configure
— filter
— apply-groups reference
— apply-groups-exclude reference
— dhcp-filter number
— apply-groups reference
— apply-groups-exclude reference
— default-action
— bypass-host-creation
— drop
— description string
— entry number
— action
— bypass-host-creation
— drop
— apply-groups reference
— apply-groups-exclude reference
— option
— absent
— match
— exact boolean
— hex string
— invert boolean
— string string
— number number
— present
— dhcp6-filter number
— apply-groups reference
— apply-groups-exclude reference
— default-action
— bypass-host-creation
— na boolean
— pd boolean
— drop
— description string
— entry number
— action
— bypass-host-creation
— na boolean
— pd boolean
— drop
— apply-groups reference
— apply-groups-exclude reference
— option
— absent
— match
— exact boolean
— hex string
— invert boolean
— string string
— number number
— present
— gre-tunnel-template string
— apply-groups reference
— apply-groups-exclude reference
— description string
— ipv4
— destination-address string
— gre-key (keyword | number)
— skip-ttl-decrement boolean
— source-address string
— ipv6
— destination-address string
— gre-key keyword
— skip-hop-decrement boolean
— source-address string
— ip-exception string
— apply-groups reference
— apply-groups-exclude reference
— description string
— entry number
— apply-groups reference
— apply-groups-exclude reference
— description string
— match
— dst-ip
— address (ipv4-address | ipv4-prefix-with-host-bits)
— mask string
— dst-port
— eq number
— gt number
— lt number
— range
— end number
— start number
— icmp
— code number
— type number
— protocol (number | keyword)
— src-ip
— address (ipv4-address | ipv4-prefix-with-host-bits)
— mask string
— src-port
— eq number
— gt number
— lt number
— range
— end number
— start number
— filter-id number
— ip-filter string
— apply-groups reference
— apply-groups-exclude reference
— chain-to-system-filter boolean
— default-action keyword
— description string
— embed
— filter reference offset number
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— flowspec offset number
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— group number
— router-instance string
— openflow reference offset number
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— grt
— sap reference
— system
— vpls reference
— vprn reference
— entry number
— action
— accept
— accept-when
— pattern
— expression string
— mask string
— offset-type keyword
— offset-value number
— apply-groups reference
— apply-groups-exclude reference
— drop
— drop-when
— extracted-traffic
— packet-length
— eq number
— gt number
— lt number
— range
— end number
— start number
— pattern
— expression string
— mask string
— offset-type keyword
— offset-value number
— ttl
— eq number
— gt number
— lt number
— range
— end number
— start number
— fc keyword
— forward
— bonding-connection number
— esi-l2
— esi-value string
— vpls reference
— esi-l3
— esi-value string
— sf-ip string
— vas-interface reference
— vprn reference
— gre-tunnel reference
— lsp string
— mpls-policy
— endpoint string
— next-hop
— interface-name string
— nh-ip
— address string
— indirect boolean
— nh-ip-vrf
— address string
— indirect boolean
— router-instance string
— redirect-policy reference
— router-instance string
— sap
— sap-id reference
— vpls reference
— sdp
— sdp-bind-id string
— vpls reference
— srte-policy
— color number
— endpoint string
— vprn-target
— adv-prefix string
— bgp-nh string
— lsp string
— vprn reference
— gtp-local-breakout
— http-redirect
— allow-override boolean
— url (keyword | http-redirect-url)
— ignore-match
— l2-aware-nat-bypass boolean
— nat
— nat-policy reference
— rate-limit
— extracted-traffic
— packet-length
— eq number
— gt number
— lt number
— range
— end number
— start number
— pattern
— expression string
— mask string
— offset-type keyword
— offset-value number
— pir (number | keyword)
— ttl
— eq number
— gt number
— lt number
— range
— end number
— start number
— reassemble
— remark
— dscp keyword
— secondary
— apply-groups reference
— apply-groups-exclude reference
— forward
— next-hop
— nh-ip-vrf
— address string
— indirect boolean
— router-instance string
— sap
— sap-id reference
— vpls reference
— sdp
— sdp-bind-id string
— vpls reference
— vprn-target
— adv-prefix string
— bgp-nh string
— lsp string
— vprn reference
— remark
— dscp keyword
— tcp-mss-adjust
— apply-groups reference
— apply-groups-exclude reference
— description string
— egress-pbr keyword
— filter-sample boolean
— interface-sample boolean
— log reference
— match
— destination-class number
— dscp keyword
— dst-ip
— address (ipv4-address | ipv4-prefix-with-host-bits)
— ip-prefix-list reference
— mask string
— dst-port
— eq number
— gt number
— lt number
— port-list reference
— range
— end number
— start number
— fragment keyword
— icmp
— code number
— type number
— ip
— address (ipv4-address | ipv4-prefix-with-host-bits)
— ip-prefix-list reference
— mask string
— ip-option
— mask number
— type number
— multiple-option boolean
— option-present boolean
— packet-length
— eq number
— gt number
— lt number
— range
— end number
— start number
— port
— eq number
— gt number
— lt number
— port-list reference
— range
— end number
— start number
— protocol (number | keyword)
— protocol-list reference
— src-ip
— address (ipv4-address | ipv4-prefix-with-host-bits)
— ip-prefix-list reference
— mask string
— src-mac
— address string
— mask string
— src-port
— eq number
— gt number
— lt number
— port-list reference
— range
— end number
— start number
— src-route-option boolean
— tcp-flags
— ack boolean
— cwr boolean
— ece boolean
— fin boolean
— ns boolean
— psh boolean
— rst boolean
— syn boolean
— urg boolean
— ttl
— eq number
— gt number
— lt number
— range
— end number
— start number
— pbr-down-action-override keyword
— sample-profile reference
— sticky-dest (number | keyword)
— filter-id number
— scope keyword
— shared-policer boolean
— subscriber-mgmt
— host-specific-entry
— credit-control
— range
— end number
— start number
— filter-rule
— range
— end number
— start number
— watermark
— high number
— low number
— shared-entry
— filter-rule
— range
— end number
— start number
— pcc-rule
— range
— end number
— start number
— watermark
— high number
— low number
— type keyword
— ipv6-exception string
— apply-groups reference
— apply-groups-exclude reference
— description string
— entry number
— apply-groups reference
— apply-groups-exclude reference
— description string
— match
— dst-ip
— address (ipv6-address | ipv6-prefix-with-host-bits)
— ipv6-prefix-list reference
— mask string
— dst-port
— eq number
— gt number
— lt number
— port-list reference
— range
— end number
— start number
— icmp
— code number
— type number
— next-header (number | keyword)
— port
— eq number
— gt number
— lt number
— port-list reference
— range
— end number
— start number
— src-ip
— address (ipv6-address | ipv6-prefix-with-host-bits)
— ipv6-prefix-list reference
— mask string
— src-port
— eq number
— gt number
— lt number
— port-list reference
— range
— end number
— start number
— filter-id number
— ipv6-filter string
— apply-groups reference
— apply-groups-exclude reference
— chain-to-system-filter boolean
— default-action keyword
— description string
— embed
— filter reference offset number
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— flowspec offset number
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— group number
— router-instance string
— openflow reference offset number
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— grt
— sap reference
— system
— vpls reference
— vprn reference
— entry number
— action
— accept
— accept-when
— pattern
— expression string
— mask string
— offset-type keyword
— offset-value number
— apply-groups reference
— apply-groups-exclude reference
— drop
— drop-when
— extracted-traffic
— hop-limit
— eq number
— gt number
— lt number
— range
— end number
— start number
— pattern
— expression string
— mask string
— offset-type keyword
— offset-value number
— payload-length
— eq number
— gt number
— lt number
— range
— end number
— start number
— fc keyword
— forward
— bonding-connection number
— esi-l2
— esi-value string
— vpls reference
— esi-l3
— esi-value string
— sf-ip string
— vas-interface reference
— vprn reference
— gre-tunnel reference
— lsp string
— mpls-policy
— endpoint string
— next-hop
— nh-ip
— address string
— indirect boolean
— nh-ip-vrf
— address string
— indirect boolean
— router-instance string
— redirect-policy reference
— router-instance string
— sap
— sap-id reference
— vpls reference
— sdp
— sdp-bind-id string
— vpls reference
— srte-policy
— color number
— endpoint string
— vprn-target
— adv-prefix string
— bgp-nh string
— lsp string
— vprn reference
— http-redirect
— allow-override boolean
— url (keyword | http-redirect-url)
— ignore-match
— nat
— nat-policy reference
— nat-type keyword
— rate-limit
— extracted-traffic
— hop-limit
— eq number
— gt number
— lt number
— range
— end number
— start number
— pattern
— expression string
— mask string
— offset-type keyword
— offset-value number
— payload-length
— eq number
— gt number
— lt number
— range
— end number
— start number
— pir (number | keyword)
— remark
— dscp keyword
— secondary
— apply-groups reference
— apply-groups-exclude reference
— forward
— next-hop
— nh-ip-vrf
— address string
— indirect boolean
— router-instance string
— sap
— sap-id reference
— vpls reference
— sdp
— sdp-bind-id string
— vpls reference
— vprn-target
— adv-prefix string
— bgp-nh string
— lsp string
— vprn reference
— remark
— dscp keyword
— tcp-mss-adjust
— apply-groups reference
— apply-groups-exclude reference
— description string
— egress-pbr keyword
— filter-sample boolean
— interface-sample boolean
— log reference
— match
— destination-class number
— dscp keyword
— dst-ip
— address (ipv6-address | ipv6-prefix-with-host-bits)
— ipv6-prefix-list reference
— mask string
— dst-port
— eq number
— gt number
— lt number
— port-list reference
— range
— end number
— start number
— extension-header
— ah boolean
— esp boolean
— hop-by-hop boolean
— routing-type0 boolean
— flow-label
— mask number
— value number
— fragment keyword
— hop-limit
— eq number
— gt number
— lt number
— range
— end number
— start number
— icmp
— code number
— type number
— ip
— address (ipv6-address | ipv6-prefix-with-host-bits)
— ipv6-prefix-list reference
— mask string
— next-header (number | keyword)
— next-header-list reference
— packet-length
— eq number
— gt number
— lt number
— range
— end number
— start number
— port
— eq number
— gt number
— lt number
— port-list reference
— range
— end number
— start number
— src-ip
— address (ipv6-address | ipv6-prefix-with-host-bits)
— ipv6-prefix-list reference
— mask string
— src-mac
— address string
— mask string
— src-port
— eq number
— gt number
— lt number
— port-list reference
— range
— end number
— start number
— tcp-flags
— ack boolean
— cwr boolean
— ece boolean
— fin boolean
— ns boolean
— psh boolean
— rst boolean
— syn boolean
— urg boolean
— pbr-down-action-override keyword
— sample-profile reference
— sticky-dest (number | keyword)
— filter-id number
— scope keyword
— shared-policer boolean
— subscriber-mgmt
— host-specific-entry
— credit-control
— range
— end number
— start number
— filter-rule
— range
— end number
— start number
— watermark
— high number
— low number
— shared-entry
— filter-rule
— range
— end number
— start number
— pcc-rule
— range
— end number
— start number
— watermark
— high number
— low number
— type keyword
— log number
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— destination
— memory
— max-entries number
— stop-on-full boolean
— syslog
— name reference
— summary
— admin-state keyword
— summary-crit keyword
— mac-filter string
— apply-groups reference
— apply-groups-exclude reference
— default-action keyword
— description string
— embed
— entry number
— action
— accept
— apply-groups reference
— apply-groups-exclude reference
— drop
— forward
— esi-l2
— esi-value string
— vpls reference
— sap
— sap-id reference
— vpls reference
— sdp
— sdp-bind-id string
— vpls reference
— http-redirect
— url string
— ignore-match
— rate-limit
— pir (number | keyword)
— secondary
— apply-groups reference
— apply-groups-exclude reference
— forward
— sap
— sap-id reference
— vpls reference
— sdp
— sdp-bind-id string
— vpls reference
— apply-groups reference
— apply-groups-exclude reference
— description string
— log reference
— match
— dot1p
— mask number
— priority number
— dst-mac
— address string
— mask string
— etype string
— frame-type keyword
— inner-tag
— mask number
— tag number
— isid
— range
— end number
— start number
— value number
— llc-dsap
— dsap number
— mask number
— llc-ssap
— mask number
— ssap number
— outer-tag
— mask number
— tag number
— snap-oui keyword
— snap-pid number
— src-mac
— address string
— mask string
— pbr-down-action-override keyword
— sticky-dest (number | keyword)
— filter-id number
— scope keyword
— type keyword
— match-list
— apply-groups reference
— apply-groups-exclude reference
— ip-prefix-list string
— apply-groups reference
— apply-groups-exclude reference
— apply-path
— bgp-peers number
— apply-groups reference
— apply-groups-exclude reference
— group string
— neighbor string
— router-instance string
— description string
— prefix string
— prefix-exclude string
— ipv6-prefix-list string
— apply-groups reference
— apply-groups-exclude reference
— apply-path
— bgp-peers number
— apply-groups reference
— apply-groups-exclude reference
— group string
— neighbor string
— router-instance string
— description string
— prefix string
— prefix-exclude string
— port-list string
— apply-groups reference
— apply-groups-exclude reference
— description string
— port number
— range start number end number
— protocol-list string
— apply-groups reference
— apply-groups-exclude reference
— description string
— protocol (number | keyword)
— md-auto-id
— filter-id-range
— apply-groups reference
— apply-groups-exclude reference
— end number
— start number
— redirect-policy string
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— destination (ipv4-address-no-zone | ipv6-address-no-zone)
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— description string
— ping-test
— apply-groups reference
— apply-groups-exclude reference
— drop-count number
— hold-down number
— interval number
— source-address (ipv4-address-no-zone | ipv6-address-no-zone)
— timeout number
— priority number
— unicast-rt-test
— notify-dest-change boolean
— router-instance string
— sticky-dest (number | keyword)
— redirect-policy-binding string
— apply-groups reference
— apply-groups-exclude reference
— binding-operator keyword
— redirect-policy reference
— apply-groups reference
— apply-groups-exclude reference
— destination reference
— system-filter
— apply-groups reference
— apply-groups-exclude reference
— ip reference
— ipv6 reference
| Synopsis | Enter the dhcp-filter list instance | |
| Context | configure filter dhcp-filter number | |
| Tree | dhcp-filter | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Unique DHCP filter policy ID | |
| Context | configure filter dhcp-filter number | |
| Range | 1 to 65535 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the default-action context | |
| Context | configure filter dhcp-filter number default-action | |
| Tree | default-action | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Host creation options to bypass | |
| Context | configure filter dhcp-filter number default-action bypass-host-creation | |
| Tree | bypass-host-creation | |
Notes |
The following elements are part of a mandatory choice: bypass-host-creation or drop. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS |
| Synopsis | DHCP host creation when the filter entry is matched | |
| Context | configure filter dhcp-filter number default-action drop | |
| Tree | drop | |
Notes |
The following elements are part of a mandatory choice: bypass-host-creation or drop. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Text description | |
| Context | configure filter dhcp-filter number description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the entry list instance | |
| Context | configure filter dhcp-filter number entry number | |
| Tree | entry | |
| Max. Instances | 10 | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
| Synopsis | DHCP filter entry index | |
| Context | configure filter dhcp-filter number entry number | |
| Range | 1 to 65535 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the action context | |
| Context | configure filter dhcp-filter number entry number action | |
| Tree | action | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Host creation options to bypass | |
| Context | configure filter dhcp-filter number entry number action bypass-host-creation | |
| Tree | bypass-host-creation | |
Notes |
The following elements are part of a mandatory choice: bypass-host-creation or drop. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS |
| Synopsis | Enable the option context | |
| Context | configure filter dhcp-filter number entry number option | |
| Tree | option | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the dhcp6-filter list instance | |
| Context | configure filter dhcp6-filter number | |
| Tree | dhcp6-filter | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Unique DHCP filter policy ID | |
| Context | configure filter dhcp6-filter number | |
| Range | 1 to 65535 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the default-action context | |
| Context | configure filter dhcp6-filter number default-action | |
| Tree | default-action | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the bypass-host-creation context | |
| Context | configure filter dhcp6-filter number default-action bypass-host-creation | |
| Tree | bypass-host-creation | |
Notes |
The following elements are part of a mandatory choice: bypass-host-creation or drop. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS |
| Synopsis | Bypass the DHCPv6 NA host creation | |
| Context | configure filter dhcp6-filter number default-action bypass-host-creation na boolean | |
| Tree | na | |
| Default | true | |
| Introduced | 16.0.R1 | |
|
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS |
| Synopsis | Bypass the DHCPv6 PD host creation | |
| Context | configure filter dhcp6-filter number default-action bypass-host-creation pd boolean | |
| Tree | pd | |
| Default | true | |
| Introduced | 16.0.R1 | |
|
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS |
| Synopsis | Drop DHCPv6 message (do not process) | |
| Context | configure filter dhcp6-filter number default-action drop | |
| Tree | drop | |
Notes |
The following elements are part of a mandatory choice: bypass-host-creation or drop. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Text description | |
| Context | configure filter dhcp6-filter number description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the entry list instance | |
| Context | configure filter dhcp6-filter number entry number | |
| Tree | entry | |
| Max. Instances | 10 | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
| Synopsis | DHCP filter entry index | |
| Context | configure filter dhcp6-filter number entry number | |
| Range | 1 to 65535 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the action context | |
| Context | configure filter dhcp6-filter number entry number action | |
| Tree | action | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the bypass-host-creation context | |
| Context | configure filter dhcp6-filter number entry number action bypass-host-creation | |
| Tree | bypass-host-creation | |
Notes |
The following elements are part of a mandatory choice: bypass-host-creation or drop. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS |
| Synopsis | Bypass the DHCPv6 NA host creation | |
| Context | configure filter dhcp6-filter number entry number action bypass-host-creation na boolean | |
| Tree | na | |
| Default | true | |
| Introduced | 16.0.R1 | |
|
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS |
| Synopsis | Bypass the DHCPv6 PD host creation | |
| Context | configure filter dhcp6-filter number entry number action bypass-host-creation pd boolean | |
| Tree | pd | |
| Default | true | |
| Introduced | 16.0.R1 | |
|
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS |
| Synopsis | Enable the option context | |
| Context | configure filter dhcp6-filter number entry number option | |
| Tree | option | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the gre-tunnel-template list instance | |
| Context | configure filter gre-tunnel-template string | |
| Tree | gre-tunnel-template | |
| Max. Instances | 8191 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | GRE tunnel template ID | |
| Context | configure filter gre-tunnel-template string | |
| String Length | 1 to 32 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Text description | |
| Context | configure filter gre-tunnel-template string description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 16.0.R2 | |
Platforms |
All |
| Synopsis | Enter the ipv4 context | |
| Context | configure filter gre-tunnel-template string ipv4 | |
| Tree | ipv4 | |
Notes |
The following elements are part of a choice: ipv4 or ipv6. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Add a list entry for destination-address | |
| Context | configure filter gre-tunnel-template string ipv4 destination-address string | |
| Tree | destination-address | |
Description |
This command defines a destination for the GRE IP header used to encapsulate the matching IPv4/IPv6 packet. A single destination address can be specified for an IPv6 gre-tunnel-template. Traffic matching the associated IPv4 or IPv6 filter is hashed across any available ECMP or UCMP route next hop available to the destination address. If no destination address is available, then matching traffic follows the configured pbr-down-action-override action, if configured. If no pbr-down-action-override is configured traffic is discarded. |
|
| Max. Instances | 32 | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
| Synopsis | Destination IPv4 address | |
| Context | configure filter gre-tunnel-template string ipv4 destination-address string | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | GRE key | |
| Context | configure filter gre-tunnel-template string ipv4 gre-key (keyword | number) | |
| Tree | gre-key | |
| Max. Range | 0 to 4294967295 | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Decrement TTL | |
| Context | configure filter gre-tunnel-template string ipv4 skip-ttl-decrement boolean | |
| Tree | skip-ttl-decrement | |
| Default | false | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
| Synopsis | Source IP address of the GRE encapsulated | |
| Context | configure filter gre-tunnel-template string ipv4 source-address string | |
| Tree | source-address | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the ipv6 context | |
| Context | configure filter gre-tunnel-template string ipv6 | |
| Tree | ipv6 | |
Notes |
The following elements are part of a choice: ipv4 or ipv6. |
|
| Introduced | 22.7.R1 | |
Platforms |
All |
| Synopsis | Add a list entry for destination-address | |
| Context | configure filter gre-tunnel-template string ipv6 destination-address string | |
| Tree | destination-address | |
| Max. Instances | 1 | |
| Introduced | 22.7.R1 | |
|
Platforms |
All |
| Synopsis | IPv6 destination address | |
| Context | configure filter gre-tunnel-template string ipv6 destination-address string | |
Notes |
This element is part of a list key. |
|
| Introduced | 22.7.R1 | |
Platforms |
All |
| Synopsis | Include a key value in GRE header | |
| Context | configure filter gre-tunnel-template string ipv6 gre-key keyword | |
| Tree | gre-key | |
Description |
This command includes a key value in the GRE header of ifIndex of the ingress interface. |
|
| Options | ||
| Introduced | 22.7.R1 | |
Platforms |
All |
| Synopsis | Decrement TTL of the received packet | |
| Context | configure filter gre-tunnel-template string ipv6 skip-hop-decrement boolean | |
| Tree | skip-hop-decrement | |
Description |
When configured to true, the system decrements the TTL of the IP packet matching the IPv4 or IPv6 filter when it is encapsulated into the GRE tunnel header. When configured to false, the system increases the TTL of the received packet. |
|
| Default | false | |
| Introduced | 22.7.R1 | |
|
Platforms |
All |
| Synopsis | Source IPv6 address of the GRE encapsulated | |
| Context | configure filter gre-tunnel-template string ipv6 source-address string | |
| Tree | source-address | |
| Introduced | 22.7.R1 | |
Platforms |
All |
| Synopsis | Enter the ip-exception list instance | |
| Context | configure filter ip-exception string | |
| Tree | ip-exception | |
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | Filter name | |
| Context | configure filter ip-exception string | |
| String Length | 1 to 64 | |
Notes |
This element is part of a list key. |
|
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | Text description | |
| Context | configure filter ip-exception string description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | Enter the entry list instance | |
| Context | configure filter ip-exception string entry number | |
| Tree | entry | |
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | ID for a match criteria and the corresponding action | |
| Context | configure filter ip-exception string entry number | |
| Range | 1 to 2097151 | |
Notes |
This element is part of a list key. |
|
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | Text description | |
| Context | configure filter ip-exception string entry number description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | Enter the match context | |
| Context | configure filter ip-exception string entry number match | |
| Tree | match | |
| Introduced | 20.10.R1 | |
Platforms |
VSR |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Filter ID | |
| Context | configure filter ip-exception string filter-id number | |
| Tree | filter-id | |
| Range | 1 to 65535 | |
| Introduced | 20.10.R1 | |
|
Platforms |
VSR |
|
| Synopsis | Chain filter policy to the active IPvX system filter policy | |
| Context | configure filter ip-filter string chain-to-system-filter boolean | |
| Tree | chain-to-system-filter | |
| Default | false | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
| Synopsis | Action for packets that do not match any entry | |
| Context | configure filter ip-filter string default-action keyword | |
| Tree | default-action | |
| Default | drop | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Text description | |
| Context | configure filter ip-filter string description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the embed context | |
| Context | configure filter ip-filter string embed | |
| Tree | embed | |
Description |
Commands in this context embed a previously defined IPv4 embedded filter policy or Hybrid OpenFlow switch instance into an exclusive, template, or system filter policy at the specified offset value. Rules derived from the BGP FlowSpec can also be embedded into template filter policies only. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Administrative state of the embedded filter | |
| Context | configure filter ip-filter string embed filter reference offset number admin-state keyword | |
| Tree | admin-state | |
| Default | enable | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Administrative state of the embedded filter | |
| Context | configure filter ip-filter string embed flowspec offset number admin-state keyword | |
| Tree | admin-state | |
| Default | enable | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Interface group ID for an external configured set of flowspec rules | |
| Context | configure filter ip-filter string embed flowspec offset number group number | |
| Tree | group | |
| Range | 0 to 16383 | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Virtual router for an external configured set of flowspec rules | |
| Context | configure filter ip-filter string embed flowspec offset number router-instance string | |
| Tree | router-instance | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
| Synopsis | Administrative state of the embedded filter | |
| Context | configure filter ip-filter string embed openflow reference offset number admin-state keyword | |
| Tree | admin-state | |
| Default | enable | |
| Options | ||
| Introduced | 16.0.R4 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Global routing context | |
| Context | configure filter ip-filter string embed openflow reference offset number grt | |
| Tree | grt | |
Notes |
This element is the default part of a choice. The following elements are part of a choice: grt, system, (sap and vpls), or vprn. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | SAP context | |
| Context | configure filter ip-filter string embed openflow reference offset number sap reference | |
| Tree | sap | |
Reference |
||
Notes |
The following elements are part of a choice: grt, system, (sap and vpls), or vprn. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | System context | |
| Context | configure filter ip-filter string embed openflow reference offset number system | |
| Tree | system | |
Notes |
The following elements are part of a choice: grt, system, (sap and vpls), or vprn. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | VPLS context | |
| Context | configure filter ip-filter string embed openflow reference offset number vpls reference | |
| Tree | vpls | |
Reference |
||
Notes |
The following elements are part of a choice: grt, system, (sap and vpls), or vprn. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | VPRN context | |
| Context | configure filter ip-filter string embed openflow reference offset number vprn reference | |
| Tree | vprn | |
Reference |
||
Notes |
The following elements are part of a choice: grt, system, (sap and vpls), or vprn. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
|
| Synopsis | Accept regular routing to forward a matching packet | |
| Context | configure filter ip-filter string entry number action accept | |
| Tree | accept | |
Notes |
The following elements are part of a mandatory choice: accept, drop, forward, gtp-local-breakout, http-redirect, ignore-match, nat, reassemble, or tcp-mss-adjust. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the accept-when context | |
| Context | configure filter ip-filter string entry number action accept-when | |
| Tree | accept-when | |
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Pattern expression to match | |
| Context | configure filter ip-filter string entry number action accept-when pattern expression string | |
| Tree | expression | |
| String Length | 3 to 18 | |
Notes |
This element is mandatory. |
|
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Starting point reference for offset value of pattern | |
| Context | configure filter ip-filter string entry number action accept-when pattern offset-type keyword | |
| Tree | offset-type | |
| Options | ||
|
Notes |
This element is mandatory. |
|
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Offset value for the pattern expression | |
| Context | configure filter ip-filter string entry number action accept-when pattern offset-value number | |
| Tree | offset-value | |
| Range | 0 to 255 | |
Notes |
This element is mandatory. |
|
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Drop a packet matching this entry | |
| Context | configure filter ip-filter string entry number action drop | |
| Tree | drop | |
Notes |
The following elements are part of a mandatory choice: accept, drop, forward, gtp-local-breakout, http-redirect, ignore-match, nat, reassemble, or tcp-mss-adjust. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Drop traffic extracted to CPM | |
| Context | configure filter ip-filter string entry number action drop-when extracted-traffic | |
| Tree | extracted-traffic | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the packet-length context | |
| Context | configure filter ip-filter string entry number action drop-when packet-length | |
| Tree | packet-length | |
Notes |
The following elements are part of a choice: packet-length or ttl. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Pattern expression to match | |
| Context | configure filter ip-filter string entry number action drop-when pattern expression string | |
| Tree | expression | |
| String Length | 3 to 18 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Starting point reference for offset value of pattern | |
| Context | configure filter ip-filter string entry number action drop-when pattern offset-type keyword | |
| Tree | offset-type | |
| Options | ||
|
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Offset value for the pattern expression | |
| Context | configure filter ip-filter string entry number action drop-when pattern offset-value number | |
| Tree | offset-value | |
| Range | 0 to 255 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Enable the range context | |
| Context | configure filter ip-filter string entry number action drop-when ttl range | |
| Tree | range | |
Description |
This command in this context specify an inclusive range. When range is used, the start of the range (the first value entered) must be smaller than the end of the range (the second value entered). |
|
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the forward context | |
| Context | configure filter ip-filter string entry number action forward | |
| Tree | forward | |
Notes |
The following elements are part of a mandatory choice: accept, drop, forward, gtp-local-breakout, http-redirect, ignore-match, nat, reassemble, or tcp-mss-adjust. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Connection ID over which packet is forwarded | |
| Context | configure filter ip-filter string entry number action forward bonding-connection number | |
| Tree | bonding-connection | |
| Range | 1 to 2 | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enable the esi-l2 context | |
| Context | configure filter ip-filter string entry number action forward esi-l2 | |
| Tree | esi-l2 | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the esi-l3 context | |
| Context | configure filter ip-filter string entry number action forward esi-l3 | |
| Tree | esi-l3 | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | ESI of the first ESI-identified appliance | |
| Context | configure filter ip-filter string entry number action forward esi-l3 esi-value string | |
| Tree | esi-value | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | IP address of the service function to forward traffic | |
| Context | configure filter ip-filter string entry number action forward esi-l3 sf-ip string | |
| Tree | sf-ip | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Egress R-VPLS IP interface name | |
| Context | configure filter ip-filter string entry number action forward esi-l3 vas-interface reference | |
| Tree | vas-interface | |
Reference |
||
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | VPRN service name | |
| Context | configure filter ip-filter string entry number action forward esi-l3 vprn reference | |
| Tree | vprn | |
Reference |
||
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
|
| Synopsis | GRE tunnel template ID that sets the location where an encapsulated matching packet is transported | |
| Context | configure filter ip-filter string entry number action forward gre-tunnel reference | |
| Tree | gre-tunnel | |
Reference |
configure filter gre-tunnel-template string |
|
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | LSP that is specified to forward a packet matching this entry | |
| Context | configure filter ip-filter string entry number action forward lsp string | |
| Tree | lsp | |
| String Length | 1 to 64 | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the mpls-policy context | |
