initial congestion window of the TCP optimizer
  Context configure application-assurance group number tcp-optimizer string initial-cwnd number
  Tree initial-cwnd
 

Description

This command configures the initial TCP congestion window (cwnd) used during the TCP Slow Start (SS) period.

  Range 1 to 256
  Default 8
  Introduced 22.2.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

initial-ss-threshold (number | keyword)
  Synopsis Initial TCP Slow Start threshold for client and server
  Context configure application-assurance group number tcp-optimizer string initial-ss-threshold (number | keyword)
  Tree initial-ss-threshold
 

Description

This command configures the initial Slow Start (SS) threshold for a specific TCP optimizer policy. Nokia recommends setting the threshold close to the access network Bandwidth Delay Product (BDP).

  Range 0 to 1000000
  Default 1000000
  Units kilobytes
  Options auto
  Introduced 22.2.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

network-rtt-threshold number
  Synopsis Network round trip time threshold
  Context configure application-assurance group number tcp-optimizer string network-rtt-threshold number
  Tree network-rtt-threshold
 

Description

This command configures the threshold of the Round Trip Time (RTT) delay of the network side (between AA and the content provider) above which TCP Optimization (TCPO) is performed. This enables the operator to disable optimization for content that is served from a location close to the TCP optimizer.

  Range 1 to 100
  Units milliseconds
  Introduced 22.2.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

tcp-stack keyword
  Synopsis TCP stack congestion control algorithm
  Context configure application-assurance group number tcp-optimizer string tcp-stack keyword
  Tree tcp-stack
 

Description

This command configures the TCP stack used toward the subscriber.

Note: The TCP stack used toward the core network is new-reno, and it is not configurable. TCP BBR, TCP Illinois, and TCP Westwood implement a sender-side modification of the TCP congestion window algorithm that improves the performance of TCP Reno in wireless networks with lossy links.

  Default westwood
  Options westwood, illinois, new-reno, bbr
  Introduced 22.2.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

url-filter [url-filter-name] string
  Synopsis Enter the url-filter list instance
  Context configure application-assurance group number url-filter string
  Tree url-filter
 

Description

Commands in this context configure a URL filter action for flows of a specific type matching this entry. If no URL filters are specified, then no URL filters are evaluated.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[url-filter-name] string
  Synopsis URL filter name
  Context configure application-assurance group number url-filter string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the AA URL filter
  Context configure application-assurance group number url-filter string admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

apply-function-specific-behaviour boolean
  Synopsis Use function-specific behavior for action or redirect
  Context configure application-assurance group number url-filter string apply-function-specific-behaviour boolean
  Tree apply-function-specific-behaviour
 

Description

When configured to true, the function-specific configurations for URL list, ICAP, and web service (url-list, icap, and web-service) are used for default action (default-action) and HTTP redirect (http-redirect).

When configured to false, the configuration at the URL filter level (url-filter) is used for default action and HTTP redirect. 

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action
  Synopsis Enter the default-action context
  Context configure application-assurance group number url-filter string default-action
  Tree default-action
 

Description

Commands in this context configure the default action to take effect when the URL filter cannot be used. This may occur in the following cases:

  • for the local URL list when the URL list is shut down or the file is not loaded due to an error.

  • in the case of ICAP or web filtering when all TCP connections are busy or down.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

allow
  Synopsis Allow all requests as the default URL filter action
  Context configure application-assurance group number url-filter string default-action allow
  Tree allow
 

Description

When configured, this command allows all requests as the default URL filter action when the URL filter cannot be used.

 

Notes

The following elements are part of a choice: allow, block-all, or block-http-redirect.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block-all
  Synopsis Block all requests as the default URL filter action
  Context configure application-assurance group number url-filter string default-action block-all
  Tree block-all
 

Description

When configured, this command blocks all requests as the default URL filter action when the URL filter cannot be used.

 

Notes

This element is the default part of a choice.