| Context | configure filter ip-filter string entry number action forward mpls-policy | |
| Tree | mpls-policy | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 19.10.R1 | |
Platforms |
All |
| Synopsis | Enable the next-hop context | |
| Context | configure filter ip-filter string entry number action forward next-hop | |
| Tree | next-hop | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | IP interface name that forwards matching packets | |
| Context | configure filter ip-filter string entry number action forward next-hop interface-name string | |
| Tree | interface-name | |
| String Length | 1 to 32 | |
Notes |
The following elements are part of a mandatory choice: interface-name, nh-ip, or nh-ip-vrf. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | IPv4 address of next hop to forward matching packets | |
| Context | configure filter ip-filter string entry number action forward next-hop nh-ip address string | |
| Tree | address | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | IPv4 address of next hop to forward matching packets | |
| Context | configure filter ip-filter string entry number action forward next-hop nh-ip-vrf address string | |
| Tree | address | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Routing context for route lookup for forwarding packets | |
| Context | configure filter ip-filter string entry number action forward next-hop nh-ip-vrf router-instance string | |
| Tree | router-instance | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Next hop or forward next hop router that forwards a packet that matches this entry | |
| Context | configure filter ip-filter string entry number action forward redirect-policy reference | |
| Tree | redirect-policy | |
Reference |
configure filter redirect-policy string |
|
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Router name or VPRN service name | |
| Context | configure filter ip-filter string entry number action forward router-instance string | |
| Tree | router-instance | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
| Synopsis | Enable the sap context | |
| Context | configure filter ip-filter string entry number action forward sap | |
| Tree | sap | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the sdp context | |
| Context | configure filter ip-filter string entry number action forward sdp | |
| Tree | sdp | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | VPLS SDP bind ID used to forward matching packets | |
| Context | configure filter ip-filter string entry number action forward sdp sdp-bind-id string | |
| Tree | sdp-bind-id | |
| String Length | 3 to 16 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the srte-policy context | |
| Context | configure filter ip-filter string entry number action forward srte-policy | |
| Tree | srte-policy | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 19.10.R1 | |
Platforms |
All |
| Synopsis | Enable the vprn-target context | |
| Context | configure filter ip-filter string entry number action forward vprn-target | |
| Tree | vprn-target | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Advertised IP prefix for target destination | |
| Context | configure filter ip-filter string entry number action forward vprn-target adv-prefix string | |
| Tree | adv-prefix | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Break out matching traffic locally from a GTP tunnel for GTP-subscriber-hosts, or forward for other entities | |
| Context | configure filter ip-filter string entry number action gtp-local-breakout | |
| Tree | gtp-local-breakout | |
Notes |
The following elements are part of a mandatory choice: accept, drop, forward, gtp-local-breakout, http-redirect, ignore-match, nat, reassemble, or tcp-mss-adjust. |
|
| Introduced | 16.0.R1 | |
Platforms |
7750 SR, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enable the http-redirect context | |
| Context | configure filter ip-filter string entry number action http-redirect | |
| Tree | http-redirect | |
Description |
Commands in this context configure the filter entry action for HTTP redirection. |
|
Notes |
The following elements are part of a mandatory choice: accept, drop, forward, gtp-local-breakout, http-redirect, ignore-match, nat, reassemble, or tcp-mss-adjust. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Override the HTTP redirect URL by a RADIUS VSA | |
| Context | configure filter ip-filter string entry number action http-redirect allow-override boolean | |
| Tree | allow-override | |
Description |
This command specifies whether the RADIUS VSA can override the configured HTTP redirect URL for this filter entry. When configured to true, the RADIUS VSA can override the HTTP redirect URL. When configured to false, the HTTP redirect URL is not overriden. This does not apply if the CPF option is specified for the URL. |
|
| Default | false | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | URL used for HTTP redirect action | |
| Context | configure filter ip-filter string entry number action http-redirect url (keyword | http-redirect-url) | |
| Tree | url | |
Description |
This command specifies the URL to use for HTTP redirection for this filter entry. A URL can be specified or the CPF option can be used for BNG CUPS ESM sessions only. The following macro substitutions may be used: $URL — request-URI in the HTTP GET request received $MAC — a string that represents the MAC address of the subscriber host $IP — a string that represents the IP address of the subscriber host $SUB — a string that represents the subscriber ID $SAP — a string that represents a SAP ID $SAPDESC — description string configured on the SAP $CID — a string that represents the circuit ID or interface ID of the subscriber host (hexadecimal format) $RID — a string that represents the remote ID of the subscriber host (hexadecimal format) |
|
| String Length | 1 to 255 | |
| Options | ||
|
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
| Synopsis | Ignore match criteria for the entry | |
| Context | configure filter ip-filter string entry number action ignore-match | |
| Tree | ignore-match | |
Notes |
The following elements are part of a mandatory choice: accept, drop, forward, gtp-local-breakout, http-redirect, ignore-match, nat, reassemble, or tcp-mss-adjust. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Divert traffic from an L2-Aware NAT subscriber | |
| Context | configure filter ip-filter string entry number action l2-aware-nat-bypass boolean | |
| Tree | l2-aware-nat-bypass | |
Description |
When configured to true, the filter action selectively diverts traffic from a L2-Aware NAT subscriber away from NAT. This action is only applicable to L2-Aware NAT subscribers and must be configured together with action accept. Traffic identified in the match condition bypasses L2-Aware NAT. An example is to bypass NAT for on-net destinations (within the customer network). For selective NAT bypass to take effect, in addition to IP filter configuration, the L2-Aware NAT subscriber must be specifically enabled for selective bypass via the allow-bypass configuration option in the configure subscriber-mgmt sub-profile nat allow-bypass context. When configured to false, traffic that is not classified for bypass automatically diverts to L2-Aware NAT, unless it is explicitly configured in the IP filter action to be dropped. |
|
| Default | false | |
| Introduced | 20.5.R1 | |
|
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enable the nat context | |
| Context | configure filter ip-filter string entry number action nat | |
| Tree | nat | |
Notes |
The following elements are part of a mandatory choice: accept, drop, forward, gtp-local-breakout, http-redirect, ignore-match, nat, reassemble, or tcp-mss-adjust. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
|
WARNING:
Modifying this element clears ISA state, such as flow state, for the new value to take effect. |
||
| Synopsis | NAT policy name when action is NAT | |
| Context | configure filter ip-filter string entry number action nat nat-policy reference | |
| Tree | nat-policy | |
Reference |
configure service nat nat-policy string |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
|
| Synopsis | Enable the rate-limit context | |
| Context | configure filter ip-filter string entry number action rate-limit | |
| Tree | rate-limit | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Limit the rate of traffic extracted to the CPM | |
| Context | configure filter ip-filter string entry number action rate-limit extracted-traffic | |
| Tree | extracted-traffic | |
| Introduced | 22.2.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, 7950 XRS |
| Synopsis | Enable the packet-length context | |
| Context | configure filter ip-filter string entry number action rate-limit packet-length | |
| Tree | packet-length | |
Notes |
The following elements are part of a choice: packet-length or ttl. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Exact match criterion for the length | |
| Context | configure filter ip-filter string entry number action rate-limit packet-length eq number | |
| Tree | eq | |
| Range | 0 to 65535 | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Greater than match criterion for the length | |
| Context | configure filter ip-filter string entry number action rate-limit packet-length gt number | |
| Tree | gt | |
| Range | 0 to 65534 | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Less than match criterion for the length | |
| Context | configure filter ip-filter string entry number action rate-limit packet-length lt number | |
| Tree | lt | |
| Range | 1 to 65535 | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the range context | |
| Context | configure filter ip-filter string entry number action rate-limit packet-length range | |
| Tree | range | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Upper bound of the length range | |
| Context | configure filter ip-filter string entry number action rate-limit packet-length range end number | |
| Tree | end | |
| Range | 1 to 65535 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Lower bound of the length range | |
| Context | configure filter ip-filter string entry number action rate-limit packet-length range start number | |
| Tree | start | |
| Range | 0 to 65534 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Pattern expression to match | |
| Context | configure filter ip-filter string entry number action rate-limit pattern expression string | |
| Tree | expression | |
| String Length | 3 to 18 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Starting point reference for offset value of pattern | |
| Context | configure filter ip-filter string entry number action rate-limit pattern offset-type keyword | |
| Tree | offset-type | |
| Options | ||
|
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Offset value for the pattern expression | |
| Context | configure filter ip-filter string entry number action rate-limit pattern offset-value number | |
| Tree | offset-value | |
| Range | 0 to 255 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Enable the range context | |
| Context | configure filter ip-filter string entry number action rate-limit ttl range | |
| Tree | range | |
Description |
This command in this context specify an inclusive range. When range is used, the start of the range (the first value entered) must be smaller than the end of the range (the second value entered). |
|
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Forward matching packets to reassembly function | |
| Context | configure filter ip-filter string entry number action reassemble | |
| Tree | reassemble | |
Notes |
The following elements are part of a mandatory choice: accept, drop, forward, gtp-local-breakout, http-redirect, ignore-match, nat, reassemble, or tcp-mss-adjust. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | IPv4 address of next hop to forward matching packets | |
| Context | configure filter ip-filter string entry number action secondary forward next-hop nh-ip-vrf address string | |
| Tree | address | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Routing context for route lookup for forwarding packets | |
| Context | configure filter ip-filter string entry number action secondary forward next-hop nh-ip-vrf router-instance string | |
| Tree | router-instance | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | SAP ID used to forward packets matching the entry | |
| Context | configure filter ip-filter string entry number action secondary forward sap sap-id reference | |
| Tree | sap-id | |
Reference |
||
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | VPLS SDP bind ID used to forward matching packets | |
| Context | configure filter ip-filter string entry number action secondary forward sdp sdp-bind-id string | |
| Tree | sdp-bind-id | |
| String Length | 3 to 16 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
| Synopsis | Enable the vprn-target context | |
| Context | configure filter ip-filter string entry number action secondary forward vprn-target | |
| Tree | vprn-target | |
Notes |
The following elements are part of a choice: next-hop, sap, sdp, or vprn-target. |
|
| Introduced | 21.7.R1 | |
Platforms |
All |
| Synopsis | Advertised IP prefix for the target destination | |
| Context | configure filter ip-filter string entry number action secondary forward vprn-target adv-prefix string | |
| Tree | adv-prefix | |
| Introduced | 21.7.R1 | |
Platforms |
All |
| Synopsis | Adjust MSS option of TCP matching packets to configured value of tcp-mss in router interface context | |
| Context | configure filter ip-filter string entry number action tcp-mss-adjust | |
| Tree | tcp-mss-adjust | |
Notes |
The following elements are part of a mandatory choice: accept, drop, forward, gtp-local-breakout, http-redirect, ignore-match, nat, reassemble, or tcp-mss-adjust. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Text description | |
| Context | configure filter ip-filter string entry number description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | PBR that has an effect when this filter is applied on egress | |
| Context | configure filter ip-filter string entry number egress-pbr keyword | |
| Tree | egress-pbr | |
| Options | ||
| Introduced | 16.0.R1 | |
|
Platforms |
All |
|
| Synopsis | Sample matching traffic if IP interface is set to cflowd ACL mode | |
| Context | configure filter ip-filter string entry number filter-sample boolean | |
| Tree | filter-sample | |
| Default | false | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
| Synopsis | Sample matching traffic if IP interface is set to cflowd interface mode | |
| Context | configure filter ip-filter string entry number interface-sample boolean | |
| Tree | interface-sample | |
| Default | true | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
| Synopsis | Enter the match context | |
| Context | configure filter ip-filter string entry number match | |
| Tree | match | |
Description |
Commands in this context configure match criteria for the filter entry. When the match criteria are satisfied, the action associated with the match criteria is executed. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Destination class as a match criterion | |
| Context | configure filter ip-filter string entry number match destination-class number | |
| Tree | destination-class | |
Description |
This command configures the BGP destination class value as a match criterion. Filtering egress traffic on the destination class requires the destination-class-lookup command (under the ingress context for the service interface) to be enabled (set to true). |
|
| Range | 1 to 255 | |
| Introduced | 20.7.R1 | |
|
Platforms |
All |
| Synopsis | IPv4 address used as the match criterion | |
| Context | configure filter ip-filter string entry number match dst-ip address (ipv4-address | ipv4-prefix-with-host-bits) | |
| Tree | address | |
Notes |
The following elements are part of a choice: (address and mask) or ip-prefix-list. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | IP4 address prefix list used as match criterion | |
| Context | configure filter ip-filter string entry number match dst-ip ip-prefix-list reference | |
| Tree | ip-prefix-list | |
Reference |
configure filter match-list ip-prefix-list string |
|
Notes |
The following elements are part of a choice: (address and mask) or ip-prefix-list. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Name of the port list as the match criterion | |
| Context | configure filter ip-filter string entry number match dst-port port-list reference | |
| Tree | port-list | |
Reference |
configure filter match-list port-list string |
|
Notes |
The following elements are part of a choice: eq, gt, lt, port-list, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | IPv4 address used as the match criterion | |
| Context | configure filter ip-filter string entry number match ip address (ipv4-address | ipv4-prefix-with-host-bits) | |
| Tree | address | |
Notes |
The following elements are part of a choice: (address and mask) or ip-prefix-list. |
|
| Introduced | 21.10.R1 | |
Platforms |
All |
| Synopsis | IP4 address prefix list used as match criterion | |
| Context | configure filter ip-filter string entry number match ip ip-prefix-list reference | |
| Tree | ip-prefix-list | |
Reference |
configure filter match-list ip-prefix-list string |
|
Notes |
The following elements are part of a choice: (address and mask) or ip-prefix-list. |
|
| Introduced | 21.10.R1 | |
Platforms |
All |
| Synopsis | Match based on presence of multiple options in header | |
| Context | configure filter ip-filter string entry number match multiple-option boolean | |
| Tree | multiple-option | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Match on the presence of any IP option in the packet | |
| Context | configure filter ip-filter string entry number match option-present boolean | |
| Tree | option-present | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the packet-length context | |
| Context | configure filter ip-filter string entry number match packet-length | |
| Tree | packet-length | |
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Name of the port list as the match criterion | |
| Context | configure filter ip-filter string entry number match port port-list reference | |
| Tree | port-list | |
Reference |
configure filter match-list port-list string |
|
Notes |
The following elements are part of a choice: eq, gt, lt, port-list, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Name of the protocol list as a match criterion | |
| Context | configure filter ip-filter string entry number match protocol-list reference | |
| Tree | protocol-list | |
Reference |
configure filter match-list protocol-list string |
|
Notes |
The following elements are part of a choice: protocol or protocol-list. |
|
| Introduced | 20.7.R1 | |
Platforms |
All |
| Synopsis | IPv4 address used as the match criterion | |
| Context | configure filter ip-filter string entry number match src-ip address (ipv4-address | ipv4-prefix-with-host-bits) | |
| Tree | address | |
Notes |
The following elements are part of a choice: (address and mask) or ip-prefix-list. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | IP4 address prefix list used as match criterion | |
| Context | configure filter ip-filter string entry number match src-ip ip-prefix-list reference | |
| Tree | ip-prefix-list | |
Reference |
configure filter match-list ip-prefix-list string |
|
Notes |
The following elements are part of a choice: (address and mask) or ip-prefix-list. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Name of the port list as the match criterion | |
| Context | configure filter ip-filter string entry number match src-port port-list reference | |
| Tree | port-list | |
Reference |
configure filter match-list port-list string |
|
Notes |
The following elements are part of a choice: eq, gt, lt, port-list, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Match based on presence of source route option | |
| Context | configure filter ip-filter string entry number match src-route-option boolean | |
| Tree | src-route-option | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the range context | |
| Context | configure filter ip-filter string entry number match ttl range | |
| Tree | range | |
Description |
This command in this context specify an inclusive range. When range is used, the start of the range (the first value entered) must be smaller than the end of the range (the second value entered). |
|
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 21.10.R1 | |
Platforms |
All |
| Synopsis | Action when PBR or PBF target for this entry is not available | |
| Context | configure filter ip-filter string entry number pbr-down-action-override keyword | |
| Tree | pbr-down-action-override | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Cflowd sample profile ID to match packets | |
| Context | configure filter ip-filter string entry number sample-profile reference | |
| Tree | sample-profile | |
Description |
This command allows traffic matching an IPv4 or IPv6 filter to be sampled for cflowd processing using a specific sample profile ID. This option is only compatible if the associated interface is configured for interface-based sampling and is only supported for ingress sampling. An IP filter can only specify a single alternate sample profile ID for cflowd sampling, but the ID can be used in multiple entries. |
|
Reference |
configure cflowd sample-profile number |
|
| Introduced | 20.10.R1 | |
Platforms |
All |
| Synopsis | Time before action with available PBR or PBF destination and highest priority | |
| Context | configure filter ip-filter string entry number sticky-dest (number | keyword) | |
| Tree | sticky-dest | |
| Range | 0 to 65535 | |
| Units | seconds | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Share policer among active ports in the LAG | |
| Context | configure filter ip-filter string shared-policer boolean | |
| Tree | shared-policer | |
Description |
When configured to true, and when the filter policy is configured on a LAG endpoint, the system programs the policer rates in the filter policy per line card FP of the LAG based on the number of active ports in the LAG for each FP. When configured to false, and when the filter policy is configured on a LAG endpoint, the system programs the same policer rate on each line card FP of the LAG. |
|
| Default | false | |
| Introduced | 22.7.R1 | |
|
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, 7950 XRS |
| Synopsis | Enter the subscriber-mgmt context | |
| Context | configure filter ip-filter string subscriber-mgmt | |
| Tree | subscriber-mgmt | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enter the host-specific-entry context | |
| Context | configure filter ip-filter string subscriber-mgmt host-specific-entry | |
| Tree | host-specific-entry | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enter the credit-control context | |
| Context | configure filter ip-filter string subscriber-mgmt host-specific-entry credit-control | |
| Tree | credit-control | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enable the range context | |
| Context | configure filter ip-filter string subscriber-mgmt host-specific-entry credit-control range | |
| Tree | range | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Upper bound of range for credit control filter entries | |
| Context | configure filter ip-filter string subscriber-mgmt host-specific-entry credit-control range end number | |
| Tree | end | |
| Range | 1 to 2097151 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Lower bound of range for credit control filter entries | |
| Context | configure filter ip-filter string subscriber-mgmt host-specific-entry credit-control range start number | |
| Tree | start | |
| Range | 1 to 2097151 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enter the filter-rule context | |
| Context | configure filter ip-filter string subscriber-mgmt host-specific-entry filter-rule | |
| Tree | filter-rule | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enable the range context | |
| Context | configure filter ip-filter string subscriber-mgmt host-specific-entry filter-rule range | |
| Tree | range | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Upper bound of range for inserting filter rule entries | |
| Context | configure filter ip-filter string subscriber-mgmt host-specific-entry filter-rule range end number | |
| Tree | end | |
| Range | 1 to 2097151 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Lower bound of range for inserting filter rule entries | |
| Context | configure filter ip-filter string subscriber-mgmt host-specific-entry filter-rule range start number | |
| Tree | start | |
| Range | 1 to 2097151 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enter the watermark context | |
| Context | configure filter ip-filter string subscriber-mgmt host-specific-entry watermark | |
| Tree | watermark | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | High watermark for host-specific entries, to raise a table full alarm | |
| Context | configure filter ip-filter string subscriber-mgmt host-specific-entry watermark high number | |
| Tree | high | |
| Range | 0 to 100 | |
| Default | 95 | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Low watermark for host-specific entries, to clear a table full alarm | |
| Context | configure filter ip-filter string subscriber-mgmt host-specific-entry watermark low number | |
| Tree | low | |
| Range | 0 to 100 | |
| Default | 90 | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enter the shared-entry context | |
| Context | configure filter ip-filter string subscriber-mgmt shared-entry | |
| Tree | shared-entry | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enter the filter-rule context | |
| Context | configure filter ip-filter string subscriber-mgmt shared-entry filter-rule | |
| Tree | filter-rule | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enable the range context | |
| Context | configure filter ip-filter string subscriber-mgmt shared-entry filter-rule range | |
| Tree | range | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Upper bound of range for inserting shared host rules | |
| Context | configure filter ip-filter string subscriber-mgmt shared-entry filter-rule range end number | |
| Tree | end | |
| Range | 1 to 2097151 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Lower bound of range for inserting shared host rules | |
| Context | configure filter ip-filter string subscriber-mgmt shared-entry filter-rule range start number | |
| Tree | start | |
| Range | 1 to 2097151 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enter the pcc-rule context | |
| Context | configure filter ip-filter string subscriber-mgmt shared-entry pcc-rule | |
| Tree | pcc-rule | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enable the range context | |
| Context | configure filter ip-filter string subscriber-mgmt shared-entry pcc-rule range | |
| Tree | range | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Upper bound of the range for PCC rule filter entries | |
| Context | configure filter ip-filter string subscriber-mgmt shared-entry pcc-rule range end number | |
| Tree | end | |
| Range | 1 to 2097151 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Lower bound of the range for PCC rule filter entries | |
| Context | configure filter ip-filter string subscriber-mgmt shared-entry pcc-rule range start number | |
| Tree | start | |
| Range | 1 to 2097151 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enable the watermark context | |
| Context | configure filter ip-filter string subscriber-mgmt shared-entry watermark | |
| Tree | watermark | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Limit of RADIUS shared filters before generating high watermark notification | |
| Context | configure filter ip-filter string subscriber-mgmt shared-entry watermark high number | |
| Tree | high | |
| Range | 1 to 8000 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Limit of RADIUS or Diameter shared filters before clearing high watermark notification | |
| Context | configure filter ip-filter string subscriber-mgmt shared-entry watermark low number | |
| Tree | low | |
| Range | 0 to 7999 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Set of match criteria for the filter policy | |
| Context | configure filter ip-filter string type keyword | |
| Tree | type | |
Description |
This command configures the filter policy type that defines the list of match criteria supported in a filter policy. |
|
| Default | normal | |
| Options | ||
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Enter the ipv6-exception list instance | |
| Context | configure filter ipv6-exception string | |
| Tree | ipv6-exception | |
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | Filter name | |
| Context | configure filter ipv6-exception string | |
| String Length | 1 to 64 | |
Notes |
This element is part of a list key. |
|
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | Text description | |
| Context | configure filter ipv6-exception string description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | Enter the entry list instance | |
| Context | configure filter ipv6-exception string entry number | |
| Tree | entry | |
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | ID for a match criteria and the corresponding action | |
| Context | configure filter ipv6-exception string entry number | |
| Range | 1 to 2097151 | |
Notes |
This element is part of a list key. |
|
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | Text description | |
| Context | configure filter ipv6-exception string entry number description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | Enter the match context | |
| Context | configure filter ipv6-exception string entry number match | |
| Tree | match | |
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | IPv6 address used as the match criterion | |
| Context | configure filter ipv6-exception string entry number match dst-ip address (ipv6-address | ipv6-prefix-with-host-bits) | |
| Tree | address | |
Notes |
The following elements are part of a choice: (address and mask) or ipv6-prefix-list. |
|
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | IPv6 address prefix list used as match criterion | |
| Context | configure filter ipv6-exception string entry number match dst-ip ipv6-prefix-list reference | |
| Tree | ipv6-prefix-list | |
Reference |
configure filter match-list ipv6-prefix-list string |
|
Notes |
The following elements are part of a choice: (address and mask) or ipv6-prefix-list. |
|
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | Name of the port list as the match criterion | |
| Context | configure filter ipv6-exception string entry number match dst-port port-list reference | |
| Tree | port-list | |
Reference |
configure filter match-list port-list string |
|
Notes |
The following elements are part of a choice: eq, gt, lt, port-list, or range. |
|
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | IP protocol to match | |
| Context | configure filter ipv6-exception string entry number match next-header (number | keyword) | |
| Tree | next-header | |
| Range | 0 to 255 | |
| Options | ||
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | Name of the port list as the match criterion | |
| Context | configure filter ipv6-exception string entry number match port port-list reference | |
| Tree | port-list | |
Reference |
configure filter match-list port-list string |
|
Notes |
The following elements are part of a choice: eq, gt, lt, port-list, or range. |
|
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | IPv6 address used as the match criterion | |
| Context | configure filter ipv6-exception string entry number match src-ip address (ipv6-address | ipv6-prefix-with-host-bits) | |
| Tree | address | |
Notes |
The following elements are part of a choice: (address and mask) or ipv6-prefix-list. |
|
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | IPv6 address prefix list used as match criterion | |
| Context | configure filter ipv6-exception string entry number match src-ip ipv6-prefix-list reference | |
| Tree | ipv6-prefix-list | |
Reference |
configure filter match-list ipv6-prefix-list string |
|
Notes |
The following elements are part of a choice: (address and mask) or ipv6-prefix-list. |
|
| Introduced | 20.10.R1 | |
Platforms |
VSR |
| Synopsis | Name of the port list as the match criterion | |
| Context | configure filter ipv6-exception string entry number match src-port port-list reference | |
| Tree | port-list | |
Reference |
configure filter match-list port-list string |
|
Notes |
The following elements are part of a choice: eq, gt, lt, port-list, or range. |
|
| Introduced | 20.10.R1 | |
Platforms |
VSR |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Filter ID | |
| Context | configure filter ipv6-exception string filter-id number | |
| Tree | filter-id | |
| Range | 1 to 65535 | |
| Introduced | 20.10.R1 | |
|
Platforms |
VSR |
|
| Synopsis | Enter the ipv6-filter list instance | |
| Context | configure filter ipv6-filter string | |
| Tree | ipv6-filter | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Filter name | |
| Context | configure filter ipv6-filter string | |
| String Length | 1 to 64 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Chain filter policy to the active IPvX system filter policy | |
| Context | configure filter ipv6-filter string chain-to-system-filter boolean | |
| Tree | chain-to-system-filter | |
| Default | false | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
| Synopsis | Action for packets that do not match any entry | |
| Context | configure filter ipv6-filter string default-action keyword | |
| Tree | default-action | |
| Default | drop | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Text description | |
| Context | configure filter ipv6-filter string description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the embed context | |
| Context | configure filter ipv6-filter string embed | |
| Tree | embed | |
Description |
Commands in this context embed a previously defined IPv6 embedded filter policy or Hybrid OpenFlow switch instance into an exclusive, template, or system filter policy at the specified offset value. Rules derived from the BGP FlowSpec can also be embedded into template filter policies only. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | IPv6 policy to be embedded in the filter | |
| Context | configure filter ipv6-filter string embed filter reference offset number | |
Reference |
configure filter ipv6-filter string |
|
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Offset of the inserted entries | |
| Context | configure filter ipv6-filter string embed filter reference offset number | |
| Range | 0 to 2097150 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Administrative state of the embedded filter | |
| Context | configure filter ipv6-filter string embed filter reference offset number admin-state keyword | |
| Tree | admin-state | |
| Default | enable | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Offset of the inserted entries | |
| Context | configure filter ipv6-filter string embed flowspec offset number | |
| Range | 0 to 2097151 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Administrative state of the embedded filter | |
| Context | configure filter ipv6-filter string embed flowspec offset number admin-state keyword | |
| Tree | admin-state | |
| Default | enable | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Interface group ID for an external configured set of flowspec rules | |
| Context | configure filter ipv6-filter string embed flowspec offset number group number | |
| Tree | group | |