The following elements are part of a choice: allow, block-all, or block-http-redirect.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block-http-redirect reference
  Synopsis HTTP URL name for block and redirect request action
  Context configure application-assurance group number url-filter string default-action block-http-redirect reference
  Tree block-http-redirect
 

Description

This command blocks traffic and redirects the user to an information page that can be different from the page the user is redirected to when the site that the user tried to access is found in the URL filter. This page is configured using the configure AA group url-filter http-redirect command

 

Reference

configure application-assurance group number http-redirect string

 

Notes

The following elements are part of a choice: allow, block-all, or block-http-redirect.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number url-filter string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-redirect reference
  Synopsis HTTP redirect for a blocked HTTP request
  Context configure application-assurance group number url-filter string http-redirect reference
  Tree http-redirect
 

Reference

configure application-assurance group number http-redirect string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-request-filtering keyword
  Synopsis HTTP filtering for all HTTP requests
  Context configure application-assurance group number url-filter string http-request-filtering keyword
  Tree http-request-filtering
 

Description

This command selects between HTTP filtering for all HTTP requests in a flow or only the first HTTP request.

  Default all
  Options all, first
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

icap
  Synopsis Enter the icap context
  Context configure application-assurance group number url-filter string icap
  Tree icap
 

Description

Commands in this context configure the URL filter ICAP policy fields.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

custom-x-header string
  Synopsis Custom x-header field name to include in ICAP requests
  Context configure application-assurance group number url-filter string icap custom-x-header string
  Tree custom-x-header
 

Description

This command configures the URL filter ICAP policy to include a new x-header field; the content of the x-header is populated based on the AQP URL filter action which can optionally specify the ASO characteristic value to include in the x-header.

  String Length 1 to 32
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action
  Synopsis Enter the default-action context
  Context configure application-assurance group number url-filter string icap default-action
  Tree default-action
 

Description

Commands in this context configure a default action for the URL filter. The default action takes effect when the URL filter cannot be used. This may happen when all TCP connections are busy or down.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

allow
  Synopsis Allow all requests as the default action
  Context configure application-assurance group number url-filter string icap default-action allow
  Tree allow
 

Description

When configured, this command allows all traffic when the URL filter cannot be used.

 

Notes

The following elements are part of a choice: allow, block-all, or block-http-redirect.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block-all
  Synopsis Block all requests as the default action
  Context configure application-assurance group number url-filter string icap default-action block-all
  Tree block-all
 

Description

When configured, this command blocks all traffic when the URL filter cannot be used.

 

Notes

This element is the default part of a choice.

The following elements are part of a choice: allow, block-all, or block-http-redirect.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block-http-redirect reference
  Synopsis HTTP URL for redirection when URL filter cannot be used
  Context configure application-assurance group number url-filter string icap default-action block-http-redirect reference
  Tree block-http-redirect
 

Description

This command blocks traffic and redirects the user to an information page, which can be different than the page the user is redirected to when the site they attempted to access was found in the URL filter; this page is configured using the configure application-assurance group url-filter http-redirect command.

 

Reference

configure application-assurance group number http-redirect string

 

Notes

The following elements are part of a choice: allow, block-all, or block-http-redirect.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-redirect reference
  Synopsis HTTP redirect object used when ICAP blocks HTTP request
  Context configure application-assurance group number url-filter string icap http-redirect reference
  Tree http-redirect
 

Reference

configure application-assurance group number http-redirect string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server [ip-address] (ipv4-address-no-zone | ipv6-address-no-zone) port number
  Synopsis Enter the server list instance
  Context configure application-assurance group number url-filter string icap server (ipv4-address-no-zone | ipv6-address-no-zone) port number
  Tree server
 

Description

Commands in this context configure the IP address and server port of the ICAP server.