| Range | 0 to 16383 | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Virtual router for an external configured set of flowspec rules | |
| Context | configure filter ipv6-filter string embed flowspec offset number router-instance string | |
| Tree | router-instance | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
| Synopsis | Offset of the inserted entries | |
| Context | configure filter ipv6-filter string embed openflow reference offset number | |
| Range | 0 to 2097150 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Administrative state of the embedded filter | |
| Context | configure filter ipv6-filter string embed openflow reference offset number admin-state keyword | |
| Tree | admin-state | |
| Default | enable | |
| Options | ||
| Introduced | 16.0.R4 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Global routing context | |
| Context | configure filter ipv6-filter string embed openflow reference offset number grt | |
| Tree | grt | |
Notes |
This element is the default part of a choice. The following elements are part of a choice: grt, system, (sap and vpls), or vprn. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | SAP context | |
| Context | configure filter ipv6-filter string embed openflow reference offset number sap reference | |
| Tree | sap | |
Reference |
||
Notes |
The following elements are part of a choice: grt, system, (sap and vpls), or vprn. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | System context | |
| Context | configure filter ipv6-filter string embed openflow reference offset number system | |
| Tree | system | |
Notes |
The following elements are part of a choice: grt, system, (sap and vpls), or vprn. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | VPLS context | |
| Context | configure filter ipv6-filter string embed openflow reference offset number vpls reference | |
| Tree | vpls | |
Reference |
||
Notes |
The following elements are part of a choice: grt, system, (sap and vpls), or vprn. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | VPRN context | |
| Context | configure filter ipv6-filter string embed openflow reference offset number vprn reference | |
| Tree | vprn | |
Reference |
||
Notes |
The following elements are part of a choice: grt, system, (sap and vpls), or vprn. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
|
| Synopsis | Enter the entry list instance | |
| Context | configure filter ipv6-filter string entry number | |
| Tree | entry | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | ID for a match criteria and the corresponding action | |
| Context | configure filter ipv6-filter string entry number | |
| Range | 1 to 2097151 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the action context | |
| Context | configure filter ipv6-filter string entry number action | |
| Tree | action | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Accept regular routing to forward a matching packet | |
| Context | configure filter ipv6-filter string entry number action accept | |
| Tree | accept | |
Notes |
The following elements are part of a mandatory choice: accept, drop, forward, http-redirect, ignore-match, nat, or tcp-mss-adjust. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the accept-when context | |
| Context | configure filter ipv6-filter string entry number action accept-when | |
| Tree | accept-when | |
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Enable the pattern context | |
| Context | configure filter ipv6-filter string entry number action accept-when pattern | |
| Tree | pattern | |
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Pattern expression to match | |
| Context | configure filter ipv6-filter string entry number action accept-when pattern expression string | |
| Tree | expression | |
| String Length | 3 to 18 | |
Notes |
This element is mandatory. |
|
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Mask for the pattern expression | |
| Context | configure filter ipv6-filter string entry number action accept-when pattern mask string | |
| Tree | mask | |
| String Length | 3 to 18 | |
Notes |
This element is mandatory. |
|
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Starting point reference for offset value of pattern | |
| Context | configure filter ipv6-filter string entry number action accept-when pattern offset-type keyword | |
| Tree | offset-type | |
| Options | ||
|
Notes |
This element is mandatory. |
|
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Offset value for the pattern expression | |
| Context | configure filter ipv6-filter string entry number action accept-when pattern offset-value number | |
| Tree | offset-value | |
| Range | 0 to 255 | |
Notes |
This element is mandatory. |
|
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Drop traffic extracted to CPM | |
| Context | configure filter ipv6-filter string entry number action drop-when extracted-traffic | |
| Tree | extracted-traffic | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the range context | |
| Context | configure filter ipv6-filter string entry number action drop-when hop-limit range | |
| Tree | range | |
Description |
This command in this context specify an inclusive range. When range is used, the start of the range (the first value entered) must be smaller than the end of the range (the second value entered). |
|
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Pattern expression to match | |
| Context | configure filter ipv6-filter string entry number action drop-when pattern expression string | |
| Tree | expression | |
| String Length | 3 to 18 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Starting point reference for offset value of pattern | |
| Context | configure filter ipv6-filter string entry number action drop-when pattern offset-type keyword | |
| Tree | offset-type | |
| Options | ||
|
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Offset value for the pattern expression | |
| Context | configure filter ipv6-filter string entry number action drop-when pattern offset-value number | |
| Tree | offset-value | |
| Range | 0 to 255 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Enable the payload-length context | |
| Context | configure filter ipv6-filter string entry number action drop-when payload-length | |
| Tree | payload-length | |
Notes |
The following elements are part of a choice: hop-limit or payload-length. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Exact match criterion for the length | |
| Context | configure filter ipv6-filter string entry number action drop-when payload-length eq number | |
| Tree | eq | |
| Range | 0 to 65535 | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Greater than match criterion for the length | |
| Context | configure filter ipv6-filter string entry number action drop-when payload-length gt number | |
| Tree | gt | |
| Range | 0 to 65534 | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Less than match criterion for the length | |
| Context | configure filter ipv6-filter string entry number action drop-when payload-length lt number | |
| Tree | lt | |
| Range | 1 to 65535 | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the range context | |
| Context | configure filter ipv6-filter string entry number action drop-when payload-length range | |
| Tree | range | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Upper bound of the length range | |
| Context | configure filter ipv6-filter string entry number action drop-when payload-length range end number | |
| Tree | end | |
| Range | 1 to 65535 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Lower bound of the length range | |
| Context | configure filter ipv6-filter string entry number action drop-when payload-length range start number | |
| Tree | start | |
| Range | 0 to 65534 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Connection ID over which packet is forwarded | |
| Context | configure filter ipv6-filter string entry number action forward bonding-connection number | |
| Tree | bonding-connection | |
| Range | 1 to 2 | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enable the esi-l2 context | |
| Context | configure filter ipv6-filter string entry number action forward esi-l2 | |
| Tree | esi-l2 | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the esi-l3 context | |
| Context | configure filter ipv6-filter string entry number action forward esi-l3 | |
| Tree | esi-l3 | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | ESI of the first ESI-identified appliance | |
| Context | configure filter ipv6-filter string entry number action forward esi-l3 esi-value string | |
| Tree | esi-value | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | IP address of the service function to forward traffic | |
| Context | configure filter ipv6-filter string entry number action forward esi-l3 sf-ip string | |
| Tree | sf-ip | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Egress R-VPLS IP interface name | |
| Context | configure filter ipv6-filter string entry number action forward esi-l3 vas-interface reference | |
| Tree | vas-interface | |
Reference |
||
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | VPRN service name | |
| Context | configure filter ipv6-filter string entry number action forward esi-l3 vprn reference | |
| Tree | vprn | |
Reference |
||
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
|
| Synopsis | GRE tunnel template ID that sets the location where an encapsulated matching packet is transported | |
| Context | configure filter ipv6-filter string entry number action forward gre-tunnel reference | |
| Tree | gre-tunnel | |
Reference |
configure filter gre-tunnel-template string |
|
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | LSP that is specified to forward a packet matching this entry | |
| Context | configure filter ipv6-filter string entry number action forward lsp string | |
| Tree | lsp | |
| String Length | 1 to 64 | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the mpls-policy context | |
| Context | configure filter ipv6-filter string entry number action forward mpls-policy | |
| Tree | mpls-policy | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 19.10.R1 | |
Platforms |
All |
| Synopsis | MPLS forwarding policy endpoint IPv6 address | |
| Context | configure filter ipv6-filter string entry number action forward mpls-policy endpoint string | |
| Tree | endpoint | |
Notes |
This element is mandatory. |
|
| Introduced | 19.10.R1 | |
Platforms |
All |
| Synopsis | Enable the next-hop context | |
| Context | configure filter ipv6-filter string entry number action forward next-hop | |
| Tree | next-hop | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | IPv6 address of next hop to forward matching packets | |
| Context | configure filter ipv6-filter string entry number action forward next-hop nh-ip address string | |
| Tree | address | |
Description |
This command specifies the IPv6 address of a direct or indirect next hop to which matching packets are forwarded. |
|
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | IPv6 address of next hop to forward matching packets | |
| Context | configure filter ipv6-filter string entry number action forward next-hop nh-ip-vrf address string | |
| Tree | address | |
Description |
This command specifies the IPv6 address of a direct or indirect next hop to which matching packets are forwarded. |
|
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Routing context for route lookup for forwarding packets | |
| Context | configure filter ipv6-filter string entry number action forward next-hop nh-ip-vrf router-instance string | |
| Tree | router-instance | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Next hop or forward next hop router that forwards a packet that matches this entry | |
| Context | configure filter ipv6-filter string entry number action forward redirect-policy reference | |
| Tree | redirect-policy | |
Reference |
configure filter redirect-policy string |
|
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Router name or VPRN service name | |
| Context | configure filter ipv6-filter string entry number action forward router-instance string | |
| Tree | router-instance | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
| Synopsis | Enable the sap context | |
| Context | configure filter ipv6-filter string entry number action forward sap | |
| Tree | sap | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the sdp context | |
| Context | configure filter ipv6-filter string entry number action forward sdp | |
| Tree | sdp | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | VPLS SDP bind ID used to forward matching packets | |
| Context | configure filter ipv6-filter string entry number action forward sdp sdp-bind-id string | |
| Tree | sdp-bind-id | |
| String Length | 3 to 16 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the srte-policy context | |
| Context | configure filter ipv6-filter string entry number action forward srte-policy | |
| Tree | srte-policy | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 19.10.R1 | |
Platforms |
All |
| Synopsis | SR-TE policy color ID | |
| Context | configure filter ipv6-filter string entry number action forward srte-policy color number | |
| Tree | color | |
| Range | 0 to 4294967295 | |
Notes |
This element is mandatory. |
|
| Introduced | 19.10.R1 | |
Platforms |
All |
| Synopsis | SR-TE policy endpoint IPv6 address | |
| Context | configure filter ipv6-filter string entry number action forward srte-policy endpoint string | |
| Tree | endpoint | |
Notes |
This element is mandatory. |
|
| Introduced | 19.10.R1 | |
Platforms |
All |
| Synopsis | Enable the vprn-target context | |
| Context | configure filter ipv6-filter string entry number action forward vprn-target | |
| Tree | vprn-target | |
Notes |
The following elements are part of a choice: bonding-connection, esi-l2, esi-l3, gre-tunnel, lsp, mpls-policy, next-hop, redirect-policy, router-instance, sap, sdp, srte-policy, or vprn-target. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Advertised IP prefix for target destination | |
| Context | configure filter ipv6-filter string entry number action forward vprn-target adv-prefix string | |
| Tree | adv-prefix | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Target BGP next hop IP address | |
| Context | configure filter ipv6-filter string entry number action forward vprn-target bgp-nh string | |
| Tree | bgp-nh | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | LSP that is specified to forward a packet matching this entry | |
| Context | configure filter ipv6-filter string entry number action forward vprn-target lsp string | |
| Tree | lsp | |
| String Length | 1 to 64 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Routing context used for route lookup | |
| Context | configure filter ipv6-filter string entry number action forward vprn-target vprn reference | |
| Tree | vprn | |
Reference |
||
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Enable the http-redirect context | |
| Context | configure filter ipv6-filter string entry number action http-redirect | |
| Tree | http-redirect | |
Description |
Commands in this context configure the filter entry action for HTTP redirection. |
|
Notes |
The following elements are part of a mandatory choice: accept, drop, forward, http-redirect, ignore-match, nat, or tcp-mss-adjust. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Override the HTTP redirect URL by a RADIUS VSA | |
| Context | configure filter ipv6-filter string entry number action http-redirect allow-override boolean | |
| Tree | allow-override | |
Description |
This command specifies whether the RADIUS VSA can override the configured HTTP redirect URL for this filter entry. When configured to true, the RADIUS VSA can override the HTTP redirect URL. When configured to false, the HTTP redirect URL is not overriden. This does not apply if the CPF option is specified for the URL. |
|
| Default | false | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | URL used for HTTP redirect action | |
| Context | configure filter ipv6-filter string entry number action http-redirect url (keyword | http-redirect-url) | |
| Tree | url | |
Description |
This command specifies the URL to use for HTTP redirection for this filter entry. A URL can be specified or the CPF option can be used for BNG CUPS ESM sessions only. The following macro substitutions may be used: $URL — request-URI in the HTTP GET request received $MAC — a string that represents the MAC address of the subscriber host $IP — a string that represents the IP address of the subscriber host $SUB — a string that represents the subscriber ID $SAP — a string that represents a SAP ID $SAPDESC — description string configured on the SAP $CID — a string that represents the circuit ID or interface ID of the subscriber host (hexadecimal format) $RID — a string that represents the remote ID of the subscriber host (hexadecimal format) |
|
| String Length | 1 to 255 | |
| Options | ||
|
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
| Synopsis | Ignore match criteria for the entry | |
| Context | configure filter ipv6-filter string entry number action ignore-match | |
| Tree | ignore-match | |
Notes |
The following elements are part of a mandatory choice: accept, drop, forward, http-redirect, ignore-match, nat, or tcp-mss-adjust. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the nat context | |
| Context | configure filter ipv6-filter string entry number action nat | |
| Tree | nat | |
Notes |
The following elements are part of a mandatory choice: accept, drop, forward, http-redirect, ignore-match, nat, or tcp-mss-adjust. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
|
WARNING:
Modifying this element clears ISA state, such as flow state, for the new value to take effect. |
||
| Synopsis | NAT policy name when action is NAT | |
| Context | configure filter ipv6-filter string entry number action nat nat-policy reference | |
| Tree | nat-policy | |
Reference |
configure service nat nat-policy string |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
|
|
WARNING:
Modifying this element clears ISA state, such as flow state, for the new value to take effect. |
||
| Synopsis | NAT type to assign when action is NAT | |
| Context | configure filter ipv6-filter string entry number action nat nat-type keyword | |
| Tree | nat-type | |
| Options | ||
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
|
| Synopsis | Enable the rate-limit context | |
| Context | configure filter ipv6-filter string entry number action rate-limit | |
| Tree | rate-limit | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Limit the rate of traffic extracted to the CPM | |
| Context | configure filter ipv6-filter string entry number action rate-limit extracted-traffic | |
| Tree | extracted-traffic | |
| Introduced | 22.2.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, 7950 XRS |
| Synopsis | Enable the hop-limit context | |
| Context | configure filter ipv6-filter string entry number action rate-limit hop-limit | |
| Tree | hop-limit | |
Notes |
The following elements are part of a choice: hop-limit or payload-length. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Equal to condition match value | |
| Context | configure filter ipv6-filter string entry number action rate-limit hop-limit eq number | |
| Tree | eq | |
| Range | 0 to 255 | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Greater than condition match value | |
| Context | configure filter ipv6-filter string entry number action rate-limit hop-limit gt number | |
| Tree | gt | |
| Range | 0 to 254 | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Less than condition match value | |
| Context | configure filter ipv6-filter string entry number action rate-limit hop-limit lt number | |
| Tree | lt | |
| Range | 1 to 255 | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the range context | |
| Context | configure filter ipv6-filter string entry number action rate-limit hop-limit range | |
| Tree | range | |
Description |
This command in this context specify an inclusive range. When range is used, the start of the range (the first value entered) must be smaller than the end of the range (the second value entered). |
|
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Upper bound of the range | |
| Context | configure filter ipv6-filter string entry number action rate-limit hop-limit range end number | |
| Tree | end | |
| Range | 1 to 255 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Lower bound of the range | |
| Context | configure filter ipv6-filter string entry number action rate-limit hop-limit range start number | |
| Tree | start | |
| Range | 0 to 254 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the pattern context | |
| Context | configure filter ipv6-filter string entry number action rate-limit pattern | |
| Tree | pattern | |
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Pattern expression to match | |
| Context | configure filter ipv6-filter string entry number action rate-limit pattern expression string | |
| Tree | expression | |
| String Length | 3 to 18 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Mask for the pattern expression | |
| Context | configure filter ipv6-filter string entry number action rate-limit pattern mask string | |
| Tree | mask | |
| String Length | 3 to 18 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Starting point reference for offset value of pattern | |
| Context | configure filter ipv6-filter string entry number action rate-limit pattern offset-type keyword | |
| Tree | offset-type | |
| Options | ||
|
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Offset value for the pattern expression | |
| Context | configure filter ipv6-filter string entry number action rate-limit pattern offset-value number | |
| Tree | offset-value | |
| Range | 0 to 255 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Enable the payload-length context | |
| Context | configure filter ipv6-filter string entry number action rate-limit payload-length | |
| Tree | payload-length | |
Notes |
The following elements are part of a choice: hop-limit or payload-length. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Exact match criterion for the length | |
| Context | configure filter ipv6-filter string entry number action rate-limit payload-length eq number | |
| Tree | eq | |
| Range | 0 to 65535 | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Greater than match criterion for the length | |
| Context | configure filter ipv6-filter string entry number action rate-limit payload-length gt number | |
| Tree | gt | |
| Range | 0 to 65534 | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Less than match criterion for the length | |
| Context | configure filter ipv6-filter string entry number action rate-limit payload-length lt number | |
| Tree | lt | |
| Range | 1 to 65535 | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the range context | |
| Context | configure filter ipv6-filter string entry number action rate-limit payload-length range | |
| Tree | range | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Upper bound of the length range | |
| Context | configure filter ipv6-filter string entry number action rate-limit payload-length range end number | |
| Tree | end | |
| Range | 1 to 65535 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Lower bound of the length range | |
| Context | configure filter ipv6-filter string entry number action rate-limit payload-length range start number | |
| Tree | start | |
| Range | 0 to 65534 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Peak information rate | |
| Context | configure filter ipv6-filter string entry number action rate-limit pir (number | keyword) | |
| Tree | pir | |
| Range | 0 to 2000000000 | |
| Units | kilobps | |
| Options | ||
|
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | IPv6 address of next hop to forward matching packets | |
| Context | configure filter ipv6-filter string entry number action secondary forward next-hop nh-ip-vrf address string | |
| Tree | address | |
Description |
This command specifies the IPv6 address of a direct or indirect next hop to which matching packets are forwarded. |
|
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Routing context for route lookup for forwarding packets | |
| Context | configure filter ipv6-filter string entry number action secondary forward next-hop nh-ip-vrf router-instance string | |
| Tree | router-instance | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | SAP ID used to forward packets matching the entry | |
| Context | configure filter ipv6-filter string entry number action secondary forward sap sap-id reference | |
| Tree | sap-id | |
Reference |
||
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | VPLS SDP bind ID used to forward matching packets | |
| Context | configure filter ipv6-filter string entry number action secondary forward sdp sdp-bind-id string | |
| Tree | sdp-bind-id | |
| String Length | 3 to 16 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
| Synopsis | Enable the vprn-target context | |
| Context | configure filter ipv6-filter string entry number action secondary forward vprn-target | |
| Tree | vprn-target | |
Notes |
The following elements are part of a choice: next-hop, sap, sdp, or vprn-target. |
|
| Introduced | 21.7.R1 | |
Platforms |
All |
| Synopsis | Advertised IP prefix for the target destination | |
| Context | configure filter ipv6-filter string entry number action secondary forward vprn-target adv-prefix string | |
| Tree | adv-prefix | |
| Introduced | 21.7.R1 | |
Platforms |
All |
| Synopsis | Target BGP next hop IP address | |
| Context | configure filter ipv6-filter string entry number action secondary forward vprn-target bgp-nh string | |
| Tree | bgp-nh | |
Notes |
This element is mandatory. |
|
| Introduced | 21.7.R1 | |
Platforms |
All |
| Synopsis | LSP that is specified to forward a packet matching this entry | |
| Context | configure filter ipv6-filter string entry number action secondary forward vprn-target lsp string | |
| Tree | lsp | |
| String Length | 1 to 64 | |
| Introduced | 21.7.R1 | |
Platforms |
All |
| Synopsis | Adjust MSS option of TCP matching packets to configured value of tcp-mss in router interface context | |
| Context | configure filter ipv6-filter string entry number action tcp-mss-adjust | |
| Tree | tcp-mss-adjust | |
Notes |
The following elements are part of a mandatory choice: accept, drop, forward, http-redirect, ignore-match, nat, or tcp-mss-adjust. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Text description | |
| Context | configure filter ipv6-filter string entry number description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | PBR that has an effect when this filter is applied on egress | |
| Context | configure filter ipv6-filter string entry number egress-pbr keyword | |
| Tree | egress-pbr | |
| Options | ||
| Introduced | 16.0.R1 | |
|
Platforms |
All |
|
| Synopsis | Sample matching traffic if IP interface is set to cflowd ACL mode | |
| Context | configure filter ipv6-filter string entry number filter-sample boolean | |
| Tree | filter-sample | |
| Default | false | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
| Synopsis | Sample matching traffic if IP interface is set to cflowd interface mode | |
| Context | configure filter ipv6-filter string entry number interface-sample boolean | |
| Tree | interface-sample | |
| Default | true | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
| Synopsis | Enter the match context | |
| Context | configure filter ipv6-filter string entry number match | |
| Tree | match | |
Description |
Commands in this context provide match criteria for the filter entry. When the match criteria are satisfied, the action associated with the match criteria is executed. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Destination class as a match criterion | |
| Context | configure filter ipv6-filter string entry number match destination-class number | |
| Tree | destination-class | |
Description |
This command configures the BGP destination class value as a match criterion. Filtering egress traffic on the destination class requires the destination-class-lookup command (under the ingress context for the service interface) to be enabled (set to true). |
|
| Range | 1 to 255 | |
| Introduced | 20.7.R1 | |
|
Platforms |
All |
| Synopsis | IPv6 address used as the match criterion | |
| Context | configure filter ipv6-filter string entry number match dst-ip address (ipv6-address | ipv6-prefix-with-host-bits) | |
| Tree | address | |
Notes |
The following elements are part of a choice: (address and mask) or ipv6-prefix-list. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | IPv6 address prefix list used as match criterion | |
| Context | configure filter ipv6-filter string entry number match dst-ip ipv6-prefix-list reference | |
| Tree | ipv6-prefix-list | |
Reference |
configure filter match-list ipv6-prefix-list string |
|
Notes |
The following elements are part of a choice: (address and mask) or ipv6-prefix-list. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Name of the port list as the match criterion | |
| Context | configure filter ipv6-filter string entry number match dst-port port-list reference | |
| Tree | port-list | |
Reference |
configure filter match-list port-list string |
|
Notes |
The following elements are part of a choice: eq, gt, lt, port-list, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the extension-header context | |
| Context | configure filter ipv6-filter string entry number match extension-header | |
| Tree | extension-header | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Match a packet as per the existence of an AH Extension Header | |
| Context | configure filter ipv6-filter string entry number match extension-header ah boolean | |
| Tree | ah | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Match a packet as per the existence of an Encapsulation security payload extension header | |
| Context | configure filter ipv6-filter string entry number match extension-header esp boolean | |
| Tree | esp | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Match on Hop-by-Hop Options Extension Header existence | |
| Context | configure filter ipv6-filter string entry number match extension-header hop-by-hop boolean | |
| Tree | hop-by-hop | |
| Introduced | 16.0.R2 | |
Platforms |
All |
| Synopsis | Match a packet as per the existence of a routing Extension Header | |
| Context | configure filter ipv6-filter string entry number match extension-header routing-type0 boolean | |
| Tree | routing-type0 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the flow-label context | |
| Context | configure filter ipv6-filter string entry number match flow-label | |
| Tree | flow-label | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Flow label mask for this policy IP filter entry | |
| Context | configure filter ipv6-filter string entry number match flow-label mask number | |
| Tree | mask | |
| Range | 1 to 1048575 | |
| Default | 1048575 | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
| Synopsis | Flow label as match criterion | |
| Context | configure filter ipv6-filter string entry number match flow-label value number | |
| Tree | value | |
| Range | 0 to 1048575 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the range context | |
| Context | configure filter ipv6-filter string entry number match hop-limit range | |
| Tree | range | |
Description |
This command in this context specify an inclusive range. When range is used, the start of the range (the first value entered) must be smaller than the end of the range (the second value entered). |
|
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 21.10.R1 | |
Platforms |
All |
| Synopsis | IPv6 address used as the match criterion | |
| Context | configure filter ipv6-filter string entry number match ip address (ipv6-address | ipv6-prefix-with-host-bits) | |
| Tree | address | |
Notes |
The following elements are part of a choice: (address and mask) or ipv6-prefix-list. |
|
| Introduced | 21.10.R1 | |
Platforms |
All |
| Synopsis | IPv6 address prefix list used as match criterion | |
| Context | configure filter ipv6-filter string entry number match ip ipv6-prefix-list reference | |
| Tree | ipv6-prefix-list | |
Reference |
configure filter match-list ipv6-prefix-list string |
|
Notes |
The following elements are part of a choice: (address and mask) or ipv6-prefix-list. |
|
| Introduced | 21.10.R1 | |
Platforms |
All |
| Synopsis | IP protocol to match | |
| Context | configure filter ipv6-filter string entry number match next-header (number | keyword) | |
| Tree | next-header | |
| Range | 0 to 255 | |
| Options | ||
Notes |
The following elements are part of a choice: next-header or next-header-list. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Name of the protocol list as a match criterion | |
| Context | configure filter ipv6-filter string entry number match next-header-list reference | |
| Tree | next-header-list | |
Reference |
configure filter match-list protocol-list string |
|
Notes |
The following elements are part of a choice: next-header or next-header-list. |
|
| Introduced | 20.7.R1 | |
Platforms |
All |
| Synopsis | Enable the packet-length context | |
| Context | configure filter ipv6-filter string entry number match packet-length | |
| Tree | packet-length | |
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Exact match criterion for the length | |
| Context | configure filter ipv6-filter string entry number match packet-length eq number | |
| Tree | eq | |
| Range | 40 to 65575 | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Greater than match criterion for the length | |
| Context | configure filter ipv6-filter string entry number match packet-length gt number | |
| Tree | gt | |
| Range | 40 to 65574 | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Less than match criterion for the length | |
| Context | configure filter ipv6-filter string entry number match packet-length lt number | |
| Tree | lt | |
| Range | 41 to 65575 | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Enable the range context | |
| Context | configure filter ipv6-filter string entry number match packet-length range | |
| Tree | range | |
Notes |
The following elements are part of a mandatory choice: eq, gt, lt, or range. |
|
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Upper bound of packet length range as match criterion | |
| Context | configure filter ipv6-filter string entry number match packet-length range end number | |
| Tree | end | |
| Range | 41 to 65575 | |
Notes |
This element is mandatory. |
|
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Lower bound of packet length range as match criterion | |
| Context | configure filter ipv6-filter string entry number match packet-length range start number | |
| Tree | start | |
| Range | 40 to 65574 | |
Notes |
This element is mandatory. |
|
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Name of the port list as the match criterion | |
| Context | configure filter ipv6-filter string entry number match port port-list reference | |
| Tree | port-list | |
Reference |
configure filter match-list port-list string |
|
Notes |
The following elements are part of a choice: eq, gt, lt, port-list, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | IPv6 address used as the match criterion | |
| Context | configure filter ipv6-filter string entry number match src-ip address (ipv6-address | ipv6-prefix-with-host-bits) | |
| Tree | address | |
Notes |
The following elements are part of a choice: (address and mask) or ipv6-prefix-list. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | IPv6 address prefix list used as match criterion | |
| Context | configure filter ipv6-filter string entry number match src-ip ipv6-prefix-list reference | |