In the current release, the system supports IPv4 addresses only for the ICAP server.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[ip-address] (ipv4-address-no-zone | ipv6-address-no-zone)
  Synopsis ICAP server IP address
  Context configure application-assurance group number url-filter string icap server (ipv4-address-no-zone | ipv6-address-no-zone) port number
 

Description

This command configures the ICAP server address.

In the current release, the system supports IPv4 addresses only for the ICAP server.

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port number
  Synopsis ICAP server port
  Context configure application-assurance group number url-filter string icap server (ipv4-address-no-zone | ipv6-address-no-zone) port number
  Range 1 to 65535
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of this URL filter ICAP server
  Context configure application-assurance group number url-filter string icap server (ipv4-address-no-zone | ipv6-address-no-zone) port number admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number url-filter string icap server (ipv4-address-no-zone | ipv6-address-no-zone) port number description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

vlan-id number
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis VLAN ID of the ICAP server service port
  Context configure application-assurance group number url-filter string icap vlan-id number
  Tree vlan-id
  Range 1 to 4094
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

local-filtering
  Synopsis Enter the local-filtering context
  Context configure application-assurance group number url-filter string local-filtering
  Tree local-filtering
 

Description

Commands in this context configure a URL filter policy for local filtering to filter traffic based on a list of URLs located on a file stored in the router compact flash.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

allow-list reference
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis Local filtering URL list for allowed URLs
  Context configure application-assurance group number url-filter string local-filtering allow-list reference
  Tree allow-list
 

Reference

configure application-assurance group number url-list string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

deny-list [url-list-name] reference
  Synopsis Enter the deny-list list instance
  Context configure application-assurance group number url-filter string local-filtering deny-list reference
  Tree deny-list
 

Description

Commands in this context configure a list of denied URLs to be added to the local URL filter policy.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[url-list-name] reference
  Synopsis URL list name
  Context configure application-assurance group number url-filter string local-filtering deny-list reference
 

Description

This command adds a deny-list URL list to the local URL filter policy. 

 

Reference

configure application-assurance group number url-list string

 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action
  Synopsis Enter the default-action context
  Context configure application-assurance group number url-filter string local-filtering deny-list reference default-action
  Tree default-action
 

Description

Commands in this context configure a default action for the URL filter. The default action takes effect when the URL filter cannot be used. This may happen in the case of a local URL list when the URL list is disabled or the file is not loaded due to an error.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

allow
  Synopsis Allow all requests as the default action
  Context configure application-assurance group number url-filter string local-filtering deny-list reference default-action allow
  Tree allow
 

Description

This command allows all traffic when the URL filter cannot be used.

 

Notes

The following elements are part of a choice: allow, block-all, or block-http-redirect.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block-all
  Synopsis Block all requests as the default action
  Context configure application-assurance group number url-filter string local-filtering deny-list reference default-action block-all
  Tree block-all
 

Description

This command blocks all traffic when the URL filter cannot be used.

 

Notes

This element is the default part of a choice.

The following elements are part of a choice: allow, block-all, or block-http-redirect.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block-http-redirect reference
  Synopsis HTTP URL for redirection when URL filter cannot be used
  Context configure application-assurance group number url-filter string local-filtering deny-list reference default-action block-http-redirect reference
  Tree block-http-redirect
 

Description

This command blocks traffic and redirects the user to an information page, which can be different than the page the user is redirected to when the site they attempted to access was found in the URL filter; this page is configured using the configure application-assurance group url-filter http-redirect command.