| Tree | ipv6-prefix-list | |
Reference |
configure filter match-list ipv6-prefix-list string |
|
Notes |
The following elements are part of a choice: (address and mask) or ipv6-prefix-list. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Name of the port list as the match criterion | |
| Context | configure filter ipv6-filter string entry number match src-port port-list reference | |
| Tree | port-list | |
Reference |
configure filter match-list port-list string |
|
Notes |
The following elements are part of a choice: eq, gt, lt, port-list, or range. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Action when PBR or PBF target for this entry is not available | |
| Context | configure filter ipv6-filter string entry number pbr-down-action-override keyword | |
| Tree | pbr-down-action-override | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Cflowd sample profile ID to match packets | |
| Context | configure filter ipv6-filter string entry number sample-profile reference | |
| Tree | sample-profile | |
Description |
This command allows traffic matching an IPv4 or IPv6 filter to be sampled for cflowd processing using a specific sample profile ID. This option is only compatible if the associated interface is configured for interface-based sampling and is only supported for ingress sampling. An IP filter can only specify a single alternate sample profile ID for cflowd sampling, but the ID can be used in multiple entries. |
|
Reference |
configure cflowd sample-profile number |
|
| Introduced | 20.10.R1 | |
Platforms |
All |
| Synopsis | Time before action with available PBR or PBF destination and highest priority | |
| Context | configure filter ipv6-filter string entry number sticky-dest (number | keyword) | |
| Tree | sticky-dest | |
| Range | 0 to 65535 | |
| Units | seconds | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | IPv6 filter identifier | |
| Context | configure filter ipv6-filter string filter-id number | |
| Tree | filter-id | |
| Range | 1 to 65535 | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
|
| Synopsis | Scope of this filter definition | |
| Context | configure filter ipv6-filter string scope keyword | |
| Tree | scope | |
| Default | template | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Share policer among active ports in the LAG | |
| Context | configure filter ipv6-filter string shared-policer boolean | |
| Tree | shared-policer | |
Description |
When configured to true, and when the filter policy is configured on a LAG endpoint, the system programs the policer rates in the filter policy per line card FP of the LAG based on the number of active ports in the LAG for each FP. When configured to false, and when the filter policy is configured on a LAG endpoint, the system programs the same policer rate on each line card FP of the LAG. |
|
| Default | false | |
| Introduced | 22.7.R1 | |
|
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, 7950 XRS |
| Synopsis | Enter the subscriber-mgmt context | |
| Context | configure filter ipv6-filter string subscriber-mgmt | |
| Tree | subscriber-mgmt | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enter the host-specific-entry context | |
| Context | configure filter ipv6-filter string subscriber-mgmt host-specific-entry | |
| Tree | host-specific-entry | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enter the credit-control context | |
| Context | configure filter ipv6-filter string subscriber-mgmt host-specific-entry credit-control | |
| Tree | credit-control | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enable the range context | |
| Context | configure filter ipv6-filter string subscriber-mgmt host-specific-entry credit-control range | |
| Tree | range | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Upper bound of range for credit control filter entries | |
| Context | configure filter ipv6-filter string subscriber-mgmt host-specific-entry credit-control range end number | |
| Tree | end | |
| Range | 1 to 2097151 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Lower bound of range for credit control filter entries | |
| Context | configure filter ipv6-filter string subscriber-mgmt host-specific-entry credit-control range start number | |
| Tree | start | |
| Range | 1 to 2097151 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enter the filter-rule context | |
| Context | configure filter ipv6-filter string subscriber-mgmt host-specific-entry filter-rule | |
| Tree | filter-rule | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enable the range context | |
| Context | configure filter ipv6-filter string subscriber-mgmt host-specific-entry filter-rule range | |
| Tree | range | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Upper bound of range for inserting filter rule entries | |
| Context | configure filter ipv6-filter string subscriber-mgmt host-specific-entry filter-rule range end number | |
| Tree | end | |
| Range | 1 to 2097151 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Lower bound of range for inserting filter rule entries | |
| Context | configure filter ipv6-filter string subscriber-mgmt host-specific-entry filter-rule range start number | |
| Tree | start | |
| Range | 1 to 2097151 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enter the watermark context | |
| Context | configure filter ipv6-filter string subscriber-mgmt host-specific-entry watermark | |
| Tree | watermark | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | High watermark for host-specific entries, to raise a table full alarm | |
| Context | configure filter ipv6-filter string subscriber-mgmt host-specific-entry watermark high number | |
| Tree | high | |
| Range | 0 to 100 | |
| Default | 95 | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Low watermark for host-specific entries, to clear a table full alarm | |
| Context | configure filter ipv6-filter string subscriber-mgmt host-specific-entry watermark low number | |
| Tree | low | |
| Range | 0 to 100 | |
| Default | 90 | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enter the shared-entry context | |
| Context | configure filter ipv6-filter string subscriber-mgmt shared-entry | |
| Tree | shared-entry | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enter the filter-rule context | |
| Context | configure filter ipv6-filter string subscriber-mgmt shared-entry filter-rule | |
| Tree | filter-rule | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enable the range context | |
| Context | configure filter ipv6-filter string subscriber-mgmt shared-entry filter-rule range | |
| Tree | range | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Upper bound of range for inserting shared host rules | |
| Context | configure filter ipv6-filter string subscriber-mgmt shared-entry filter-rule range end number | |
| Tree | end | |
| Range | 1 to 2097151 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Lower bound of range for inserting shared host rules | |
| Context | configure filter ipv6-filter string subscriber-mgmt shared-entry filter-rule range start number | |
| Tree | start | |
| Range | 1 to 2097151 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enter the pcc-rule context | |
| Context | configure filter ipv6-filter string subscriber-mgmt shared-entry pcc-rule | |
| Tree | pcc-rule | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enable the range context | |
| Context | configure filter ipv6-filter string subscriber-mgmt shared-entry pcc-rule range | |
| Tree | range | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Upper bound of the range for PCC rule filter entries | |
| Context | configure filter ipv6-filter string subscriber-mgmt shared-entry pcc-rule range end number | |
| Tree | end | |
| Range | 1 to 2097151 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Lower bound of the range for PCC rule filter entries | |
| Context | configure filter ipv6-filter string subscriber-mgmt shared-entry pcc-rule range start number | |
| Tree | start | |
| Range | 1 to 2097151 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Enable the watermark context | |
| Context | configure filter ipv6-filter string subscriber-mgmt shared-entry watermark | |
| Tree | watermark | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Limit of RADIUS shared filters before generating high watermark notification | |
| Context | configure filter ipv6-filter string subscriber-mgmt shared-entry watermark high number | |
| Tree | high | |
| Range | 1 to 8000 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Limit of RADIUS or Diameter shared filters before clearing high watermark notification | |
| Context | configure filter ipv6-filter string subscriber-mgmt shared-entry watermark low number | |
| Tree | low | |
| Range | 0 to 7999 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR |
| Synopsis | Set of match criteria for the filter policy | |
| Context | configure filter ipv6-filter string type keyword | |
| Tree | type | |
Description |
This command configures the filter policy type that defines the list of match criteria supported in a filter policy. |
|
| Default | normal | |
| Options | ||
| Introduced | 19.5.R1 | |
Platforms |
All |
| Synopsis | Administrative state of filter logging | |
| Context | configure filter log number admin-state keyword | |
| Tree | admin-state | |
| Default | enable | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Text description | |
| Context | configure filter log number description string | |
| Tree | description | |
| String Length | 0 to 80 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the destination context | |
| Context | configure filter log number destination | |
| Tree | destination | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the memory context | |
| Context | configure filter log number destination memory | |
| Tree | memory | |
Notes |
This element is the default part of a choice. The following elements are part of a choice: memory or syslog. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Maximum number of memory entries that the log can store | |
| Context | configure filter log number destination memory max-entries number | |
| Tree | max-entries | |
| Range | 1 to 50000 | |
| Default | 1000 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Stop logging when maximum number of memory entries is reached or wrap-around is used | |
| Context | configure filter log number destination memory stop-on-full boolean | |
| Tree | stop-on-full | |
| Default | false | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
| Synopsis | Enter the syslog context | |
| Context | configure filter log number destination syslog | |
| Tree | syslog | |
Notes |
The following elements are part of a choice: memory or syslog. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Administrative state of filter log summarization | |
| Context | configure filter log number destination syslog summary admin-state keyword | |
| Tree | admin-state | |
| Default | disable | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Summary for filter log entries | |
| Context | configure filter log number destination syslog summary summary-crit keyword | |
| Tree | summary-crit | |
| Default | src-addr | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the mac-filter list instance | |
| Context | configure filter mac-filter string | |
| Tree | mac-filter | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Filter name | |
| Context | configure filter mac-filter string | |
| String Length | 1 to 64 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Action for packets that do not match any entry | |
| Context | configure filter mac-filter string default-action keyword | |
| Tree | default-action | |
| Default | drop | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Text description | |
| Context | configure filter mac-filter string description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the embed context | |
| Context | configure filter mac-filter string embed | |
| Tree | embed | |
Description |
Commands in this context embed a previously defined MAC embedded filter policy or Hybrid OpenFlow switch instance into an exclusive, template, or system filter policy at the specified offset value. Rules derived from the BGP FlowSpec can also be embedded into template filter policies only. For MAC filters, embedding is supported for VSD filters or filter entries only. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the entry list instance | |
| Context | configure filter mac-filter string entry number | |
| Tree | entry | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | ID for a match criteria and the corresponding action | |
| Context | configure filter mac-filter string entry number | |
| Range | 1 to 2097151 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the action context | |
| Context | configure filter mac-filter string entry number action | |
| Tree | action | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | VPLS SDP bind ID used to forward matching packets | |
| Context | configure filter mac-filter string entry number action forward sdp sdp-bind-id string | |
| Tree | sdp-bind-id | |
| String Length | 3 to 16 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the http-redirect context | |
| Context | configure filter mac-filter string entry number action http-redirect | |
| Tree | http-redirect | |
Notes |
The following elements are part of a mandatory choice: accept, drop, forward, http-redirect, or ignore-match. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | URL that is used for redirecting | |
| Context | configure filter mac-filter string entry number action http-redirect url string | |
| Tree | url | |
| String Length | 1 to 255 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
| Synopsis | Ignore match criteria for the entry | |
| Context | configure filter mac-filter string entry number action ignore-match | |
| Tree | ignore-match | |
Notes |
The following elements are part of a mandatory choice: accept, drop, forward, http-redirect, or ignore-match. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the rate-limit context | |
| Context | configure filter mac-filter string entry number action rate-limit | |
| Tree | rate-limit | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Peak information rate | |
| Context | configure filter mac-filter string entry number action rate-limit pir (number | keyword) | |
| Tree | pir | |
| Range | 0 to 2000000000 | |
| Units | kilobps | |
| Options | ||
|
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | SAP ID used to forward packets matching the entry | |
| Context | configure filter mac-filter string entry number action secondary forward sap sap-id reference | |
| Tree | sap-id | |
Reference |
||
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | VPLS SDP bind ID used to forward matching packets | |
| Context | configure filter mac-filter string entry number action secondary forward sdp sdp-bind-id string | |
| Tree | sdp-bind-id | |
| String Length | 3 to 16 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
| Synopsis | Text description | |
| Context | configure filter mac-filter string entry number description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the match context | |
| Context | configure filter mac-filter string entry number match | |
| Tree | match | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | MAC frame as match criteria | |
| Context | configure filter mac-filter string entry number match frame-type keyword | |
| Tree | frame-type | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Mask to VID of the inner VLAN tag before comparing it with the inner-tag or outer-tag value | |
| Context | configure filter mac-filter string entry number match inner-tag mask number | |
| Tree | mask | |
| Range | 1 to 4095 | |
| Default | 4095 | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS |
| Synopsis | Matching value against VID of the second or first VLAN tag in the packet carried transparently | |
| Context | configure filter mac-filter string entry number match inner-tag tag number | |
| Tree | tag | |
| Range | 0 to 4095 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS |
| Synopsis | Lowest value of 24-bit service instance identifier for the service matching this entry | |
| Context | configure filter mac-filter string entry number match isid value number | |
| Tree | value | |
| Range | 0 to 16777215 | |
Notes |
The following elements are part of a choice: range or value. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Mask to VID of the inner VLAN tag before comparing it with the inner-tag or outer-tag value | |
| Context | configure filter mac-filter string entry number match outer-tag mask number | |
| Tree | mask | |
| Range | 1 to 4095 | |
| Default | 4095 | |
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS |
| Synopsis | Matching value against VID of the second or first VLAN tag in the packet carried transparently | |
| Context | configure filter mac-filter string entry number match outer-tag tag number | |
| Tree | tag | |
| Range | 0 to 4095 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS |
| Synopsis | Action when PBR or PBF target for this entry is not available | |
| Context | configure filter mac-filter string entry number pbr-down-action-override keyword | |
| Tree | pbr-down-action-override | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Time before action with available PBR or PBF destination and highest priority | |
| Context | configure filter mac-filter string entry number sticky-dest (number | keyword) | |
| Tree | sticky-dest | |
| Range | 0 to 65535 | |
| Units | seconds | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | MAC filter ID | |
| Context | configure filter mac-filter string filter-id number | |
| Tree | filter-id | |
| Range | 1 to 65535 | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
|
| Synopsis | Scope of this filter definition | |