 

Reference

configure application-assurance group number http-redirect string

 

Notes

The following elements are part of a choice: allow, block-all, or block-http-redirect.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-redirect reference
  Synopsis HTTP redirect object applied to blocked HTTP requests
  Context configure application-assurance group number url-filter string local-filtering deny-list reference http-redirect reference
  Tree http-redirect
 

Reference

configure application-assurance group number http-redirect string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

web-service
  Synopsis Enter the web-service context
  Context configure application-assurance group number url-filter string web-service
  Tree web-service
 

Description

Commands in this context configure the URL filter policy using web-service filtering. The operator must configure the web service, hostname, DNS server to use, the AA interface VLAN ID, and provision the category profiles.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

category-set number
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis Web service category ID
  Context configure application-assurance group number url-filter string web-service category-set number
  Tree category-set
  Range 1 to 65535
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

classification-overrides
  Synopsis Enter the classification-overrides context
  Context configure application-assurance group number url-filter string web-service classification-overrides
  Tree classification-overrides
 

Description

Commands in this context create a classification override and allow the operator to manually set the category of a hostname.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

entry [entry-id] number
  Synopsis Enter the entry list instance
  Context configure application-assurance group number url-filter string web-service classification-overrides entry number
  Tree entry
 

Description

Commands in this context configure a classification override, manually setting the category of a hostname.

  Max. Instances 200
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[entry-id] number
  Synopsis Classification override entry ID
  Context configure application-assurance group number url-filter string web-service classification-overrides entry number
  Range 1 to 65535
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

category-name string
  Synopsis Web service category name
  Context configure application-assurance group number url-filter string web-service classification-overrides entry number category-name string
  Tree category-name
  String Length 1 to 32
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

expression string
  Synopsis Hostname of the configured override category
  Context configure application-assurance group number url-filter string web-service classification-overrides entry number expression string
  Tree expression
  String Length 1 to 255
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

classifier keyword
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis Web service classifier
  Context configure application-assurance group number url-filter string web-service classifier keyword
  Tree classifier
  Options web-service-1
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action
  Synopsis Enter the default-action context
  Context configure application-assurance group number url-filter string web-service default-action
  Tree default-action
 

Description

Commands in this context configure a default action for the URL filter. The default action takes effect when the URL filter cannot be used. This may happen when all TCP connections are busy or down.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

allow
  Synopsis Allow all requests as the default action
  Context configure application-assurance group number url-filter string web-service default-action allow
  Tree allow
 

Description

This command allows all traffic when the web service is unavailable.

 

Notes

The following elements are part of a choice: allow, block-all, or block-http-redirect.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block-all
  Synopsis Block all requests as the default action
  Context configure application-assurance group number url-filter string web-service default-action block-all
  Tree block-all
 

Description

This command blocks all traffic when the web service is unavailable.

 

Notes

This element is the default part of a choice.

The following elements are part of a choice: allow, block-all, or block-http-redirect.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block-http-redirect reference
  Synopsis HTTP URL for redirection when the web service is unavailable
  Context configure application-assurance group number url-filter string web-service default-action block-http-redirect reference
  Tree block-http-redirect
 

Description

This command blocks traffic and redirects the user to an information page, which can be different than the page the user is redirected to when the site they attempted to access was found in the URL filter; this page is configured using the configure application-assurance group url-filter http-redirect command.

 

Reference

configure application-assurance group number http-redirect string

 

Notes

The following elements are part of a choice: allow, block-all, or block-http-redirect.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-profile reference
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis Web service default profile
  Context configure application-assurance group number url-filter string web-service default-profile reference
  Tree default-profile
 

Reference

configure application-assurance group number url-filter string web-service profile string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-server (ipv4-address-no-zone | ipv6-address-no-zone)
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis Web service DNS server
  Context configure application-assurance group number url-filter string web-service dns-server (ipv4-address-no-zone | ipv6-address-no-zone)
  Tree dns-server
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

fqdn string
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis Web service fully qualified domain name
  Context configure application-assurance group number url-filter string web-service fqdn string
  Tree fqdn
  String Length 1 to 255
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-redirect reference
  Synopsis Web service HTTP redirect
  Context configure application-assurance group number url-filter string web-service http-redirect reference
  Tree http-redirect
 

Reference

configure application-assurance group number http-redirect string

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

profile [profile-name] string
  Synopsis Enter the profile list instance
  Context configure application-assurance group number url-filter string web-service profile string
  Tree profile
 

Description

Commands in this context configure the category profiles of the web service.

  Max. Instances 8
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[profile-name] string
  Synopsis Web service profile name
  Context configure application-assurance group number url-filter string web-service profile string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

block
  Synopsis Enter the block context
  Context configure application-assurance group number url-filter string web-service profile string block
  Tree block
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

category [category-name] string
  Synopsis Add a list entry for category
  Context configure application-assurance group number url-filter string web-service profile string block category string
  Tree category
 

Description

Commands in this context configure the category that is blocked in the category profile.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[category-name] string
  Synopsis Web service profile category name to be blocked
  Context configure application-assurance group number url-filter string web-service profile string block category string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number url-filter string web-service profile string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

vlan-id number
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis Web-service VLAN ID
  Context configure application-assurance group number url-filter string web-service vlan-id number
  Tree vlan-id
 

Description

This command configures the VLAN ID on which the AA ISA emits the traffic mapping to a preconfigured AA interface.

  Range 1 to 4094
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

url-list [url-list-name] string
  Synopsis Enter the url-list list instance
  Context configure application-assurance group number url-list string
  Tree url-list
 

Description

Commands in this context configure a URL list object. The URL list points to a file containing a list of URLs located on the system Compact Flash and is then referenced in a URL filter object to filter and redirect subscribers when a URL from this file is accessed.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[url-list-name] string
  Synopsis URL list name
  Context configure application-assurance group number url-list string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the URL list
  Context configure application-assurance group number url-list string admin-state keyword
  Tree admin-state
  Default disable
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance group number url-list string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

file string
  Synopsis File name of the URL list on compact flash
  Context configure application-assurance group number url-list string file string
  Tree file
  String Length 1 to 180
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

host-expressions boolean
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis Allow URL list to contain hostnames with wildcards
  Context configure application-assurance group number url-list string host-expressions boolean
  Tree host-expressions
 

Description

When configured to true, this command adds hostnames with wildcards to the URL list.

When configured to false, the URL list containing hostnames with wildcards is removed from the configuration.

  Default false
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

key string
  Synopsis URL list decryption key
  Context configure application-assurance group number url-list string key string
  Tree key
 

Description

This command configures the secret key for decrypting the URL list.

  String Length 1 to 115
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

size keyword
WARNING:

Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect.

  Synopsis Size limit of the URL list
  Context configure application-assurance group number url-list string size keyword
  Tree size
  Default standard
  Options standard, extended
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-enrich

  Synopsis Enter the http-enrich context
  Context configure application-assurance http-enrich
  Tree http-enrich
 

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

field [field-name] string
  Synopsis Enter the field list instance
  Context configure application-assurance http-enrich field string
  Tree field
 

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[field-name] string
  Synopsis HTTP enrich field name (void, do not use)
  Context configure application-assurance http-enrich field string
 

Description

This command should not be used by the operators. Configuring it has no effect. Operators should use the commands in the application-assurance group context.

  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

comment string
  Synopsis User information comment
  Context configure application-assurance http-enrich field string comment string
  Tree comment
  String Length 1 to 32
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-error-redirect

  Synopsis Enter the http-error-redirect context
  Context configure application-assurance http-error-redirect
  Tree http-error-redirect
 

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

error-code [error-code-number] number
  Synopsis Enter the error-code list instance
  Context configure application-assurance http-error-redirect error-code number
  Tree error-code
 

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[error-code-number] number
  Synopsis Error code for HTTP error redirection
  Context configure application-assurance http-error-redirect error-code number
  Range 400 to 999
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

comment string
  Synopsis User information comment
  Context configure application-assurance http-error-redirect error-code number comment string
  Tree comment
  String Length 1 to 32
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template [template-id] number
  Synopsis Enter the template list instance
  Context configure application-assurance http-error-redirect template number
  Tree template
 