| Context | configure filter mac-filter string scope keyword | |
| Tree | scope | |
| Default | template | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | MAC filter policy | |
| Context | configure filter mac-filter string type keyword | |
| Tree | type | |
| Default | normal | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
|
| Synopsis | Enter the match-list context | |
| Context | configure filter match-list | |
| Tree | match-list | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the ip-prefix-list list instance | |
| Context | configure filter match-list ip-prefix-list string | |
| Tree | ip-prefix-list | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | IP prefix list name | |
| Context | configure filter match-list ip-prefix-list string | |
| String Length | 1 to 32 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the apply-path context | |
| Context | configure filter match-list ip-prefix-list string apply-path | |
| Tree | apply-path | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the bgp-peers list instance | |
| Context | configure filter match-list ip-prefix-list string apply-path bgp-peers number | |
| Tree | bgp-peers | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | BGP peers auto-generation configuration index | |
| Context | configure filter match-list ip-prefix-list string apply-path bgp-peers number | |
| Range | 1 to 255 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Regular expression to match against the base router BGP instance group configuration | |
| Context | configure filter match-list ip-prefix-list string apply-path bgp-peers number group string | |
| Tree | group | |
| String Length | 1 to 255 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Regular expression to match against the base router BGP instance neighbor configuration | |
| Context | configure filter match-list ip-prefix-list string apply-path bgp-peers number neighbor string | |
| Tree | neighbor | |
| String Length | 1 to 255 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Target routing instance | |
| Context | configure filter match-list ip-prefix-list string apply-path bgp-peers number router-instance string | |
| Tree | router-instance | |
| Default | Base | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
|
| Synopsis | Text description | |
| Context | configure filter match-list ip-prefix-list string description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Add a list entry for prefix | |
| Context | configure filter match-list ip-prefix-list string prefix string | |
| Tree | prefix | |
Description |
Commands in this context add IPv4 prefixes to the prefix match list. Prefixes can overlap IPv4 address space. An IPv4 prefix addition is blocked if resource exhaustion is detected anywhere in the system due to filter policies that use the prefix list. |
|
| Max. Instances | 8192 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | IPv4 prefix to be added to the prefix list | |
| Context | configure filter match-list ip-prefix-list string prefix string | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R3 | |
Platforms |
All |
| Synopsis | Add a list entry for prefix-exclude | |
| Context | configure filter match-list ip-prefix-list string prefix-exclude string | |
| Tree | prefix-exclude | |
Description |
Commands in this context exclude IPv4 prefixes from the prefix match list. This command is mutually exclusive with the apply-path command. |
|
| Max. Instances | 512 | |
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | IPv4 prefix to be added to the prefix list | |
| Context | configure filter match-list ip-prefix-list string prefix-exclude string | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Enter the ipv6-prefix-list list instance | |
| Context | configure filter match-list ipv6-prefix-list string | |
| Tree | ipv6-prefix-list | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | IP prefix list name | |
| Context | configure filter match-list ipv6-prefix-list string | |
| String Length | 1 to 32 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the apply-path context | |
| Context | configure filter match-list ipv6-prefix-list string apply-path | |
| Tree | apply-path | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the bgp-peers list instance | |
| Context | configure filter match-list ipv6-prefix-list string apply-path bgp-peers number | |
| Tree | bgp-peers | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | BGP peers auto-generation configuration index | |
| Context | configure filter match-list ipv6-prefix-list string apply-path bgp-peers number | |
| Range | 1 to 255 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Regular expression to match against the base router BGP instance group configuration | |
| Context | configure filter match-list ipv6-prefix-list string apply-path bgp-peers number group string | |
| Tree | group | |
| String Length | 1 to 255 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Regular expression to match against the base router BGP instance neighbor configuration | |
| Context | configure filter match-list ipv6-prefix-list string apply-path bgp-peers number neighbor string | |
| Tree | neighbor | |
| String Length | 1 to 255 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Target routing instance | |
| Context | configure filter match-list ipv6-prefix-list string apply-path bgp-peers number router-instance string | |
| Tree | router-instance | |
| Default | Base | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
|
| Synopsis | Text description | |
| Context | configure filter match-list ipv6-prefix-list string description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Add a list entry for prefix | |
| Context | configure filter match-list ipv6-prefix-list string prefix string | |
| Tree | prefix | |
| Max. Instances | 8192 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | IPv6 prefix to be added to the prefix list | |
| Context | configure filter match-list ipv6-prefix-list string prefix string | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R3 | |
Platforms |
All |
| Synopsis | Add a list entry for prefix-exclude | |
| Context | configure filter match-list ipv6-prefix-list string prefix-exclude string | |
| Tree | prefix-exclude | |
Description |
Commands in this context exclude IPv6 prefixes from the prefix match list. This command is mutually exclusive with the apply-path command. |
|
| Max. Instances | 512 | |
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | IPv6 prefix to be added to the prefix list | |
| Context | configure filter match-list ipv6-prefix-list string prefix-exclude string | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Enter the port-list list instance | |
| Context | configure filter match-list port-list string | |
| Tree | port-list | |
| Max. Instances | 5120 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Port list name | |
| Context | configure filter match-list port-list string | |
Description |
This command specifies the port list name. If special characters are used (#, $, spaces, and so on), the string must be enclosed within double quotes. |
|
| String Length | 1 to 32 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Text description | |
| Context | configure filter match-list port-list string description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Add a list entry for port | |
| Context | configure filter match-list port-list string port number | |
| Tree | port | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Port value | |
| Context | configure filter match-list port-list string port number | |
| Range | 0 to 65535 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the protocol-list list instance | |
| Context | configure filter match-list protocol-list string | |
| Tree | protocol-list | |
| Max. Instances | 512 | |
| Introduced | 20.7.R1 | |
Platforms |
All |
| Synopsis | Protocol list name | |
| Context | configure filter match-list protocol-list string | |
| String Length | 1 to 32 | |
Notes |
This element is part of a list key. |
|
| Introduced | 20.7.R1 | |
Platforms |
All |
| Synopsis | Text description | |
| Context | configure filter match-list protocol-list string description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 20.7.R1 | |
Platforms |
All |
| Synopsis | Add a list entry for protocol | |
| Context | configure filter match-list protocol-list string protocol (number | keyword) | |
| Tree | protocol | |
| Max. Instances | 32 | |
| Introduced | 20.7.R1 | |
|
Platforms |
All |
| Synopsis | IP protocol identifier | |
| Context | configure filter match-list protocol-list string protocol (number | keyword) | |
| Range | 0 to 255 | |
| Options | ||
Notes |
This element is part of a list key. |
|
| Introduced | 20.7.R1 | |
Platforms |
All |
| Synopsis | Enter the md-auto-id context | |
| Context | configure filter md-auto-id | |
| Tree | md-auto-id | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the filter-id-range context | |
| Context | configure filter md-auto-id filter-id-range | |
| Tree | filter-id-range | |
| Introduced | 16.0.R1 | |
Platforms |
All |
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Upper bound of the ID range | |
| Context | configure filter md-auto-id filter-id-range end number | |
| Tree | end | |
| Range | 1 to 65535 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
|
WARNING:
Modifying this element recreates the parent element automatically for the new value to take effect. |
||
| Synopsis | Lower bound of the ID range | |
| Context | configure filter md-auto-id filter-id-range start number | |
| Tree | start | |
| Range | 1 to 65535 | |
Notes |
This element is mandatory. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
|
| Synopsis | Enter the redirect-policy list instance | |
| Context | configure filter redirect-policy string | |
| Tree | redirect-policy | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Redirect policy name | |
| Context | configure filter redirect-policy string | |
Description |
This command specifies the redirect policy name. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes. |
|
| String Length | 1 to 32 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Administrative state of the redirect policy | |
| Context | configure filter redirect-policy string admin-state keyword | |
| Tree | admin-state | |
| Default | disable | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Text description | |
| Context | configure filter redirect-policy string description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the destination list instance | |
| Context | configure filter redirect-policy string destination (ipv4-address-no-zone | ipv6-address-no-zone) | |
| Tree | destination | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | IP address and type of destination | |
| Context | configure filter redirect-policy string destination (ipv4-address-no-zone | ipv6-address-no-zone) | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Administrative state of the destination | |
| Context | configure filter redirect-policy string destination (ipv4-address-no-zone | ipv6-address-no-zone) admin-state keyword | |
| Tree | admin-state | |
| Default | disable | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Text description | |
| Context | configure filter redirect-policy string destination (ipv4-address-no-zone | ipv6-address-no-zone) description string | |
| Tree | description | |
| String Length | 1 to 80 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the ping-test context | |
| Context | configure filter redirect-policy string destination (ipv4-address-no-zone | ipv6-address-no-zone) ping-test | |
| Tree | ping-test | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Number of consecutive requests that fail before destination is declared unreachable | |
| Context | configure filter redirect-policy string destination (ipv4-address-no-zone | ipv6-address-no-zone) ping-test drop-count number | |
| Tree | drop-count | |
| Range | 1 to 60 | |
| Default | 3 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Time for the system to be held down if this test has marked it unreachable | |
| Context | configure filter redirect-policy string destination (ipv4-address-no-zone | ipv6-address-no-zone) ping-test hold-down number | |
| Tree | hold-down | |
| Range | 0 to 86400 | |
| Default | 0 | |
| Units | seconds | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Time between consecutive requests which are sent to the far end host | |
| Context | configure filter redirect-policy string destination (ipv4-address-no-zone | ipv6-address-no-zone) ping-test interval number | |
| Tree | interval | |
| Range | 1 to 60 | |
| Default | 1 | |
| Units | seconds | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Source address to use in the IP packet of the ping test | |
| Context | configure filter redirect-policy string destination (ipv4-address-no-zone | ipv6-address-no-zone) ping-test source-address (ipv4-address-no-zone | ipv6-address-no-zone) | |
| Tree | source-address | |
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Time required to receive a response from the far end host | |
| Context | configure filter redirect-policy string destination (ipv4-address-no-zone | ipv6-address-no-zone) ping-test timeout number | |
| Tree | timeout | |
| Range | 1 to 60 | |
| Default | 1 | |
| Units | seconds | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Priority for this destination | |
| Context | configure filter redirect-policy string destination (ipv4-address-no-zone | ipv6-address-no-zone) priority number | |
| Tree | priority | |
| Range | 1 to 255 | |
| Default | 100 | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enable the unicast-rt-test context | |
| Context | configure filter redirect-policy string destination (ipv4-address-no-zone | ipv6-address-no-zone) unicast-rt-test | |
| Tree | unicast-rt-test | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Send notifications when the active destination changes | |
| Context | configure filter redirect-policy string notify-dest-change boolean | |
| Tree | notify-dest-change | |
Description |
When configured to true, notifications (such as Log and SNMP) are sent when the active destination of a redirect policy changes. No notification is sent when there are no more active destinations (as this scenario is covered by another notification). When configured to false, the notification generation is disabled. |
|
| Default | false | |
| Introduced | 16.0.R4 | |
|
Platforms |
All |
| Synopsis | Routing context to use for route lookup | |
| Context | configure filter redirect-policy string router-instance string | |
| Tree | router-instance | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Time required by system before applying the current best destination as active destination | |
| Context | configure filter redirect-policy string sticky-dest (number | keyword) | |
| Tree | sticky-dest | |
| Range | 0 to 65535 | |
| Units | seconds | |
| Options | ||
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Enter the redirect-policy-binding list instance | |
| Context | configure filter redirect-policy-binding string | |
| Tree | redirect-policy-binding | |
| Max. Instances | 16 | |
| Introduced | 16.0.R4 | |
|
Platforms |
All |
| Synopsis | Binding name | |
| Context | configure filter redirect-policy-binding string | |
| String Length | 1 to 32 | |
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Logical operator used to obtain the master test result | |
| Context | configure filter redirect-policy-binding string binding-operator keyword | |
| Tree | binding-operator | |
Description |
This command configures the logical operator to use with the destinations' test results to obtain the master test result (the redirect policy binding test result). |
|
| Default | and | |
| Options | ||
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Enter the redirect-policy list instance | |
| Context | configure filter redirect-policy-binding string redirect-policy reference | |
| Tree | redirect-policy | |
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Redirect policy name | |
| Context | configure filter redirect-policy-binding string redirect-policy reference | |
Reference |
configure filter redirect-policy string |
|
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Add a list entry for destination | |
| Context | configure filter redirect-policy-binding string redirect-policy reference destination reference | |
| Tree | destination | |
| Min. Instances | 1 | |
| Introduced | 16.0.R4 | |
|
Platforms |
All |
| Synopsis | IP address of redirect policy destination to binding | |
| Context | configure filter redirect-policy-binding string redirect-policy reference destination reference | |
Reference |
configure filter redirect-policy string destination (ipv4-address-no-zone | ipv6-address-no-zone) |
|
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R4 | |
Platforms |
All |
| Synopsis | Enter the system-filter context | |
| Context | configure filter system-filter | |
| Tree | system-filter | |
| Introduced | 16.0.R1 | |
Platforms |
All |
| Synopsis | Add a list entry for ip | |
| Context | configure filter system-filter ip reference | |
| Tree | ip | |
| Max. Instances | 1 | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
| Synopsis | Active IPv4 system filter policy | |
| Context | configure filter system-filter ip reference | |
Reference |
||
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R3 | |
Platforms |
All |
| Synopsis | Add a list entry for ipv6 | |
| Context | configure filter system-filter ipv6 reference | |
| Tree | ipv6 | |
| Max. Instances | 1 | |
| Introduced | 16.0.R1 | |
|
Platforms |
All |
| Synopsis | Active IPv6 system filter policy | |
| Context | configure filter system-filter ipv6 reference | |
Reference |
configure filter ipv6-filter string |
|
Notes |
This element is part of a list key. |
|
| Introduced | 16.0.R3 | |
Platforms |
All |