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[template-id] number
  Synopsis HTTP error redirect template ID
  Context configure application-assurance http-error-redirect template number
  Max. Range 0 to 4294967295
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

comment string
  Synopsis User information comment
  Context configure application-assurance http-error-redirect template number comment string
  Tree comment
  String Length 1 to 32
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-notification

  Synopsis Enter the http-notification context
  Context configure application-assurance http-notification
  Tree http-notification
 

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template [template-id] number
  Synopsis Enter the template list instance
  Context configure application-assurance http-notification template number
  Tree template
 

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[template-id] number
  Synopsis HTTP notification template ID
  Context configure application-assurance http-notification template number
  Max. Range 0 to 4294967295
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

comment string
  Synopsis User information comment
  Context configure application-assurance http-notification template number comment string
  Tree comment
  String Length 1 to 32
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

http-redirect

  Synopsis Enter the http-redirect context
  Context configure application-assurance http-redirect
  Tree http-redirect
 

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

template [template-id] number
  Synopsis Enter the template list instance
  Context configure application-assurance http-redirect template number
  Tree template
 

Description

Commands in this context should not be used by the operators. Configuring them has no effect. Operators should use the commands in the application-assurance group context.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[template-id] number
  Synopsis HTTP redirect template ID
  Context configure application-assurance http-redirect template number
 

Description

This command specifies the HTTP policy redirect template ID.

The available options are:

1 - JavaScript based redirect embedded in HTTP 200 OK response with a predefined number of arguments automatically appended to the redirect URL

2 - HTTP 302 redirect with a predefined number of arguments automatically appended to the redirect URL

3 - HTTP 302 redirect with no parameters appended to the URL (empty)

4 - Empty redirect format using JavaScript

5 - Redirect supporting macro substitution using HTTP 302

6 - Redirect supporting macro substitution using JavaScript

  Max. Range 0 to 4294967295
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

comment string
  Synopsis User information comment
  Context configure application-assurance http-redirect template number comment string
  Tree comment
  String Length 1 to 32
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

protocol [protocol-name] string

  Synopsis Enter the protocol list instance
  Context configure application-assurance protocol string
  Tree protocol
 

Description

Commands in this context configure the administrative state of system-wide protocols.Some protocols are always enabled and cannot be disabled. These are "base protocols" that were present in R1 of the release.Some protocols are disabled by default and can be enabled. There are protocols that were introduced post R1, which are all enabled by default but may be disabled if not desired.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[protocol-name] string
  Synopsis AA protocol name
  Context configure application-assurance protocol string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

admin-state keyword
  Synopsis Administrative state of the protocol
  Context configure application-assurance protocol string admin-state keyword
  Tree admin-state
  Options enable, disable
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

radius-accounting-policy [rad-acct-plcy-name] string

  Synopsis Enter the radius-accounting-policy list instance
  Context configure application-assurance radius-accounting-policy string
  Tree radius-accounting-policy
 

Description

Commands in this context configure an existing subscriber RADIUS-based accounting policy to use for AA. RADIUS accounting policies are configured in the configure application-assurance radius-accounting-policy context.

  Max. Instances 8
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[rad-acct-plcy-name] string
  Synopsis AA RADIUS accounting policy name
  Context configure application-assurance radius-accounting-policy string
  String Length 1 to 32
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description string
  Synopsis Text description
  Context configure application-assurance radius-accounting-policy string description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

interim-update-interval number
  Synopsis AA RADIUS accounting policy interim update interval
  Context configure application-assurance radius-accounting-policy string interim-update-interval number
  Tree interim-update-interval
  Range 5 to 1080
  Units minutes
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

radius-accounting-server
  Synopsis Enter the radius-accounting-server context
  Context configure application-assurance radius-accounting-policy string radius-accounting-server
  Tree radius-accounting-server
 

Description

Commands in this context configure an existing subscriber RADIUS-based accounting policy to use for AA. RADIUS accounting policies are configured in the configure application-assurance radius-accounting-policy context.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

access-algorithm keyword
  Synopsis Access algorithm for the list of RADIUS servers
  Context configure application-assurance radius-accounting-policy string radius-accounting-server access-algorithm keyword
  Tree access-algorithm
  Default direct
  Options direct, round-robin
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

retry number
  Synopsis Number of retries for contacting the RADIUS server
  Context configure application-assurance radius-accounting-policy string radius-accounting-server retry number
  Tree retry
  Range 1 to 10
  Default 3
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

router-instance string
  Synopsis Router or VPRN service name
  Context configure application-assurance radius-accounting-policy string radius-accounting-server router-instance string
  Tree router-instance
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

server [server-index] number
  Synopsis Enter the server list instance
  Context configure application-assurance radius-accounting-policy string radius-accounting-server server number
  Tree server
 

Description

Commands in this context configure the RADIUS server and the RADIUS server IP address, index, and key values.

RADIUS servers are accessed in order from lowest to highest index for authentication requests until a response from a server is received. A higher indexed server is only queried if no response is received from a lower indexed server (which implies that the server is not available). If a response from a server is received, no other RADIUS servers are queried.

  Max. Instances 5
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

[server-index] number
  Synopsis RADIUS accounting server index
  Context configure application-assurance radius-accounting-policy string radius-accounting-server server number
 

Description

This command configures the index for the RADIUS server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from lowest to highest index.

  Range 1 to 5
 

Notes

This element is part of a list key.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

address string
  Synopsis RADIUS server IP address
  Context configure application-assurance radius-accounting-policy string radius-accounting-server server number address string
  Tree address
 

Description

This command configures the IP address of the RADIUS server. Two RADIUS servers cannot have the same IP address. An error message is generated if the server address is a duplicate.

 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

port number
  Synopsis RADIUS server UDP port used for authentication
  Context configure application-assurance radius-accounting-policy string radius-accounting-server server number port number
  Tree port
  Range 1 to 65535
  Default 1813
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

secret string
  Synopsis RADIUS server secret key
  Context configure application-assurance radius-accounting-policy string radius-accounting-server server number secret string
  Tree secret
 

Description

This command configures the secret key to access the RADIUS server. This secret key must match the password on the RADIUS server.

  String Length 1 to 54
 

Notes

This element is mandatory.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

source-address string
  Synopsis Source IP address of RADIUS packets
  Context configure application-assurance radius-accounting-policy string radius-accounting-server source-address string
  Tree source-address
 

Description

This command configures the source IP address of the RADIUS packet. 

The system IP address must be configured for the RADIUS client to work. The system IP address must only be configured if the source address is not specified. When this command reverts to its default, the source address is determined at the moment the request is sent. 

This address is also used in the nas-ip-address command in the configure aaa radius isa-policy accounting include-attributes and configure aaa radius isa-policy authentication include-attributes contexts as it is set to the system IP address if no source address was given. 

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

timeout number
  Synopsis RADIUS accounting server response timeout
  Context configure application-assurance radius-accounting-policy string radius-accounting-server timeout number
  Tree timeout
  Range 1 to 90
  Default 5
  Units seconds
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

significant-change number
  Synopsis Change delta for RADIUS accounting record updates
  Context configure application-assurance radius-accounting-policy string significant-change number
  Tree significant-change
 

Description

This command configures the number of changes required to generate the record.

  Range 1
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

usage-alert-thresholds

  Synopsis Enter the usage-alert-thresholds context
  Context configure application-assurance usage-alert-thresholds
  Tree usage-alert-thresholds
 

Description

Commands in this context configure the AA performance monitoring alerts.

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

bit-rate-high-wmark (number | keyword)
  Synopsis High watermark for bit rate alarms
  Context configure application-assurance usage-alert-thresholds bit-rate-high-wmark (number | keyword)
  Tree bit-rate-high-wmark
 

Description

This command configures the high watermark for bit rate alarms. The value must be larger than or equal to the low watermark value.

  Range 1 to 100000
  Default max
  Units megabps
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

bit-rate-low-wmark number
  Synopsis Low watermark for bit rate alarms
  Context configure application-assurance usage-alert-thresholds bit-rate-low-wmark number
  Tree bit-rate-low-wmark
 

Description

This command configures the utilization of the flow records on the ISA-AA group when the full alarm is cleared by the agent.

  Range 0 to 99999
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

datapath-cpu-high-wmark (number | keyword)
  Synopsis High watermark for datapath CPU alarms
  Context configure application-assurance usage-alert-thresholds datapath-cpu-high-wmark (number | keyword)
  Tree datapath-cpu-high-wmark
 

Description

This command configures the system-wide high watermark threshold as a percentage of the per-ISA datapath core CPU utilization, where an alarm is raised by the agent. CPU usage is the average usage across all datapath cores.

  Range 0 to 100
  Default 95
  Units percent
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

datapath-cpu-low-wmark number
  Synopsis Low watermark for datapath CPU alarms
  Context configure application-assurance usage-alert-thresholds datapath-cpu-low-wmark number
  Tree datapath-cpu-low-wmark
 

Description

This command configures the system-wide low watermark threshold as a percentage of the per-ISA datapath core CPU utilization, where an alarm is raised by the agent. CPU usage is the average usage across all datapath cores.

  Range 0 to 100
  Default 90
  Units percent
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-setup-rate-high-wmark (number | keyword)
  Synopsis High watermark for flow setup rate
  Context configure application-assurance usage-alert-thresholds flow-setup-rate-high-wmark (number | keyword)
  Tree flow-setup-rate-high-wmark
 

Description

This command configures the system-wide high watermark threshold for per-ISA throughput in packets/second when an alarm is raised by the agent. The value must be larger than or equal to the packet-rate-low-wmark value.

  Range 1 to 2000000
  Default max
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-setup-rate-low-wmark number
  Synopsis Low watermark for flow setup rate
  Context configure application-assurance usage-alert-thresholds flow-setup-rate-low-wmark number
  Tree flow-setup-rate-low-wmark
 

Description

This command configures the flow setup rate on the ISA-AA when a flow setup alarm is raised by the agent.

  Range 0 to 1999999
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-table-high-wmark number
  Synopsis Flow table high watermark
  Context configure application-assurance usage-alert-thresholds flow-table-high-wmark number
  Tree flow-table-high-wmark
 

Description

This command configures the system-wide high watermark threshold as a percentage of the flow table size for the per-ISA utilization of the flow records when a full alarm is raised by the agent.

  Range 0 to 100
  Default 95
  Units percent
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

flow-table-low-wmark number
  Synopsis Flow table low watermark
  Context configure application-assurance usage-alert-thresholds flow-table-low-wmark number
  Tree flow-table-low-wmark
 

Description

This command configures the system-wide low watermark threshold as a percentage of the flow table size for per-ISA. 

  Range 0 to 100
  Default 90
  Units percent
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

packet-rate-high-wmark (number | keyword)
  Synopsis Packet rate high watermark
  Context configure application-assurance usage-alert-thresholds packet-rate-high-wmark (number | keyword)
  Tree packet-rate-high-wmark
 

Description

This command configures the packet rate on the ISA-AA when a packet rate alarm is raised by the agent.

  Range 1 to 148809524
  Default max
  Options max
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

packet-rate-low-wmark number
  Synopsis Packet rate low watermark
  Context configure application-assurance usage-alert-thresholds packet-rate-low-wmark number
  Tree packet-rate-low-wmark
 

Description

This command configures the packet rate on the ISA-AA when a packet rate alarm is cleared by the agent.

  Range 0 to 148809523
  Default 0
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR