ERX
-
Upload
abdul-m-malik -
Category
Documents
-
view
65 -
download
0
description
Transcript of ERX
Juniper Networks, Inc.1194 North Mathilda AvenueSunnyvale, CA 94089USA408-745-2000www.juniper.net
ERX Edge RoutersCommand Reference Guide
Release 4.1.0
Part No. 162-00488-00
Juniper Networks is registered in the U.S. Patent and Trademark Office and in other countries as a trademark of Juniper Networks, Inc. Broadband Cable Processor, ERX, ESP, G1, G10, G-series, Internet Processor, JUNOS, JUNOScript, M5, M10, M20, M40, M40e, M160, M-series, NMC-RX, SDX, ServiceGuard, T320, T640, T-series, UMC, and Unison are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. All specifications are subject to change without notice.
Products made or sold by Juniper Networks (including the M5, M10, M20, M40, M40e, M160, and T320 routers, T640 routing node, and the JUNOS software) or components thereof might be covered by one or more of the following patents that are owned by or licensed to Juniper Networks: U.S. Patent Nos. 5,473,599, 5,905,725, 5,909,440, 6,333,650, 6,359,479, and 6,406,312.
ERX Edge Routers Command Reference Guide, Release 4.1.0Copyright © 2002, Juniper Networks, Inc.All rights reserved. Printed in USA.
Writers: Richard Cochran, Justine Kangas, Helen Shaw, Brian Wesley Simmons, Michael TaillonEditor: Fran Mues
Revision HistoryNovember 2002
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.
SOFTWARE LICENSE AGREEMENT1
JUNIPER NETWORKS, INC. IS WILLING TO LICENSE THE ENCLOSED SOFTWARE AND ACCOMPANYING USER DOCUMENTATION (COLLECTIVELY, THE �PROGRAM�) TO YOU ONLY UPON THE CONDITION THAT YOU ACCEPT ALL OF THE TERMS AND CONDITIONS OF THIS LICENSE AGREEMENT. PLEASE READ THESE TERMS AND CONDITIONS CAREFULLY BEFORE COPYING OR USING THE ACCOMPANYING SOFTWARE OR INSTALLING THE HARDWARE UNIT WITH PRE-ENABLED SOFTWARE OR USING THE ACCOMPANYING USER DOCUMENTATION.
BY USING THE ACCOMPANYING SOFTWARE OR INSTALLING THE HARDWARE UNIT WITH PRE-ENABLED SOFTWARE, YOU AGREE TO BE BOUND BY THE TERMS AND CONDITIONS OF THIS LICENSE AGREEMENT. IF YOU DO NOT AGREE TO BE BOUND BY THE TERMS OF THIS LICENSE AGREEMENT, JUNIPER NETWORKS IS UNWILLING TO LICENSE THE PROGRAM TO YOU, IN WHICH EVENT YOU SHOULD PROMPTLY WITHIN TEN (10) DAYS FROM SHIPMENT RETURN THE UNUSED SOFTWARE, USER DOCUMENTATION, AND RELATED EQUIPMENT AND HARDWARE TO THE PLACE OF PURCHASE AND YOU WILL RECEIVE A FULL REFUND OF YOUR LICENSE FEE. THIS LICENSE AGREEMENT REPRESENTS THE ENTIRE AGREEMENT CONCERNING THE PROGRAM BETWEEN YOU AND JUNIPER NETWORKS, AND IT SUPERSEDES ANY PRIOR PROPOSAL, REPRESENTATION OR UNDERSTANDING BETWEEN THE PARTIES.
1. License Grant. Juniper Networks, Inc. (�Juniper Networks�) and its suppliers and licensors hereby grant to you and you hereby accept a nonexclusive, personal and nontransferable license to use the computer software and/or hardware unit with pre-enabled software, including all patches, error corrections, updates, and revisions thereto in machine-readable, object code form only (the �Software�), and the accompanying User Documentation on the Juniper Networks product owned by you and only as authorized in this License Agreement. You may make one (1) archival copy of the Software for backup purposes provided you affix to such copy all copyright, confidentiality, and proprietary notices that appear on the original. Except as authorized under this paragraph, no copies of the Program or any portions thereof may be made, in whole or in part, by you or any person under your authority or control.
The Software and User Documentation are protected under copyright laws. The title to Software and User Documentation shall remain solely with Juniper Networks and its suppliers.
Except as authorized above, you shall not: copy, in whole or in part, the Software or the related User Documentation; modify, reverse assemble, reverse compile, or otherwise translate, dissemble, or obtain source code for the Software or User Documentation, in whole or in part, or permit a third party to do so; rent, lease, distribute, sell, or create derivative works of the Software; pledge, lease, rent, sublicense or share its rights under this License Agreement; or, without Juniper Networks� prior written consent, assign or transfer its rights hereunder.
2. Juniper Networks's Rights. You agree that the Software, including the User Documentation, embodies Juniper Networks's and its suppliers' and licensors' confidential and proprietary intellectual property protected under U.S. copyright law and you will use your best efforts to maintain their confidentiality. You further acknowledge and agree that Juniper Networks or its suppliers and licensors own all right, title, and interest in and to the Software, including all intellectual property rights therein. You shall take no action inconsistent with Juniper Networks's or its suppliers' ownership of such Software. You shall not sublicense, assign, or otherwise disclose to any third party the Software or any information about the operation, design, performance, or implementation of the Software and User Documentation without prior written consent of Juniper Networks. You agree to implement reasonable security measures to protect such confidential and proprietary information and copyrighted material. This License Agreement does not convey to you an interest in or to the Program, but only the limited right of use revocable in accordance with the terms of this License Agreement.
3. License Fees. The license fees paid by you are paid in consideration of the license granted under this License Agreement.
4. Term. This license is effective upon opening of the package(s) or use of the hardware containing the Software, and shall continue until terminated. You may terminate this License at any time by returning the Software, including any User Documentation, and all copies or portions thereof to Juniper Networks. This License will terminate immediately without notice from Juniper Networks if you breach any term or provision of this License. Upon such termination by Juniper Networks, you
1. If you and Juniper Networks, Inc., have executed another license agreement for the Program which is now in effect, then such agreement (�Negotiated Agreement�) shall supersede this Software License Agreement and shall exclusively govern the use and license terms of the Program.
must return the Software, including any User Documentation, and all copies or portions thereof to Juniper Networks. Termination of this License Agreement shall not prejudice Juniper Networks' rights to damages or other available remedy.
5. Limited Software Warranty: Juniper Networks warrants, for your benefit alone, that for a period of ninety (90) days from the date of shipment from Juniper Networks that the Software substantially conforms to its published specifications.
The limited warranty extends only to you as the original licensee. Your exclusive remedy and the entire liability of Juniper Networks and its suppliers under this limited warranty will be, at Juniper Networks' option, repair or replacement of the Software, or refund of the amounts paid by you under this License Agreement. You agree that this is your sole and exclusive remedy for breach by Juniper Networks, its suppliers or its licensors of any warranties made under this License Agreement.
In no event does Juniper Networks warrant that the Software is error free or that you will be able to operate the Software without problems or interruptions. Juniper Networks does not warrant: 1) that the functions contained in the software will meet your requirements; 2) that the Software will operate in the hardware or software combination that you may select; 3) that the operation of the Software will be uninterrupted or error free; or 4) that all defects in the operation of the Software will be corrected.
This warranty does not apply if the product: 1) has been altered, except by Juniper Networks; 2) has not been installed, operated, repaired, or maintained in accordance with instruction supplied by Juniper Networks; or 3) has been subjected to or damaged by improper environment, abuse, misuse, accident, or negligence.
EXCEPT FOR THE WARRANTIES SET FORTH ABOVE, THE SOFTWARE IS LICENSED �AS IS,� AND JUNIPER NETWORKS DISCLAIMS ANY AND ALL OTHER REPRESENTATIONS, CONDITIONS, AND WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING, WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE OR ANY WARRANTIES FOR NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE. ANY AND ALL SUCH WARRANTIES ARE HEREBY EXCLUDED TO THE EXTENT ALLOWED BY APPLICABLE LAW. JUNIPER NETWORKS' SUPPLIERS AND LICENSORS DO NOT MAKE OR PASS ON TO YOU OR ANY THIRD PARTY ANY EXPRESS, IMPLIED, OR STATUTORY WARRANTY OR REPRESENTATION, INCLUDING, BUT NOT LIMITED TO, IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE OR ANY WARRANTIES FOR NONINFRINGEMENT.
6. Proprietary Rights Indemnification. Juniper Networks shall at its expense defend you against and, subject to the limitations set forth elsewhere herein, pay all costs and damages made in settlement or awarded against you resulting from a claim that the Program as supplied by Juniper Networks infringes a United States copyright or a United States patent, or misappropriates a United States trade secret, provided that you: (a) provide prompt written notice of any such claim, (b) allow Juniper Networks to direct the defense and settlement of the claim, and (c) provide Juniper Networks with the authority, information, and assistance that Juniper Networks reasonably deems necessary for the defense and settlement of the claim. You shall not consent to any judgment or decree or do any other act in compromise of any such claim without first obtaining Juniper Networks� written consent. In any action based on such a claim, Juniper Networks may, at its sole option, either: (1) obtain for you the right to continue using the Program, (2) replace or modify the Program to avoid the claim, or (3) if neither (1) nor (2) can reasonably be effected by Juniper Networks, terminate the license granted hereunder and give you a pro rata refund of the license fee paid for such Program, calculated on the basis of straight-line depreciation over a five-year useful life. Notwithstanding the preceding sentence, Juniper Networks will have no liability for any infringement or misappropriation claim of any kind if such claim is based on: (i) the use of other than the current unaltered release of the Program and Juniper Networks has provided or offers to provide such release to you for its then current license fee, or (ii) use or combination of the Program with programs or data not supplied or approved by Juniper Networks if such use or combination caused the claim.
7. Limitation of Liability. IN NO EVENT WILL JUNIPER NETWORKS OR ITS SUPPLIERS OR LICENSORS BE LIABLE FOR ANY COST FOR SUBSTITUTE PROCUREMENT; SPECIAL, INDIRECT, INCIDENTAL, PUNITIVE, EXEMPLARY, OR CONSEQUENTIAL DAMAGES; OR ANY DAMAGES RESULTING FROM INACCURATE OR LOST DATA OR LOSS OF USE OR PROFITS ARISING OUT OF OR IN CONNECTION WITH THE PERFORMANCE OF THE SOFTWARE, EVEN IF JUNIPER NETWORKS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Juniper Networks' cumulative liability to you or any other party for any loss or damages resulting from any claims, demands, or actions arising out of or relating to this License Agreement shall not exceed the total fees paid to Juniper Networks for the Software.
8. Export Control. Software, including technical data, is subject to U.S. export control laws, including the U.S. Export Administration Act and its associated regulations, and may be subject to
export or import regulations in other countries. You agree to comply strictly with all such regulations and acknowledge that you have the responsibility to obtain licenses to export, re-export, or import Software.
9. Government Licensees: If any Software or associated documentation is acquired by or on behalf of a unit or agency of the United States government, the government agrees that such Software or documentation is a �commercial item� as that term is defined in 48 C.F.R. 2.101, consisting of �commercial computer software� or �commercial computer software documentation� as such terms are used in 48 C.F.R. 12.212 of the Federal Acquisition Regulations and its successors and 48 C.F.R. 227.7202-1 through 227.7202-4 of the DoD FAR Supplement and its successors. The use, duplication, or disclosure by the United States government of technical, data, computer software and documentation is subject to the restrictions set forth in FAR section 12.212(a), FAR section 52.227-14(g)(2), FAR section 52.227-19, DFARS section 252.227-7015(b), DFARS section 227.7202-1(a), and DFARS section 227.7202-3(a), as applicable. All United States government end users acquire the Software with only the rights set forth in this License Agreement.
10. General: This License shall be governed by and construed in accordance with the laws of the Commonwealth of Massachusetts, United States of America, as if performed wholly within the state and without giving effect to the principles of conflict of law. Any dispute arising out of this Agreement shall be referred to an arbitration proceeding in Boston, Massachusetts, in accordance with the commercial arbitration rules of the American Arbitration Association (the �AAA�). If the parties cannot agree upon an arbitrator, arbitration shall be conducted by a neutral arbitrator selected by the AAA who is knowledgeable in electronics equipment manufacturing and software licensing. The parties shall share the procedural costs of arbitration equally, and each party shall pay its own attorneys' fees and other costs and expenses associated with the arbitration, unless the arbitrator decides otherwise. The arbitrator's award shall be in writing and shall include a statement of reasons, but the arbitrator shall not be permitted to award punitive or indirect damages. The arbitrator's decision and award shall be final and binding and may be entered in any court having jurisdiction. The terms of this section shall not prevent any party from seeking injunctive relief in any court of competent jurisdiction in order to protect its proprietary and confidential information. If any term or provision hereof is found to be void or unenforceable by a court of competent jurisdiction, the remaining provisions of this License Agreement shall remain in full force and effect. This License Agreement constitutes the entire agreement between the parties with respect to the use of the Software and User Documentation and supersedes any and all prior oral or written agreements, discussions, negotiations, commitments, or understandings. No amendment, modification, or waiver of any provision of this License Agreement will be valid unless in writing and signed by the authorized representative of the party against which such amendment, modification, or waiver is sought to be enforced. The waiver by either party of any default or breach of this License Agreement shall not constitute a waiver of any other or subsequent default or breach. This License Agreement shall be binding upon the parties and their respective successors and permitted assigns.
Should you have any questions about this agreement, please contact:
Juniper Networks, Inc.1194 North Mathilda AvenueSunnyvale, CA 94089Attn: Contracts Administrator
About This Guide
This Command Reference Guide provides all the commands available to configure your system. Refer to the Configuration Guides for detailed information on configuring your ERX system.
Note: If the information in the latest Release Notes differs from the information in this guide, follow the Release Notes.
Your ERX system is shipped with the latest system software installed. If you need to install a future release or reinstall the system software, refer to the procedures in ERX Installation and User Guide, Appendix E, Installing ERX System Software.
ERX Edge RoutersFour models of ERX edge router are available:
• ERX-1440 system
• ERX-1400 system
• ERX-705 system
• ERX-700 system
All models use the same software. For information about the differences between the models, see ERX Installation and User Guide, Chapter 1, ERX System Overview.
In the ERX documentation, the term ERX-1400 series refers to both the ERX-1440 system and the ERX-1400 system. Similarly, the term ERX-700 series refers to both the ERX-705 system and the ERX-700 system. The terms ERX-1440 system, ERX-1400 system, ERX-705 system, and ERX-700 system refer to the specific models.
About This Guideviii
AudienceThis guide is intended for experienced system and network specialists who will configure a Juniper Networks ERX system in an Internet access environment.
ConventionsTable 1, Table 2, and Table 3 list all the conventions used in the ERX documentation. Table 1 defines notice icons. Table 2 shows text conventions used throughout the book, except for command syntax. Table 3 provides command syntax conventions used primarily in the ERX Command Reference Guide. For more information about command syntax, see ERX System Basics Configuration Guide, Chapter 1, Planning Your Network.
Table 1 Notice icons
Icon Meaning Description
Informational note Indicates important features or instructions.
Caution Indicates that you may risk losing data or damaging your hardware.
Warning Alerts you to the risk of personal injury.
Table 2 Text conventions (except for command syntax)
Convention Description Examples
Bold typeface Represents commands and keywords in text.
� Command example: Issue the clock source command.
� Keyword example:Specify the keyword exp-msg.
Bold Courier typeface Represents text that the user must type.
user input
Key name in angle brackets Indicates the name of a key on the keyboard.
Press <Enter>.
Key names linked with a plus sign (+) in angle brackets.
Indicates that you must press two or more keys simultaneously.
Press <Ctrl+B>.
Plain Courier typeface Represents information as displayed on your terminal�s screen.
host1#show ip ospf 2
Routing Process OSPF 2 withRouter ID 5.5.0.250
Router is an Area BorderRouter (ABR)
ConventionsERX Edge Routers
ix
Using the no vs. the default Version of CommandsMost system configuration commands have a no version, which you can use to negate a command (or a portion of it specified by an optional keyword) or restore its default setting. When you use a command without the keyword no, you can reenable a disabled feature or override a default setting. You have the option of using the default keyword whenever the no keyword is also a choice; simply enter the keyword default instead of no.
In most cases, when you execute the default version of a command, it produces the exact results as the no version. There are some commands for which the default version yields a different result than the no version.
Commands for which the default behavior differs from the no behavior are clearly identified in this guide. Unless otherwise specified, therefore, the default command is identical to the no command and will neither be documented nor discussed.
The syntax for each no command is described in this guide. Some commands do not have a no version; this is indicated in the individual
Italics � Emphasize words. � Identify variables. � Identify chapter, appendix, and
book names.
� There are two levels of access, user and privileged.
� clusterId, ipAddress.� Appendix A, System Specifications.
Table 2 Text conventions (except for command syntax) (continued)
Convention Description Examples
Table 3 Syntax conventions in command reference guide
Convention Description Examples
Words in plain text Represent keywords. terminal length
Words in italics Represent variables. mask, accessListName
Words separated by the | symbol Represent a choice to select one keyword or variable to the left or right of this symbol. (The keyword or variable may be either optional or required.)
diagnostic | line
Words enclosed in [ brackets ] Represent optional keywords or variables.
[ internal | external ]
Words enclosed in [ brackets ]* Represent optional keywords or variables that can be entered more than once.
[ level1 | level2 | l1 ]*
Words enclosed in { braces } Represent required keywords or variables.
{ permit | deny } { in | out }{ clusterId | ipAddress }
About This Guidex
command descriptions except for the show commands, none of which has a no version.
The CLI can act on no versions of commands when you have entered sufficient information to distinguish the command syntactically, and ignores all subsequent input on that line.
To be compatible with some non-ERX implementations, the no versions of commands will accept the same options as the affirmative version of the commands. The CLI ignores the optional input if it has no effect on the command behavior. If using the option changes the behavior of the no version, the individual command entry in this guide describes the difference in behavior.
Filtering show CommandsYou have access to a variety of show commands that display system and protocol information. You can filter the output of a show command by specifying | (the UNIX pipe symbol), one of the following keywords, and either a case-sensitive text string or a regular expression.
• begin – displays output beginning with the first line that contains the text string or regular expression
• include – displays output lines that contain the text string or regular expression and excludes lines that do not contain the text string or regular expression
• exclude – displays output lines that do not contain the text string or regular expression and excludes lines that do contain the text string or regular expression
For a list of regular expressions, see ERX Routing Protocols Configuration Guide, Vol. 1, Chapter 1, Configuring Routing Policy.
You can press <Ctrl+C> to interrupt the show command output.
Note: The system does not recognize beginning spaces of the text string. For example, if you enter the include option with �IP� as the text string on which to filter, the system ignores the space and displays lines that include words such as �RIP�.
Example In the following example, the output display consists only of lines that contain the string ip. The system omits all other lines of the output from the display because none of them contain the string ip.
host1#show config include-defaults | include ip
! Configuration script generated on FRI NOV 12 1999 16:56:41UTC
ip address 192.168.1.229 255.255.255.0
ConventionsERX Edge Routers
xi
ip rip receive version 2 1
ip rip send version 1
ip rip authentication mode md5 17
ip rip authentication key
ip route 10.6.0.0 255.255.0.0 192.168.1.1
ip route 10.10.0.0 255.255.0.0 192.168.1.1
ip route 10.10.0.166 255.255.255.255 192.168.1.1
ip debounce-time 0
router rip
Interface Types and SpecifiersMany commands take the variables interfaceType and interfaceSpecifier. Some commands support all types of interfaces, whereas other commands support only certain types of interfaces. The interface specifier depends on the type of interface. Table 4 shows the interface specifiers for each type of interface.
Table 4 Interface types and specifiers
Interface Type Description Interface Specifier Example
atm ATM interface slot/port [.subinterface]� slot � number of the chassis slot in
the range 0�6 (ERX-700 series) and 0�13 (ERX-1400 series)
� port � port number on the I/O module
� subinterface � number of the subinterface in the range 1�4294967293
atm 3/2.6
fastEthernet IEEE 802.3 Fast Ethernet (FE) interface
slot/port [.subinterface1[.subinterface2]]� slot � number of the chassis slot in
the range 0�6 (ERX-700 series) and 0�13 (ERX-1400 series)
� port � port number on the I/O module
� subinterface1 � number of the FE subinterface in the range 1�4294967293; not more than 2 subinterfaces per FE interface.a
� subinterface2 � number of the higher-level subinterface in the range 1�4294967293; not more than 4094 higher-level subinterfaces per FE subinterfacea
fastEthernet 3/2.6.20
About This Guidexii
gigabitEthernet IEEE 802.3 Gigabit Ethernet (GE) interface
slot/port [.subinterface1[.subinterface2]]� slot � number of the chassis slot in
the range 0�6 (ERX-700 series) and 0�13 (ERX-1400 series)
� port � port number on the I/O module
� subinterface1 � number of the GE subinterface in the range 1�4294967293; not more than 2 subinterfaces per GE interface.a
� subinterface2 � number of the higher-level subinterface in the range 1�4294967293; not more than 4094 higher-level subinterfaces per GE subinterface.a
gigabitEthernet 3/2.6.20
hssi High-speed serial interface
slot/port � slot � number of the chassis slot in
the range 0�6 (ERX-700 series) and 0�13 (ERX-1400 series)
� port � port number on the I/O module
hssi 3/0
loopback Loopback interface integer� integer � integer in the range
1�4294967293
loopback 20
mlframe-relay Multilink frame relay interface
bundle-name [.subinterface ]� bundle-name � name of the bundle� subinterface � number of the MFR
subinterface in the range 1�4294967293
mlframe-relay boston.1
mlppp Multilink PPP interface bundle-name� bundle-name � name of the bundle
mlppp chicago
null Null interface, which cannot forward or receive traffic
0 null 0
pos Packet over SONET (POS) interface
slot/port� slot � number of the chassis slot in
the range 0�6 (ERX-700 series) and 0�13 (ERX-1400 series)
� port � port number on the I/O module
pos 3/2
Table 4 Interface types and specifiers (continued)
Interface Type Description Interface Specifier Example
ConventionsERX Edge Routers
xiii
serial CE1, CT1, CT3, E3-FRAME, T3-FRAME, cOCx/STMx interface, or X.21/V.35 interface
Refer to the individual formats listed below.
� CE1/CT1 slot/port:channel-group� slot � number of the chassis slot in
the range 0�6 (ERX-700 series) and 0�13 (ERX-1400 series)
� port � port number on the I/O module
� channel-group � number of the channel group associated with a range of DS0 timeslots on a CE1 or CT1 module; in the range 1�31 for a CE1 module, and 1�24 for a CT1 module
serial 3/2:20
� CT3 slot/port:channel/subchannel� slot � number of the chassis slot in
the range 0�6 (ERX-700 series) and 0�13 (ERX-1400 series)
� port � port number on the I/O module
� channel - number of a T1 channel on a CT3 module; in the range 1�28
� subchannel � number of the channel group associated with a range of DS0 timeslots on a CT3 module; in the range 1�28
serial 3/2:20/15
� E3/T3 FRAME slot/port� slot � number of the chassis slot in
the range 0�6 (ERX-700 series) and 0�13 (ERX-1400 series)
� port � port number on the I/O module
serial 3/2
Table 4 Interface types and specifiers (continued)
Interface Type Description Interface Specifier Example
About This Guidexiv
� cOCx/STMx:unframed E1
slot/port:path-channel/path-payload/tributary-group/tributary-number/channelNumber� slot � number of the chassis slot in
the range 0�6 (ERX-700 series) and 0�13 (ERX-1400 series)
� port � port number on the I/O module
� path-channel � number of the STS-1or STM-0 line in the range 1�2147483648
� path-payload � number of the payload within the path
� tributary-group � number of the tributary group within the path
� tributary-number � number of the tributary within the group
� channelNumber � 1 (the system assigns the number one to an unframed E1 channel)
serial 3/0:10/1/2/2/1
� cOCx/STMx: fractional E1/T1
slot/port:path-channel/path-payload/tributary-group/tributary-number/channel-group� slot � number of the chassis slot in
the range 0�6 (ERX-700 series) and 0�13 (ERX-1400 series)
� port � port number on the I/O module
� path-channel � number of the STS-1or STM-0 line in the range 1�2147483648
� path-payload � number of the payload within the path
� tributary-group � number of the tributary group within the path
� tributary-number � number of the tributary within the group
� channel-group � number of a fractional T1 or E1 line
serial 3/0:10/1/2/2/1
Table 4 Interface types and specifiers (continued)
Interface Type Description Interface Specifier Example
ConventionsERX Edge Routers
xv
� cOCx/STMx: unchannelized DS3
slot/port:path-channel/ds3-channel-number� slot � number of the chassis slot in
the range 0�6 (ERX-700 series) and 0�13 (ERX-1400 series)
� port � port number on the I/O module
� path-channel � number of the STS-1or STM-0 line in the range 1�2147483648
� ds3-channel-number � number of a T3 channel
serial 3/0:1/1
� cOCx/STMx: DS3 channelized to DS0
slot/port:path-channel/ds3-channel-number/ds1-channel-number/subchannel-number� slot � number of the chassis slot in
the range 0�6 (ERX-700 series) and 0�13 (ERX-1400 series)
� port � port number on the I/O module
� path-channel � number of the STS-1or STM-0 line in the range 1�2147483648
� ds3-channel-number � number of a T3 channel
� ds1-channel-number � number of a T1 channel
� subchannel-number � number of a fractional T1 channel
serial 3/0:1/1/10/15
� X.21/V.35 slot/port� slot � number of the chassis slot in
the range 0�6 (ERX-700 series) and 0�13 (ERX-1400 series)
� port � port number on the I/O module
sonet � line layer Line layer of a SONET/SDH interface
slot/port� slot � number of the chassis slot in
the range 0�6 (ERX-700 series) and 0�13 (ERX-1400 series)
� port � port number on the I/O module
sonet 3/0
Table 4 Interface types and specifiers (continued)
Interface Type Description Interface Specifier Example
About This Guidexvi
DocumentationThe ERX Installation Quick Start poster is shipped in the box with all new systems. This poster provides the basic procedures to help you get the system up and running quickly.
The document set contains the following books and online resources:
• ERX Installation and User Guide – Provides the necessary procedures for getting your system operational, including information on installing, cabling, powering up, configuring your system for management access, and general troubleshooting.
• ERX System Basics Configuration Guide – Describes planning and configuring your network, managing the system, passwords, and security, and configuring the system clock and virtual routers.
• ERX Physical and Link Layers Configuration Guide – Describes configuring physical and link layer interfaces.
• ERX Routing Protocols Configuration Guide, Vol. 1 – Provides information about configuring routing policy and configuring IP, IP routing, and IP security.
sonet � path layer Path layer of a SONET/SDH interface
slot/port:path-channel� slot � number of the chassis slot in
the range 0�6 (ERX-700 series) and 0�13 (ERX-1400 series)
� port � port number on the I/O module
� path-channel � number of the STS-1or STM-0 line in the range 1�2147483648
sonet 3/0:2
sonet � section layer Section layer of a SONET/SDH interface
slot/port� slot � number of the chassis slot in
the range 0�6 (ERX-700 series) and 0�13 (ERX-1400 series)
� port � port number on the I/O module
sonet 3/0
tunnel Tunnel interface tunnel-type:tunnel-name� tunnel-type � type of the tunnel:
dvmrp, gre, ipsec, l2tp, or mpls� tunnel-name � name of the tunnel
tunnel gre:boston
a.See the interface fastEthernet command and the interface gigabitEthernet command for details on specifying subinterfaces with and without VLANs on Ethernet interfaces.
Table 4 Interface types and specifiers (continued)
Interface Type Description Interface Specifier Example
Using the Online Documentation CDERX Edge Routers
xvii
• ERX Routing Protocols Configuration Guide, Vol. 2 – Describes BGP routing, MPLS, BGP-MPLS VPNs, and encapsulation of layer 2 services.
• ERX Policy and QoS Configuration Guide - Provides information about configuring policy management and quality of service (QoS).
• ERX Broadband Access Configuration Guide – Provides information about configuring remote access.
• ERX Command Reference Guide – Contains important information about all system commands implemented in the system software. Use to look up command descriptions, command syntax, a command’s related mode, or a description of a command’s parameters. It is intended to be used in conjunction with the ERX Configuration Guides.
• ERX Product Overview Guide – Gives a thorough overview of the system from a software and hardware perspective. It provides illustrations and configuration examples that present the “big picture.”
• ERX Release Notes – Contains information about features, changes, known problems, and limitations. Provides final information that did not make it into the documentation.
• ERX Online Documentation CD – Provides an online version of this guide and the documents listed above. The online documents contain numerous links between guides, giving easy access to a vast amount of technical information.
AbbreviationsA complete list of abbreviations used in this document set, along with their spelled-out terms, is provided in the ERX System Basics Configuration Guide, Appendix A, Abbreviations and Acronyms.
Using the Online Documentation CDTo use the Online Documentation CD:
1 Place the Online Documentation CD in your CD-ROM drive.
2 Follow the instructions located on the inside cover of your CD jewel case to install Acrobat Reader.
3 From the Documentation folder on the CD, open the CDtips.pdf file for information on using Adobe Acrobat Reader.
About This Guidexviii
4 From the Documentation folder on the CD, open the Welcome.pdf file for access to the documentation set.
Comments About the DocumentationWe encourage you to provide feedback, comments, and suggestions so that we can improve the documentation to better meet your needs. Please e-mail your comments to:
Along with your comments, be sure to indicate:
• Document name
• Document part number
• Page number
Contacting Customer SupportFor technical support, contact Juniper Networks at [email protected], or at 1-888-314-JTAC (within the United States) or 408-745-2121 (from outside the United States).
List of Commands
aaa accounting acct-stop on-aaa-failure
Description: Configures AAA to send an Acct-Stop message if a user fails AAA, but RADIUS grants access. The no version returns the parameter to the default of enable.
Syntax: aaa accounting acct-stop on-aaa-failure { enable | disable }
no aaa accounting acct-stop on-aaa-failure
Mode(s): Global Configuration
aaa accounting acct-stop on-access-deny
Description: Issues an Acct-Stop message if RADIUS denies access. The no version returns the parameter to the default of disable.
Syntax: aaa accounting acct-stop on-access-deny { enable | disable }
no aaa accounting acct-stop on-access-deny
Mode(s): Global Configuration
aaa accounting duplication
Description: Sends duplicate accounting records to the accounting server of a different virtual router. The no version disables the feature.
Syntax: aaa accounting duplication routerName
no aaa accounting duplication
� routerName � virtual router name
Mode(s): Global Configuration
aaa accounting interval2
aaa accounting interval
Description: Specifies the accounting interval. The no version sets the value to 0, which turns off interim accounting.
Syntax: aaa accounting interval period
no aaa accounting interval
� period � accounting interval in minutes in the range 10�1080, which sets the time period between accounting updates
Mode(s): Global Configuration
aaa accounting ppp default
Description: Specifies the default accounting protocol for PPP. The no version produces the same result as specifying the radius value.
Syntax: aaa accounting ppp default accountor [ accountors ]*
no aaa accounting ppp default
� accountor � specifies the accounting method:
� radius � uses RADIUS for the accounting method
� none � disables accounting
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Global Configuration
aaa authentication enable defaultERX Edge Routers
3
aaa authentication enable default
Description: Allows privilege determination to be authenticated through the authenticator(s) you specify. This authentication is applied to vty users. The no version removes the authentication settings.
Syntax: aaa authentication enable default [ authenticator ] [ authenticators ] *
no aaa authentication enable default
� authenticator � specifies the authentication method
� authenticators
� radius � use RADIUS authentication
� line � use the line password
� tacacs+ � use TACACS+ authentication
� none � use no authentication
� enable � use the enable password
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Global Configuration
aaa authentication login
Description: Creates an authentication list and the criteria for login. This authentication is applied to vty users.
Syntax: aaa authentication login authListName authenticator [ authenticators ]*
no aaa authentication login authListName
� authListName � specifies an existing authentication list name (created using the login authentication command); a string of 1�32 characters
� authenticator � specifies the authentication method
� authenticators
� line � use the line password for authentication
� none � use no authentication
� radius � use RADIUS authentication
� tacacs+ � use TACACS+ authentication
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Global Configuration
aaa authentication ppp default4
aaa authentication ppp default
Description: Specifies the default authentication protocol for PPP and DHCP clients. The no version produces the same result as specifying the radius value.
Syntax: aaa authentication ppp default authenticator [ authenticators ]*
no aaa authentication ppp default
� authenticator � authentication method:
� radius � uses RADIUS for authentication
� none � means authentication is off, allowing all users access
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Global Configuration
aaa delimiter
Description: Specifies delimiters for the domain and realm names. You can specify up to eight delimiters each for domain and realm names. The no version restores the default value.
Syntax: aaa delimiter { domainName | realmName } delimiters
no aaa delimiter { domainName | realmName }
� domainName � allows you to set delimiters for the domain name
� realmName � allows you to set delimiters for the realm name
� delimiters � either the domain or realm delimiter(s). You can specify up to eight characters.
� The default domain name delimiter is @.
� The default realm name delimiter is NULL (no character). In this case, realm parsing is disabled (having no delimiter disables realm parsing).
Mode(s): Global Configuration
aaa dnsERX Edge Routers
5
aaa dns
Description: Specifies the IP address of the primary DNS name server. The no version sets the corresponding address to 0.
Syntax: aaa dns { primary | secondary } ipAddress
no aaa dns { primary | secondary }
� primary � specifies the primary DNS name server
� secondary � specifies the secondary DNS name server
� ipAddress � IP address of the name server
Mode(s): Global Configuration
aaa domain-map
Description: Maps a user domain name to a virtual router. When you specify only the domain name, the command sets the mode to Domain Map Configuration. The no version deletes the map entry.
Syntax: aaa domain-map domainName [ routerName [ loopback interfaceNumber ] ]
no aaa domain-map domainName
� domainName � a user domain name; specify the domain name none to assign users without domains to a specific virtual router.
� routerName � a router name associated with the domain name
� loopback � specifies the loopback interface
� interfaceNumber � interface number in the range 0�32000
Mode(s): Global Configuration
aaa duplicate-address-check
Description: Allows you to enable or disable routing table address lookup or duplicate address check. There is no no version.
Syntax: aaa duplicate-address-check { enable | disable }
Note: To use this command, you must have a B-RAS license. Run the license b-ras command and enter your password.
Mode(s): Global Configuration
aaa new-model6
aaa new-model
Description: Specifies AAA authentication for Telnet sessions. The no version restores simple authentication (login and password).
Syntax: [ no ] aaa new-model
Mode(s): Global Configuration
aaa parse-order
Description: Specifies the order in which the system searches for a domain name. It either searches for realm and then domain, or it searches for domain and then realm. The no version returns the parse order to the default of searching for realm first.
Syntax: aaa parse-order { domain-first | realm-first }
no aaa parse-order
� domain-first � causes the system to search for a domain name starting with the right-most character. When the system reaches a delimiter, it uses anything to the right of the delimiter as the domain name.
� realm-first � causes the system to search for a domain name starting with the left-most character. When the system reaches a delimiter, it uses anything to the left of the delimiter as the domain name.
Mode(s): Global Configuration
aaa profile
Description: Creates a new AAA profile to allow mapping to AAA services.
Syntax: aaa profile profileName
� profileName � profile name of up to 32 characters
Mode(s): AAA Profile Configuration
aaa subscriber limit per-portERX Edge Routers
7
aaa subscriber limit per-port
Description: Sets the maximum number of active subscribers permitted on the specified port. The no version returns the limit to the default, 0 (zero).
Syntax: aaa subscriber limit per-port interfaceValue limitValue
no aaa subscriber limit per-port interfaceValue
� interfaceValue � location of the interface in the slot/port format
� limitValue � maximum number of subscribers. The default is 0 (zero), which means there is no limit on the number of subscribers.
Mode(s): Global Configuration
aaa subscriber limit per-vr
Description: Sets the maximum number of active subscribers permitted on the virtual router. The no version returns the limit to the default, 0 (zero).
Syntax: aaa subscriber limit per-vr limitValue
no aaa subscriber limit per-vr
� limitValue � maximum number of subscribers. The default is 0 (zero), which means there is no limit on the number of subscribers.
Mode(s): Global Configuration
aaa timeout
Description: Sets either the default idle or session timeout for B-RAS PPP users. The no version deletes either the idle or session timeout.
Syntax: aaa timeout { idle idleTimeout | session sessionTimeout }
no aaa timeout { idle | session }
� idleTimeout � in seconds: 300, 7200
� sessionTimeout � in seconds: 60�2678400 (that is, a minimum of 1 minute to a maximum of 31 days)
Mode(s): Global Configuration
aaa tunnel assignment-id-format8
aaa tunnel assignment-id-format
Description: Sets the format for the tunnel assignment ID.
Syntax: aaa tunnel assignment-id-format { assignmentId | client-server-id }
� assignmentId � configures the format to be assignmentId only
� client-server-id � configures the format to be a combination of clientAuthId + serverAuthId + assignmentId
Mode(s): Global Configuration
aaa tunnel client-name
Description: Specifies the default tunnel client name. If the tunnel client name is not included in the tunnel attributes that are returned from the domain map or authentication server, the system uses the default name. The no version deletes the client name.
Syntax: aaa tunnel client-name name
no aaa tunnel client-name
� name � default tunnel client name; a string of up to 32 characters
Mode(s): Global Configuration
aaa tunnel ignore
Description: Specifies whether or not the tunnel peer�s NAS-Port [5] and NAS-Port-Type [61] attributes should be used. The no version negates the command or restores the default of enable.
Syntax: aaa tunnel ignore { nas-port | nas-port-type } { enable | disable }
no aaa tunnel ignore { nas-port | nas-port-type }
� nas-port � configures the tunnel peer�s supplied nas-port value
� nas-port-type � configures the tunnel peer�s supplied nas-port-type value
Mode(s): Global Configuration
aaa tunnel passwordERX Edge Routers
9
aaa tunnel password
Description: Specifies the default tunnel password. If the tunnel password is not included in the tunnel attributes that are returned from the domain map or authentication server, the system uses the default password. The no version deletes the password.
Syntax: aaa tunnel password name
no aaa tunnel password
� name � default tunnel password; a string of up to 32 characters
Mode(s): Global Configuration
aaa wins
Description: Specifies the IP address of the WINS name server. The no version sets the corresponding address to 0.
Syntax: aaa wins { primary | secondary } ipAddress
no aaa wins { primary | secondary }
� primary � specifies the primary WINS name server
� secondary � specifies the secondary WINS name server
� ipAddress � IP address of the name server
Mode(s): Global Configuration
access-class in
Description: Restricts incoming connections between a particular virtual terminal line and the addresses in an access list. The no version removes access restrictions.
Syntax: access-class listName in
no access-class [ listName ] in
� listName � name of the access list
Mode(s): Line Configuration
access-list10
access-list
Description: Defines a standard or extended IP access list. The extended access list enables you to specify a destination address or host, precedence, and type of service. Imposes an implicit last rule of �deny ip any any� to deny all routes that do not match previous rules in the access list. The no version removes the IP access list, the specified entry in an access list, or the log for a specified entry.
Syntax: Standard IP access list:
access-list accessListName { permit | deny } { srcIP srcWildIp | [ host ] srcIPHost | any } [ log ]
no access-list accessListName [ { permit | deny } { srcIP srcWildIp | [ host ] srcIPHost | any } [ log ] ]
Extended IP access list:
access-list accessListName { permit | deny } ip { srcIP srcWildIp | host srcIPHost | any } { dstIP dstWildIp | host dstIPHost | any } [ precedence preced ] [ tos typeOServ ] [ log ]
no access-list accessListName [ { permit | deny } ip { srcIP srcWildIp | host srcIPHost | any } { dstIP dstWildIp | host dstIPHost | any } [ log ] ]
� accessListName � string of up to 32 alphanumeric characters
� permit � permits access if the conditions are matched
� deny � denies access if the conditions are matched
� srcIP � source IP address from which the packet is being sent
� srcWildIp � wildcard mask IP address
� srcIPHost � source host IP address; assumes a wildcard mask of 0
� any � creates an address of 0.0.0.0 with a wildcard mask of 255.255.255.255
� dstIP � destination IP address
� dstWildIp � wildcard mask IP address for destination
� dstIPHost � destination host IP address to which the packet is being sent
� preced � number from 1 to the access list maximum that indicates the precedence level to which packets are filtered
� typeOServ � number from 1 to the access list maximum that indicates the type of service to which packets are filtered
� log � logs an Info event into the ipAccessList log whenever the access-list rule is matched
Mode(s): Global Configuration
addressERX Edge Routers
11
address
Description: From Domain Map Tunnel Configuration mode, sets the tunnel endpoint address of an L2TP or L2F tunnel. The no version removes the address of the tunnel.
From Interface Configuration or Subinterface Configuration mode, configures RIP to run on the interface specified by the IP address or on an unnumbered interface. Uses the default values: send version is RIP version 1, receive version is RIP version 1 and version 2, authentication is not enabled. The no version deletes the RIP interface. Use the address commands to configure RIP attributes on the network.
Syntax: To set the tunnel endpoint address:
address serverAddress
no address
� serverAddress � the IP address of the LNS or home gateway endpoint
To configure RIP:[ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }
� ipAddress � address of IP interface where RIP will be run
� unnumbered � specifies that RIP will be run on an unnumbered interface
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Interface Configuration (RIP), Subinterface Configuration (RIP), Domain Map Tunnel Configuration
address area12
address area
Description: Creates an interface on which OSPF runs in the specified area, on top of the IP interface at the specified IP address. Uses the default values. The no version deletes OSPF interfaces. If the OSPF network was previously specified with the network area command, the OSPF interface already exists, and you do not need to use this command, unless you want to change the area of the OSPF interface to an area different from the one specified by the network area command.
Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }area { areaId | areaIdInt }
� ipAddress � IP address of the interface on which OSPF will be run
� unnumbered � configures OSPF on an unnumbered interface
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� areaId � OSPF area ID in IP address format
� areaIdInt � OSPF area ID as a decimal value in the range 1�4294967295
Note: Before you issue this command, you must first configure an interface with the IP address specified by ipAddress or an interface configured as unnumbered.
Note: You must issue this command before issuing any other OSPF address command.
Mode(s): Router Configuration
address authentication keyERX Edge Routers
13
address authentication key
Description: Specifies the password for text authentication and the key for MD5 authentication. The no version clears the key for the interface. Supported only in RIP version 2. Authentication is disabled by default.
Syntax: address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication key [ 0 | 8 ] authkey
no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] authentication key
� ipAddress � address of IP interface where RIP will be run
� unnumbered � specifies that RIP will be run on an unnumbered interface
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� 0 � indicates the authKey is entered in unencrypted form (plaintext); this is the default option
� 8 � indicates the authKey is entered in encrypted form (ciphertext)
� authkey � password sent with RIP messages or the key used to encrypt/decrypt RIP messages, depending on the authentication mode set for this interface.
Mode(s): Interface Configuration, Subinterface Configuration
address authentication-key14
address authentication-key
Description: Assigns a password used by neighboring routers that are using OSPF simple password authentication. The no version deletes the password.
Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication-key [ 0 | 8 ] authKey
� ipAddress � OSPF interface address previously specified with the address command
� unnumbered � indicates that OSPF is running on an unnumbered interface previously specified with the address command
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� 0 � indicates the authKey is entered in unencrypted form (plaintext); this is the default option
� 8 � indicates the authKey is entered in encrypted form (ciphertext)
� authKey � password, a continuous string of characters up to 8 characters in length
Note: You must issue the address area command before issuing this command.
Mode(s): Router Configuration
address authentication message-digestERX Edge Routers
15
address authentication message-digest
Description: Specifies that MD5 authentication is used for the OSPF interface. The no version sets authentication for the interface to none, but leaves any configured MD5 key intact.
Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication message-digest
� ipAddress � OSPF interface address previously specified with the address command
� unnumbered � indicates that OSPF is running on an unnumbered interface previously specified with the address command
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Note: You must issue the address area command before issuing this command.
Mode(s): Router Configuration
address authentication mode16
address authentication mode
Description: Specifies the type of authentication used on this interface. The no version removes authentication from the interface. Supported only in RIP version 2. Authentication is disabled by default.
Syntax: address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication mode { text | md5 keyID }
no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] authentication mode
� ipAddress � address of IP interface where RIP will be run
� unnumbered � specifies RIP will be run on an unnumbered interface
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� text � simple text password is sent with each RIP message. If the password is not possessed by neighbors, the message is rejected.
� md5 � MD5 message-digest algorithms are used to encrypt and compress the RIP message.
� keyID � number identifying the MD5 key. Neighbors must share the MD5 key to decrypt the message and encrypt the response.
Mode(s): Interface Configuration, Subinterface Configuration
address authentication-noneERX Edge Routers
17
address authentication-none
Description: Specifies that no authentication is to be used for the OSPF interface. The no version has no effect.
Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication-none
� ipAddress � OSPF interface address previously specified with the address command
� unnumbered � indicates that OSPF is running on an unnumbered interface previously specified with the address command
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Note: You must issue the address area command before issuing this command.
Mode(s): Router Configuration
address cost
Description: Specifies a cost metric for an OSPF interface. Used in the calculation of the SPF routing table. The no version resets the path cost to the default.
Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }cost intfCost
� ipAddress � OSPF interface address previously specified with the address command
� unnumbered � indicates that OSPF is running on an unnumbered interface previously specified with the address command
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� intfCost � link state metric cost; a number in the range 0�65535; default value is 10
Note: You must issue the address area command before issuing this command.
Mode(s): Router Configuration
address dead-interval18
address dead-interval
Description: Sets the time period that the system�s neighbors should wait without seeing hello packets from the system before they declare the router to be down. The no version resets the dead interval to its default.
Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } dead-interval deadInterval
� ipAddress � OSPF interface address previously specified with the address command
� unnumbered � indicates that OSPF is running on an unnumbered interface previously specified with the address command
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� deadInterval � number in the range 1�65535 seconds; default value is 40 seconds
Note: You must issue the address area command before issuing this command.
Mode(s): Router Configuration
address-familyERX Edge Routers
19
address-family
Description: For BGP, configures the router or a specific VRF to exchange IPv4 addresses in unicast, multicast, or VPN mode by creating the specified address family. The no version removes the address family.
For RIP, configures RIP in a specific VRF to exchange IPv4 addresses. The no version removes the address family.
Syntax: For BGP:
[ no ] address-family { ipv4 [ multicast | unicast | unicast vrf vrfName |vrf vrfName ] | vpnv4 [ unicast ] }
For RIP:
[ no ] address-family ipv4 [ unicast ] vrf vrfName
� ipv4 � sessions that carry standard IPv4 address prefixes (default)
� multicast � specifies multicast prefixes
� unicast � specifies unicast prefixes (default)
� vrfName � name of the VRF; string of 1�32 alphanumeric characters
� vpnv4 � sessions that carry customer VPN-IPv4 prefixes, each of which has been made globally unique by adding an 8-byte route distinguisher
Mode(s): Router Configuration
address hello-interval
Description: Specifies the interval between hello packets that the router sends on the interface. The no version resets the hello interval to its default.
Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } hello-interval helloInterval
� ipAddress � OSPF interface address previously specified with the address command
� unnumbered � indicates that OSPF is running on an unnumbered interface previously specified with the address command
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� helloInterval � number in the range 1�65535 seconds; default value is 10 seconds
Note: You must issue the address area command before issuing this command.
Mode(s): Router Configuration
address message-digest-key md520
address message-digest-key md5
Description: Enables OSPF MD5 authentication and configures the MD5 key. The no version deletes an MD5 key.
Syntax: address { ipAddress | unnumbered interfaceType interfaceSpecifier } message-digest-key keyID md5 [ 0 | 8 ] msgDigestKey
no address { ipAddress | unnumbered interfaceType interfaceSpecifier } message-digest-key keyID
� ipAddress � OSPF interface address previously specified with the address command
� unnumbered � indicates that OSPF is running on an unnumbered interface previously specified with the address command
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� keyID � key identifier in the range 1�255
� md5 � specifies use of the MD5 algorithm
� 0 � indicates that the msgDigestKey is entered in unencrypted form (plaintext); this is the default option
� 8 � indicates that the msgDigestKey is entered in encrypted form (ciphertext)
� msgDigestKey � OSPF password; a continuous string of up to 16 alphanumeric characters.
Note: If all the MD5 keys have been deleted, the authentication type is still MD5, but you need to configure MD5 keys.
Note: To disable MD5 authentication for the interface, use the address authentication-none command.
Note: You must issue the address area command before issuing this command.
Mode(s): Router Configuration
address networkERX Edge Routers
21
address network
Description: Configures the OSPF network type for the specified interface to something other than the default for the network medium. The no version restores the default value for the medium.
Syntax: address { ipAddress | unnumbered interfaceType interfaceSpecifier } network { broadcast | non-broadcast | point-to-point }
no address { ipAddress | unnumbered interfaceType interfaceSpecifier } network
� ipAddress � OSPF interface address previously specified with the address command
� unnumbered � indicates that OSPF is running on an unnumbered interface previously specified with the address command
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� broadcast � sets network type to broadcast
� non-broadcast � sets network type to NBMA
� point-to-point � sets network type to point-to-point
Note: You must issue the address area command before issuing this command.
Mode(s): Router Configuration
address passive-interface22
address passive-interface
Description: Disables the transmission of routing updates on an interface. OSPF routing information is neither sent nor received through the specified router interface. The specified interface address appears as a stub network in the OSPF domain. The no version reenables the transmission of routing updates.
Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } passive-interface
� ipAddress � OSPF interface address previously specified with the address command
� unnumbered � indicates that OSPF is running on an unnumbered interface previously specified with the address command
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Note: You must issue the address area command before issuing this command.
Mode(s): Router Configuration
address-pool-name
Description: Specifies an address pool name to associate with the domain name being configured. The no version removes the pool name.
Syntax: address-pool-name poolName
no address-pool-name
� poolName � name of the pool to associate with the domain name
Mode(s): Domain Map Configuration
address priorityERX Edge Routers
23
address priority
Description: Sets the router priority. Used in determining the designated router for the particular network. This designation only applies to multi-access networks. Every broadcast and nonbroadcast multiaccess network has a designated router. The no version restores the default value.
Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }priority intfPriority
� ipAddress � OSPF interface address previously specified with the address command
� unnumbered � indicates that OSPF is running on an unnumbered interface previously specified with the address command
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� intfPriority � priority value, an 8-bit number in the range 1�255; default value is 1
Note: You must issue the address area command before issuing this command.
Mode(s): Router Configuration
address receive version24
address receive version
Description: Restricts the RIP version that the system can receive on an interface. The no version sets the interface back to the default value, receiving both RIP version 1 and version 2.
Syntax: address { ipAddress | unnumbered interfaceType interfaceSpecifier } receive version { 1 | 2 | 1 2 | 2 1 | off }
no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] receive version
� ipAddress � address of IP interface where RIP will be run
� unnumbered � specifies that RIP will be run on an unnumbered interface
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� 1 � specifies RIP version 1 only
� 2 � specifies RIP version 2 only
� 1 2 � specifies RIP version 1 and version 2; the default value
� 2 1 � specifies RIP version 2 and version 1
� off � turns reception off
Mode(s): Interface Configuration, Subinterface Configuration
address retransmit-intervalERX Edge Routers
25
address retransmit-interval
Description: Specifies the time between LSA retransmissions for the interface when an acknowledgment for the LSA is not received. The no version restores the default value.
Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } retransmit-interval retransInterval
� ipAddress � OSPF interface address previously specified with the address command
� unnumbered � indicates that OSPF is running on an unnumbered interface previously specified with the address command
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� retransInterval � number in the range 0�3600 seconds; default value is 5 seconds
Note: You must issue the address area command before issuing this command.
Mode(s): Router Configuration
address send version26
address send version
Description: Restricts the RIP version that the system can send on an interface. The no version sets the interface back to the default value, sending only RIP version 1.
Syntax: address { ipAddress | unnumbered interfaceType interfaceSpecifier } send version {1 | 2 | 1 2 | 2 1 | off }
no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] send version
� ipAddress � address of IP interface where RIP will be run
� unnumbered � specifies that RIP will be run on an unnumbered interface
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� 1 � specifies RIP version 1 only
� 2 � specifies RIP version 2 only
� 1 2 � specifies RIP version 1 and version 2
� 2 1 � specifies RIP version 2 and version 1
� off � turns reception off
Mode(s): Interface Configuration, Subinterface Configuration
address transmit-delayERX Edge Routers
27
address transmit-delay
Description: Sets the estimated time it takes to transmit a link state update packet on the interface. The no version restores the default value.
Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } transmit-delay transmDelay
� ipAddress � OSPF interface address previously specified with the address command
� unnumbered � indicates that OSPF is running on an unnumbered interface previously specified with the address command
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� transmDelay � link state transmit delay, a number in the range 0�3600 seconds; default value is 1 second
Note: You must issue the address area command before issuing this command.
Mode(s): Router Configuration
aggregate-address28
aggregate-address
Description: Creates an aggregate entry in a BGP routing table. The no version removes the aggregate.
Syntax: [ no ] aggregate-address address mask [ as-set | summary-only | attribute-map attributeMapTag | advertise-map advertiseMapTag | suppress-map suppressMapName ]*
� address � aggregate IP address
� mask � aggregate IP mask
� as-set � if the as-set option is not specified, the path attributes of the aggregate route are set in the same way as locally originated routes, except that the atomic_aggregate and aggregator attributes are added. If the as-set option is used, the path attributes of the aggregate route are determined by combining the path attributes of the aggregated routes as described in RFC 1771. If the as-set option is used, the path attributes of the aggregate route may change whenever one of the aggregated routes changes, causing the aggregate route to be readvertised.
� summary-only � filters all more specific routes from updates. summary-only not only creates the aggregate route but also suppresses advertisements of more-specific routes to all neighbors. If you only want to suppress advertisements to certain neighbors, you may use the neighbor distribute-list command, with caution. If a more-specific route leaks out, all BGP speakers will prefer that route over the less-specific aggregate you are generating (using longest-match routing). Alternatively, you can use the suppress-map keyword to suppress specific routes
� attributeMapTag � string of up to 32 characters that identifies the route map used to set the attributes of the aggregate route
� advertiseMapTag � string of up to 32 characters that identifies the route map used to set the routes to create AS-SET origin communities in the range
� suppressMapName � string of up to 32 characters that identifies a route map that filters routes to be suppressed
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Address Family Configuration, Router Configuration
aggressive-mode
Description: Allows aggressive mode negotiation for the tunnel. The no version restores the default, main mode.
Syntax: [ no ] aggressive-mode
Mode(s): ISAKMP Policy Configuration
allowERX Edge Routers
29
allow
Description: Specifies the domain names that are to be allowed access to AAA authentication. The no version negates the command.
Syntax: [ no ] allow domainName
� domainName � name of the domain; maximum of 64 characters
Mode(s): AAA Profile Configuration
append-after
Description: Add a next hop after a particular index in the MPLS explicit path. The sequence numbers for existing hops after the index adjust automatically. There is no no version.
Syntax: append-after indexNumber next-address ipAddress [ mask ipMask ] [ loose ]
� index � number of a node in an ordered set of abstract nodes
� ipAddress � address of the next hop
� ipMask � [ not currently used] mask for the next adjacent address
� loose � indicates the node is not necessarily directly connected (adjacent) to the previous node in the path. If loose is not configured, the configuration defaults to strict. Strict indicates that the node is directly connected to the previous node.
Mode(s): Explicit Path Configuration
aps force
Description: Forces the specified interface to be replaced by the inactive interface in an APS/MSP group. The no version allows the specified interface to resume operation.
Syntax: aps force channelNumber
no aps force [ channelNumber ]
channelNumber � number that identifies the working or protect interface.The number of the working interface is the same as the number of the corresponding active port on the I/O module. If there are n active ports on the I/O module, working interfaces are identified by the numbers 0 to n-1. Protect interfaces are identified by the numbers of the corresponding working interfaces plus n. For example, if the working interface has the number 0, and there is one active port on the I/O module, the corresponding protect interface has the number 1.
Mode(s): Controller Configuration
aps group30
aps group
Description: Assigns an interface to an APS/MSP group.
Syntax: aps group groupName
no aps group
� groupName� name of the APS/MSP group to which the active and standby interfaces belong; up to 32 characters in length
Mode(s): Controller Configuration
aps lockout
Description: Prevents the working interface from switching to the protect interface. The no version restores the default situation, in which the working interface can switch to the protect interface.
Syntax: aps lockout [ channelNumber ]
no aps lockout
channelNumber � number that identifies the working interface. The number of the working interface is the same as the number of the corresponding active port on the I/O module.
Mode(s): Controller Configuration
aps manual
Description: Forces the working interface to switch to the protect interface, unless a request of equal or higher priority exists. The no version allows the specified working interface to resume the active role.
Syntax: aps manual channelNumber
no aps manual [ channelNumber ]
channelNumber � number that identifies the working or protect interface.The number of the working interface is the same as the number of the corresponding active port on the I/O module. If there are n active ports on the I/O module, working interfaces are identified by the numbers 0 to n-1. Protect interfaces are identified by the numbers of the corresponding working interfaces plus n. For example, if the working interface has the number 0, and there is one active port on the I/O module, the corresponding protect interface has the number 1.
Syntax: Controller Configuration
aps protectERX Edge Routers
31
aps protect
Description: Configures an interface as a protect interface. The no version removes the relationship between the protect interface and the active interface.
Syntax: aps protect [ channelNumber ]
no aps protect
channelNumber � number that identifies the working interface. The number of the working interface is the same as the number of the corresponding active port on the I/O module.
Mode(s): Controller Configuration
aps revert
Description: Configures the APS/MSP group to operate in revertive mode. The no version restores the default setting, non-revertive mode.
Syntax: aps revert minutes
no aps revert
� minutes � number of minutes in the range 5�12 at which the interface resumes the active role after that interface becomes available
Mode(s): Controller Configuration
aps unidirectional
Description: Configures the APS/MSP group to operate in unidirectional mode, the default setting. The no version configures the APS/MSP group to operate in bidirectional mode.
Syntax: aps unidirectional
no aps unidirectional
Mode(s): Controller Configuration
aps working32
aps working
Description: Configures an interface as a working interface. The no version removes the configuration.
Syntax: aps working [ channelNumber ]
no aps working
channelNumber � number that identifies the working interface. The number of the working interface is the same as the number of the corresponding active port on the I/O module.
Mode(s): Controller Configuration
area
Description: This command has only a no version. See the no area command for a complete description and syntax.
area-authentication-key
Description: Assigns a password used by neighboring routers for authentication of IS-IS level 1 LSPs, CSNPs, and PSNPs. The no version deletes the password.
Syntax: [ no ] area-authentication-key [ 0 | 8 ] authKey
no area-authentication-key
� 0 � indicates the authKey is entered in unencrypted form (plaintext); this is the default option
� 8 � indicates the authKey is entered in encrypted form (ciphertext)
� authKey � password, a continuous string of characters up to 8 characters in length
Mode(s): Router Configuration
area default-costERX Edge Routers
33
area default-cost
Description: Specifies a cost for the default summary route sent into a stub area. A stub area is an OSPF area that carries a default route, intra-area routes, and interarea routes, but does not carry external routes. You cannot configure virtual links across a stub area. Stub areas cannot contain an ASBR. The no version removes the configured default route cost.
Syntax: area { areaId | areaIdInt } default-cost defaultCost
no area { areaId | areaIdInt } default-cost
� areaId � OSPF area ID in IP address format
� areaIdInt � OSPF area ID as a decimal value 0�4294967295
� defaultCost � stub area�s advertised external route cost (cost metric); an integer in the range 0�16777215
Mode(s): Router Configuration
area-message-digest-key34
area-message-digest-key
Description: Specifies an HMAC MD5 key that the system uses to create a secure, encrypted message digest of each IS-IS level 1 packet (LSPs, CSNPs, and PSNPs). The digest is inserted into the packet from which it is created. Using this algorithm for area routers protects against unauthorized routers injecting false routing information into your network. You can specify when the system will start (default is the current time) and stop (default is never) accepting packets that include a digest made with this key. You can specify when the system will start (default is the current time plus 2 minutes) and stop (default is never) generating packets that include a digest made with this key. The no version deletes the key specified by the key-id.
Syntax: area-message-digest-key keyId hmac-md5 [ 0 | 8 ] key [ start-accept startAcceptTime [ { startAcceptMonth startAcceptDay | startAcceptDay startAcceptMonth } startAcceptYear ] ] [ start-generate startGenTime [ { startGenMonth startGenDay | startGenDay startGenMonth } startGenYear ] ] [ stop-accept { never | stopAcceptTime [ { stopAcceptMonth stopAcceptDay | stopAcceptDay stopAcceptMonth } stopAcceptYear ] } ] [ stop-generate { never | stopGenTime [ { stopGenMonth stopGenDay | stopGenDay stopGenMonth } stopGenYear ] } ]
no area-message-digest-key keyId
� keyId � integer from 1 to 255 that is a unique identifier for the secret key, sent with the message digest in the packet.
� 0 � indicates key is entered in unencrypted form (plaintext); default option
� 8 � indicates the key is entered in encrypted form (ciphertext)
� key � string of up to 20 alphanumeric characters; secret key used by the HMAC MD5 algorithm to generate the message digest
� startAcceptTime, startAcceptMonth, startAcceptDay, startAcceptYear � time, month, day, year that the system will start accepting packets created with this password. Use military time format HH:MM[:SS ].
� startGenTime, startGenMonth, startGenDay, startGenYear � time, month, day, year that the system will start inserting this password into packets. Use military time format HH:MM[:SS ].
� never � indicates the system never stops accepting or generating packets; overrides previously specified stop times and keeps using the authentication key in sending and receiving PDUs with the corresponding authentication indefinitely
area nssaERX Edge Routers
35
� stopAcceptTime, stopAcceptMonth, stopAcceptDay, stopAcceptYear � time, month, day, year that the system will stop accepting packets created with this password. Use military time format HH:MM[:SS ].
� stopGenTime, stopGenMonth, stopGenDay, stopGenYear � time, month, day, year that the system will stop inserting this password into packets. Use military time format HH:MM[:SS ].
Mode(s): Router Configuration
area nssa
Description: Configures an area as an NSSA and controls generation of type 7 default LSAs. NSSAs are similar to stub areas but have the additional capability of importing AS external routes in a limited fashion. The no version removes the specified option for default-information-originate, removes default-information-originate, or removes the NSSA designation from the area.
Syntax: [ no ] area { areaId | areaIdInt } nssa [ default-information-originate [ always | metric absoluteValue | metric-type 1 | metric-type 2 | route-map mapTag ]* ]
� areaId � OSPF area ID in IP address format
� areaIdInt � OSPF area ID as a decimal value in the range 0�4294967295
� default-information-originate � causes the generation of a type 7 default LSA if a default route exists in the routing table.
� always � creates the default route if it doesn�t exist
� absoluteValue � metric applied to the generated type 7 default LSAs; ranges from 0�429496729
� metric-type 1 � cost of the external routes is equal to the sum of all internal costs and the external cost
� metric-type 2 � cost of the external routes is equal to the external cost alone; this is the OSPF default
� mapTag � string of up to 32 alphanumeric characters that specifies a route map applied to the generated type 7 default LSAs
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Router Configuration
area range36
area range
Description: Aggregates the routes at an area boundary. By default, the range of configured networks is advertised in type 3 (summary) LSAs. The no version disables this function.
Syntax: [ no ] area { areaId | areaIdInt } range ipAddress mask [ do-not-advertise ]
� areaId � OSPF area ID in IP address format
� areaIdInt � OSPF area ID as a decimal value in the range 0�4294967295
� ipAddress � IP address to match
� mask � IP address mask
� do-not-advertise � specifies that the range of configured networks is not advertised
Mode(s): Router Configuration
area stub
Description: Defines an area as a stub area. A stub area is an OSPF area that carries a default route, intra-area routes, and interarea routes, but does not carry AS external routes. This reduces the size of the area's OSPF database and decreases memory usage for external routers in the stub area. The no version disables this function.
Syntax: [ no ] area { areaId | areaIdInt } stub
� areaId � OSPF area ID in IP address format
� areaIdInt � OSPF area ID as a decimal value in the range 0�4294967295
Mode(s): Router Configuration
area virtual-link
Description: Defines an OSPF virtual link. The no version removes the virtual link.
Syntax: [ no ] area { areaId | areaIdInt } virtual-link ipAddress
� areaId � OSPF area ID in IP address format
� areaIdInt � OSPF area ID as a decimal value in the range 0�4294967295
� ipAddress � IP address associated with the virtual link neighbor
Mode(s): Router Configuration
area virtual-link authentication-keyERX Edge Routers
37
area virtual-link authentication-key
Description: Configures simple password (type 1) authentication for OSPF virtual links. The no version removes the password.
Syntax: [ no ] area { areaID | areaIdInt } virtual-link ipAddress authentication-key [ 0 | 8 ] line
� areaId � OSPF area ID in IP address format
� areaIdInt � OSPF area ID as a decimal value in the range 0�4294967295
� ipAddress � IP address of the virtual link neighbor
� 0 � indicates that the line is entered in unencrypted form (plaintext); this is the default option
� 8 � indicates that the line is entered in encrypted form (ciphertext)
� line � password to be used by neighbors. All neighboring routers on the same network must have the same password. The password can be a continuous string of up to 16 alphanumeric characters.
Mode(s): Router Configuration
area virtual-link authentication message-digest
Description: Specifies that MD5 authentication is used for the virtual link. The no version sets the authentication for the virtual link to none, but leaves any configured MD5 key intact.
Syntax: [ no ] area { areaID | areaIdInt } virtual-link ipAddress authentication message-digest
� areaId � OSPF area ID in IP address format
� areaIdInt � OSPF area ID as a decimal value in the range 0�4294967295
� ipAddress � IP address of the virtual link neighbor
Mode(s): Router Configuration
area virtual-link authentication-none
Description: Specifies that no authentication is to be used for the virtual link. The no version has no effect.
Syntax: [ no ] area { areaId | areaIdInt } virtual-link ipAddress authentication-none
� areaId � OSPF area ID in IP address format
� areaIdInt � OSPF area ID as a decimal value in the range 0�4294967295
� ipAddress � IP address of the virtual link neighbor
Mode(s): Router Configuration
area virtual-link dead-interval38
area virtual-link dead-interval
Description: Defines an OSPF virtual link and the time interval allowed for detecting a dead router. The no version removes the virtual link�s dead interval.
Syntax: [ no ] area { areaID | areaIdInt } virtual link ipAddress dead-interval deadInterval
� areaId � OSPF area ID in IP address format
� areaIdInt � OSPF area ID as a decimal value in the range 0�4294967295
� ipAddress � IP address of the virtual link neighbor
� deadInterval � integer in the range 1�8192 seconds
Mode(s): Router Configuration
area virtual-link hello-interval
Description: Defines an OSPF virtual link and the time between the hello packets. The hello interval value must be the same for both ends of the virtual link. The no version removes the virtual link�s hello interval.
Syntax: [ no ] area { areaId | areaIdInt } virtual-link ipAddress hello-interval helloInterval
� areaId � OSPF area ID in IP address format.
� areaIdInt � OSPF area ID as a decimal value in the range 0�4294967295
� ipAddress � IP address associated with the virtual link neighbor
� helloInterval � integer in the range 1�8192 seconds
Mode(s): Router Configuration
area virtual-link message-digest-key md5ERX Edge Routers
39
area virtual-link message-digest-key md5
Description: Enables MD5 authentication and configures MD5 keys for virtual links. The no version deletes MD5 keys.
Syntax: area { areaId | areaIdInt } virtual-link ipAddress message-digest-key md5KeyId md5 [ 0 | 8 ] msgDigestKey
no area { areaId | areaIdInt } virtual-link ipAddress message-digest-key md5KeyId
� areaId � OSPF area ID in IP address format
� areaIdInt � OSPF area ID as a decimal value in the range 0�4294967295
� ipAddress � IP address of the virtual link neighbor
� md5KeyId � key identifier in the range 1�255
� 0 � indicates that the msgDigestKey is entered in unencrypted form (plaintext); this is the default option
� 8 � indicates that the msgDigestKey is entered in encrypted form (ciphertext)
� msgDigestKey � password to be used by neighbors. All neighboring routers on the same network must have the same password. The password can be a continuous string of up to 16 alphanumeric characters.
Note: If you delete all the MD5 keys, the authentication type for the virtual link is still MD5, but you need to configure MD5 keys.
Note: To disable MD5 authentication for the virtual link, use the area virtual-link authentication-none command.
Mode(s): Router Configuration
area virtual-link retransmit-interval
Description: Defines an OSPF virtual link and the time between link state advertisement retransmissions for the adjacency belonging to the virtual link. The no version removes the virtual link�s retransmit interval.
Syntax: [ no ] area { areaId | areaIdInt } virtual-link ipAddress retransmit-interval retransmInterval
� areaId � OSPF area ID in IP address format.
� areaIdInt � OSPF area ID as a decimal value in the range 0�4294967295
� ipAddress � IP address of the virtual link neighbor
� retransmInterval � LSA retransmit interval; an integer in the range 1�8192 seconds
Mode(s): Router Configuration
area virtual-link transmit-delay40
area virtual-link transmit-delay
Description: Defines an OSPF virtual link and the estimated time it takes to transmit a link state update packet on the virtual link. The no version removes the virtual link�s transmit delay.
Syntax: [ no ] area { areaId | areaIdInt } virtual-link ipAddress transmit-delay transmDelay
� areaId � OSPF area ID in IP address format
� areaIdInt � OSPF area ID as a decimal value in the range 0�4294967295
� ipAddress � IP address associated with the virtual link neighbor
� transmDelay � LSA transmit delay; an integer in the range 1�8192 seconds
Mode(s): Router Configuration
arp
Description: Adds a permanent entry in the ARP cache. The no version removes an entry from the ARP cache. This command applies only on an Ethernet or bridged Ethernet interface.
Syntax: [ no ] arp [ vrf vrfName ] ipAddress { interfaceType interfaceSpecifier[ macAddress [ validate ] ] | macAddress }
� vrfName � name of the VRF to which the command applies; string of 1�32 alphanumeric characters
� ipAddress � IP address in 32-bit dotted-decimal format corresponding to the local data link address
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� macAddress � MAC address of the interface
� validate � allows the inclusion of MAC validation entries
Mode(s): Global Configuration
arp timeoutERX Edge Routers
41
arp timeout
Description: Specifies how long an entry remains in the ARP cache. You can set the ARP timeout only on bridged Ethernet and Fast Ethernet interfaces on the FE-2 module. You cannot set the timeout on the SRP module. The default value is 21600 seconds (6 hours). Use the show config command to display the current value. The no version restores the default value.
Syntax: arp timeout timeoutVal
no arp timeout
� timeoutVal � time in seconds that an entry remains in the ARP cache
Mode(s): Interface Configuration
atm
Description: The system supports the configuration of traffic-shaping parameters for PPPoA via domain-based parameters and RADIUS. The no version removes the ATM traffic-shaping configuration.
Syntax: atm { ubr | ubrpcr pcr | nrtvbr pcr scr mbs | cbr pcr }
no atm
� ubr � sets the traffic category to unspecified bit rate
� ubrpcr � sets the traffic category to unspecified bit rate with peak cell rate
� pcr � peak cell rate
� nrtvbr � sets the traffic category to non�real time variable bit rate
� scr � sustained cell rate
� mbs � maximum burst size
� cbr � sets the traffic category to constant bit rate
Mode(s): Domain Map Configuration
atm aal5 description
Description: Assigns a text description or alias to an ATM AAL5 interface. The no version removes the text description or alias. Use the show atm subinterface command to display the text description.The atm description is pushed out to RADIUS during authentication/accounting.
Syntax: atm aal5 description name
no atm aal5 description
� name � alias for the AAL5 interface; up to 32 characters
Mode(s): Interface Configuration
atm aal5 shutdown42
atm aal5 shutdown
Description: Sets the administrative state of an ATM AAL5 interface to disabled. The no version enables a disabled interface.
Syntax: [ no ] atm aal5 shutdown
Mode(s): Interface Configuration
atm aal5 snmp trap link-status
Description: Enables SNMP link status traps on the AAL5 layer on a per-interface basis. The no version disables the traps.
Syntax: [ no ] atm aal5 snmp trap link-status
Mode(s): Interface Configuration
atm atm1483 description
Description: Assigns a text description or alias to an ATM 1483 interface. The no version removes the text description or alias. Use the show atm aal5 interface to display the text description. The atm description is pushed out to RADIUS during authentication/accounting.
Syntax: atm atm1483 description name
no atm atm1483 description
� name � alias for the atm atm1483 interface; up to 15 characters
Mode(s): Subinterface Configuration
atm atm1483 mtu
Description: Sets the MTU size for an ATM 1483 subinterface. The no version restores the default MTU size of 9180.
Syntax: atm atm1483 mtu size
no atm atm1483 mtu
� size � maximum number of packet transmissions permitted on an ATM 1483 subinterface; the valid range is 256�9180. The default is 9180.
Mode(s): Subinterface Configuration
atm atm1483 shutdownERX Edge Routers
43
atm atm1483 shutdown
Description: Sets the administrative state of an ATM 1483 subinterface to disabled. The no version enables a disabled subinterface.
Syntax: [ no ] atm atm1483 shutdown
Mode(s): Subinterface Configuration
atm atm1483 snmp trap link-status
Description: Enables SNMP link status traps on the ATM1483 layer. The no version disables the traps.
Syntax: [ no ] atm atm1483 snmp trap link-status
Mode(s): Subinterface Configuration
atm auto-configuration
Description: Enables auto configuration of ILMI. Auto configuration is enabled by default. The no version disables auto configuration and sets the ILMI parameters to the UNI version configured using the atm uni-version command, which has a default value of UNI 4.0. Entering the atm auto-configuration command overrides any previous configuration of the atm uni-version command.
Syntax: [ no ] atm auto-configuration
Mode(s): Interface Configuration
atm cac
Description: Enables CAC on the ATM interface. If the subscription limit or UBR weight parameters are set to zero, the system uses the effective port bandwidth as the subscription bandwidth. The effective bandwidth varies according to line module. The no version disables CAC on the interface.
Syntax: [ no ] atm cac [ subscriptionBandwidth ] [ ubr ubrWeight ]
� subscriptionBandwidth � maximum allowable bandwidth on this port in the range 0�2147482647 kbps; the default value is 0
� ubrWeight � bandwidth associated with UBR and UBR-PCR connections in the range is 0�2147482647 kbps; the default value is 0
Note: If you modify one of these parameters after CAC is enabled, you must modify both parameters. Otherwise, the parameter not specified reverts to its default value.
Mode(s): Interface Configuration
atm clock internal44
atm clock internal
Description: Causes the ATM interface to generate the transmit clock internally. The no version causes ATM interfaces to recover the clock from the received signal. If the internal clock is chosen and no internal source is specified, then the internal clock source is taken from the line module.
Syntax: [ no ] atm clock internal [ internalSource ]
� internalSource � one of the following:
� module � specify that the internal clock is from the line module
� chassis � specify that the internal clock is from the configured system clock
Mode(s): Interface Configuration
atm description
Description: Assigns a text description or alias to the interface. The no version removes the text description or alias. The show atm interface command displays the text description.The description is pushed out to RADIUS during authentication/accounting.
Syntax: atm description name
no atm description
� name � alias for the atm interface; up to 32 characters
Mode(s): Interface Configuration
atm esi-address
Description: Specifies an ATM ESI address for the subinterface. The no version removes the ESI address.
Syntax: atm esi-address esiAddress
no atm esi-address
� esiAddress � end system ID portion of the ATM NSAP address in the format xxxxxxxxxxxx.xx
Mode(s): Subinterface Configuration
atm framingERX Edge Routers
45
atm framing
Description: Configures T3 or E3 framing on an ATM interface. The no version returns framing to the default. For a T3 interface, the default is cbitplcp. For an E3 interface, the default is g751plcp.
Syntax: atm framing framingType
no atm framing
� framingType � one of the following:
� cbitadm � c-bit with ATM direct mapping for a DS3 (T3) interface
� cbitplcp � c-bit with PLCP framing for a DS3 (T3) interface (default for T3)
� g832adm � G.832 ATM direct mapping for an E3 interface
� g751adm � G.751 ATM direct mapping for an E3 interface
� g751plcp � G.751 PLCP mapping for an E3 interface (default for E3)
� m23adm � M23 ATM direct mapping for a DS3 (T3) interface
� m23plcp � M23 with PLCP framing for a DS3 (T3)
Mode(s): Interface Configuration
atm ilmi-enable
Description: Enables ILMI on the interface. The no version removes the ILMI PVC.
Syntax: [ no ] atm ilmi-enable
Mode(s): Interface Configuration
atm ilmi-keepalive
Description: Enables generation of ILMI keepalive messages on the system. The no version disables the generation of keepalive messages. Enabling generation of keepalive messages has an effect on the operational state of the ATM interface.
Syntax: [ no ] atm ilmi-keepalive [ seconds ]
� seconds � number in the range 0�4294967295; the interval in seconds between two consecutive ILMI keepalive requests
Mode(s): Interface Configuration
atm lbo46
atm lbo
Description: Specifies the cable length (line build-out) for the ATM T3 or E3 interface. The length of cable determines power requirements. The no version restores the default value.
Syntax: atm lbo { long | short }
no atm lbo
� short � a cable length in the range 0�225 feet (the default)
� long � a cable length in the range 255�450 feet
Mode(s): Interface Configuration
atm oam
Description: Configures F4 OAM on an interface or circuit. The no version deletes F4 OAM circuits.
Syntax: atm oam [ vpi ] [ [ seg-loopback | end-loopback [ loopback-timer time ] ][ cc { source | sink | both } ] ]
no atm oam [ vpi ] [ [ seg-loopback | end-loopback [ loopback-timer time ] ] ]
Note: If you do not specify any options, both end-to-end and segment loopback are enabled on all VPIs on the interface.
� vpi � VPI on which you want to enable F4 OAM. If you do not specify a VPI, F4 OAM flow is enabled on all VPIs on the interface.
� seg-loopback � enables F4 segment OAM
� end-loopback � enables F4 end-to-end OAM
� loopback-timer � to generate F4 loopback cells on the VPI, you must configure the loopback timer; you can set the loopback timer only for end-to-end loopback
� time � time interval in the range 0�600 seconds between transmissions of F4 loopback cells. This value is a multiple of 20 and is based on the number of circuits with VC integrity enabled. The values are 20 seconds for 1�1999 circuits, 40 seconds for 2000�3999 circuits, 60 seconds for 4000�5999 circuits, and so on. These values are used regardless of the setting of this parameter.
� cc � enables CC cells on the PVC; you can enable CC cells only on data circuits, not on control circuits, such as ILMI or signaling circuits
� sink � enables this VC as a sink point (cell receiver)
� source � enables this VC as the source point (cell generator)
� both � enables this VC as both a sink point and a source point
Mode(s): Interface Configuration, Subinterface Configuration
atm oam flushERX Edge Routers
47
atm oam flush
Description: Indicates that all OAM cells received on an interface should be ignored. OAM performs fault management and performance management functions on an ATM interface. The no version disables the feature.
Syntax: [ no ] atm oam flush [ alarm-cells ]
� alarm-cells � causes the system to ignore only AIS and RDI cells and to accept all other OAM cells
Mode(s): Interface Configuration
atm oam loopback-location
Description: Sets the location ID of the ATM interface. The no version returns the loopback location to the default setting of all 1s (ones).
Syntax: atm oam loopback-location locationID
[ no ] atm oam loopback-location
� locationID � value of the four-octet long location ID of the ATM interface
Mode(s): Interface Configuration, Subinterface Configuration
atm pvc48
atm pvc
Description: Creates a PVC on an ATM interface. The no version removes the specified PVC.
Syntax: atm pvc vcd vpi vci { encapsulation } [ { cbr cbr } | { peak [ average burst [ rt ] ] } ] [ oam [ seconds | cc [ segment | end-to-end ] { source | sink | both } ] ] [ inArp [ minutes ] ]
no atm pvc vcd
� vcd � virtual circuit descriptor that is an identifier for the VC in other commands; the range is 1�2147483647
� vpi � virtual path identifier of this PVC. The allowable numeric range depends on the line module capabilities and current configuration. The VPI and VCI cannot both be set to 0; if one is 0, the other cannot be 0.
� vci � virtual circuit identifier of this PVC. The allowable numeric range depends on the line module capabilities and current configuration. The VPI and VCI cannot both be set to 0; if one is 0, the other cannot be 0.
� encapsulation � one of the following:
� aal5snap � LLC encapsulated circuit; LLC/SNAP precedes the protocol datagram
� aal5mux ip � VC-based multiplexed circuit used for IP only
� aal5autoconfig � enables autodetection of the 1483 encapsulation (LLC/SNAP or VC multiplexed)
� ilmi � integrated local management interface encapsulation
� qsaal � Q.2931 signalling
� peak � PCR in Kbps
� average � average rate in Kbps; also referred to as SCR
� burst � length in cells of the burst.; also referred to as MBS
� rt � selects VBR-RT as the service type; the default type is VBR-NRT. You can select rt only if you set the peak, average, and burst parameters.
� cbr � constant bit rate in Kbps
� oam � enable generation of OAM F5 loopback cells on this circuit. This option enables VC integrity features that have an effect on the operational state of the ATM PVC.
� seconds - time interval in seconds between transmissions of OAM F5 end-to-end loopback cells for VC connectivity verification. This value is a multiple of 20 and is based on the number of circuits with VC integrity
atm shutdownERX Edge Routers
49
enabled. The values are: 20 seconds for 1�1999 circuits, 40 seconds for 2000�3999 circuits, 60 seconds for 4000�5999 circuits, and so on. These values are used regardless of the setting of this parameter.
� inarp � enables Inverse ARP
� minutes � InARP refresh rate in minutes; 15 minutes is the default
Note: The optional peak, average, and burst parameters configure traffic-shaping parameters for the circuit. The allowable traffic-shaping features and range specifications depend on the line module capabilities.
� cc � enables CC cells on the PVC; you can enable CC cells only on data circuits, not on control circuits, such as ILMI or signaling circuits
� segment � opens an OAM CC segment cell flow
� end-to-end � opens an OAM CC end-to-end cell flow
� sink � enables this VC as a sink point (cell receiver)
� source � enables this VC as the source point (cell generator)
� both � enables this VC as both a sink point and a source point
Mode(s): Interface Configuration, Subinterface Configuration
atm shutdown
Description: Administratively disables an ATM interface. The no version enables a disabled interface.
Syntax: [ no ] atm shutdown
Mode(s): Interface Configuration
atm snmp trap link-status
Description: Enables SNMP link status traps on the ATM layer on a per-interface basis. The no version disables the traps.
Syntax: [ no ] atm snmp trap link-status
Mode(s): Interface Configuration
atm sonet stm-1
Description: Sets the mode of operation on the physical interface to SDH STM-1. The no version restores the default value, SONET STS-3c operation.
Syntax: [ no ] atm sonet stm-1
Mode(s): Interface Configuration
atm svc50
atm svc
Description: Defines an SVC on an ATM subinterface. The system will attempt to set up an SVC to the destination address with the requested traffic parameters and encapsulation. The no version removes the specified SVC definition.
Syntax: atm svc nsap nsapAddress [ { encapsulation } [ { cbr cbr } | peak [ average burst [ rt ] ] ] ]
no [ atm ] svc [ nsap nsapAddress ]
� nsapAddress � destination address in the format
� encapsulation � one of the following:
� aal5snap � LLC encapsulated circuit; LLC/SNAP precedes the protocol datagram
� aal5mux ip � VC-based multiplexed circuit used for IP only
� cbr � constant bit rate in Kbps
� peak � PCR in Kbps
� average � average rate in Kbps; also referred to as SCR
� burst � length in cells of the burst.; also referred to as MBS
� rt � selects VBR-RT as the service type
Mode(s): Subinterface Configuration
atm uni-version
Description: Specifies the UNI version the interface should use. There is no no version.
Syntax: atm uni-version versionNumber
� versionNumber � UNI version number: 3.0, 3.1, or 4.0
Mode(s): Interface Configuration
xx xxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxx xx⋅ ⋅ ⋅{ {
122 24 2
atm vc-per-vpERX Edge Routers
51
atm vc-per-vp
Description: Configures the number of virtual circuits per virtual path. This command controls the VPI and VCI range on the ATM interface. The allowable configuration range depends on the line module. The system will not execute the command if any virtual circuits are open on the interface. The no version restores the default.
Note: The minimum number of VCs per VP is 4096 for 0C3-4 modules and 1024 for UT3a modules. If you enter a value that is below the minimum, the system uses the minimum value.
Syntax: atm vc-per-vp [ vcCount ]
no atm vc-per-vp
� vcCount � number of virtual circuits per virtual path
Mode(s): Interface Configuration
atm vp-tunnel
Description: Defines a virtual path tunnel and configures the rate of traffic flow within the tunnel. The no version removes the restriction.
Syntax: atm vp-tunnel vpi [ cbr ] kbps
no atm vp-tunnel vpi
� vpi � number in the range 0�255; virtual path identifier of this PVC
� cbr � specifies the service class as constant bit rate
� kbps � tunnel rate for a virtual path. The aggregate to this traffic from all circuits configured in the tunnel is held to the specified rate. Certain line modules may have minimum rates for VP tunnels.
Mode(s): Interface Configuration
authentication
Description: Specifies the authentication method to use in the IKE policy. The no version restores the default, preshared keys.
Syntax: authentication { pre-share }
no authentication
� pre-share � specifies preshared keys as the authentication method
Mode(s): ISAKMP Policy Configuration
authentication key52
authentication key
Description: Specifies the password for text authentication and the key for MD5 authentication for RIP remote-neighbor interface. The no version clears the key for the interface. Supported only in RIP version 2. Authentication is disabled by default.
Syntax: authentication key [ 0 | 8 ] authkey
no authentication key
� 0 � the authKey is entered in unencrypted form (plaintext); this is the default option
� 8 � the authKey is entered in encrypted form (ciphertext)
� authkey � specifies the password sent with RIP messages or the key used to encrypt/decrypt RIP messages, depending on the authentication mode set for this remote-neighbor interface.
Mode(s): Remote Neighbor Configuration
authentication-key
Description: Enables simple password authentication and assigns a password used by OSPF remote neighbors. The no version deletes the password.
Syntax: authentication-key [ 0 | 8 ] authKey
no authentication-key
� 0 � the authKey is entered in unencrypted form (plaintext); this is the default option
� 8 � the authKey is entered in encrypted form (ciphertext)
� authKey � a password, a continuous string of characters up to 8 characters in length
Mode(s): Remote Neighbor Configuration
authentication message-digest
Description: Specifies that MD5 authentication is used for the OSPF remote-neighbor interface. There is no no version.
Syntax: authentication message-digest
Mode(s): Remote Neighbor Configuration
authentication modeERX Edge Routers
53
authentication mode
Description: Specifies the type of authentication used on the RIP remote-neighbor interface. The no version removes authentication from the interface. Supported only in RIP version 2. Authentication is disabled by default.
Syntax: authentication mode { text | md5 keyID }
no authentication mode
� text � a simple text password is sent with each RIP message. If the password is not possessed by remote neighbors, the message is rejected.
� md5 � MD5 message-digest algorithms are used to encrypt and compress the RIP message.
� keyID � number identifying the MD5 key in the range 1�255. Remote neighbors must share the MD5 key to decrypt the message and encrypt the response.
Mode(s): Remote Neighbor Configuration
authentication-none
Description: Specifies that no authentication is to be used for the OSPF remote-neighbor interface. There is no no version.
Syntax: authentication-none
Mode(s): Remote Neighbor Configuration
auto-configure
Description: Specifies the type(s) of dynamic encapsulations that will be accepted or detected by the static ATM 1483 interface.The command may be entered repeatedly in ATM subinterface mode.
Syntax: [ no ] auto-configure upperInterfaceType
� upperInterfaceType � dynamic encapsulation type: bridgedEthernet, ip, ppp, pppoe
Mode(s): Interface Configuration, Subinterface Configuration
automatic-virtual-link
Description: Enables or disables automatic virtual link configuration. The no version disables an automatic virtual link.
Syntax: [ no ] automatic-virtual-link
Mode(s): Router Configuration
auto-summary54
auto-summary
Description: Reenables the automatic summarization of routes redistributed into BGP to their natural network masks. Automatic summarization is enabled by default. The no version disables automatic summarization.
Syntax: [ no ] auto-summary
Mode(s): Address Family Configuration, Router Configuration
bandwidthERX Edge Routers
55
bandwidth
Description: Specifies the total bandwidth available on the interface. The no version removes the admission control configuration from the interface. For total reservable bandwidth, see the mpls bandwidth command.
Syntax: bandwidth bandwidth
no bandwidth
� bandwidth � available bandwidth in kilobits per second, a value from 1�10,000,000
Mode(s): Interface Configuration, Subinterface Configuration
bandwidth oversubscription
Description: Allows the line modules to operate below line rate performance. The no version forces the line modules to operate at line rate performance.
Syntax: [ no ] bandwidth oversubscription
Mode(s): Privileged Exec
banner
Description: Configures message-of-the-day, login, or exec banners to be displayed by the CLI. If you do not specify an option, the behavior is the same as if you specified the motd option. The no version deletes the banner.
Syntax: banner [ motd | login | exec ] bannerText
no banner [ motd | login | exec ]
� motd � displays the banner when a console or vty connection is initiated
� login � displays the banner before any user authentication (line or RADIUS authentication); the banner is also displayed if user authentication is not configured
� exec � displays the banner after user authentication (if any) and before the first prompt of a CLI session
� bannerText � alphanumeric string truncated at 1024 characters; delimited by the first character of the string, which must be repeated at the end of the string and must not occur anywhere else in the string
Mode(s): Global Configuration
baseline aaa56
baseline aaa
Description: Sets a statistics baseline for authentication and authorization statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Syntax: baseline aaa
Mode(s): Privileged Exec
baseline cbf interface
Description: Sets a statistics baseline for CBF interfaces. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Syntax: baseline cbf interface interfaceType interfaceSpecifier
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � see Interface Types and Specifiers in About This Guide.
Mode(s): Privileged Exec
baseline clns
Description: Sets a statistics baseline for CLNS. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.
Syntax: baseline clns [ interfaceType interfaceSpecifier ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Privileged Exec
baseline dhcpERX Edge Routers
57
baseline dhcp
Description: Sets a statistics baseline for DHCP relay statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Syntax: baseline dhcp { server | relay }
� server � sets baseline for DHCP proxy server statistics
� relay � sets baseline for DHCP relay statistics
Mode(s): Privileged Exec
baseline frame-relay interface
Description: Sets a statistics baseline for Frame Relay and MFR interfaces, subinterfaces, and circuits. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Syntax: baseline frame-relay interface interfaceType interfaceSpecifier [ dlci ]
� interfaceType � one of the following interface types:
� hssi � limits baseline for HSSI interface
� mlframe-relay � limits baseline for an MFR bundle or subinterface
� pos � limits baseline for POS interface
� serial � limits baseline for serial interface
� tunnel � limits baseline for GRE tunnel interface
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� dlci � DLCI number to be used on the specified subinterface to identify a virtual circuit in the range 16�1007
Mode(s): Privileged Exec
baseline frame-relay multilinkinterface58
baseline frame-relay multilinkinterface
Description: Sets a statistics baseline for MFR links. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Syntax: baseline frame-relay multilinkinterface interfaceType interfaceSpecifier
� interfaceType � one of the following interface types:
� serial � limits baseline for serial interface
� pos � limits baseline for POS interface
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Privileged Exec
baseline hdlc interface
Description: Sets a statistics baseline for Cisco HDLC interfaces. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Syntax: baseline hdlc interface type interfaceSpecifier
� type � one of the following interface types:
� serial � limits baseline to serial interface
� hssi � limits baseline to HSSI interface
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Privileged Exec
baseline interfaceERX Edge Routers
59
baseline interface
Description: Sets a statistics baseline for an interface or a specific ATM virtual circuit. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.
Syntax: baseline interface interfaceType interfaceSpecifier [ vcd ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� vcd � virtual circuit descriptor; number in the range 1�4294967295; an identifier for the VC in other commands (ATM interfaces only)
Mode(s): Privileged Exec
baseline ip
Description: Sets the baseline on general IP traffic statistics as the current value.
Syntax: baseline ip [ vrf vrfName ]
� vrfName � name of the VRF; string of 1�32 alphanumeric characters
Mode(s): Privileged Exec
baseline ip bgp
Description: Sets the baseline on all BGP statistics as the current value.
Syntax: baseline ip bgp
Mode(s): Privileged Exec
baseline ip dhcp-local
Description: Sets a baseline for DHCP local server statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Syntax: baseline ip dhcp-local
Mode(s): Privileged Exec
baseline ip dvmrp60
baseline ip dvmrp
Description: Sets a baseline for DVMRP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Syntax: baseline ip dvmrp
Mode(s): Privileged Exec
baseline ip http
Description: Sets a baseline for HTTP server statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Syntax: baseline ip http
Mode(s): Privileged Exec
baseline ip igmp
Description: Sets a baseline for IGMP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Syntax: baseline ip igmp
Mode(s): Privileged Exec
baseline ip igmp-proxy interface
Description: Sets the baseline on all IGMP statistics by setting the counters for the numbers of queries received and reports sent on the upstream interface to zero. There is no no version.
Syntax: baseline ip igmp-proxy interface
Mode(s): Privileged Exec
baseline ip interfaceERX Edge Routers
61
baseline ip interface
Description: Sets a baseline for IP interface statistics.
Syntax: baseline ip interface [ vrf vrfName ] interfaceType interfaceSpecifier
� vrfName � name of the VRF; string of 1�32 alphanumeric characters
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Privileged Exec
baseline ip ospf
Description: Sets a baseline for OSPF statistics and counters.
Syntax: baseline ip ospf
Mode(s): Privileged Exec
baseline ip rip
Description: Sets a statistics baseline for RIP interfaces. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.
Syntax: baseline ip rip
Mode(s): Privileged Exec
baseline ip tcp62
baseline ip tcp
Description: Sets a statistics baseline for TCP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.
Syntax: baseline ip tcp [ vrf vrfName ] [ localAddress localPort remoteAddress remotePort ]
� vrfName � name of the VRF; string of 1�32 alphanumeric characters
� localAddress � local IP address on the system
� localPort � local TCP port number on the system
� remoteAddress � IP address of remote system
� remotePort � TCP port number on remote system
Mode(s): Privileged Exec
baseline ip udp
Description: Sets a statistics baseline for UDP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.
Syntax: baseline ip udp [ vrf vrfName ]
� vrfName � name of the VRF; string of 1�32 alphanumeric characters
Mode(s): Privileged Exec
baseline ip vrrp
Description: Sets a statistics baseline for VRRP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.
Syntax: baseline ip vrrp
Mode(s): Privileged Exec
baseline line interface sonetERX Edge Routers
63
baseline line interface sonet
Description: Sets a statistics baseline for SONET/SDH statistics at the line layer. The system implements the baseline by reading and storing the MIB statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.
Syntax: baseline line interface sonet interfaceSpecifier
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Privileged Exec
baseline local pool
Description: Sets a statistics baseline for the system local address pool statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Syntax: baseline local pool
Mode(s): Privileged Exec
baseline log
Description: Sets a baseline for logging events. Only log messages timestamped after the baseline will appear when you enter the show log data delta command. To use the current system time, do not enter any options.
Syntax: baseline log [ last-reset | time [ utc ] month day year ]
� last-reset � causes the system to display log messages generated since the last time the system was reset
� time � causes the system to display messages that are timestamped after the time and date that you set. To set the time, use the following syntax:
Hour:Minute[:Second] � current time in 24-hour format; seconds are optional� utc � indicates that the time entered is UTC (GMT) time; if you do not
include this keyword, the system considers the time entered to be local time
� month � name of the month in English
� day � number of the day in the range 1�31
� year � four-digit number of the year
Mode(s): Privileged Exec
baseline path interface sonet64
baseline path interface sonet
Description: Sets a statistics baseline for SONET/SDH statistics at the path layer. The system implements the baseline by reading and storing the MIB statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.
Syntax: baseline path interface sonet interfaceSpecifier
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Privileged Exec
baseline ppp interface
Description: Sets a statistics baseline for PPP interfaces. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.
Syntax: baseline ppp interface { atm | mlppp | pos | serial | hssi } interfaceSpecifier
� atm � specifies an ATM interface
� mlppp � specifies an MLPPP interface
� pos � specifies a POS interface
� serial � specifies a serial interface
� hssi � specifies a HSSI interface
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Privileged Exec
baseline pppoe interfaceERX Edge Routers
65
baseline pppoe interface
Description: Sets a statistics baseline for PPPoE interfaces, subinterfaces, and/or circuits. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Syntax: baseline pppoe interface { serial | atm | fastEthernet | gigabitEthernet } interfaceSpecifier
� serial � specifies a serial interface; however, PPPoE is not currently supported on serial interfaces
� atm � specifies an ATM interface
� fastEthernet � specifies a Fast Ethernet interface
� gigabitEthernet � specifies a Gigabit Ethernet interface
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Privileged Exec
baseline radius
Description: Sets a statistics baseline for RADIUS statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.
Syntax: baseline radius
Mode(s): Privileged Exec
baseline section interface sonet
Description: Sets a statistics baseline for SONET/SDH statistics at the section layer. The system implements the baseline by reading and storing the MIB statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.
Syntax: baseline section interface sonet interfaceSpecifier
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Privileged Exec
baseline show-delta-counts66
baseline show-delta-counts
Description: Configures the system to always display the statistics relative to the most recent appropriate baseline.
Syntax: [ no ] baseline show-delta-counts
Mode(s): Global Configuration
baseline smds interface
Description: Sets a baseline for SMDS statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Syntax: baseline smds interface interfaceType interfaceSpecifier
� interfaceType � hssi, tunnel
� interfaceSpecifier � see Interface Types and Specifiers in About This Guide.
Mode(s): Privileged Exec
baseline snmp
Description: Sets a baseline for SNMP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.
Syntax: baseline snmp
Mode(s): Privileged Exec
baseline tacacs
Description: Sets a baseline for TACACS+ statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrived.
Syntax: baseline tacacs
Mode(s): Privileged Exec
bertERX Edge Routers
67
bert
Description: Enables bit error rate tests using the specified pattern on an E1 line on a CE1 line module and on a T1 line on a CT1 line module. The no version stops the test that is running.
Syntax: bert pattern pattern interval time [ unframed ]
no bert
� pattern � one of the following test patterns
� 0s � repetitive test pattern of all zeros, 00000...
� 1s � repetitive test pattern of all ones, 11111...
� 2^11 � pseudorandom test pattern, 2,048 bits in length
� 2^15 � pseudorandom 0.151 test pattern, 32,768 bits in length
� 2^20-O153 � pseudorandom 0.153 test pattern, 1,048,575 bits in length
� 2^20-QRSS � pseudorandom QRSS 0.151 test pattern, 1,048,575 bits in length
� 2^23- � pseudorandom 0.151 test pattern, 8,388,607 bits in length
� alt-0-1 � repetitive alternating test pattern of zeros and ones, 01010101...
� time � interval between test patterns, ranging from 1�14400 minutes
� unframed � the test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern occupies only the payload bits.
Mode(s): Controller Configuration
bgp advertise-inactive
Description: Enables the advertisement of inactive BGP received routes�routes that are considered by BGP to be �best routes� and therefore are present in the IP forwarding table, but that are not being used for forwarding. The no version restores the default state of normal route advertisement, whereby BGP advertises received routes only if they are in the IP forwarding table and are being used to forward traffic, or if synchronization is enabled.
Syntax: [ no ] bgp advertise-inactive
Mode(s): Router Configuration
bgp always-compare-med68
bgp always-compare-med
Description: Enables the comparison of the MED for paths from neighbors in different ASs. The no version disables the feature.
Syntax: [ no ] bgp always-compare-med
Mode(s): Router Configuration
bgp bestpath med confed
Description: Specifies that BGP considers the MED when comparing routes originated from different sub-ASs within the confederation to which this BGP speaker belongs. The no version restores the default state, where the MED attribute is not considered.
Syntax: [ no ] bgp bestpath med confed
Mode(s): Router Configuration
bgp bestpath missing-as-worst
Description: Specifies that a route with a MED is always considered to be better than a route without a MED by causing the missing MED attribute to have a value of infinity. The no version restores the default state, where the missing MED attribute is considered to have a value of zero.
Syntax: [ no ] bgp bestpath missing-as-worst
Mode(s): Router Configuration
bgp client-to-client reflection
Description: Restores route reflection from a BGP route reflector to clients. The no version disables client-to-client reflection. By default, BGP reflects routes received from any route reflector client to all other route reflector clients. This command can be used to disable or restore this behavior.
Syntax: [ no ] bgp client-to-client reflection
Mode(s): Router Configuration
bgp cluster-idERX Edge Routers
69
bgp cluster-id
Description: Configures a cluster ID if the BGP cluster has more than one route reflector. The no version causes BGP to use the router ID as the cluster ID.
Syntax: bgp cluster-id { clusterId | ipAddress }
no bgp cluster-id [ clusterId | ipAddress ]
� clusterId � a number in the range 0�4294967295; the cluster ID of this router acting as a route reflector
� ipAddress � the cluster ID of this router acting as a route reflector specified as an IP address
Mode(s): Router Configuration
bgp confederation identifier
Description: Configures a BGP confederation identifier. The no version removes a BGP confederation identifier.
Syntax: bgp confederation identifier autonomousSystem
no bgp confederation identifier [ autonomousSystem ]
� autonomousSystem � number in the range 1�4294967295; the confederation identifier
Mode(s): Router Configuration
bgp confederation peers
Description: Specifies the sub-ASs that belong to a confederation by listing individual AS numbers or by reference to an AS-path access list (the filter list). If the remote AS of a peer appears in the list of sub-AS numbers or in the filter list, then the peer is considered to be in the same confederation. The no version removes individually specified sub-ASs, all sub-ASs specified by the filter list, or all sub-ASs from the confederation.
Syntax: bgp confederation peers { autonomousSystem [ autonomousSystem ]* | filter-list filterListName }
no bgp confederation peers [ autonomousSystem [ autonomousSystem ]* | filter-list filterListName ]
� autonomousSystem � AS number in the range 1� 4294967295
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
� filterListName� name of an AS-path access list; a string of up to 32 characters
Mode(s): Router Configuration
bgp dampening70
bgp dampening
Description: Enables BGP route dampening. The system assesses a penalty of 1000 each time a route flaps and adds this to any previously accumulated penalty value. Penalties are cumulative. The no version disables route flap dampening.
Syntax: [ no ] bgp dampening [ halfLife [ reuse suppress maxSuppressTime[ halfLifeUnreachable ] ] ] [ route-map mapTag ]
� halfLife � half-life period in minutes in the range 1�45. The default is 15. When a BGP route has been assigned a penalty, the penalty is decreased by half after the half-life period.
� reuse � reuse limit in the range 1�20000. The default is 750. As the penalty for a flapping route decreases and falls below this reuse limit, the route is unsuppressed. That is, the route is added back to the BGP table and used for forwarding.
� suppress � suppress limit in the range 1�20000. A route is suppressed when its penalty exceeds this limit. The default value is 2000.
� maxSuppressTime � maximum suppression time in minutes in the range 1�255. This value is the maximum amount of time a route can be suppressed. The default value is four times the half-life value.
� halfLifeUnreachable � alternate half-life period in minutes for unreachable routes; a number in the range 1�45. If this value is not specified, the same half-life period is used for both reachable and unreachable routes.
� route-map � specifies that dampening can be applied to routes according to the route map behavior. If the route map permits a route, the route is subject to dampening. If the route map denies a route, the route is not subject to dampening. The route map can contain a no dampening clause that determines dampening characteristics.
� mapTag � name of the route map; a string of up to 32 alphanumeric characters.
Mode(s): Address Family Configuration, Router Configuration
bgp default ipv4-unicast
Description: Causes all neighbors subsequently created with the neighbor remote-as or neighbor peer-group commands to be automatically activated in the IPv4 unicast address family. The no version disables the IPv4 unicast address family on all neighbors.
Syntax: [ no ] bgp default ipv4-unicast
Mode(s): Address Family Configuration, Router Configuration
bgp default local-preferenceERX Edge Routers
71
bgp default local-preference
Description: Changes the default local preference value. Generally, the default value of 100 allows you to easily define a particular path as less preferable than paths with no local preference attribute. The preference is sent to all routers in the local AS. The preferred path is the one with the highest preference value.The no version restores the default setting.
Syntax: bgp default local-preference value
no bgp default local-preference [ value ]
� value � the local preference number in the range 0�4294967295
Mode(s): Router Configuration
bgp default route-target filter
Description: Controls whether incoming BGP routes are filtered according to membership in route-target communities. Automatic filtering is enabled by default. The no version disables automatic filtering.
Syntax: [ no ] bgp default route-target filter
Mode(s): Router Configuration
bgp enforce-first-as
Description: Forces BGP to compare the configured remote AS number of an external peer with the first AS in the AS path of routes received from the peer. If the AS numbers do not match, BGP sends the peer an error message. The no version restores the default condition, which does not perform the AS comparison.
Syntax: [ no ] bgp enforce-first-as
Mode(s): Router Configuration
bgp fast-external-fallover
Description: Automatically brings down a BGP session to any adjacent external peer immediately after the link fails (as opposed to waiting for the TCP connection to fail or the hold timer to expire). The no version disables automatic session termination.
Syntax: [ no ] bgp fast-external-fallover
Mode(s): Router Configuration
bgp log-neighbor-changes72
bgp log-neighbor-changes
Description: Causes BGP to log a message of severity notice to the bgpNeighborChanges log whenever a peer enters or leaves the Established state for any reason. No other messages are logged to the bgpNeighborChanges log.The no version disables this log.
Syntax: [ no ] bgp log-neighbor-changes
Mode(s): Router Configuration
bgp maxas-limit
Description: Causes BGP to check the length of AS paths received in update messages and to not forward routes whose AS paths are greater than the specified length. The no version halts checking of the AS path length.
Syntax: bgp maxas-limit limit
no bgp maxas-limit [ limit ]
� limit � maximum acceptable length of a received AS path; number in the range 1�1000
Mode(s): Router Configuration
bgp redistribute-internal
Description: Authorizes redistribution of internal BGP routes (in addition to external BGP routes) into protocols that have BGP route redistribution enabled. This command is not required for IBGP routes within a VRF, for which redistribution is always enabled. The no version restores the default, redistributing only external BGP routes.
Syntax: [ no ] bgp redistribute-internal
Mode(s): Router Configuration
bgp router-id
Description: Sets the BGP identifier. The no version restores the system router ID as the identifier.
Syntax: bgp router-id ipAddress
no bgp router-id [ ipAddress ]
� ipAddress � IP address to be used as the BGP identifier; ignored if present in the no version
Mode(s): Router Configuration
bgp shutdownERX Edge Routers
73
bgp shutdown
Description: Administratively disables BGP. The no version reenables BGP.
Syntax: [ no ] bgp shutdown
Mode(s): Router Configuration
boot backup
Description: Sets the release and the configuration to be used the next (and every subsequent) time the boot logic chooses backup mode. The no version removes the setting.
Syntax: boot backup relFilename { cnfFilename | scrFilename | factory-defaults }
no boot backup
� relFilename � system software file
� cnfFilename � name of an existing configuration file (.cnf)
� scrFilename � name of an existing script file (.scr)
� factory-defaults � the system reverts to factory default configuration when rebooted
Mode(s): Global Configuration
boot config74
boot config
Description: Specifies how the system obtains its startup configuration. The no version clears a previous request to reboot in a specified manner; the next reboot uses the configuration saved in nonvolatile storage.
Syntax: boot config { cnfFilename [ once ] | scrFilename | running-configuration | startup-configuration | factory-defaults }
no boot config
� cnfFilename � name of an existing startup configuration file (.cnf) to be used on all subsequent reboots
� once � restores a configuration from the specified configuration file only on the next reboot. Subsequent reboots revert to the running-configuration settings.
� scrFilename � name of an existing script file (.scr)
� running-configuration � specifies that the running configuration is to be used for reboot; only available if the system is in Automatic Commit mode
� startup-configuration � specifies that the running configuration is to be used for reboot; only available if the system is in Manual Commit mode
� factory-defaults � specifies that the factory default configuration is to be used for the next reboot. Subsequent reboots revert to the running-configuration settings.
Caution: All boot config commands except for boot config running-configuration and boot config startup-configuration erase the existing running configuration when you reboot the system. Before executing this command, you might want to save the current configuration to a .cnf file using the copy running-configuration command.
Mode(s): Global Configuration
boot force-backup
Description: Forces the system to use the backup software release file or system configuration file on the next boot. The no version sets the system to use the default release or configuration file on the next boot.
Syntax: [ no ] boot force-backup
Note: Once the system has used the backup settings, the no boot force-backup command is the only way to get the system to use the default settings again.
Mode(s): Global Configuration
boot revert-toleranceERX Edge Routers
75
boot revert-tolerance
Description: Sets the reversion tolerances that the boot logic uses to determine whether the system should use the normal or backup settings. The no version restores the default reversion tolerance settings. The default settings are 3 crashes in 30 minutes.
Syntax: boot revert-tolerance count time
no boot revert-tolerance
� count � number of times the operational SRP software crashes; the range is 0�4294967295; the default setting is 3
� time � time (in seconds) in which the set number (count) of crashes occurs; the range is 0�4294967295; the default setting is 1800
Mode(s): Global Configuration
boot revert-tolerance never
Description: Sets the boot logic to never revert to the backup release or configuration. There is no no version.
Syntax: boot revert-tolerance never
Mode(s): Global Configuration
boot slot
Description: Configures the module in the selected slot to use the specified software release the next time the module is booted. The no version clears the override for the slot if a slot number is provided; if no slot number is provided, all slot overrides are cleared. The backup option enables you to specify a backup release for the module in the specified slot in case the module reboots more times than allowed within the period specified by the boot revert-tolerance command.
Syntax: boot [ backup ] slot slotNum relFileName
no boot [ backup ] slot [ slotNum ]
� backup � configures a backup setting
� slotNum � number of the selected slot in the system chassis
� relFileName � release (.rel) filename
Mode(s): Global Configuration
boot subsystem76
boot subsystem
Description: Configures the selected subsystem to use the specified release the next time the subsystem is booted. The no version disables the subsystem. The backup option enables you to specify a backup release for the module in the specified slot in case the module reboots more times than allowed within the period specified by the boot revert-tolerance command.
Syntax: boot [ backup ] subsystem subsysName relFileName
no boot [ backup ] subsystem [ subsysName ]
� backup � configure a backup setting
� subsysName � name of the subsystem to be configured
� relFileName � name of system software file to use
Mode(s): Global Configuration
boot system
Description: Specifies the software release (.rel) file to use on reboot. There is no no version.
Syntax: boot system relFileName
� relFileName � name of the software release file (.rel) that contains the software release
Mode(s): Global Configuration
buffer-weight
Description: Sets the buffer weight of the queue. The no version returns the queue to its default buffer weight.
Syntax: buffer-weight bufferWeight
no buffer-weight
� bufferWeight � range 1�63; default is 8
Mode(s): Queue Profile Configuration
bulkstats collectorERX Edge Routers
77
bulkstats collector
Description: Creates and configures a collector of bulk statistical data to collect MIB-2 ifTable MIB objects. You can configure up to six collectors. The no version restores the default value for specified options; if no options are specified the no version deletes the collector.
Syntax: bulkstats collector collectorIndex [ collect-mode { auto-xfer | on-file-full | manual-xfer } | description descrip | interval intrvl | max-size maxSize | primary-receiver primRecvIndex | secondary-receiver secRecvIndex | single-interval ]
no bulkstats collector collectorIndex [ collect-mode | description | interval | max-size | primary-receiver | secondary-receiver | single-interval ]*
� collectorIndex � a number in the range 1�65535 that identifies the particular data collector
� collect-mode � specifies one of the following collection modes:
� auto-xfer � agent automatically transfers file when interval expires
� on-file-full � agent automatically transfers file when it is full
� manual-xfer � system- or user-initiated transfers; default collection mode
� descrip � descriptive information to insert into the bulkstats file
� intrvl � time period in the range 300� 86400 seconds for which the collector transfers data from the system to the receivers; default interval is 360 seconds
� maxSize � maximum size of the file in the range 10240�20971520 bytes; default file size is 2,621,440 bytes
� primRecvIndex � number in the range 1�65535 that identifies the primary receiver to which the system transfers the data; by default the primary receiver is cleared
� secRecvIndex � number in the range 1�65535 that identifies the secondary (backup) receiver to which the system transfers the data; by default the secondary receiver is cleared
� single-interval � specifies that the collector retrieves the bulk statistics data only once; by default, the collector receives the data periodically
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Global Configuration
bulkstats file-format endOfLine-Lf78
bulkstats file-format endOfLine-Lf
Description: Removes the carriage return (CR) and leaves only a line feed (LF) at the end of each line in the bulkstats file. The no version returns the end of line format to the default, CR and LF.
Syntax: [no] bulkstats file-format endOfLine-LF
Mode(s): Global Configuration
bulkstats interfaces description-format common
Description: Enables the conventional industry method of encoding the SNMP ifDescr object that the bulkstats application reports. The no version returns the encoding method to a proprietary encoding scheme.
Syntax: [ no ] bulkstats interfaces description-format common
Mode(s): Global Configuration
bulkstats interfaces rfc1213
Description: Enables RFC 1213 interface numbering mode on bulkstats. The no version disables RFC 1213 interface numbering mode on bulkstats.
Syntax: [ no ] bulkstats interfaces rfc1213
Mode(s): Global Configuration
bulkstats interface-type
Description: Configures the interface type on which you want to collect statistics. The no version deletes the interface type from bulkstats collection.
Syntax: bulkstats interface-type interfaceType [ collector collectorIndex ]
no bulkstats interface-type interfaceType [ collector collectorIndex ]
� interfaceType � type of interface to collect statistics on: ATM, ATM 1483, Ethernet, Frame Relay, Frame Relay subinterface, Cisco HDLC, IP, PPP
� collectorIndex � number in the range 1�65535 that identifies the particular data collector. Always specify this option if you defined more than one collector.
Mode(s): Global Configuration
bulkstats receiver remote-nameERX Edge Routers
79
bulkstats receiver remote-name
Description: Configures the bulk statistics receiver parameters. The no version deletes the receiver.
Syntax: bulkstats receiver receiver-index remote-name remote-name.sts[ receiverAttrib [ receiverAttrib ]* ]
no bulkstats receiver receiverIndex [ remote-name remoteName ]
� receiverIndex � number in the range 1�65535 that identifies the receiver of the data
� remoteName � composed of the remote host, path, filename, and formatters; include a .sts filename extension
� receiverAttrib � one of the following dynamic attributes
� sysName � inserts the system name into the stored remote filename
� sysUpTime � inserts the system up time into the stored remote filename
� collectorSequence � inserts a sequence number into the stored remote filename
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Global Configuration
bulkstats schema
Description: Configures the schema for collecting bulk statistics. The no version removes the schema.
Syntax: bulkstats schema schemaIndex [ collector collectorIndex ]
no bulkstats schema schemaIndex
� schemaIndex � identifier for the schema in the range 1�65535
� collectorIndex � identifier for the collector in the range 1�65535
Mode(s): Global Configuration
bulkstats schema subtree80
bulkstats schema subtree
Description: Configures the schema for collecting if-stack, if-stats, or system data. The no version removes the schema.
Syntax: bulkstats schema schemaIndex subtree{ if-stack | if-stats [ subtreelist ifstatsList [ ifstatsList ]* ] | system }
no bulkstats schema schemaIndex
� schemaIndex � identifier for the schema in the range 1�65535
� if-stack � retrieves ifStackTable
� if-stats � retrieves ifTable/ifXTable counters
� ifstatsList � type of statistics and time-offset keyword, which includes the offset from the master interval at which the record was collected in each bulkstats interface record
� system � retrieves sysUpTime and nvsUtilPct global statistics; retrieves slotDescr, the cpuUtilPct, and memUtilPct per-slot statistics
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Global Configuration
bulkstats schema subtree policy
Description: Configures the schema to collect statistics on a specific policy, a type of policy, or based on color-coded tags applied by a policy. The no version removes the schema.
Syntax: bulkstats schema schemaIndex subtree policy [ policy-name policyName ] [ policy-type policyType ] [ policy-subtreelist policylist [ policylist ]* ]
no bulkstats schema schemaIndex
� schemaIndex � identifier for the schema in the range 1�65535
� policyName � name of policy for which you want to collect statistics
� policyType � select one of the following types:
� input � collect data on input policies
� localInput � collect data on local input policies
� output � collect data on output policies
� policyList � retrieves statistics based on color-coded tags applied by a policy
Mode(s): Global Configuration
bulkstats trapsERX Edge Routers
81
bulkstats traps
Description: Configures the bulkstats traps. The no version disables the trap.
Syntax: bulkstats traps { nearly-full [ threshold ] | full }
no bulkstats traps { nearly-full | full }
� nearly-full � a percentage less than 100%
� threshold � a percentage less than 100%; if not specified, defaults to 99%
� full � 100%
Mode(s): Global Configuration
cablelength82
cablelength
Description: Specifies the length of the cable, which determines power requirements. The no version uses the default value, 0 feet.
Syntax: cablelength length
no cablelength
� length � a cable length in the range 0�450
Mode(s): Controller Configuration
cablelength short
Description: Specifies the cable length (line build-out) for a CT1 interface. The length of cable determines power requirements. The no version restores the default value, 0.
Syntax: cablelength short length
no cablelength short
� length � a cable length in the range 0�660 feet
Mode(s): Controller Configuration
cbf
Description: Creates a connection-based forwarding interface over the interface you are configuring. The no version removes the CBF interface.
Syntax: [ no ] cbf
Mode(s): Interface Configuration
cbf connectionERX Edge Routers
83
cbf connection
Description: Creates a CBF connection between two CBF interfaces. The CBF connection is a bidirectional connection consisting of a symmetrical pair of unidirectional connections, one from interface1 to interface2 and a second from interface2 to interface1. The no version removes an existing connection.
Syntax: [ no ] cbf connection interface1Type interface1Specifier interface2Type interface2Specifier
� interface1Type � interface type; see Interface Types and Specifiers in About This Guide
� interface1Specifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� interface2Type � interface type; see Interface Types and Specifiers in About This Guide
� interface2Specifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Global Configuration
cbf shutdown
Description: Administratively disables a CBF interface. The no version enables a CBF interface. (Newly created CBF interfaces are enabled by default.)
Syntax: [ no ] cbf shutdown
Mode(s): Interface Configuration
channel-group shutdown
Description: Disables a CT1 channel group on a CT1 module or an E1 fractional interface on a CE1 module. The no version restarts a disabled channel group or fractional interface.
Syntax: [ no ] channel-group subchan shutdown
� subchan � fractional T1 interface in the range 1�24 or fractional E1 interface in the range 1�31
Mode(s): Controller Configuration
channel-group snmp trap link-status84
channel-group snmp trap link-status
Description: Enables processing of SNMP link status information on a CT1 channel group on a CT1 module or on an E1 fractional interface on an CE1 module. The no version disables the processing of SNMP link status information.
Syntax: [ no ] channel-group subchan snmp trap link-status
� subchan � fractional T1 interface in the range 1�24 or fractional E1 interface in the range 1�31
Mode(s): Controller Configuration
channel-group timeslots
Description: Configures the timeslots and data rate used on each CE1 channel on the CE1 module or on each CT1 channel on the CT1 module.
Syntax: channel-group subchan timeslots range [ speed { 56 | 64 } ]
no channel-group subchan
� subchan � fractional E1 interface in the range 1�31 or fractional T1 interface in the range 1�24
� range � timeslots assigned to the CE1 channel in the range 1�31 or to the CT1 channel in the range 1�24. A dash represents a range of timeslots, and a comma separates timeslots. For example, 1-10, 15-18 assigns timeslots 1�10 and 15�18.
� speed � specifies the data rate for the CE1 or CT1 channel as one of the following values:
� 56 Kbps
� 64 Kbps (default)
Mode(s): Controller Configuration
channelized
Description: Configures a port on the CT3/T3-F0 line module and associated I/O module to support channelized T3 operation. The no version configures the port for unchannelized operation.
Syntax: [ no ] channelized
Mode(s): Controller Configuration
check-diskERX Edge Routers
85
check-disk
Description: Finds and repairs structural inconsistencies and damage in the DOS file system in NVS on the primary SRP module. There is no no version.
Syntax: check-disk [ repair ]
Mode(s): Boot
To access the BOOT mode from the local console:1 At the Privileged Exec prompt, type the reload command.
Information on the reloading process appears.2 When the countdown begins, press the <M+B> key combination.
This puts the CLI in Boot mode (:boot## prompt). If you do not press the <M+B> key combination, the reloading process continues and returns the CLI to the normal User Exec mode.
classifier-list86
classifier-list
Description: Creates or modifies a classifier control list. Use the not variables to deny traffic for a specific protocol, source address, or destination address. The no version removes the classifier control list.
Syntax: [ ip ] classifier-list classifierName [ traffic-class trafficClassName ] [ color { green | yellow | red } ] [ user-packet-class ] [ notProtocol ] { protocolNumber | protocolName } [ notSrcIpAddr ] { srcIp srcWildIp | hostSrcIpAddr srcIpHost | anySrcIpAddr } [ sourceQualifier ] [ notDestIpAddr ] { anyDestIpAddr | destIp destWildIp | hostDestIpAddr dstIpHost } [ destinationQualifier ] [ tcpQualifier ] [ ip-flags ipFlags ] [ ip-frag-offset { eq fragEqValue | gt 1 } ] [ precedence precNum | dsField dsFieldNum | tos tosNum ]
no classifier-list classifierName [ classifierNumber ]
� classifierName � name of the classifier control list entry
� trafficClassName � name of the traffic class to match
� color � match the color
� notProtocol � variable matches any but the immediately following protocol argument
� protocolNumber � protocol number matched by this classifier control list in the range 0�255
� protocolName � protocol name matched by this classifier control list
� notSrcIPAddr �variable matches any but the immediately following source address argument
� srcIp � source address to match
� srcWildIp � wild-card mask to apply to the source address
� hostSrcIpAddr � source address as a host
� srcIPHost � source host address to match
� anySrcIpAddr � matches any source address
� sourceQualifier � one of the following protocol-specific classifier parameters for source ports for UDP or TCP protocols only. See ERX Policy and QoS Configuration Guide, Chapter 1, Configuring Policy Management, for details.
� portOperator � one of the following boolean operator keywords: lt (less than), gt (greater than), eq (equal to), or ne (not equal), or range (range of port numbers)
� fromPort � single port number or the beginning of a range of port numbers
classifier-listERX Edge Routers
87
� toPort � end of a range of port numbers
� notDestIpAddr � variable matches any but the immediately following destination address argument
� anyDestIpAddr � matches any destination address
� destIp � destination address to match
� destWildIp � wild-card mask to apply to the destination address
� hostDestIpAddr � destination host address to match
� destIpHost � destination host address to match
� destinationQualifier � one of the following protocol-specific classifier parameters for destination TCP or UDP ports, ICMP code and type, or IGMP type. The portOperator, fromPort, and toPort arguments are used with TCP and UDP. The icmpType, icmpCode, and igmpType arguments are used with ICMP and IGMP.
� portOperator � one of the following boolean operator keywords: lt (less than), gt (greater than), eq (equal to), or ne (not equal), or range (range of port numbers) (TCP and UDP only)
� fromPort � single port number or the beginning of a range of port numbers (TCP and UDP only)
� toPort � end of a range of port numbers (TCP and UDP only)
� icmpType � ICMP message type (ICMP only)
� icmpCode � ICMP message code (ICMP only)
� igmpType � IGMP message type (IGMP only)
� tcpQualifier � TCP flags classification parameters
� tcpFlag � for TCP only; a logic equation that specifies flag bit values; ! means logical NOT and & means logical AND; use any of the following flag names:
� ack � 0x10
� fin � 0x01
� push � 0x08
� rst � 0x04
� syn � 0x02
� urgent � 0x20
� ipFlags � a logic equation that specifies flag bit values; ! means logical NOT and & means logical AND; use any of the following flag names:
� dont-fragment � 0x02
� more-fragments � 0x01
� reserved � 0x04
cleanup-timeout-factor88
� ipFragOffset � matches the specified IP fragmentation offset; use any of the following:
� eq 0 � equals 0
� eq 1 � equals 1
� gt 1 � greater than 1
� precNum � upper three bits of the ToS byte; range is 0�7
� dsfieldNum � upper six bits of the ToS byte; range is 0�63
� tosNum � whole eight bits of the ToS byte; range is 0�255
Mode(s): Global Configuration
cleanup-timeout-factor
Description: Specifies the number of refresh messages that can be lost before the PATH or RESV state is ended. The no version restores the default value of 3.
Syntax: cleanup-timeout-factor lostRefreshes
no cleanup-timeout-factor
� lostRefreshes � number of lost refresh messages
Mode(s): RSVP Profile Configuration
clear access-list
Description: Clears counters for entries in IP access lists. There is no no version.
Syntax: clear access-list [ accessListName ]
� accessListName � name of the access list; a string of up to 32 characters
Mode(s): Privileged Exec
clear arpERX Edge Routers
89
clear arp
Description: Clears entries from the ARP cache. There is no no version.
Syntax: clear [ ip ] arp [ vrf vrfName ] { ipAddress interfaceType interfaceSpecifier | * }
� vrfName � name of the VRF; string of 1�32 alphanumeric characters
� ipAddress � IP address in 32-bit dotted-decimal format of the entry to be cleared
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� * � clears all dynamic ARP entries
Mode(s): Privileged Exec
clear cbf interface
Description: Clears statistics on CBF interfaces. There is no no version.
Syntax: clear cbf interface interfaceType interfaceSpecifier
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � see Interface Types and Specifiers in About This Guide.
Mode(s): Privileged Exec
clear egress-queue
Description: Clears egress queue statistics for the specified interface and traffic class. There is no no version.
Syntax: clear egress-queue interfaceType interfaceSpecifier [ stacked ] [ traffic-class trafficClassName ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � see Interface Types and Specifiers in About This Guide.
� stacked � clears queue statistics for all interfaces stacked above the specified interface
Mode(s): Privileged Exec
clear fabric-queue90
clear fabric-queue
Description: Clears fabric queue statistics for the specified traffic-class and egress-slot. The default is that statistics for all traffic classes and all slots are cleared. There is no no version.
Syntax: clear fabric-queue [ traffic-class trafficClassName ] [ egress-slot egressSlot ] [ filter ]
� traffic-class � clear fabric-queue statistics for a traffic class
� egress-slot � clear fabric-queue statistics for an egress-slot
Mode(s): Privileged Exec
clear ip bgp
Description: If the soft option is not used, brings down the underlying TCP connection and then brings it back up again, causing both peers to resend their complete BGP routing table. If the soft out option is used, the BGP speaker reapplies outbound policy and resends all routes to the specified peer(s). If the soft in option is used, the BGP speaker reapplies inbound policy to the routes received from the specified peer(s). This is possible only if soft reconfiguration inbound has been enabled for the peer or the peer supports the route-refresh capability. There is no no version.
Syntax: clear ip bgp [ { ipAddress | peer-group peerGroupName | * } ] [ vrf vrfName ][ ipv4 { unicast | multicast } | vpnv4 unicast ] [ soft [ in [ prefix-filter ] | out ] ]
� ipAddress � IP address of identified BGP neighbor to clear
� peerGroupName � name of a BGP peer group to clear
� * � clears all connections
� vrfName � name of a virtual routing and forwarding instance to clear
� ipv4 unicast � clears the IPv4 unicast routing table; the default option
� ipv4 multicast � clears the IPv4 multicast routing table
� vpnv4 unicast � clears the VPNv4 unicast routing and forwarding table
� soft � soft reconfiguration
� in � triggers inbound soft reconfiguration
� prefix-filter � pushes out prefix list and Cisco-proprietary prefix list outbound route filters and triggers inbound soft reconfiguration
� out � triggers outbound soft reconfiguration
Mode(s): Privileged Exec
clear ip bgp dampeningERX Edge Routers
91
clear ip bgp dampening
Description: Clears route flap dampening information and reinstates the suppressed routes. The dampening keyword and the flap-statistics keyword both have the same effect. There is no no version.
Syntax: clear ip bgp [ vrf vrfName ] [ ipv4 { unicast | multicast } | vpnv4 unicast ]{ dampening | flap-statistics } [ ipAddress [ addressMask ] ]
� vrfName � name of a virtual routing and forwarding instance to clear
� ipv4 unicast � clears the IPv4 unicast routing table; the default option
� ipv4 multicast � clears the IPv4 multicast routing table
� vpnv4 unicast � clears the VPNv4 unicast routing and forwarding table
� ipAddress � IP address of the BGP neighbor to clear
� ipMask � address mask to be applied to the network IP address
Mode(s): Privileged Exec
clear ip bgp redistribution
Description: Reapplies policy to routes that have been redistributed into BGP. There is no no version.
Syntax: clear ip bgp redistribution
Mode(s): User Exec, Privileged Exec
clear ip dvmrp routes
Description: Clears DVMRP routes from the routing table. There is no no version.
Syntax: clear ip dvmrp routes [ ipAddress [ addressMask ] ]
� ipAddress � clears the longest match to this IP address
� addressMask � clears route that matches exactly to this subnet mask
Mode(s): Privileged Exec
clear ip interface92
clear ip interface
Description: Clears the counters on the specified IP interface. The default is all interface types and all interfaces. There is no no version.
Syntax: clear ip interface [ vrf vrfName ] interfaceType interfaceSpecifier
� vrfName � name of the VRF; string of 1�32 alphanumeric characters
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Privileged Exec
clear ip isis redistribution
Description: Clears all the routes that have previously been redistributed into IS-IS and redistributes them using the current policy configuration. There is no no version.
Syntax: clear ip isis redistribution
Mode(s): Privileged Exec
clear ip mroute
Description: Clears all or the specified multicast forwarding entries. There is no no version.
Syntax: clear ip mroute { * | grpAddress [ sourceAddress ] }
� * � clear all IP multicast forwarding entries
� grpAddress � address of the multicast group for which forwarding entries should be cleared
� sourceAddress � address of the multicast source for which forwarding entries should be cleared
Mode(s): User Exec, Privileged Exec
clear ip ospf redistribution
Description: Clears all the routes that have previously been redistributed into OSPF. There is no no version.
Syntax: clear ip ospf redistribution
Mode(s): Privileged Exec
clear ip pim auto-rpERX Edge Routers
93
clear ip pim auto-rp
Description: Clears the group-to-RP router mappings the system learned via autoRP. There is no no version.
Syntax: clear ip pim auto-rp [ ipAddress ]
� ipAddress � IP address of the system designated as an RP router
Mode(s): User Exec, Privileged Exec
clear ip pim interface count
Description: Clears the counters for multicast packet statistics on all interfaces or the specified interface. There is no no version.
Syntax: clear ip pim interface [ interfaceType interfaceSpecifier ] count
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): User Exec, Privileged Exec
clear ip pim remote-neighbor count
Description: Clears the counters for multicast packet statistics on all interfaces or the specified interface. There is no no version.
Syntax: clear ip pim remote-neighbor [ ipAddress ] count
� ipAddress � IP address of the interface
Mode(s): User Exec, Privileged Exec
clear ip prefix-list
Description: Clears all hit counts in the prefix lists, the specified prefix list, or the specified entry from the specified prefix list. There is no no version.
Syntax: clear ip prefix-list [ listName [ network/length] ]
� listName � name of the prefix list; a character string up to 32 characters in length
� network � base address of the network route to be filtered; for example, 192.168.32.0 or 10.10.0.0
� length � length of the network prefix; number of bits masking base address to produce address to be matched
Mode(s): User Exec, Privileged Exec
clear ip prefix-tree94
clear ip prefix-tree
Description: Clears all prefix trees, the specified prefix tree, or the specified entry from the specified prefix tree. There is no no version.
Syntax: clear ip prefix-tree [ treeName [ network/length ] ]
� treeName � name of the prefix list; a character string up to 32 characters in length
� network � base address of the network route to be filtered; for example, 192.168.32.0 or 10.10.0.0
� length � length of the network prefix; number of bits masking base address to produce address to be matched
Mode(s): User Exec, Privileged Exec
clear ip rip redistribution
Description: Clears all the routes that have previously been redistributed into RIP. There is no no version.
Syntax: clear ip rip redistribution
Mode(s): User Exec, Privileged Exec
clear ip routes
Description: Clears a specified route or all dynamic routes from the routing table of a specified VRF or all VRFs. There is no no version.
Syntax: clear ip routes [ vrf vrfName ] { * | ipAddress [ ipMask ] }
� vrfName � name of the VRF context from which routes are to be cleared
� * � clears all dynamic routes
� ipAddress � IP address prefix for routes that are cleared; in 32-bit dotted-decimal format
� ipMask � mask of the IP address prefix for routes that are cleared; in 32-bit dotted-decimal format
Mode(s): Privileged Exec
clear isis adjacencyERX Edge Routers
95
clear isis adjacency
Description: Clears all entries from the adjacency database, or clears only adjacencies with a specified neighbor. There is no no version.
Syntax: clear isis adjacency [ systemId | hostname ]
� systemID � system ID of an IS-IS neighbor
� hostname � hostname of an IS-IS neighbor
Mode(s): Privileged Exec
clear isis database
Description: Clears all entries from the IS-IS link state database, or clears only entries associated with a specified neighbor. There is no no version.
Syntax: clear isis database [ systemId | hostname ]
� systemID � system ID of an IS-IS neighbor
� hostname � hostname of an IS-IS neighbor
Mode(s): Privileged Exec
clear line
Description: Removes any services on a vty line and closes any files opened as a result of services on that line. There is no no version.
Syntax: clear line lineNumber
� lineNumber � number of the vty line
Mode(s): User Exec
clear mpls ldp
Description: Removes and reestablishes all existing LDP LSPs, thereby forcing the reapplication of all policies on every configured topology-driven LDP LSP. There is no no version.
Syntax: clear mpls ldp
Mode(s): Privileged Exec
client-name96
client-name
Description: Sets a hostname for a tunnel. For L2TP, specifies the hostname used by the LAC when communicating with the LNS about the tunnel. For L2F, specifies the hostname used by the NAS when communicating with the home gateway. The no version removes the hostname from the tunnel.
Note: This command has replaced the hostname command for Domain Map Tunnel Configuration mode only.
Syntax: client-name clientname
no client-name
� clientname � string of up to 64 characters (no spaces)
Mode(s): Domain Map Tunnel Configuration
clns configuration-time
Description: Specifies the rate at which ES hellos and IS hellos are sent. The no version restores the default value of 10 seconds.
Syntax: clns configuration-time configTime
no clns configuration-time
� configTime � number in the range 1�65535; rate in seconds at which ES and IS hello packets are sent; the default is 10 seconds
Mode(s): Global Configuration
clns holding-time
Description: Allows the sender of an ES hello or IS hello to specify the length of time you consider the information in the hello packets to be valid. The no version restores the default value, 30 seconds.
Syntax: clns holding-time holdTime
no clns holding-time
� holdTime � number in the range 1�65535; length of time in seconds during which the information in the hello packets is considered valid
Mode(s): Global Configuration
clns hostERX Edge Routers
97
clns host
Description: Use to define a name-to-NSAP mapping that can then be used with commands requiring NSAPs. The no version restores the default of no mapping defined. Enables dynamic resolution of hostnames to system IDs (within the NSAP address). The hostname mapping is sent in the LSPs within the dynamic hostname TLV tuple. Display the TLV by issuing the show isis database detail command. Use the show hosts command to display the mapping.
Syntax: clns host name nsap
no clns host name
� name � name for the NSAP; first character can be either a letter or a number. If a number is used, the operations you can perform are limited.
� nsap � the NSAP to which that name maps
Mode(s): Global Configuration
clock rate
Description: Sets the rate of the internal clock in MHz for HSSI and X.21/V.35 interfaces. The no version restores the default value; for HSSI the default is 44.736 MHz, for X.21/V.35, the default is 2048000 Hz.
Syntax: The syntax depends on the type of interface.
HSSI Interfaces:
clock rate { 34 | 44 }
no clock rate
� 34 � specifies a rate of 34.368 MHz
� 44 � specifies a rate of 44.736 MHz
X.21/V.35 Interfaces:
[ no ] clock rate rate
no clock rate
� rate � speed of the clock in Hz; one of the following values:1200 | 2400 | 4800 | 9600 | 19200 | 38400 | 50000 | 64000 | 128000 | 1024000 | 2048000 | 3072000 | 4096000 | 4915200 | 6144000 | 6192000
Mode(s): Interface Configuration
clock set98
clock set
Description: Allows you to manually set the system clock. There is no no version.
Syntax: clock set time { month day | day month } year
� time � current time (in 24-hour format � HH:MM:SS)
� month � name of the month (January, February, �)
� day � day of the month (1�31)
� year � year (2000, 2001, �)
Mode(s): Privileged Exec
clock source
Description: Determines how an interfaces obtains clocking signals. The no version restores the default value, line.
Syntax: clock source { line | internal { module | chassis } }
no clock source
� line � interface clocks data from a clock recovered from the line�s receive data stream; the default.
� internal � internal clock source transmits data from its internal clock. You must specify one of the following for internal clocking:
� module � internal clock is from the line module itself
� chassis � internal clock is from the configured system clock
Mode(s): Controller Configuration, Interface Configuration (POS only)
clock summer-time dateERX Edge Routers
99
clock summer-time date
Description: Sets the system to automatically switch to summer time (Daylight Saving Time � DST). It should start on the first specific date listed in the command and end on the second specific date in the command. The no version configures the software so that it does not automatically switch to summer time.
Syntax: clock summer-time name date { startDay startMonth | startMonth startDay } startYear startTime { stopDay stopMonth | stopMonth stopDay } stopYear stopTime [ dstOffset ]
no clock summer-time
� name � name of the time zone (for example, PDT) to be displayed when daylight saving (summer) time is in effect
� date � indicates that summer time should start on the first specific date listed in the command and end on the second specific date in the command
� startDay � DST start day (1�31)
� startMonth � DST start month (January, February, �)
� startYear � DST start year (2000, 2001, �)
� startTime � DST start time (24-hour format) in hours and minutes (hh:mm)
� stopDay � DST stop day
� stopMonth � DST stop month
� stopYear � DST stop year
� stopTime � DST stop time (24-hour format)
� dstOffset � number of minutes to add during summer time in the range 1�1440; default = 60
Mode(s): Global Configuration
clock summer-time recurring100
clock summer-time recurring
Description: Sets the system to automatically switch to summer time (Daylight Saving Time) on the specified dates every year. The no version configures the software not to automatically switch to summer time.
Syntax: clock summer-time name recurring [ { startWeekNumber | startWeekEnum } startDay startMonth startTime { stopWeekNumber | stopWeekEnum } stopDay stopMonth stopTime [ dstOffset ] ]
no clock summer-time
� name � name of the time zone (for example, EDT for Eastern Daylight Savings Time) to be displayed when daylight saving (summer) time is in effect
� recurring � indicates that summer time should start and end on the specified days every year
� startWeekNumber � DST start week of the month (1�5)
� startWeekEnum � first week in month (first); or last week in month (last)
� startDay � DST start day of the week (Sunday, Monday, �)
� startMonth � DST start month (January, February, �)
� startTime � DST start time (24-hour format) in hours and minutes (hh:mm)
� stopWeekNumber � DST stop week of the month (1�5)
� stopWeekEnum � first week in month (first); or last week in month (last)
� stopDay � DST stop day of the week
� stopMonth � DST stop month
� stopTime � DST stop time in hours and minutes (hh:mm)
� dstOffset � number of minutes to add during summer time in the range 1�1440; default = 60
Mode(s): Global Configuration
clock timezone
Description: Sets the time zone for display. The no version sets the time zone to UTC.
Syntax: clock timezone name hours [ minutes ]
no clock timezone
� name � name of the time zone to be displayed when Standard time is in effect, such as EST or PST.
� hours � hours offset from UTC (-23, -22 � 23)
� minutes � minutes offset from UTC (0�59)
Mode(s): Global Configuration
colorERX Edge Routers
101
color
Description: Defines a policy rule that assigns a color to packets in the specified classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with the policy list for this rule. Use the suspend keyword to temporarily suspend color assignment. The no version removes the rule from the policy list; the suspend version temporarily suspends the policy rule; the no suspend version resumes application of a suspended rule.
Syntax: [ no ] [ suspend ] color { green | yellow | red } [ classifier-group claclName ] [ precedence precValue ]
� color � one of the following colors assigned to packets:
� green � highest precedence
� yellow � intermediate precedence
� red � lowest precedence
� claclName � classifier control list used to classify packets for this coloring service
� precValue � precedence value in the range 0�32768
Mode(s): Policy Configuration
committed-action
Description: Sets the action for packets conforming to the committed rate and committed burst size and conforming to the exceed rate and exceed burst size for a rate limit profile. The no version restores the value to the default value, drop.
Syntax: [ no ] committed-action { drop | transmit | mark markVal }
� drop � drop the packet
� transmit � transmit the packet
� mark � mark the packet
� markVal � mark value in the range 0�255
Mode(s): Rate Limit Profile Configuration
committed-burst
Description: Sets the committed burst for a rate limit profile. The no version restores the default value, 8192.
Syntax: [ no ] committed-burst size
� size � size in bytes in the range 8192�4294967295
Mode(s): Rate Limit Profile Configuration
committed-length102
committed-length
Description: Sets minimum and maximum constraints for the queue�s committed lengths. The no version removes constraints on the queue�s committed length.
Syntax: committed-length minimumCommittedLength [ maximumCommittedLength ]
no committed-length
� minimumCommittedLength � range 0�1073741824
� maximumCommittedLength � range 0�1073741824
Mode(s): Queue Profile Configuration
committed-rate
Description: Sets the committed rate for a rate limit profile. The no version restores the default value, 0.
Syntax: [ no ] committed-rate rate
� rate � rate in bits per second in the range 0�4294967295
Mode(s): Rate Limit Profile Configuration
configure
Description: Enters the Global Configuration mode. To enter Global Configuration commands, you must be in the Privileged Exec mode. There is no no version.
Syntax: configure [ terminal | file [ fileName ] [ verbose | show-progress [ dotPeriod ] ] ]
� terminal � configure from a terminal
� file � configure from a script file
� fileName � script file to execute
� verbose � echo each command as the script is executed
� show-progress � display a �.� during script execution
� dotPeriod � displays a �.� after this number of commands; default is 100
Mode(s): Privileged Exec
confirmations explicitERX Edge Routers
103
confirmations explicit
Description: Requires the user to enter y, ye, or yes to confirm a prompt, and to enter n or no to deny a prompt. The no version restores the default state, which permits pressing <Enter> or <y> to confirm a prompt and entering any other characters to deny a prompt.
Syntax: [ no ] confirmations explicit
Mode(s): Global Configuration
conformed-action
Description: Sets the action for packets not conforming to the committed rate and committed burst size, but conforming to the peak rate and peak burst size for a rate limit profile. The no version restores the value to the default value, drop.
Syntax: [ no ] conformed-action { drop | transmit | mark markVal }
� drop � drop the packet
� transmit � transmit the packet
� mark � mark the packet
� markVal � mark value in the range 0�255
Mode(s): Rate Limit Profile Configuration
conformed-fraction
Description: Sets the percentage of the total queue that can be occupied before dropping conformed packets. The no version returns the conformed fraction to its default setting.
Syntax: conformed-fraction conformedFraction
no conformed-fraction
� conformedFraction � percentage range 0�100; default is 50%
Mode(s): Queue Profile Configuration
conformed-length104
conformed-length
Description: Sets minimum and maximum constraints for the queue�s conformed lengths. The no version removes constraints on the queue�s conformed length.
Syntax: conformed-length minimumConformedLength [ maximumConformedLength ]
no conformed-length
� minimumConformedLength � range 0�1073741824
� maximumConformedLength � range 0�1073741824
Mode(s): Queue Profile Configuration
controller e1
Description: Accesses Controller Configuration mode so that you can configure a CE1 controller. There is no no version.
Syntax: controller e1 interfaceSpecifier
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Mode(s): Global Configuration
controller e3
Description: Accesses Controller Configuration mode so that you can configure an E3 controller. There is no no version.
Syntax: controller e3 interfaceSpecifier
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Mode(s): Global Configuration
controller sonet
Description: Selects an interface on which you want to configure SONET or SDH. There is no no version.
Syntax: controller sonet interfaceSpecifier
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Mode(s): Global Configuration
controller t1ERX Edge Routers
105
controller t1
Description: Accesses Controller Configuration mode so that you can configure a CT1 controller. There is no no version.
Syntax: controller t1 interfaceSpecifier
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Mode(s): Global Configuration
controller t3
Description: Accesses Controller Configuration mode so that you can configure a T3 controller. There is no no version.
Syntax: controller t3 interfaceSpecifier
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Mode(s): Global Configuration
copy106
copy
Description: Copies a local or network file. There is no no version.
Note: You cannot change the extension of a file, for example, .scr.
Note: You can only copy software release (.rel) files to the system (download); you cannot copy them from the system (upload).
Syntax: copy sourcePath:sourceFilename destinationPath:destinationFilename [force]
� sourcePath � path to the source in the format: networkPath | /incoming/subdirectory | /outgoing/subdirectory
� networkPath � path to the network host
� incoming � specifies the ERX system�s incoming FTP directory
� subdirectory � name of a subdirectory on the ERX system�s FTP server. If the subdirectory does not exist, the system creates it.
� outgoing � specifies the ERX system�s outgoing FTP directory
� source_filename � name of source file
� destinationPath � path to the destination in the format: networkPath | /incoming/subdirectory | /outgoing/subdirectory
� networkPath � path to the network host
� incoming � specifies the incoming ERX system�s FTP directory
� subdirectory � name of a subdirectory on the ERX system�s FTP server. If the subdirectory does not exist, the system creates it.
� outgoing � specifies the ERX system�s outgoing FTP directory
� destinationFilename � name of destination file
� force � forces a copy, even if the destination file already exists
Mode(s): Privileged Exec
copy running-configuration
Description: Saves the configuration currently running on the system to a local or remote (network) system configuration file (.cnf). Available only if the system is in Automatic Commit mode. There is no no version.
Syntax: copy running-configuration destination [ force ]
� destination � destination filename (*.cnf)
� force � creates a copy even if the destination file already exists
Mode(s): Privileged Exec
copy running-configuration startup-configurationERX Edge Routers
107
copy running-configuration startup-configuration
Description: Saves all outstanding (unsaved) configuration changes to nonvolatile storage; an exact alias of the write memory command. Available if the system is in either Automatic Commit mode or Manual Commit mode. If issued while in Automatic Commit mode, the CLI notifies you that the command is not necessary, but allows you to proceed. There is no no version.
Syntax: copy running-configuration startup-configuration
Mode(s): Privileged Exec
copy startup-configuration
Description: Copies the previously saved startup configuration to a local or remote (network) system configuration (*.cnf) file. Available only if the system is in Manual Commit mode. If you have made but not saved any configuration changes, those changes are not in the startup configuration. There is no no version.
Syntax: copy startup-configuration destination [ force ]
� destination � destination filename (*.cnf)
� force � creates a copy even if the destination file already exists
Mode(s): Privileged Exec
cost
Description: Specifies a cost metric for an OSPF remote-neighbor interface. Used in the calculation of the SPF routing table. The no version restores the default value.
Syntax: cost intfCost
no cost
� intfCost � link state metric cost; a number in the range 1�65535; default value is 10 if there is no route to the remote neighbor; otherwise, the default is calculated based on the bandwidth of the physical interface used to reach the remote neighbor and the OSPF auto-cost reference bandwidth
Mode(s): Remote Neighbor Configuration
crc108
crc
Description: Sets the size of the cyclic redundancy check. CRC is an error-checking technique that uses a calculated numeric value to detect errors in transmitted data. 16 and 32 indicate the number of check digits per frame that are used to calculate the FCS. Both the sender and receiver must use the same setting. The default is 16. The no version restores the value to the default.
Syntax: crc { 16 | 32 | none }
no crc
� 16 � specifies CRC-16, which transmits streams of 8-bit characters and generates 16-bit check bits per frame
� 32 � specifies CRC-32, which transmits longer streams at faster rates and therefore provides better ongoing error detection
� none � disables CRC checking
Mode(s): Interface Configuration
cr-ldp
Description: Specifies that the traffic-engineering extensions to LDP are in effect on this interface. CR-LDP is enabled by default. The no version disables CR-LDP in the profile.
Syntax: [ no ] cr-ldp
Mode(s): LDP Profile Configuration
crypto key dss
Description: Controls SSH server daemon and creation/deletion of SSH server host key. This command is not displayed by the show config command. There is no no version.
Syntax: crypto key { generate | zeroize } dss
� generate � creates the SSH server host key and enables the daemon
� zeroize � deletes the SSH server host key and stops the SSH daemon if it is running. Issuing this command terminates any active client sessions. The next time the system boots after this command is issued, the SSH server daemon is not started.
Mode(s): Global Configuration
data-character-bitsERX Edge Routers
109
data-character-bits
Description: Sets the number of data bits available for characters for all sessions on the specified vty lines. There is no no version.
Syntax: data-character bits { 7 | 8 }
� 7 � 7 data bits per character; this setting supports only characters in the standard ASCII set
� 8 � 8 data bits per character; default setting, supports the full set of 8-bit international characters
Mode(s): Line Configuration
dead-interval
Description: Sets the time period that the OSPF router waits without seeing hello packets from a remote neighbor before declaring the neighbor to be down. The no version restores the default value.
Syntax: dead-interval deadInterval
no dead-interval
� deadInterval � number in the range 1�65535 seconds; default value is 40 seconds
Mode(s): Remote Neighbor Configuration
deadtime
Description: Use to configure the amount of time (in minutes) that a server is marked as unavailable if a request times out for the configured retry count. If a server fails to answer a request, it is marked �unavailable� by the system. The system does not send requests to the server for the configured time. The no version restores the default value, 0, turning off the deadtime mechanism.
Syntax: deadtime recovery
no deadtime
� recovery � amount of time that a server is marked as unavailable in the range 0�30 (minutes). The default is 0.
Mode(s): Radius Configuration
debounce-time110
debounce-time
Description: Sets the interval to wait before bringing up a RIP interface that was brought down. The no version restores the default value, 10.
Syntax: debounce-time interval
no debounce-time
� interval � seconds in the range 0�60
Mode(s): Router Configuration
debug ip bgp
Description: Shows information on the selected variable. The no version disables the display.
Syntax: debug ip bgp [ in | out ] [ peerAddress [ peerAddressMask ] ][ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] [ severity { severityValue | severityNumber } ][ verbosity verbosityLevel ] [ secondary ]
no debug ip bgp [ in | out ] [ peerAddress [ peerAddressMask ] ][ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ]
� in � displays information for inbound events
� out � displays information for outbound events
� peerAddress � IP address of BGP peer for which information is displayed
� peerAddressMask � network mask of BGP peer for which information is displayed
� bgpLog � BGP log of interest; one of the following options:
� dampening � BGP dampening event; route is suppressed or no longer suppressed by route-flap dampening
� events � BGP finite state machine events and transitions
� keepalives � BGP keepalive message events
� updates � BGP routing table update events
� vpnv4 � BGP VPNv4 NLRI events
� import � displays BGP import processing events; appears only if you specify the vpnv4 keyword
debug ip bgpERX Edge Routers
111
� routerName � name of the virtual router that owns the BGP router for which information is being displayed
� filteringRouterName � name of the virtual router that owns the access class and route map parameters
� accessClassName � name of an access list to filter output
� mapName � name of a route map to filter output
� severity �specifies the minimum severity of the log messages displayed for the selected category; described either by a descriptive term�severityValue�or by a corresponding number�severityNumber�in the range 0�7; the lower the number, the higher the priority:
� emergency or 0 � system unusable
� alert or 1 � immediate action needed
� critical or 2 � critical condition exists
� error or 3 � error condition
� warning or 4 � warning condition
� notice or 5 � normal but significant condition
� info or 6 � informational message
� debug or 7 � debug message
� verbosityLevel � verbosity of the log category�s messages; can be any of the following:
� low � terse
� medium � moderate detail
� high � verbose
� secondary � indicates that the specified filter conditions for the log are imposed in addition to any that were previously specified; if omitted, the specified filter conditions replace any that were previously specified
Mode(s): Privileged Exec
debug ip mbgp112
debug ip mbgp
Description: Shows information on the selected variable. The no version disables the display.
Syntax: debug ip mbgp [ in | out ] [ peerAddress [ peerAddressMask ] ][ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] [ severity { severityValue | severityNumber } ][ verbosity verbosityLevel ] [ secondary ]
no debug ip mbgp [ in | out ] [ peerAddress [ peerAddressMask ] ][ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ]
� in � displays information for inbound events
� out � displays information for outbound events
� peerAddress � IP address of BGP peer for which information is displayed
� peerAddressMask � network mask of BGP peer for which information is displayed
� bgpLog � BGP log of interest; one of the following options:
� dampening � BGP dampening event; route is suppressed or no longer suppressed by route-flap dampening
� events � BGP finite state machine events and transitions
� keepalives � BGP keepalive message events
� updates � BGP routing table update events
� vpnv4 � BGP VPNv4 NLRI events
� import � displays BGP import processing events; appears only if you specify the vpnv4 keyword
� routerName � name of the virtual router that owns the BGP router for which information is being displayed
� filteringRouterName � name of the virtual router that owns the access class and route map parameters
� accessClassName � name of an access list to filter output
� mapName � name of a route map to filter output
� severity � specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command.
debug ip ospfERX Edge Routers
113
� verbosityLevel � verbosity of the log category�s messages. See the debug ip bgp command.
� secondary � indicates that the specified filter conditions for the log are imposed in addition to any that were previously specified; if omitted, the specified filter conditions replace any that were previously specified
Mode(s): Privileged Exec
debug ip ospf
Description: Shows information on the selected variable. The no version disables the display.
Syntax: debug ip ospf ospfLog [ severity { severityValue | severityNumber } ][ verbosity verbosityLevel ]
no debug ip ospf ospfLog
� ospfLog � OSPF log of interest; one of the following options:
� adj � OSPF adjacency events
� elect-dr � OSPF designated router election
� events � OSPF general events
� lsa � OSPF link state advertisements events
� neighbor � OSPF neighbor state machine
� packets-rcvd � OSPF packets received
� packets-sent � OSPF packets sent
� route � OSPF route events
� spf � all OSPF shortest path first calculation events
� spf-ext � OSPF shortest path first external route calculation events
� spf-inter � OSPF shortest path first interarea route calculation events
� spf-intra � OSPF shortest path first intra-area route calculation events
� severity � specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command.
� verbosityLevel � verbosity of the log category�s messages. See the debug ip bgp command.
Mode(s): Privileged Exec
debug ip pim114
debug ip pim
Description: Shows information on the selected variable. The no version disables the display.
Syntax: The syntax differs for PIM Dense Mode and PIm Sparse Mode.
PIM Dense Mode:debug ip pim { pimLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] | switchState groupAddress sourceAddress |dense-mode { on | off } }
PIM Sparse Mode:debug ip pim { pimLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] |switchState groupAddress sourceAddress |sparse-mode { on | off | sg-state [ group groupAddress [ source sourceAddress ] | rp rpAddress ] [ count ] } }
no debug ip pim pimLog
� pimLog � PIM log of interest; one of the following options:
� autoRp-rcvd � autoRP packets received
� autoRP-sent � autoRP packets sent
� engineering � PIM engineering
� hellos-rcvd � PIM hello messages received
� hellos-sent � PIM hello messages sent
� packets � PIM packets received and sent
� packets-rcvd � PIM packets received
� packets-sent � PIM packets sent
� severity � specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command.
� verbosityLevel � verbosity of the log category�s messages. See the debug ip bgp command.
� switchState � switches from one type of tree to another
� rpt-switch � switch from a shortest path tree to a shared path tree
� spt-switch � switch from a shared path tree to a shortest path tree
� groupAddress � IP address of the multicast group
� sourceAddress � IP address of the multicast source
� on � turns on the specified PIM mode on all virtual routers
debug ip ripERX Edge Routers
115
� off � turns off the specified PIM mode on all virtual routers
� sg-state � displays information about the relationship between a source, multicast group, and RP router
� rp � displays information about the relationships between sources, groups, and the specified RP router
� rpAddress � address of the RP router
� count � displays one of the following
� (with no optional keywords) number of relationships between a source, multicast group, and RP router
� (with the group keyword) number of sources associated with the multicast group for PIM SM
� (with the source and group keywords) number of source-group pairs for PIM SM
� (with the rp keyword) number of source-group pairs associated with the RP router for PIM SM
Mode(s): Privileged Exec
debug ip rip
Description: Shows information on the selected variable. The no version disables the display.
Syntax: debug ip rip ripLog [ severity { severityValue | severityNumber } ][ verbosity verbosityLevel ]
no debug ip rip ripLog
� ripLog � RIP log of interest; one of the following options:
� events � general RIP events, such as removing RIP from an interface or creating the RIP process
� route � events associated with two RIP routers exchanging routes
� severity � specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command.
� verbosityLevel � verbosity of the log category�s messages. See the debug ip bgp command.
Mode(s): Privileged Exec
debug isis116
debug isis
Description: Displays debug-related information about selected IS-IS log parameters. This command manipulates the same log as the Global Configuration log commands. The no version disables debugging display.
Syntax: debug isis isisLog [ severity { severityValue | severityNumber } ][ verbosity verbosityLevel ]
no debug isis isisLog
� isisLog � IS-IS log of interest; one of the following options:
� adj-packets � IS-IS adjacency-related packets, such as hello packets sent and IS-IS received adjacencies going up and down
� mpls traffic-eng advertisements � MPLS traffic-engineering agent advertisements
� mpls traffic-eng agents � MPLS traffic-engineering agents
� snp-packets � IS-IS CSNPs/PSNPs
� spf-events � shortest path first events
� spf-statistics � SPF timing and statistic data
� spf-triggers � SPF triggering events
� update-packets � update-related packets
� severity � specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command.
� verbosityLevel � verbosity of the log category�s messages. See the debug ip bgp command.
Mode(s): Privileged Exec
default-fields peerERX Edge Routers
117
default-fields peer
Description: Specifies the fields that will appear by default in the output of a subsequently issued show ip bgp summary command.
Syntax: [ no ] default-fields peer fieldOptions
� fieldOptions � field(s) to be displayed, in the formatall | [ intro | last-reset-reason | messages-received | messages-sent | peer-type | prefixes-received | remote-as | state | times-up | up-down-time | updates-received | updates-sent ]*
� all � all available information; not recommended, as this information for each network does not fit on a single line and is difficult to read
� intro � introductory information about the state of various BGP attributes; this information is displayed only if you specify this keyword
� last-reset-reason � reason for most recent reset
� messages-received � total number of messages received from the peer
� messages-sent � total number of messages sent to the peer
� peer-type � type of BGP peer: internal, external, or confederation
� prefixes-received � number of unique prefixes received from the peer
� remote-as � the remote AS number of the peer
� state � state of the BGP session
� times-up � number of times the session has been established
� up-down-time � how long the session has been up or down
� updates-received � number of update messages received from the peer
� updates-sent � number of update messages sent to the peer
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Router Configuration
default-fields route118
default-fields route
Description: Specifies the fields that will appear by default in the output of any subsequently issued show ip bgp command that displays routes (except for the show ip bgp summary command).
Syntax: [ no ] default-fields route fieldOptions
� fieldOptions � field(s) to be displayed, in the formatall | [ afi | aggregator | as-path | atomic-aggregate | best | clusters | communities | extended-communities | imported | intro | in-label | loc-pref | med | next-hop | next-hop-cost | origin | originator-id | out-label | peer | peer-type | rd | safi | unknown-types | weight ]*
� all � all available information; not recommended, as this information for each network does not fit on a single line and is difficult to read
� afi � address family identifier
� aggregator � AS number and IP address of aggregator
� as-path � AS path through which this route bas been advertised
� atomic-aggregate � whether the atomic aggregate attribute is present
� best � whether this is the best route for the prefix
� clusters � list of cluster IDs through which the route has been advertised
� communities � community number associated with the route
� extended-communities � extended community
� imported � whether the route was imported
� intro � introductory information about the state of various BGP attributes; this information is displayed only if you specify this keyword
� in-label � MPLS label for the route; the label received with incoming MPLS frames
� loc-pref � local preference for the route
� med � multiexit discriminator for the route
� next-hop � IP address of the next router that is used when forwarding a packet to the destination network
� next-hop-cost � whether the indirect next hop of the route is unreachable, if not, displays IGP cost to the indirect next hop
� out-label � MPLS label for the route; the label with outgoing MPLS frames
� peer � IP address of BGP peer from which route was learned
� peer-type � type of BGP peer: internal, external, or confederation
� origin � origin of the route
default-fields routeERX Edge Routers
119
� originator-id � router ID of the router in the local AS that originated the route
� rd � route distinguisher
� safi � subsequent address family identifier
� unknown-types � attribute codes for unknown path attributes
� weight � weight of the route
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Router Configuration
default-information originate120
default-information originate
Description: Enables BGP to advertise a default route (0.0.0.0/0) if the default route exists in the IP routing table. If the default route does not exist, you must configure it using the ip route command.
For IS-IS, OSPF, and RIP, configures a default route for the distribution of default information into the respective routing domain. IS-IS creates the default route (0.0.0.0/0) if it does not exist in the IP routing table. OSPF and RIP do not create the default route unless you use the always option.
For all protocols, the no version disables advertisement of the default route. The syntax varies with the protocol.
Syntax: For BGP:
[ no ] default-information originate
For IS-IS:
[ no ] default-information originate [ route-map mapTag ]
For RIP:
[ no ] default-information originate [ always | route-map mapTag ]
For OSPF:
[ no ] default-information originate [ always | metric metricValue | metric-type 1 | metric-type 2 | route-map mapTag ]*
� mapTag � name of route map used to import the default route; string of up to 32 characters
� always � creates the default route, so that it is always advertised
� metricValue � sets the metric for the default route; a value ranging from 0�4294967295
� metric-type 1 � sets the default route�s metric type to OSPF external type 1
� metric-type 2 � sets the default route�s metric type to OSPF external type 2
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Address Family Configuration, Router Configuration
default-metricERX Edge Routers
121
default-metric
Description: Configures RIP to use this metric when advertising routes on all subsequently created interfaces. The no version restores the default value, 0.
Syntax: [ no ] default-metric metricValue [ interfaceType interfaceSpecifier ]
� metricValue � metric to apply to routes, a value ranging from 1�16
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Router Configuration
default-router
Description: Specifies the IP address of the router that the subscriber�s computer will use for traffic destined for locations beyond the local subnet. The no version removes the association between the address pool and the router.
Syntax: default-router ipAddressPrimary [ ipAddressSecondary ]
no default-router
� ipAddressPrimary � IP address of preferred router
� ipAddressSecondary � IP address of secondary router
Mode(s): Pool Configuration
delete
Description: Deletes a directory or file in nonvolatile storage. There is no no version.
Syntax: delete filename | directory directoryName [ force ]
� filename � name of the local file you are deleting (for example, system1.cnf)
� directoryName � path of a directory
� force � forces deletion of directory even if it is not empty
Mode(s): Boot, User Exec, Privileged Exec
deny122
deny
Description: Specifies the domain name(s) that are to be denied access to AAA authentication. The no version negates the command.
Syntax: [ no ] deny domainName
� domainName � name of the domain; maximum of 64 characters
Mode(s): AAA Profile Configuration
description
Description: In Interface Configuration mode, adds a text description to an IP interface. In VRF Configuration mode, adds a text description to the VRF. The no version removes the description from the interface or VRF.
Syntax: description name
no description
� name � string of up to 256 characters in Interface Configuration mode; string of up to 80 characters in VRF Configuration mode
Mode(s): Interface Configuration, VRF Configuration
dir
Description: Displays information about the files in nonvolatile storage, including name, size, date created, and whether they are in use. There is no no version.
Syntax: dir [ path ] [ short ]
� path � path to a specific directory
� short � limits display to file name and creation date
Mode(s): User Exec, Privileged Exec
disableERX Edge Routers
123
disable
Description: When used from Privileged Exec mode, exits Privileged Exec mode and returns to User Exec mode.
When used from Router Configuration or Interface Configuration mode in the context of a DVMRP configuration, disables DVMRP on the virtual router or interface. The no version reenables DVMRP on the virtual router or interface.
When used from Router Configuration mode in the context of a RIP configuration, disables RIP on the virtual router. The no version enables RIP processing on the virtual router.
Syntax: To return to User Exec mode:
disable [ level ]
� level � one of the following privilege levels; the default is 10
� 0 � allows the user to execute the help, enable, disable, and exit commands
� 1 � allows the user to execute commands in User Exec mode plus commands at level 0
� 5 � allows the user to execute Privileged Exec show commands plus the commands at levels 1 and 0
� 10 � allows the user to execute all commands except support commands, which may be provided by Juniper Networks Customer Service
� 15 � allows the user to execute support commands
DVMRP, RIP:
[ no ] disable
Mode(s): Privileged Exec, Router Configuration (DVMRP or RIP), Interface Configuration (DVMRP only)
disable-autosync
Description: Halts automatic synchronization between the primary and standby SRP modules. The no version restores the default situation, in which automatic synchronization runs as a background process every 5 minutes.
Syntax: [ no ] disable-autosync
Mode(s): Global Configuration
disable-dynamic-redistribute124
disable-dynamic-redistribute
Description: Halts the dynamic redistribution of routes that are initiated by changes to a route map. Supported by DVMRP, BGP, IS-IS, OSPF, and RIP. The no version reenables dynamic redistribution of routes.
Syntax: [ no ] disable-dynamic-redistribute
Mode(s): Address Family Configuration, Router Configuration
disable proxy lcp
Description: Disables the proxy LCP parameter for the remote host. The no version enables the proxy LCP parameter for the remote host.
Syntax: [ no ] disable proxy lcp
Mode(s): L2TP Destination Profile Host Configuration
disable-switch-on-error
Description: Prevents the redundant SRP module from taking over if the primary SRP module experiences a software failure or if you push the reset button on the primary SRP module. Issue the sync command immediately before you issue this command. The no version restores the default situation, in which the redundant SRP module takes over if the primary SRP module experiences a failure.
Syntax: [ no ] disable-switch-on-error
Mode(s): Global Configuration
disconnect ssh
Description: Terminates an active SSH session. Use the show ip ssh command to determine the session identifier for the session to terminate. There is no no version.
Syntax: disconnect ssh { vty vtyId | sessionId }
� vtyId � virtual terminal identifier for VTY where the SSH session resides; use the show users command to determine the identifier
� sessionId � identifier for the session to be terminated
Mode(s): Privileged Exec
distanceERX Edge Routers
125
distance
Description: Defines an administrative distance for RIP or OSPF routes. A distance of 255 prevents the route from being installed in the routing table. The no version either negates a command or restores the command�s defaults.
Syntax: The options available vary depending on your routing protocol context; that is, on whether you are configuring OSPF or RIP.
OSPF:
[ no ] distance { weight | ospf { external distExt | inter-area disInter | intra-area disIntra } [ external distExt | inter-area distInter | intra-area distIntra ]* }
� distance � weight applied to OSPF routes
� weight � value assigned to OSPF routes that are added to the IP routing table; a number in the range 1�255
� ospf � OSPF routes
� distExt � distance for external type 5 and type 7 routes; a number in the range 1�255
� disInter � distance for interarea routes; a number in the range 1�255
� disIntra � distance for intra-area routes; a number in the range 1�255
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
RIP:
[ no ] distance weight
� weight � administrative distance assigned to RIP routes added to the IP routing table in the range 0�255; the default is 120
Mode(s): Router Configuration
distance bgp126
distance bgp
Description: Sets the administrative distances for BGP routes. A distance of 255 prevents the route from being installed in the routing table. The no version restores the default values.
Syntax: distance bgp externalDistance internalDistance localDistance
no distance bgp [ externalDistance [ internalDistance [ localDistance ] ] ]
� externalDistance � administrative distance for routes external to the AS in the range 1�255; the default is 20
� internalDistance � administrative distance for routes internal to the AS in the range 1�255; the default is 200
� localDistance � administrative distance for local (redistributed) routes in the range 1�255; the default is 200
Mode(s): Address Family Configuration, Router Configuration
distance ip
Description: Sets the administrative distance for IS-IS routes that are inserted into the IP routing table. A distance of 255 prevents the route from being installed in the routing table. The no version restores the default value of 115.
Syntax: [ no ] distance weight ip
� weight � administrative distance assigned to IS-IS routes added to the IP routing table in the range 1�255
Mode(s): Router Configuration
distribute-domain-wide
Description: Increases the granularity of routing information within an IS-IS domain by allowing routes to be distributed from level 2 to level 1. This results in more accurate routing between level 1 areas. The no version disables command.
Syntax: [ no ] distribute-domain-wide
Mode(s): Router Configuration
distribute-listERX Edge Routers
127
distribute-list
Description: Specifies the distribute list, an access list applied to incoming or outgoing RIP route updates. In Remote Neighbor Configuration mode, applies only to a RIP remote-neighbor interface. The no version removes the distribute list. An IP access list acts as a filter; refer to the access-list command for details.
Syntax: In Router Configuration mode:
[ no ] distribute-list accessListNumber { in | out } [ interfaceType interfaceSpecifier ]
In Remote Neighbor Configuration mode:
[ no ] distribute-list accessListName { in | out }
� accessListName � name of the access list
� in � applies the access list to incoming route updates
� out � applies the access list to outgoing route updates
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Router Configuration, Remote Neighbor Configuration
dns-server
Description: Assigns a DNS server to an address pool. The no version removes the association between the address pool and the DNS server.
Syntax: dns-server ipAddressPrimary [ ipAddressSecondary ]
no dns-server
� ipAddressPrimary � IP address of preferred DNS server
� ipAddressSecondary � IP address of secondary DNS server
Mode(s): Pool Configuration
domain-authentication-key128
domain-authentication-key
Description: Assigns a password for authentication of IS-IS level 2 LSPs, CSNPs, and PSNPs. The no version deletes the password.
Syntax: domain-authentication-key [ 0 | 8 ] authKey
no domain-authentication-key
� 0 � the authKey is entered in unencrypted form (plaintext); this is the default option
� 8 � the authKey is entered in encrypted form (ciphertext)
� authKey � a password, a continuous string of characters up to 8 characters in length
Mode(s): Router Configuration
domain-id
Description: Sets the OSPF domain ID for an OSPF VRF on a PE. The no version restores the default value.
Syntax: domain-id domainIdAddress | domainId
no domain-id
� domainIdAddress � OSPF domain ID in IP address format; default is the IP address of the OSPF router configured in the VRF
� domainId � OSPF domain ID as an integer value in the range 0�4294967295; default is 0
Mode(s): Router Configuration
domain-message-digest-key
Description: Specifies an HMAC MD5 key that the system uses to create a secure, encrypted message digest of each IS-IS level 2 packet (LSPs, CSNPs, and PSNPs). The digest is inserted into the packet from which it is created. Using this algorithm for domain routers protects against unauthorized routers injecting false routing information into your network. You can specify when the system will start (default is the current time) and stop (default is never) accepting packets that include a digest made with this key. You can specify when the system will start (default is the current time plus 2 minutes) and stop (default is never) generating packets that include a digest made with this key. The no version deletes the key specified by the key-id.
Syntax: domain-message-digest-key keyId hmac-md5 [ 0 | 8 ] key [ start-accept startAcceptTime [ { startAcceptMonth startAcceptDay | startAcceptDay startAcceptMonth } startAcceptYear ] ] [ start-generate startGenTime [ { startGenMonth startGenDay | startGenDay startGenMonth } startGenYear ] ]
domain-nameERX Edge Routers
129
[ stop-accept { never | stopAcceptTime [ { stopAcceptMonth stopAcceptDay | stopAcceptDay stopAcceptMonth } stopAcceptYear ] } ] [ stop-generate { never | stopGenTime [ { stopGenMonth stopGenDay | stopGenDay stopGenMonth } stopGenYear ] } ]
no domain-message-digest-key keyId
� keyId � integer from 1 to 255 that is a unique identifier for the secret key, sent with the message digest in the packet.
� 0 � the key is entered in unencrypted form (plaintext); this is the default option
� 8 � the key is entered in encrypted form (ciphertext)
� key � string of up to 20 alphanumeric characters; secret key used by the HMAC MD5 algorithm to generate the message digest.
� startAcceptTime, startAcceptMonth, startAcceptDay, startAcceptYear � time, month, day, year that the system will start accepting packets created with this password. Use military time format HH:MM[ :SS ].
� startGenTime, startGenMonth, startGenDay, startGenYear � time, month, day, year that the system will start inserting this password into packets. Use military time format HH:MM[ :SS ].
� never � the system never stops accepting or generating packets; overrides previously specified stop times.
� stopAcceptTime, stopAcceptMonth, stopAcceptDay, stopAcceptYear � time, month, day, year that the system will stop accepting packets created with this password. Use military time format HH:MM[ :SS ].
� stopGenTime, stopGenMonth, stopGenDay, stopGenYear � time, month, day, year that the system will stop inserting this password into packets. Use military time format HH:MM[ :SS ].
Mode(s): Router Configuration
domain-name
Description: Specifies a domain name that can be returned to the subscriber of an address pool if requested. The no version removes the association between the address pool and the domain name.
Syntax: domain-name domainName
no domain-name
� domainName � name of the domain
Mode(s): Pool Configuration
domain-tag130
domain-tag
Description: Sets the VPN route tag for an OSPF VRF on a PE to prevent routing loops back into the VPN. The no version restores the default value.
Syntax: domain-tag routeTag
no domain-tag
� routeTag � number identifying the VPN route tag in the range 0�4294967295
Mode(s): Router Configuration
ds3-scramble
Description: Enables scrambling of the ATM cell payload on a T3 interface. DS3 scrambling assists clock recovery on the receiving end of the interface.The no version disables cell scrambling.
Syntax: [ no ] ds3-scramble
Mode(s): Controller Configuration
dsr-detect
Description: Requires that a DSR signal be detected on the line for a user to log into the console. DSR is carried on pin 6 of the SRP module�s RS-232 (DB-9) connector. The DSR input must be connected to the DSR output of a modem or the DTR output of another DTE device, such as a terminal server, that supports this signal. If a session is in progress and the DSR signal is lost, the user is logged out automatically. The no version restores the default of no DSR required.
Syntax: [ no ] dsr-detect
Mode(s): Privileged Exec
dsu bandwidthERX Edge Routers
131
dsu bandwidth
Description: Sets the speed for the fractional T3 lines. The no version clears the bandwidth. If you issue this command, be sure to issue the dsu mode and scramble commands. Similarly, if you issue the no version, be sure to issue the no dsu mode and no scramble commands; otherwise, the interface may drop packets unexpectedly.
Syntax: dsu bandwidth bandwidthValue
no dsu bandwidth
� bandwidth � sets a fractional bandwidth
� bandwidthValue � value of the fractional bandwidth in the range 22�44210 Kbps. The system offers a set of speeds in increments that depend on the DSU mode you specify. The actual speed of the fractional T3 lines will be the value closest to the fractional bandwidth you specify.
Mode(s): Controller Configuration
dsu mode
Description: Sets the DSU mode for the lines. The no version clears the dsu mode. If you issue this command, be sure to issue the dsu bandwidth and scramble commands. Similarly, if you issue the no version, be sure to issue the no dsu bandwidth and no scramble commands; otherwise, the interface may drop packets unexpectedly.
Syntax: dsu mode 0 | 2
no dsu mode
� 0 � Digital Link mode
� 2 � Larscom mode
Mode(s): Controller Configuration
duplex132
duplex
Description: Specifies the duplex mode for an Ethernet interface. The no version specifies the default value, automatically negotiate. This command works in conjunction with the speed command; if you set or accept the automatically negotiate setting for either duplex mode or speed, the system negotiates both parameters with the remote device. This command is not available for the Ethernet interface on the SRP module.
Syntax: duplex duplexMode
no duplex
� duplexMode � one of the following the duplex options
� automatically negotiate � specifies that the system negotiates duplex mode with the remote device
� full � specifies that the system uses full duplex on an FE or GE interface
� half � specifies that the system uses half duplex on an FE interface; this value is not valid for GE interfaces
Mode(s): Interface Configuration
e3-scrambleERX Edge Routers
133
e3-scramble
Description: Enables scrambling of the ATM cell payload on an E3 interface. E3 scrambling assists clock recovery on the receiving end of the interface.The no version disables scrambling.
Syntax: [ no ] e3-scramble
Mode(s): Controller Configuration
enable
Description: Enters Privileged Exec mode at the specified privilege level. There is no no version.
Syntax: enable [ level ]
� level � one of the following privilege levels; the default is 10
� 0 � allows the user to execute the help, enable, disable, and exit commands
� 1 � allows the user to execute commands in User Exec mode plus commands at level 0
� 5 � allows the user to execute Privileged Exec show commands plus the commands at levels 1 and 0
� 10 � allows the user to execute all commands except support commands, which may be provided by Juniper Networks Customer Service
� 15 � allows the user to execute support commands
Mode(s): User Exec
enable password134
enable password
Description: Sets a password to control access to certain types of commands. The no version removes the password requirement.
Syntax: enable password [ level securityLevel ] [ passwordType ] passwordText
no enable password [ level securityLevel ]
� securityLevel � the security level for which you want to set the password; the default is 5
� 0 � allows the user to execute the help, enable, disable, and exit commands
� 1 � allows the user to execute commands in User Exec mode plus commands at level 0
� 5 � allows the user to execute Privileged Exec show commands plus the commands at levels 1 and 0; this is the default level
� 10 � allows the user to execute all commands except support commands, which may be provided by Juniper Networks Customer Service
� 15 � allows the user to execute support commands
� passwordType:
� 0 � specifies that an unencrypted password follows; this is the default
� 7 � specifies that an encrypted password follows
� passwordText � password, either encrypted or unencrypted, depending on the password type
Note: On your system, all passwords are stored as encrypted passwords.
Mode(s): Global Configuration
enable proxy authenticate
Description: Configures proxy authenticate for a remote host. The no version removes proxy authenticate configuration from the remote host.
Syntax: [ no ] enable proxy authenticate
Mode(s): L2TP Destination Profile Host Configuration
enable secretERX Edge Routers
135
enable secret
Description: Sets a secret to control access to certain types of commands. The no version removes the secret requirement.
Syntax: enable secret [ level securityLevel ] [ secretType ] secretText
no enable secret [ securityLevel ]
� securityLevel � the security level for which you want to set the secret; the default is 5
� 0 � allows the user to execute the help, enable, disable, and exit commands
� 1 � allows the user to execute commands in User Exec mode plus commands at level 0
� 5 � allows the user to execute Privileged Exec show commands plus the commands at levels 1 and 0; this is the default level
� 10 � allows the user to execute all commands except support commands, which may be provided by Juniper Networks Customer Service
� 15 � allows the user to execute support commands
� secretType:
� 0 � specifies that an unencrypted secret follows; this is the default
� 7 � specifies that an encrypted secret follows
� secretText � secret, either encrypted or unencrypted, depending on the secret type
Note: On your system, all secrets are stored as encrypted secrets.
Mode(s): Global Configuration
encapsulation bridge1483
Description: Configures bridged Ethernet as the encapsulation method on an interface. The no version removes bridged Ethernet as the encapsulation method on the interface.
Syntax: [ no ] encapsulation bridge1483
Mode(s): Interface Configuration, Subinterface Configuration
encapsulation hdlc136
encapsulation hdlc
Description: Enables Cisco HDLC encapsulation. The no version disables Cisco HDLC on an interface.
Syntax: [ no ] encapsulation hdlc
Mode(s): Interface Configuration, Subinterface Configuration
encapsulation ietf
Description: Enables Frame Relay or Multilink Frame Relay encapsulation. The no version removes Frame Relay or Multilink Frame Relay configuration from an interface.
Syntax: encapsulation { frame-relay | mlframe-relay } ietf
no encapsulation { frame-relay | mlframe-relay }
Mode(s): Interface Configuration
encapsulation mlppp
Description: Configures MLPPP as the encapsulation method on an individual interface. Creates an MLPPP link interface, also known as an MLPPP bundle member. The no version disables MLPPP on an interface.
Syntax: [ no ] encapsulation mlppp
Mode(s): Interface Configuration, Subinterface Configuration
encapsulation ppp
Description: Configures PPP as the encapsulation method for the interface. The no version disables PPP on an interface.
Syntax: [ no ] encapsulation ppp
Mode(s): Interface Configuration, Subinterface Configuration
encapsulation pppoe
Description: Configures PPPoE as the encapsulation method for the interface. The no version disables PPPoE on an interface.
Syntax: [ no ] encapsulation pppoe
� encapsulation � configure pppoe encapsulation
Mode(s): Interface Configuration, Subinterface Configuration
encapsulation smds-trunkERX Edge Routers
137
encapsulation smds-trunk
Description: Configures SMDS trunk as the encapsulation method for the interface. SMDS trunk encapsulation allows SMDS traffic to be sent over a GRE tunnel or a HSSI interface. The no version disables SMDS trunk encapsulation on an interface.
Syntax: [ no ] encapsulation smds-trunk
Mode(s): Interface Configuration
encapsulation vlan
Description: Configures VLAN as the encapsulation method for the interface. The no version disables VLAN on an interface.
Syntax: [ no ] encapsulation vlan
Mode(s): Interface Configuration, Subinterface Configuration
encryption
Description: Sets the encryption algorithm to use in the IKE policy. The no version restores the default, 3DES.
Syntax: encryption des | 3des
no encryption
� des � specifies 56-bit DES-CBC as the encryption algorithm
� 3des � specifies 168-bit 3DES-CBC as the encryption algorithm
Mode(s): ISAKMP Policy Configuration
end
Description: Exits Global Configuration mode or any of the Configuration submodes and returns to the User Exec mode. There is no no version.
Syntax: end
Mode(s): Global Configuration
erase secrets138
erase secrets
Description: Removes all CLI passwords or secrets. Execute before pressing the NMI button on the SRP module. There is no no version.
Note: If you enter the service unattended password-recovery command, the behavior of the erase secrets command changes. The erase secrets command will not take any parameters and will not be available through a vty session until you enter no service unattended password-recovery.
Syntax: erase secrets seconds
� seconds � number of seconds in the range 1�60 to allow for the operation
Mode(s): User Exec
ethernet description
Description: Adds a text description to a non-SRP Fast Ethernet or Gigabit Ethernet interface. The no version removes the description from the interface.
Syntax: ethernet description name
no ethernet description
� name � string of up to 15 characters
Mode(s): Interface Configuration
exceeded-action
Description: Sets the action for packets not conforming to the committed rate and committed burst size, and not conforming to the peak rate and peak burst size. The no version restores the default value, drop.
Syntax: [ no ] exceeded-action { drop | transmit | mark markVal }
� drop � drop the packet
� transmit � transmit the packet
� markVal � mark value for the packet in the range 0�255
Mode(s): Rate Limit Profile Configuration
exceeded-fractionERX Edge Routers
139
exceeded-fraction
Description: Sets the percentage of the total queue length that can be occupied before dropping exceeded packets. The no version returns the exceeded fraction to its default setting.
Syntax: exceeded-fraction exceededFraction
no exceeded-fraction
� exceededFraction � percentage range 0�100; default is 25
Mode(s): Queue Profile Configuration
exceeded-length
Description: Sets minimum and maximum constraints for the queue�s exceeded lengths. The no version removes constraints on the queue�s exceeded length.
Syntax: exceeded-length minimumExceededLength [ maximumExceededLength ]
no exceeded-length
� minimumExceededLength � range 0�1073741824
� maximumExceededLength � range 0�1073741824
Mode(s): Queue Profile Configuration
exception dump
Description: Specifies the location from and to which the system should transfer a core dump file. The no version disables the command.
Syntax: exception dump { except-srp | srp-only } { local | ipAddress [ directoryName ] }
no exception dump
� except-srp � generates core dump for all non-SRP modules
� srp-only � generates core dump for only the SRP modules
� local � nonvolatile storage memory
� ipAddress � IP address of the server to which the system will transfer the core dump file
� directoryName � name of the directory on the server to which the system will transfer the core dump file
Mode(s): Global Configuration
exception gateway140
exception gateway
Description: Specifies the gateway through which the system sends the core dump file to the remote FTP server. There is no no version.
Syntax: exception gateway ipAddress
� ipAddress � IP address of the gateway
Mode(s): Global Configuration
exception protocol ftp
Description: Specifies the username and password for FTP access to a host where you transferred a core dump file. The no version restores the defaults.
Syntax: exception protocol ftp[ [ algorithmType ] userName [ [ algorithmType ] password ] ]
no exception protocol
� algorithmType � type of user name or password
� 0 � unencrypted password, the default.
� 8 � encrypted password
� userName � username required to access the FTP server; the default username is anonymous
� password � password required to access the FTP server; the default is no password
Mode(s): Global Configuration
exception source
Description: Specifies the IP address and mask of the system interface over which you want to send the core dump file to the remote FTP server. There is no no version.
Syntax: exception source ipAddress ipAddressMask
� ipAddress � IP address of the interface
� ipAddressMask � optionally add the IP address mask of the interface
Mode(s): Global Configuration
excess-burstERX Edge Routers
141
excess-burst
Description: Sets amount of bandwidth allocated to accommodate a packet in progress when the rate is in excess of the burst.
Syntax: [ no ] excess-burst [ size ]
� size � the amount of bandwidth allocated; in the range 0�4294967295
Mode(s): Rate Limit Profile Configuration
exclude-subsystem
Description: Excludes subsystem files from being copied when you copy a software release to the system. The no version removes the exclusion for a specified subsystem file or all subsystem files.
Syntax: exclude-subsystem subsystemName
no exclude-subsystem [ subsystemName ]
� subsystemName � name of the subsystem file to be excluded
Mode(s): Global Configuration
exec-banner
Description: Controls display of an exec banner (configured with the banner command) on a particular line after user authentication (if any) and before the first prompt of a CLI session. The no version disables the banner.
Syntax: [ no ] exec-banner
Mode(s): Line Configuration
exec-timeout
Description: Sets the time interval that the console or vty line waits for expected user input. The no version restores the default value, which is no time limit.
Syntax: exec-timeout minutes [ seconds ]
no exec-timeout
� minutes � number of minutes for the time limit
� seconds � number of seconds in addition to the minutes for the time limit
Mode(s): Line Configuration
exit142
exit
Description: Exits the current command mode. There is no no version.
Syntax: exit
Mode(s): All modes
exit-address-family
Description: Exits from Address Family Configuration mode and returns to Router Configuration mode. There is no no version.
Syntax: exit-address-family
Mode(s): Address Family Configuration
exit-remote-neighbor
Description: Exits from Remote Neighbor Configuration mode and returns to Router Configuration mode. There is no no version.
Syntax: exit-remote-neighbor
Mode(s): Remote Neighbor Configuration
export map
Description: Associates a route map with a VRF to filter routes exported by the VRF. The no version disables the application of the route map to exported routes.
Syntax: [ no ] export map routeMap
� routeMap � name of a route map
Mode(s): VRF Configuration
fabric-strict-priority
Description: Specifies strict priority scheduling for queues in the traffic class in the fabric. The no version deletes the strict priority setting.
Syntax: [ no ] fabric-strict-priority
Mode(s): Traffic Class Configuration
fabric-weightERX Edge Routers
143
fabric-weight
Description: Specifies the relative weight for queues in the traffic class in the fabric. The no version sets the fabric weight to the default value.
Syntax: fabric-weight weight
no fabric-weight
� weight � range 1�63; default is 8
Mode(s): Traffic Class Configuration
fdl
Description: Specifies the facility data link standard used by a CT1 interface. The no version restores the default, none.
Syntax: fdl { ansi | att | all | none }
no fdl [ ansi | att | all ]
� ansi � specifies ANSI T1.403 Standard for extended superframe FDL exchange support
� att � specifies AT&T Technical Reference 54016 for extended superframe FDL exchange support
� all � specifies both the AT&T and ANSI mode for extended superframe FDL exchange support
� none � removes the current FDL mode settings
Mode(s): Controller Configuration
fdl carrier
Description: Specifies that an CT1 interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment.
Syntax: [ no ] fdl carrier
Mode(s): Controller Configuration
fdl string144
fdl string
Description: Defines an FDL message on a T1 interface as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages.
Syntax: fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue | generator generatorValue }
no fdl string { eic | fic | lic | unit | pfi | port | generator }
� eicValue � equipment identification code; 1�10 characters; default is the null value
� licValue � line identification code; 1�10 characters; default is the null value
� ficValue � frame identification code; 1�10 characters; default is the null value
� unitValue � unit identification code; 1�6 characters; default is the null value.
� pfiValue � facility identification code to send in the FDL path message; 1�38 characters; default is the null value.
� portValue � equipment port number to send in the FDL idle signal message; 1�38 characters; default is the null value.
� generatorValue � generator number to send in the FDL test signal message; 1�38 characters; default is the null value.
Mode(s): Controller Configuration
fdl transmit
Description: Configures the system to send the specified type of FDL message on the T1 interface. The no version stops the system from sending the specified type of FDL message or all FDL messages.
Syntax: [ no ] fdl transmit { path-id | idle-sIgnal | test-signal }
no fdl transmit
� path-id � transmits a path identification message every second
� idle-sIgnal � transmits an idle signal every 10 seconds
� test-signal� transmits a test signal every 10 seconds
Mode(s): Controller Configuration
filterERX Edge Routers
145
filter
Description: Defines a policy rule that drops all packets conforming to the specified classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with this policy list for this rule. Use the suspend keyword to suspend a filter rule temporarily. The no version removes the rule from the policy list.
Syntax: [ no ] [ suspend ] filter [ classifier-group claclName ] [ precedence precValue ]
� suspend � suspend the policy rule
� claclName � classifier control list used to classify packets for this filter policy
� precValue � precedence of this rule in relation to other rules within this set
Mode(s): Policy Configuration
flash-disk duplicate
Description: Copies the contents of NVS on the primary SRP module to another NVS card. There is no no version.
Syntax: flash-disk duplicate
Mode(s): Boot
To access the Boot mode from the local console:1 At the Privileged Exec prompt, type the reload command.
Information on the reloading process appears.2 When the countdown begins, press the <M+B> key combination.
This puts the CLI in Boot mode (:boot## prompt). If you do not press the <M+B> key combination, the reloading process continues and returns the CLI to the normal User Exec mode.
flash-disk initialize
Description: Performs a low-level format of NVS. There is no no version.
Syntax: flash-disk initialize [ no-format ]
� no-format � erases all files but does not format NVS
Mode(s): Boot
To access the Boot mode from the local console:1 At the Privileged Exec prompt, type the reload command.
Information on the reloading process appears.2 When the countdown begins, press the <M+B> key combination.
This puts the CLI in Boot mode (:boot## prompt). If you do not press the <M+B> key combination, the reloading process continues and returns the CLI to the normal User Exec mode.
flash-disk scan146
flash-disk scan
Description: Scans NVS on the primary SRP module to detect corrupt sectors, deletes files and directories that contain corrupt sectors, fixes errors associated with unused sectors. There is no no version.
Syntax: flash-disk scan [ repair ]
Mode(s): Boot
To access the Boot mode from the local console:1 At the Privileged Exec prompt, type the reload command.
Information on the reloading process appears.2 When the countdown begins, press the <M+B> key combination.
This puts the CLI in Boot mode (:boot## prompt). If you do not press the <M+B> key combination, the reloading process continues and returns the CLI to the normal User Exec mode.
forward
Description: Defines a rule that forwards all packets conforming to the specified classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with this policy list for this rule. Use the suspend keyword to suspend a forward rule temporarily. The no version removes the rule from the policy list.
Syntax: [ no ] [ suspend ] forward [ classifier-group claclName ] [ precedence precValue ]
� suspend � suspend a policy rule
� claclName � classifier control list used to classify packets for this filter policy
� precValue � precedence of this rule in relation to other rules within this set
Mode(s): Policy Configuration
frame-relay class
Description: Associates a map class with a subinterface. The no version removes the association between the map class and the subinterface.
Syntax: [ no ] frame-relay class mapName
� mapName � name of the map class; use up to 64 characters
Mode(s): Subinterface Configuration
frame-relay descriptionERX Edge Routers
147
frame-relay description
Description: Assigns a text description or alias to a Frame Relay major interface or subinterface. The no version removes the description or alias.
Syntax: frame-relay description name
no frame-relay description
� name � text description or alias for the Frame Relay interface or subinterface; up to 64 characters
Mode(s): Interface Configuration, Subinterface Configuration
frame-relay fragment
Description: Configures fragmentation and reassembly for the map class created with the map-class frame-relay command. The no version stops fragmentation and/or reassembly on the subinterface.
Syntax: frame-relay fragment [ [ fragmentSize ] [ fragmentation-only ] | reassembly-only ]
no frame-relay fragment
� fragmentSize � maximum payload size of a fragment in bytes; a number in the range 16�8188; default value is 52
� fragmentation-only � specifies fragmentation only
� reassembly-only � specifies reassembly only
Mode(s): Map Class Configuration
frame-relay interface-dlci ietf
Description: Assigns a data-link connection identifier to a specified Frame Relay subinterface on the router or access server. The DLCI number identifies a virtual circuit. The no version removes this assignment.
Syntax: frame-relay interface-dlci dlci ietf
no frame-relay interface-dlci dlci
� dlci � DLCI number to be used on the specified subinterface to identify a virtual circuit in the range 16�1007
Mode(s): Subinterface Configuration
frame-relay intf-type148
frame-relay intf-type
Description: Configures a Frame Relay interface type. The no version restores the default value, DTE.
Syntax: frame-relay intf-type type
no frame-relay intf-type
� type � one of the following interface types:
� dce � router is connected to user DTE equipment
� dte � router is connected to a Frame Relay network; the default
� nni � router connects two Frame Relay networks
Mode(s): Interface Configuration
frame-relay keepalive
Description: Enables the LMI mechanism for serial lines using Frame Relay encapsulation. The no version disables this capability. The keepalive command is similar to the frame-relay lmi-t391dte command.
Syntax: frame-relay keepalive [ seconds ]
no frame-relay keepalive
� seconds � number in the range 5�30; default is 10 seconds; defines the keepalive interval; the interval must be set, and the value on the DTE should be less than the value set on the DCE
Mode(s): Interface Configuration
frame-relay lmi-n391dte
Description: Sets the full-status polling counter (N391) on a DTE interface. The no version restores the default value, assuming an LMI has been configured.
Syntax: frame-relay lmi-n391dte keepExchanges
no frame-relay lmi-n391dte
� keepExchanges � number in the range 1� 255; default is 6; number of keep exchanges to be done before requesting a full-status message. If you specify a value of 1, you receive full-status messages only.
Mode(s): Interface Configuration
frame-relay lmi-n392dceERX Edge Routers
149
frame-relay lmi-n392dce
Description: Sets the error threshold counter (N392) on a DCE interface. The no version removes current setting and sets the default.
Syntax: frame-relay lmi-n392dce threshold
no frame-relay lmi-n392dce
� threshold � positive number in the range 1� 10; number of errors that will place the interface in an operationally down state; the default is 2 errors
Mode(s): Interface Configuration
frame-relay lmi-n392dte
Description: Sets the error threshold counter (N392) on a DTE interface. The no version removes current setting and sets the default.
Syntax: frame-relay lmi-n392dte threshold
no frame-relay lmi-n392dte
� threshold � positive number in the range 1�10; number of errors that will place the interface in an operationally down state; the default is 3 errors
Mode(s): Interface Configuration
frame-relay lmi-n393dce
Description: Sets the monitored events count (N393) on a DCE interface. The no version removes current setting and sets the default.
Syntax: frame-relay lmi-n393dce events
no frame-relay lmi-n393dce
� events � number in the range 1�10 events; specifies the diagnostic window used to verify link integrity; the default is 2 events (The detection of N392 errors within the window of N393 samples places the interface in an operationally down state.)
Mode(s): Interface Configuration
frame-relay lmi-n393dte150
frame-relay lmi-n393dte
Description: Sets the monitored event count (N393) on a DTE interface. The no version removes current setting and sets the default.
Syntax: frame-relay lmi-n393dte events
no frame-relay lmi-n393dte
� events � number in the range 1�10 events; the default is 4 events; specifies the diagnostic window used to verify link integrity (The detection of N392 errors within the window of N393 samples places the interface in an operationally down state)
Mode(s): Interface Configuration
frame-relay lmi-t391dte
Description: Sets the link integrity verification polling timer (T391) on a DTE interface. The no version removes the current setting and sets the default.
Syntax: frame-relay lmi-t391dte seconds
no frame-relay lmi-t391dte
� seconds � number in the range 5�30 seconds; specifies the interval in seconds between status inquiries issued by the DTE; the default is 10 seconds
Mode(s): Interface Configuration
frame-relay lmi-t392dce
Description: Sets the polling verification timer (T392) on a DCE interface. The no version removes current setting and sets the default.
Syntax: frame-relay lmi-t392dce seconds
no frame-relay lmi-t392dce
� seconds � number in the range 5�30 seconds; specifies the expected interval in seconds between status inquiries issued by the DTE equipment; the default is 15 seconds
Mode(s): Interface Configuration
frame-relay lmi-typeERX Edge Routers
151
frame-relay lmi-type
Description: Selects the LMI type. The no version restores the default value.
Syntax: frame-relay lmi-type type
no frame-relay lmi-type
� type � one of the following types:
� ansi � ANSI T1.617 Annex D
� cisco � original Group of Four specification developed by DEC, Northern Telecom, Stratacom, and Cisco
� q933a � ITU-T Q.933 Annex A
� none � no management interface is used
Mode(s): Interface Configuration
framing152
framing
Description: Specifies the framing mode used by a CE1, CT1, E3, or T3 interfaces. Available modes vary by the type of interface. The no version restores the default for that interface.
Syntax: framing framingType
no framing
� framingType � one of the following framing types:
CE1 module
� crc4 � default; CRC4 frame
� no-crc4 � disables CRC4 framing
CT1 module
� esf � default; extended superframe; sets the HDLC idle code to 0x7E
� sf � superframe; sets the HDLC idle code to 0xFF
E3-FRAME module
� g751 � default; G.751 compliant frame
� g832 � G.832 compliant frame
E3-ATM module
� g751adm � G.751 ATM direct mapping
� g751plcp � default; G.751 PLCP mapping
� g832adm � G.832 ATM direct mapping
T3 module
� c-bit � default; specifies c-bit parity framing
� m23 � specifies M23 multiplexer framing
Mode(s): Controller Configuration
frequency
Description: Sets the time interval between RTR operations. The no version restores the default value.
Syntax: frequency frequencyValue
no frequency
� frequencyValue � number of seconds between RTR operations; for both types (echo and pathEcho), the default is 60 seconds
Mode(s): RTR Configuration
ftp-server enableERX Edge Routers
153
ftp-server enable
Description: Enables the FTP server and monitors the FTP port for attempts to connect to the FTP server. The no version terminates the current FTP sessions and disables the FTP server.
Syntax: [ no ] ftp-server enable
Mode(s): Global Configuration
group
Description: From QoS Profile Configuration mode, specifies that a group scheduler node be configured for each interface of the given interface type. The no version removes this rule from the QoS profile.
From ISAKMP Policy Configuration mode, assigns a Diffie-Hellman group to the IKE policy. The no version restores the default, 1024-bit Diffie-Hellman group.
Syntax: To specify a group scheduler node for QoS:
[ no ] interfaceType group groupName scheduler-profile schedulerProfileName
� interfaceType � one of the following interface types for which groups should be configured: atm, ethernet, serial, server-port
� groupName � name of the traffic class group
� schedulerProfileName � name of the scheduler profile
To Specify a Diffie-Hellman group:
group { 1 | 2 | 5 }
no group
� 1 � specifies the 768-bit group
� 2 � specifies the 1024-bit group
� 5 � specifies the 1536-bit group
Mode(s): QoS Profile Configuration, ISAKMP Policy Configuration
halt154
halt
Description: Stops operation on both SRP modules or on the specified SRP module. There is no no version.
Caution: To prevent corruption of NVS, issue this command before you remove or power down an SRP module.
Syntax: The syntax of the command depends on whether you enter it in Boot mode or Privileged Exec mode.
Boot Mode:halt
Privileged Exec Mode:halt [ force | primary [ force ] | standby [ force ] ]
� force � prompts the user to confirm that the system should stop operation if the SRP modules are in certain states, such as writing configuration data to NVS, that could lead to loss of configuration data or corruption of NVS.
� primary � stop operation on primary SRP module only
� standby � stop operation on standby SRP module only
Mode(s): Boot, Privileged Exec
To access the Boot mode from the local console:1 At the Privileged Exec prompt, type the reload command.
Information on the reloading process appears.2 When the countdown begins, press the <M+B> key combination.
This puts the CLI in Boot mode (:boot## prompt). If you do not press the <M+B> key combination, the reloading process continues and returns the CLI to the normal User Exec mode.
hash
Description: Sets the hash algorithm in an IKE policy. The no version restores the default, SHA-1.
Syntax: hash sha | md5
no hash
� sha � specifies SHA-1 (HMAC variant) as the hash algorithm
� md5 � specifies MD5 (HMAC variant) as the hash algorithm
Mode(s): ISAKMP Policy Configuration
hdlc down-when-loopedERX Edge Routers
155
hdlc down-when-looped
Description: Enables loopback detection on a Cisco HDLC interface. Loopback detection is disabled by default. The no version disables loopback detection.
Syntax: [ no ] hdlc down-when-looped
Mode(s): Interface Configuration, Subinterface Configuration
hdlc keepalive
Description: Specifies a keepalive value. The keepalive mechanism tracks the health of the connection. The no version turns off the keepalive feature.
Syntax: hdlc keepalive [ seconds ]
no hdlc keepalive
� seconds � keepalive timeout period in the range 0�6553 seconds. The default is 10. A value of zero (0) turns off the keepalive feature.
Mode(s): Interface Configuration, Subinterface Configuration
hdlc shutdown
Description: Stops or restarts a Cisco HDLC session. The no version restarts a Cisco HDLC session.
Syntax: [ no ] hdlc shutdown
Mode(s): Interface Configuration, Subinterface Configuration
hello hold-time
Description: Configures the MPLS hold time, the period that a sending LSR maintains a record of hello messages from the receiving LSR without receipt of another hello from that LSR. The no version restores the default value of 0.
Syntax: hello hold-time holdTime
no hello hold-time
� holdTime � a number in the range 0�65535; a value of 0 indicates 15 seconds for link hellos and 45 seconds for targeted hellos; a value of 65535 indicates an infinite hold time
Mode(s): LDP Profile Configuration
hello-interval156
hello-interval
Description: Specifies the interval between hello packets that the router sends on the OSPF remote-neighbor interface. The no version restores the default value.
Syntax: hello-interval helloInterval
no hello-interval
� helloInterval � a number in the range 1�65535 seconds; default value is 10 seconds
Mode(s): Remote Neighbor Configuration
help
Description: Displays basic information on the Help system. There is no no version.
Syntax: help
Mode(s): All modes
hops-of-statistics-kept
Description: Sets the number of hops to keep statistics for an entry. The no version restores the default value.
Syntax: hops-of-statistics-kept [ hopsKeptValue ]
no hops-of-statistics-kept
� hopsKeptValue � number of hops for which statistics are collected for a particular pathEcho type; the default is 16 for a pathEcho entry and 1 for an echo entry; if you omit this option, all hops found are recorded
Note: The only types your system supports are the pathEcho and the echo.
Mode(s): RTR Configuration
hostERX Edge Routers
157
host
Description: Adds or modifies an entry to the host table. The no version removes the specified host.
Syntax: host hostname ipAddress [ ftp [ [ algorithmType ] userName [ [ algorithmType ] password ] ] ]
no host hostname
� hostname � hostname to add or modify; up to 20 characters
� ipAddress � IP address of the host
� ftp � specifies that the host is an FTP server
� algorithmType � type of username or password
� 0 � unencrypted password, the default.
� 8 � encrypted password
� userName � username used to access an FTP server (but not an NFS server); defaults to anonymous
� password � password used to access an FTP server (but not an NFS server); defaults to null
Mode(s): Global Configuration
hostname
Description: Sets the name for the system in Global Configuration mode; this hostname subsequently appears in the system CLI prompt. The no version removes the hostname from the system.
Note: In Domain Map Tunnel Configuration mode, this command has been deprecated in favor of the client-name command. See the client-name command.
Syntax: hostname hostname
no hostname
� hostname � string of up to 64 characters (no spaces)
Mode(s): Global Configuration, Domain Map Tunnel Configuration (deprecated)
hssi force-dte-acknowledge158
hssi force-dte-acknowledge
Description: Provides compatibility with DCE devices that wait for the DTE side to set the acknowledge bit first. Issue this command if the HSSI interface is configured as DTE, both sides of the connection are correctly configured, and the link does not come up. The no version prevents the HSSI interface from sending acknowledgment signals when in DTE mode.
Syntax: [ no ] hssi force-dte-acknowledge
Mode(s): Interface Configuration
hssi internal-clock
Description: Enable the internal clock for DCE mode on a HSSI interface. The no version disables the internal clock for DCE mode on a HSSI interface.
Syntax: [ no ] hssi internal-clock
Mode(s): Interface Configuration
identificationERX Edge Routers
159
identification
Description: Specifies the assignment ID of an L2TP or L2F tunnel in Domain Map Tunnel Configuration mode. The no version removes the assignment ID from the tunnel.
Syntax: identification serverId
no identification
� serverId � L2TP or L2F tunnel assignment ID up to 32 characters
Mode(s): Domain Map Tunnel Configuration
igmp disable
Description: Disables IGMP on a virtual router.The no version reenables IGMP on a virtual router.
Syntax: [ no ] igmp disable
Mode(s): Router Configuration
igmp promiscuous
Description: Allows all IGMP interfaces on the router to accept IGMP reports from hosts on any subnet. The no version allows IGMP interfaces on the router to accept IGMP reports only from hosts on their associated subnets.
Syntax: [ no ] igmp promiscuous
Mode(s): Router Configuration
ignore dcd
Description: Prevents the system from using the DTD signal when determining whether the interface is working, if an interface is configured as a V.35 DTE. The no version allows the system to use the DTD signal when determining whether the interface is working.
Syntax: [ no ] ignore dcd
Mode(s): Interface Configuration
ignore link-state-signals160
ignore link-state-signals
Description: Prevents the system from using any link state signal when determining whether a V.35/X.21 interface is working. The no version allows the system to use the link state signals when determining whether the interface is working.
Syntax: [ no ] ignore link-state-signals
Mode(s): Interface Configuration
ignore-lsp-errors
Description: Allows the router to ignore IS-IS link state packets that are received with internal checksum errors rather than purging the link state packets. The no version disables this function.
Syntax: [ no ] ignore-lsp-errors
Mode(s): Router Configuration
import map
Description: Associates a route map with a VRF to filter routes received by the VRF. The no version disables the application of the route map to imported routes.
Syntax: [ no ] import map routeMap
� routeMap � name of a route map
Mode(s): VRF Configuration
index
Description: Sets a next hop at a particular index in the MPLS explicit path. The no version removes the next hop from the index.
Syntax: index indexNumber next-address ipAddress [ mask ipMask ] [ loose ]
no index indexNumber
� index � number of a node in an ordered set of abstract nodes, a value ranging from 1�255
� ipAddress � address of the next hop
� ipMask � [ not currently used] mask for the next adjacent address
� loose � node is not necessarily directly connected (adjacent) to the previous node in the path. If loose is not configured, the configuration defaults to strict. Strict indicates that the node is directly connected to the previous node.
Mode(s): Explicit Path Configuration
interfaceERX Edge Routers
161
interface
Description: Configures an interface. The no version removes the subinterface or the logical interface.
Syntax: [ no ] interface interfaceType interfaceSpecifier [ extension ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
� extension � option that depend on the type of interface
Note: See the following entries for the syntax of each type of interface.
Mode(s): Global Configuration
interface atm
Description: Configures an ATM interface or subinterface type. The no version removes the interface or subinterface.
Syntax: [ no ] interface atm interfaceSpecifier [ multipoint | point-to-point ]
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
� multipoint � use to specify an NBMA subinterface
� point-to-point � default; use to specify an ATM interface or subinterface
Mode(s): Global Configuration, Interface Configuration
interface-event-disable
Description: Specifies that RIP does not purge the routing table on a RIP interface that has been brought down. The no version restores the default condition, wherein RIP does purge the routing table on an interface after a down event.
Syntax: [ no ] interface-event-disable
Mode(s): Router Configuration
interface fastEthernet162
interface fastEthernet
Description: Specifies a Fast Ethernet interface or subinterface or creates a subinterface over a Fast Ethernet interface. The no version removes the interface or subinterface.
Syntax: [ no ] interface fastEthernet interfaceSpecifier
� interfaceSpecifier � location of the interface in the formatslot/port [ .subinterface1 [ .subinterface2 ] ]
� slot � number of the chassis slot in the range 0�13 (ERX-1400 series) and 0�6 (ERX-700 series)
� port � number of the port; 0 or 1 for a dual-port Fast Ethernet module, 0�7 for an eight-port Fast Ethernet module, 0 for the Fast Ethernet port on the SRP module
. For a list of interface types and their corresponding specifiers, see Interface Types and Specifiers in About This Guide.
The meaning of the subinterface variables depends on the configuration context. You can configure Fast Ethernet interfaces with or without VLANS. If you do not use VLANS, you can use either of two different configuration methods.
VLANs
� subinterface1 � number of the VLAN subinterface in the range 1�4294967293; no more than 4096 VLAN subinterfaces per Fast Ethernet physical port
� subinterface2 � when using PPPoE, the number of the PPPoE subinterface in the range 1�4294967293; no more than 4094 PPPoE subinterfaces per Fast Ethernet physical port
No VLANs � New Configuration Method
� subinterface1 � when using PPPoE, the number of the PPPoE subinterface in the range 1�4294967293; no more than 4094 PPPoE subinterfaces per Fast Ethernet physical port
� subinterface2 � not used
No VLANs � Alternative Configuration Method
� subinterface1 � number of the Fast Ethernet subinterface in the range 1�4294967293; no more than 2 subinterfaces per Fast Ethernet physical port
� subinterface2 � when using PPPoE, the number of the PPPoE subinterface in the range 1�4294967293; no more than 4094 PPPoE subinterfaces per Fast Ethernet physical port
Note: If you are configuring Fast Ethernet interfaces without VLANs and you are running software release 3.0.0 or higher, we highly recommend that you use the current configuration method. If you are configuring Fast Ethernet
interface gigabitEthernetERX Edge Routers
163
interfaces without VLANs and you are running a software release earlier than 3.0.0 or if you are using scripts or macros created with such a release, you must use the alternative configuration method.
Mode(s): Global Configuration
interface gigabitEthernet
Description: Specifies or creates a Gigabit Ethernet interface or a subinterface over a Gigabit Ethernet interface. The no version removes the interface or subinterface.
Syntax: [ no ] interface gigabitEthernet interfaceSpecifier
� interfaceSpecifier � the location of the interface in the formatslot/port [ .subinterface1 [ .subinterface2 ] ]
For a list of interface types and their corresponding specifiers, see Interface Types and Specifiers in About This Guide.
The meaning of the subinterface variables depends on the configuration context. You can configure Gigabit Ethernet interfaces with or without VLANS.
VLANs
� subinterface1 � the number of the VLAN subinterface in the range 1�4294967293; no more than 4096 VLAN subinterfaces per Gigabit Ethernet physical port
� subinterface2 � when using PPPoE, the number of the PPPoE subinterface in the range 1�4294967293; no more than 4094 PPPoE subinterfaces per Gigabit Ethernet physical port
No VLANs
� subinterface1 � when using PPPoE, the number of the PPPoE subinterface in the range 1�4294967293; no more than 4094 PPPoE subinterfaces per Gigabit Ethernet physical port
� subinterface2 � not used
Note: You can configure only the primary port, 0, on a GE I/O module. The system automatically uses the redundant port if the primary fails.
Mode(s): Global Configuration
interface hssi164
interface hssi
Description: Selects a HSSI interface. The no version clears the configuration on the HSSI interface.
Syntax: [ no ] interface hssi interfaceSpecifier
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Mode(s): Global Configuration
interface ip
Description: Defines a shared IP interface. The no version removes the IP interface.
Syntax: [ no ] interface ip interfaceName
� interfaceName � string of up to 15 characters
Mode(s): Global Configuration
interface loopback
Description: Defines a loopback interface. The no version removes the loopback interface.
Syntax: [ no ] interface loopback interfaceSpecifier
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Mode(s): Global Configuration
interface mlframe-relay
Description: Defines an MFR bundle or a subinterface in a bundle. The no version removes the bundle or subinterface.
Syntax: [ no ] interface mlframe-relay interfaceSpecifier
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Mode(s): Global Configuration
interface mlpppERX Edge Routers
165
interface mlppp
Description: Creates an MLPPP network interface, also known as the MLPPP bundle. The no version deletes the MLPPP bundle.
Syntax: [ no ] interface mlppp interfaceSpecifier
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Mode(s): Interface Configuration, Subinterface Configuration
interface null
Description: Defines a null interface, which does not forward traffic. The no version removes the null interface.
Syntax: [ no ] interface null 0
Mode(s): Global Configuration
interface pos
Description: Configures a Packet over SONET interface. The no version removes the interface.
Syntax: [ no ] interface pos interfaceSpecifier
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Mode(s): Global Configuration
interface serial
Description: Specifies the location of the serial interface on CE1/CT1, CT3, E3/T3 FRAME, cOCx/STMx, and X.21/V.35 modules. The no version disables the interface.
Syntax: [ no ] interface serial interfaceSpecifier
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Mode(s): Global Configuration
interface tunnel166
interface tunnel
Description: Creates a tunnel interface for use by DVMRP, GRE, MPLS, or IPSec. You can specify that the tunnel be established in the routing space of a virtual router other than the current VR. If you specify another VR, all tunnel commands apply to the tunnel in that VR. If you do not specify another VR, tunnel commands apply to the current VR. The no version removes the tunnel interface.
Syntax: [ no ] interface tunnel interfaceSpecifier [ transport-virtual-router vrName ]
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
� vrName � name of virtual router in which the tunnel will be established
Mode(s): Global Configuration
invert data
Description: Enables data stream inversion. Data stream inversion must be turned on by network personnel at the other end of the line. The no version disables data stream inversion.
Syntax: [ no ] invert data
Mode(s): Interface Configuration
invert txclock
Description: Enables inversion of the transmit clock signal, to compensate for differences between the clock and data rate when data is travelling at fast speeds over long cables. Data stream inversion must be turned on by network personnel at the other end of the line. The no version disables inversion of the transmit clock signal.
Syntax: [ no ] invert txclock
Mode(s): Interface Configuration
ip access-routes
Description: Enables the ability to create host access routes on a PPP interface, which is useful for the B-RAS application. It also enables an access route in a profile. The no version disables the feature.
Syntax: [ no ] ip access-routes
Mode(s): Interface Configuration, Subinterface Configuration, Profile Configuration
ip addressERX Edge Routers
167
ip address
Description: Sets a primary or secondary IP address for an interface or subinterface. The no version removes an IP address or disables IP processing. You must specify the layer 2 encapsulation before you can set the IP address.
Syntax: ip address ipAddress ipMask [ secondary ]
no ip address [ ipAddress ipMask [ secondary ] ]
� ipAddress � IP address in 32-bit dotted decimal format (for example, 192.56.32.2)
� ipMask � mask for associated IP subnet
� secondary � specifies that the configured address is a secondary IP address; if omitted, the configured address is the primary IP address
Mode(s): Interface Configuration, Subinterface Configuration, Profile Configuration
ip address-pool
Description: Specifies to the system where to get an IP address for the remote user. The no version uses the default value, local.
Syntax: ip address pool { dhcp | local | none }
no ip address pool
� dhcp � enable the use of a DHCP server for address allocations
� local � enable the use of local address pool for address allocations
� none � do not enable an IP address pool
Mode(s): Global Configuration
ip alwaysup
Description: Forces the interface to appear as if it is up, regardless of the state of the lower layers. Use this command to reduce route topology changes when the network attached to this link is single-homed. The no version makes the interface appear in its current state.
Syntax: [ no ] ip alwaysup
Mode(s): Interface Configuration, Subinterface Configuration
ip as-path access-list168
ip as-path access-list
Description: Defines a BGP-related access list. You can specify an access list filter on both inbound and outbound BGP routes. Each filter is an access list based on regular expressions. If the regular expression matches the representation of the AS path of the route as an ASCII string, then the permit or deny condition applies. The AS path does not contain the local AS number. The no version removes a single access list entry if permit or deny and a pathExpression are specified. Otherwise, the entire access list is removed.
Syntax: ip as-path access-list accessListName { permit | deny } pathExpression
no ip as-path access-list accessListName
� accessListName � name of the access list; a string of up to 32 characters
� permit � permits access for matching conditions
� deny � denies access to matching conditions
� pathExpression � the regular expression describing the AS paths to be matched
Use a sequence of one or more elements, each of which is either an AS number or one of the following punctuation characters:
^ start of the path
$ end of the path
{ start of an AS_SET
} end of an AS_SET
( start of an AS_CONFED_SET or AS_CONFED_SEQ
) end of an AS_CONFED_SET or AS_CONFED_SEQ
Use the following regular expression metacharacters to match individual elements:
. matches any single element
* matches zero or more occurrences of any element
+ matches one or more occurrences of any element
[ ] matches any elements enclosed between brackets ([ ])
� hyphen; used within brackets to specify a range of AS numbers
^ matches any AS number except the ones specified when used as a first item within brackets
_ underscore; used in non-ERX implementations on either side of a path to specify a literal and disallow substring matching. Allowed but not required in our CLI.
Mode(s): Global Configuration
ip atm-vcERX Edge Routers
169
ip atm-vc
Description: Associates a protocol and address to a specific virtual circuit.
Syntax: ip ipAddress atm-vc vcd broadcast
no ip ipAddress atm-vc vcd
� ipAddress � ip address to be associated with the virtual circuit
� vcd � number in the range 1�4294967295; virtual circuit descriptor; an identifier for the VC in other commands
� broadcast � specifies that the circuit should participate in broadcast operations
Mode(s): Map List Configuration
ip bgp-community new-format
Description: Specifies that communities must be displayed in AA:NN format, where AA is a number that identifies the autonomous system and NN is a number that identifies the community within the autonomous system. The no version restores the default display.
Syntax: [ no ] ip bgp-community new-format
Mode(s): Global Configuration
ip bgp-confed-as-set new-format
Description: Specifies that AS-confed-sets must be displayed within square brackets, [ ], with the ASs delimited by commas. The no version restores the default, displaying AS-confed-sets within parentheses, ( ), with the ASs delimited by spaces.
Syntax: [ no ] ip bgp-confed-as-set new-format
Mode(s): Global Configuration
ip broadcast-address
Description: Defines a broadcast address for an interface. The no version restores the default IP broadcast address.
Syntax: [ no ] ip broadcast-address [ ipAddress ]
� ipAddress � broadcast IP address
Mode(s): Interface Configuration, Subinterface Configuration
ip community-list170
ip community-list
Description: Creates a community list for BGP and controls access to it. The no version removes the community list, including all list entries.
Syntax: ip community-list communityLisName { permit | deny } { communityNumber | asCommunityNumber | no-export | no-advertise | local-as | internet }[ communityNumber | asCommunityNumber | no-export | no-advertise | local-as | internet ]*
ip community-list communityLisName { permit | deny } communityExpression
no ip community-list communityLisName
� communityLisName � name of a community list; a string of up to 32 characters; identifies one or more permit or deny groups of communities; used for standard community lists
� permit � permits access for a matching condition
� deny � denies access for a matching condition
� communityNumber � community number in the range 1�4294967295
� asCommunityNumber � community number in the format AA:NN, where AA is a number that identifies the autonomous system and NN is a number that identifies the community within the autonomous system.
� no-export � specifies that BGP does not advertise this route outside a BGP confederation boundary
� no-advertise � specifies that BGP does not advertise this route to any peer (internal or external)
� local-as � specifies that BGP does not advertise this route to external peers; sometimes known as the no-export-subconfed community
� internet � specifies the Internet community
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
� communityExpression � a regular expression that matches the community
Mode(s): Global Configuration
ip debounce-timeERX Edge Routers
171
ip debounce-time
Description: Defines the minimum time an IP interface must be in a given state�for example, up or down�before being reported. The no version removes the debounce time.
Syntax: ip debounce-time [ vrf vrfName ] period
no ip debounce-time [ vrf vrfName ]
� vrfName � name of the VRF; string of 1�32 alphanumeric characters
� period � interval in the range 0�60000 seconds
Mode(s): Global Configuration
ip demux-type da-prefix
Description: Specifies that a subscriber interface will demultiplex traffic using destination addresses. The no version restores the default situation, in which the subscriber interface demultiplexes traffic using source addresses.
Syntax: [ no ] ip demux-type da-prefix
Mode(s): Interface Configuration
ip destination-prefix
Description: Configures a subscriber interface to demultiplex traffic with the specified destination address. The no version removes the association between the subscriber interface and the specified destination address.
Syntax: [ no ] ip destination-prefix ipAddress ipAddressMask
� ipAddress � destination IP address that the system uses to identify packets for this subscriber interface
� ipAddressMask � network mask for associated IP subnet
Mode(s): Interface Configuration
ip dhcp-local cable-modem
Description: Specifies the IP address of the external DHCP server to which the DHCP local server will relay DHCP messages from cable modems. The no version removes the cable modem configuration.
Syntax: [no] ip dhcp-local cable-modem dhcp-server ipAddress
� ipAddress � IP address of the cable modem DHCP server
Mode(s): Global Configuration
ip dhcp-local excluded-address172
ip dhcp-local excluded-address
Description: Specifies IP addresses that the DHCP local server should not supply from the default address pool because those addresses are already used by devices on the subnet. The no version allows the DHCP local server to supply the specified IP address.
Syntax: [ no ] ip dhcp-local excluded-address ipAddressStart ipAddressStop
� ipAddressStart � single IP address or start of the range of IP addresses that the DHCP local server should not supply
� ipAddressStop � end of the range of IP addresses that the DHCP local server should not supply
Mode(s): Global Configuration
ip dhcp-local limit
Description: Specifies the maximum number of IP addresses that the DHCP local server can supply to each VPI, VCI, VLAN, or Ethernet subnet. The no version restores the default situation, in which there is no limit on the number of token IP addresses that the DHCP local server can supply to each VPI, VCI, VLAN, or Ethernet subnet.
Syntax: ip dhcp-local limit { atm | ethernet | vlan | } leaseNumber
no ip dhcp-local limit [ atm | ethernet | vlan ]
� atm � specifies the limit for VPIs and VCIs
� ethernet � specifies the limit for Ethernet subnets
� vlan � specifies the limit for VLANs
� leaseNumber � maximum number of leases in the range 0�32767
Mode(s): Global Configuration
ip dhcp-local pool
Description: Accesses Pool Configuration mode. The no version prevents the DHCP local server from supplying IP addresses from the specified pool.
Syntax: [ no ] ip dhcp-local pool { poolName | default }
� poolName � name of the address pool
� default � specifies the default address pool
Mode(s): Global Configuration
ip dhcp-serverERX Edge Routers
173
ip dhcp-server
Description: Adds the IP address of a single DHCP server to the list of DHCP servers from which the system can request addresses to allocate to remote users. A maximum of five DHCP servers can be specified. The no version removes the specified DHCP server or removes all DHCP servers from the list.
Syntax: ip dhcp-server dhcpServerAddress [ adminStatus ]
no ip dhcp-server [ dhcpServerAddress [ adminStatus ] ]
� Ipaddress � IP address of the DHCP server that will allocate addresses for remote users
� adminStatus � one of the following options:
� disable � disable the DHCP server
� drain � drain the DHCP server
Mode(s): Global Configuration
ip directed-broadcast
Description: Enables translation of directed broadcast to physical broadcasts. The no version disables the function.
Syntax: [ no ] ip directed-broadcast
Mode(s): Interface Configuration, Subinterface Configuration, Profile Configuration
ip disable-forwarding
Description: Disables forwarding of packets on the SRP Ethernet interface to maintain system performance. The no version enables forwarding of packets on the SRP Ethernet interface. You see an error message if you try to set this command for interfaces other than the SRP Ethernet interface.
Syntax: [ no ] ip disable-forwarding
Mode(s): Interface Configuration, Subinterface Configuration
ip domain-lookup174
ip domain-lookup
Description: Without the transit-virtual-router option, enables the system to query the configured DNS name servers when it needs an IP hostname�to�IP address translation. With the transit-virtual-router option, configures a virtual router to use the name servers you configured for another virtual router. The no version without the transit-virtual-router option restores the default situation, in which the system does not query the DNS server. The no version with the transit-virtual-router option stops a virtual router from using the same name servers you configured for another virtual router.
Syntax: [ no ] ip domain-lookup [ transit-virtual-router vrName ]
vrName � name of the virtual router that has the DNS configuration you want to use for a second virtual router
Mode(s): Global Configuration
ip domain-name
Description: Defines a default domain name for the clients that a name resolver serves. The no version deletes the domain name; that is, the domain name will no longer be appended to hostnames in the static host table.
Syntax: [ no ] ip domain-name domainName
� domainName � default domain name for your hosts
Mode(s): Global Configuration
ip dvmrp
Description: Activates DVMRP on an interface.The no version removes DVMRP from an interface.
Syntax: [ no ] ip dvmrp
Mode(s): Interface Configuration
ip dvmrp accept-filterERX Edge Routers
175
ip dvmrp accept-filter
Description: Filters incoming DVMRP reports in accordance with a standard IP access list. The no version disables the filter.
Syntax: [ no ] ip dvmrp accept-filter listName1 [ distance ] neighbor-list listName2
� listName1 � name of the IP access list. If the name is 0, the interface accepts all destinations. You can specify a simple or extended access list; with an extended access list you can specify an address and a subnet mask.
� distance � distance associated with the DVMRP route when the router determines the RPF interface for the source of a multicast packet. The default is 0; the range is 0 to 255.
� listName2 � name of an access list containing the neighbors from which the system will accept reports. If the name is 0, the interface accepts destinations from all its neighbors.
Mode(s): Interface Configuration
ip dvmrp announce-filter
Description: Specifies a list of DVMRP routes that the system will advertise on an interface. The no version restores the default situation, in which the system advertises all known routes on the interface.
Syntax: ip dvmrp announce-filter listName
no ip dvmrp announce-filter
� listName � name of the IP access list that specifies the DVMRP routes that the system will advertise on the interface. You can specify a simple or extended access list; with an extended access list you can specify an address and a subnet mask.
Mode(s): Interface Configuration
ip dvmrp auto-summary
Description: Summarizes routes automatically on an interface. By default, automatic summarization is enabled. The no version disables automatic summarization.
Syntax: [ no ] ip dvmrp auto-summary
Mode(s): Interface Configuration
ip dvmrp disable176
ip dvmrp disable
Description: Disables DVMRP on an interface without removing the DVMRP configuration. The no version reenables the DVMRP configuration on a disabled interface.
Syntax: [ no ] ip dvmrp disable
Mode(s): Interface Configuration
ip dvmrp metric-offset
Description: Adjusts the number of hops associated with routes passing through an interface. This action indicates that the route is more efficient or less efficient than an alternative route. The no version restores the default values.
Syntax: [ no ] ip dvmrp metric-offset { in | out } [ increment ]
� in � increments the number of hops for a DVMRP route advertised in incoming DVMRP reports. If you do not specify a key word, this option is the default.
� out � increments the number of hops for a DVMRP route advertised in outgoing DVMRP reports
� increment � number of hops associated with this interface. The default is 1 for incoming reports and 0 for outgoing reports.
Mode(s): Interface Configuration
ip dvmrp route-hog-notification
Description: Sets the number of DVMRP routes that the system can record before it generates a syslog warning message.The no version restores the default setting, 10,000 routes.
Syntax: [ no ] ip dvmrp route-hog-notification [ limit ]
Mode(s): Global Configuration
ip dvmrp route-limit
Description: Limits the number of routes that the system can advertise on each interface. The default value is 7000. The no version removes the limit for the number of routes that the system can advertise on each interface.
Syntax: [ no ] ip dvmrp route-limit [ limit ]
� limit � number of routes that the system can advertise
Mode(s): Global Configuration
ip dvmrp summary-addressERX Edge Routers
177
ip dvmrp summary-address
Description: Advertises a DVMRP summary address on the interface. The no version stops the advertising of a summary address on an interface.
Syntax: [ no ] ip dvmrp summary-address ipAddress mask [ metric cost ]
� ipAddress � summary address
� mask � subnet mask
� cost � cost associated with this summary address
Mode(s): Interface Configuration
ip dvmrp unicast-routing
Description: Enables the exchange of DVMRP unicast routes on an interface not owned by DVMRP. The no version disables the exchange of DVMRP unicast routes on an interface not owned by DVMRP.
Syntax: [ no ] ip dvmrp unicast-routing
Mode(s): Interface Configuration
ip dynamic-interface-prefix
Description: Specifies the prefix for the names of dynamic shared IP interfaces created for overlapping BGP/MPLS VPNs.The no version restores the default prefix, dyn.
Syntax: ip dynamic-interface-prefix [ vrfName ] prefix
no ip dynamic-interface-prefix [ vrfName ]
� vrfName � name of the VRF in which the shared interface is created; a string of 1�32 alphanumeric characters
� prefix � string of 1�10 alphanumeric characters
Mode(s): Global Configuration
ip explicit-path178
ip explicit-path
Description: Defines an explicit path by name and also enables or disables explicit path routing in a non-ERX implementation. See the mpls explicit-path command for a complete description and syntax.
ip extcommunity-list
Description: Defines an extended-community (extcommunity) list to be referenced in a route map. The no version deletes the extcommunity.
Syntax: ip extcommunity-list listName { permit | deny }extendedCommunity [ extendedCommunity ]*
no ip extcommunity-list listName
� listName � name of the extended-community list
� permit � permits membership in the extended community for matching conditions
� deny � denies membership in the extended community for matching conditions
� extendedCommunity � extended community specified in the format:{rt | soo } { ASN:nn | ipAddress:nn }
� rt � specifies a route-target community; consists of one or more routers that can receive a set of routes advertised by BGP that carry the extended-community attribute
� soo � specifies a Site-of-Origin community; consists of one or more routers that injects a set of routes into BGP that carry the extended-community attribute
� ASN:nn � identifies the extended community by a 16-bit autonomous system number followed by a 32-bit integer
� ipAddress:nn � identifies the extended community identified by an IP address followed by a 32-bit integer
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Global Configuration
ip filter-options all
Description: Enables filtering of packets with IP options on an interface. IP options filtering is disabled by default. The no version disables filtering of packets with IP options.
Syntax: [ no ] ip filter-options all
Mode(s): Interface Configuration
ip ftp source-addressERX Edge Routers
179
ip ftp source-address
Description: Specifies an operational interface by IP address as the source interface in FTP packets sent via the system�s FTP client. The no version restores the source address in the FTP packets to that on which the FTP connection is made.
Syntax: ip ftp source-address sourceAddress
no ip ftp source-address [ sourceAddress ]
� sourceAddress � source IP address
Mode(s): Global Configuration
ip ftp source-interface
Description: Identifies an interface by type and location as the source interface in FTP packets sent via the system�s FTP client. The no version restores the source address in the FTP packets to that on which the FTP connection is made.
Syntax: ip ftp source-interface interfaceType interfaceSpecifier
no ip ftp source-interface [ interfaceType interfaceSpecifier ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Global Configuration
ip-hint
Description: When enabled, the ERX will preallocate an IP address for the remote (B-RAS) user before calling authentication.The address is then passed as a hint in the authentication request to the RADIUS server. The no version disables the feature.
Syntax: ip-hint { enable | disable }
no ip-hint
Mode(s): Domain Map Configuration
ip http access-class180
ip http access-class
Description: Allows only subscribers on a standard IP access list to connect to the HTTP local server. The no version removes the association between the access list and the HTTP local server.
Syntax: ip http access-class listName
no ip http access-class
� listName � name of the access list
Mode(s): Global Configuration
ip http max-connection-time
Description: Specifies the maximum time that the HTTP local server maintains an inactive connection. The no version restores the default time, 30 seconds.
Syntax: ip http max-connection-time seconds
no ip http max-connection-time
� seconds � time that the HTTP local server maintains a connection; either 0 (forever) or in the range 3�7200 seconds
Mode(s): Global Configuration
ip http not-found-url
Description: Specifies the Web page or message that appears if the subscriber requests a URL that is not available. The no version displays the standard HTTP message �404 not found.�
Syntax: ip http not-found-url { url | root-url }
no ip http not-found-url
� url � URL of the Web page that appears on the subscriber�s computer if the DHCP local server is not configured or enabled
� root-url � displays the root Web page
Mode(s): Global Configuration
ip http portERX Edge Routers
181
ip http port
Description: Specifies the port on which the HTTP local server receives connection attempts. The no version restores the default port number, 80.
Syntax: ip http port portNumber
no ip http port
� portNumber � number of the port on which connection attempts are received, in the range 0�65535
Mode(s): Global Configuration
ip http realm
Description: Specifies the name the Web browser displays to subscribers when the HTTP client requests the user information. The no version restores the default value, the name of the virtual router.
Syntax: ip http realm connectionName
no ip http realm
� connectionName � connection name that subscribers see when the HTTP client requests user information
Mode(s): Global Configuration
ip http root-refresh
Description: Specifies how often the browser updates the default internal starting (root) Web page. The no version restores the default time interval, 0 seconds.
Syntax: ip http root-refresh seconds
no ip http root-refresh
� seconds � time interval, in the range 0�65535 seconds, at which the default internal starting Web page is refreshed
Mode(s): Global Configuration
ip http root-url182
ip http root-url
Description: Specifies a URL external to the system for the starting (root) Web page that appears on the subscriber�s computer when the subscriber logs in. The no version restores the default internal URL as the starting Web page.
Syntax: ip http root-url url
no ip http root-url
� url � external URL of the Web page that appears on the subscriber�s computer when the connection to the HTTP local server is established
Mode(s): Global Configuration
ip http same-host-limit
Description: Specifies the maximum number of connections that can exist between one IP address and the HTTP local server. The no version restores the default number of allowed connections, 3.
Syntax: ip http same-host-limit maxConnections
no ip http same-host-limit
� maxConnections � maximum number of connections allowed between one IP address and the HTTP local server, in the range 0�1000
Mode(s): Global Configuration
ip http server
Description: Creates or enables the HTTP local server. The no version deletes or disables the HTTP local server.
Syntax: [ no ] ip http [ server ]
� server � enables or disables the HTTP local server. If you do not specify the keyword server, the command creates the HTTP local server and the no version removes the server.
Mode(s): Global Configuration
ip igmp
Description: Enables IGMPv2 on an interface. The no version disables IGMPv2 on an interface.
Syntax: [ no ] ip igmp
Mode(s): Interface Configuration, Profile Configuration
ip igmp access-groupERX Edge Routers
183
ip igmp access-group
Description: Restricts hosts on this subnet to joining multicast groups on the specified IP access list. The no version removes the association with the specified access list and allows hosts on the subnet to join any multicast group.
Syntax: ip igmp access-group accessListName
no ip igmp access-group
� accessListName � name of the access list; a string of up to 32 characters
Mode(s): Interface Configuration, Profile Configuration
ip igmp group limit
Description: Limits the number of IGMP groups that an interface can accept. The no version restores the default situation, in which there is no limit to the number of IGMP groups that the interface accepts.
Syntax: ip igmp group limit groupLimit
no ip igmp group limit
� groupLimit � maximum number of IGMP groups that an interface can accept in the range 0�64,000
Mode(s): Interface Configuration, Profile Configuration
ip igmp immediate-leave
Description: Removes an interface immediately when the router receives an leave group membership message from the host associated with this interface. The no version restores the default situation, in which the router issues query messages to multicast groups and removes an interface if the associated host does not return a group membership report within a certain length of time.
Caution: Issue this command only on IGMPv2 interfaces to which one IGMP client is connected. Do not issue this command to interfaces to which more than one IGMP client is connected.
Syntax: [ no ] ip igmp immediate-leave
Mode(s): Interface Configuration, Profile Configuration
ip igmp last-member query-interval184
ip igmp last-member query-interval
Description: Specifies in tenths of a second how long the system waits after receiving an IGMP leave message before it sends another query. The no version restores the default value, 10 tenths of a second (1 second).
Syntax: ip igmp last-member-query-interval tenthsOfaSecond
no ip igmp last-member-query-interval
� tenthsOfaSecond � time interval between receipt of an IGMP leave message and sending out of a query in the range 1�254 tenths of a second. Using a lower value allows members to leave groups more quickly.
Mode(s): Interface Configuration, Profile Configuration
ip igmp promiscuous
Description: Enables the specified interface to accept IGMP reports from hosts on any subnet. The no version specifies that an IGMP interface should use the Router Configuration mode setting (see the igmp promiscuous command) to determine from which subnets it can accept IGMP reports.
Syntax: ip igmp promiscuous { on | off }
no ip igmp promiscuous
� on � enables the interface to accept IGMP reports from hosts on any subnet
� off � allows the interface to accept IGMP reports only from hosts on subnets associated with this interface
Mode(s): Interface Configuration, Profile Configuration
ip igmp-proxy
Description: Enables IGMP proxy on an interface. The no version disables IGMP proxy for an interface.
Syntax: [ no ] ip igmp-proxy
Mode(s): Interface Configuration
ip igmp-proxy unsolicited-report-intervalERX Edge Routers
185
ip igmp-proxy unsolicited-report-interval
Description: Specifies how often the upstream interface should transmit unsolicited reports. This command has no effect on interfaces other than the upstream value. The no version transmits unsolicited reports using the default value, 400 seconds.
Note: Issue this command only on the upstream interface. Otherwise, this command will have no effect.
Syntax: ip igmp-proxy unsolicited-report-interval seconds
no ip igmp-proxy unsolicited-report-interval
� seconds � time interval at which the interface transmits unsolicited reports
Mode(s): Interface Configuration
ip igmp-proxy V1-router-present-time
Description: Specifies how long the system assumes that there is an IGMPv1 querier router on the subnet after the system receives an IGMP V1 query on this interface. The no version restores the default value, 10 seconds.
Syntax: ip igmp-proxy V1-router-present-time seconds
no ip igmp-proxy V1-router-present-time
� seconds � time for which the system assumes that there is an IGMPv1 querier router on the subnet after the system receives an IGMP V1 query on this interface
Mode(s): Interface Configuration
ip igmp querier
Description: Specifies that the interface will act as a querier when you configure IGMPv1 on an interface. The no version specifies that this interface will not issue query packets.
Note: This command is invalid for interfaces on which you configured IGMPv2.
Syntax: [ no ] ip igmp querier
Mode(s): Interface Configuration, Profile Configuration
ip igmp querier-timeout186
ip igmp querier-timeout
Description: Sets the time that the interface waits before declaring itself as the querier. The no version restores the default value, twice the query interval.
Syntax: ip igmp querier-timeout seconds
no ip igmp querier-timeout
� seconds � time interval between the last query from the previous router and the first query from this interface
Mode(s): Interface Configuration, Profile Configuration
ip igmp query-interval
Description: Sets how often the system sends IGMP host-query packets from this interface. The no version restores the default value, 125 seconds.
Syntax: ip igmp query-interval seconds
no ip igmp query-interval
� seconds � polling interval in the range 0�65535 seconds
Mode(s): Interface Configuration, Profile Configuration
ip igmp query-max-response-time
Description: Specifies the period in tenths of a second during which the host is expected to respond to an IGMP query. IGMP version 2 includes this value in IGMP query messages sent out on the interface. You cannot set this value on interfaces running IGMP version 1. The no version restores the default value of 10 tenths of a second (1 second).
Syntax: ip igmp query-max-response-time tenthsOfaSecond
no ip igmp query-max-response-time
� tenthsOfaSecond � time interval between receipt of an IGMP query and the response; the range is 1�254 tenths of a second.
Mode(s): Interface Configuration, Profile Configuration
ip igmp robustnessERX Edge Routers
187
ip igmp robustness
Description: Specifies the number of times that the system sends IGMP group-specific queries before declaring a group to no longer have any members on an interface. The no version restores the default value, 3.
Syntax: ip igmp robustness numberOfMessages
no ip igmp robustness
� numberOfMessages � number of times that the system sends IGMP group-specific queries in the range 1�4
Mode(s): Interface Configuration, Profile Configuration
ip igmp static-group
Description: Assigns an interface to handle all multicast traffic for a group. The interface sets no timers for this group. The no version removes the group from the interface.
Syntax: [ no ] ip igmp static-group groupAddress
� groupAddress � address of the group
Mode(s): Interface Configuration, Profile Configuration
ip igmp version
Description: Sets the IGMP version for the interface. The no version restores the default value, IGMPv2.
Syntax: ip igmp version { 2 | 1 }
no ip igmp version
2 � IGMP version 2
1 � IGMP version 1
Mode(s): Interface Configuration, Profile Configuration
ip ignore-df-bit
Description: Specifies that the system ignores the don�t-fragment bit if present in the IP header of packets crossing the configured interface; the system then fragments packets even if the bit is present. The no version restores the default behavior, which is to consider the DF bit before fragmenting.
Syntax: [ no ] ip ignore-df-bit
Mode(s): Interface Configuration
ip interface188
ip interface
Description: This command has only a no version. See the no ip interfacecommand for a complete description and syntax.
ip irdp
Description: Enables ICMP Router Discovery Protocol processing on an interface. The no version disables IRDP routing.
Syntax: [ no ] ip irdp
Mode(s): Interface Configuration, Subinterface Configuration
ip local pool
Description: Specifies the pool name, the starting address, the ending address, group name, the utilization threshold, and the SNMP trap flag. The no version deletes a local pool.
Syntax: [ no ] ip local pool name [ startIpAddress [ endIpAddress ][ warning highUtilization abatedUtilization ] [ snmpTrap ] ]
� name � text string in the range 1�16 characters that defines the name of the local address pool
� startIpAddress � starting IP address in the local address pool
� endIpAddress � ending IP address in the local address pool
� warning � specifies one of the following utilization warnings:
� highUtilization � high utilization value; a number in the range 1�100; default is 85
� abatedUtilization � abated utilization value; a number in the range 1�100; default is 75
� snmpTrap � enables SNMP pool utilization traps
Mode(s): Global Configuration
ip local pool snmpTrap
Description: Enables SNMP pool utilization traps. The no version disables SNMP pool utilization traps.
Syntax: [ no ] ip local pool name snmpTrap
� name � text string in the range 1�16 characters that defines the name of the local address pool
Mode(s): Global Configuration
ip local pool warningERX Edge Routers
189
ip local pool warning
Description: Use to identify the warning threshold values. The no version resets the thresholds to their default values.
Syntax: ip local pool name warning highUtilization abatedUtilization [ snmpTrap ]
no ip local pool name warning [ highUtilization abatedUtilization ]
� name � text string in the range 1�16 characters that defines the name of the local address pool
� highUtilization � high utilization value; a number in the range 1�100; default is 85
� abatedUtilization � abated utilization value; a number in the range 1�100; default is 75
� snmpTrap � enables snmp pool utilization traps
Mode(s): Global Configuration
ip mac-validate
Description: Enables MAC address validation on a per interface basis. The no version disables the feature.
Syntax: ip mac-validate [ strict | loose ]
no ip mac-validate
� strict � prevents transmission of IP packets that do not reside in the validation table
� loose � allows IP packets to pass through even though the packets do not have entries in the validation table; only packets that have matching IP�MAC pair entries in the table are validated
Mode(s): Interface Configuration
ip mask-reply
Description: Enables ICMP netmask reply. The no version disables the feature.
Syntax: [ no ] ip mask-reply
Mode(s): Interface Configuration, Subinterface Configuration
ip mpls forwarding-mode label-switched190
ip mpls forwarding-mode label-switched
Description: Generates a label for each different FEC that a BGP route points to in a BGP/MPLS VPN. The no version restores the default, generating a single label for all BGP routes sent from a given VRF.
Note: For some types of routes, the system always generates a per-VRF label, regardless of the status of this command. See ERX Routing Protocols Configuration Guide, Vol. 2, Chapter 3, Configuring BGP/MPLS VPNs, for details.
Syntax: [ no ] ip mpls forwarding-mode label-switched
Mode(s): VRF Configuration
ip mpls vpn-interface per-label
Description: Creates a VPN interface for each received stacked label in a BGP/MPLS VPN, enabling collection of statistics on a per-label basis. The no version restores the default, creating a VPN interface for each next-hop PE.
Note: Operating in per-label mode limits the number of egress FECs supported to the order of thousands.
Syntax: [ no ] ip mpls vpn-interface per-label
Mode(s): VRF Configuration
ip mtu
Description: Sets the maximum transmission unit size of IP packets sent on an interface. The no version restores the default value.
Syntax: [ no ] ip mtu [ mtuSize ]
� mtuSize � maximum number of packet transmissions permitted on an interface. The range is 128�10240. The default is 0, which means that the system takes the value from a lower protocol layer.
Mode(s): Interface Configuration, Subinterface Configuration, Profile Configuration
ip multicast-routing
Description: Enables IP multicast routing on the system. The no version disables IP multicast routing on the system.
Syntax: [ no ] ip multicast-routing
Mode(s): Global Configuration
ip multipath round-robinERX Edge Routers
191
ip multipath round-robin
Description: Specifies round-robin as the mode for ECMP load sharing on an interface. The no version restores the default value, hashed.
Syntax: [ no ] ip multipath round-robin
Mode(s): Subinterface Configuration
ip name-server
Description: Specifies a DNS name server that the system can query for hostname�to�IP address resolution. The no version deletes the name server.
Syntax: [ no ] ip name-server serverIpAddress [ serverIpAddress ]*
� serverIpAddress � IP address of a DNS name server
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Global Configuration
ip nfs
Description: Specifies the ERX interface that the current virtual router uses to exchange NFS communications with an NFS server. The no version prevents this interface from sending or receiving NFS communications for the current virtual router.
Syntax: ip nfs { source-address ipAddress | source-interface interfaceType interfaceSpecifier }
no ip nfs { source-address | source-interface }
� ipAddress � IP address of an ERX interface that sends and receives NFS communications
� interfaceType � ERX interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular ERX interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Mode(s): Global Configuration
ip nfs host192
ip nfs host
Description: Configures a remote host as an NFS server for the current virtual router. The no version disassociates the NFS server from the virtual router.
Syntax: ip nfs host hostName [ user userID [ group groupID ] ]
no ip nfs host hostName
� hostName � name of the remote host
� userID � user identity in the range 0�4294967295 that a user must enter to connect to the remote host; default is 2001
� groupID � group identity in the range 0�4294967295 that the user must enter to connect to the remote host; default is 100
Mode(s): Global Configuration
ip ospf authentication-key
Description: Assigns a password used by neighboring routers that are using OSPF simple password authentication. The no version deletes the password.
Syntax: ip ospf authentication-key authKey
no ip ospf authentication-key
� authKey � password; continuous string of characters up to 8 characters in length
Mode(s): Interface Configuration, Subinterface Configuration
ip ospf authentication message-digest
Description: Specifies that the authentication mode for the interface is MD5. The no version sets authentication for the interface to none, but leaves any configured MD5 key intact.
Syntax: [ no ] ip ospf authentication message-digest
Mode(s): Interface Configuration, Subinterface Configuration
ip ospf authentication-none
Description: Specifies that no authentication is to be used for the interface. The no version has no effect.
Syntax: ip ospf authentication-none
Mode(s): Interface Configuration, Subinterface Configuration
ip ospf costERX Edge Routers
193
ip ospf cost
Description: Specifies a cost metric for an interface. Used in the calculation of the SPF routing table. The no version resets the path cost to the default.
Syntax: [ no ] ip ospf cost intfCost
� intfCost � link state metric cost; number in the range 0�65535; default value is 10
Mode(s): Interface Configuration, Subinterface Configuration
ip ospf dead-interval
Description: Sets the time period during which the router�s neighbors do not see hello packets before they declare the router to be down. The no version resets the dead interval to its default.
Syntax: [ no ] ip ospf dead-interval deadInterval
� deadInterval � number in the range 1�65535 seconds; default value is 40 seconds
Mode(s): Interface Configuration, Subinterface Configuration
ip ospf hello-interval
Description: Specifies the interval between hello packets that the router sends on the interface. The no version resets the hello interval to its default.
Syntax: [ no ] ip ospf hello-interval helloInterval
� helloInterval � number in the range 1�65535 seconds; default value is 10 seconds
Mode(s): Interface Configuration, Subinterface Configuration
ip ospf message-digest-key md5194
ip ospf message-digest-key md5
Description: Enables OSPF MD5 authentication and configures the MD5 key. The no version deletes an MD5 key.
Syntax: ip ospf message-digest-key keyID md5 [ 0 | 8 ] msgDigestKey
no ip ospf message-digest-key keyID
� keyID � key identifier in the range 1�255
� md5 � specifies use of the MD5 algorithm
� 0 � indicates the msgDigestKey is entered in unencrypted form (plaintext); this is the default option
� 8 �indicates the msgDigestKey is entered in encrypted form (ciphertext)
� msgDigestKey � OSPF password; a continuous string of up to 16 alphanumeric characters
Note: If all the MD5 keys have been deleted, the authentication type is still MD5, but you must configure MD5 keys.
Note: To disable MD5 authentication for the interface, use the ip ospf authentication-none command.
Note: To display the password only in encrypted text, use the service password-encryption command.
Mode(s): Interface Configuration, Subinterface Configuration
ip ospf network
Description: Configures the OSPF network type to something other than the default for the network medium. The no version restores the default value for the medium.
Syntax: ip ospf network { broadcast | non-broadcast | point-to-point }
no ip ospf network
� broadcast � sets the network type to broadcast
� non-broadcast � sets the network type to NBMA
� point-to-point � sets the network type to point-to-point
Mode(s): Interface Configuration, Subinterface Configuration
ip ospf priorityERX Edge Routers
195
ip ospf priority
Description: Sets the router priority. Used in determining the designated router for the particular network. This designation applies only to multiaccess networks. Every broadcast and nonbroadcast multiaccess network has a designated router. The no version restores the default value.
Syntax: [ no ] ip ospf priority intfPriority
� intfPriority � priority value, an 8-bit number in the range 1�255; default value is 1
Mode(s): Interface Configuration, Subinterface Configuration
ip ospf retransmit-interval
Description: Specifies the time between LSA retransmissions for the interface when an acknowledgment for the LSA is not received. The no version restores the default value.
Syntax: [ no ] ip ospf retransmit-interval retransInterval
� retransInterval � number in the range 1�65535 seconds; default value is 5 seconds
Mode(s): Interface Configuration, Subinterface Configuration
ip ospf shutdown
Description: Disables OSPF on an interface. The no version enables OSPF on the interface.
Syntax: [ no ] ip ospf shutdown
Mode(s): Interface Configuration, Subinterface Configuration
ip ospf transmit-delay
Description: Sets the estimated time it takes to transmit a link state update packet on the interface. The no version restores the default value.
Syntax: [ no ] ip ospf transmit-delay transmDelay
� transmDelay � link state transmit delay, a number in the range 1�65535 seconds; default value is 1 second
Mode(s): Interface Configuration, Subinterface Configuration
ip pim196
ip pim
Description: Enables PIM on an interface. The no version disables PIM on an interface.
Syntax: [ no ] ip pim [ dense-mode | sparse-mode | sparse-dense-mode ]
� dense-mode � enables PIM in dense mode
� sparse-mode � enables PIM in sparse mode
� sparse-dense-mode � enables PIM in sparse-dense mode
Mode(s): Interface Configuration
ip pim query-interval
Description: Specifies how often the system sends PIM router query messages from this interface. The no version specifies the default time interval, 30 seconds.
Syntax: ip pim query-interval queryTime
no ip pim query-interval
� queryTime � interval in the range 0�210 seconds at which the system sends PIM router query messages from this interface
Mode(s): Interface Configuration
ip pim rp-address
Description: Specifies a static PIM group�to�RP mapping. The no version clears the mapping from this interface.
Syntax: [ no ] ip pim rp-address ipAddress [ ipAccessList ] [ override ]
� ipAddress � IP address of the system you want to designate as an RP router
� ipAccessList � name of the IP access list that specifies which multicast groups use this RP
� override � specifies that this static RP mapping has priority over group-to-RP mappings learned by auto-RP
Mode(s): Configuration Mode
ip pim send-rp-announceERX Edge Routers
197
ip pim send-rp-announce
Description: Sends autoRP announcement messages from a system you configured as an RP. The no version clears the filter from this interface.
Syntax: ip pim send-rp-announce interfaceType interfaceSpecifier scope ttl [ group-list ipAccessList] [ interval seconds ]
no ip pim send-rp-announce interfaceType interfaceSpecifier [ group-list ipAccessList ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. The autoRP announcement messages will contain the IP address for this interface.
� ttl � time-to-live value; the number of hops for which the announcement is valid
� ipAccessList � name of the IP access list that specifies which multicast groups use this RP
� seconds � time interval at which the system sends the announcements; default interval is 60 seconds
Mode(s): Configuration Mode
ip pim send-rp-discovery scope
Description: Configures the system as an RP mapping agent, which records RP-to-group mappings and notifies PIM DRs about the mappings. The no version stops the system from acting as an RP mapping agent.
Syntax: ip pim send-rp-discovery scope ttl [ interfaceType interfaceSpecifier ]
no ip pim send-rp-discovery
� ttl � time-to-live value; number of hops for which the RP discovery message is valid. Specify a value that covers the PIM domain.
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. If you specify an interface, the autoRP discovery messages will contain the IP address for this interface.
Mode(s): Configuration Mode
ip pim spt-threshold198
ip pim spt-threshold
Description: Specifies the network configuration that PIM SM uses when a source starts sending multicast messages. The no version restores the default value, 0.
Syntax: [ no ] ip pim spt-threshold { 0 | nonzero_integer | infinity } [ group-list ipAccessList ]
� 0 � configures PIM SM to switch to an SPT when a source begins to send multicast messages
� nonzero_integer � integer in the range 1�4294967294; prevents PIM SM from switching from a shared tree to an SPT
� infinity � prevents PIM SM from switching from a shared tree to an SPT
� ipAccessList � name of the IP access list that specifies the groups to which the threshold applies
Mode(s): Global Configuration
ip policy
Description: Assign a policy list to the ingress or egress of an interface. If you execute a policy command and the policy list does not exist, the system creates a policy list with no rules, the default. When no rules are found in a policy list, the system performs a routing table lookup and forwards packets on the interface based on the routing table information. You must specify the input or output keyword to assign the policy list to the ingress or egress of the interface. The no version removes the association between a policy list and an interface.
Syntax: [ no ] ip policy { input | local-input | output} policyName [ statistics { enabled [ baseline { enabled | disabled } ] | disabled } ]
� input � apply policy to data arriving at this interface
� local-input � apply policy to data that arrives at this interface but is addressed to a local interface
� output � apply policy to data leaving this interface
� policyName � name of the policy; a maximum of 16 characters
� statistics � enable or disable collection of policy routing statistics
� enabled � enable collection of policy routing statistics
� baseline enabled � enables baselining of policy routing statistics
� baseline disabled � disables baselining of policy routing statistics
� disabled � disable collection of policy routing statistics
Mode(s): Interface Configuration
ip prefix-listERX Edge Routers
199
ip prefix-list
Description: Creates a prefix list for route filtering; specifies a list entry�a permit or deny clause for a network address. The no version removes the specified prefix list or the specified list entry.
Syntax: ip prefix-list listName { description desc |[ seq sequence ] { permit | deny } ipPrefix [ ge geNumber ] [ le leNumber ] }
no ip prefix-list listName [ description | [ seq sequence ] [ { permit | deny } ipPrefix [ ge geNumber ] [ le leNumber ] ] ]
� listName � name of the prefix list; a string of up to 32 characters
� desc � description of the prefix list
� sequence � number in the range 0�65535 that indicates the position the prefix list entry is to have in the list of entries already configured for the prefix list. If given with the no version of this command, it specifies the position of the list entry to be deleted. If sequence is not specified, the value of the last sequence number + 5 is used.
� permit � if the prefix of the route being filtered matches the specified prefix and permit is specified, the route is redistributed as controlled by the set actions
� deny � if the prefix of the route being filtered matches the specified prefix and deny is specified, the route is not redistributed
� ipPrefix � network route to be filtered, in the format network/length, where
� network � base address of the network route to be filtered; for example, 192.168.32.0 or 10.10.0.0
� length � length of the network prefix; number of bits masking base address to produce address to be matched
� geNumber � route being filtered matches if its prefix is within the range specified: greater than or equal to geNumber and less than or equal to 32
� leNumber � route being filtered matches if its prefix is within the range specified: greater than or equal to length and less than or equal to leNumber
Mode(s): Global Configuration
ip prefix-tree200
ip prefix-tree
Description: Creates a prefix tree for best-match route filtering; specifies a tree entry�a deny or permit clause for a network address. The no version removes the specified prefix tree or the specified tree entry.
Syntax: ip prefix-tree treeName { description desc | { permit | deny } ipPrefix }
no ip prefix-tree treeName [ description | { permit | deny } ipPrefix ]
� treeName � name of the prefix list; a string of up to 32 characters
� desc � description of the prefix list
� deny � if the prefix of the route being filtered matches the specified prefix and deny is specified, the route is not redistributed
� permit � if the prefix of the route being filtered matches the specified prefix and permit is specified, the route is redistributed as controlled by the set actions
� ipPrefix � network route to be filtered, in the format network/length, where
� network � base address of the network route to be filtered; for example, 192.168.32.0 or 10.10.0.0
� length � length of the network prefix; number of bits masking base address to produce address to be matched
Mode(s): Router Configuration
ip proxy-arp
Description: Enables proxy ARP on an Ethernet or bridge1483 interface. Proxy ARP is enabled by default. The no version disables proxy ARP on an Ethernet or bridge1483 interface.
Syntax: ip proxy-arp [ restricted | unrestricted ]
no ip proxy-arp
� restricted � restricts proxy-arp to hosts on the local interface
� unrestricted � enables proxy-arp for all reachable hosts
Mode(s): Interface Configuration, Subinterface Configuration
ip redirects
Description: Enables the sending of redirect messages if the software is forced to resend a packet through the same interface on which it was received. The no version disables the sending of redirect messages.
Syntax: [ no ] ip redirects
Mode(s): Interface Configuration, Subinterface Configuration, Profile Configuration
ip refresh-routeERX Edge Routers
201
ip refresh-route
Description: Reinstalls routes removed from the IP routing table by the clear ip route command. There is no no version.
Syntax: ip refresh-route [ vrf vrfName ]
� vrfName � name of the VRF; string of 1�32 alphanumeric characters
Mode(s): Privileged Exec
ip rip
Description: Configures RIP to run on the network specified by the network command. Uses the default values: send version is RIP version 1, receive version is RIP version 1 and version 2, authentication is not enabled. The no version deletes the RIP interface.
Syntax: [ no ] ip rip
Mode(s): Interface Configuration, Subinterface Configuration
ip rip authentication key
Description: Specifies the password for text authentication and the key for MD5 authentication. The no version clears the key for the interface. Supported only in RIP version 2. Authentication is disabled by default.
Syntax: ip rip authentication key [ 0 | 8 ] authkey
no ip rip authentication key
� 0 � the authKey is entered in unencrypted form (plaintext); this is the default option
� 8 � the authKey is entered in encrypted form (ciphertext)
� authkey � password sent with RIP messages or the key used to encrypt/decrypt RIP messages, depending on the authentication mode set for this interface
Mode(s): Interface Configuration, Subinterface Configuration
ip rip authentication mode202
ip rip authentication mode
Description: Specifies the type of authentication used on this interface. The no version removes authentication from the interface. Supported only in RIP version 2. Authentication is disabled by default.
Syntax: ip rip authentication mode { text | md5 keyID }
no ip rip authentication mode
� text � a simple text password is sent with each RIP message. If the password is not possessed by neighbors, the message is rejected.
� md5 � MD5 message-digest algorithms are used to encrypt and compress the RIP message.
� keyID � number identifying the MD5 key. Neighbors must share the MD5 key to decrypt the message and encrypt the response.
Mode(s): Interface Configuration, Subinterface Configuration
ip rip receive version
Description: Restricts the RIP version that the system can receive on an interface. The no version sets the interface back to the default value, receiving both RIP version 1 and version 2.
Syntax: ip rip receive version { 1 | 2 | 1 2 | 2 1 | off }
no ip rip receive version
� 1 � specifies RIP version 1 only
� 2 � specifies RIP version 2 only
� 1 2 � specifies RIP version 1 and version 2
� 2 1 � specifies RIP version 2 and version 1
� off � turns reception off
Mode(s): Interface Configuration, Subinterface Configuration
ip rip send versionERX Edge Routers
203
ip rip send version
Description: Restricts the RIP version that the system can send on an interface. The no version sets the interface back to the default value, sending only RIP version 1.
Syntax: ip rip send version { 1 | 2 | 1 2 | 2 1 | off }
no ip rip send version
� 1 � specifies RIP version 1 only
� 2 � specifies RIP version 2 only
� 1 2 � specifies RIP version 1 and version 2
� 2 1 � specifies RIP version 2 and version 1
� off � turns reception off
Mode(s): Interface Configuration, Subinterface Configuration
ip route
Description: Establishes static routes. The no version removes static routes.
Syntax: ip route [ vrf vrfName ] ipAddress ipMask { ipNextHop [ InterfaceType interfaceSpecifier ] |interfaceType interfaceSpecifier } [ distance ] [ tag tagVal ] [ permanent ]
no ip route [ vrf vrfName ] ipAddress ipMask [ ipNextHop | interfaceType interfaceSpecifier ] [ distance ]
� vrfName � name of the VRF if the static route is being established within a VRF context
� ipAddress � destination IP address
� ipMask � IP mask for the destination
� ipNextHop � IP address of the next hop that can be used to reach the destination network
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
� distance � administrative distance metric for this route in the range 0�254
� tagVal � number in the range 0�255 that identifies the tag for this route
� permanent � specifies that the route will not be removed, even if the interface shuts down
Mode(s): Global Configuration
ip router-id204
ip router-id
Description: Establishes the IP address of a router. The no version removes the IP address assignment.
Syntax: [ no ] ip router-id [ vrfName ] ipAddress
� vrfName � name of the VRF; string of 1�32 alphanumeric characters
� ipAddress � IP address of the router
Mode(s): Global Configuration
ip router isis
Description: Configures an IS-IS routing process for IP on an interface. The no version disables IS-IS for IP on the interface.
Syntax: [ no ] ip router isis [ tag ]
� tag � meaningful name for a routing process. If not specified, a null tag is assumed. The name must be unique among all IP router processes for a given router. Use the same text for the argument tag as specified in the router isis command.
Mode(s): Interface Configuration, Subinterface Configuration
ip route-type
Description: Specifies whether BGP, IS-IS, OSPF, or RIP routes are available only for unicast forwarding, only for multicast reverse path forwarding checks, or for both. The no version restores the default value, unicast for BGP or both for IS-IS, OSPF, and RIP.
Syntax: For BGP:
ip route-type [ unicast | | both ]
no ip route-type
For IS-IS, OSPF, and RIP:
ip route-type [ unicast | multicast | both ]
no ip route-type
� unicast � specifies that routes for the protocol are available only for unicast forwarding
� multicast � specifies that routes for the protocol are available only for multicast route path forwarding checks; this option is not available for BGP
� both � specifies that routes for the protocol are available for both unicast forwarding and multicast route path forwarding checks
Mode(s): Router Configuration
ip rpf-routeERX Edge Routers
205
ip rpf-route
Description: Customizes static routes that the system can use to verify source addresses in multicast packets. The no version removes the static route.
Syntax: ip rpf-route ipAddress addressMask { nextHopIpAddress | nextHopInterfaceType nextHopInterfaceSpecifier } [ distanceValue ] [ tag tagValue ]
[ no ] rpf-route ipAddress address-mask
� ipAddress � IP address of the destination network
� addressMask � subnet mask for the destination network
� nextHopIpAddress � IP address of the next hop
� nextHopInterfaceType � interface type; see Interface Types and Specifiers in About This Guide
� nextHopInterfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� distanceValue � number in the range 0�255 that indicates the preference for this route
� tagValue � number in the range 0�4294967295 that identifies the route in the routing table
Mode(s): Global Configuration
ip rsvp bandwidth
Description: Specifies the total bandwidth reservable on the interface in a non-ERX implementation. See the mpls bandwidth command for a complete description and syntax.
ip sa-validate
Description: Enables source address validation on an interface. This feature verifies that a packet has been sent from a valid source address. When a packet arrives on an interface, the system performs a route-table lookup using the source address. The result from the route-table lookup is an interface to which packets destined for that address are routed. This interface must match the interface that the packet arrived on. If it does not match, the system drops the packet.The no version disables source address validation.
Syntax: [ no ] ip sa-validate
Mode(s): Interface Configuration
ip share-interface206
ip share-interface
Description: Specifies the layer 2 interface used by a shared IP interface in the current virtual router. The no version removes the association between the layer 2 interface and the shared IP interface.
Syntax: ip share-interface interfaceType interfaceSpecifier
no ip share-interface
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Mode(s): Interface Configuration
ip share-nexthop
Description: Specifies that the shared IP interface dynamically tracks a next hop for the specified destination. The no version halts tracking of the next hop.
Syntax: ip share-nexthop ipAddress [ virtual-router vrName ]
no ip share-nexthop
� ipAddress � IP address of the destination for which the next hop is tracked
� vrName � name of the virtual router for the next hop
Mode(s): Interface Configuration
ip shutdown
Description: Shuts down an IP interface. The no version restarts the interface.
Syntax: [ no ] ip shutdown
Mode(s): Interface Configuration, Subinterface Configuration
ip source-prefix
Description: Configures a subscriber interface to demultiplex traffic with the specified IP address and mask. The no version removes the association between the subscriber interface and the specified IP address and mask.
Syntax: [ no ] ip source-prefix ipAddress ipAddressMask
� ipAddress � IP address of the physical interface that receives messages for this subscriber
� ipAddressMask � network mask for associated IP subnet
Mode(s): Interface Configuration
ip source-routeERX Edge Routers
207
ip source-route
Description: Enables the forwarding of source-routed packets. The no version disables forwarding. Forwarding is enabled by default.
Syntax: [ no ] ip source-route [ vrfName ]
� vrfName � name of the VRF; string of 1�32 alphanumeric characters
Mode(s): Interface Configuration
ip speed
Description: Sets the speed of an IP interface in bits per second. The no version restores the default value, 0 bps.
Syntax: [ no ] ip speed adminSpeed
� adminSpeed � speed of the interface in bps in the range 1�4294967295
Mode(s): Interface Configuration, Subinterface Configuration
ip split-horizon
Description: Enables split horizon, preventing the RIP router from advertising routes from the interface originating the route, reducing the possibility of routing loops; this is the default condition. The no version disables split horizon.
Syntax: [ no ] ip split-horizon
Mode(s): Interface Configuration, Subinterface Configuration
ip ssh authentication-retries
Description: Sets the number of times that a user can retry a failed authentication (such as trying to correct a wrong password) before the server terminates the connection. The no version restores the default value of 20 retries.
Syntax: ip ssh authentication-retries retryLimit
no ip ssh authentication-retries
� retryLimit � number of times authentication can be retried after the initial failure within a given connection attempt
Mode(s): Global Configuration
ip ssh crypto208
ip ssh crypto
Description: Adds an encryption algorithm to the specified list of supported algorithms. The no version removes or excludes an algorithm from the specified list. The default version restores the default algorithms for the specified list.
Syntax: ip ssh crypto [ client-to-server | server-to-client ] [ no | default ] cipherAlgorithm
� client-to-server � adds the specified algorithm to the SSH server�s list of supported inbound algorithms
� server-to-client � adds the specified algorithm to the SSH server�s list of supported outbound algorithms
� no � removes or excludes the specified algorithm from the list
� default � restores the specified list to the factory defaults, which includes 3des-cbc, twofish-cbc, and blowfish-cbc
� cipherAlgorithm � algorithm to add to the list
Mode(s): Global Configuration
ip ssh disable-user-authentication
Description: Disables RADIUS password authentication, resulting in the acceptance of all SSH clients that pass protocol negotiation.
Syntax: [ no ] ip ssh disable-user-authentication
Mode(s): Global Configuration
ip ssh mac
Description: Adds a MAC algorithm to the specified list of supported algorithms. The no version removes or excludes an algorithm from the specified list. The default version restores the default algorithms for the specified list.
Syntax: ip ssh mac [ client-to-server | server-to-client ] [ no | default ] macAlgorithm
� client-to-server � adds the specified algorithm to the SSH server�s list of supported inbound algorithms
� server-to-client � adds the specified algorithm to the SSH server�s list of supported outbound algorithms
� no � removes or excludes the specified algorithm from the list
� default � restores the specified list to the factory defaults, which includes hmac-md5, hmac-sha1, and hmac-sha1-96
� macAlgorithm � algorithm to add to the list
Mode(s): Global Configuration
ip ssh sleepERX Edge Routers
209
ip ssh sleep
Description: Sets a sleep period in seconds for users that have exceeded the authentication retry limit. Connection attempts from the user at the same host are denied until this period expires. The no version restores the default value of 600 seconds.
Syntax: ip ssh sleep sleepPeriod
no ip ssh sleep
� sleepPeriod � period in seconds
Mode(s): Global Configuration
ip ssh timeout
Description: Sets a timeout period in seconds. The SSH server terminates the connection if protocol negotiation�including user authentication�is not complete within this timeout. The no version restores the default value of 600 seconds.
Syntax: ip ssh timeout timeout
no ip ssh timeout
� timeout � period in the range 10�600 seconds
Mode(s): Global Configuration
ip summary-address
Description: Summarizes specified addresses for RIP. The no version removes the summarization.
Syntax: ip summary-address [ rip ] ipAddress ipAddressMask [ metric ]
no ip summary-address [ rip ] ipAddress ipAddressMask
� rip � optional keyword for compatibility with non-ERX implementations
� ipAddress � IP address identifying the route to be summarized
� ipAddressMask � network mask identifying the route to be summarized
� metric � specifies a metric for the summary address; the default is 1
Mode(s): Router Configuration
ip ttl210
ip ttl
Description: Sets the hop count specified by the TTL field in the IP header used by IP for all operations unless overridden by another command. The no version restores the default value, 127.
Syntax: ip ttl [ vrfName ] ttlValue
no ip ttl [ vrfName ]
� vrfName � name of the VRF; string of 1�32 alphanumeric characters
� ttlValue � number in the range 1�255
Mode(s): Global Configuration
ip tunnel reassembly
Description: Enables the reassembly of fragmented IP tunnel packets that are received on the current virtual router. The no version restores the default of disabled.
Syntax: [ no ] ip tunnel reassembly
Mode(s): Global Configuration
ip unnumbered
Description: Enables IP processing on an interface without assigning an explicit IP address to the interface. The no version disables IP processing on the interface.
Syntax: [ no ] ip unnumbered interfaceType interfaceSpecifier
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Mode(s): Interface Configuration, Subinterface Configuration, Profile Configuration
ip unreachables
Description: Enables the generation of an ICMP unreachable message when a packet is received that cannot be delivered by the router. The no version disables this function.
Syntax: [ no ] ip unreachables
Mode(s): Interface Configuration, Subinterface Configuration
ip virtual-routerERX Edge Routers
211
ip virtual-router
Description: Specifies a virtual router in an IP profile. Dynamic interfaces created with the profile are assigned to this VR. The no version removes the VR from the profile; if a VR is not specified via RADIUS, then any subsequent creation process for dynamic interfaces using the profile fails.
Syntax: [ no ] ip virtual-router vrName
� vrName � name of the virtual router; a string of 1�15 alphanumeric characters
Mode(s): Profile Configuration
ip vpn-id
Description: Associates a VPN ID with the virtual router. The no version removes the VPN ID from the virtual router.
Syntax: ip vpn-id [ vrfName ] oui ouiNumber index ipAddress
no ip vpn-id [ vrfName ]
� vrfName � name of the VRF; string of 1�32 alphanumeric characters
� ouiNumber � identifies the OUI portion of the VPN ID, ranges from 0�16777215
� ipAddress � IP address that identifies the index portion of the VPN ID
Mode(s): Global Configuration
ip vrf
Description: Creates a VRF or accesses VRF Configuration mode to configure a VRF. The no version deletes the VRF.
Note: After creating the VRF, you must configure a route distinguisher for it via the rd command; otherwise, the VRF will not operate.
Syntax: [ no ] ip vrf vrfName
� vrfName � name of the VRF; a string of 1�32 alphanumeric characters
Mode(s): Global Configuration
ip vrf forwarding212
ip vrf forwarding
Description: Assigns a VRF to an interface or subinterface. The no version removes the assignment.
Syntax: [ no ] ip vrf forwarding vrfName
� vrfName � name of the VRF; a string of 1�32 alphanumeric characters
Mode(s): Global Configuration
ip vrrp
Description: Creates a VRRP instance ID. The no version removes a VRID. The default is disabled.
Syntax: [ no ] ip vrrp vrid
� vrid � VRID identifier; a number in the range 1�255
Mode(s): Interface Configuration
ip vrrp advertise-interval
Description: Configures the VRRP advertisement interval time. You must use seconds to comply with RFC 2338. Use milliseconds only if all VRRP instances peering for the given VRID are composed of ERX systems. The no version restores the default value of 1 second.
Syntax: ip vrrp vrid advertise-interval advertiseInterval [ seconds | milliseconds ]
no ip vrrp vrid advertise-interval
� vrid � VRID identifier; a number in the range 1�255
� advertiseInterval � the advertisement period in seconds or milliseconds; 1�255 seconds; 100�255000 milliseconds
� seconds � specify interval in seconds
� milliseconds � specify interval in milliseconds
Mode(s): Interface Configuration
ip vrrp authentication-keyERX Edge Routers
213
ip vrrp authentication-key
Description: Specify the authentication key. This command is only valid if the text keyword was selected in the ip vrrp authentication-type command. The no version negates the command or restores the default.
Syntax: ip vrrp vrid authentication-key key
no ip vrrp vrid authentication-key
� vrid � VRID identifier; a number in the range 1�255
� key � string of 1�8 characters
Mode(s): Interface Configuration
ip vrrp authentication-type
Description: Specifies the VRRP authentication type. The no version restores the default value, none.
Syntax: ip vrrp vrid authentication-type { none | text }
no ip vrrp vrid authentication-type
� vrid � VRID identifier; a number in the range 1�255
� none � authentication disabled
� text � simple text password
Mode(s): Interface Configuration
ip vrrp enable
Description: Enables a VRID. The no version disables a VRID. The default is disabled.
Syntax: [ no ] ip vrrp vrid [ enable ]
� vrid � VRID identifier; a number in the range 1�255
Mode(s): Interface Configuration
ip vrrp preempt
Description: Enables VRRP preemption. The no version disables VRRP preemption. The default is enabled.
Syntax: [ no ] ip vrrp vrid preempt
� vrid � VRID identifier; a number in the range 1�255
Mode(s): Interface Configuration
ip vrrp priority214
ip vrrp priority
Description: Configures the priority of VRRP routers. The no version restores the default value, 100.
Syntax: ip vrrp vrid priority priorityValue
no ip vrrp vrid priority
� vrid � VRID identifier; a number in the range 1�255
� priorityValue � priority value of the VRRP router; a number in the range 1�255; default is 100
Mode(s): Interface Configuration
ip vrrp virtual-address
Description: Associates an IP address to a VRID. The no version removes a list of IP addresses associated with a VRID. The no version clears the auto flag, if auto addresses are being used. There is no default.
Syntax: ip vrrp vrid virtual-address { auto | ipAddress ipAddress [ ipAddress ipAddress ]* }
no ip vrrp vrid virtual-address [ ipAddress ipAddress ]*
� vrid � VRID identifier; a number in the range 1�255
� ipAddress � the IP address that associates to the VRID
Mode(s): Interface Configuration
ipsec clear sa
Description: Refreshes ISAKMP/IKE or IPSec SAs. There is no no version.
Syntax: ipsec clear sa { all [ state tunnelState ] | tunnel tunnelName } [ phase {1 | 2 } ]
� all � reinitializes all SAs
� state � reinitializes SAs on tunnels that are in a specific state
� tunnelState � state of tunnel, up, down, not-present
� tunnel � specifies that an SA on a specific tunnel is to be reinitialized
� tunnelName � name of tunnel
� phase � specifies one of the following types of tunnel to be reinitialized:
� 1 � ISAKMP/IKE tunnels
� 2 � IPSec tunnels
Mode(s): Global Configuration
ipsec isakmp-policy-ruleERX Edge Routers
215
ipsec isakmp-policy-rule
Description: Defines and prioritizes an ISAKMP/IKE policy. ISAKMP/IKE policies define parameters to be used during ISAKMP/IKE negotiation. You can have up to 10 ISAKMP/IKE policies per system. The no version removes a policy. If you do not include a priority number with the no version, the software removes all ISAKMP/IKE policies.
Syntax: ipsec isakmp-policy-rule priority
no ipsec isakmp-policy-rule [ priority ]
� priority � identifies and prioritizes the ISAKMP/IKE policy; the range is 1�10000, with 1 having the highest priority
Mode(s): Global Configuration
ipsec key manual
Description: Specifies that a peer use a manual key for authentication and displays the prompt from which you can enter manual keys. Manually configured keys are used during the tunnel establishment phase when the ISAKMP/IKE policy specifies either preshared key authentication or encrypted nonce authentication. The no version deletes a manually configured key.
Note: You must enter this command in the virtual router context where the IP address of the peer is defined.
Syntax: [ no ] ipsec key manual { pre-share } ipAddress
� pre-share � specifies preshared manual keys as the authentication method
� ipAddress � address of the peer for which the key can be used
Mode(s): Global Configuration
ipsec lifetime
Description: Specifies the default lifetime in volume of traffic and/or seconds. The default lifetime applies to secure tunnels that do not have a tunnel lifetime defined. When either the volume of traffic or number of seconds limit is reached, IPSec renegotiates the SA. The no version restores the default values.
Syntax: [ no ] ipsec lifetime { kilobytes kilobytes | seconds seconds }
� kilobytes � volume of traffic in kilobytes that can pass between IPSec peers before the SA expires; the range is 102400�4294967295; the default is 4294967295 kilobytes; a setting of zero turns off the kilobyte lifetime
� seconds � number of seconds an SA lives before expiring; the range is 7200�4294967295; the default is 28800 seconds (8 hours)
Mode(s): Global Configuration
ipsec local-endpoint216
ipsec local-endpoint
Description: Defines a default local endpoint used for ISAKMP/IKE negotiations and all IPSec tunnels for a transport virtual router. The no version restores the default settings of the local endpoint.
Syntax: [ no ] ipsec local-endpoint ipAddress transport-virtual-router transportVRName
� ipAddress � IP address to use as the local endpoint
� transportVRName � name of transport virtual router in which the IP address is defined
Mode(s): Global Configuration
ipsec transform-set
Description: Creates a transform set. Transform sets used for manually configured tunnels can have only one transform. Transform sets used for signaled tunnels can have up to six transforms. Transforms are numbered in a priority sequence in the order in which you enter them. The no version deletes the transform set.
Each transform provides a different combination of data authentication and confidentiality. Use the online Help to view available transforms.
Syntax: ipsec transform-set transformSetName transform0 [ transform1 [ transform2 [ transform3 [ transform4 [ transform5 ] ] ] ] ]
no ipsec transform-set transformSetName
� transformSetName � name of the transform set
� transform0 through transform5 � AH or ESP transform
Mode(s): Global Configuration
isis authentication-key
Description: Assigns a password for IS-IS level 1 and level 2 hellos used by neighboring routers that are using IS-IS password authentication. The no version deletes the password.
Syntax: isis authentication-key [ level-1 | level-2 ] authKey
no isis authentication-key [ level-1 | level-2 ]
� level-1 � inserts the password into level 1 hello packets
� level-2 � inserts the password into level 2 hello packets
� authKey � a password, a continuous string of characters up to 8 characters in length
Mode(s): Interface Configuration, Subinterface Configuration
isis circuit-typeERX Edge Routers
217
isis circuit-type
Description: Use to configure the type of adjacency desired for the specified interface. The no version resets the circuit type to level 1 and level 2.
Syntax: isis circuit-type [ level-1 | level-1-2 | level-2-only ]
no isis circuit-type
� level-1 � establishes a level 1 adjacency if there is at least one area address in common between this system and its neighbors
� level-1-2 � (default) establishes a level 1 and 2 adjacency if the neighbor is also configured as a level 1-2 router and there is at least one area in common. If there is no area in common, a level 2 adjacency is established.
� level-2-only � establishes a level 2 adjacency on the circuit. If the neighboring router is a level 1 only router, no adjacency will be established.
Mode(s): Interface Configuration, Subinterface Configuration
isis csnp-interval
Description: Configures the IS-IS CSNP interval for the specified interface. The no version restores the default value.
Syntax: isis csnp-interval seconds [ level-1 | level-2 ]
no isis csnp-interval [ seconds ] [ level-1 | level-2 ]
� seconds � number in the range 0�65535; the interval of time in seconds between the transmission of CSNPs on multiaccess networks for the designated router; default is 10 seconds, except for WAN interfaces, where the default is 0
� level-1 � sets the interval of time between transmission of CSNPs for level 1 independently
� level-2 � sets the interval of time between transmission of CSNPs for level 2 independently
Mode(s): Interface Configuration, Subinterface Configuration
isis hello-interval218
isis hello-interval
Description: Specifies the length of time in seconds between hello packets that the router sends on the specified interface. The no version restores the default value.
Syntax: isis hello-interval seconds [ level-1 | level-2 ]
no isis hello-interval [ seconds ] [ level-1 | level-2 ]
� seconds � number in the range 0�65535; a value equal to the hello multiplier times the hello interval seconds is advertised as the holdtime in the hello packets transmitted; the default is 10 seconds. The value must be the same for all routers attached to a common network. With smaller hello intervals, topological changes are detected faster, but there is more routing traffic.
� level-1 � sets the hello-interval for level 1 independently
� level-2 � sets the hello-interval for level 2 independently
Mode(s): Interface Configuration, Subinterface Configuration
isis hello-multiplier
Description: Specifies the number of IS-IS hello packets a neighbor must miss before the router should declare the adjacency to be down. The no version restores the multiplier default value of 3.
Syntax: isis hello-multiplier multiplier [ level-1 | level-2 ]
no isis hello-multiplier [ multiplier | level-1 | level-2 ]
� multiplier � number in the range 3�1000; the default is 3. The advertised hold time in IS-IS hellos will be set to the hello-multiplier times the hello-interval. Neighbors will declare an adjacency to this router to be down after not having received any IS-IS hellos during the advertised hold time. The hold time (and thus the hello-multiplier and the hello-interval) can be set on a per interface basis, and can be different between different routers in one area. Using a smaller hello-multiplier will give fast convergence, but can result in more routing instability. Increment the hello-multiplier to a larger value to help network stability when needed. Never configure a hello-multiplier lower than the default.
� level-1 � sets the hello-multiplier independently for level 1 adjacencies
� level-2 � sets the hello-multiplier independently for level 2 adjacencies
Mode(s): Interface Configuration, Subinterface Configuration
isis lsp-intervalERX Edge Routers
219
isis lsp-interval
Description: Configures the time delay between successive IS-IS link state packet transmissions. The no version restores the default value of 33 milliseconds.
Syntax: isis lsp-interval milliseconds
no isis lsp-interval
� milliseconds � number of milliseconds in the range 1�4294967295; an interval between successive link state packets
Mode(s): Interface Configuration, Subinterface Configuration
isis mesh-group
Description: Configures an interface in the same mesh group to act as a virtual multiaccess network. The no version disables the feature.
Syntax: isis mesh-group { blocked | number }
no isis mesh-group
� blocked � blocks reserved LSPs from being flooded out on this defined configured interface
� number � mesh group number in the range 1�4294967295
Mode(s): Interface Configuration, Subinterface Configuration
isis message-digest-key220
isis message-digest-key
Description: Specifies an HMAC MD5 key that the system uses to create a secure, encrypted message digest of IS-IS level 1 or level 2 hello packets on the interface. Level 1 packets are the default. The digest is inserted into the packet from which it is created. Using this algorithm protects against intrusion by preventing unauthorized routers from forming adjacencies with your system.
You can specify when the system will start (default is the current time) and stop (default is never) accepting packets that include a digest made with this key. You can specify when the system will start (default is the current time plus 2 minutes) and stop (default is never) generating packets that include a digest made with this key. The no version deletes the key specified by the key-id.
Syntax: isis message-digest-key keyId hmac-md5 key [ start-accept startAcceptTime [ { startAcceptMonth startAcceptDay | startAcceptDay startAcceptMonth } startAcceptYear ] ] [ start-generate startGenTime [ { startGenMonth startGenDay | startGenDay startGenMonth } startGenYear ] ] [stop-accept { never | stopAcceptTime [ { stopAcceptMonth stopAcceptDay | stopAcceptDay stopAcceptMonth } stopAcceptYear ] } ] [ stop-generate { never | stopGenTime [ { stopGenMonth stopGenDay | stopGenDay stopGenMonth } stopGenYear ] } ][ level-1 | level-2 ]
no isis message-digest-key keyId [ level 1 | level 2 ]
� keyId � integer from 1 to 255 that is a unique identifier for the secret key, sent with the message digest in the packet.
� key � string of up to 20 alphanumeric characters; secret key used by the HMAC MD5 algorithm to generate the message digest.
� startAcceptTime, startAcceptMonth, startAcceptDay, startAcceptYear � time, month, day, year that the system will start accepting packets created with this password. Use military time format HH:MM[ :SS ].
� startGenTime, startGenMonth, startGenDay, startGenYear � time, month, day, year that the system will start inserting this password into packets. Use military time format HH:MM[ :SS ].
� never � the system never stops accepting or generating packets; overrides previously specified stop times.
� stopAcceptTime, stopAcceptMonth, stopAcceptDay, stopAcceptYear � time, month, day, year that the system will stop accepting packets created with this password. Use military time format HH:MM[ :SS ].
� stopGenTime, stopGenMonth, stopGenDay, stopGenYear � time, month, day, year that the system will stop inserting this password into packets. Use military time format HH:MM[ :SS ].
� level1 � Inserts the password into level 1 hello packets
� level2 � Inserts the password into level 2 hello packets
Mode(s): Interface Configuration, Subinterface Configuration
isis metricERX Edge Routers
221
isis metric
Description: Configures the metric (cost) for the specified interface. The no version restores the default metric value.
Syntax: isis metric defaultMetric [ level-1 | level-2 ]
no isis metric [ defaultMetric | level-1 | level-2 ]
� defaultMetric � metric used for the redistributed route; a number in the range 0�63 if the system is configured with the metric-style narrow command; a number in the range 0�16777215 if the system is configured with the metric-style transition or metric-style wide command; the default value is 10
� level-1 � apply metric to level 1 links
� level-2 � apply metric to level 2 links
Mode(s): Interface Configuration, Subinterface Configuration
isis priority
Description: Configures the priority of this system for designated router election. The no version resets priority to the default value, 64.
Syntax: isis priority value [ level-1 | level-2 ]
no isis priority [ value | level-1 | level-2 ]
� value � number in the range 0�127; the priority of a router; the default value is 64
� level-1 � sets the priority of a router for level 1 independently
� level-2 � sets priority of a router for level 2 independently
Mode(s): Interface Configuration, Subinterface Configuration
isis retransmit-interval
Description: Configures the number of seconds between retransmission of LSPs with the same lsp-id for point-to-point links. The no version restores the default value.
Syntax: isis retransmit-interval seconds
no isis retransmit-interval
� seconds � number of seconds in the range 1�65535; the default value is 5. The number should be greater than the expected round-trip delay between any two routers on the attached network. The setting of this parameter should be conservative, or needless retransmission will result. The value should be larger for serial lines.
Mode(s): Interface Configuration, Subinterface Configuration
isis retransmit-throttle-interval222
isis retransmit-throttle-interval
Description: Configures the amount of time between retransmissions of any IS-IS LSPs on a point-to-point interface. The no version restores the default value, 33 milliseconds.
Syntax: isis retransmit-throttle-interval milliseconds
no isis retransmit-throttle-interval
� milliseconds � the number of milliseconds in the range 0�65535; the minimum delay between LSP retransmissions on the interface
Mode(s): Interface Configuration, Subinterface Configuration
is-type
Description: Configures the IS-IS level at which the router is to operate. The no version resets the parameter to the default level-1-2.
Syntax: is-type { level-1 | level-1-2 | level-2-only }
no is-type
� level-1 � causes the router to act as a station router
� level-1-2 � causes the router to act as both a station router and an area router; the default setting
� level-2-only � causes the router to act as an area router
Mode(s): Router Configuration
j1ERX Edge Routers
223
j1
Description: Enables the J1 variant (Japan) of the T1 framing. The no version disables the feature (default).
Syntax: [ no ] j1
Mode(s): Controller Configuration
key
Description: From Radius Configuration mode, specifies the authentication or accounting server secret. The no version removes the secret.
From Manual Key Configuration mode, configures a manual ISAKMP/IKE preshared key. There is no no version. To delete a key, use the no version of the ipsec key manual command.
Syntax: To assign a RADIUS key:
key secret
no key
� secret � authentication or accounting server secret text string used by RADIUS to encrypt the client and server authenticator field during exchanges between the system and a RADIUS server. The system encrypts PPP PAP passwords using this text string.
To assign an ISAKMP/IKE key:
key keyString
� keyString � key value in ASCII format; up to 200 characters
Mode(s): Radius Configuration, Manual Key Configuration
l2f checksum
Description: Enables the generation of checksums for L2F data packets running over IP/UDP. The no version disables the generation of checksums for data packets running over IP/UDP. The default setting is disabled.
Syntax: [ no ] l2f checksum
Mode(s): Global Configuration
l2f destruct-timeout224
l2f destruct-timeout
Description: Specifies the maximum time for which the system maintains dynamic destinations, tunnels, and sessions that have terminated. If resources are low, the system will replace the terminated objects with new requests. The no version restores the default value, 600 seconds.
Syntax: l2f destruct-timeout seconds
no l2f destruct-timeout
� seconds � a time in the range 10�3600 seconds (1 hour)
Mode(s): Global Configuration
l2f drain
Description: Prevents the creation of new destinations, tunnels, and sessions for the system. This command works with the l2f shutdown command. Both commands affect the administrative state of L2F on the system. The l2f drain command sets the administrative state to drain, and the l2f shutdown command sets the administrative state to disabled. The no version allows the creation of new destinations, tunnels, and sessions for the system.
Syntax: [ no ] l2f drain
Mode(s): Global Configuration
l2f drain destination
Description: Prevents the creation of new tunnels and sessions at a destination. This command works with the l2f shutdown destination command. Both commands affect the status of the administrative state of L2F for the destination. The l2f drain destination command sets the administrative state to drain, and the l2f shutdown destination command sets the administrative state to disabled. The no version allows the creation of new tunnels and sessions at a destination.
Syntax: [ no ] l2f drain destination { destinationName |[ virtual-router virtualRouterName ] ip ipAddress }
� destinationName � name the system assigns to the home gateway
� virtualRouterName � name of the virtual router on which the destination exists
� ipAddress � IP address of the home gateway
Mode(s): Global Configuration
l2f drain tunnelERX Edge Routers
225
l2f drain tunnel
Description: Prevents the assignment of new sessions to a tunnel. This command works with the l2f shutdown tunnel command. Both commands affect the status of the administrative state of L2F for the tunnel. The l2f drain tunnel command sets the administrative state to drain, and the l2f shutdown tunnel command sets the administrative state to disabled. The no version allows the assignment of new sessions to a tunnel.
Syntax: [ no ] l2f drain tunnel { destinationName | [ virtual-router vrName ] ip ipAddress tunnelName }
� destinationName � name the system assigns to the home gateway
� vrName � name of the virtual router on which the tunnel exists
� ipAddress � IP address of the home gateway
� tunnelName � name of the tunnel
Mode(s): Global Configuration
l2f ignore-receive-data-sequencing
Description: Suppresses sequence number checking for data packets received on all L2F tunnels in the system. This setting affects only packets received on a tunnel, not packets sent on a tunnel. The L2F NAS still inserts sequence numbers into data packets if the NAS receives packets from the home gateway that contain sequence numbers. The no version, which is the default, causes the system to check sequence numbers in data packets that it receives on L2F tunnels.
Note: If you are using IP reassembly, we recommend that you set up the system to ignore sequence numbers in received data packets. Because IP reassembly may reorder L2F packets, out-of-order packets may be dropped if sequence numbers are being used on L2F data packets.
Syntax: [ no ] l2f ignore-receive-data-sequencing
Mode(s): Global Configuration
l2f shutdown226
l2f shutdown
Description: Closes all destinations, tunnels, and sessions and prevents the creation of new destinations, tunnels, and sessions for the system. This command works with the l2f drain command. Both commands affect the administrative state of L2F on the system. The l2f shutdown command sets the administrative state to disabled, and the l2f drain command sets the administrative state to drain. The no version allows the creation of new destinations, tunnels, and sessions for the system.
Syntax: [ no ] l2f shutdown
Mode(s): Global Configuration
l2f shutdown destination
Description: Closes all tunnels and sessions at a destination, and prevents the creation of new tunnels and sessions at that destination. This command works with the l2f drain destination command. Both commands affect the status of the administrative state of L2TP on the destination. The l2f shutdown destination command sets the administrative state to disabled, and the l2f drain destination command sets the administrative state to drain. The no version enables the creation of new tunnels and sessions at that destination.
Syntax: [ no ] l2f shutdown destination { destinationName | [ virtual-router vrName ] ip ipAddress }
� destinationName � name the system assigns to the home gateway
� vrName � name of the virtual router on which the destination exists
� ipAddress � IP address of the home gateway
Mode(s): Global Configuration
l2f shutdown session
Description: Closes a specific session. The no version has no effect because all L2F sessions are dynamic and cannot be restarted after they have been shut down.
Syntax: [ no ] l2f shutdown session { destinationName | [ virtual-router vrName ] ip ipAddress sessionName }
� destinationName � name that the system assigns to the LNS
� vrName � name of the virtual router on which the destination exists
� ipAddress � IP address of the home gateway
� sessionName � name of the session
Mode(s): Global Configuration
l2f shutdown tunnelERX Edge Routers
227
l2f shutdown tunnel
Description: Closes all sessions in a tunnel, and prevents the creation of new sessions in that tunnel. This command works with the l2f drain tunnel command. Both commands affect the status of the administrative state of L2F on the tunnel. The l2f shutdown tunnel command sets the administrative state to disabled, and the l2f drain tunnel command sets the administrative state to drain. The no version enables the creation of new sessions in that tunnel.
Syntax: [ no ] l2f shutdown tunnel { destinationName | [ virtual-router vrName ] ip ipAddress tunnelName }
� destinationName � name the system assigns to the home gateway
� virtualRouterName � name of the virtual router on which the tunnel exists
� ipAddress � IP address of the home gateway
� tunnelName � name of the tunnel
Mode(s): Global Configuration
l2tp checksum
Description: Enables the generation of checksums for data packets running over IP/UDP. The no version disables the generation of checksums for data packets running over IP/UDP. The default setting is disabled.
Syntax: [ no ] l2tp checksum
Mode(s): Global Configuration
l2tp destination profile228
l2tp destination profile
Description: Defines the location of the LAC(s) by virtual router and IP address. Accesses the L2TP Destination Profile Configuration mode. The no version removes the L2TP destination profile.
Syntax: l2tp destination profile { profileName [ [ virtual-router vrName ] ip address ipAddress ] | [ virtual-router vrName ] ip address ipAddress }
no l2tp destination profile { profileName |[ virtual-router vrName ] ip address ipAddress }
� profileName � name of the L2TP destination profile
� vrName � name of the virtual router to be used to reach the destination (that is, the LAC). If you do not specify a virtual router, the current virtual router context is used.
� ipAddress � IP address to be used to reach the destination
Note: To manage an existing destination profile, use this version of the command: l2tp destination profile profileName. This version assumes that the L2TP destination profile already exists.
Mode(s): Global Configuration
l2tp destruct-timeout
Description: Specifies the maximum time for which the system maintains dynamic destinations, tunnels, and sessions that have terminated. If resources are low, the system will replace the terminated objects with new requests. The no version restores the default value, 600 seconds.
Syntax: l2tp destruct-timeout seconds
no l2tp destruct-timeout
� seconds � time in the range 10�3600 seconds (1 hour)
Mode(s): Global Configuration
l2tp drain
Description: Prevents the creation of new destinations, tunnels, and sessions for the system. This command works in conjunction with the l2tp shutdown command. Both commands affect the status of the administrative state of L2TP on the system; the l2tp drain command sets the administrative state to drain. The no version allows the creation of new destinations, tunnels, and sessions for the system.
Syntax: [ no ] l2tp drain
Mode(s): Global Configuration
l2tp drain destinationERX Edge Routers
229
l2tp drain destination
Description: Prevents the creation of new tunnels and sessions at a destination. This command works in conjunction with the l2tp shutdown destination command. Both commands affect the status of the administrative state of L2TP for the destination; the l2tp drain destination command sets the administrative state to drain. The no version allows the creation of new tunnels and sessions at a destination.
Syntax: [ no ] l2tp drain destination { destinationName | [ virtual-router vrName ] ip ipAddress }
� destinationName � name the system assigns to the LNS
� vrName � name of the virtual router on which the destination exists
� ipAddress � IP address of the LNS
Mode(s): Global Configuration
l2tp drain tunnel
Description: Prevents the assignment of new sessions to a tunnel. This command works in conjunction with the l2tp shutdown tunnel command. Both commands affect the status of the administrative state of L2TP for the tunnel; the l2tp drain tunnel command sets the administrative state to drain. The no version allows the assignment of new sessions to a tunnel.
Syntax: [ no ] l2tp drain tunnel { destinationName | [ virtual-router vrName ] ip ipAddress tunnelName }
� destinationName � name the system assigns to the LNS
� vrName � name of the virtual router on which the tunnel exists
� ipAddress � IP address of the LNS
� tunnelName � name of the tunnel
Mode(s): Global Configuration
l2tp fail-over-within-preference
Description: Enables tunnel selection within a preference level. The no version restores the default behavior.
The default fail-over scheme is to drop down a preference level when a connection attempt has failed.
Syntax: [ no ] l2tp fail-over-within-preference
Mode(s): Global Configuration
l2tp ignore-receive-data-sequencing230
l2tp ignore-receive-data-sequencing
Description: Suppresses sequence number checking for data packets received on all L2TP tunnels in the system. This setting affects only packets received on a tunnel, not packets sent on a tunnel. The L2TP LAC still inserts sequence numbers into data packets if the LAC receives packets from the LNS that contain sequence numbers. The no version, which is the default, causes the system to check the sequence numbers in data packets that it receives on L2TP tunnels.
Note: If you are using IP reassembly, we recommend that you set up the system to ignore sequence numbers in received data packets. Because IP reassembly may reorder L2TP packets, out-of-order packets may be dropped if sequence numbers are being used on L2TP data packets.
Syntax: [ no ] l2tp ignore-receive-data-sequencing
Mode(s): Global Configuration
l2tp retransmission
Description: Sets the number of retransmission retries. The no version resets the number of retransmissions to the default value, 5.
Syntax: l2tp retransmission retries
no l2tp retransmission
� retries � in the range 2�7
Mode(s): Global Configuration
l2tp shutdown
Description: Closes all destinations, tunnels, and sessions and prevents the creation of new destinations, tunnels, and sessions for the system. This command works in conjunction with the l2tp drain command. Both commands affect the status of the administrative state of L2TP on the system; the l2tp shutdown command sets the administrative state to disabled. The no version allows the creation of new destinations, tunnels, and sessions for the system.
Syntax: [ no ] l2tp shutdown
Mode(s): Global Configuration
l2tp shutdown destinationERX Edge Routers
231
l2tp shutdown destination
Description: Closes all tunnels and sessions at a destination, and prevents the creation of new tunnels and sessions at that destination. This command works in conjunction with the l2tp drain destination command. Both commands affect the status of the administrative state of L2TP on the destination; the l2tp shutdown destination command sets the administrative state to disabled. The no version enables the creation of new tunnels and sessions at that destination.
Syntax: [ no ] l2tp shutdown destination { destinationName | [ virtual-router vrName ] ip ipAddress }
� destinationName � name the system assigns to the LNS
� vrName � name of the virtual router on which the destination exists
� ipAddress � IP address of the LNS
Mode(s): Global Configuration
l2tp shutdown session
Description: Closes a specific session. The no version has no effect because all L2TP sessions are dynamic and cannot be restarted after they have been shut down.
Syntax: [ no ] l2tp shutdown session { destinationName | [ virtual-router vrName ] ip ipAddress sessionName }
� destinationName � name that the system assigns to the LNS
� vrName � name of the virtual router on which the destination exists
� ipAddress � IP address of the LNS
� sessionName � name of the session
Mode(s): Global Configuration
l2tp shutdown tunnel232
l2tp shutdown tunnel
Description: Closes all sessions in a tunnel, and prevents the creation of new sessions in that tunnel. This command works in conjunction with the l2tp drain tunnel command. Both commands affect the status of the administrative state of L2TP on the tunnel; the l2tp shutdown tunnel command sets the administrative state to disabled. The no version enables the creation of new sessions in that tunnel.
Syntax: [ no ] l2tp shutdown tunnel { destinationName | [ virtual-router vrName ] ip ipAddress tunnelName }
� destinationName � name the system assigns to the LNS
� vrName � name of the virtual router on which the tunnel exists
� ipAddress � IP address of the LNS
� tunnelName � name of the tunnel
Mode(s): Global Configuration
l2tp tunnel idle-timeout
Description: Configures the tunnel idle-timeout value and creates persistent tunnels by setting the value to 0. There is no no version.
Syntax: l2tp tunnel idle-timeout [ timerValue ]
� timerValue � range is 0�86400 seconds
Mode(s): Global Configuration
l2tp tunnel-switching
Description: Enables tunnel switching chassis-wide. The no version disables tunnel switching. Disabled is the default.
Syntax: [ no ] l2tp tunnel-switching
Mode(s): Global Configuration
l2tp tunnel testERX Edge Routers
233
l2tp tunnel test
Description: Allows you to force the establishment of a tunnel in order to verify the tunnel configuration and to verify connectivity.
Syntax: l2tp tunnel test authenticateName [ tunnelName ]
� authenticateName � authenticate name used to look up tunnel test parameters
� tunnelName � name of the tunnel to be tested
Mode(s): Privileged Exec
l2tp weighted-load-balancing
Description: Allows you to use a weighted load balancing scheme for session distribution. The no version restores the default behavior, wherein the session load of a chassis is distributed evenly across all tunnels defined to be at the same preference level.
Syntax: [ no ] l2tp weighted-load-balancing
Mode(s): Global Configuration
lease
Description: Specifies the time period for which the supplied IP address is valid. The no version restores the default lease time, one day.
Syntax: lease { days [ hours [ minutes [ seconds ] ] ] | infinite }
no lease
� days � number of days for which the IP address is valid in the range 0�32768
� hours � number of hours for which the IP address is valid in the range 0�24
� minutes � number of minutes for which the IP address is valid in the range 0�60
� seconds � number of seconds for which the IP address is valid in the range 0�60
� infinite � assigns a lease that does not expire
Mode(s): Pool Configuration
license b-ras234
license b-ras
Description: Specifies the B-RAS license provided by your sales representative or Juniper Networks Customer Service. Depending on the license purchased, the system supports up to 2,000, 4,000, 8,000, 16,000, or 20,000 authenticated PPP or SDX (formerly SSC) sessions. The no version disables the license.
Syntax: license b-ras licenseKey
no license b-ras
� licenseKey � unique string of alphanumeric characters up to 15 characters long that we provide to you
Mode(s): Global Configuration
license ipsec-tunnels
Description: Specifies the IPSec license key provided by your sales representative or Juniper Networks Customer Service. Depending on the license purchased, the system supports up to 5,000, 7,500, or 10,000 tunnels per chassis. The no version disables the license.
Syntax: license ipsec-tunnels licenseKey
no license ipsec-tunnels
� licenseKey � unique string of alphanumeric characters that we provide to you
Mode(s): Global Configuration
lifetime
Description: Associates a lifetime with IKE SAs established using this IKE policy. The no version restores the lifetime to its default, 28800 seconds (8 hours).
Syntax: lifetime seconds
no lifetime
� seconds � number of seconds an SA lives before expiring; range is 7200 to 864000 (10 days)
Mode(s): ISAKMP Policy Configuration
limitsERX Edge Routers
235
limits
Description: Sets memory limits for BGP internal tables maintained by BGP software. If you set a particular memory limit to a value lower than the current value and the system uses the memory up to the previous limit, then memory allocations will start to fail when the new value takes effect. The no version restores the default values; entering an optional value in the no version has the same effect as entering no optional values.
Syntax: limits { { nlre | received-route } receivedRouteLimit | { nlri | destination } destinationLimit | path-attribute pathAttributeLimit | vrf vrfLimit | address-family addressFamilyLimit | peer peerLimit | peer-address-family peerAddressFamilyLimit | peer-group peer-groupLimit | peer-group-address-family peer-groupAddressFamilyLimit | dampening dampeningLimit | network-route networkRouteLimit | aggregated-route aggregatedRouteLimit | redistributed-route redistributedRouteLimit | auto-summary-route autoSummaryRouteLimit | next-hop nextHopLimit | route-flap-history routeFlapHistoryLimit | rib-out ribOutLimit |group-rib-out groupRibOutLimit | send-queue-entry sendQueueEntryLimit | route-target-entry routeTargetEntryLimit }
no limits { { nlre | received-route } [ receivedRouteLimit ] | { nlri | destination } [ destinationLimit ] | path-attribute [ pathAttributeLimit ] | vrf [ vrfLimit ] | address-family [ address-family-Limit ] | peer [ peerLimit ] | peer-address-family [ peerAddressFamilyLimit ] | peer-group [ peer-groupLimit ] | peer-group-address-family [ peer-groupAddressFamilyLimit ] | dampening [ dampeningLimit ] | network-route [ networkRouteLimit ] | aggregated-route [ aggregatedRouteLimit ] | redistributed-route [ redistributedRouteLimit ] | auto-summary-route [ autoSummaryRouteLimit ] | next-hop [ nextHopLimit ] | route-flap-history [ routeFlapHistoryLimit ] | rib-out [ ribOutLimit ] | group-rib-out [ groupRibOutLimit ] | send-queue-entry [ sendQueueEntryLimit ] | route-target-entry [ routeTargetEntryLimit ] }
Note: The nlre and received-route keywords have the same purpose in this command, to set a limit on the received routes table. Similarly, the nlri and destination keywords have the same purpose, to set a limit on the BGP destination table. The nlre and nlri keywords are maintained for compatibility with previous software releases.
� receivedRouteLimit � maximum number of received routes stored by BGP in the range 0�2147483648; the default is 5,000,000
� destinationLimit � maximum number of BGP destinations stored by BGP in the range 0�2147483648; the default is 5,000,000
� pathAttributeLimit � maximum number of path attributes stored by BGP in the range 0�2147483648; the default is 5,000,000
limits236
� vrfLimit � maximum number of VRFs stored by BGP in the range 0�2147483648; the default is 5,000,000
� addressFamilyLimit � maximum number of address families stored by BGP in the range 0�2147483648; the default is 5,000,000
� peerLimit � maximum number of peers stored by BGP in the range 0�2147483648; the default is 5,000,000
� peerAddressFamilyLimit � maximum number of peers per address family stored by BGP in the range 0�2147483648; the default is 5,000,000
� peer-groupLimit � maximum number of peer groups stored by BGP in the range 0�2147483648; the default is 5,000,000
� peer-groupAddressFamilyLimit � maximum number of peer-groups per address family stored by BGP in the range 0�2147483648; the default is 5,000,000
� dampeningLimit � maximum number of dampening parameter blocks stored by BGP in the range 0�2147483648; the default is 5,000,000. BGP creates a dampening parameter block for each unique set of dampening parameters�such as suppress threshold, reuse threshold, and so on�used by BGP. For example, if you have a route map that sets the dampening parameters to one set of values for some routes and to another set of values for the remaining routes, BGP uses and stores two dampening parameter blocks, one for each set.
� networkRouteLimit � maximum number of network routes stored by BGP in the range 0�2147483648; the default is 5,000,000
� aggregatedRouteLimit � maximum number of aggregated routes stored by BGP in the range 0�2147483648; the default is 5,000,000
� redistributedRouteLimit � maximum number of redistributed routes stored by BGP in the range 0�2147483648; the default is 5,000,000
� autoSummaryRouteLimit � maximum number of automatically summarized routes stored by BGP in the range 0�2147483648; the default is 5,000,000
� nextHopLimit � maximum number of next hops stored by BGP in the range 0�2147483648; the default is 5,000,000
� routeFlapHistoryLimit � maximum number of route-flap histories stored by BGP in the range 0�2147483648; the default is 5,000,000
� ribOutLimit � maximum number of RIB-Out routes stored by BGP for individual peers in the range 0�2147483648; the default is 1,000,000
� groupRibOutLimit � maximum number of RIB-Out routes stored by BGP for peer groups in the range 0�2147483648; the default is 1,000,000
� sendQueueEntryLimit � maximum number of send queue entries stored by BGP in the range 0�2147483648; the default is 5,000,000
� routeTargetEntryLimit � maximum number of combined import and export route-target entries in the range 0�2147483648; the default is 5,000,000
Mode(s): Router Configuration
lineERX Edge Routers
237
line
Description: Opens virtual terminal lines or the console line and allows you to configure the lines. By default five vty lines (0�4) are open.
The no version removes a vty line or a range of lines from your configuration; users will not be able to run Telnet, SSH, or FTP to lines that you remove. When you remove a vty line, the system removes all lines above that line. For example, no line vty 6 causes the system to remove lines 6 through 19. You cannot remove lines 0 through 4.
Note: Once lines are open, login is enabled by default. Before users can access the lines, you must configure a password, disable login using the no login command, or configure AAA authentication on the line.
Syntax: line { console lineNumber | vty lineRangeStart [ lineRangeEnd ] }
no line vty lineNumber
� console � specifies the console line
� vty � specifies vty lines
� lineNumber � number of a single line; 0 for the console line
� lineRangeStart � start of the vty line range; a number from 0�19;
� lineRangeEnd � end of the vty line range; a number from 0�19
Mode(s): Global Configuration
lineCoding
Description: Specifies the type of line coding used by a CE1 or CT1 interface. The no version restores the default�hdb3 for CE1 interfaces and b8zs for CT1 interfaces.
Syntax: lineCoding linecodingType
no lineCoding
� linecodingType � one of the following:
� ami � alternate mark inversion
� b8zs � bipolar with eight-zero substitution; CT1 default
� hdb3 � high-density bipolar 3; CE1 default
Mode(s): Controller Configuration
link238
link
Description: Links the pool currently being configured to another DHCP local address pool. The linked pool acts as a backup pool. The no version removes the link.
Syntax: link poolName
no link
� poolName � name of pool to which you want to link the pool currently being configured
Mode(s): Pool Configuration
list
Description: Lists the currently configured MPLS explicit path (optionally starting at a particular index). There is no no version.
Syntax: list [ index ]
� index � number of a node in an ordered set of abstract nodes, a value ranging from 1�255; set with the index command
Mode(s): Explicit Path Configuration
load-interval
Description: Sets the time interval at which the system calculates bit rates and packet rates for an interface. The no version restores the default time interval, which is 300 seconds. This command is not available for the Ethernet interface on the SRP module.
Syntax: load-interval timeInterval
no load-interval
� timeInterval � a multiple of 30 seconds in the range 30�300
Mode(s): Interface Configuration
local host
Description: Configures an L2TP local hostname to be used with a remote host. The no version removes the local hostname from use with a remote host.
Syntax: local host hostname
no local host
� hostname � an L2TP local hostname; can be up to 64 characters in length (no spaces)
Mode(s): L2TP Destination Profile Host Configuration
local ip addressERX Edge Routers
239
local ip address
Description: Configures a local IP address for use with a remote host. The no version removes the local IP address from use with a remote host.
Syntax: local ip address ipAddress
no local ip address
� ipAddress � an IP address
Mode(s): L2TP Destination Profile Host Configuration
log
Description: Configures logging settings. The no version negates the command. The suspend version suspends the policy rule.
Syntax: [ no ] [ suspend ] log [ classifier-group claclName ] [ precedence precValue ]
� claclName � classifier control list to be logged
� precValue � precedence of rule in relation to be logged
Mode(s): Policy Configuration
log-adjacency-changes240
log-adjacency-changes
Description: Generates a log message when a NLSP adjacency changes state (up or down). The no version disables this function. This command manipulates the same log as the Global Configuration log commands.
Syntax: log-adjacency-changes [ severity { severityValue | severityNumber } ][ verbosity verbosityLevel ]
no log-adjacency-changes
� severity � minimum severity of the log messages for this category; described either by a descriptive term�severityValue�or by a corresponding number�severityNumber�in the range 0�7. The lower the number, the higher the priority:
� emergency or 0 � system unusable
� alert or 1 � immediate action needed
� critical or 2 � critical condition exists
� error or 3 � error condition
� warning or 4 � warning condition
� notice or 5 � normal but significant condition
� info or 6 � informational message
� debug or 7 � debug message
� verbosity � specifies the verbosity of this log category�s messages
� verbosityLevel � specifies the verbosity of the log category�s messages; can be any of the following:
� high � verbose
� low � terse
� medium � moderate detail
Mode(s): Router Configuration
log destinationERX Edge Routers
241
log destination
Description: Configures the logging of system messages. You can direct messages to a destination, limit the messages logged based on severity level, or limit the event categories for which messages are logged. The no versions restore default settings or reverse the effect of previous commands that limited event categories.
Note: You can display traffic logs�such as ipTraffic, icmpTraffic, tcpTraffic, and udpTraffic�only via the show log data command or from the SRP module console. You cannot redirect traffic logs elsewhere, such as to a syslog or nonvolatile storage file, or to a Telnet session.
Syntax: To specify the destination and severity of messages logged:
log destination { console | nv-file | syslog ipAddress [ facility facilityId ] } { severity { severityValue | severityNumber } | off }
no log destination [ syslog [ ipAddress ] ]
To specify which event categories are logged to syslog: log destination syslog ipAddress { include | exclude } category [ category ]*
no log destination syslog ipAddress { include | exclude } [ category ]*
� console � configure or modify logging to the local console
� nv-file � configure or modify logging to the nonvolatile log file; the nv-file can accept only events at a severity level of critical or higher in importance
� syslog � configure or modify logging to a syslog server
� ipAddress � IP address of the syslog application on a remote host
� facility � specifies the syslog facility on the host
� facilityId � number in the range 0�7 that identifies the corresponding logging facility, local0�local7
� severity � minimum severity of the log messages displayed; described either by a descriptive term�severityValue�or by a corresponding number�severityNumber�in the range 0�7. The lower the number, the higher the priority:
� emergency or 0 � system unusable
� alert or 1 � immediate action needed
� critical or 2 � critical condition exists
� error or 3 � error condition
� warning or 4 � warning condition
� notice or 5 � normal but significant condition
� info or 6 � informational message
log destination syslog source242
� debug or 7 � debug message
� off � disable logging to this destination
� include � send only the specified event categories to the syslog server
� exclude � send all event categories except those specified to the syslog server
Issuing an include command after an exclude command (or vice versa) overrides the earlier command.
You can issue successive include commands or successive exclude commands. Successive commands expand the list of included or excluded categories.
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Global Configuration
log destination syslog source
Description: Specifies a source interface type and location for events logged to a syslog server. Overrides the type and location of the actual source to enable server access behind firewalls. The no version restores the default state, which is to use the actual interface type and location of the source.
Syntax: log destination syslog ipAddress source interfaceType interfaceSpecifier
no log destination syslog ipAddress source [ interfaceType interfaceSpecifier ]
� ipAddress � IP address of the syslog application
� interfaceType � type of interface; the source of the events logged; see Interface Types and Specifiers in About This Guide.
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Mode(s): Global Configuration
log engineering
Description: Enables engineering logs. The no version disables engineering logs.
Syntax: [ no ] log engineering
Mode(s): Global Configuration
log fieldsERX Edge Routers
243
log fields
Description: Selects optional fields to be added to all logs. The no version disables the optional log fields.
Syntax: log fields { timestamp | no-timestamp } { instance | no-instance }{ calling-task | no-calling-task }
no log fields
� timestamp � include the timestamp in log messages
� no-timestamp � do not include the timestamp in log messages
� instance � include the event ID in log messages
� no-instance � do not include the event ID in log messages
� calling-task � include the logging task name in log messages
� no-calling-task � do not include the logging task name in log messages
Mode(s): Global Configuration
log filters
Description: This command has only a no version. See the no log filterscommand for a complete description and syntax.
log here
Description: Enables the current terminal as a log console. The no version disables logs destined for a console from being displayed on the current terminal.
Syntax: [ no ] log here
Mode(s): User Exec, Privileged Exec, Global Configuration
log severity244
log severity
Description: Sets the severity value for the selected category. The no version removes an override severity setting and returns a log to its default value or the system-wide setting.
Syntax: log severity { severityValue | off | severityNumber }[ eventCategory [ instanceTree ] | eventCategory instanceTree | eventCategory ]
no log severity [ severityValue | off | severityNumber ] [ eventCategory [ filters | instanceTree ] | eventCategory { filters | instanceTree } | eventCategory | * ]
� severityValue and severityNumber � minimum severity of the log messages displayed for the selected category; described either by a descriptive term�severityValue�or by a corresponding number�severityNumber�in the range 0�7. The lower the number, the higher the priority:
� emergency or 0 � system unusable
� alert or 1 � immediate action needed
� critical or 2 � critical condition exists
� error or 3 � error condition
� warning or 4 � warning condition
� notice or 5 � normal but significant condition
� info or 6 � informational message
� debug or 7 � debug message
� off � disables log messages for all event categories or for a specified event category
� eventCategory � log category; refer to the CLI online Help for available options
� filters � removes all log filters for the event category
� instanceTree � log-specific filter parameters; refer to the CLI online Help for available options
� * � resets all log severities, system wide and individual, to default settings
Mode(s): Global Configuration
log unlimitERX Edge Routers
245
log unlimit
Description: Removes the limit on the number of outstanding buffers for an event category. The no version returns the number of buffers to the default value.
Syntax: [ no ] log unlimit [ eventCategory ]
� eventCategory � log category; refer to the CLI online Help for available options
Mode(s): User Exec, Privileged Exec, Global Configuration
log verbosity
Description: Sets the verbosity level for a selected category. The no version returns the log verbosity to its default value, low.
Syntax: log verbosity verbosityLevel [ eventCategory ]
no log verbosity [ verbosityLevel ] [ eventCategory ]
� verbosityLevel � specifies the verbosity for the log category:
� low � terse (default)
� medium � moderate detail
� high � verbose
� eventCategory � log category; refer to the CLI online Help for available options
Mode(s): Global Configuration
login
Description: Requires you to log in with a password. The no version removes the password requirement and allows connections without a password.
Syntax: [ no ] login
Mode(s): Line Configuration
Note: If this command has been configured and no password has been configured, access to Telnet is refused.
login authentication246
login authentication
Description: Applies an AAA authentication list to the vty sessions that you specified for AAA authentication.The no version removes all authentication methods, which means the system accepts Telnet sessions without challenge.
Syntax: login authentication authListName
no login authentication
� authListName � specifies an authentication list name of up to 32 characters
Mode(s): Line Configuration
logout subscribers
Description: Logs out the authenticated PPP users. If you do not specify a license, B-RAS configuration commands are disabled. There is no no version.
Syntax: logout subscribers { all | username userName | domain domainName | virtual-router vrName | port interfaceLocation }
� all � all PPP sessions
� userName � active PPP session whose names match the username
� domainName � active PPP session whose usernames have that domain name
� vrName � active PPP session whose interfaces are bound to a specific virtual router
� port � active PPP subscribers for the port
� interfaceLocation � location of the port in slot/port format; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Privileged Exec
loopbackERX Edge Routers
247
loopback
Description: Specifies the loopback mode for a module controller or interface, or maps a loopback interface to a user domain name in Domain Map Configuration mode. The no version clears all loopback on the module or interface (the default), or deletes the mapping to the user domain name.
Syntax: Module controllers � The options available vary depending on the module being configured.
CE1 module:
loopback { local | network { payload | line } }
no loopback
CT1 module:
loopback { local | network { payload | line } | remote { line { fdl { ansi | bellcore } | inband } payload [ fdl ] [ ansi ] } }
no loopback [ remote ]
CT3, E3, or T3 module:
loopback { local | network | payload }
no loopback
cOCx/STMx SONET controller (SONET/SDH section layer), OCx/STMx line modules:
loopback { local | network }
no loopback
X.21/V.35 module:
[ no ] loopback
� local � loops the data back toward the router and sends an AIS out toward the network.
� network payload � loops the data toward the network after the framer has processed the data.
� network line � loops the data toward the network before the data reaches the framer.
� remote line fdl ansi � sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 line, according to the ANSI T1.403 specification.
loopback248
� remote line fdl bellcore � sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 line, according to the Bellcore TR-TSY-000312 specification.
� remote line inband � sends a repeating 5-bit inband pattern (00001) to the remote end requesting that it enter into a network line loopback.
� remote payload [ fdl ] [ ansi ] � sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 line. You can specify fdl and ansi, but it is not necessary.
� remote � based on the last activate request sent to the remote end, sends the 16-bit ESF data link code word or inband pattern to deactivate the loopback at the remote end.
� network � loops the data toward the network before the data reaches the framer.
� payload � loops the data toward the network after the framer has processed the data.
Interfaces � The options available vary depending on the interface being configured.
ATM interface � This command cannot be used on a subinterface:
loopback { diagnostic | line }
no loopback
POS interface:
[ no ] loopback internal | line
� diagnostic � places the interface into internal loopback
� line � ATM interface: places the interface into external loopback; POS interface: connects the received network signal directly to the transmit network signal. When configured in line loopback mode, the system never receives data from the network.
� internal � connects the local transmitted signal to the local received signal
User Domain Name
loopback interface-number
no loopback
� interface-number � interface number in the range 1�32000
Mode(s): Controller Configuration, Interface Configuration, Domain Map Configuration
lsp-gen-intervalERX Edge Routers
249
lsp-gen-interval
Description: Sets the minimum interval at which originated IS-IS link state packets are generated on a per LSP basis. The no version restores the default interval.
Syntax: lsp-gen-interval [ level-1 | level-2 ] seconds
no lsp-gen-interval [ level-1 | level-2 ]
� level-1 � sets interval for level 1 only
� level-2 � sets interval for level 2 only
� seconds � number in the range 0�120; the minimum interval in seconds; the default value is 5 seconds
Mode(s): Router Configuration
lsp-mtu
Description: Sets the maximum size of an IS-IS link state packet generated by the software. The no version restores the default MTU size of 1497 bytes.
Syntax: lsp-mtu bytes
no lsp-mtu
� bytes � number in the range 128�9180; the MTU size in bytes; the default value is 1497
Mode(s): Router Configuration
lsp-refresh-interval
Description: Sets the link state packet rate at which locally generated IS-IS link state packets are periodically transmitted.The no version restores the default refresh interval.
Syntax: lsp-refresh-interval seconds
no lsp-refresh-interval
� seconds � number in the range 1�65535; the refresh interval in seconds; the default value is 900
Mode(s): Router Configuration
macro250
macro
Description: Executes a macro file, which can consist of one or more macros. If you do not use the macroName option to specify a macro, the command searches in the specified macro file for a macro named �start,� and returns an error if the �start� macro is not found. If you do not specify fileName.mac, you must specify name macroName; the command then searches only in local memory for a file called macroName.mac that contains the macroName macro. There is no no version.
Syntax: macro [ test | verbose ] { fileName.mac [ macroName [ arg ]* ] |name macroName [ arg ]* }
� test � displays the output of the macro without issuing the commands to the system, and displays comments
� verbose � echoes each command as the macro executes and displays comments
� fileName � name of the file containing the macro; requires the .mac extension
� macroName � name of a macro within the macro file
� arg � zero or more arguments passed to the macro; if the argument contains a space or other special character, the argument must be enclosed within double quotation marks
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): All
map-class frame-relay
Description: Creates a map class. Command is used when configuring Frame Relay end-to-end fragmentation and reassembly. The no version removes the map-class.
Syntax: [ no ] map-class frame-relay mapName
� mapName � name of the map class; use up to 64 characters
Mode(s): Global Configuration
map-groupERX Edge Routers
251
map-group
Description: Associates a map list to an NBMA interface when configuring static mapping. The no version removes the association. Use in conjunction with the map-list command.
Syntax: [ no ] map-group name
� name � name of the map group
Mode(s): Interface Configuration
map-list
Description: Creates a map list for an NBMA interface when configuring static mapping. The no version removes the map list. Use in conjunction with the map-group command.
Syntax: [ no ] map-list name
� name � name of the map list
Mode(s): Map List Configuration
mark252
mark
Description: Sets the precedence field of the ToS byte in the IP header to a specified value. Unlike the committed-mark-value, conformed-mark-value, and the exceeded-mark-value commands, the mark command is not tied to a rate limit profile, but marks packets based on a classifier control list. Use the suspend keyword to suspend a mark rule temporaily.The no version removes the mark rule from a policy list.
Syntax: [ no ] [ suspend ] mark { tosByteValue mask maskValue | tos-precedence tosPrecNum | dsfield dsFieldNum | tos tosNum } [ classifier-group claclName ] [ precedence precValue ]
� suspend � suspend a policy rule
� tosByteValue � ToS byte value to be assigned to packets; in the range 0�255
� maskValue � mask to be used when applying ToS Byte values to packets; in the range 1�255
� tosPrecNum � ToS precedence value to be assigned to packets; in the range 0�7
� dsFieldNum � DS field value to be assigned to packets; in the range 0�63
� tosNum � ToS value to be assigned to packets; in the range 0�255
� claclName � classifier control list used to classify packets for this IP precedence policy
� precValue � precedence of this rule in relation to other rules within this set in the range 0�32768
Mode(s): Policy Configuration
mask-val
Description: Sets the mask value. Use the mask-val command in conjunction with the committed-mark-value, conformed-mark-value, and exceeded-mark-value commands. The no version restores the default value, 255.
Syntax: [ no ] mask-val value
� value � mask value in the range 0�255. Use the following mask values to set the appropriate bits in the ToS field of the IP packet header:
� IP Precedence � 0xED (three most significant bits)
� DS Field � 0xFC (six significant bits)
Mode(s): Rate Limit Profile Configuration
match as-pathERX Edge Routers
253
match as-path
Description: Matches a BGP AS path access list. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.
Syntax: match as-path listName [ listName ]*
no match as-path [ listName ] *
� listName � name of an AS path access list; string of up to 32 characters
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Route Map Configuration
match community
Description: Matches a BGP community list. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.
Syntax: match community listName [ listName ]* [ exact-match ]
no match community [ listName ]* [ exact-match ]
� listName � a string of up to 32 characters that designates a community list; you can optionally use a regular expression to specify the listName
� exact-match � limits the match to a route that contains only the communities contained in the specified list; cannot be used with a community list specified by a regular expression
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Route Map Configuration
match distance254
match distance
Description: Use to match any routes that have the specified administrative distance. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.
Note: Matching a distance is useful only when applied to a route being redistributed out of a routing table. Distance is used to determine the relative preference between routes to the same prefix in order to pick the best route to that prefix in the routing table. Distance has no meaning in any other circumstance and any attempt to match distance will fail.
Syntax: match distance distance [ distance ]*
no match distance [ distance ]
� distance � administrative distance in the range 0�255
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Route Map Configuration
match extcommunity
Description: Matches a BGP extcommunity list. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.
Syntax: match extcommunity listName [ listName ]* [ exact-match ]
no match extcommunity [ listName ]*
� listName � name of the extended-community list
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
� exact-match � limits the match to a route that contains only the extended communities contained in the specified list; cannot be used with an extended community list specified by a regular expression
Mode(s): Route Map Configuration
match ip addressERX Edge Routers
255
match ip address
Description: Matches any routes that have a destination network number address that is permitted by a standard or extended access list, a prefix list, or a prefix tree, or performs policy routing on packets. You cannot mix references in the same match command; you can only specify either access list(s), prefix list(s), or prefix tree(s). The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.
Syntax: match ip address { accessListName [ accessListName ]* | prefix-list listName [ listName ]* | prefix-tree treeName [ treeName ]* }
no match ip address [ accessListName ]* | prefix-list [ listName ]* | prefix-tree [ treeName ]*
� accessListName � string of up to 32 alphanumeric characters
� listName � name of a single prefix list; string of up to 32 characters
� treeName � name of a single prefix tree; string of up to 32 characters
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Route Map Configuration
match ip next-hop
Description: Matches any routes that have a next-hop router address passed by the specified access list, prefix list, or prefix tree. You cannot mix references in the same match command; you can only specify either access list(s), prefix list(s), or prefix tree(s). The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.
Syntax: match ip next-hop { accessListName [ accessListName ]* | prefix-list listName [ listName ]* | prefix-tree treeName [ treeName ]* }
no match ip next-hop [ accessListNumber ]* | prefix-list [ listName ]* | prefix-tree [ treeName ]*
� accessListName � name of a single standard access list; string of up to 32 characters
� listName � name of a single prefix list; string of up to 32 characters
� treeName � name of a single prefix tree; string of up to 32 characters
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Route Map Configuration
match level256
match level
Description: Matches import routes for the specified type. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.
Syntax: match level { backbone | level-1 | level-1-2 | level-2 | stub-area } *
no match level [ backbone | level-1 | level-1-2 | level-2 | stub-area ]
� backbone � an OSPF backbone area
� level-1 � a level 1 area
� level-1-2 � a level 1 and a level 2 area
� level 2 � a level 2 subdomain
� stub-area � an OSPF NSSA area
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Route Map Configuration
match metric
Description: Matches a route for the specified metric value. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.
Syntax: match metric metricValue [ metricValue ]*
no match metric [ metricValue ]
� metricValue � number in the range 0�4294967295, which indicates the preference value for a specific route in a route map
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Route Map Configuration
match metric-type
Description: Matches routes having the specified metric type. The no version removes the match clause from a route map.
Syntax: match metric-type { external | internal }
no match metric-type [ external | internal ]
� external � IS-IS external metric type
� internal � IS-IS internal metric type
Mode(s): Route Map Configuration
match route-typeERX Edge Routers
257
match route-type
Description: Matches routes of the specified type. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.
Syntax: match route-type internal [ intra | inter ] [ level-1 | level-2 ] [ external [ type-1 | type-2 ] ] [ level-1 | level-2 ]*
match route-type external [ type-1 | type-2 ] [ level-1 | level-2 ] [ internal [ intra | inter ] ] [ level-1 | level-2 ]*
match route-type { level-1 | level-2 } [ internal [ intra | inter ] ] [level-1 | level-2 ] [ external [ type-1 | type-2 ] ] [ level-1 | level-2 ]*
match route-type { level-1 | level-2 } [ external [ type-1 | type-2 ] ] [ level-1 | level-2 ] [ internal [ intra | inter ] ] [ level-1 | level-2 ]*
no match route-type [ internal [ intra | inter ] | external [ type-1 | type-2 ] | level-1 | level-2 ]
� internal � internal routes
� intra � OSPF intra-area routes
� inter � OSPF interarea routes
� external � external routes
� type-1 � OSPF type 1 external routes
� type-2 � OSPF type 2 external routes
� level-1 � IS-IS level 1 routes
� level-2 � IS-IS level 2 routes
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Route Map Configuration
match-set summary prefix-tree
Description: Sets condition for a route map that matches routes based on the network base address set in the specified prefix tree and summarizes them by preserving only the bits set in the prefix tree. The no version disables the use of the prefix tree by the route map.
Syntax: match-set summary prefix-tree treeName
no match-set summary prefix-tree
� treeName � name of the prefix tree
Mode(s): Route Map Configuration
match tag258
match tag
Description: Matches the tag value of the destination routing protocol. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.
Syntax: match tag tagValue [ tagValue ]*
no match tag [ tagValue ]*
� tagValue � number in the range 0�4294967295
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Route Map Configuration
maximum-paths
Description: Controls the maximum number of equal-cost paths to the same destination that BGP, IS-IS, OSPF, or RIP can install in the routing table to support ECMP.
For BGP, issue the command from Router Configuration mode to apply to routes in the global RIB. In Address Family Configuration mode, issue the command only in the context of IPv4 unicast address families to apply the value only to routes in the global RIB or the specific VRF for the IPv4 unicast address family; VPNv4 address families are not supported.
For IS-IS, OSPF, or RIP, issue from Router Configuration mode.
The no version restores the default value, 1 path for BGP or 4 paths for IS-IS, OSPF, and RIP.
Syntax: For BGP:
maximum-paths [ ibgp ] maxPaths
no maximum-paths [ ibgp ] [ maxPaths ]
� ibgp � specifies that the maxPaths value applies only to routes received from internal (IBGP) peers; if this keyword is not specified, the maxPaths value applies only to routes received from external (EBGP) peers
� maxPaths � maximum number of parallel paths (routes) in the range 1�6
For IS-IS and RIP:
maximum-paths maxPaths
no maximum-paths
� maxPaths � maximum number of parallel paths (routes) in the range 1�16
For OSPF:
[ no ] maximum-paths maxPaths
� maxPaths � maximum number of parallel paths (routes) in the range 1�16
Mode(s): Address Family Configuration, Router Configuration, VRF Configuration
maximum routesERX Edge Routers
259
maximum routes
Description: Sets a warning threshold and maximum limit for routes imported by a PE router into a VRF from associated CE routers. The no version removes the limit and warning threshold.
Syntax: maximum routes limit { warningThreshold | warning-only }
no maximum routes
� limit � number in the range 1�4294967295 that when exceeded prevents routes from being imported into the routing table; when first exceeded generates a limit-exceeded log entry; if the route count fluctuates below and up to this value, an interval of five minutes must pass before another limit-exceeded log entry can be generated
� warningThreshold � percentage in the range 1�100 that when first exceeded generates a warning-threshold-exceeded log entry; if the route count fluctuates around this value, an interval of five minutes must pass before another warning-threshold-exceeded log entry can be generated
� warning-only � causes the limit to function as a warningThreshold; specifies that exceeding the limit generates a warning-threshold-exceeded log entry instead of a limit-exceeded log entry and permits routes exceeding the limit to be added to the routing table; if the route count fluctuates around the limit, an interval of five minutes must pass before another warning-threshold-exceeded log entry can be generated
Mode(s): VRF Configuration
max-lsp-lifetime
Description: Sets the maximum time that IS-IS link state packets persist without being refreshed. The no version restores the default time.
Syntax: max-lsp-lifetime seconds
no max-lsp-lifetime
� seconds � number in the range 1�65535; the lifetime of LSP in seconds; the default value is 1200 seconds
Mode(s): Router Configuration
max-response-failure260
max-response-failure
Description: Terminates a test when the maxFailureValue is reached. That is, when there is no response to a designated number of operation requests, the test is terminated. This feature applies only to pathEcho entries. The no version restores the default value, five consecutive failures.
Syntax: max-response-failure maxFailureValue
no max-response-failure
� maxFailureValue � number of operation requests not responded to; 0 turns this feature off; the default is 5
Mode(s): RTR Configuration
max-sessions
Description: For RADIUS, specifies the number of outstanding requests to a server. The no version reverts to the default value.
For tunnelss, sets the maximum sessions per tunnel. The no version disables the feature. The default version sets the value to zero.
Syntax: For RADIUS:
max-sessions sessionLimit
no max-sessions
� sessionLimit � maximum number of outstanding requests to a specific server in the range 10�4000; the default is 255
For tunnels:
max-sessions maxSessionsPerTunnel
default max-sessions
no max-sessions
� maxSessionsPerTunnel � maximum number of sessions that can be configure on a tunnel in the range 0�4294967295; the default is zero
Mode(s): Domain Map Tunnel Configuration, Radius Configuration
mdl carrier
Description: Specifies that a T3 interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment.
Syntax: [ no ] mdl carrier
Mode(s): Controller Configuration
mdl stringERX Edge Routers
261
mdl string
Description: Allows you to specify an MDL message on a T3 interface as defined in the ANSI T1.107a-1990 specification. The no version restores the default value to the specified MDL message or to all MDL messages.
Syntax: mdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiCode | port portValue | generator genValue }
no mdl string { eic | fic | lic | unit | pfi | port | generator }
� eicValue � equipment identification code; 1�10 characters; default is the null value.
� ficValue � frame identification code; 1�10 characters; default is the null value.
� licValue � line identification code; 1�11 characters; default is the null value.
� unitValue � unit identification code; 1�6 characters; default is the null value.
� pfiCode � facility identification code to send in the MDL path message; 1�38 characters; default is the null value.
� portValue � equipment port number to send in the MDL idle signal message; 1�38 characters; default is the null value.
� genValue � generator number to send in the MDL test signal message; 1�38 characters; default is the null value.
Mode(s): Controller Configuration
mdl transmit
Description: Transmits an MDL message from a T3 interface. The no version disables transmission of the specified MDL message or all MDL messages.
Syntax: [ no ] mdl transmit { path-id | idle-signal | test signal }
no mdl transmit
� path-id � MDL path message; default is disabled
� idle-signal � MDL idle signal message; default is disabled
� test-signal � MDL test signal message; default is disabled
Mode(s): Controller Configuration
medium ipv4262
medium ipv4
Description: Specifies the medium type of an L2TP or L2F tunnel to IPv4 (the only medium type currently supported). The no version restores the default value, ipv4.
Syntax: medium ipv4
no medium
Mode(s): Domain Map Tunnel Configuration
member-interface
Description: Adds an MLPPP link interface�also known as an MLPPP bundle member�to an MLPPP bundle or adds an MFR link interface�also known as an MFR bundle member� to an MFR bundle. The no version deletes the specified interface from the MLPPP or MFR bundle.
Syntax: [ no ] member-interface interfaceType interfaceSpecifier
� interfaceType � interface type: serial or pos
� interfaceSpecifier � particular interface; see Interface Types and Specifiers in About This Guide
Mode(s): Interface Configuration, Subinterface Configuration
memory
Description: Configures memory warning parameters. When the system reaches the high memory utilization value, it sends warning messages. When memory usage falls to the abated memory utilization value, the system stops sending warning messages. The no version returns the memory warning parameters to the default values.
Syntax: [ no ] memory warning highUtilization abatedUtilization
� highUtilization � high memory utilization value; the range is 1�99, and the default is 85
� abatedUtilization � abated memory utilization value; the range is 1�99, and the default is 75
Mode(s): Global Configuration
message-digest-key md5ERX Edge Routers
263
message-digest-key md5
Description: Enables OSPF MD5 authentication for the remote-neighbor interface and configures the MD5 key. The no version deletes an MD5 key.
Syntax: message-digest-key keyID md5 [ 0 | 8 ] msgDigestKey
no message-digest-key keyID
� keyID � key identifier in the range 1�255
� md5 � specifies use of the MD5 algorithm
� 0 � indicates that the msgDigestKey is entered in unencrypted form (plaintext); this is the default option
� 8 � indicates that the msgDigestKey is entered in encrypted form (ciphertext)
� msgDigestKey � the OSPF password. The password can be a continuous string of up to 16 alphanumeric characters.
Note: If all the MD5 keys have been deleted, the authentication type is still MD5, but you need to configure MD5 keys.
Note: To disable MD5 authentication for the remote-neighbor interface, use the authentication-none command.
Mode(s): Remote Neighbor Configuration
metric-style narrow
Description: Configures the system to generate and accept only old-style IS-IS TLVs with narrow (six-bit) metric fields. If you issue this command, the value configured with the isis metric command can range only from 0�63. The no version restores the default value, which is to generate and accept only old-style TLVs with narrow (six-bit) metric fields.
Syntax: [ no ] metric-style narrow [ transition ] [ level-1 | level-2 | level-1-2 ]
� transition � configures the system to additionally accept new-style TLVs with wider metric fields
� level-1 � configuration applies only to level 1 routing
� level-2 � configuration applies only to level 2 routing
� level-1-2 � configuration applies to both level 1 and level 2 routing
Mode(s): Router Configuration
metric-style transition264
metric-style transition
Description: Configures the system to generate and accept both old-style IS-IS TLVs with narrow (six-bit) metric fields and new-style IS-IS TLVs with wider metric fields. If you issue this command, the value configured with the isis metric command can range from 0�16777215. The no version restores the default value, which is to generate and accept only old-style TLVs with narrow (six-bit) metric fields.
Syntax: [ no ] metric-style transition [ level-1 | level-2 | level-1-2 ]
� level-1 � configuration applies only to level 1 routing
� level-2 � configuration applies only to level 2 routing
� level-1-2 � configuration applies to both level 1 and level 2 routing
Mode(s): Router Configuration
metric-style wide
Description: Configures the system to generate and accept only new-style IS-IS TLVs with wider metric fields. If you issue this command, the value configured with the isis metric command can range from 0�16777215. The no version restores the default value, which is to generate and accept only old-style TLVs with narrow (six-bit) metric fields.
Syntax: [ no ] metric-style wide [ transition ] [ level-1 | level-2 | level-1-2 ]
� transition � configures the system to additionally accept old-style TLVs with narrow (six-bit) metric fields
� level-1 � configuration applies only to level 1 routing
� level-2 � configuration applies only to level 2 routing
� level-1-2 � configuration applies to both level 1 and level 2 routing
Mode(s): Router Configuration
motd-banner
Description: Controls display of a message-of-the-day banner (configured with the banner command) on a particular line when a connection is initiated. The no version disables the banner.
Syntax: [ no ] motd-banner
Mode(s): Line Configuration
mplsERX Edge Routers
265
mpls
Description: Enables, disables, or deletes MPLS on either a virtual router or on an interface. MPLS does not exist by default and must be created explicitly or implicitly. If it is created implicitly, MPLS remains disabled until explicitly enabled. The no mpls version halts MPLS on the virtual router or interface and deletes the MPLS configuration. The no mpls disable version enables MPLS that was previously disabled or implicitly created on the virtual router or interface.
Syntax: [ no ] mpls [ traffic-eng tunnels ] [ disable ]
� traffic-eng tunnels � optional keyword for compatibility with non-ERX implementations
� disable � stops MPLS on the virtual router, but leaves the MPLS global configuration intact
Mode(s): Global Configuration, Interface Configuration
mpls atm vci range
Description: Specifies the range for virtual circuit identifiers used for MPLS on ATM major interfaces. An interface can support LDP, RSVP-TE, or both as the label distribution protocol. You can set VCI ranges independently for each protocol. If you do not specify a keyword, the range applies to both protocols. The no version deletes the range.
Syntax: mpls atm vci range [ ldp | rsvp ] minVCI maxVCI
no mpls atm vci range [ ldp | rsvp ]
� ldp � specifies the range when LDP is used as the label distribution protocol
� rsvp � specifies the range when RSVP is used as the label distribution protocol
� minVCI � lowest virtual circuit identifier acceptable for a label, a value from 33�65535
� maxVCI � highest virtual circuit identifier acceptable for a label, a value from 33�65535
Mode(s): Interface Configuration
mpls atm vpi range266
mpls atm vpi range
Description: Specifies the range for virtual path identifiers used for MPLS on ATM major interfaces. An interface can support LDP, RSVP-TE, or both as the label distribution protocol. You can set VPI ranges independently for each protocol. If you do not specify a keyword, the range applies to both protocols. The no version deletes the range.
Syntax: mpls atm vpi range [ ldp | rsvp ] minVPI maxVPI
no mpls atm vpi range [ ldp | rsvp ]
� ldp � specifies the range when LDP is used as the label distribution protocol
� rsvp � specifies the range when RSVP-TE is used as the label distribution protocol
� minVPI � lowest virtual path identifier acceptable for a label, a value in the range 0�255
� maxVPI � highest virtual path identifier acceptable for a label, a value in the range 0�255
Mode(s): Interface Configuration
mpls bandwidth
Description: Specifies the total bandwidth reservable for MPLS on the interface. The no version restores the default value of 0.
Syntax: { ip rsvp | mpls} bandwidth bandwidth
no { ip rsvp | mpls} bandwidth
� ip rsvp � keyword for compatibility with non-ERX implementations of MPLS
� mpls � specify this keyword for our MPLS implementation
� bandwidth � reservable bandwidth in kilobits per second, a value in the range 1�10000000
Mode(s): Interface Configuration
mpls disable
Description: Disables the specified label distribution protocol on the interface. The no version reenables the label distribution protocol when it was previously disabled on the interface.
Syntax: [ no ] mpls { ldp | rsvp } disable
Mode(s): Interface Configuration
mpls explicit-pathERX Edge Routers
267
mpls explicit-path
Description: Defines an explicit path by name or ID number and also enables or disables the explicit path. The no version deletes the explicit path.
Syntax: { ip | mpls } explicit-path { name name | identifier number } [ enable | disable ]
no { ip | mpls } explicit-path { name name | identifier number }
� ip � keyword for compatibility with non-ERX implementations
� mpls � specify this keyword for our MPLS implementation
� name � name for the explicit path; string of up to 20 characters
� number � number identifying the explicit path in the range 1�65535
� enable � reenables the explicit path that was previously disabled on the virtual router; to prevent a partially configured explicit path from being used, do not enable it until you have finished configuring or modifying the path
� disable � disables the explicit path that was previously enabled on the virtual router
Mode(s): Global Configuration
mpls ip propagate-ttl
Description: Controls the value for the TTL field in the MPLS header when a label is assigned to an IP packet. Enabled by default, this command sets the TTL to the TTL value from the IP packet header. The no version sets the value to 255 and controls how the network structure is hidden from the traceroute command. The default version reverts to the global default, causing the TTL field to be copied from the IP packet header and enabling the traceroute command to show all the hops in the network., and propagating the label TTL into the IP header at the tunnel egress.
Syntax: mpls ip propagate-ttl [ forwarded | local ]
{ no | default } mpls ip propagate-ttl [ forwarded | local ]
� forwarded � hides the network structure from traceroute only for forwarded packets
� local � hides the network structure from traceroute only for local packets
Mode(s): Global Configuration
mpls label-range268
mpls label-range
Description: Specifies the range for the platform label space; all configured virtual routers can share this range. The no version restores the default values, 16�1048575.
Syntax: mpls label-range minLabel maxLabel
no mpls label-range
� minLabel � lowest number acceptable for a label, a value in the range 16�1048575
� maxLabel � highest number acceptable for a label, a value in the range 16�1048575
Mode(s): Global Configuration
mpls ldp advertise-labels
Description: Controls the distribution of incoming labels distributed by LDP. The no version halts advertisement of all incoming labels or the specified labels.
Syntax: mpls ldp advertise-labels { host-only | for routeAccessList[ to neighborAccessList ] }
no mpls ldp advertise-labels { policy-list | host-only |for routeAccessList [ to neighborAccessList ] }
� host-only � advertises only labels for host routes (routes with a 32-bit mask)
� routeAccessList � name of access list identifying routes for which label advertisement is permitted or denied
� neighborAccessList � name of access list identifying neighbors to which the LSR advertises labels
� policy-list � deletes all lists configured with the for routeAccessList option
Mode(s): Global Configuration
mpls ldp discovery transport-address
Description: Specifies the transport address of the local peer advertised in LDP discovery hello messages. The no version halts advertisement of the address.
Syntax: mpls ldp discovery transport-address { interface | ipAddress }
no mpls ldp discovery transport-address
� interface � specifies that the interface IP address is advertised as the transport address
� ipAddress � IP address advertised as the transport address
Mode(s): Interface Configuration
mpls ldp no-route retriesERX Edge Routers
269
mpls ldp no-route retries
Description: Specifies the number of attempts that will be made to set up an LSP for topology-driven LDP after a failure due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful.
Syntax: mpls ldp no-route retries retryNum
no mpls ldp no-route retries
� retryNum � number of retry attempts in the range 0�65535
Mode(s): Global Configuration
mpls ldp no-route retry-time
Description: Specifies the interval in seconds between attempts to set up an LSP for topology-driven LDP after a failure due to no available route. The no version restores the default value of 30 seconds.
Syntax: mpls ldp no-route retry-time retryTime
no mpls ldp no-route retry-time
� retryTime � interval in the range 1�60
Mode(s): Global Configuration
mpls ldp retries
Description: Specifies the number of attempts that will be made to set up an LSP for topology-driven LDP after a failure other than one due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful.
Syntax: mpls ldp retries retryNum
no mpls ldp retries
� retryNum � number of retry attempts in the range 0�65535
Mode(s): Global Configuration
mpls ldp retry-time270
mpls ldp retry-time
Description: Specifies the interval in seconds between attempts to set up an LSP for topology-driven LDP after a failure other than one due to no available route. The no version restores the default value of 30 seconds.
Syntax: mpls ldp [ no-route ] retry-time retryTime
no mpls ldp retry-time
� retryTime � interval in the range 1�60
Mode(s): Global Configuration
mpls ldp session retries
Description: Specifies the number of attempts that will be made to set up an LDP session. The default value of 0 means the attempts will be made until successful. The no version restores the default value.
Syntax: mpls ldp session retries retryNum
no mpls ldp session retries
� retryNum � number of attempts in the range 0�65535
Mode(s): Global Configuration
mpls ldp session retry-time
Description: Use to specify the interval in seconds between attempts to set up an LDP session. The no version restores the default value of 30 seconds.
Syntax: mpls ldp session retry-time retryTime
no mpls ldp session retry-time
� retryTime � interval in the range 0�60
Mode(s): Global Configuration
mpls ldp targeted-hello receive listERX Edge Routers
271
mpls ldp targeted-hello receive list
Description: Configures the list of peer addresses from which MPLS accepts targeted hello messages. The no version removes the list of peer addresses.
Syntax: [ no ] mpls ldp targeted-hello receive list { access-list accessListName | ipAddress [ ipAddress ]* }
� accessListName � string of up to 32 alphanumeric characters that identifies an access list
� ipAddress � IP address of a peer
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Global Configuration
mpls ldp targeted-hello send list
Description: Configures the list of peer addresses to which MPLS sends targeted hello messages. The no version removes the list of peer addresses.
Syntax: [ no ] mpls ldp targeted-hello send list { access-list accessListName | ipAddress [ ipAddress ]* }
� accessListName � string of up to 32 alphanumeric characters that identifies an access list
� ipAddress � IP address of a peer
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Global Configuration
mpls lsp no-route retries
Description: Specifies the number of attempts that will be made to set up an LSP for CR-LDP and RSVP-TE after a failure due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful.
Syntax: mpls lsp no-route retries retryNum
no mpls lsp no-route retries
� retryNum � number of retry attempts in the range 0�65535
Mode(s): Global Configuration
mpls lsp no-route retry-time272
mpls lsp no-route retry-time
Description: Specifies the interval in seconds between attempts to set up an LSP for CR-LDP and RSVP-TE after a failure due to no available route. The no version restores the default value of 5 seconds.
Syntax: mpls lsp no-route retry-time retryTime
no mpls lsp no-route retry-time
� retryTime � interval in the range 1�60
Mode(s): Global Configuration
mpls lsp retries
Description: Specifies the number of attempts that will be made to set up an LSP for CR-LDP and RSVP-TE after a failure other than one due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful.
Syntax: mpls lsp retries retryNum
no mpls lsp retries
� retryNum � number of retry attempts in the range 0�65535
Mode(s): Global Configuration
mpls lsp retry-time
Description: Specifies the interval in seconds between attempts to set up an LSP for CR-LDP and RSVP-TE after a failure other than one due to no available route. The no version restores the default value of 5 seconds.
Syntax: mpls lsp [ no-route ] retry-time retryTime
no mpls lsp retry-time
� retryTime � interval in the range 1�60
Mode(s): Global Configuration
mpls match exp-bitsERX Edge Routers
273
mpls match exp-bits
Description: Sets the traffic class and color for incoming traffic matching the specified EXP bits value in the MPLS shim header. The no version reverts to the default behavior for traffic matching the specified EXP bits value, setting neither traffic class nor color.
Syntax: mpls match exp-bits bitValue set traffic-class className color { green | yellow | red }
no mpls match exp-bits bitValue
� bitValue � value in the range 0�7 that matches the corresponding binary value (000�111) for the three EXP bits
� className � name of a traffic class; the system supports up to eight traffic classes
� green � sets packet color to green, indicating a low drop preference
� yellow � sets packet color to yellow, indicating a medium drop preference
� red � sets packet color to red, indicating a high drop preference
Mode(s): Global Configuration
mpls match traffic-class
Description: Sets the EXP bits in the MPLS shim header of outgoing traffic matching the specified combination of traffic class and color. The no version reverts to the default behavior for traffic matching the specified traffic class and color combination. The default behavior sets the EXP bits to 000 for traffic entering an LSP and has no effect on the EXP bits for transit traffic.
Syntax: mpls match traffic-class className color { green | yellow | red } set exp-bits bitValue
no mpls match traffic-class className color { green | yellow | red }
� className � name of a traffic class; the system supports up to eight traffic classes
� green � sets packet color to green, indicating a low drop preference
� yellow � sets packet color to yellow, indicating a medium drop preference
� red � sets packet color to red, indicating a high drop preference
� bitValue � value in the range 0�7 that sets the corresponding binary value (000�111) for the three EXP bits
Mode(s): Global Configuration
mpls profile274
mpls profile
Description: In Global Configuration mode, creates or modifies a configuration profile for the specified label distribution protocol�either LDP or RSVP-TE. Places the CLI in either LDP Configuration mode or RSVP Configuration mode. You can specify the name of a previously created profile to modify its parameters. If you specify a profile that was not previously configured, the command creates the new profile with the factory default settings. If you do not specify a profile name, the factory default profile is assumed. The no version deletes the specified profile.
In Interface Configuration mode, enables either LDP or RSVP-TE on the interface. You can specify the name of a profile configured in Global Configuration mode to set the parameters for the protocol. If you specify a profile that was not previously configured, the command creates the new profile with the factory default settings. If you do not specify a profile name, the factory default profile values are applied. The no mpls version deletes the protocol on the interface. The no mpls profile version reverts to the default profile on the interface.
Syntax: In Global Configuration mode:
mpls { ldp | rsvp } [ interface ] profile [ profileName ]
no mpls { ldp | rsvp } interface profile profileName
In Interface Configuration mode:
mpls { ldp | rsvp } [ profile profileName ]
no mpls { ldp | rsvp } [ profile ]
� ldp � specifies LDP as the label distribution protocol
� rsvp � specifies RSVP-TE as the label distribution protocol
� interface � keyword for compatibility with non-ERX implementations
� profileName � name of a profile to be created or modified (Global Configuration mode), applied to an interface (Interface Configuration mode), or deleted (both modes); the profile sets the values for the protocol parameters; until you modify the profile settings, the values match those of the implicit default profile
Mode(s): Global Configuration, Interface Configuration
mpls-relayERX Edge Routers
275
mpls-relay
Description: Route traffic on the specified interface over an MPLS LSP.
Syntax: { mpls-relay remoteAddress | route interface interfaceType interfaceSpecifier } [ vc-id ] vcidValue [ group ID groupIdValue ]
no { mpls-relay | route } [ group ID groupIdValue ]
� mpls-relay � routes the traffic on this interface over an MPLS LSP
� remoteAddress � destination ip address
� route interface � routes the traffic on this interface over another one
� interfaceType � interface type: serial or pos
� interfaceSpecifier � particular interface; see Interface Types and Specifiers in About This Guide
� vcidValue � virtual connection ID; can be any 32-bit value. The two ends across the MPLS core must match inside each VC type.
� groupIdValue � group of virtual connections ID; can be any 32-bit value
Mode(s): Interface Configuration
mpls reoptimize
Description: Performs an immediate check for better paths for all existing LSPs. There is no no version.
Syntax: mpls [ traffic-eng ] reoptimize
� traffic-eng � optional keyword for compatibility with non-ERX implementations
Mode(s): User Exec, Privileged Exec
mpls reoptimize timers frequency
Description: Specifies the frequency at which existing LSPS are checked for better paths. The no version restores the default value of 3600 seconds.
Syntax: mpls [ traffic-eng ] reoptimize timers frequency seconds
no mpls [ traffic-eng ] reoptimize timers frequency
� traffic-eng � optional keyword for compatibility with non-ERX implementations
� seconds � number of seconds in the range 0�604800; a value of zero means that no reoptimization is performed
Mode(s): Global Configuration
mpls rsvp message-bundling276
mpls rsvp message-bundling
Description: Enables RSVP-TE to send bundle messages, each of which includes multiple standard RSVP-TE messages, to reduce the overall message processing overhead. The no version disables RSVP-TE message bundling.
Syntax: [ no ] mpls rsvp message-bundling
Mode(s): RSVP Configuration
mpls rsvp refresh-reduction
Description: Enables RSVP-TE summary refresh and reliability features, including the message ID object, the message ack object, and summary refresh messages. The no version disables summary refresh and reliability.
Syntax: [ no ] mpls rsvp refresh-reduction
Mode(s): RSVP Configuration
mpls spf-use-any-best-path
Description: Enables the SPF calculations to consider both the best IGP (IS-IS) paths and the MPLS tunnel to reach the tunnel endpoint. The no version restores the default value, which is to always use the MPLS tunnel to reach the tunnel endpoint�the IGP best paths are not considered.
Syntax: [ no ] mpls spf-use-any-best-path
Mode(s): Router Configuration
mpls topology-driven-lsp
Description: Enables topology-driven LSP creation on the virtual router or in an IP profile. The no version disables topology-driven LSPs on the virtual router or in IP profiles.
Syntax: mpls topology-driven-lsp [ ip-profile ipProfileName ]
no mpls topology-driven-lsp [ ip-profile ]
� ipProfileName � name of an IP profile used for creating IP interfaces over topology-driven LSPs
Mode(s): Global Configuration
mpls topology-driven-lsp ip-interfacesERX Edge Routers
277
mpls topology-driven-lsp ip-interfaces
Description: Enables the creation of IP interfaces over topology-driven LSPs. The no version prevents creation of IP interfaces over topology-driven LSPs.
Syntax: mpls topology-driven-lsp ip-interfaces [ egress | ingress ][ { access-list | prefix-list } listName ] [ host-only ]
no mpls topology-driven-lsp ip-interfaces [ egress | ingress ] [ host-only ][ policy-list ]
� egress � specifies that IP interfaces are created only over the LSP egress
� ingress � specifies that IP interfaces are created only over the LSP ingress
� access-list � specifies listName is an access list
� prefix-list � specifies that listName is a prefix list
� listName � name of access list or prefix list that specifies LSPs over which IP interfaces are created
� host-only � specifies that IP interfaces are created only over LSPs to host addresses
� policy-list � removes previously applied access lists or prefix lists
Mode(s): Global Configuration
mpls traffic-eng
Description: Enables flooding of MPLS traffic-engineering link information into the specified IS-IS level. Flooding is disabled by default. The no version disables flooding.
Syntax: mpls traffic-eng { level-1 | level-2 }
no mpls traffic-eng { level-1 | level-2 | router-id }
� level-1 � floods IS-IS level 1
� level-2 � floods IS-IS level 2
Mode(s): Router Configuration
mpls traffic-eng administrative-weight
Description: Specifies the administrative weight for the interface. The no version restores the default value, which matches the IGP-determined weight (cost).
Syntax: mpls traffic-eng administrative-weight weight
no mpls traffic-eng administrative-weight
� weight � administrative weight, a value in the range0�4294967295
Mode(s): Interface Configuration, Subinterface Configuration
mpls traffic-eng area278
mpls traffic-eng area
Description: Enables flooding of MPLS traffic-engineering link information into the specified OSPF area. Flooding is disabled by default. The no version disables flooding.
Syntax: [ no ] mpls traffic-eng area { areaId | areaIdInt }
� areaId � OSPF area ID in IP address format
� areaIdInt � OSPF area ID as a decimal value in the range 0�4294967295
Mode(s): Router Configuration
mpls traffic-eng attribute-flags
Description: Specifies attributes for the interface for traffic engineering. The attributes are compared with tunnel affinity bits to determine links eligibility for the tunnel. The no version restores the default value, 0x0.
Syntax: mpls traffic-eng attribute-flags bitmask
no mpls traffic-eng attribute-flags
� bitmask � mask that sets the attributes, a value in the range 0x0�0xFFFFFFFF
Mode(s): Interface Configuration, Subinterface Configuration
mpls traffic-eng flood thresholdsERX Edge Routers
279
mpls traffic-eng flood thresholds
Description: Specifies thresholds for the flooding of the current reservable bandwidth throughout the network. You can configure a set of thresholds for increases or decreases in bandwidth. Flooding is triggered when the reservable bandwidth increases past any up threshold or decreases past any down threshold. The no version restores the following default values:
� For increases in bandwidth (up changes) � 15, 30, 45, 60, 75, 80, 85, 90, 95, 97, 98, 99, 100
� For decreases in bandwidth (down changes) � 100, 99, 98, 97, 96, 95, 90, 85, 80, 75, 60, 45, 30, 15
Syntax: mpls traffic-eng flood thresholds { up | down } percentage [ percentage ]*
no mpls traffic-eng flood thresholds { up | down }
� up � specifies that an increase in bandwidth past the threshold triggers flooding
� down � specifies that a decrease in bandwidth past the threshold triggers flooding
� percentage � percentage of reservable bandwidth, a value from 1 to 100 percent for increasing bandwidth and from 0 to 99 percent for decreasing bandwidth
� * � indicates that the percentage can be repeated multiple times in a list in the command line
Mode(s): Interface Configuration, Subinterface Configuration
mpls traffic-eng link-management timers periodic-flooding
Description: Specifies the interval at which bandwidth values are flooded to the entire network. Configuring a value of 0 turns off flooding.The no version restores the default value, 180.
Syntax: mpls traffic-eng link-management timers periodic-flooding frequency
no mpls traffic-eng link-management timers periodic-flooding
� frequency � interval in seconds, a value from 0 to 3600
Mode(s): Global Configuration
mpls traffic-eng router-id280
mpls traffic-eng router-id
Description: Specifies a stable interface to be used as a router ID for MPLS traffic engineering with IS-IS, typically a loopback interface. The interface acts as the destination node for tunnels originating at other nodes. The no version removes the interface as a router ID.
Syntax: [ no ] mpls traffic-eng router-id interfaceType interfaceSpecifier
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Router Configuration
mpls tunnels profile
Description: Creates or disables a tunnel profile for MPLS. The no mpls tunnels profile version deletes the tunnel profile. The no mpls tunnels profile disable version reenables tunnels previously disabled.
Syntax: [ no ] mpls tunnels profile profileName [ disable ]
� profileName � name of a tunnel configuration profile used for MPLS tunnels
� disable � disables all tunnels associated with the profile
Mode(s): Global Configuration
mru
Description: Sets the maximum allowable size in bytes of the maximum receive unit for CE1, cOCx/STMx, CT1, CT3, E3-FRAME, HSSI, POS, T3-FRAME, or X.21/V.35 interfaces. The no version restores the default value, which varies according to interface type.
Syntax: mru mruSize
no mru
� mruSize � maximum allowable size of the MRU
CE1, CT1, cOCx/STMx, CT3, E3-FRAME, T3-FRAME, and X.21/V.35 interfaces � default is 1600; range is 4�32765
HSSI interfaces � default is 4770; range is 4�32768
POS interfaces � default is 4470; range is 1�65529
Mode(s): Interface Configuration
mtraceERX Edge Routers
281
mtrace
Description: Discovers the routes that multicast packets follow when travelling to their destinations. There is no no version.
Syntax: mtrace sourceAddress [ destinationAddress [ groupAddress[ responseAddress ] ] ] [ maxHops ] [ detailed ]
� sourceAddress � DNS name or unicast IP address of the multicast-capable device at the beginning of the path.
� destinationAddress � DNS name or unicast address of the device at the end of the path. The default destination is the system from which you type the command.
� groupAddress � DNS name or multicast address of the group for which you want to trace routes. The default address is 224.2.0.1 (the group used for MBONE Audio).
� responseAddress � IP address that receives the results of the trace
� maxHops � maximum number of hops allowed for the trace. The default is 64.
� detailed � provides a detailed description of the trace, rather than a summary
Mode(s): User Exec, Privileged Exec
mtu
Description: Sets the maximum allowable size in bytes of the maximum transmission unit for CE1, cOCx/STMx, CT1, CT3, E3-FRAME, Ethernet, HSSI, POS, T3-FRAME, or X.21/V.35 interfaces. The no version restores the default value, which varies according to interface type. This command is not available for the Ethernet interface on the SRP module.
Syntax: mtu mtuSize
no mtu
� mtuSize � maximum allowable size of the MTU
CE1, CT1, cOCx/STMx, CT3, E3-FRAME, T3-FRAME, and X.21/V.35 interfaces � default is 1600; range is 4�32765
HSSI interfaces � default is 4770; range is 4�32768
Ethernet interfaces � default is 1518; range is 64�9188, except on the FE-2 and FE-8 I.O modules, where the range is 64�9042; you cannot configure MTU on Ethernet interfaces on the SRP module
POS interfaces � default is 4470; range is 1�65529
Mode(s): Interface Configuration
multicast group port limit282
multicast group port limit
Description: Limits the number of IGMP groups that a port can accept. The no version restores the default situation, in which there is no limit to the number of IGMP groups the port can accept.
Syntax: multicast group port slot/port limit groupLimit
no multicast group port slot/port limit
� slot � number of slot in which the line module resides
� port � number of port
� groupLimit� maximum number of IGMP groups that an interface can accept in the range 0�64,000
Mode(s): Global Configuration
neighborERX Edge Routers
283
neighbor
Description: For OSPF, configures OSPF neighbors on an NBMA network. For RIP, specifies a RIP neighbor to which the router sends unicast messages. The no version removes the neighbor (OSPF and RIP) or restores the default values (OSPF).
Syntax: For OSPF:
neighbor ipAddress [ pollinterval seconds | priority number ]
no neighbor ipAddress [ pollinterval | priority ]
� ipAddress � IP address of the neighbor�s interface; this interface must itself be configured for the NBMA network type
� number � router priority value of the neighbor in the range 1�4294967295; the default is 0
� seconds � interval in seconds at which the neighbor is polled; should be much larger than the hello interval (per RFC 1247); ranges from 0�255, the default is 120 seconds
For RIP:
[ no ] neighbor ipAddress
� ipAddress � IP address of the neighbor�s interface; this interface must be defined as a passive interface with the passive-interface command
Mode(s): Router Configuration
neighbor activate
Description: Specifies a peer or peer group with which routes of the current address family are exchanged. A peer or peer group can be activated in more than one address family. By default, a peer or peer group is activated only for the IPv4 unicast address family. The address families that are actively exchanged over a BGP session are negotiated when the session is established. The no version indicates that routes of the current address family should not be exchanged with the peer or peer group. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.
Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } activate
� ipAddress � neighbor�s IP address
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
Mode(s): Address Family Configuration, Router Configuration
neighbor advertisement-interval284
neighbor advertisement-interval
Description: Sets the minimum interval between the sending of BGP updates for a given prefix. The no version restores the default interval.
Syntax: neighbor { ipAddress | peerGroupName } advertisement-interval seconds
no neighbor { ipAddress | peerGroupName } advertisement-interval [ seconds ]
� ipAddress � neighbor�s IP address
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� seconds � interval in seconds between update messages; range is from 0�600; default is 30 seconds for external peers and 5 seconds for internal peers
Mode(s): Address Family Configuration, Router Configuration
neighbor allowas-in
Description: Specifies the number of times that the AS path of a received route may contain the recipient BGP speaker�s AS number and still be accepted. The no version restores the default state, which is to reject as a loop any route whose path contains the speaker�s AS number.
Syntax: [ no ] neighbor { ipAddress | peerGroupName } allowas-in number
� ipAddress � neighbor�s IP address
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� number � number in the range 1�10
Mode(s): Router Configuration
neighbor as-overrideERX Edge Routers
285
neighbor as-override
Description: Prevents routing loops between routers within a VPN by substituting the current router�s AS number in routing tables for that of the neighboring router. The no version halts this substitution. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.
Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } as-override
� ipAddress � neighbor�s IP address
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.
Mode(s): Router Configuration
neighbor capability286
neighbor capability
Description: Controls advertisement of BGP capabilities to peers. Capability negotiation and advertisement of all capabilities, except the ORF capability, is enabled by default. The no version disables capability negotiation or prevents advertisement of the specified capability. The default version restores the default condition, advertising the capability.
Syntax: For all capabilities except ORF:
[ no | default ] neighbor { ipAddress | peerGroupName } capability { negotiation | dynamic-capability-renegotiation | four-octet-as-numbers | route-refresh | route-refresh-cisco }
For the ORF capability:
neighbor { ipAddress | peerGroupName } capability orf { prefix-list | prefix-list-cisco } { send | receive | both }
{ no | default } neighbor { ipAddress | peerGroupName } orf { prefix-list | prefix-list-cisco } [ send | receive | both ]
� ipAddress � neighbor�s IP address
� peerGroupName � name of BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� negotiation � determines whether the capabilities option is sent in the open message while establishing a session; if it is not sent, no capability negotiation is conducted with that peer
� dynamic-capability-renegotiation � indicates support of renegotiation of capabilities (sending new capabilities or removing previously negotiated capabilities) without performing a hard clear of the BGP session
� four-octet-as-numbers � indicates support of AS numbers and sub-AS numbers that are four octets in length, a range from 0�4294967295
� route-refresh � indicates support of route-refresh messages that request the peer to resend its routes to the system, enabling the BGP speaker to apply modified or new policies to the routes when it receives them again
� route-refresh-cisco � indicates support of Cisco-proprietary (pre-standard) route-refresh messages for interoperability with older Cisco devices
� orf � indicates support of cooperative route filtering to install a BGP speaker�s inbound route filter as an outbound route filter on the peer
� prefix-list � installs the filter�any inbound prefix list or distribute list�as an outbound prefix list
� prefix-list-cisco � installs the filter�any inbound prefix list or distribute list�as an outbound Cisco proprietary prefix list
� send � sends inbound route filter to peer to install as outbound route filter
neighbor default-originateERX Edge Routers
287
� receive � accepts inbound route filter from peer and installs it as outbound route filter; cannot be configured for a peer group or a peer that is a member of a peer groups
� both � sends and accepts inbound route filters with peer for installation as outbound route filter
Mode(s): Address Family Configuration, Router Configuration
neighbor default-originate
Description: Allows a BGP speaker (the local router) to send the default route 0.0.0.0/0 to a neighbor for use as a default route. The no version halts sending a default route to the neighbor. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.
Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } default-originate
� ipAddress � neighbor�s IP address
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.
Mode(s): Address Family Configuration, Router Configuration
neighbor description
Description: Associates a textual description with a BGP neighbor. The no version removes the description.
Syntax: neighbor { ipAddress | peerGroupName } description text
no neighbor { ipAddress | peerGroupName } description
� ipAddress � neighbor�s IP address
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� text � up to 80 characters of text that describes the neighbor
Mode(s): Address Family Configuration, Router Configuration
neighbor distribute-list288
neighbor distribute-list
Description: Distributes BGP neighbor information as specified in an access list. The no version removes an entry.
Using distribute lists is one of several ways to filter BGP advertisements. You can also use route maps or use AS-path filters, as with the ip as-path access-list Global Configuration command and the neighbor filter-list command.
Syntax: neighbor { ipAddress | peerGroupName } distribute-list accessListName{ in | out }
no neighbor { ipAddress | peerGroupName } distribute-list [ accessListName ]{ in | out }
� ipAddress � neighbor�s IP address
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� accessListName � string of up to 32 alphanumeric characters identifying an access list
� in � applies list to incoming routes (inbound policy)
� out � applies list to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy
Mode(s): Address Family Configuration, Router Configuration
neighbor ebgp-multihop
Description: Allows BGP to accept route updates from external peers residing on networks that are not directly connected. The no version halts accepting such routers. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.
Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } ebgp-multihop [ ttl ]
� ipAddress � neighbor�s IP address
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� ttl � maximum number of hops to the peer; the value ranges from 1 to 255, with a default of 255
Mode(s): Address Family Configuration, Router Configuration
neighbor filter-listERX Edge Routers
289
neighbor filter-list
Description: Applies an AS path access list to advertisements inbound from or outbound to the specified neighbor, or assigns a weight to incoming routes that match the AS path access list. The no version stops the application of the list or assignment of the weight.
Syntax: To apply an access list:
neighbor { ipAddress | peerGroupName } filter-list accessListName { in | out }
no neighbor { ipAddress | peerGroupName } filter-list [ accessListName ] { in | out }
To assign a weight:
neighbor { ipAddress | peerGroupName } filter-list accessListName weight value
no neighbor { ipAddress | peerGroupName } filter-list [ accessListName ] weight [ value ]
� ipAddress � neighbor�s IP address
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� accessListName � name of a single AS path access list; string of up to 32 characters
� in � applies access list to incoming routes (inbound policy)
� out � applies access list to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy
� value � number in the range 0�65535; assigns relative importance to incoming routes matching AS paths
Mode(s): Address Family Configuration, Router Configuration
neighbor local-as290
neighbor local-as
Description: Assigns a local AS number for the specified BGP peer or peer group. The no version restores the default value set globally for the BGP instance with the router bgp command.
Syntax: neighbor { ipAddress | peerGroupName } local-as number
no neighbor { ipAddress | peerGroupName } local-as [ number ]
� ipAddress � neighbor IP address
� peerGroupName � name of the BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� number � number in the range 1�4294967295; the local AS to assign to the peer
Mode(s): Address Family Configuration, Router Configuration
neighbor maximum-orf-entries
Description: Sets the maximum number of ORF entries of a particular type that are accepted from the specified neighbor. The no version restores the default value of no limits.
Syntax: neighbor ipAddress maximum-orf-entries maximum
no neighbor ipAddress maximum-orf-entries [ maximum ]
� ipAddress � neighbor IP address
� maximum � maximum number of ORF entries in the range 0�4294967295; the default is no limit
Mode(s): Address Family Configuration, Router Configuration
neighbor maximum-prefixERX Edge Routers
291
neighbor maximum-prefix
Description: Sets the number of prefixes that can be received from a neighbor. The no version removes the maximum prefix limitation.
Syntax: neighbor { ipAddress | peerGroupName } maximum-prefix maximum[ threshold ] [ strict ] [ warning-only ]
no neighbor { ipAddress | peerGroupName } maximum-prefix [ maximum ][ threshold ] [ strict ] [ warning-only ]
� ipAddress � neighbor IP address
� peerGroupName � name of the BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� maximum � maximum number of prefixes; the default is no limit
� threshold � percent of maximum at which to log a warning in the range 0�100; the default is 75
� strict � checks the maximum prefix limit against all received routes rather than the default behavior of checking it only against accepted routes
� warning-only � causes BGP software to log a warning, rather than reset the connection if the maximum or threshold value is exceeded
Mode(s): Address Family Configuration, Router Configuration
neighbor maximum-update-size
Description: Sets the maximum size of update messages transmitted to a BGP peer. The no version removes the maximum update size limitation.
Syntax: neighbor { ipAddress | peerGroupName } maximum-update-size value
no neighbor { ipAddress | peerGroupName } maximum-update-size [ value ]
� ipAddress � neighbor IP address
� peerGroupName � name of the BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� value � maximum update size in octets in the range 256�4096; he default is 1024
Mode(s): Address Family Configuration, Router Configuration
neighbor next-hop-self292
neighbor next-hop-self
Description: Forces the BGP speaker to report itself as the next hop for an advertised route it advertised to a neighbor. Typically you use this command to prevent third-party next hops from being used on NBMA media such as Frame Relay. The no version disables the feature. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.
Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } next-hop-self
� ipAddress � IP address of BGP-speaking neighbor
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.
Mode(s): Address Family Configuration, Router Configuration
neighbor password
Description: Enables MD5 authentication on a TCP connection between two BGP peers. The no version disables MD5 authentication.
Syntax: neighbor { ipAddress | peerGroupName } password [ 0 | 8 ] string
no neighbor { ipAddress | peerGroupName } password
� ipAddress � IP address of the BGP neighbor that belongs to the peer group specified by the name
� peerGroupName � name of the BGP peer group to which this neighbor belongs. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� 0 � indicates the MD5 password is entered in unencrypted form (plaintext)
� 8 � indicates the MD5 password is entered in encrypted form (ciphertext)
� string � MD5 password, an alphanumeric text string of up to 80 characters
Mode(s): Address Family Configuration, Router Configuration
neighbor peer-groupERX Edge Routers
293
neighbor peer-group
Description: When used from Router Configuration mode without specifying an IP address, creates a BGP peer group. The no version removes a peer group.
When used from Router Configuration mode with an IP address or from Address Family Configuration mode, configures a BGP neighbor to be a member of a peer group. The no version removes a neighbor from a peer group.
Syntax: Creating a peer group:
neighbor peerGroupName peer-group
no neighbor peerGroupName [ peer-group ]
� peerGroupName � name of BGP peer group
Assigning members to a peer group:
neighbor ipAddress peer-group peerGroupName
no neighbor ipAddress peer-group [ peerGroupName ]
� ipAddress � IP address of the BGP neighbor that belongs to the peer group specified by the name
� peerGroupName � name of the BGP peer group to which this neighbor belongs
Mode(s): Address Family Configuration, Router Configuration
neighbor prefix-list
Description: Assigns an inbound or outbound prefix list. The no version removes the prefix list.
Syntax: neighbor { ipAddress | peerGroupName } prefix-list prefix-list-name { in | out }
no neighbor { ipAddress | peerGroupName } prefix-list [ prefixListName ]{ in | out }
� ipAddress � IP address of BGP-speaking neighbor
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� prefixListName � name of a BGP prefix list
� in � assigns prefix list to incoming routes (inbound policy)
� out � assigns prefix list to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy
Mode(s): Address Family Configuration, Router Configuration
neighbor prefix-tree294
neighbor prefix-tree
Description: Assigns an inbound or outbound prefix tree. The no version removes the prefix tree.
Syntax: neighbor { ipAddress | peerGroupName } prefix-tree prefixTreeName{ in | out }
no neighbor { ipAddress | peerGroupName } prefix-tree [ prefixTreeName ]{ in | out }
� ipAddress � IP address of BGP-speaking neighbor
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� prefixTreeName � name of a BGP prefix tree
� in � assigns prefix tree to incoming routes (inbound policy)
� out � assigns prefix tree to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy
Mode(s): Address Family Configuration, Router Configuration
neighbor remote-as
Description: Adds an entry to the BGP neighbor table. The no version removes an entry from the table. Specifying a neighbor with an AS number that matches the AS number specified in the router bgp Global Configuration command identifies the neighbor as internal to the local AS. Otherwise, the neighbor is considered external.
Syntax: neighbor { ipAddress | peerGroupName } remote-as number
no neighbor { ipAddress | peerGroupName } [ remote-as [ number ] ]
� ipAddress � IP address
� peerGroupName � the name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� number � number in the range 1�4294967295; the AS to which the neighbor belongs
Mode(s): Address Family Configuration, Router Configuration
neighbor remove-private-asERX Edge Routers
295
neighbor remove-private-as
Description: Removes private AS numbers in updates sent to external peers. The no version halts removing private AS numbers. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.
Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } remove-private-as
� ipAddress � neighbor's IP address
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.
Mode(s): Address Family Configuration, Router Configuration
neighbor rib-out disable
Description: Disables storage of routes to the Adj-RIBs-Out table (disables rib-out) for the neighbor or peer group. Storage is disabled by default. The no version enables the route storage. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.
Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } rib-out disable
� ipAddress � neighbor�s IP address; you can independently enable or disable the Adj-RIBs-Out table for a peer, regardless of whether it is a member of a peer group
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, a single Adj-RIBs-Out table is established for the peer group; BGP does not enable individual Adj-RIBs-Out tables for each peer group member.
Note: If you enable or disable rib-out for a peer or peer group and this action changes the current configuration, the peer session or all peer group sessions are automatically bounced.
Mode(s): Address Family Configuration, Router Configuration
neighbor route-map296
neighbor route-map
Description: Applies a route map to incoming or outgoing routes. If an outbound route map is specified, BGP advertises only routes that match at least one section of the route map. The no version removes a route map.
Syntax: neighbor { ipAddress | peerGroupName } route-map mapTag { in | out }
no neighbor { ipAddress | peerGroupName } route-map [ mapTag ] { in | out }
� ipAddress � neighbor�s IP address
� peerGroupName � name of BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� mapTag � name of the route map; a string of up to 32 alphanumeric characters
� in � apply to incoming routes
� out � apply to outgoing routes; you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy
Mode(s): Address Family Configuration, Router Configuration
neighbor route-reflector-client
Description: Configures a system as a BGP route reflector and configures the specified neighbor as its client. The no version indicates that the neighbor is not a client. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.
Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } route-reflector-client
� ipAddress � IP address of BGP neighbor being identified as a client
� peerGroupName � name of BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.
Mode(s): Address Family Configuration, Router Configuration
neighbor send-communityERX Edge Routers
297
neighbor send-community
Description: Enables a BGP speaker to send a community attribute to the peer. The no version causes the speaker to send only standard communities to the peer. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.
Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } send-community [ standard | extended | both ]
� ipAddress � neighbor's IP address
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.
� standard � sends only standard communities
� extended � sends only extended communities
� both � sends both standard and extended communities
Mode(s): Address Family Configuration, Router Configuration
neighbor shutdown
Description: Shuts down the specified neighbor or peer group without removing the neighbor or peer group configuration. The no version reenables a neighbor or peer group that was previously shut down. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.
Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } shutdown
� ipAddress � neighbor�s IP address
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
Mode(s): Address Family Configuration, Router Configuration
neighbor soft-reconfiguration inbound298
neighbor soft-reconfiguration inbound
Description: Initiates storage of unmodified copies of routes from the specified neighbor or all members of the specified peer group. The no version halts this storage. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.
Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } soft-reconfiguration inbound
� ipAddress � neighbor's IP address
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
Mode(s): Address Family Configuration, Router Configuration
neighbor timers
Description: Sets keepalive and hold-time timers for the specified neighbor or peer group. Overrides values set for the router via the timers bgp command. The no version restores the default values.
Syntax: neighbor { ipAddress | peerGroupName } timers keepaliveTime holdTime
no neighbor { ipAddress | peerGroupName } timers [ keepaliveTime ][ holdTime ]
� ipAddress � neighbor�s IP address
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� keepaliveTime � interval in seconds between keepalive messages; range is from 0�65535 seconds, default is 30 seconds; a value of zero prevents BGP from sending keepalive messages
� holdTime � period in seconds that BGP waits for keepalive messages before declaring the neighbor to be unavailable; range is from 0�65535 seconds; default is 90 seconds; a value of zero informs BGP not to expect any keepalive messages
Mode(s): Address Family Configuration, Router Configuration
neighbor unsuppress-mapERX Edge Routers
299
neighbor unsuppress-map
Description: Restores the advertisement of routes suppressed by policy-based route flap dampening. The no version restores the default values.
Syntax: neighbor { ipAddress | peerGroupName } unsuppress-map mapTag
no neighbor { ipAddress | peerGroupName } unsuppress-map [ mapTag ]
� ipAddress � neighbor�s IP address
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.
� mapTag � name of the route map; a string of up to 32 alphanumeric characters
Mode(s): Address Family Configuration, Router Configuration
neighbor update-source
Description: Allows a BGP session to use the IP address of any operational interface as the source address of TCP connections used by BGP. The no version restores the interface assignment to the closest interface.
Syntax: neighbor { ipAddress | peerGroupName } update-source { interfaceType interfaceSpecifier | updateSourceAddress }
no neighbor { ipAddress | peerGroupName } update-source [ interfaceType interfaceSpecifier | updateSourceAddress ]
� ipAddress � IP address of BGP-speaking neighbor
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� updateSourceAddress � the source IP address
Mode(s): Address Family Configuration, Router Configuration
neighbor weight300
neighbor weight
Description: Assigns a weight to a neighbor connection. The no version removes a weight assignment. All routes learned from this neighbor will have the assigned weight initially. The route with the highest weight will be chosen as the preferred route when multiple routes are available to a particular network.
The weights assigned with the match as-path and set weight route-map commands override the weights assigned using the neighbor weight and neighbor filter-list commands.
Syntax: neighbor { ipAddress | peerGroupName } weight value
no neighbor { ipAddress | peerGroupName } weight [ value ]
� ipAddress � neighbor's IP address
� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� value � number in the range 0�65535; the weight to assign
Mode(s): Address Family Configuration, Router Configuration
net
Description: Configures an IS-IS network entity title for the specified routing process. The no version removes a specific NET. You must specify a NET. You can add multiple manual area IDs by adding multiple NETs with the same system ID. The last NET cannot be removed.
Syntax: [ no ] net networkEntityTitle
� networkEntityTitle � NET that specifies the area ID and the system ID for an IS-IS routing process; can be either an address or a name; in the form of: areaID.systemID.nSelector For example:
� areaID � all bytes in front of the system ID; the number of bytes can vary from 1�13 bytes
� systemID � always 6 bytes and cannot vary
� nSelector � the last byte; always 0
Mode(s): Router Configuration
47.0010.0000.0000.0001.0001.1111.1111.1111.00area ID system ID N selector
netbios-name-serverERX Edge Routers
301
netbios-name-server
Description: Assigns a Net-Bios server to subscribers of an address pool. The no version removes the association between the address pool and the Net-Bios server.
Syntax: netbios-name-server ipAddressPrimary [ ipAddressSecondary ]
no netbios-name-server
� ipAddressPrimary � IP address of preferred Netbios server
� ipAddressSecondary � IP address of secondary DNS server
Mode(s): Pool Configuration
netbios-node-type
Description: Specifies a Net-Bios node type. The no version restores the default situation, in which the node type is unspecified.
Syntax: netbios-node-type nodeType
no netbios-node-type
� nodeType � one of the following types of Net-Bios servers:
� b-node � Net-Bios Broadcast node
� p-node � Net-Bios Peer-to-Peer node
� m-node � Net-Bios mixed node
� h-node � Net-Bios hybrid node
Mode(s): Pool Configuration
network302
network
Description: For BGP, configures a BGP speaker with a prefix originating within its AS that it advertises to its peers if a non-BGP route to the prefix exists in the IP forwarding table. The no version removes the prefix.
For RIP, enables RIP on a specific network (not on a range of networks). If you do not associate a network with RIP, the system cannot advertise the network in any RIP update. The no version disables RIP on a specific network. If you do not specify a network mask, the system applies the natural mask. Use the ip rip commands to configure RIP attributes on the network.
For DHCP local server, specifies the IP addresses that the DHCP local server can provide from an address pool. The no version removes the network address and mask.
Syntax: For BGP:
[ no ] network networkNumber [ mask networkMask ] [ route-map mapTag ][ weight weight ] [ backdoor ]
� networkNumber � prefix that BGP will advertise
� networkMask � subnet mask
� mapTag � name of the route map; a string of up to 32 alphanumeric characters
� weight � number in the range 0�65535; default is 32768; assigns an absolute weight to the network route that overrides a weight assigned by the redistribute command
� backdoor � lowers the preference of an EBGP route to the specified prefix by setting the administrative distance to the value of an internal BGP route. Use this option to favor an IGP backdoor route over an EBGP route to a specific network. BGP does not advertise the prefix specified with this option.
For RIP:
[ no ] network networkAddress [ networkMask ]
� networkAddress � IP address of the network
� networkMask � subnet mask; the command accepts either the standard mask (network 10.2.1.0 255.255.255.0) or the inverse mask (network 10.2.1.0 0.0.0.255)
network areaERX Edge Routers
303
For DHCP local server:
network networkAddress { networkMask | prefix }
no network [ force ]
� ipAddress � IP address of the network
� networkMask � subnet mask for the network
� prefix � network prefix
� force � deletes address pool even if the pool is in use
Mode(s): Address Family Configuration or Router Configuration for BGP; Router Configuration for RIP; Pool Configuration for DHCP local server
network area
Description: Defines the interfaces on which OSPF runs and the area ID for those interfaces. The no version deletes OSPF interfaces, ranges, and areas.
Syntax: [ no ] network ipNet maskWildCard area { areaId | areaIdInt }
� ipNet � network number
� maskWildCard � wild-card mask for the network number
� areaId � OSPF area ID in IP address format
� areaIdInt � OSPF area ID as a decimal value, in the range 0�4294967295
Note: Before you issue this command, you must first configure one or more interface with an IP address that is within the range specified by ipNet.
Mode(s): Router Configuration
next-address
Description: Configures an IPv4 hop at the end of the MPLS explicit path. There is no no version.
Syntax: next-address ipAddress [ mask ipMask ] [ loose ]
� ipAddress � address of the node
� ipMask � [not currently used] mask for the next adjacent address
� loose � indicates the node is not necessarily directly connected (adjacent) to the previous node in the path. If loose is not configured, the configuration defaults to strict. Strict indicates that the node is directly connected to the previous node.
Mode(s): Explicit Path Configuration
next-hop304
next-hop
Description: Defines the IP address of the next hop for a policy list. The classifier-group keyword and claclName argument specify the classifier control list. If you do not specify a classifier group, the system selects all packets from the interface associated with this policy list for this rule. Use the suspend keyword to suspend a filter rule temporarily. The no version removes a next hop rule from a policy list.
Note: The SRP module does not support the next-hop command.
Syntax: [ no ] [ suspend ] next-hop address [ classifier-group claclName ][ precedence precValue ]
� suspend � suspend a policy rule
� address � IP address for the next hop
� claclName � classifier control list used to classify packets for this next-hop policy
� precValue � precedence of this rule in relation to other rules within this set
Mode(s): Policy Configuration
next-interface
Description: Defines an output interface for a policy list. Use the classifier-group option to specify the classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with this policy list for this rule. Specify a next-hop command when the interfaceType is a broadcast medium. The no version removes a next-interface rule from a policy list. The suspend version suspends a filter rule temporarily.
Note: The SRP module does not support the next-interface command.
Syntax: [ no ] [ suspend ] next-interface interfaceType interfaceNumber [ next-hop nextHop ] [ classifier-group claclName ] [ precedence precValue ]
� suspend � suspend a policy rule
� interfaceType � type of interface to route packets to
� interfaceNumber � number of the interface to route packets to
� nextHop � next-hop IP address
� claclName � classifier control list used to classify packets for this next-interface policy
� precValue � precedence of this rule in relation to other rules within this set
Mode(s): Policy Configuration
no areaERX Edge Routers
305
no area
Description: Removes the specified OSPF area if there are no OSPF interfaces configured in the area.
Syntax: no area { areaId | areaIdInt }
� areaId � OSPF area ID in IP address format
� areaIdInt � OSPF area ID as a decimal value 0�4294967295
Mode(s): Router Configuration
no ip interface
Description: Removes the IP configuration from the interface or subinterface and disables IP processing on the interface.
Syntax: no ip interface
Mode(s): Interface Configuration, Subinterface Configuration
no log filters
Description: Turns off all log filters. To turn off a specific filter, use the no version of the log severity command that you used to add the filter.
Syntax: no log filters
Mode(s): Global Configuration
no radius client
Description: Use to unconfigure all RADIUS servers for the virtual router context and to delete the RADIUS client for the virtual router context.
Syntax: no radius client
Mode(s): Global Configuration
node306
node
Description: Specifies that a scheduler node be configured for each interface of the given interface type. The no version removes this rule from the QoS profile.
Syntax: [ no ] interfaceType node [ scheduler-profile schedulerProfileName ] [ group groupName ]
� interfaceType � one of the following interface types for which scheduler nodes should be configured: atm-vc, cbf, fr-vc, ip, ip-tunnel, l2tp-tunnel, vlan
� schedulerProfileName � name of the scheduler profile
� groupName � name of the traffic class group
Mode(s): QoS Profile Configuration
nrzi-encoding
Description: Use to enable NRZI encoding.
Syntax: [ no ] nrzi-encoding
Mode(s): Interface Configuration
ntp access-group
Description: Specifies the type of broadcasts that the system will accept and respond to, and specifies the servers from which the system will accept broadcasts. The no version enables the system to receive all NTP broadcasts on interfaces configured to receive broadcasts.
Syntax: ntp access-group { peer | serve-only | serve | query-only } accessListName
no ntp access-group { peer | serve-only | serve | query-only }
Note: The system can accept, but does not use, NTP control queries.
� peer � enables the system to receive time requests, receive NTP control queries, and synchronize itself to the servers specified on the access-list
� serve-only � enables the system to receive time requests and NTP control queries from servers specified on the access-list, but not to synchronize itself to the specified servers
� serve � enables the system only to receive time requests from the servers specified on the access-list
� query-only � enables the system only to receive NTP control queries from the servers specified on the access-list
� accessListName � name of the access list
Mode(s): Global Configuration
ntp broadcast-clientERX Edge Routers
307
ntp broadcast-client
Description: Enables an interface to receive NTP broadcasts.The no version prevents an interface from receiving NTP broadcasts.
Syntax: [ no ] ntp broadcast-client
Mode(s): Interface Configuration
ntp broadcast-delay
Description: Sets the estimated round-trip delay between the broadcast NTP server and the system. The no version restores the round-trip delay to the default value, 3000 microseconds.
Syntax: ntp broadcast-delay delayTime
no ntp broadcast-delay
� delayTime � a value in the range 0�999999 microseconds
Mode(s): Global Configuration
ntp disable
Description: Disables NTP on an interface. The no version enables NTP on an interface. The default setting is enable.
Syntax: [ no ] ntp disable
Mode(s): Interface Configuration
ntp enable
Description: Enables NTP services on the system and attaches the NTP client to the current virtual router. The no version disables reception of NTP packets on the system and removes the association between NTP and the virtual router. The default setting is disable.
Syntax: [ no ] ntp enable
Mode(s): Global Configuration
ntp master308
ntp master
Description: Specifies the stratum number of a virtual router you configured as an NTP server. By default, if the system is configured as an NTP server, the stratum number is set to the stratum number of the master plus one. The no version restores the default stratum number.
Syntax: [ no ] ntp master [ stratumNumber ]
Note: Although you can specify a stratum number of 1, the system does not support stratum 1 service. The system can synchronize only with an NTP server, and not directly with an atomic clock or radio clock.
� stratumNumber � number in the range 1�15 that indicates how many hops the NTP server is from an accurate time source, such as a radio clock or atomic clock. Stratum n servers are n hops from an accurate time source. The default is 8.
Mode(s): Global Configuration
ntp server
Description: Specifies an NTP server for time synchronization. The source option for this command overrides the ntp source command.The no version terminates NTP communications between this server and the interface.
Syntax: ntp server ipAddress [ version number ] [ prefer ] [ source interfaceType interfaceSpecifier ]
no ntp server ipAddress
� ipAddress � IP address of the NTP server
� number � value from 1 to 4; indicates the version of the NTP software on the server
� prefer � indicates that this server is the first choice for time synchronization
� source � directs responses from the NTP server to a specific interface on the system; overrides the ntp source command
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Global Configuration
ntp server enableERX Edge Routers
309
ntp server enable
Description: Enables a virtual router to act as an NTP server. The no version prevents a virtual router from acting as an NTP server.
Syntax: [ no ] ntp server enable
Mode(s): Global Configuration
ntp source
Description: Directs responses from all NTP servers to a specific interface. Using the source option with the ntp server command overrides the ntp source command. The no version restores the default situation in which servers reply to the interface from which the NTP request was sent.
Syntax: ntp source interfaceType interfaceSpecifier
no ntp source
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Global Configuration
operations-per-hop310
operations-per-hop
Description: Configures the number of operations sent to a designated hop before the TTL value is increased. This option applies only to the pathEcho type. The no version restores the default value, 3.
Syntax: operations-per-hop operationsHopValue
no operations-per-hop
� operationsHopValue � number of operations per hop; the default is 3
Mode(s): RTR Configuration
ospf auto-cost reference-bandwidth
Description: Controls how OSPF calculates default metrics for the interface. The no version assigns cost based only on the interface type.
Syntax: [ no ] ospf auto-cost reference-bandwidth refBw
� refBw � bandwidth in megabits per second in the range 1�4294967; default is 100
Mode(s): Router Configuration
ospf enable
Description: Enables OSPF on the router. The no version disables OSPF on the router.
Syntax: [ no ] ospf enable
Mode(s): Router Configuration
ospf log-adjacency-changesERX Edge Routers
311
ospf log-adjacency-changes
Description: Configures the router to send a syslog message when the state of an OSPF neighbor changes. The no version turns off this feature.
Syntax: [ no ] ospf log-adjacency-changes [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ]
� severity � minimum severity of the log messages displayed for the selected category; described either by a descriptive term�severityValue�or by a corresponding number�severityNumber�in the range 0�7; the lower the number, the higher the priority:
� emergency or 0 � system unusable
� alert or 1 � immediate action needed
� critical or 2 � critical condition exists
� error or 3 � error condition
� warning or 4 � warning condition
� notice or 5 � normal but significant condition
� info or 6 � informational message
� debug or 7 � debug message
� verbosityLevel � specifies the verbosity of the log category�s messages; can be any of the following:
� low � terse
� medium � moderate detail
� high � verbose
Mode(s): Router Configuration
ospf shutdown
Description: Administratively disables OSPF on the router. The no version reenables OSPF on the router.
Syntax: [ no ] ospf shutdown
Mode(s): Router Configuration
overload shutdown
Description: Causes BGP to shut down when it runs out of resources. The no version restores the default behavior, which is to continue running.
Syntax: [ no ] overload shutdown
Mode(s): Router Configuration
override-user312
override-user
Description: Specifies a single username and single password for all users from a domain. The no version removes the username and reverts to the original username.
Syntax: override-user [ name newName ] password newPassword
no override-user
� newName � identifier that replaces the username
� newPassword � password that replaces the user�s password
Mode(s): Domain Map Configuration
owner
Description: Configures the owner of the RTR operation. The no version restores the default value.
Syntax: owner ownerValue
no owner
� ownerValue � specifies the owner�s identifier: 0�255 ASCII characters; by default, no owner is configured
Mode(s): RTR Configuration
padn
Description: Configures PADN parameters for a domain name. The no version deletes the PADN parameters from the domain name.
Syntax: padn ipAddress ipmask distance
no padn ipAddress ipmask
� ipAddress � destination IP address
� ipmask � IP mask for the destination
� distance � administrative distance metric for this route in the range 0�255
Mode(s): Domain Map Configuration
passive-interfaceERX Edge Routers
313
passive-interface
Description: Modifies the transmission of routing updates for IS-IS, OSPF, and RIP.
For IS-IS, configures an IS-IS interface to only advertise its IP address in the link state PDUs; the interface does not send or receive IS-IS packets. Issue the complementary interface command to enable the interface to send and receive IS-IS packets. The no version disables the advertising of the IP address.
For OSPF, halts the transmission of routing updates on an OSPF interface. OSPF neither sends nor receives routing information through the specified interface, which appears as a stub network in the OSPF network. The no version reenables the transmission of routing updates.
For RIP, halts the transmission of multicast RIP messages. RIP messages are unicast to the interface (if it is the best path to a configured neighbor). The no version reenables the transmission of multicast messages on the interface.
Syntax: [ no ] passive-interface interfaceType interfaceSpecifier
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Router Configuration
password314
password
Description: Configures a password to be used at login on the console, a line or a range of lines; or specifies the password for an L2TP of L2F tunnel. The no version removes the password.
Syntax: Login Password:
password [ encryptionType ] passwordValue
no password
� encryptionType � one of the following types:
� 0 � unencrypted (the default)
� 5 � secret
� 7 � hidden
� passwordValue � character string that specifies the line password. The first character cannot be a number. The string can contain any alphanumeric characters, including spaces, up to 50 characters. The password checking is case sensitive. For example, the password Secret is different from the password secret.
L2TP or L2F Tunnel Password:
password tunnelPassword
no password
� tunnelPassword � up to 32-character password
Mode(s): Line Configuration for a login password; Domain Map Tunnel Configuration for a tunnel password
pathERX Edge Routers
315
path
Description: Configures paths over channelized SONET and SDH interfaces. The no version deletes a path.
Syntax: path pathChannel [ pathSpeed [ pathHierarchy ] ]
no path pathChannel
� pathChannel � number in the range 1�2147483648 that identifies the STS-1 or STM-0 line
� pathSpeed � speed of the path
� oc1, oc3, or oc12 for SONET � only oc1 or oc3 is available for cOC3/STM1 interfaces
� stm0, stm1, or stm4 for SDH � only stm0 or stm1 is available for cOC3/STM1 interfaces
Note: Although the path speed appears to be optional in the software, you must specify a value.
� pathHierarchy � identifier that defines the structure of the path
� If you specify a path speed that matches the speed of the module (for example, a path speed of oc3 for a cOC3/STM1 interface), do not specify an identifier.
� If you specify a speed of oc1 or stm0 for a cOC3/STM1 interface, the identifier is a number in the range 1�3 that represents either the STS-1 within the STS-3 or the STM-0 within the STM-1.
� If you specify a speed of oc3 or stm1 for a cOC12/STM4 interface, the identifier is a number in the range 1�4 that represents either the STS-3 within the STS-12 or the STM-1 within the STM-4.
� If you specify a speed of oc1 or stm0 for a cOC12/STM4 interface, the identifier is of the form X/Y. X is a number in the range 1�4 that represents either the STS-3 within the STS-12 or the STM-1 within the STM-4; Y is a number in the range 1�3 that represents either the STS-1 within the STS-3 or the STM-0 within the STM-1.
Mode(s): Controller Configuration
path ds1|e1316
path ds1|e1
Description: Creates and configures SONET and SDH tributaries. The no version deletes a tributary.
Syntax: path pathChannel { ds1 | e1 } tributaryIdentifier [ tributary-type ]
[ no ] pathChannel { ds1 | e1 } path tributaryIdentifier
� pathChannel � number in the range 1�2147483648 that identifies the path
� tributaryIdentifier � specifier for the tributary in the format pathChannel { ds1 | e1 } pathPayload/tributaryGroup/tributaryNumber
� pathPayload � payload number for the path; value is 1 for SONET and in the range 1�3 for SDH
� tributaryGroup � number in the range 1�7 that identifies the group within the path
� tributaryNumber � number of the tributary within the tributary group; the value is in the range 1�4 if the tributary type is vt15 or tu11 and in the range 1�3 if the tributary type is tu12
� tributaryType � virtual tributary type
� vt15 � default for SONET DS1 tributaries
� tu11 � default for SDH DS1 tributaries
� tu12 � default for SDH E1 tributaries
Mode(s): Controller Configuration
path ds1|e1 bertERX Edge Routers
317
path ds1|e1 bert
Description: Enables bit error rate tests using the specified pattern at the T1/E1 over SONET/SDH VT layer on channelized SONET and SDH interfaces. The no version stops the test that is running.
Syntax: path pathChannel { ds1 | e1 } tributaryIdentifier bert pattern pattern interval time [ unframed ]
no path pathChannel { ds1 | e1 } tributaryIdentifier bert
� tributaryIdentifier � identifier for the tributary. See description for the path ds1|e1 command.
� pattern � one of the following test patterns:
� 2^11 � pseudorandom test pattern, 2048 bits in length
� 2^15 � pseudorandom 0.151 test pattern, 32768 bits in length
� 2^20-O153 � pseudorandom 0.153 test pattern, 1048575 bits in length
� time � interval between test patterns, ranging from 1�14400 minutes
� unframed � test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern occupies only T1/E1 payload bits.
Mode(s): Controller Configuration
path ds1|e1 channel-group shutdown
Description: Disables a DS1 or an E1 channel group for channelized SONET and SDH interfaces. DS1 and E1 channel groups are enabled by default. The no version restarts a disabled interface.
Syntax: [ no ] path pathChannel { ds1 | e1 } tributaryIdentifier channel-group channelGroupNumber shutdown
� pathChannel � number in the range 1�2147483648 that identifies the path
� tributaryIdentifier � identifier for the tributary. See description for the path ds1|e1 command.
Mode(s): Controller Configuration
path ds1|e1 channel-group snmp trap link-status318
path ds1|e1 channel-group snmp trap link-status
Description: Enables SNMP link status processing for a DS1 or an E1 channel group of channelized SONET and SDH interfaces. The no version disables SNMP link status processing for a DS1 or E1 channel group.
Syntax: [ no ] path pathChannel { ds1 | e1 } tributaryIdentifier channel-group channelGroupNumber snmp trap link-status
� pathChannel � number in the range 1�2147483648 that identifies the path
� tributaryIdentifier � identifier for the tributary. See description for the path ds1|e1 command.
� channelGroupNumber � either a fractional T1 interface in the range 1�24 or a fractional E1 interface in the range 1�31
Mode(s): Controller Configuration
path ds1|e1 channel-group timeslots
Description: Configures T1 or E1 line parameters for channelized SONET and SDH interfaces. To configure a line, you specify a DS1 or an E1 channel group number and assign a range of timeslots. To configure a whole T1 or E1 line, assign all the timeslots to the channel group. You can specify a line speed that applies to all DS0 timeslots assigned to a channel group. The no version removes the timeslots from the channel group.
Syntax: path pathChannel { ds1 | e1 } tributaryIdentifier channel-group channelGroupNumber timeslots range [ speed { 56 | 64 } ]
no pathChannel { ds1 | e1 } tributaryIdentifier channel-group channelGroupNumber
� pathChannel � number in the range 1�2147483648 that identifies the path
� tributaryIdentifier � identifier for the tributary. See description for the path ds1|e1 command.
� channelGroupNumber � either a fractional T1 interface in the range 1�24 or a fractional E1 interface in the range 1�31
� range � specifies the timeslot assigned to the T1 or E1 channel in the range 1�31. A dash represents a range of timeslots, and a comma separates timeslots. For example, 1-10, 15-18 assigns timeslots 1�10 and 15 �18.
� speed � specifies the data rate for the T1 or E1 channel. Values are 56 Kbps or 64 Kbps. The default is 64 Kbps.
Mode(s): Controller Configuration
path ds1|e1 clock sourceERX Edge Routers
319
path ds1|e1 clock source
Description: Configures the transmit clock source for channelized SONET and SDH interfaces. The no version restores the default value.
Syntax: path pathChannel { ds1 | e1 } tributaryIdentifier clock source { line | internal { module | chassis } }
no path pathChannel { ds1 | e1 } tributaryIdentifier clock source
� pathChannel � number in the range 1�2147483648 that identifies the path
� tributaryIdentifier � identifier for the tributary. See description for the path ds1|e1 command.
� line � interface transmits data from a clock recovered from the line�s receive data stream
� internal � interface transmits data using its internal clock. You must specify one of the following for internal clocking:
� module � internal clock is from the line module itself
� chassis � internal clock is from the configured system clock
Mode(s): Controller Configuration
path ds1|e1 framing
Description: Configures the framing format for T1 or E1 over channelized SONET and SDH interfaces. The no version restores the default value.
Syntax: path pathChannel { ds1 | e1 } tributaryIdentifier framing framingType
no path pathChannel { ds1 | e1 } tributaryIdentifier framing
� pathChannel � number in the range 1�2147483648 that identifies the path
� tributaryIdentifier � identifier for the tributary. See description for the path ds1|e1 command.
� framingType � one of the following types:
� crc4 � cyclic redundancy check (default for E1); not available for T1
� no-crc4 � no cyclic redundancy check; not available for T1
� esf � extended superframe (T1 default); not available for E1
� sf � superframe; not available for E1
Mode(s): Controller Configuration
path ds1|e1 loopback320
path ds1|e1 loopback
Description: Configures a loopback at the T1/E1 over SONET/SDH VT layer on channelized SONET and SDH interfaces. The no version turns off the loopback.
Syntax: path pathChannel ds1|e1 tributaryIdentifier loopback { local | network { payload | line } | remote { line fdl { ansi | bellcore } | payload [fdl ] [ ansi ] } }
no path pathChannel ds1 tributaryIdentifier loopback [ remote ]
� pathChannel � a number in the range 1�2147483648 that identifies the path
� tributaryIdentifier � identifier for the tributary. See description for the path ds1|e1 command.
� local � loops the router output data back toward the router at the T1/E1 framer and sends an alarm indication signal out toward the network
� network { line | payload } � specify the line keyword to loop the data back toward the network before the T1/E1 framer and automatically set a local loopback at the HDLC controllers. Specify the payload keyword to loop the payload data back toward the network at the T1/E1 framer and automatically set a local loopback at the HDLC controllers.
� remote line fdl ansi (T1 line only) � sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 channel, per the ANSI T1.403 specification.
� remote line fdl bellcore (T1 line only) � sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 channel, per the Bellcore TR-TSY-000312 specification.
� remote payload [ fdl ] [ ansi ] (T1 line only) � sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 channel. You can optionally specify fdl and ansi, but it is not necessary.
Note: You cannot send an inband pattern to the remote end requesting that it enter into a network line loopback.
Mode(s): Controller Configuration
path ds1|e1 shutdownERX Edge Routers
321
path ds1|e1 shutdown
Description: Disables DS1 or E1 over channelized SONET and SDH interfaces. DS1 and E1 interfaces are enabled by default. The no version restarts a disabled interface.
Syntax: [ no ] path pathChannel { ds1 | e1 } tributaryIdentifier shutdown
� pathChannel � number in the range 1�2147483648 that identifies the path
� tributaryIdentifier � identifier for the tributary. See description for the path ds1|e1 command.
Mode(s): Controller Configuration
path ds1|e1 snmp trap link-status
Description: Enables SNMP link status processing for DS1 or E1 over channelized SONET and SDH interfaces. The no version disables SNMP link status processing.
Syntax: [ no ] path pathChannel { ds1 | e1 } tributaryIdentifier snmp trap link-status
� pathChannel � a number in the range 1�2147483648 that identifies the path
� tributaryIdentifier � the identifier for the tributary. See description for the path ds1|e1 command.
Mode(s): Controller Configuration
path ds1 fdl
Description: Specifies the facility data link standard for a T1 over channelized SONET or SDH interface. The no version restores the default, none.
Syntax: path pathChannel ds1 tributaryIdentifier fdl { ansi | att | all | none }
no path pathChannel ds1 tributaryIdentifier fdl [ ansi | att | all ]
� pathChannel � number in the range 1�2147483648 that identifies the path
� tributaryIdentifier � identifier for the tributary. See description for the path ds1|e1 command.
� ansi � specifies ANSI T1.403 Standard for extended superframe FDL exchange support
� att � specifies AT&T Technical Reference 54016 for extended superframe FDL exchange support
� all � specifies both the AT&T and ANSI mode for extended superframe FDL exchange support
� none � removes the current FDL mode settings
Mode(s): Controller Configuration
path ds1 fdl carrier322
path ds1 fdl carrier
Description: Specifies that a T1 over channelized SONET or SDH interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment.
Syntax: [ no ] path pathChannel ds1 tributaryIdentifier fdl carrier
� pathChannel � number in the range 1�2147483648 that identifies the path
� tributaryIdentifier � identifier for the tributary. See description for the path ds1|e1 command.
Mode(s): Controller Configuration
path ds1 fdl string
Description: Defines an FDL message for a T1 over channelized SONET or SDH interface as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages.
Syntax: path pathChannel ds1 tributaryIdentifier fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue |generator generatorValue }
no path pathChannel ds1 tributaryIdentifier fdl string { eic | fic | lic | unit | pfi | port | generator }
� pathChannel � number in the range 1�2147483648 that identifies the path
� tributaryIdentifier � identifier for the tributary. See description for the path ds1|e1 command.
� eicValue � equipment identification code; 1�10 characters; default is the null value
� licValue � line identification code; 1�10 characters; default is the null value
� ficValue � frame identification code; 1�10 characters; default is the null value
� unitValue � unit identification code; 1�6 characters; default is the null value.
� pfiValue � facility identification code to send in the FDL path message; 1�38 characters; default is the null value
� portValue � equipment port number to send in the FDL idle signal message; 1�38 characters; default is the null value
� generatorValue � generator number to send in the FDL test signal message; 1�38 characters; default is the null value
Mode(s): Controller Configuration
path ds1 fdl transmitERX Edge Routers
323
path ds1 fdl transmit
Description: Configures the system to send the specified FDL message on a T1 over channelized SONET or SDH interface. The no version stops the system from sending the specified FDL message or all FDL messages.
Syntax: [ no ] path pathChannel ds1 tributaryIdentifier fdl transmit { path-id | idle-sIgnal | test-signal }
no path pathChannel ds1 tributaryIdentifier fdl transmit
� pathChannel � number in the range 1�2147483648 that identifies the path
� tributaryIdentifier � identifier for the tributary. See description for the path ds1|e1 command.
� path-id � transmits a path identification message every second
� idle-sIgnal � transmits an idle signal every 10 seconds
� test-signal� transmits a test signal every 10 seconds
Mode(s): Controller Configuration
path ds1 remote-loopback
Description: Enables acceptance of remote loopback requests at the T1/E1 over SONET/SDH VT layer on channelized SONET and SDH interfaces. The no version restores the factory default value, which is to reject remote loopback requests.
Syntax: [ no ] path pathChannel ds1 tributaryIdentifier remote-loopback
� pathChannel � number in the range 1�2147483648 that identifies the path
� tributaryIdentifier � identifier for the tributary. See description for the path ds1|e1 command.
Mode(s): Controller Configuration
path ds3
Description: Creates and configures a T3 over channelized SONET interface. If you do not specify whether or not the path should be channelized, the system creates a channelized path by default. The no version deletes a path.
Syntax: path pathChannel ds3 ds3Channel { [ channelized ] | unchannelized }
no path pathChannel ds3 ds3Channel
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the path
Mode(s): Controller Configuration
path ds3 clock source324
path ds3 clock source
Description: Configures the transmit clock source for a a T3 over channelized SONET interface. The no version restores the default value.
Syntax: path pathChannel ds3 ds3Channel clock source { line | internal { module | chassis } }
no path pathChannel ds3 ds3Channel clock source
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the path
� line � interface transmits data from a clock recovered from the line�s receive data stream
� internal � interface transmits data using its internal clock. You must specify one of the following for internal clocking:
� module � internal clock is from the line module itself
� chassis � internal clock is from the configured system clock
Mode(s): Controller Configuration
path ds3 framing
Description: Configures the framing format for a T3 over channelized SONET interface. The no version restores the default value.
Syntax: path pathChannel ds3 ds3Channel framing framingType
no path pathChannel ds3 ds3Channel framing
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the path
� framingType � choose one of the following:
� c-bit � default; specifies c-bit parity framing
� m23 � specifies M23 multiplexer framing
Mode(s): Controller Configuration
path ds3 loopbackERX Edge Routers
325
path ds3 loopback
Description: Configures a loopback at the DS3 layer for a T3 over channelized SONET interface. The no version turns off the loopback.
Syntax: path pathChannel ds3 ds3Channel loopback { local | network { payload | line } }
no path pathChannel ds3 ds3Channel loopback
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the path
� local � loops the data back toward the router and sends an alarm indication signal out toward the network
� network payload � loops the data toward the network after the framer has processed the data
� network line � loops the data toward the network before the data reaches the framer
Mode(s): Controller Configuration
path ds3 mdl carrier
Description: Specifies that a T3 over channelized SONET interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment.
Syntax: [ no ] path pathChannel ds3 ds3Channel mdl carrier
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the path
Mode(s): Controller Configuration
path ds3 mdl string326
path ds3 mdl string
Description: Allows you to configure an MDL message on a T3 over channelized SONET interface as defined in the ANSI T1.107a-1990 specification. The no version restores the default value to the specified MDL message or to all MDL messages.
Syntax: path pathChannel ds3 ds3Channel mdl string { eic eicValue | fic ficValue | generator genValue | lic licValue | pfi pfiCode | port portValue | unit unitValue }
no path pathChannel ds3 ds3Channel mdl string { eic | fic | generator | lic | pfi | port | unit }
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the path
� eicValue � equipment identification code; 1�10 characters; default is the null value
� ficValue � frame identification code; 1�10 characters; default is the null value
� genValue � generator number to send in the MDL test signal message; 1�38 characters; default is the null value
� licValue � line identification code; 1�11 characters; default is the null value
� pfiCode � facility identification code to send in the MDL path message; 1�38 characters; default is the null value
� portValue � equipment port number to send in the MDL idle signal message; 1�38 characters; default is the null value
� unitValue � unit identification code; 1�6 characters; default is the null value
Mode(s): Controller Configuration
path ds3 mdl transmitERX Edge Routers
327
path ds3 mdl transmit
Description: Enables you to transmit an MDL message on a T3 over channelized SONET interface. The no version disables transmission of the specified message or all messages.
Syntax: [ no ] path pathChannel ds3 ds3Channel mdl transmit { path-id | idle-signal | test signal }
no path ds3 mdl transmit
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the path
� path-id � MDL path message; factory default is disabled
� idle-signal � MDL idle signal message; factory default is disabled
� test-signal � MDL test signal message; factory default is disabled
Mode(s): Controller Configuration
path ds3 shutdown
Description: Disables a T3 over channelized SONET interface. DS3 interfaces are enabled by default. The no version restarts a disabled interface.
Syntax: [ no ] path pathChannel ds3 ds3Channel shutdown
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the path
Mode(s): Controller Configuration
path ds3 snmp trap link-status
Description: Enables SNMP link status processing for a T3 over channelized SONET interface. The no version disables SNMP link status processing on an interface.
Syntax: [ no ] path pathChannel ds3 ds3Channel snmp trap link-status
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the path
Mode(s): Controller Configuration
path ds3 t1328
path ds3 t1
Description: Creates and configures a T1 channel on a T3 over channelized SONET interface. The no version deletes a path.
Syntax: [ no ] path pathChannel ds3 ds3Channel t1 t1Channel
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the DS3 channel
� t1Channel � number in the range 1�28 that identifies the T1 channel
Mode(s): Controller Configuration
path ds3 t1 bert
Description: Enables bit error rate tests using the specified pattern for a T1 channel on a T3 over channelized SONET interface. The no version stops the test that is running.
Syntax: path pathChannel ds3 ds3Channel t1 t1Channel bert pattern pattern interval time [ unframed ]
no path pathChannel ds3 ds3Channel t1 t1Channel bert
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the DS3 channel
� t1Channel � number in the range 1�28 that identifies the T1 channel
� pattern � one of the following test patterns:
� 2^11 � pseudorandom test pattern, 2,048 bits in length
� 2^15 � pseudorandom 0.151 test pattern, 32,768 bits in length
� 2^20-O153 � pseudorandom 0.153 test pattern, 1,048,575 bits in length
� time � interval between test patterns, ranging from 1�14400 minutes
� unframed � test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern occupies only T1/E1payload bits.
Mode(s): Controller Configuration
path ds3 t1 clock sourceERX Edge Routers
329
path ds3 t1 clock source
Description: Configures the transmit clock source for a T1 channel on a T3 over channelized SONET interface.The no version restores the default value, line.
Syntax: path pathChannel ds3 ds3Channel t1 t1Channel clock source { line | internal { module | chassis } }
no path pathChannel ds3 ds3Channel t1 t1Channel clock source
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the DS3 channel
� t1Channel � number in the range 1�28 that identifies the T1 channel
� line � interface transmits data from a clock recovered from the line�s receive data stream
� internal � interface transmits data using its internal clock. You must specify one of the following for internal clocking:
� module � internal clock is from the line module itself
� chassis � internal clock is from the configured system clock
Mode(s): Controller Configuration
path ds3 t1 framing
Description: Configures the framing format for a T1 channel on a T3 over channelized SONET interface. The no version restores the default value.
Syntax: path pathChannel ds3 ds3Channel t1 t1Channel framing framingType
no path pathChannel ds3 ds3Channel t1 t1Channel framing
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the DS3 channel
� t1Channel � number in the range 1�28 that identifies the T1 channel
� framingType � one of the following types:
� esf � default; specifies extended superframe
� sf � specifies superframe
Mode(s): Controller Configuration
path ds3 t1 fdl330
path ds3 t1 fdl
Description: Specifies the facility data link standard for a T1 channel on a T3 over channelized SONET interface. The no version restores the default, none.
Syntax: path pathChannel ds3 ds3Channel t1 t1Channel fdl { ansi | att | all | none }
no path pathChannel ds3 ds3Channel t1 t1Channel fdl [ ansi | att | all ]
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the DS3 channel
� t1Channel � number in the range 1�28 that identifies the T1 channel
� ansi � specifies ANSI T1.403 Standard for extended superframe FDL exchange support
� att � specifies AT&T Technical Reference 54016 for extended superframe FDL exchange support
� all � specifies both the AT&T and ANSI mode for extended superframe FDL exchange support
� none � removes the current FDL mode settings
Mode(s): Controller Configuration
path ds3 t1 fdl carrier
Description: Specifies that a T1 channel on a T3 over channelized SONET interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment.
Syntax: [ no ] path pathChannel ds3 ds3Channel t1 t1Channel fdl carrier
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the DS3 channel
� t1Channel � number in the range 1�28 that identifies the T1 channel
Mode(s): Controller Configuration
path ds3 t1 fdl stringERX Edge Routers
331
path ds3 t1 fdl string
Description: Defines an FDL message for a T1 channel on a T3 over channelized SONET interface, as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages.
Syntax: path pathChannel ds3 ds3Channel t1 t1Channel fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue |generator generatorValue }
no path pathChannel ds3 ds3Channel t1 t1Channel fdl string { eic | fic | lic | unit | pfi | port | generator }
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the DS3 channel
� t1Channel � number in the range 1�28 that identifies the T1 channel
� eicValue � equipment identification code; 1�10 characters; default is the null value
� licValue � line identification code; 1�10 characters; default is the null value
� ficValue � frame identification code; 1�10 characters; default is the null value
� unitValue � unit identification code; 1�6 characters; default is the null value
� pfiValue � facility identification code to send in the FDL path message; 1�38 characters; default is the null value
� portValue � equipment port number to send in the FDL idle signal message; 1�38 characters; default is the null value
� generatorValue � generator number to send in the FDL test signal message; 1�38 characters; default is the null value
Mode(s): Controller Configuration
path ds3 t1 fdl transmit332
path ds3 t1 fdl transmit
Description: Configures the system to send the specified type of FDL message for a T1 channel on a T3 over channelized SONET interface. The no version stops the system from sending the specified type of FDL message or all FDL messages.
Syntax: [ no ] path pathChannel ds3 ds3Channel t1 t1Channel fdl transmit { path-id | idle-signal | test-signal }
no path pathChannel ds3 ds3Channel t1 t1Channel fdl transmit
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the DS3 channel
� t1Channel � number in the range 1�28 that identifies the T1 channel
� path-id � transmits a path identification FDL message every 10 seconds
� idle-sIgnal � transmits an idle signal FDL message every second
� test-signal � transmits a test signal FDL message every second
Mode(s): Controller Configuration
path ds3 t1 loopbackERX Edge Routers
333
path ds3 t1 loopback
Description: Configures a loopback for a T1 channel on a T3 over channelized SONET interface. The no version turns off the loopback.
Syntax: path pathChannel ds3 ds3Channel t1 t1Channel loopback { local | network { payload | line } | remote { line fdl { ansi | bellcore } | payload [fdl ] [ ansi ] } }
no path pathChannel ds3 ds3Channel t1 t1Channel loopback [ remote ]
� pathChannel � a number in the range 1�2147483648 that identifies the path
� ds3Channel � a number in the range 1�3 that identifies the DS3 channel
� t1Channel � a number in the range 1�28 that identifies the T1 channel
� local � loops the router output data back toward the router at the T1 framer and sends an alarm indication signal out toward the network
� network { line | payload } � Specify the line keyword to loop the data back toward the network before the T1 framer and automatically set a local loopback at the HDLC controllers. Specify the payload keyword to loop the payload data back toward the network at the T1 framer and automatically set a local loopback at the HDLC controllers.
� remote line fdl ansi � sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 channel, according to the ANSI T1.403 specification.
� remote line fdl bellcore � sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 channel, according to the Bellcore TR-TSY-000312 specification.
� remote payload [ fdl ] [ ansi ] � sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 channel. You can optionally specify fdl and ansi, but it is not necessary.
Mode(s): Controller Configuration
path ds3 t1 remote-loopback334
path ds3 t1 remote-loopback
Description: Enables acceptance of remote loopback requests by a T1 channel on a T3 over channelized SONET interface. The no version restores the default value, which is to reject remote loopback requests.
Syntax: [ no ] path pathChannel ds3 ds3Channel t1 t1Channel remote-loopback
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the DS3 channel
� t1Channel � number in the range 1�28 that identifies the T1 channel
Mode(s): Controller Configuration
path ds3 t1 shutdown
Description: Disables a T1 channel or subchannel on a T3 over channelized SONET interface. T1 channels are enabled by default. The no version restarts a disabled interface.
Syntax: [ no ] path pathChannel ds3 ds3Channel t1 t1Channel[/subchannel] shutdown
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the DS3 channel
� t1Channel � number in the range 1�28 that identifies the T1 channel
� subchannel � fractional T1 interface in the range 1�24
Mode(s): Controller Configuration
path ds3 t1 snmp trap link-status
Description: Enables SNMP link status processing for a T1 channel group or subchannel for a T3 over channelized SONET interface. The no version disables SNMP link status processing for a T1 channel.
Syntax: [ no ] path pathChannel ds3 ds3Channel t1 t1Channel[ /subchannel ] snmp trap link-status
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the DS3 channel
� t1Channel � number in the range 1�28 that identifies the T1 channel
� subchannel � fractional T1 interface in the range 1�24
Mode(s): Controller Configuration
path ds3 t1 timeslotsERX Edge Routers
335
path ds3 t1 timeslots
Description: Assigns a range of DS0 timeslots to a subchannel as a single data stream for a T1 channel on a T3 over channelized SONET interface. You can optionally specify a line speed that applies to all DS0 timeslots assigned to a subchannel. The no version deletes the fractional T1 circuit.
Syntax: path pathChannel ds3 ds3Channel t1 t1Channel/subchannel timeslots range [ speed { 56 | 64 } ]
no path pathChannel ds3 ds3Channel t1 t1Channel/subchannel
� pathChannel � number in the range 1�2147483648 that identifies the path
� ds3Channel � number in the range 1�3 that identifies the DS3 channel
� t1Channel � number in the range 1�28 that identifies the T1 channel
� subchannel � fractional T1 interface in the range 1�24
� range � timeslots assigned to the T1 channel in the range 1�24; a dash represents a range of timeslots, and a comma separates timeslots. For example, 1-10, 15-18 assigns timeslots 1�10 and 15�18.
� speed � specifies the data rate for the T1 channel. Values are 56 Kbps or 64 Kbps. The default is 64 Kbps.
Mode(s): Controller Configuration
path e1 unframed
Description: Configures unframed E1 for channelized SONET and SDH interfaces. The no version deletes an unframed E1 interface from the path.
Syntax: [ no ] path pathChannel e1 tributaryIdentifier unframed
� pathChannel � number in the range 1�2147483648 that identifies the path
� tributaryIdentifier � identifier for the tributary. See description for the path ds1|e1 command.
Mode(s): Controller Configuration
path overhead j1336
path overhead j1
Description: Specifies trace messages to check for connectivity between the system and the SONET/SDH device at the other end of the line. The no version restores the default situation, in which all characters of the trace message are zeros.
Syntax: [ no ] path pathChannel overhead j1 { msg | exp-msg } [ message ]
� pathChannel � identifier for the path
� For OC3 (dual port) or OCx/STMx interfaces, there is no identifier
� For cOCx/STMx interfaces, a number in the range 1�2147483648 that identifies the path
� msg � send the specified transmit message
� exp-msg � expect the specified trace message
� message � text of the message. The maximum is 15 characters for SDH mode and 62 characters for SONET mode.
Mode(s): Controller Configuration
path snmp trap link-status
Description: Enables SNMP link status processing for the path layer of SONET and SDH interfaces. The no version disables SNMP link status processing.
Syntax: [ no ] path [ pathChannel ] snmp trap link-status
� pathChannel � number in the range 1�2147483648 that identifies the path on a channelized interface
Mode(s): Controller Configuration
peak-burst
Description: Sets the peak burst for a rate limit profile. The no version restores the default value, 8192.
Syntax: [ no ] peak-burst size
� size � size in bytes in the range 8192�4294967295
Mode(s): Rate Limit Profile Configuration
peak-rateERX Edge Routers
337
peak-rate
Description: Sets the peak rate for a rate limit profile. The no version restores the default value, 0.
Syntax: [ no ] peak-rate rate
� rate � rate in bits per second in the range 0�4294967295
Mode(s): Rate Limit Profile Configuration
pim disable
Description: Disables PIM on a virtual router. The no version reenables PIM on a virtual router.
Syntax: [ no ] pim disable
Mode(s): Router Configuration
ping338
ping
Description: Sends an ICMP echo request packet to the IP address that you specify. There is no no version.
Syntax: ping [ vrf vrfName ] [ ip ] destination [ packetCount ] [ timeout timeOutVal ] [ transmit-delay delayVal ] [ ttl ttlValue ] [ data-size dataSize ][ data-pattern { ones | zeros | random | hex-data hexData } ][ source { interface interfaceType interfaceSpecifier | address sourceAddr } ] [ sweep-sizes sweepMin sweepMax [ sweep-interval sweepInt ] ][ extended [ tos tosVal ] [ set-dont-fragment-bit ] [ set-router-alert ][ { loose-source-route | strict-source-route } [ srtAddrs ]* ] [ record-route numRoutes ] [ timestamp numTstamps ][ interface interfaceType InterfaceSpecifier ] ]
� vrfName � name of the VRF context
� ip � optional keyword for compatibility with non-ERX implementations
� destination � IP address or domain name of the host to ping
� packetCount � number of packets to send to the destination IP address in the range 0�4294967295; the default is 5; 0 means ping forever
� timeOutVal � number of seconds in the range 1�20 to wait for an ICMP echo reply packet before the connection attempt times out
� delayVal � number of milliseconds in the range 1�50 between transmission of each ICMP request; default is 10 ms
� ttlValue � specifies a hop count by setting the time-to-live field in the IP header in the range 1�255; default is 32
� dataSize � number of bytes comprising the IP packet and reflected in the IP header in the range 0�64000; the default is 100 bytes
� data-pattern � type of bits contained in the packet. You can set the bits to all ones, all zeros, a random mixture of ones and zeros, or a specific hexadecimal data pattern that can range from 0x0 � 0xFFFFFFFF. The default data pattern is all zeros.
� source interface � specifies an interface as the source of the packets
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� source address � specifies an IP address as the source of the packets
� sourceAddr � IP address or domain name used as the source address
� sweep-sizes � configures payload sizes, enabling you to vary the sizes of the echo packets being sent. This capability is useful for determining the minimum sizes of the MTUs configured on the nodes along the path to the
pingERX Edge Routers
339
destination address. This reduces packet fragmentation which contributes to performance problems. The default is not to sweep (all packets are the same size).
� sweepMin � minimum payload size in the range 0�64000
� sweepMax � maximum payload size in the range 0�64000
� sweepInt � number of bytes to add to the size of the packet; the change in the size of subsequent ping packets while sweeping across a range of sizes. For example, you can configure the sweep interval to sweep across the range of packets from 100 bytes to 1000 bytes in increments of sweepInt. By default, send 100, 101, 102, 103...1000. If sweepInt is 5, send 100, 105, 110, 115...1000). When �sweeping,� the default interval is 1.
� extended � enables you to configure extended header attributes
� tosVal � specifies the value set in the ToS byte in the range 0�255 to support QoS offerings
� set-dont-fragment-bit � sets the don�t-fragment bit in the IP header to prevent IP from fragmenting the packet if it is too long for the MTU of a link; if the nonfragmented packet cannot be delivered, it is discarded
� loose-source-route � specifies a set of hops through which the packet must traverse; the hops do not have to be adjacent
� strict-source-route � specifies every hop through which the packet must traverse and generates an ICMP error if the exact path cannot be followed
� srtAddrs � IP addresses or domain name of the intermediate hops on the way to the destination that will be used in the loose-source or strict-source route
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
� numRoutes � specifies how many routes are to be recorded as the packet travels; ranges from 1 to 9
� numTstamps � specifies how many timestamps from routers are to be recorded as the packet travels; ranges from 1 to 9
� interfaceType � interface type of a destination address on the system that is configured for external loopback; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface of a destination address on the system that is configured for external loopback; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): User Exec, Privileged Exec
ping atm interface atm340
ping atm interface atm
Description: Sets up the ATM interface or circuit to send loopback cells. There is no no version.
Syntax: ping atm interface atm interfaceSpecifier vpi vci [ end-loopback [ destination ] | seg-loopback [ destination ] ][ count cellCount ] [ timeout #OfSeconds ]
� interfaceSpecifier � see Interface Types and Specifiers in About This Guide.
� vpi � virtual path identifier
� vci � virtual circuit identifier. By default F5 end-to-end loopback OAM cells are used for the ping operation.
� To send F4 segment loopback cells, set the VCI to 3.
� To send F5 end-to-end loopback cells, set the VCI to 4.
� end-loopback � sends the ping to the connection endpoint
� seg-loopback � sends the ping to the first segment endpoint
� destination � value of the location ID included the loopback cell. The location ID is a 16-octet field, and the destination portion is 4 octets. You can set the destination to a specific location ID or to 0s (zeros) or 1s (ones). If the destination is set to:
� 0s � loopback location ID in the loopback cell is initialized to all 0s, and each segment endpoint in the network responds to the ping.
� 1s � loopback location ID in the loopback cell is initialized to all 1s, and only the connection endpoint responds to the ping.
The default value is 0xFFFFFFFF, which causes the loopback location ID in the loopback cell to be initialized to all 1s.
� cellCount � number of OAM echo cells to send to the destination. The default value is 5. The range is 1�32.
� timeout � amount of time to wait for a response to the sent OAM cell. If no response is received when this time expires, the system sends the next cell. This process is repeated for the number of cells specified in the cellCount parameter.
� #OfSeconds � number of seconds in the timeout period. The default value is 5 seconds. The range is 1�5 seconds.
Mode(s): Privileged Exec
policy-listERX Edge Routers
341
policy-list
Description: Creates or modifies a policy list. If you execute a policy-list command and type exit, the system creates a policy list with no rules, the default. When no rules are found in a policy list, the system automatically inserts a default filter rule. Attaching this policy list to an interface will filter all packets on that interface. The no version removes a policy list.
Syntax: [ no ] policy-list policyName
� policyName � name associated with the policy list
Mode(s): Global Configuration
pos framing
Description: Sets the type of framing for a POS interface. There is no no version.
Syntax: pos framing { sdh | sonet }
� sdh � uses SDH framing format
� sonet � uses SONET framing format (the default)
Mode(s): Interface Configuration
pos scramble-atm
Description: Enables payload scrambling on a POS interface. When enabled, both sides of the connection must be using the scrambling algorithm. The system uses a 43rd-order synchronous scrambler to scramble the output data. The no version disables scrambling on the POS interface.
Syntax: [ no ] pos scramble-atm
Mode(s): Interface Configuration
ppp authentication342
ppp authentication
Description: Requests authentication from a PPP peer system. The no version removes the authentication requirement.
Syntax: ppp authentication [ virtual-router vrName ] chap [ pap ] | pap [ chap ]
no ppp authentication
� vrName � name of a virtual router to be used as the authentication virtual router
� chap � specifies CHAP authentication protocol. If the peer system refuses to use CHAP and you additionally specified PAP on the command line, the system requests the PAP protocol. If the peer system refuses to negotiate authentication, the system terminates the session.
� pap � specifies PAP authentication protocol. If the peer system refuses to use PAP and you additionally specified CHAP on the command line, the system requests the PAP protocol.
Mode(s): Interface Configuration, Subinterface Configuration, Profile Configuration
ppp aaa-profile
Description: Maps an AAA profile to static and dynamic, multilink and nonmultilink PPP interfaces. The no version removes the AAA profile assignment to the PPP interface.
Syntax: ppp aaa-profile profileName
no ppp aaa-profile
� profileName � name of the AAA profile; 32 characters maximum
Mode(s): Interface Configuration, Subinterface Configuration, Profile Configuration
ppp chap-challenge-lengthERX Edge Routers
343
ppp chap-challenge-length
Description: Modifies the length of the CHAP challenge by specifying the minimum and maximum allowable length. The no version restores the defaults.
Caution: We recommend that you do NOT use the ppp chap-challenge-length command; increasing the minimum length (from the default 16 bytes) or decreasing the maximum length (from the default 32 bytes) reduces the security of your system.
Syntax: ppp chap-challenge-length minLength maxLength
no ppp chap-challenge-length
� minLength � minimum length of the CHAP challenge in bytes in the range 8�63; default value is 16 bytes
� maxLength � maximum length of the CHAP challenge in bytes in the range 8�63; value must be equal to or greater than the minimum length; default value is 32 bytes
Mode(s): Interface Configuration, Subinterface Configuration, Profile Configuration
ppp description
Description: Assigns a text description or alias to a static PPP interface. The no version removes the text description or alias.
Syntax: ppp description name
no ppp description
� name � text description or alias for the ppp interface; up to 64 characters
Mode(s): Interface Configuration, Subinterface Configuration
ppp ipcp netmask
Description: Explicitly enables the IPCP option 0x90 on a per-PPP interface basis, either in a profile or on a static interface. By default, the IPCP option 0x90 is disabled on the interface. The no version disables the IPCP option 0x90.
Syntax: [ no ] ppp ipcp netmask
Mode(s): Interface Configuration, Subinterface Configuration, Profile Configuration
ppp keepalive344
ppp keepalive
Description: Specifies a keepalive value. The keepalive mechanism tracks the status of the connection. The no version disables keepalive. High-density mode is automatically selected when PPP is layered over ATM, Tunnel, or PPPoE. Low-density mode is selected when PPP is layered over HDLC.
Syntax: ppp keepalive [ seconds ]
no ppp keepalive
� seconds � keepalive timeout period in the range 30�300 seconds for high-density mode or 10�300 seconds for low-density mode. The default is 30.
Mode(s): Interface Configuration, Subinterface Configuration, Profile Configuration
ppp log
Description: Enables PPP packet or state machine logging on any dynamic interface that uses the profile being configured. The no version disables the logging.
Syntax: [ no ] ppp log logCategory
� logCategory � one of the following categories
� pppPacket � enables PPP packet logging
� pppStateMachine � enables PPP state machine logging
Mode(s): Profile Configuration
ppp magic-number disable
Description: Disables negotiation of the local magic number. Issuing this command prevents the system from detecting loopback configurations. The no version enables negotiation.
Syntax: [ no ] ppp magic-number disable
Mode(s): Interface Configuration, Subinterface Configuration, Profile Configuration
ppp max-bad-authERX Edge Routers
345
ppp max-bad-auth
Description: Specifies the maximum number of authentication retries the system accepts before terminating a PPP session. The no version returns the value to the default.
Syntax: ppp max-bad-auth maxBadAuth
no ppp max-bad-auth
� maxBadAuth � number of authentication retries after which the interface resets itself in the range: 0�7. The default is 0, which indicates that no retries are allowed.
Mode(s): Interface Configuration, Subinterface Configuration
ppp mru
Description: Sets the maximum allowable size in bytes of the maximum receive unit for PPP or MLPPP serial interfaces. If the command is executed from an encapsulated PPP or MLPPP serial interface, it affects only that interface. If executed from an MLPPP bundle, it affects all serial member links within that bundle. The no version restores the default value, which varies according to module type.
Syntax: ppp mru mruSize
no ppp mru
� mruSize � the maximum allowable size of the MRU; the range is from 64�65535
Mode(s): Interface Configuration, Subinterface Configuration, Profile Configuration
ppp multilink enable
Description: Enables creation of dynamic MLPPP interfaces when used in a profile. The no version causes the LNS to reject any incoming requests to establish dynamic MLPPP interfaces.
Syntax: [ no ] ppp multilink enable
Mode(s): Profile Configuration
ppp passive-mode346
ppp passive-mode
Description: Forces dynamic and static PPP interfaces into passive mode before LCP negotiation begins for a period of one second, enabling slow clients time to start up and to initiate LCP negotiation. The no version disables passive mode.
Syntax: [ no ] ppp passive-mode
Mode(s): Interface Configuration, Subinterface Configuration, Profile Configuration
ppp peer
Description: Resolves conflicts when the system and the PPP peer system have the primary and secondary DNS and WINS name server addresses configured with different values. If the PPP peer system has the address and the system does not, the peer always supplies the address regardless of how you have configured the PPP peer. The no version configures the system to take precedence during setup negotiations between the system and the remote personal computer client.
Syntax: [ no ] ppp peer { dns | wins }
� dns � sets the peer to take precedence over the system for resolving conflicts in the DNS primary and secondary addresses
� wins � sets the peer to take precedence over the system for resolving conflicts in the WINS primary and secondary addresses
Mode(s): Interface Configuration, Subinterface Configuration, Profile Configuration
ppp shutdown
Description: Stops a PPP session. For MLPPP, issue only in the context of a network interface; the command disables the service for the MLPPP network interface (MLPPP bundle). The no version restarts a PPP session.
Syntax: [ no ] ppp shutdown [ ip | mpls | osi ]
� ip � disables the IPCP service
� mpls � disables MPLS service
� osi � disables the OSINLCP service
Mode(s): Interface Configuration, Subinterface Configuration
pppoeERX Edge Routers
347
pppoe
Description: Creates a PPPoE major interface. The no version removes the interface.
Syntax: [ no ] pppoe
Mode(s): Interface Configuration, Subinterface Configuration
pppoe acName
Description: Allows you to configure an access concentrator name for a PPPoE interface or profile. If no AC name is configured, the system name is used. The no version removes the access concentrator name.
Syntax: pppoe acName string
no pppoe acName
� string � AC name; 64 characters maximum
Mode(s): Interface Configuration, Profile Configuration
pppoe auto-configure
Description: Sets up the system to dynamically create PPPoE subinterfaces on the PPPoE major interfaces. The no version removes this configuration.
Syntax: [ no ] pppoe auto-configure
Mode(s): Subinterface Configuration
pppoe always-offer
Description: Sets up the system to offer to set up a session, even if the system has insufficient resources to establish a session. The no version disables this feature, and is the default setting.
Syntax: [ no ] pppoe always-offer
Mode(s): Subinterface Configuration, Profile Configuration
pppoe duplicate-protection
Description: Sets up the system to prevent a client from establishing more than one session using the same MAC address. The no version disables this feature, and is the default setting.
Syntax: [ no ] pppoe duplicate-protection
Mode(s): Subinterface Configuration, Profile Configuration
pppoe log pppoeControlPacket348
pppoe log pppoeControlPacket
Description: Enables packet trace logging on PPPoE dynamic interfaces created using the profile being configured. Packet trace information is logged to the pppoeControlPacket log. The no version disables the logging.
Syntax: [ no ] pppoe log pppoeControlPacket
Mode(s): Profile Configuration
pppoe motm
Description: Causes the PPPoE application to send a PADM message of the minute message. The no version disables the message.
The recipient of the message is determined by the mode from which the command is issued. From Privileged Exec mode the message is sent to all PPPoE clients connected to the system; from Interface Configuration mode the PADM message is sent to the client as it is configured (if connected); and from Profile Configuration mode the message is sent to the new client created when the profile is dynamically attached to an IP interface. The MOTM string is passed with no changes.
Syntax: pppoe motm string
no pppoe motm
� string � message sent
Mode(s): Privileged Exec, Interface Configuration, Profile Configuration
pppoe sessions
Description: Specifies the number of subinterfaces permitted on a PPPoE interface. The command affects only subinterfaces that are created after the command is entered. Previously created interfaces remain, even if their number exceeds the new value of the sessions parameter. The no version restores the default value, 4094.
Syntax: pppoe sessions sessions
no pppoe sessions
� sessions � number of subinterfaces permitted on the interface in the range 1�4094; the default is 4094
Mode(s): Interface Configuration, Subinterface Configuration
pppoe subinterfaceERX Edge Routers
349
pppoe subinterface
Description: Creates a PPPoE subinterface on an FE, GE, or ATM interface.
Syntax: [ no ] pppoe subinterface interfaceType interfaceSpecifier
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Global Configuration
pppoe url
Description: Causes the PPPoE application to send string to the new client. The no version disables the message.
The recipient of the message is determined by the mode from which the command is issued. From Interface Configuration mode the PADM message is sent to the client as it is configured (if connected). From Profile Configuration mode the message is sent to the new client created when the profile is dynamically attached to an IP interface.
Syntax: pppoe url url
no pppoe url
� url � URL string sent
Mode(s): Interface Configuration, Profile Configuration
preference
Description: Specifies the preference value for an L2TP or L2F tunnel in Domain Map Configuration mode. The no version restores the default value, 0.
Syntax: preference tunnelPreference
no preference
� tunnelPreference � tunnel preference in the range 0�2000; 0 is the highest preference
Mode(s): Domain Map Tunnel Configuration
profile350
profile
Description: When used from Global Configuration mode, the command creates a profile. Use profiles to configure interfaces dynamically, allowing you to manage a large number of interfaces effectively. The no version removes the profile.
When used from Subinterface Configuration mode, the command assigns a profile to an interface. Use profiles to configure interfaces dynamically, allowing you to manage a large number of interfaces effectively. The no version removes the profile assigned to the interface.
When used from L2TP Destination Profile Host Configuration mode, sets an attribute of the current remote host. The no version removes the attribute from the remote host.
Syntax: To assign a profile name for a remote host:
[ no ] profile profileName
To create a profile or assign a profile to a subinterface:
profile [ bridgedEthernet | ip | ppp | pppoe | any ] profileName
no profile [ bridgedEthernet | ip | ppp | pppoe | any ]
� bridgedEthernet � specifies a bridged Ethernet encapsulation type to which the profile applies
� ip � specifies an IP encapsulation type to which the profile applies
� ppp � specifies a PPP encapsulation type to which the profile applies
� pppoe �specifies a PPPoE encapsulation type to which the profile applies
� any � specifies any auto-configured encapsulation that does not have a specific profile assignment
� profileName � profile name of up to 80 characters
Mode(s): Global Configuration, Subinterface Configuration, L2TP Destination Profile Host Configuration
qos-mode-port
Description: Configures an ATM port for per-port queuing. The no version removes per-port queuing on the ATM port.
Syntax: [ no ] qos-mode-port
Mode(s): Interface Configuration
qos-port-type-profileERX Edge Routers
351
qos-port-type-profile
Description: Associates a QoS profile with all the ports of a given interface type. There is no no version for this command.
Syntax: [ no ] qos-port-type-profile interfaceType qos-profile qosProfileName
� interfaceType � one of the following interface types to be associated with the QoS port-type profile: atm, ethernet, serial, server-port
� qosProfileName � name of the QoS profile
Mode(s): Global Configuration
qos-profile
Description: In Global Configuration mode, creates a QoS profile on your system. The no version deletes the QoS profile in Global Configuration mode.
In Interface Configuration mode, attaches a QoS profile to a given interface. The no version detaches the QoS profile from the interface in Interface Configuration mode.
Syntax: [ no ] qos-profile qosProfileName
� qosProfileName � name of the QoS profile
Mode(s): Global Configuration, Interface Configuration
query-interval
Description: Specifies how often the system sends PIM router query messages to remote neighbors. The no version specifies the default time interval, 30 seconds.
Syntax: query-interval queryTime
no query-interval
� queryTime � interval in the range 0�210 seconds at which the system sends PIM router query messages from this interface
Mode(s): Interface Configuration
queue352
queue
Description: Specifies that a queue traffic class be configured for the selected interface type. The no version removes this rule from the QoS profile.
Syntax: [ no ] interfaceType queue traffic-class trafficClassName [ queue-profile queueProfileName ] [ scheduler-profile schedProfileName ] | [ scheduler-profile schedProfileName ] [ queue-profile queueProfileName ] ]
� interfaceType � one of the following interface types for which queue traffic classes should be configured: atm, atm-vc, cbf, ethernet, fr-vc, ip, ip-tunnel, l2tp-tunnel, serial, server-port, vlan
� trafficClassName � name of the traffic class
� queueProfileName � name of the queue profile
� schedProfileName � name of the scheduler profile
Mode(s): QoS Profile Configuration
queue-profile
Description: Configures a queue profile. The no version removes the named queue profile.
Syntax: [ no ] queue-profile queueProfileName
� queueProfileName � name of the queue profile
Mode(s): Global Configuration
radius acct-session-id-format
Description: Configures the RADIUS client�s use of a specific format for RADIUS attribute 44, Acct-Session-Id. The no version negates the Acct-Session-Id format.
Syntax: radius acct-session-id-format { decimal | description }
no radius acct-session-id-format
Mode(s): Global Configuration
radius algorithmERX Edge Routers
353
radius algorithm
Description: Specifies the algorithm that the RADIUS client uses to contact the RADIUS server. The no version restores the default value, direct.
Syntax: radius algorithm direct | round-robin
no radius algorithm
� direct � contacts the first AAA server on the list for each user, and the second if the first one fails, and so on.
� round-robin � contacts the first AAA server for the first user, and the second for the second user, and so on.
Mode(s): Global Configuration
radius calling-station-delimiter
Description: Specifies the delimiter for DSL PPP users for RADIUS attribute, Calling-Station-Id. The no version removes the delimiter.
Syntax: radius calling-station-delimiter delimiter
no radius calling-station-delimiter
� delimiter � special character to set off items in the Calling-Station-Id�s definition (for example, # or %)
Mode(s): Global Configuration
radius calling-station-format354
radius calling-station-format
Description: On a virtual router, specifies the format of RADIUS attribute 31, Calling-Station-Id, when the PPP user is terminated at the non-LNS ERX system. The no version returns the Calling-Station-Id format to delimited.
Syntax: radius calling-station-format delimited | fixed-format
no radius calling-station-format
� delimited � specifies that the RADIUS client uses the delimited format:delimiter systemName delimiter interfaceDescription delimiter vpi delimiter vci
In the case of Ethernet vpi delimiter vci is replaced with vlan.
� fixed-format � specifies that the RADIUS client uses the fixed format:systemName (up to four bytes) slot (two bytes) port (one byte) VPI (three bytes) VCI (five bytes)
� All fields are in ASCII, making the format up to 15 characters in length.
� In the case of Ethernet, the VPI and VCI bytes are replaced by an 8-byte VLAN.
� In the case of PPP terminated from LNS, the Calling-Station-Id attribute is the value passed as the calling-station AVP.
Mode(s): Global Configuration
radius client
Description: This command has only a no version. See the no radius clientcommand for a complete description and syntax.
radius dsl-port-typeERX Edge Routers
355
radius dsl-port-type
Description: Sets RADIUS attribute 61, NAS-Port-Type, in RADIUS access request packets and accounting start and stop packets for ATM interfaces. The no version restores the default setting of xdsl.
Syntax: radius dsl-port-type { sdsl | adsl-cap | adsl-dmt | idsl | xdsl | virtual }
no radius dsl-port-type
� sdsl � symmetric DSL
� adsl-cap � asymmetric DSL, carrierless amplitude phase modulation
� adsl-dmt � asymmetric DSL, discrete multitone
� idsl � ISDN DSL
� xdsl � DSL of unspecified type (default)
� virtual � virtual
Mode(s): Global Configuration
radius ethernet-port-type
Description: Indicates to RADIUS which Ethernet port type to use in RADIUS attribute 61, NAS-Port-Type, for all Ethernet users on the ERX.
Syntax: radius ethernet-port-type [ virtual | ethernet ]
no radius ethernet-port type
� virtual � sets RADIUS NAS-Port-Type to virtual
� ethernet � sets RADIUS NAS-Port-Type to Ethernet
Mode(s): Global Configuration
radius ignore framed-ip-netmask
Description: Ignores the Framed-Ip-Netmask attribute 9, returned by RADIUS in the access-accept packet. The default is enable. The no version restores the default.
Syntax: radius ignore framed-ip-netmask enable | disable
no radius ignore framed-ip-netmask
Mode(s): Global Configuration
radius include356
radius include
Description: Configures the inclusion of RADIUS attributes in RADIUS messages. Not all attributes are available in all message types. All attributes are included by default except for tunnel-server-attributes. The no version restores the default.
Syntax: radius include attributeName { access-request | acct-start | acct-stop } { enable | disable }
no radius include attributeName { access-request | acct-start | acct-stop }
� attributeName � one of the following RADIUS attributes; not all attributes are available in all message types:
Attributes available for Access-Request, Acct-Start, and Acct-Stop messages:
� acct-tunnel-connection � includes RADIUS attribute 68, Acct-Tunnel-Connection
� called-station-id � includes RADIUS attribute 30, Called-Station-Id
� calling-station-id � includes RADIUS attribute 31, Calling-Station-Id
� connect-info � includes RADIUS attribute 77, Connect-Info
� nas-identifier � includes RADIUS attribute 32, NAS-Identifier
� nas-port � includes RADIUS attribute 5, NAS-Port,
� nas-port-id � includes RADIUS attribute 87, NAS-Port-Id
� nas-port-type � includes RADIUS attribute 61, NAS-Port-Type
� pppoe-description � includes RADIUS attribute 26-24, Pppoe-Description
� tunnel-client-auth-id � includes RADIUS attribute 90, Tunnel-Client-Auth-Id
� tunnel-client-endpoint � includes RADIUS attribute 66, Tunnel-Client-Endpoint
� tunnel-medium-type � includes RADIUS attribute 65, Tunnel-Medium-Type
� tunnel-server-attributes � includes all supported tunnel server attributes, that is, the attributes of the tunnel client when PPP is terminated at the LNS on the system
� tunnel-server-auth-id � includes RADIUS attribute 91, Tunnel-Server-Auth-Id
� tunnel-server-endpoint � includes RADIUS attribute 67, Tunnel-Server-Endpoint
� tunnel-type � includes RADIUS attribute 64, Tunnel-Type
radius includeERX Edge Routers
357
Attributes available for Access-Request messages only:
� acct-session-id � includes RADIUS attribute 44, Acct-Session-Id
Attributes available for Acct-Start messages only:
� framed-ip-addr � includes RADIUS attribute 8, Framed-IP-Address
Attributes available for Acct-Start and Acct-Stop messages only:
� acct-link-count � includes RADIUS attribute 51, Acct-Link-Count
� acct-multi-session-id � includes RADIUS attribute 50, Acct-Multi-Session-ID
� class � includes RADIUS attribute 25, Class
� egress-policy-name � includes RADIUS attribute 26-11, Egress-Policy-Name
� event-timestamp � includes RADIUS attribute 55, Event-Timestamp
� framed-compression � includes RADIUS attribute 13, Framed-Compression
� framed-ip-netmask � includes RADIUS attribute 9, Framed-IP-Netmask
� ingress-policy-name � includes RADIUS attribute 26-10, Ingress-Policy-Name
� tunnel-assignment-id � includes RADIUS attribute 82, Tunnel-Assignment-Id
� tunnel-preference � includes RADIUS attribute 83, Tunnel-Preference
Attributes available for Acct-Stop messages only:
� input-gigapkts � includes RADIUS attribute 26-35, Acct-Input-Gigapackets
� input-gigawords � includes RADIUS attribute 52, Acct-Input-Gigawords
� output-gigapkts � includes RADIUS attribute 26-36, Acct-Output-Gigapackets
� output-gigawords � includes RADIUS attribute 53, Acct-Output-Gigawords
� access-request � specifies RADIUS Access-Request messages
� acct-start � specifies RADIUS Acct-Start messages
� acct-stop � specifies RADIUS Acct-Stop messages
� enable � enables attribute inclusion
� disables � disables attribute inclusion; the attribute is excluded
Mode(s): Global Configuration
radius nas-identifier358
radius nas-identifier
Description: Configures the RADIUS client�s value for RADIUS attribute 32, NAS-Identifier. The no version deletes the NAS-Identifier.
Syntax: radius nas-identifier identifierValue
no radius nas-identifier
� identifierValue � value in the range is 1� 64 characters; this value is used in the NAS-Identifier attribute for authentication and accounting requests
Mode(s): Global Configuration
radius nas-port-format
Description: Configures the RADIUS client�s use of a specific format for RADIUS attribute 5, NAS-Port. The no version removes the format.
Syntax: radius nas-port-format { 0ssssppp | ssss0ppp }
no radius nas-port-format
� 0ssssppp � sets the RADIUS client to use the 0ssssppp format where �s� is slot and �p� is port
� ssss0ppp � sets the RADIUS client to use the ssss0ppp format where �s� is slot and �p� is port
Mode(s): Global Configuration
radius override nas-ip-addr tunnel-client-endpoint
Description: Configures the RADIUS client (LNS) to use the tunnel-client-endpoint (LAC) IP address for RADIUS attribute 4, NAS-IP-Address. The no version restores the default address.
Syntax: radius override nas-ip-addr tunnel-client-endpoint
no radius override nas-ip-addr
� radius � configures the RADIUS server
� override � configures the RADIUS client to override the standard use for an attribute
� nas-ip-addr � configures the RADIUS client value for the nas-ip-addr attribute
� tunnel-client-endpoint � configures the RADIUS client to use the tunnel-client-endpoint in an attribute
Mode(s): Global Configuration
radius rollover-on-rejectERX Edge Routers
359
radius rollover-on-reject
Description: On a virtual router, specifies whether the system should roll over to the next RADIUS server when the system receives an access-reject message for the user it is authenticating. The no version restores the default value, disable.
Syntax: radius rollover-on-reject { enable | disable }
no radius rollover-on-reject
Mode(s): Global Configuration
radius server
Description: Specifies the IP address of a RADIUS authentication and accounting servers. The no version deletes the instance of the RADIUS server.
Syntax: radius { authentication | accounting } server ipAddress
no radius { authentication | accounting } server ipAddress
� authentication � configure the RADIUS authentication server
� accounting � configure the RADIUS accounting server
� ipAddress � IP address of the server
Mode(s): Global Configuration
radius trap acct-server-not-responding
Description: Enables or disables SNMP traps when a particular RADIUS accounting server fails to respond to a RADIUS accounting request. The no version restores the default value, disable.
Syntax: [ no ] radius trap acct-server-not-responding { enable | disable }
Mode(s): Global Configuration
radius trap auth-server-not-responding
Description: Enables or disables SNMP traps when a particular RADIUS authentication server fails to respond to a RADIUS Access-Request message. The no version restores the default value, disable.
Syntax: [ no ] radius trap auth-server-not-responding { enable | disable }
Mode(s): Global Configuration
radius trap no-acct-server-responding360
radius trap no-acct-server-responding
Description: Enables or disables SNMP traps when all of the configured RADIUS accounting servers per VR fail to respond to a RADIUS accounting request. The no version restores the default value, disable.
Syntax: [ no ] radius trap no-acct-server-responding { enable | disable }
Mode(s): Global Configuration
radius trap no-auth-server-responding
Description: Enables or disables SNMP traps when all of the configured RADIUS authentication servers per VR fail to respond to a RADIUS Access-Request message. The no version restores the default value, disable.
Syntax: [ no ] radius trap no-auth-server-responding { enable | disable }
Mode(s): Global Configuration
radius tunnel-accounting
Description: Enables or disables tunnel accounting. The no version restores the default value, disable.
Syntax: radius tunnel-accounting { enable | disable }
no radius tunnel-accounting
Mode(s): Global Configuration
radius udp-checksum
Description: Enables or disables UDP checksum for RADIUS packets on virtual routers you configure for B-RAS. The no version restores the default value, enable.
Syntax: radius udp-checksum { enable | disable }
no radius udp-checksum
Mode(s): Global Configuration
radius update-source-addrERX Edge Routers
361
radius update-source-addr
Description: Specifies an alternate source IP address for the system to use rather than the default router ID. The no version deletes the alternate address, and the system uses the router ID.
Syntax: radius update-source-addr sourceAddr
no radius update-source-addr
� sourceAddr � source address of the RADIUS client
Mode(s): Global Configuration
rate-limit-profile
Description: From Global Configuration mode, creates a rate limit profile and accesses Rate Limit Profile Configuration mode. The no version removes the rate limit profile.
From Policy Configuration mode, specifies a rate limit profile as a rule in a policy list. The no version removes a rate limit profile from a policy list. The suspend version suspends the rule temporarily.
Syntax: To create a rate limit profile:
[ no ] rate-limit-profile profileName [ rateLimitProfileType
� profileName � name of the rate limit profile
� rateLimitProfileType � one-rate or two-rate
To specify a rate limit profile in a policy:
[ no ] [ suspend ] rate-limit-profile profileName [ classifier-group claclName ][ precedence precValue ]
� profileName � name of the rate limit profile to be created or to be used in a policy
� claclName � classifier control list used to classify packets for this rate limit profile
� precValue � precedence of this rule in relation to other rules within this set
Mode(s): Global Configuration, Policy Configuration
rd362
rd
Description: Specifies the unique two-part route distinguisher for a VRF. There is no no version.
Syntax: rd distinguisher
� distinguisher � unique two-part identifier of the format number1:number2 where:
� number1 � AS number or an IP address
� number2 � unique integer; 32 bits if number1 is an AS number; 16 bits if number1 is an IP address
Mode(s): VRF Configuration
receive version
Description: Restricts the RIP version that the system can receive on a RIP remote-neighbor interface. The no version sets the remote-neighbor interface back to the default value, receiving both RIP version 1 and version 2.
Syntax: receive version [ 1 ] [ 2 ] [ off ]
no address receive version
� 1 � specifies RIP version 1 only
� 2 � specifies RIP version 2 only
� off � turns reception off
Mode(s): Remote Neighbor Configuration
redistributeERX Edge Routers
363
redistribute
Description: Redistributes routes from one routing domain into another routing domain. For DVMRP, only routes that appear in the RPF table can be redistributed. The no version ends redistribution of information.
Syntax: The options available vary depending on your routing protocol context; that is, on whether you are configuring BGP, DVMRP, IS-IS, OSPF, or RIP.
BGP:
redistribute { fromProtocol | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ metric absoluteValue | route-map mapTag | weight wtValue ]*
no redistribute { fromProtocol | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ metric [ absoluteValue ] |route-map [ mapTag ] | weight [ wtValue ] ]*
DVMRP:
[ no ] redistribute fromProtocol [ route-map mapTag ]
IS-IS:
redistribute { fromProtocol | static [ ip ] | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ level-1 | level-1-2 | level-2 | metric absoluteValue | metric-type { external | internal } | route-map mapTag ]*
no redistribute { fromProtocol | static [ ip ] | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ level-1 | level-1-2 | level-2 | metric [ absoluteValue ] | metric-type { external | internal } | route-map [ mapTag ] ]*
OSPF:
redistribute { fromProtocol | ospf match internal } [ metric-type [ 1 | 2 ] | metric absoluteValue | tag tagValue | route-map mapTag ]*
no redistribute { fromProtocol | ospf match internal } [ metric-type [ 1 | 2 ] | metric [ absoluteValue ] | tag [ tagValue ] | route-map [ mapTag ] ]*
redistribute { ospf match internal external [ 1 | 2 ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric absoluteValue | route-map mapTag | tag tagValue ]*
no redistribute { ospf match internal external [ 1 | 2 ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric [ absoluteValue ] | route-map [ mapTag ] | tag [ tagValue ] ]*
redistribute364
RIP:
redistribute { fromProtocol | ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric absoluteValue | route-map mapTag ]*
no redistribute { fromProtocol | ospf match internal } [ external [ 1 | 2 ] ]| ospf match external [ 1 | 2 ] [ internal ] } [ metric [ absoluteValue ] | route-map [ mapTag ] ]*
� fromProtocol � source protocol from which routes are being redistributed; the default is no source protocol defined
� access � redistributes access-server routes (BGP)
� access-internal � redistributes internal routes to directly connected clients (BGP)
� bgp � routes sourced from BGP protocol
� connected � routes that are established automatically when IP is enabled on an interface (non-multicast routing protocols). For routing protocols such as OSPF and IS-IS, these routes are redistributed as external to the AS. When redistributing from connected, only those connected networks that are configured on an interface that is not configured to run IS-IS will be redistributed. For DVMRP, this keyword redistributes routes that are established automatically in the RPF table because another multicast routing protocol, such as PIM, is enabled on an interface.
� dvmrp � routes sourced from DVMRP
� isis � routes sourced from IS-IS
� ospf � routes sourced from OSPF
� rip � routes sourced from RIP
� static � redistributes static routes; for IS-IS, you can specify static or static ip
� ospf match � determines what type(s) of routes to redistribute from OSPF; all OSPF routes are redistributed if you do not specify a type
� internal � redistributes OSPF internal routes
� external 1 � redistributes OSPF external routes of metric-type 1
� external 2 � redistributes OSPF external routes of metric-type 2
� absoluteValue � a metric that is applied to all routes from the source protocol; ranges from 0�429496729; in BGP this value is the MED, which defaults to the IGP metric of the redistributed route
� mapTag � a string of up to 32 alphanumeric characters that specifies a route map applied to all routes from the source protocol; all routes are redistributed if you do not specify a route map
� wtValue � administrative weight (relative importance) for routes redistributed into the protocol; a number in the range 0�65535
redistribute isis ipERX Edge Routers
365
� level-1 � specifies the redistribution of only IS-IS level 1 routes
� level-1-2 � specifies the redistribution of both IS-IS level 1 and level 2 routes
� level-2 � specifies the redistribution of only IS-IS level 2 routes
� metric-type � specifies the OSPF or IS-IS metric type for all routes from the source protocol
For routes redistributed into IS-IS:
� metric-type external � only the metric of the route itself is considered for comparison
� metric-type internal � both the metric of the route and the cost to the router that advertised the route are considered for comparison; this is the IS-IS default
For routes redistributed into OSPF:
� metric-type 1 � cost of the external routes is equal to the sum of all internal costs and the external cost
� metric-type 2 � cost of the external routes is equal to the external cost alone; this is the OSPF default
� tagValue � a tag that is applied to all routes from the source protocol; ranges from 0�429496729
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Address Family Configuration, Router Configuration
redistribute isis ip
Description: Redistributes routes from one IS-IS routing level into the other. The no version ends the redistribution.
Syntax: [ no ] redistribute isis ip { level-1 into level-2 | level-2 into level-1 }distribute-list accessListName
� level-1 � specifies the redistribution of routes from or into IS-IS level 1
� level-2 � specifies the redistribution of routes from or into IS-IS level 2
� accessListName � string of up to 32 alphanumeric characters specifying the IP access list used to filter routes between levels
Mode(s): Router Configuration
redundancy force-failover366
redundancy force-failover
Description: Forces the system to switch from the primary line module in the specified slot or the primary SRP module to the spare line module or SRP module. This command overrides the redundancy lockout command. With the srp option, the command is equivalent to the srp switch command. There is no no version.
Syntax: redundancy force-failover { slotNumber | srp }
� slotNumber � number of the slot in which the primary line module resides
� srp � indicates that the system should switch from the active to the standby SRP module
Mode(s): Privileged Exec
redundancy lockout
Description: Prevents the system from switching automatically to a spare line module if the primary module fails on a slot. The no version reverts to the default situation, in which the system switches automatically to a spare line module if the primary module fails on a slot. The redundancy force-failover command overrides this command. There is no no version.
Syntax: [ no ] redundancy lockout slotNumber
� slotNumber � number of the slot in which the primary line module resides
Mode(s): Global Configuration
redundancy revertERX Edge Routers
367
redundancy revert
Description: Forces the system to revert to the primary line module in the specified slot. If you specify a time or time and date, reversion occurs when the primary line module becomes available after that time. Otherwise, reversion occurs immediately. Issuing this command causes reversion once; after reboot, the system returns to the settings configured in the software. The no version has no effect.
Syntax: [ no ] redundancy revert slotNumber [ startTime [ [ startMonth startDay | startDay startMonth ] startYear ] ]
� slotNumber � number of the slot in which the primary line module resides
� startTime � time, in 24-hour format (00:00:00), at which the system reverts to this line module
� startMonth � name of the month in which the system reverts to this line module
� startDay � day of the month on which the system reverts to this line module
� startYear � four-digit year in which the system reverts to this line module
Mode(s): Privileged Exec
redundancy revertive
Description: Enables the system to revert from spare line modules to available primary line modules automatically. The no version reverts to the default situation, in which there is no automatic reversion from spare to primary line modules.
Syntax: [ no ] redundancy revertive [ timeOfDay ]
� timeOfDay � time, in 24-hour format (00:00:00), at which the system reverts to the available primary line modules every day
Mode(s): Global Configuration
refresh-period
Description: Specifies the timeout period in milliseconds between generation of RSVP refresh messages. The no version restores the default value of 30000 milliseconds.
Syntax: refresh-period period
no refresh-period
� period � interval from 0�4294967295
Mode(s): RSVP Profile Configuration
reload368
reload
Description: Reloads the operating system in the designated interval or at the designated time. There is no no version.
Syntax: reload [ force [ reason ] | in inTime [ reason ] | at atTime [ month day | day month ] [ reason ] | cancel ]
� force � prompts for confirmation to reboot if the system is in certain states, such as during the synchronization of SRP modules, that could lead to a loss of configuration data or an NVS corruption.
� reason � reason for the reload (1�255 characters long)
� inTime � schedules a reload of the software to take place in the specified minutes or hours and minutes ([ hh: ] mm). If the system is in a state that could lead to a loss of configuration data or an NVS corruption, it will delay the reboot for one minute, up to five times. If the system cannot reboot on its sixth attempt, the scheduled reboot fails.
� atTime � schedules a reload of the software to take place at the specified time (hh:mm) (using a 24-hour clock). If you specify the month and day, the reload takes place at the specified time and date. If you do not specify the month and day, the reload takes place at the specified time on the current day (if the specified time is later than the current time) or on the next day (if the specified time is earlier than the current time). Specifying 00:00 schedules the reload for midnight. If the system is in a state that could lead to a loss of configuration data or an NVS corruption, it will delay the reboot for one minute, up to five times. If the system cannot reboot on its sixth attempt, the scheduled reboot fails.
� month � name of the month (any number of characters in a unique string)
� day � number of the day of the month, in the range 1�31
� cancel � cancels a scheduled reload
Mode(s): Privileged Exec
reload slot
Description: Reboots the module in the selected slot. There is no no version.
Syntax: reload slot slotNumber [ force ]
� reason � reason for the reload (1�255 characters long)
� slotNumber � number of a selected slot in the router
� force � prompts for confirmation to reboot if the system is in certain states, such as during the synchronization of SRP modules, that could lead to a loss of configuration data or an NVS corruption.
Mode(s): Privileged Exec
remote hostERX Edge Routers
369
remote host
Description: Defines an L2TP host profile. Accesses the L2TP Destination Profile Host Configuration mode. The no version removes an L2TP host profile.
Syntax: remote host { hostname | default }
no remote host { hostname | default }
� hostname � name the LAC must supply in the hostname AVP of the receive SCCRQ; can be up to 64 characters in length (no spaces)
� default � allows the LAC to use any hostname in the hostname AVP
Mode(s): L2TP Destination Profile Configuration
remote-loopback
Description: Enables the acceptance of remote loopback requests on a T1 line on a CT1 line module. The no version restores the default value, which is to reject remote loopback requests.
Syntax: [ no ] remote-loopback
Mode(s): Controller Configuration
remote-neighbor
Description: Configures an OSPF, PIM, or RIP remote neighbor. The no version removes the remote neighbor and any attributes configured for the neighbor.
Syntax: For OSPF:
[ no ] remote-neighbor ipAddress area { areaId | areaIdInt }
For PIM
[ no ] remote-neighbor ipAddress sparse-mode
For RIP:
[ no ] remote-neighbor ipAddress
� ipAddress � IP address identifying the remote neighbor
� areaId � OSPF area ID in IP address format
� areaIdInt � OSPF area ID as a decimal value 0�4294967295
Mode(s): Router Configuration
rename370
rename
Description: Renames a local file. There is no no version.
Note: You cannot change the extension of a file, for example, .scr.
Syntax: rename oldFileName newFileName
� oldFileName � file to rename
� newFileName � new filename
Mode(s): Privileged Exec
request-data-size
Description: Sets the request payload data size. The no version restores the default value.
Syntax: request-data-size requestSizeValue
no request-data-size
� requestSizeValue � size of the data in bytes in the request packet�s payload; the default is 1 byte
Mode(s): RTR Configuration
reserve
Description: For DHCP local server clients, reserves an IP address for a specific MAC address. The no version removes the reservation.
Syntax: reserve ipAddress macAddress
no reserve ipAddress
ipAddress � IP address to reserve
macAddress � MAC address for which the IP address is reserved.
Mode(s): Pool Configuration
retransmit
Description: Specifies maximum number of times the system retransmits a RADIUS packet to an authentication or accounting server. The no version restores the default value.
Syntax: retransmit retries
no retransmit
� retries � number of retries in the range 0�10. The default is 3.
Mode(s): Radius Configuration
retransmit-intervalERX Edge Routers
371
retransmit-interval
Description: Specifies the time between LSA retransmissions for the OSPF remote-neighbor interface when an acknowledgment for the LSA is not received. The no version restores the default value.
Syntax: retransmit-interval retransInterval
no retransmit-interval
� retransInterval � a number in the range 0�3600 seconds; default value is 5 seconds
Mode(s): Remote Neighbor Configuration
rib-out disable
Description: Disables storage of routes to the Adj-RIBs-Out tables (disables rib-out) for all BGP peers. Storage is disabled by default. The no version enables the route storage. The default version removes the explicit global configuration for all peers and reestablishes inheritance of the feature configuration.
Note: If you enable or disable rib-out globally and this action changes the current configuration, all sessions are automatically bounced.
Syntax: [ no | default ] rib-out disable
Mode(s): Router Configuration
route-map372
route-map
Description: Specifies a route map for DVMRP or RIP, or defines the conditions for applying routing policies to filter or modify routes redistributed into or propagated by a routing protocol. The no version deletes the route map.
Syntax: Specifying for DVMRP or RIP:
[ no ] route-map mapTag [ interfaceType interfaceSpecifier ]
� mapTag � a string of up to 32 alphanumeric characters.
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Defining a route map:
[ no ] route-map mapTag [ permit | deny ] [ sequence ]
� mapTag � string of up to 32 alphanumeric characters. The redistribute Router Configuration command uses this string to reference this route map. Multiple route maps may share the same map tag.
� permit � if the match criteria are met for this route map and permit is specified, the route is redistributed as controlled by the set actions.
� deny � if the match criteria are met for the route map and deny is specified, the route is not redistributed, and no further route maps sharing the same map tag are examined.
� sequence � number in the range 0�65535 that indicates the position a new route map is to have in the list of route maps already configured with the same map tag. If given with the no version of this command, it specifies the position of the route map that should be deleted.
Mode(s): Global Configuration
router bgp
Description: Configures the BGP routing process. Allows you to set up a distributed routing core that automatically guarantees the loop-free exchange of routing information between ASs. The no version removes a routing process.
Syntax: [ no ] router bgp autonomousSystem
� autonomousSystem � number in the range 1�4294967295; the AS number that identifies the router to other BGP routers
Mode(s): Global Configuration
router dvmrpERX Edge Routers
373
router dvmrp
Description: Creates and enables DVMRP on a virtual router; accesses DVMRP router configuration mode. The no version deletes DVMRP from a virtual router.
Syntax: [ no ] router dvmrp
Mode(s): Global Configuration
router igmp
Description: Creates and enables IGMP on a virtual router; accesses IGMP router configuration mode. The no version disables IGMP on a virtual router.
Syntax: [ no ] router igmp
Description: Global Configuration
router isis
Description: Enables the IS-IS routing protocol and specifies an IS-IS process for IP. The no version disables IS-IS routing.
Syntax: [ no ] router isis [ tag ]
� tag � meaningful name for a routing process; name must be unique among all IP router processes for a given router; if not specified, a null tag is assumed, and the process is referenced with a null tag
Mode(s): Global Configuration
router ospf
Description: Configures an OSPF routing process. The no version disables an OSPF routing process.
Syntax: [ no ] router ospf processId [ vrf vrfName ]
� processId � number in the range 1�65535 that identifies the OSPF process
� vrfName � name of the VRF; string of 1�32 alphanumeric characters; available only in virtual router context, not VRF context
Mode(s): Global Configuration
router pim374
router pim
Description: Creates and enables PIM on a virtual router; accesses PIM router configuration mode. The no version deletes PIM from a virtual router.
Syntax: [ no ] router pim
Mode(s): Global Configuration
router rip
Description: Enables RIP routing protocol configuration. The no version deletes the RIP process and removes the configuration from the system.
Syntax: [ no ] router rip
Mode(s): Global Configuration
route-target
Description: Creates or adds to a list of VPN extended communities used to determine which routes are imported by a VRF. If at least one route target in the route-target export list contained in the update message advertising a route matches a route target in the route-target import list associated with a VRF, that route is installed in the VRF�s forwarding table. The no version removes a route target from the specified list.
Syntax: [ no ] route-target { import | export | both } extendedCommunity
� import � adds the route target to the current VRF�s import list; the VRF accepts only routes that have at least one route target that matches a route target in the import list
� export � adds the route target to the current VRF�s export list; all routes advertised from this VRF are associated with the export list; at least one route target in the export list must match a route target in the import list of a VRF receiving the route for the route to be installed in the VRF�s forwarding table
� both � adds the route target to both the import list and export list of the current VRF
� extendedCommunity � two-part number of the format number1:number2 that identifies an extended community of VPNs where:
� number1 � an AS number or an IP address
� number2 � a unique integer; 32 bits if number1 is an AS number; 16 bits if number1 is an IP address
Mode(s): VRF Configuration
rtrERX Edge Routers
375
rtr
Description: Sets the number of the RTR operation to be configured and accesses the RTR Configuration mode. The no version removes all configuration information for a given RTR operation.
Syntax: [ no ] rtr rtrIndex
no rtr
� rtrIndex � number of the operation to be configured; there is no default
Mode(s): Global Configuration
rtr reaction-configuration
Description: This command has only a no version. The no version clears all traps for all the rtr reaction-configuration command options.
Syntax: no rtr reaction-configuration rtrIndex
� rtrIndex � number of the operation configured
Mode(s): Global Configuration
rtr reaction-configuration action-type
Description: Sets certain actions to occur based on events under control of the RTR. The default is that traps of enabled events are taken. See the rtr reaction-configuration command. There is no no version.
Syntax: rtr reaction-configuration rtrIndex [ action-type actionType ]
� rtrIndex � number of the operation to be configured
� actionType � one of the following types:
� none � no action; selecting this option clears all traps for the given operation
� trapOnly � trap only action; this is the default; enabled events trigger the trap
Mode(s): Global Configuration
rtr reaction-configuration operation-failure376
rtr reaction-configuration operation-failure
Description: Enables operation-failure reaction. When the type of RTR entry is echo, you can also configure a value that triggers the operation-failure trap. When the type of RTR entry is pathEcho, you cannot configure the operation-failure trap. See the rtr reaction-configuration command. There is no no version.
Syntax: rtr reaction-configuration rtrIndex operation-failure [ operationFailureValue ]
� rtrIndex � number of the operation to be configured
� operationFailureValue � number in the range 0�15; default is 1
Mode(s): Global Configuration
rtr reaction-configuration path-change
Description: Enables path change reaction. When the type of RTR entry is echo, you cannot configure the path-change trap. See the rtr reaction-configuration command. There is no no version.
Syntax: rtr reaction-configuration rtrIndex path-change
� rtrIndex � number of the operation to be configured; no default
Mode(s): Global Configuration
rtr reaction-configuration test-completion
Description: Enables test completion reaction. See the rtr reaction-configuration command. There is no no version.
Syntax: rtr reaction-configuration rtrIndex test-completion
� rtrIndex � number of the operation to be configured
Mode(s): Global Configuration
rtr reaction-configuration test-failure
Description: Enables test failure reaction to occur. When the type of RTR entry is echo, you can also configure a value that triggers the test-failure trap. See the rtr reaction-configuration command. There is no no version.
Syntax: rtr reaction-configuration rtrIndex test-failure [ testFailureValue ]
� rtrIndex � number of the operation to be configured
� testFailureValue � number in the range 0�15; default is 1
Mode(s): Global Configuration
rtr resetERX Edge Routers
377
rtr reset
Description: Shuts down all RTR operations and clears the RTR configuration for the given virtual router. The no version negates the reset operation.
Syntax: [ no ] rtr reset
Mode(s): Global Configuration
rtr schedule
Description: Configures the RTR time parameters for an RTR operation. The no version stops the operation by putting it in the pending state. The no version also resets the restart-time attribute and the life attribute.
Syntax: [ no ] rtr schedule rtrIndex
� rtrIndex � number of the operation to be configured
Mode(s): Global Configuration
rtr schedule life
Description: Specifies the length of the test. There is no no version.
Syntax: rtr schedule rtrIndex life lifeValue
� rtrIndex � number of the operation to be configured
� life � value that depends on the type of the RTR entry; not a length of time:
� If the type is echo, life relates to the number of operations sent until a test finishes. The default is 90. If you use 60 operations * 60 seconds, the frequency between each operation that a test completes is 3,600 seconds (one hour).
� If the type is pathEcho, life relates to the maximum number of hops used by the traceRoute trap. The default is 30. If you use 30 (as the maximum hops) * 3 (operations per hop) * 60 seconds frequency between each operation, a test is completed within 3,600 seconds. If a destination is reached in fewer than 30 hops, the test is completed earlier.
� lifeValue � number of operations or maximum TTL in the range 1�2147483647
Mode(s): Global Configuration
rtr schedule restart-time378
rtr schedule restart-time
Description: Specifies the test�s restart in seconds. There is no no version.
Syntax: rtr schedule rtrIndex restart-time restartValue
� rtrIndex � number of the operation to be configured
� restartValue � default is 0; 0 calls for no restart after the test finishes
Mode(s): Global Configuration
rtr schedule start-time
Description: Configures an entry�s start. There is no no version.
Syntax: rtr schedule rtrIndex start-time { now | pending }
� rtrIndex � number of the operation to be configured
� now � RTR immediately begins to collect information.
� pending � RTR does not begin to collect information. This is the default.
Mode(s): Global Configuration
run
Description: Allows you to issue a command that operates in User Exec mode from any CLI mode. There is no no version.
Syntax: run userExecCommand
userExecCommand � a CLI command that you can issue from User Exec mode
Mode(s): All modes
samples-of-history-keptERX Edge Routers
379
samples-of-history-kept
Description: Sets the number of entries kept in the history table for each RTR operation. The no version restores the default value.
Syntax: samples-of-history-kept samples
no samples-of-history-kept
� samples � number of entries for each RTR index in the history table. The default is 16 for a pathEcho type and 1 for an echo type.
Mode(s): RTR Configuration
scheduler-profile
Description: Configures a scheduler profile. The no version deletes the scheduler profile.
Syntax: [ no ] scheduler-profile schedulerProfileName
� schedulerProfileName � name for the scheduler profile
Mode(s): Global Configuration
scramble
Description: Enables cell scrambling on a T3 Frame interface. The no version disables cell scrambling on the interface. If you issue this command, be sure to issue the dsu mode and dsu bandwidth commands. Otherwise, the interface may drop packets unexpectedly.
Syntax: [ no ] scramble
Mode(s): Controller Configuration
sdh
Description: Specifies that the interface supports SDH. The no version restores SONET operation on this interface.
Syntax: [ no ] sdh
Mode(s): Controller Configuration
send380
send
Description: Sends a message to one or more terminals. If you begin the message on the same line as the command, the first character is a delimiter; you must end the message with the same delimiter. If you begin the message on another line, you must enter <Ctrl+Z> to end the message. There is no no version.
Syntax: send { * | absoluteLineNumber | console consoleLineNumber | vty vtyLineNumber } [ message ]
� * � sends the message to all terminals
� absoluteLineNumber � line number of a terminal to which the message is sent
� consoleLineNumber � line number of a console to which the message is sent
� vtyLineNumber � line number of a vty to which the message is sent
� message � text of message to send; a string of up to 1023 alphanumeric characters
Mode(s): Privileged Exec
send-more-specific-routes-disable
Description: Specifies that RIP does not send a more-specific route if it has a less-specific route with any metric. The no version restores the default condition, wherein RIP always sends a more-specific route even if a less-specific route with a metric is available.
Syntax: [ no ] send-more-specific-routes-disable
Mode(s): Router Configuration
send version
Description: Restricts the RIP version that the system can send on a remote-neighbor interface. The no version sets the remote-neighbor interface back to the default value, sending only RIP version 1.
Syntax: send version [ 1 | 2 | off ]
no send version [ 1 | 2 | off ]
� 1 � specifies RIP version 1 only
� 2 � specifies RIP version 2 only
� off � turns reception off
Mode(s): Remote Neighbor Configuration
server-addressERX Edge Routers
381
server-address
Description: Sets the DHCP server address that is sent to DHCP clients. The no version removes server address.
Syntax: server-address address
no server-address [ address ]
address � DHCP server address
Mode(s): Pool Configuration
server-name
Description: Specifies the hostname expected from the L2TP LNS or the L2F home gateway when you set up a tunnel. The no version removes the server name.
Syntax: server-name serverName
no server-name
� serverName � hostname; can be up to 64 characters in length (no spaces)
Mode(s): Domain Map Tunnel Configuration
service ctrl-x-reboot
Description: Enables the <Ctrl+X> key combination to reboot the system at all times, except that the key combination has no effect if you are accessing the system via a Telnet session. The no version restores the default condition, disabled.
Syntax: [ no ] service ctrl-x-reboot
Mode(s): Global Configuration
service dhcp-local
Enables the DHCP local server. The no version disables the DHCP local server, and does not save the previous settings.
Syntax: [ no ] service dhcp-local [ equal-access | standalone ]
� equal-access � enables the DHCP local server to work with the SDX (formerly SSC) or HTTP local server for non-PPP equal access, the default option.
� standalone � configures the system as a DHCP local server
Mode(s): Global Configuration
service manual-commit382
service manual-commit
Description: Stops the system from automatically saving configuration changes to nonvolatile storage. Places the system into Manual Commit mode; this mode has no effect on the CLI prompt. Causes an immediate save of configuration data not yet committed to nonvolatile storage. The no version returns the ERX system to Automatic Commit mode (with no effect on the CLI prompt).
Syntax: [ no ] service manual-commit
Mode(s): Global Configuration
service password-encryption
Description: Directs the system to encrypt passwords that are saved in the configuration file. The command should be used as a simple cipher to prevent unauthorized users from viewing passwords.
Syntax: [ no ] service password-encryption
Mode(s): Global Configuration
service timestamps
Description: Formats timestamps associated with log messages. The no version removes timestamps from log messages.
Syntax: service timestamps log datetime [ show-timezone [ localtime ] ]
no service timestamps [ log ]
� log � indicates that a timestamp will appear on log messages
� datetime � displays the date and time
� show-timezone � displays the time zone
� localtime � displays the timestamp in local time
Mode(s): Global Configuration
service unattended password-recovery
Description: Allows you to delete all passwords and secrets from the console without being physically present at the router. When executed, this command changes the behavior of the erase secrets command, which will not take any parameters and will not be available through a vty session. The no version reverts erase secrets to factory default settings.
Syntax: [ no ] service unattended-password-recovery
Mode(s): Global Configuration
set as-path prependERX Edge Routers
383
set as-path prepend
Description: Prepends one or more AS numbers or a list of AS numbers to the AS path for BGP routes. The no version removes the set clause from a route map.
Syntax: set as-path prepend { list listName | asPathNumber [ asPathNumber ] * }
no set as-path prepend
� listName � name of a list of AS path numbers; string of up to 32 characters
� asPathNumber � a number in the range 1�65535 that appends the string following the keyword prepend to the as-path of the route that is matched by the route map. Applies to outbound BGP route maps.
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Route Map Configuration
set automatic-tag
Description: Automatically computes the tag value. The no version removes the set clause from a route map.
Syntax: [ no ] set automatic-tag
Mode(s): Route Map Configuration
set comm-list delete
Description: Removes communities specified by the community list from the community attribute of routes matching the route map. The no version removes the set clause from a route map.
Syntax: set comm-list { communityList | regularExpression } delete
no set comm-list
� communityList � community list identifier; a string of up to 32 characters
� regularExpression � the regular expression that matches the community
Mode(s): Route Map Configuration
set community384
set community
Description: Sets the BGP community attribute to one or more community numbers or a list of community numbers. The no version removes the set clause from a route map.
Syntax: set community { list communityListName [ additive ] | none }
set community { communityNumber | knownCommunity | asCommunityNumber } [ communityNumber | knownCommunity | asCommunityNumber ]* [ additive ]
no set community
� communityListName � name of a community; a string of up to 32 characters
� additive � adds the community number to the community list
� none � removes the community attribute
� communityNumber � a number in the range 1� 4294967295 that specifies the community number
� knownCommunity � any of the following well-known communities; the internet community is not an option:
� local-as � prevents advertisement outside of the local AS
� no-advertise � prevents advertisement to any peer
� no export � prevents advertisement beyond the BGP confederation boundary
� asCommunityNumber � AS community number in the format AA:NN:
� AA � number in the range 1�65535 that identifies an AS
� NN � number in the range 1�65535 that uniquely identifies a community within an AS
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Route Map Configuration
set dampeningERX Edge Routers
385
set dampening
Description: Enables route flap dampening and optionally specifies dampening parameters for routes passing through the route map. The no version removes the set clause from a route map.
Syntax: set dampening halfLife reuse suppress maxSuppressTime [ halfLifeUnreachable ]
no set dampening
� halfLife � half-life period in minutes in the range 1�45. The default is 10. When a BGP route has been assigned a penalty, the penalty is decreased by half after each half-life period. Each time a route flaps, the router configured for route flap dampening assigns the route a penalty. Penalties are cumulative. BGP stores the penalty for all reachable and unreachable routes that have experienced recent flaps.
� reuse � reuse limit in the range 1�20000. The default is 750. As the penalty for a flapping route decreases and falls below this reuse limit, the route is unsuppressed. That is, the route is added back to the BGP table and used for forwarding.
� suppress � suppress limit in the range 1�20000. A route is suppressed when its penalty exceeds this limit. The default value is 2000.
� maxSuppressTime � maximum suppression time in minutes in the range 1�255. This value is the maximum amount of time a route can be suppressed. The default value is 60.
� halfLifeUnreachable � the alternate half-life period in minutes for unreachable routes; a number in the range 1�45. The default value is 20. If you do not specify this value, the system uses the same half-life period for both reachable and unreachable routes.
Mode(s): Route Map Configuration
set dhcp relay386
set dhcp relay
Description: Adds a new DHCP/BOOTP server. The no version disables the specified server or disables the addition of the relay agent information. If you specify the no version, all DHCP servers are deleted from the list.
Syntax: set dhcp relay { dhcpServerAddress | agent [ circuit-ID-only | remote-ID-only ] | discard-access-routes { interface interfaceType interfaceSpecifier | all }
no set dhcp relay { [ dhcpServerAddress | agent }
� dhcpServerAddress � IP address of the DHCP server
� agent � adds the agent information suboptions (circuit-ID and remote-ID) to every packet the system relays from a DHCP client to a DHCP server
� circuit-ID-only � specifies circuit ID suboption only
� remote-ID-only � specifies remote-ID suboption only
� discard-access-routes � removes existing access routes for an interface from the routing table and from NVS
� interfaceType � interface type whose access routes should be discarded; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Global Configuration
set distance
Description: Configures an administrative distance to apply to routes that match the route map. The no version removes the set clause from a route map.
Note: Setting a distance in a route map is useful only when it is set on a route being installed into the routing table. Distance is used to establish preference between routes to the same prefix to identify the best route to that prefix. Setting distance is any other circumstance has no effect.
Syntax: set distance distance
no set distance
� distance � administrative distance, ranging from 0�255
Mode(s): Route Map Configuration
set extcommunityERX Edge Routers
387
set extcommunity
Description: Sets the BGP extended communities attribute. The no version removes the set clause from a route map.
Syntax: set extcommunity { rt | soo } extCommValue [ extCommValue ]* [ additive ]
no set extcommunity
� rt � specifies a route-target extended community, which consists of one or more routers that can receive a set of routes advertised by BGP that carry the extended-community attribute
� soo � specifies a site-of-origin extended community, which consists of one or more routers that inject into BGP a set of routes that carry the extended-community attribute
� extCommValue � number identifying the extended community in one of the following formats:
� AS:nn � 16-bit autonomous system number followed by a 32-bit integer
� AS:nn � 32-bit autonomous system number followed by a 16-bit integer
� ipAddress:nn � IP address followed by a 16-bit integer
� extCommValue � number identifying the extended community; in the format AA:NN, where any of the following is true:
� AA is an AS number in the range 1�65535 and NN is an integer in the range 1�4294967295; for example, 320:72358
� AA is an AS number in the range 1�4294967295 and NN is an integer in the range 1�65535; for example, 84511:45
� AA is a dotted decimal IP address and NN is an integer in the range 1�65535; for example, 10.10.21.5:1256
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
� additive � adds the specified extended communities to any previously configured for the attribute; if omitted, the specified extended communities replace any previously configured for the attribute
Mode(s): Route Map Configuration
set ip next-hop388
set ip next-hop
Description: Indicates where to send packets that pass a match clause of a route map for policy routing. The no version removes the set clause from a route map.
Syntax: set ip next-hop { ipAddress | interface interfaceType interfaceSpecifier | peerAddress }
no set ip next-hop [ ipAddress | peerAddress]
� ipAddress � IP address of next hop to which packets are sent; does not need to be an adjacent router
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� peerAddress � on outbound route maps, disables the next hop calculation by setting the next hop to the IP address of the BGP speaker; on inbound route maps, overrides any third-party next hop configuration by setting the next hop to the IP address of the peer
Mode(s): Route Map Configuration
set level
Description: Specifies where to import routes when all of a route map�s match criteria are met. The no version removes the set clause from a route map.
Syntax: set level atLevel
no set level
� atLevel � specifies one of the following levels:
� level-1 � imports routes into a level 1 area
� level-1-2 � imports routes into a level 1 and a level 2 area
� level-2 � imports routes into a level 2 subdomain
� stub-area � imports routes into an OSPF NSSA area
� backbone � imports routes into an OSPF backbone area
Mode(s): Route Map Configuration
set local-preferenceERX Edge Routers
389
set local-preference
Description: Specifies a preference value for the AS path. The no version removes the set clause from a route map.
Syntax: set local-preference value
no set local-preference
� value � preference number in the range 0�4294967295
Mode(s): Route Map Configuration
set metric
Description: Modifies the metric value (for BGP, the MED) for a route that matches the route map by applying a relative or absolute metric. The no version removes the set clause from a route map.
Note: You cannot have an absolute and relative metric within the same route map sequence. Issuing either command overrides any previously configured metric in the route map.
Syntax: set metric [ signrelValue absValue ]
no set metric
� sign � one of the following values:
� + � specifies that the value is added to the metric for routes matching the route map; immediately precedes the metric value with no intervening space
� - � specifies that the value is subtracted from the metric for routes matching the route map; immediately precedes the metric value with no intervening space
� relValue � number of a single standard access list; string up to 32 characters (a number in the range 0�4294967295)
� absValue � number in the range 0�294967295
Mode(s): Route Map Configuration
set metric-type390
set metric-type
Description: Sets the metric type for the destination routing protocol. The no version removes the set clause from a route map.
Syntax: set metric-type atMetric
no set metric-type
� atMetric � specifies the metric type from the following choices:
For BGP:
� external � reverts to the normal BGP rules for propagating the MED; this is the BGP default
� internal � sets the MED of a received route that is being propagated to an external peer equal to the IGP cost of the indirect next hop
For IS-IS:
� external � only the metric of the route itself is considered for comparison
� internal � both the metric of the route and the cost to the router that advertised the route are considered for comparison; this is the IS-IS default
For OSPF:
� 1 � cost of the external routes is equal to the sum of all internal costs and the external cost
� 2 � cost of the external routes is equal to the external cost alone; this is the OSPF default
Mode(s): Route Map Configuration
set origin
Description: Sets the BGP origin of an advertised route. The no version removes the set clause from a route map.
Syntax: set origin atOrigin
no set origin
� atOrigin � specifies the origin from the following choices:
� egp � remote exterior gateway protocol
� igp � local interior gateway protocol
� incomplete � origin unknown
Mode(s): Route Map Configuration
set-overload-bitERX Edge Routers
391
set-overload-bit
Description: Configures the system in IS-IS to signal other routers not to use it as an intermediate hop in their SPF calculations. The no version removes the designation. By default, the overload bit is not set.
Syntax: set-overload-bit [ on-startup period ]
no set-overload-bit
� on-startup � specifies that the overload bit is set for a period of time after system reboot. Use to prevent other routers from routing through the system before it is fully operational. The overload bit is cleared when the period expires.
� period � duration in seconds of period after system reboot that overload bit is set; ranges from 5�86400 seconds
Mode(s): Router Configuration
set route-type
Description: Sets routes of the specified type. The no version removes the set clause from a route map.
Syntax: set route-type { internal | internal-intra | internal-inter | external }
no set route-type
� internal � internal route (including OSPF intra-area and interarea)
� internal-intra � intra-area route
� internal-inter � interarea route
� external � external route (BGP and OSPF type 1/2)
Mode(s): Route Map Configuration
set tag
Description: Sets the tag value of the destination routing protocol. The no version removes the set clause from a route map.
Syntax: set tag tagValue
no set tag
� tagValue � preference number in the range 0�4294967295
Mode(s): Route Map Configuration
set weight392
set weight
Description: Specifies the BGP weight for the routing table. Overrides the weights assigned using the neighbor weight and neighbor filter-list commands. The no version removes the set clause from a route map.
Syntax: [ no ] set weight value
no set weight
� value � weight value in the range 0�4294967295
Mode(s): Route Map Configuration
shaping-rate
Description: Sets the shaping rate in bits per second. The no version deletes the shaping rate.
Syntax: shaping-rate shapingRate [ burst burstSize ]
no shaping-rate
� shapingRate � range 64000�1,000,000,000
� burstSize � range 8192�32767
Mode(s): Scheduler Profile Configuration
show aaa
Description: Displays accounting or authentication information regarding PPP.
Syntax: show aaa { accounting | authentication } ppp default [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show aaa accounting
Description: Displays the name of the virtual router for which duplication accounting records are sent to the accounting server.
Syntax: show aaa accounting [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show aaa accounting intervalERX Edge Routers
393
show aaa accounting interval
Description: Displays information on the accounting interval.
Syntax: show aaa accounting interval [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show aaa delimiters
Description: Displays the domain name and realm name delimiters configured on the system.
Syntax: show aaa delimiters [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show aaa domain-map
Description: Displays the mapping between user domains and virtual routers.
Syntax: show aaa domain-map [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show aaa duplicate-address-check
Description: Configures AAA to query the routing table for duplicate address assignment before granting access.
Syntax: show aaa duplicate-address-check [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show aaa model
Description: Displays AAA model.
Syntax: show aaa model [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show aaa name-servers394
show aaa name-servers
Description: Displays the IP addresses of the primary and secondary DNS and WINS name servers.
Syntax: show aaa name-servers [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show aaa profile
Description: Displays AAA profile names and the actions associated with each specified AAA profile name.
Syntax: show aaa profile [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show aaa statistics
Description: Displays the authentication and authorization statistics.
Syntax: show aaa statistics [ delta ] [ filter ]
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show aaa subscriber per-port-limit
Description: Displays the number of active subscribers on each interface.
Syntax: show aaa subscriber per-port-limit [ filter ]
filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show aaa subscriber per-vr-limit
Description: Displays the number of active subscribers on each virtual router.
Syntax: show aaa subscriber per-vr-limit [ filter ]
filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show aaa timeoutERX Edge Routers
395
show aaa timeout
Description: Displays information on the idle or session timeout.
Syntax: show aaa timeout [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show aaa tunnel-parameters
Description: Displays default tunnel parameters that are configured for tunnel definitions.
Syntax: show aaa tunnel-parameters [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show access-list
Description: Displays access list information about the access list specified.
Syntax: show [ ip ] access-list [ accessListName ] [ detail ] [ filter ]
� accessListName � string of up to 32 alphanumeric characters
� detail � displays detailed information about the access list
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show aps
Description: Displays information about APS/MSP interfaces or groups.
Syntax: show aps [ group [ groupNumber ] ]
groupNumber � number of the APS/MSP group
Mode(s): Privileged Exec
show arp396
show arp
Description: Displays information about the Address Resolution Protocol cache.
Syntax: show [ ip ] arp [ vrfName ] [ ipAddress ] [ interfaceType interfaceSpecifier ][ all ] [ filter ]
� vrfName � name of the VRF
� ipAddress � ARP entries matching this IP address are displayed
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� all � displays all ARP entries
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show atm aal5 interface
Description: Displays configuration information about an ATM AAL interface.
Syntax: show atm aal interface atm interfaceSpecifier [ filter ]
� atm � specify an ATM interface
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show atm interfaceERX Edge Routers
397
show atm interface
Description: Displays configuration information about an ATM interface or a brief description of all ATM (major) interfaces configured in the system.
Syntax: show atm interface {atm interfaceSpecifier [ signalling-stats ] | brief } [ delta ] [ filter ]
� atm � specifies an ATM interface
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide; subinterfaces are not supported by the syntax
� signalling-stats � displays signalling statistics for the ATM interface
� delta � displays baselined statistics
� brief � displays the status and number of configured VCs for all ATM interfaces configured in the system
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show atm map
Description: Displays the list of all configured ATM static maps to remote hosts on an ATM network.
Syntax: show atm map [ mapName ] [ brief ] [ filter ]
� mapName � name of the map list to display information for
� brief � display information in a condensed format
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show atm oam
Description: Displays F4 OAM statistics.
Syntax: show atm oam interfaceSpecifier [ vpi ] [ segment | end-to-end ] [ filter ]
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� vpi � virtual path identifier
� segment � displays information on segment F4 OAM circuits
� end-to-end � displays information on end-to-end F4 OAM circuits
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show atm ping398
show atm ping
Description: Displays a summary of the results (number of ping cells sent, number of ping cells received, success rate) of the ping operation. These results are overwritten when a new ATM ping is invoked for the circuit. If you do not specify any of the options, the command shows ping entries for the entire system.
Syntax: show atm ping [atm interfaceSpecifier [ vpi vci ] ] [ filter ]
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� vpi � shows details of the last ping atm command on this VPI
� vci � shows details of the last ping atm command on this VCI
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show atm subinterface
Description: Displays current state of all ATM subinterfaces you specify.
Syntax: show atm subinterface [ atm interfaceSpecifier ] [ summary interfaceType interfaceSpecifier ] [ filter ]
� atm � specifies an ATM interface
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� summary � specifies that summary information is displayed
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show atm vcERX Edge Routers
399
show atm vc
Description: Displays a summary of all configured ATM virtual circuits.
Syntax: show atm vc [ interfaceType interfaceSpecifier ] [ vpi vpi ] [ category categoryType ] [ status statusType ] [ delta ] [ filter ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� vpi � displays VCs on a specific VPI
� category � displays VCs that have a specific service category
� categoryType � one of the following:
� cbr
� nrt-vbr
� rt-vbr
� ubr
� ubr-pc
� status � displays VCs with a certain status
� statusType � specify up or down
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show atm vc atm
Description: Displays OAM statistics on a VC. You can specify the circuit to display by entering the VCD or the VPI and VCI.
Syntax: show atm vc atm interfaceSpecifier { vcd | vpi-vci vpi vci } [ delta ]
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� vcd � specify the circuit by entering the VCD
� vpi-vci � specify the circuit by entering the VPI and VCI
� delta � displays baselined statistics
Mode(s): User Exec, Privileged Exec
show atm vp-tunnel400
show atm vp-tunnel
Description: Displays a summary of all configured ATM virtual path tunnels.
Syntax: show atm vp-tunnel [ interfaceSpecifier ] [ filter ]
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show bandwidth oversubscription
Description: Displays the bandwidth oversubscription status.
Syntax: show bandwidth oversubscription [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show boot
Description: Displays the configuration and system settings that are used at startup.
Syntax: show boot [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show bulkstats
Description: Displays bulkstats statistical information.
Syntax: show bulkstats [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show bulkstats collector description
Description: Displays the collector�s file description.
Syntax: show bulkstats collector description [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show bulkstats collector intervalERX Edge Routers
401
show bulkstats collector interval
Description: Displays the time for which the system transfers data to the receivers.
Syntax: show bulkstats collector interval [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show bulkstats collector max-size
Description: Displays the maximum size of the bulkstats file.
Syntax: show bulkstats collector max-size [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show bulkstats collector transfer-mode
Description: Displays the way in which the system transfers data to the receivers.
Syntax: show bulkstats collector transfer-mode [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show bulkstats interface-type
Description: Displays information on the collection of statistical data for the particular interface type (for example, ATM).
Syntax: show bulkstats interface-type [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show bulkstats receiver
Description: Displays the configuration of the receiver�s remote files.
Syntax: show bulkstats receiver [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show bulkstats schema402
show bulkstats schema
Description: Use to display data on the selected schema.
Syntax: show bulkstats schema [ filter ]
� filter � if-stack or if-stats; see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show bulkstats statistics
Description: Displays information on statistics counters.
Syntax: show bulkstats statistics [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show bulkstats traps
Description: Displays information on bulkstats traps.
Syntax: show bulkstats traps [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show cac
Description: Displays global call admission control configuration.
Syntax: show cac [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show cac interfaceERX Edge Routers
403
show cac interface
Description: Displays all interfaces on which TE accounting is configured, or information only for the specified interface.
Syntax: show cac interface [ brief | interfaceType interfaceSpecifier ] [ filter ]
� brief � displays summary information about the interface
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show cbf connection
Description: Displays all configured CBF connections.
Syntax: show cbf connection [ all ] [ filter ]
� all � does not combine parallel unidirectional connections
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show cbf interface
Description: Displays status information and statistics about CBF interfaces.
Syntax: show cbf interface [ brief | full ] [ interfaceType [ interfaceSpecifier ] ] [ delta ] [ filter ]
� brief � displays only an interface�s name and up/down status
� full � displays an interface�s name, full status information, and statistics
� If you do not specify the brief or full keyword, the software displays an interface�s name and full status.
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show classifier-list404
show classifier-list
Description: Displays information about classifier control lists.
Syntax: show classifier-list [ classifierName [ classifierNumber ] ] [ brief | detailed ][ filter ]
� classifierName � classifier list name
� classifierNumber � classifier list number
� brief � display information in a condensed format
� detailed � display detailed information
� filter � specify a CLI output filter. See Filtering show Commands in About This Guide.
Mode(s): Privileged Exec
show clns
Description: Displays information about the CLNS network
Syntax: show clns [ es-neighbors | is-neighbors ] [ interfaceType interfaceSpecifier ] [ detail ] [ filter ]
� es-neighbors � displays IS-IS related information for IS-IS end-system adjacencies. Neighbor entries are sorted according to the area in which they are located.
� is-neighbors � displays IS-IS related information for IS-IS intermediate-system adjacencies. Neighbor entries are sorted according to the area in which they are located.
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� detail � displays area addresses and IP addresses; if not specified, a summary display is provided
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show clns interfaceERX Edge Routers
405
show clns interface
Description: Lists the Connectionless Network Service information about each interface.
Syntax: show clns interface [ interfaceType interfaceSpecifier ] [ filter ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show clns neighbors
Description: Displays both ES and IS neighbors.
Syntax: show clns neighbors [ interfaceType interfaceSpecifier ] [ detail ] [ filter ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� detail � when specified, the area addresses advertised by the neighbor in the hello messages are displayed; otherwise, a summary display is provided
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show clns protocol
Description: Lists the protocol-specific information for each IS-IS routing process in the router.
Syntax: show clns protocol [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show clns traffic406
show clns traffic
Description: Lists the IS-IS protocol statistics seen by the specified system.
Syntax: show clns traffic [ detail | interfaceType interfaceSpecifier ] [ delta ] [ filter ]
� detail � when specified, interface statistics are displayed; otherwise, only global statistics are displayed
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show clock
Description: Displays the system�s clock source.
Syntax: show clock [ detail ] [ filter ]
� detail � provides expanded information about the clock settings, rather than a summary
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show columns
Description: Displays configuration information of bridged Ethernet over ATM, IP over ATM, PPP, or PPPoE static and dynamic interface columns. It is designed to categorize interface subscribers into PPP, PPPoE, bridged, or routed.
Syntax: show columns
Mode(s): User Exec, Privileged Exec
show configurationERX Edge Routers
407
show configuration
Description: Displays the current (running) configuration of the system, a specified virtual router, or a specified interface within the current VR context. You can create a configuration script from this output by saving it as a file with the .scr extension. This command was formerly documented as show config; that abbreviation is still supported.
Syntax: show configuration [ [ interface interfaceType interfaceSpecifier ] | [ virtual-router routerName ] [ exclude-category interfaceType ]* ][ include-defaults ] [ filter ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� routerName � name of the virtual router
� exclude-category � excludes information associated with a particular type of interface
� include-defaults � includes commands that set default values for various parameters
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show controllers e3
Description: Displays information about E3 controller interfaces.
Syntax: show controllers e3 { interfaceSpecifier [ brief | all | summary ] | serial[ interfaceSpecifier ] } [ filter ]
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� brief � abbreviated display of E3 controller information
� all � detailed display of all available E3 controller information
� summary � displays link status summary
� serial � displays information about serial interfaces
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show controllers sonet408
show controllers sonet
Description: Displays the statistics or the configuration for the different layers of channelized SONET and SDH interfaces.
Syntax: show controllers sonet { [ brief ] | slot/port [ :controllerSpecifier ] { [ configuration ] | layerType [ interval | total [ delta ] ] | controllerType [ interval ] | all [ total [ delta ] ] } } [ filter ]
� brief � displays a summary of information about all controllers
� slot � number of the chassis slot of the line module in the range 0�13 (ERX-1400 series) and 0�6 (ERX-700 series)
� port � port number on the I/O module
� There is no controllerSpecifier for a section or line.
� For a path, controllerSpecifier is the number of the path.
� For a tributary, controllerSpecifier has the format pathChannel[ /pathPayload ] [ /tributaryGroup ] [ /tributaryNumber ]
� For an E1 or a DS1 controller, controllerSpecifier has the format pathChannel [ /pathPayload ] [ /tributaryGroup ] [ /tributaryNumber ][ /channelGroup ]
� For a DS3 controller, controllerSpecifier has the format pathChannel ds3-channel-number [ ds1-channel-number ] [ subchannelNumber ]
� pathChannel � number of the path
� pathPayload � number of the payload within the path. In SONET mode, pathPayload is always 1. In SDH mode, pathPayload is the number of the TUG-3 group.
� tributaryGroup � number of the tributary group within the path. In SONET mode, tributary group is the number of the VT group. In SDH mode, tributary group is the number of the TUG-2 group.
� tributaryNumber � number of the tributary within the group. In SONET mode, tributaryNumber is the number of the VT. In SDH mode, tributaryNumber is the number of the TUG-1 group or tributary unit.
� channelGroup � number of the channel group
� ds3-channel-number � number of the ds3 channel
� ds1-channel-number � number of the ds1 channel in the range 1�28
� subchannelNumber � number of the subchannel in the range 1�24
� configuration � displays the configuration of each controller at the specified level and above
� layerType � type of SONET/SDH layer
� section � section layer of an interface
� line � line layer of an interface
show controllers sonetERX Edge Routers
409
� path � SONET or SDH path
� interval � number of 15-minute intervals over which the system monitors information; a value between 1 and 96. The default is the current interval, number 1.
� controllerType � type of interface or channel
� tributary � SONET or SDH virtual tributary
� e1 � E1 channel over SDH virtual tributary
� ds1 � T1 channel over SONET/SDH virtual tributary
� ds3 � T3 over channelized SONET interface
� t1 � T1 channel on T3 over channelized SONET interface
� total � displays the MIB statistics for all intervals
� delta � displays baselined statistics for all intervals
� all � shows statistics for all time intervals, rather than statistics for selected time intervals
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show controllers sonet remote410
show controllers sonet remote
Description: Displays information about the statistics on the remote device when MDL is configured on a T3 over channelized SONET interface or FDL is configured on either a T1 channel on a T3 over channelized SONET interface or a T1 over SONET/SDH interface.
Syntax: show controllers sonet { slot/port [ :controllerSpecifier ] remote [ all ] } [ filter ]
� slot � number of the chassis slot of the line module in the range 0�13 (ERX-1400 series) and 0�6 (ERX-700 series)
� port � port number on the I/O module
� There is no controllerSpecifier for a section or line.
� For a T3 over channelized SONET interface, controllerSpecifier has the format pathChannel ds3-channel-number [ ds1-channel-number ] [ subchannelNumber ]
� For a T1 over SONET/SDH interface., controllerSpecifier has the format pathChannel [ /pathPayload ] [ /tributaryGroup ] [ /tributaryNumber ][ /channelGroup ]
� pathChannel � number of the path
� pathPayload � number of the payload within the path. In SONET mode, pathPayload is always 1. In SDH mode, pathPayload is the number of the TUG-3 group.
� tributaryGroup � number of the tributary group within the path. In SONET mode, tributary group is the number of the VT group. In SDH mode, tributary group is the number of the TUG-2 group.
� tributaryNumber � number of the tributary within the group. In SONET mode, tributaryNumber is the number of the VT. In SDH mode, tributaryNumber is the number of the TUG-1 group or tributary unit.
� channelGroup � number of the channel group
� ds3-channel-number � number of the ds3 channel
� ds1-channel-number � number of the ds1 channel in the range 1�28
� subchannelNumber � number of the subchannel in the range 1�24
� all � shows statistics for all time intervals, rather than statistics for selected time intervals
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show controllers t1 | e1ERX Edge Routers
411
show controllers t1 | e1
Description: Displays information about the CT1 or CE1 controller interfaces.
Syntax: show controllers { t1 | e1 } { { fractional | serial } [ interfaceSpecifier ] | interfaceSpecifier [ brief | all | summary ] } [ filter ]
� fractional � displays information about T1 or E1 fractional interfaces
� serial � displays information about T1 or E1 serial interfaces
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� brief � abbreviated display of CT1 or CE1 controller information
� all � shows statistics for all time intervals, rather than statistics for selected time intervals
� summary � displays link status summary
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show controllers t1 remote
Description: Displays information about the T1 statistics at the remote end when you configure FDL on an interface.
Syntax: show controllers t1 interfaceSpecifier remote [ all ]
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� all � shows statistics for all time intervals, rather than statistics for selected time intervals
Mode(s): User Exec, Privileged Exec
show controllers t3412
show controllers t3
Description: Displays information about the T3 controller interfaces.
Syntax: show controllers t3 { interfaceSpecifier [ brief | all | summary ] | { ft1 | serial } [ interfaceSpecifier ] } [ filter ]
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� brief � abbreviated display of T3 controller information
� all � shows statistics for all time intervals, rather than statistics for selected time intervals
� summary � displays link status summary
� ft1 � displays information about fractional T1 subchannels
� serial � displays information about serial interfaces
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show controllers t3 remote
Description: Displays information about the statistics on the remote device when MDL is configured on a T3 interface or FDL is configured on a T1 channel.
Syntax: show controllers t3 interfaceSpecifier remote [ all ]
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� all � shows statistics for all time intervals, rather than statistics for selected time intervals
Mode(s): User Exec, Privileged Exec
show cops info
Description: Displays information about SDX (formerly SSC) sessions and about the COPS layer created for SDX sessions.
Syntax: show cops info [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show dhcpERX Edge Routers
413
show dhcp
Description: Displays the IP address(es) and statistics of the configured DHCP server or relay agent.
Syntax: show dhcp { server | relay } [ statistics [ delta ] ] [ filter ]
� server � DHCP Proxy Client configuration
� relay � DHCP Relay configuration
� statistics � displays statistics for the DHCP server or relay agent
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show dvmrp tunnel
Description: Displays information about DVMRP tunnels.
Syntax: show dvmrp tunnel [ detail ] [ state tunnelStatus ] [ tunnelName | [ virtual-router vrName ] ip ipAddress [ tunnelName ] ] [ filter ]
� detail � shows detailed tunnel information about DVMRP tunnels
� state � shows information about tunnels in the specified state
� tunnelStatus � state of the tunnel, as follows:
� disabled � tunnel is disabled
� down � tunnel is not operational
� enabled � tunnel is enabled
� lower-down � an interface layer below the tunnel is not operational
� not-present � TSM is not in slot
� up � tunnel is operational
� tunnelName � name of a tunnel for which you want to display information
� virtual-router � displays information about tunnels on the specified virtual router
� vrName � name of a virtual router
� ip � displays information about tunnels associated with the specified IP address
� ipAddress � IP address
� tunnelName � name of a tunnel for which you want to display information
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show dvmrp tunnel summary414
show dvmrp tunnel summary
Description: Displays a summary of information about DVMRP tunnels.
Syntax: show dvmrp tunnel summary [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show environment
Description: Displays information on the system�s physical environment, such as power and temperature.
Syntax: show environment [ all ] [ table ] [ filter ]
� all � displays system environment information and temperature status table
� table � displays temperature status table only
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show exception dump
Description: Displays the parameters for transferring core dump files.
Syntax: show exception dump [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show fabric-queue
Description: Displays forwarded and dropped statistics for the queues in the fabric.
Syntax: show fabric-queue [ traffic-class trafficClassName [ detail ] | [ egress-slot egressSlotNumber | detail | traffic-class trafficClassName egress-slot egressSlotNumber ] [ filter ]
� trafficClassName � name of the traffic class
� detail � provides detailed information about the queues in the fabric
� egressSlotNumber � number of the egress slot
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show flashERX Edge Routers
415
show flash
Description: Displays information about the NVS card.
Syntax: show flash
Mode(s): Privileged Exec, User Exec
show frame-relay interface
Description: Displays Frame Relay statistics for interfaces.
Syntax: show frame-relay interface [ interfaceType interfaceSpecifier ] [ members ][ brief ] [ delta ] [ filter ]
� interfaceType � one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide
� hssi
� serial
� pos
� mlframe-relay
� tunnel � GRE tunnel
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� members � displays the status of MFR links
� displays the status of all MFR links if you specify the interface type mlframe-relay without a specifier for an MFR bundle
� displays the status of MFR links in an MFR bundle if you specify that bundle
� brief � displays a summary of interface information
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show frame-relay lip416
show frame-relay lip
Description: Displays Link Integrity Protocol state and statistics for a link in an MFR bundle.
Syntax: show frame-relay lip [ interface interfaceType interfaceSpecifier ] [ brief ] [ delta ] [ filter ]
� interfaceType � one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide
� serial
� pos
� interfaceSpecifier � specifies the location of the interface in the format slot/port:link
� slot � number of the chassis slot of the line module in the range 0�13 (ERX-1400 series) and 0�6 (ERX-700 series)
� port � port number in the range 0�2
� link � number of a link in the range 1�8
� brief � summarized format
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show frame-relay lmiERX Edge Routers
417
show frame-relay lmi
Description: Displays state and statistics for the local management interface.
Syntax: show frame-relay lmi [ interface interfaceType interfaceSpecifier ] [ brief ] [ delta ] [ filter ]
� interfaceType � one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide
� hssi
� serial
� pos
� mlframe-relay
� tunnel � GRE tunnel
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� brief � summarized format
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show frame-relay map
Description: Displays the current Frame Relay map entries and information about the Frame Relay connections.
Syntax: show frame-relay map [ filter ]
� filter � specifies a CLI output filter. See Filtering Show Commands in About This Guide.
Mode(s): User Exec, Privileged Exec
show frame-relay multilinkInterface418
show frame-relay multilinkInterface
Description: Displays statistics about all MFR interfaces or the specified MFR interfaces.
Syntax: show frame-relay multilinkInterface [ interfaceType interfaceSpecifier ] [ brief ][ delta ] [ filter ]
� interfaceType � one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide
� serial
� pos
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� brief � displays a summary of interface information
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show frame-relay pvc
Description: Displays permanent virtual circuit statistics for Frame Relay or MFR interfaces.
Syntax: show frame-relay pvc [ dlci | interface interfaceType interfaceSpecifier ][ brief ] [ delta ] [ filter ]
� dlci � DLCI number to be used on the specified subinterface to identify a virtual circuit in the range 16�1007
� interfaceType � one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide
� hssi
� serial
� pos
� mlframe-relay
� tunnel � GRE tunnel
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� brief � displays the abbreviated version of the command output
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show frame-relay subinterfaceERX Edge Routers
419
show frame-relay subinterface
Description: Displays statistics about Frame Relay subinterfaces.
Syntax: show frame-relay subinterface [ interfaceType interfaceSpecifier ] [ brief ] [ delta ] [ filter ]
� interfaceType � one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide
� serial
� pos
� mlframe-relay
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� brief � displays a summary of subinterface information
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show frame-relay summary
Description: Scans all defined Frame Relay interfaces and circuits and reports aggregate status counts.
Syntax: show frame-relay summary [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ftp-server
Description: Use to display information about the FTP server.
Syntax: show ftp-server
Mode(s): Privileged Exec
show gre tunnel420
show gre tunnel
Description: Displays information about GRE tunnels.
Syntax: show gre tunnel [ detail ] [ state tunnelStatus ] [ tunnelName | [ virtual-router vrName ] ip ipAddress ] [ filter ]
� detail � shows detailed tunnel information about GRE tunnels
� state � shows information about tunnels in the specified state
� tunnelStatus � state of the tunnel, as follows:
� disabled � tunnel is disabled
� down � tunnel is not operational
� enabled � tunnel is enabled
� lower-down � an interface layer lower below the tunnel is not operational
� not-present � TSM is not in slot
� up � tunnel is operational
� tunnelName � name of a tunnel for which you want to display information
� virtual-router � displays information about tunnels on the specified virtual router
� vrName � name of a virtual router
� ip � displays information about tunnels associated with the specified IP address
� ipAddress � IP address
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show gre tunnel summary
Description: Displays a summary of information about GRE tunnels.
Syntax: show gre tunnel summary [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show hardwareERX Edge Routers
421
show hardware
Description: Displays information about the modules installed in the system.
Syntax: show hardware [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show hdlc interface422
show hdlc interface
Description: Displays statistics about specified Cisco HDLC interfaces.
Syntax: show hdlc interface [ { dataRestriction }* | full ] [ delta ] [ stateRestriction ][ { interfaceType } interfaceSpecifier ] [ filter ]
� dataRestriction � specify one or more of the following keywords:
� config � displays information on the HLDC interface configuration
� status � displays information on the HLDC interface operational status
� statistics � displays information on the HLDC interface statistics
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
� full � displays configuration, status, and statistics information; equivalent to specifying config status statistics
� delta � displays baselined statistics
� stateRestriction � specify only one of the following keywords:
� open � displays an interface that is administratively enabled, which means that the no ppp shutdown command is operational
� closed � displays an interface that is administratively disabled, which means that the ppp shutdown command is operational
� up � displays an interface that is up, which means that the LCP has been negotiated
� down � displays an interface that is down, which means that the LCP has not been negotiated, the negotiations have failed, or the connection has been terminated
� lower-layer-down � displays an interface that is not up and is waiting for the lower layer to come up to initiate negotiations for LCP
� not present � displays an interface on which traffic cannot flow because hardware is unavailable
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show hostERX Edge Routers
423
show host
Description: Displays the IS-IS name-to-NSAP mappings defined with the clns host command.
Syntax: show host
Mode(s): User Exec, Privileged Exec
show hosts
Description: Displays a list of configured network servers.
Syntax: show hosts [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ike policy-rule
Description: Displays configuration of IKE phase 1 policy rules.
Syntax: show ike policy-rule
Mode(s): Privileged Exec
show ike sa
Description: Displays IKE phase 1 SAs running on the system.
Syntax: show ike sa
Mode(s): Privileged Exec
show interfaces424
show interfaces
Description: Displays current state of all interfaces or the interface you specify.
Syntax: show interfaces interfaceType interfaceSpecifier [ delta ] [ brief ] [ filter ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide; for ATM, subinterfaces are not supported by the syntax
� delta � displays baselined statistics
� brief � displays a brief summary of the interface
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip
Description: Displays general information for IP.
Syntax: show ip
Mode(s): User Exec, Privileged Exec
show ip address
Description: Displays interface information for the specified IP address.
Syntax: show ip address [ vrfName ] [ brief | detail ] localAddress
� vrfName � name of the VRF
� brief � displays summary information about the interface
� detail � displays detailed information about the interface
� localAddress � IP address of the specific interface
Mode(s): User Exec, Privileged Exec
show ip as-path-access-listERX Edge Routers
425
show ip as-path-access-list
Description: Displays information about AS-path access lists.
Syntax: show ip as-path-access-list [ accessListName ] [ filter ]
� accessListName � name of an AS-path access list; string of up to 32 characters
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp426
show ip bgp
Description: Displays filtered information about a specified network, or all networks, in the BGP routing table associated with a specified address family. Only those fields that you specify are displayed, except that the Prefix field is always displayed. Default fields can be set with the default-fields route command.
Syntax: show ip bgp [ addressFamilyIdentifier ] [ network [ networkMask [ longer-prefixes ] ] ] [ fields { fieldOptions } ] [ filter ]
� addressFamilyIdentifier � type of address family, which determines the routing table for which information is displayed, in the format
� [ ipv4 { unicast | multicast } | vpnv4 { all | vrf vrfName } ]
� ipv4 unicast � the IPv4 unicast routing table; the default option
� ipv4 multicast � the IPv4 multicast routing table
� vpnv4 all � all IPv4 VPN routing and forwarding instances
� vpn4 vrf vrfname � the IPv4 VPN routing and forwarding instance with the name vrfname
� network � displays the route that best matches this IP address; if no network is specified, displays the fields for all networks
� networkMask � address mask to be applied to the network address
� longer-prefixes � displays all routes with a prefix that is equal to or more specific than the specified prefix
� fields � displays only the specified fields; the display order of the fields is hard-coded and not affected by the order in which you enter them
� fieldOptions � field(s) to be displayed, in the formatall | [ afi | aggregator | as-path | atomic-aggregate | best | clusters | communities | extended-communities | imported | intro | in-label | loc-pref | med | next-hop | next-hop-cost | origin | originator-id | out-label | peer | peer-type | rd | safi | unknown-types | weight ]*
� all � all available information; not recommended, as this information for each network does not fit on a single line and is difficult to read
� afi � address family identifier
� aggregator � AS number and IP address of aggregator
� as-path � AS path through which this route bas been advertised
� atomic-aggregate � whether the atomic aggregate attribute is present
� best � whether this is the best route for the prefix
� clusters � list of cluster IDs through which the route has been advertised
� communities � community number associated with the route
� extended-communities � extended community
� imported � whether the route was imported
show ip bgpERX Edge Routers
427
� intro � introductory information about the state of various BGP attributes; this information is displayed only if you specify this keyword
� in-label � MPLS label for the route; the label received with incoming MPLS frames; typically, but not always, this is the label advertised to MP-BGP peers
� loc-pref � local preference for the route
� med � multiexit discriminator for the route
� next-hop � IP address of the next router that is used when forwarding a packet to the destination network
� next-hop-cost � whether the indirect next hop of the route is unreachable, if not, displays IGP cost to the indirect next hop
� origin � origin of the route
� originator-id � router ID of the router in the local AS that originated the route
� out-label � MPLS label for the route; the label sent with outgoing MPLS frames; also the label received from MP-BGP peer; typically, but not always, this is the label received from MP-BGP peers
� peer � IP address of BGP peer from which route was learned
� peer-type � type of BGP peer: internal, external, or confederation
� rd � route distinguisher
� safi � subsequent address family identifier
� unknown-types � attribute codes for unknown path attributes
� weight � weight of the route
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp advertised-routes428
show ip bgp advertised-routes
Description: Displays the routes in the Adj-RIBs-Out table of the specified peer or peer group. For peers, displays routes that have been previously advertised to the peer and the attributes for the routes prior to the application of outbound policy. For peer groups, displays routes that will be advertised to the peer group, but includes the full set of route attributes associated with the routes after the application of outbound policy. This command returns an error message unless you first enable rib-out via the no neighbor rib-out disable command or the no rib-out disable command.
Syntax: show ip bgp [ addressFamilyIdentifier ] { neighbors ipAddress | peer-group peerGroupName } advertised-routes [ network [ networkMask [ longer-prefixes ] ] ] [ fields { fieldOptions } ] [ delta ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� ipAddress � address of a neighbor whose routes the system has learned
� peerGroupName � name of a BGP peer group
� network � displays the route that best matches this IP address; if no network is specified, displays the fields for all networks
� networkMask � address mask to be applied to the network address
� longer-prefixes � displays all routes with a prefix that is equal to or more specific than the specified prefix
� fieldOptions � field(s) to be displayed. See the show ip bgp command.
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp aggregate-address
Description: Displays information about aggregate addresses.
Syntax: show ip bgp [ addressFamilyIdentifier ] aggregate-address [ ipAddress mask ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� ipAddress � aggregate address
� mask � aggregate address mask
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp cidr-onlyERX Edge Routers
429
show ip bgp cidr-only
Description: Displays information only about routes having nonnatural network masks.
Syntax: show ip bgp [ addressFamilyIdentifier ] cidr-only [ fields { fieldOptions } ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� fieldOptions � field(s) to be displayed. See the show ip bgp command.
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp community
Description: Displays routes that belong to the specified BGP community.
Syntax: show ip bgp [ addressFamilyIdentifier ] community { communityNumber | local-as | no-advertise | no-export } [ communityNumber | local-as | no-advertise | no-export ] * [ exact-match ] [ fields { fieldOptions } ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� communityNumber � filters routes according to this community number, specified either as a number in the range 1�4294967295 or in AA:NN format (autonomous system number:community number); displays only routes that are members of the specified community
� local-as � displays only routes belonging to the local-AS community
� no-advertise � displays only routes belonging to the no-advertise community
� no-export � displays only routes belonging to the no-export community
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
� exact-match � displays only routes that have exactly the specified communities
� fieldOptions � field(s) to be displayed. See the show ip bgp command.
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp community-list430
show ip bgp community-list
Description: Displays routes that belong to the BGP community specified by the community list.
Syntax: show ip bgp [ addressFamilyIdentifier ] community-list communityListName[ exact-match ] [ fields { fieldOptions } ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� communityListName � filters routes according to community list; displays only routes that are members of a community on the specified list
� exact-match � displays only routes that have exactly the specified communities
� fieldOptions � field(s) to be displayed. See the show ip bgp command.
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp dampened-paths
Description: Displays information on dampened BGP routes.
Syntax: show ip bgp [ addressFamilyIdentifier ] dampened-paths [ fields { fieldOptions } ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� fieldOptions � field(s) to be displayed. See the show ip bgp command.
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp filter-list
Description: Displays all routes whose AS path matches the specified AS path access list.
Syntax: show ip bgp [ addressFamilyIdentifier ] filter-list asPathAccessListName [ fields { fieldOptions } ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� asPathAccessListName � name of AS path access list to filter routes; displays only routes that have AS paths matching the specified list
� fieldOptions � field(s) to be displayed. See the show ip bgp command.
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp flap-statisticsERX Edge Routers
431
show ip bgp flap-statistics
Description: Displays information about routes that are dampened.
Syntax: show ip bgp [ addressFamilyIdentifier ] flap-statistics [ network [ networkMask ] ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� network � IP address of the network for which you want information displayed; if no network is specified, the fields are displayed for all networks
� networkMask � address mask to be applied to the network address
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp inconsistent-as
Description: Displays information only about routes with inconsistent AS paths.
Syntax: show ip bgp [ addressFamilyIdentifier ] inconsistent-as [ fields { fieldOptions } ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� fieldOptions � field(s) to be displayed. See the show ip bgp command.
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp neighbors
Description: Displays information about the BGP neighbors.
Syntax: show ip bgp [ addressFamilyIdentifier ] neighbors [ ipAddress ] [ delta ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� ipAddress � address of a neighbor whose routes the system has learned
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp neighbors dampened-routes432
show ip bgp neighbors dampened-routes
Description: Displays information about routes with a dampening history for the specified BGP neighbor.
Syntax: show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress dampened-routes [ fields { fieldOptions } ] [ delta ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� ipAddress � address of a neighbor whose routes the system has learned
� fieldOptions � field(s) to be displayed. See the show ip bgp command.
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp neighbors paths
Description: Displays path information for the specified BGP neighbor.
Syntax: show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress paths [ regularExpression ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� ipAddress � address of a neighbor whose routes the system has learned
� regularExpression � regular expression to match the AS path. See show ip bgp regexp for information on regular expressions.
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp neighbors received prefix-filter
Description: Displays prefix-list outbound route filters received from the neighbor.
Syntax: show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress received prefix-filter [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� ipAddress � address of a neighbor whose routes the system has learned
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp neighbors received-routesERX Edge Routers
433
show ip bgp neighbors received-routes
Description: Displays routes originating from the specified BGP neighbor before inbound policy is applied.
Syntax: show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress received routes [ fields { fieldOptions } ] [ delta ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� ipAddress � address of a neighbor whose routes the system has learned
� fieldOptions � field(s) to be displayed. See the show ip bgp command.
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp neighbors routes
Description: Displays routes originating from the specified BGP neighbor after inbound policy is applied.
Syntax: show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress routes [ fields { fieldOptions } ] [ delta ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� ipAddress � address of a neighbor whose routes the system has learned
� fieldOptions � field(s) to be displayed. See the show ip bgp command.
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp network434
show ip bgp network
Description: Displays information about a potentially originated prefix that was configured with the network command.
Syntax: show ip bgp [ addressFamilyIdentifier ] network [ networkNumber [ mask networkMask ] ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� networkNumber � IP address of the network for which you want information displayed; if no network is specified, the fields are displayed for all networks
� networkMask � address mask to be applied to the network address
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp next-hops
Description: Displays information about BGP next hops.
Syntax: show ip bgp [ addressFamilyIdentifier ] next-hops [ ipAddress ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� ipAddress � displays information only for this indirect next hop
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp paths
Description: Displays information about BGP AS paths.
Syntax: show ip bgp paths [ regularExpression ] [ filter ]
� regularExpression � regular expression to match that specifies the desired AS paths. See show ip bgp regexp for information on regular expressions.
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp peer-groupERX Edge Routers
435
show ip bgp peer-group
Description: Displays information about BGP peer groups.
Syntax: show ip bgp [ addressFamilyIdentifier ] peer-group [ peerGroupName ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� peerGroupName � name of the BGP peer group
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp quote-regexp436
show ip bgp quote-regexp
Description: Displays information about BGP routes whose AS path matches the specified regular expression. Regular expressions match numbers for which the specified path is a substring�for example, if you specify 20, 200 matches because 20 is a substring of 200. You can disallow substring matching by using the underscore (_) metacharacter to constrain matching to the specified pattern; for example, _20_. You can use output filtering on the display.
Syntax: show ip bgp [ addressFamilyIdentifier ] quote-regexp pathExpression [ fields { fieldOptions } ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� quote-regexp � indicates that only a single element is matched
� pathExpression � regular expression string describing the AS path or community to be matched. You must enclose elements containing a space within double quotes (�one element�).
Each element is either an AS number, a metacharacter, or a combination:
^ Matches the beginning of the path unless appearing as the first character within brackets; see below
[^ ] Matches any AS number except the ones specified within the brackets
$ Matches the end of the path
{ Matches the beginning of an AS_SET
} Matches the end of an AS_SET
( Matches the start of an AS_CONFED_SET or AS_CONFED_SEQ
) Matches the end of an AS_CONFED_SET or AS_CONFED_SEQ
. Matches any single character
* Matches zero or more occurrences of the preceding character
+ Matches one or more occurrences of the preceding character
? Matches zero or one occurrence of the preceding character. To use the ? metacharacter in a regular expression, you must enter the following key sequence: <Ctrl-v-?>. Otherwise, the CLI considers this to be a request for assistance in completing the command, rather than understanding it as a metacharacter.
show ip bgp quote-regexpERX Edge Routers
437
() Used with a multiplier metacharacter (*, +, ?) to specify patterns for multiple use. You can specify that a parenthesis be construed as a literal token instead of a metacharacter by immediately preceding it with a backslash:
\( matches the beginning of an AS_CONFED_SET or AS_CONFED_SEQ
\) matches the end of an AS_CONFED_SET or AS_CONFED_SEQ.
[ ] Matches any enclosed character; specifies a range of single characters
� Used within brackets to specify a range of AS numbers
_ Matches a ^, a $, a comma, a space, a {, or a }. Placed on either side of a string to specify a literal and disallow substring matching. Numerals enclosed by underscores can be preceded or followed by any of the characters listed above.
| Matches characters on either side of the metacharacter; logical OR
� fieldOptions � field(s) to be displayed. See the show ip bgp command.
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp regexp438
show ip bgp regexp
Description: Displays information about BGP routes whose AS path matches the specified regular expression. Regular expressions match numbers for which the specified path is a substring�for example, if you specify 20, 200 matches because 20 is a substring of 200. You can disallow substring matching by using the underscore (_) metacharacter to constrain matching to the specified pattern; for example, _20_. You can use output filtering on the display.
Syntax: show ip bgp [ addressFamilyIdentifier ] regexp pathExpression [ fields { fieldOptions } ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� regexp � indicates that multiple elements can be matched
� pathExpression � regular expression string describing the AS paths to be matched. You do not have to enclose elements containing a space within quotation marks (one element).
Each element is either an AS number, a metacharacter, or a combination:
^ Matches the beginning of the path unless appearing as the first character within brackets; see below
[^ ] Matches any AS number except the ones specified within the brackets
$ Matches the end of the path
{ Matches the beginning of an AS_SET
} Matches the end of an AS_SET
( Matches the start of an AS_CONFED_SET or AS_CONFED_SEQ
) Matches the end of an AS_CONFED_SET or AS_CONFED_SEQ
. Matches any single character
* Matches zero or more occurrences of the preceding character
+ Matches one or more occurrences of the preceding character
? Matches zero or one occurrence of the preceding character. To use the ? metacharacter in a regular expression, you must enter the following key sequence: <Ctrl-v-?>. Otherwise, the CLI considers this to be a request for assistance in completing the command, rather than understanding it as a metacharacter.
show ip bgp regexpERX Edge Routers
439
() Used with a multiplier metacharacter (*, +, ?) to specify patterns for multiple use. You can specify that a parenthesis be construed as a literal token instead of a metacharacter by immediately preceding it with a backslash:
\( matches the beginning of an AS_CONFED_SET or AS_CONFED_SEQ
\) matches the end of an AS_CONFED_SET or AS_CONFED_SEQ.
[ ] Matches any enclosed character; specifies a range of single characters
� Used within brackets to specify a range of AS numbers
_ Matches a ^, a $, a comma, a space, a {, or a }. Placed on either side of a string to specify a literal and disallow substring matching. Numerals enclosed by underscores can be preceded or followed by any of the characters listed above.
| Matches characters on either side of the metacharacter; logical OR
� fieldOptions � field(s) to be displayed. See the show ip bgp command.
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip bgp summary440
show ip bgp summary
Description: Displays filtered information about the status of all BGP connections. Only those fields that you specify are displayed, except that the Prefix field is always displayed. Default fields can be set with the default-fields peer command.
Syntax: show ip bgp [ addressFamilyIdentifier ] summary [ fields { fieldOptions } ] [ delta ] [ filter ]
� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.
� fields � displays only the specified fields; the display order of the fields is hard-coded and not affected by the order in which you enter them
� fieldOptions � field(s) to be displayed, in the formatall | [ intro | last-reset-reason | messages-received | messages-sent | peer-type | prefixes-received | remote-as | state | times-up | up-down-time | updates-received | updates-sent ]
� intro � introductory information about the state of various BGP attributes; this information is displayed only if you specify this keyword
� last-reset-reason � reason for most recent reset
� messages-received � total number of messages received from the peer
� messages-sent � total number of messages sent to the peer
� peer-type � type of BGP peer: internal, external, or confederation
� prefixes-received � number of unique prefixes received from the peer
� remote-as � the remote AS number of the peer
� state � state of the BGP session
� times-up � number of times the session has been established
� up-down-time � how long the session has been up or down
� updates-received � number of update messages received from the peer
� updates-sent � number of update messages sent to the peer
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip community-listERX Edge Routers
441
show ip community-list
Description: Displays community list information.
Syntax: show ip community list [ listName ] [ filter ]
� listName � name of a community list
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip demux interface
Description: Displays information about a subscriber interface.
Syntax: show ip demux interface interfaceType interfaceSpecifier [ filter ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip dhcp-local binding
Description: Displays the mapping between the token or enduring IP address and the MAC address of the non-equal PPP subscriber�s computer.
Syntax: show ip dhcp-local binding ipAddress [ filter ]
� ipAddress � IP address of the subscriber�s personal computer
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip dhcp-local cable-modem
Description: Displays the configuration and statistics for cable modem DHCP servers configured on the system.
Syntax: show ip dhcp-local cable-modem { dhcp-servers | statistics } [ delta ] [ filter ]
� dhcp-servers � displays a list of cable modem DHCP servers configured on the system
� statistics � displays statistics on responses and requests received from external DHCP servers and cable modems
Mode(s): Privileged Exec
show ip dhcp-local excluded442
show ip dhcp-local excluded
Description: Displays IP addresses that have been excluded. These are addresses that the DHCP local server does not allocate because they are already used by devices on the subnet.
Syntax: show ip dhcp-local excluded [ filter ]
Mode(s): Privileged Exec
show ip dhcp-local limits
Description: Displays the maximum number of leases available for each VPI, VCI, VLAN, and Ethernet Subnet from the DHCP local server.
Syntax: show ip dhcp-local limits [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip dhcp-local pool
Description: Displays the configuration of DHCP local pools.
Syntax: show ip dhcp-local pool [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip dhcp-local reserved
Description: Displays the static IP address/MAC address pairs that the DHCP local server supplies in standalone mode. This command does not display address pairs that the DHCP local server supplies in non-PPP equal access mode.
Syntax: show ip dhcp-local reserved [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip dhcp-local statisticsERX Edge Routers
443
show ip dhcp-local statistics
Description: Displays statistics for the DHCP local server.
Syntax: show ip dhcp-local statistics [ delta ] [ filter ]
� ipAddress � IP address
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip domain-lookup
Description: Displays the name servers that you have specified on the system with the ip name-server command.
Syntax: show ip domain-lookup [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip dvmrp
Description: Displays DVMRP information for a virtual router.
Syntax: show ip dvmrp [ delta ] [ filter ]
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip dvmrp interface444
show ip dvmrp interface
Description: Displays dvmrp parameters for the specified interfaces.
Syntax: show ip dvmrp interface [ brief ] [ delta ] [ interfaceType interfaceSpecifier ] [ filter ]
� brief � specifies that a summary rather than detailed information is displayed
� delta � displays baselined statistics
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip dvmrp mroute
Description: Displays information about DVMRP routes to multicast groups.
Syntax: show ip dvmrp mroute [ group [ sourceAddress [ sourceMask ] ] ] [ filter ]
� group � IP address of a specific multicast group
� sourceAddress � IP address of the network on which the source resides
� sourceMask � subnet mask
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip dvmrp neighborERX Edge Routers
445
show ip dvmrp neighbor
Description: Displays information about DVMRP neighbors.
Syntax: show ip dvmrp neighbor [ interfaceType interfaceSpecifier [ ipAddress ] ][ brief ] [ delta ] [ filter ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� ipAddress � displays information about the neighbor at this IP address
� brief � specifies that a summary rather than detailed information is displayed
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip dvmrp route
Description: Displays information about DVMRP routes.
Syntax: show ip dvmrp route [ ipAddress [ addressMask ] | interfaceType interfaceSpecifier ] [ brief ] [ filter ]
� ipAddress � displays the best route for this IP address
� addressMask � displays the route that exactly matches this IP address and subnet mask
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� brief � displays a summary rather than detailed information
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip dvmrp routeNextHop446
show ip dvmrp routeNextHop
Description: Displays information about the next hop.
Syntax: show ip dvmrp routeNextHop [ ipAddress [ addressMask [ interfaceType interfaceSpecifier ] ] ] [ filter ]
� ipAddress � IP address of the network for which you want to display information
� addressMask � mask for the subnet for which you want display information
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip dynamic-interface-prefix
Description: Displays the prefix for the names of dynamic IP shared interfaces.
Syntax: show ip dynamic-interface-prefix [ vrfName ]
� vrfName � name of the VRF
Mode(s): User Exec, Privileged Exec
show ip explicit-paths
Description: Displays all explicit paths or a particular explicit path in a non-ERX implementation. See the show mpls explicit-paths command for a complete description and syntax.
show ip extcommunity-list
Description: Displays all extended-community lists or a specific extended-community list.
Syntax: show ip extcommunity-list [ listName ] [ filter ]
� listName � name of the extended-community list
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip forwarding-table slotERX Edge Routers
447
show ip forwarding-table slot
Description: Displays information on routing table memory, load errors, and status for the forwarding table of a specific line module.
Syntax: show ip forwarding-table slot slotNumber
� slotNumber � number of the slot containing the line module for which the table is displayed
Mode(s): User Exec, Privileged Exec
show ip http
Description: Displays information about HTTP local servers, information about the parameters configured for the HTTP local server, and statistics about the connections to the HTTP local server.
Syntax: show ip http [ scalar | server | statistics [ delta ] ] [ filter ]
� scalar � display only information about the connections to the HTTP local server
� server � display only information about the parameters configured for the HTTP local server
� statistics� display only statistics about the connections to the HTTP local server
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip igmp
Description: Displays IGMP information for a virtual router.
Syntax: show ip igmp [ delta ] [ filter ]
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip igmp groups448
show ip igmp groups
Description: Displays information about statically joined and directly connected groups learned via IGMP.
Syntax: show ip igmp groups [ count ][ groupAddress [ interfaceType interfaceSpecifier ] ] [ filter ]
� count � displays the total number of groups learned
� groupAddress � IP address of a group for which you want to display information
� interfaceType � type of interface associated with the group address; for interface types, see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � specifier for the interface associated with the group address; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip igmp interface
Description: Displays IGMP information for interfaces on which you enabled IGMP.
Syntax: show ip igmp interface [ brief | count ] [ delta ] [ interfaceType interfaceSpecifier ] [ filter ]
� brief � displays a summary of the information
� count � displays the total number of interfaces on which you enabled IGMP
� delta � displays baselined statistics
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip igmp-proxy
Description: Use to display IGMP proxy parameters on a virtual router.
Syntax: show ip igmp-proxy [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip igmp-proxy groupsERX Edge Routers
449
show ip igmp-proxy groups
Description: Displays information about multicast groups that IGMP proxy interfaces reported.
Syntax: show ip igmp-proxy groups [ groupAddress | count ] [ filter ]
� groupAddress � IP address of a group for which you want to display information
� count � displays the number of groups that IGMP proxy reported
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip igmp-proxy interface
Description: Display information about the interface on which you configured IGMP proxy.
Syntax: show ip igmp-proxy interface [ brief ] [ delta ] [ interfaceType interfaceSpecifier ] [ filter ]
� brief � displays summarized information
� delta � displays baselined statistics
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip interface450
show ip interface
Description: Displays current state of all IP interfaces or the IP interfaces you specify. The default is all interface types and all interfaces.
Syntax: show ip interface [ vrf vrfName ] { { [ brief | detail ] { other | [ interfaceType interfaceSpecifier ] } } | summary } [ delta ] [ filter ]
� vrfName � name of the VRF
� brief � displays a brief summary of IP status and configuration information
� detail � shows a detailed display of IP status and configuration information
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� summary � shows a detailed summary of IP status and configuration
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip interface shares
Description: Displays information about shared IP interfaces for all IP interfaces or for the IP interfaces you specify. The default is all interface types and all interfaces.
Syntax: show ip interface shares [ vrf vrfName ] [ brief | detail ] [ interfaceType interfaceSpecifier ] [ delta ] [ filter ]
� vrfName � name of the VRF
� brief � displays a brief summary of IP status and configuration information
� detail � shows a detailed display of IP status and configuration information
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip interface vrfERX Edge Routers
451
show ip interface vrf
Description: Displays current state of all interfaces on the specified VRF.
Syntax: show ip interface vrf vrfName [ filter ]
� vrfName � name of the VRF
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip local pool
Description: Displays information about the local address pools configured on your system.
Syntax: show ip local pool [ [ name ] | [ statistics | group [ delta ] ] ] [ filter ]
� name � name of a specific local address pool (default is all pools)
� statistics � specifies that local pool statistics are to be shown
� group � specifies that local pool groups are to be shown
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip mac-validate interface
Description: Displays the status of MAC address validation on the physical interface that you specify.
Syntax: show ip mac-validate interface interfaceType interfaceSpecifier ] [ filter ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers
� filter � see Filtering show Commands in About This Guide
Mode(s): Privilege Exec
show ip mroute452
show ip mroute
Description: Displays information about all or specified multicast routes.
Syntax: show ip mroute [ groupIpAddress [ sourceIpAddress ] ] [ summary | count | statistics ] [ filter ]
� groupIpAddress � IP address of a multicast group
� sourceIpAddress � IP address of a multicast source
� summary � displays brief information about the multicast routes
� count � displays the number of groups and sources
� statistics � displays statistics for packets received through multicast routes that the system has added to the multicast routing table and established on the appropriate line modules
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip multicast routing
Description: Displays information about the status of multicast routing on the system.
Syntax: show ip multicast routing
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip multicast protocols
Description: Displays information about the multicast protocols enabled on the system.
Syntax: show ip multicast protocols [ brief ] [ filter ]
� brief � displays a summary rather than detailed information
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip nfs
Description: Displays information about the interface that the current virtual router uses to exchange messages with the NFS server.
Syntax: show ip nfs [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip ospfERX Edge Routers
453
show ip ospf
Description: Displays general information about OSPF routing processes.
Syntax: show ip ospf [ vrf vrfName ] [ delta ] [ filter ]
� vrfName � name of the VRF
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip ospf border-routers
Description: Displays routing table entries for area border and AS boundary routers.
Syntax: show ip ospf border-routers [ vrf vrfName ] [ filter ]
� vrfName � name of the VRF
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip ospf database
Description: Displays either the full IP OSPF database or a summary of the database.
Syntax: show ip ospf database [ vrf vrfName ] [ database-summary | { asbr-summary | external | network | nssa-external | router | summary | opaqueArea } [ ipAddress | internal ] ] [ filter ]
� vrfName � name of the VRF
� database-summary � a summary of the database
� asbr-summary � ASBR summary link states
� external � external link states
� network � network link states
� nssa-external � NSSA External link states
� router � router link states
� summary � network summary link states
� opaqueArea � traffic-engineering opaque LSA states
� ipAddress � a link state IP address
� internal � internal LSA information
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip ospf interface454
show ip ospf interface
Description: Displays a list of OSPF interfaces.
Syntax: show ip ospf interface [ vrf vrfName ] [ interfaceType interfaceSpecifier ] [ filter ]
� vrfName � name of the VRF
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip ospf internal-statistics
Description: Displays internal OSPF statistics.
Syntax: show ip ospf internal-statistics [ vrf vrfName ] [ filter ]
� vrfName � name of the VRF
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip ospf neighbors
Description: Displays a list of OSPF neighbors.
Syntax: show ip ospf neighbors [ vrf vrfName ] [ neighborAddress ] [ interfaceType interfaceSpecifier ] [ filter ]
� vrfName � name of the VRF
� neighborAddress � router ID of a specified neighbor
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip ospf remote-neighbor interfaceERX Edge Routers
455
show ip ospf remote-neighbor interface
Description: Displays interfaces associated with OSPF remote neighbors.
Syntax: show ip ospf remote-neighbor [ ipAddress ] interface [ vrf vrfName ] [ filter ]
� ipAddress � source IP address of a remote neighbor
� vrfName � name of the VRF
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip ospf spf-log
Description: Displays how often and why the router has run a full SPF calculation.
Syntax: show ip ospf spf-log [ vrf vrfName ] [ filter ]
� vrfName � name of the VRF
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip ospf virtual-links
Description: Displays the parameters and the current state of OSPF virtual links. A virtual link is a logical connection between two systems. To establish or maintain connectivity to the backbone, you can configure virtual links through nonbackbone areas. Virtual links serve to connect physically separate components of the backbone. The two endpoints of a virtual link are area border routers.
Syntax: show ip ospf virtual-links [ vrf vrfName ] [ filter ]
� vrfName � name of the VRF
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip pim auto-rp
Description: Displays information about rendezvous point routers and the RP mapping agent in a PIM-SM environment.
Syntax: show ip pim auto-rp [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip pim dense-mode sg-state456
show ip pim dense-mode sg-state
Description: Displays information for each SG entry that PIM-DM knows about.
Syntax: show ip pim dense-mode sg-state [ group groupAddress [ source sourceAddress ] ] [ filter ]
� groupAddress � IP address of a multicast group
� sourceAddress � IP address of a multicast source
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip pim interface
Description: Displays information about each PIM-DM interface.
Syntax: show ip pim interface [ interfaceType interfaceSpecifier ] [ count ] [ filter ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� count � displays the number of incoming and outgoing PIM control packets
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip pim neighbor
Description: Displays information about each PIM neighbor that the system has discovered.
Syntax: show ip pim neighbor [ interfaceType interfaceSpecifier ] [ filter ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip pim remote-neighborERX Edge Routers
457
show ip pim remote-neighbor
Description: Displays information about all PIM remote neighbors or the specified remote neighbor.
Syntax: show ip pim remote-neighbor [ ipAddress ] [ count ] [ filter ]
� ipAddress � ipAddress of a remote neighbor
� count � display the number of remote neighbors
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip pim rp
Description: Displays information about PIM group-to-RP mappings.
Syntax: show ip pim rp { groupAddress | mapping } [ filter ]
� groupAddress � address of a group for which you want to view group-to-RP mappings
� mapping � displays all RP-to-group mappings that the system has recorded
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip pim rp-hash
Description: Shows which RP a multicast group is using.
Syntax: show ip pim rp-hash groupAddress [ filter ]
� group � IP address of multicast group for which you want to view the RP
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip pim sparse-mode sg-state458
show ip pim sparse-mode sg-state
Description: Displays information for each SG entry that PIM-SM knows about.
Syntax: show ip pim sparse-mode sg-state [ group groupAddress [ source sourceAddress ] | rp rpAddress ] [ count ] [ filter ]
� groupAddress � IP address of a multicast group
� sourceAddress � IP address of a multicast source
� rpAddress � IP address of an RP router
� count � displays the number of SG entries
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip pim sparse-mode unicast-route
Description: Displays the unicast routes that PIM-SM is using.
Syntax: show ip pim sparse-mode unicast-route [ routeAddress routeMask ] [ count ] [ filter ]
� routeAddress � IP address associated with a unicast route
� routeMask � network mask associated with a unicast route
� count � shows the number of unicast routes that PIM-SM is using.
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip pim spt-threshold
Description: Displays the threshold for switching to the shortest-path-tree at a PIM DR.
Syntax: show ip pim spt-threshold [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip prefix-listERX Edge Routers
459
show ip prefix-list
Description: Displays information about prefix lists.
Syntax: show ip prefix-list [ listName [ seq seqNum | ipPrefix [ longer | first-match ] ] ] [ filter ]
� listName � displays information for the prefix list having this name
� seqNum � displays the information for the prefix list entry having this sequence number
� ipPrefix � displays the information for the prefix list entry having this prefix, in the format IPbaseaddress/length; for example, 10.10.10.0/24
� longer � displays all entries for a prefix that are equal to or more specific than the specified prefix
� first-match � displays only an entry that matches the specified prefix
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip prefix-list summary | detail
Description: Displays detailed or summary information about one or all prefix lists.
Syntax: show ip prefix-list { summary | detail } [ listName ] [ filter ]
� summary � displays summary information
� detail � displays detailed information
� listName � name of the prefix list
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip prefix-tree
Description: Displays information about prefix trees.
Syntax: show ip prefix-tree [ treeName [ ipPrefix [ longer ] ] ] [ filter ]
� treeName � name of the prefix tree
� ipPrefix � displays the information for the prefix list entry having this prefix, in the format IPbaseaddress/length; for example, 10.10.10.0/24
� longer � displays all entries for a prefix that are equal to or more specific than the specified prefix
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip prefix-tree summary | detail460
show ip prefix-tree summary | detail
Description: Displays detailed or summary information about one or all prefix trees.
Syntax: show ip prefix-tree {summary | detail } [ treeName ] [ filter ]
� summary � displays summary information
� detail � displays detailed information
� treeName � name of the prefix tree
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip profile
Description: Displays information on a specific IP profile.
Syntax: show ip profile profileName [ filter ]
� profileName � name of the profile you want to display
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privilege Exec
show ip protocols
Description: Displays detailed information on IP protocols currently configured on the router.
Syntax: show ip protocols [ vrf vrfName ] [ summary ] [ filter ]
� vrfName � displays information on protocols only for the specified VRF
� summary � displays only a list of currently configured protocols
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip redistribute
Description: Displays configured route redistribution policy.
Syntax: show ip redistribute [ vrfName ] [ filter ]
� vrfName � name of the VRF
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip ripERX Edge Routers
461
show ip rip
Description: Displays limited RIP general status information.
Syntax: show ip rip [ vrf vrfName ] [ brief ] [ ifconfig ] [ ipAddress ] [ filter ]
� vrfName � name of the VRF
� brief � displays limited information
� ifconfig � displays address and interface configuration information instead of the default operational data
� ipAddress � displays information only for specific RIP network
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip rip database
Description: Displays route entries in the RIP routing table (RIP database).
Syntax: show ip rip database [ vrf vrfName ] [ all ] [ inactive ] [ filter ]
� vrfName � name of the VRF
� all � displays active and inactive routes learned via RIP updates
� inactive � displays routes the system will discard in the immediate future
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip rip network
Description: Displays the networks associated with the RIP routing process.
Syntax: show ip rip network [ vrf vrfName ] [ filter ]
� vrfName � name of the VRF
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip rip peer462
show ip rip peer
Description: Displays all RIP neighbors with limited information about each peer.
Syntax: show ip rip peer [ vrf vrfName ] [ filter ]
� vrfName � name of the VRF
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip rip statistics
Description: Displays global statistics associated with the RIP routing process. If you specify an IP address, additionally displays statistics for that interface.
Syntax: show ip rip statistics [ vrf vrfName ] [ ipAddress ] [ delta ] [ filter ]
� vrfName � name of the VRF
� ipAddress � address of IP interface where RIP is running; identifies RIP network
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip rip summary-address
Description: Displays RIP summary addresses.
Syntax: show ip rip summary-address [ vrf vrfName ] [ ipAddress [ ipMask ] ] [ filter ]
� vrfName � name of the VRF
� ipAddress � address of IP interface where RIP is running
� ipMask � IP mask of the specific address
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip routeERX Edge Routers
463
show ip route
Description: Displays current state of the routing table.
Syntax: show ip route [ vrf vrfName ] [ ipAddress [ ipMask ] [ detail ] ] [ all ] [ bgp | isis | local | ospf | other | rip | static ] [ filter ]
show ip route summary [ vrf vrfName ] [ filter ]
� vrfName � displays the contents of the IP routing table associated with a VRF
� name � displays the best route to the IP address resolved from this domain name
� ipAddress � specifies the IP address or domain name to show
� domainName � displays information for the IP address resolved from the specified domain name
� ipMask � IP mask of the specific address to show
� detail � displays detailed information about the specific prefix; currently shows the tag added via the ip route command
� all � displays all routes in the routing table inserted from all protocols (not just the best routes that are used for forwarding)
� bgp � displays the best BGP routes in the routing table
� isis � displays the best IS-IS routes in the routing table
� local � displays the best locally connected routes in the routing table
� ospf � displays the best OSPF routes owned by in the routing table
� other � displays the best internal control routes in the routing table
� rip � displays the best RIP routes in the routing table
� static � displays the best static routes added by network management to the routing table
� summary � displays summary counters for all routes in the IP routing table
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip route slot464
show ip route slot
Description: Displays the interface and next hop for an IP address in the routing table of a line module.
Syntax: show ip route slot slotNumber [ vrf vrfName ] ipAddress
� slotNumber � number of slot containing the line module for which the information is displayed
� vrf � specifies a VRF context
� vrfName � name of the VRF
� ipAddress � IP address to look up in the routing table
Mode(s): User Exec, Privileged Exec
show ip rpf-route
Description: Displays routes that the system can use to verify source addresses in multicast packets.
Syntax: show ip rpf-route [ ipAddress [ ipMask ] ] [ protocol ] [ filter ]
� ipAddress � specific IP address to show
� ipMask � IP mask of the specific address to show
� protocol � one of the following options
� access � displays access-server routes (BGP)
� access-internal � displays internal routes to directly connected clients (BGP)
� bgp � displays routes owned by BGP
� isis � displays routes owned by IS-IS
� local � displays locally connected routes
� ospf � displays routes owned by OSPF
� other � displays internal control routes
� rip � displays routes owned by RIP
� static � displays static routes added by network management
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip sshERX Edge Routers
465
show ip ssh
Description: Displays the current state of the SSH server.
Syntax: show ip ssh [ detail ] [ filter ]
� detail � displays detailed information
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip static
Description: Displays general status information for static routes added by network management to the routing table.
Syntax: show ip static [ vrfName ] [ ipAddress ipMask [ all ] ] [ filter ]
� vrfName � name of the VRF
� ipAddress � an IP address to show
� ipMask � an IP mask of the specific address to show
� all � displays all routes starting at the specified prefix
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip tcp statistics
Description: Displays TCP statistics.
Syntax: show ip tcp statistics [ vrf vrfName ] [ brief | detailed ] [ delta ] [ localAddress [ localPort [ remoteAddress [ remotePort ] ] ] ] [ filter ]
� vrfName � name of the VRF
� brief � displays a brief summary of each TCP connection
� detailed � displays detailed statistics for each TCP connection
� delta � displays baselined statistics
� localAddress � displays TCP connections to and from the IP address on this system
� localPort � displays TCP connections to/from the port on this router
� remoteAddress � displays TCP connections to and from the remote IP address
� remotePort � displays TCP connections to and from the remote port
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip traffic466
show ip traffic
Description: Displays statistics about IP traffic.
Syntax: show ip traffic [ vrfName ] [ delta ] [ filter ]
� vrfName � name of the VRF
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip tunnel reassembly statistics
Description: Displays statistics on the reassembly of fragmented tunnel packets within the current virtual router context.
Syntax: show ip tunnel reassembly statistics [ detail ] [ all ] [ filter ]
� detail � displays detailed reassembly statistics that include packets reassembled or discarded per protocol
� all � displays reassembly statistics for all virtual routers on the system
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip udp statistics
Description: Displays UDP statistics.
Syntax: show ip udp statistics [ vrfName ] [ delta ] [ filter ]
� vrfName � name of the VRF
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ip vrfERX Edge Routers
467
show ip vrf
Description: Displays information for a specified VRF and its associated interfaces or all VRFs and their associated interfaces for the current virtual router context.
Syntax: show ip vrf [ [ detail ] [ vrfName ] [ filter ] | interfaces [ detail ] ]
� vrfName - name of the VRF for which information is displayed
� detail - displays detailed information
� filter � see Filtering show Commands in About This Guide
� interfaces - displays all VRFs in the virtual router and their associated interfaces
Mode(s): User Exec, Privileged Exec
show ip vrrp
Description: Displays detailed summary of VRID configured on interface identified. If the VRID is not identified, a detailed summary of all VRIDs configured on interface identified is provided.
Syntax: show ip vrrp [ interface interfaceType interfaceSpecifier [ vrid ] ] [ filter ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� vrid � virtual router ID; a number in the range 1�255
� filter� see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip vrrp brief
Description: Displays brief summary of VRIDs configured on the interface identified.
Syntax: show ip vrrp brief [ interface interfaceType interfaceSpecifier [ vrid ] ] [ filter ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� vrid � virtual router ID; a number in the range 1�255
� filter� see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip vrrp neighbor468
show ip vrrp neighbor
Description: Displays summary of all neighbors known to the VRRP router configured on the interface identified.
Syntax: show ip vrrp neighbor [ interface interfaceType interfaceSpecifier [ vrid ] ] [ filter ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� vrid � virtual router ID; a number in the range 1�255
� filter� see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip vrrp statistics
Description: Displays either global statistics and/or per interface and VRID pair statistics.
Syntax: show ip vrrp statistics [ global | [ interface interfaceType interfaceSpecifier [ vrid ] ] [ delta ] [ filter ]
� global � specify for global counters
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� vrid � virtual router ID; a number in the range 1�255
� delta � displays baselined statistics
� filter� see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ip vrrp summary
Description: Displays a summary count on all VRIDs configured.
Syntax: show ip vrrp summary
Mode(s): Privileged Exec
show ipsec lifetimeERX Edge Routers
469
show ipsec lifetime
Description: Displays the configured default lifetime of phase II SAs.
Syntax: show ipsec lifetime
Mode(s): Privileged Exec
show ipsec local-endpoint
Description: Displays the address and transport virtual router of local endpoints.
Syntax: show ipsec local-endpoint [ transport-virtual-router transportVirtualRouter ]
� transportVirtualRouter � name of virtual router that includes source and/or destination addresses assigned to tunnel interfaces
Mode(s): Privileged Exec
show ipsec transform-set
Description: Displays transform sets configured on the system.
Syntax: show ipsec transform-set [ transformSetName ]
� transformSetName � displays information on a specific transform set
Mode(s): Privileged Exec
show ipsec tunnel470
show ipsec tunnel
Description: Displays information on tunnels that are configured on a specific virtual router.
Syntax: show ipsec tunnel [ tunnelName | [ virtual-router vrName ] ip ipAddress ][ state { adminState | operStatus } ] [ filter ] [ detail ] [ delta ]
� tunnelName � displays information for the specified tunnel
� vrName � name of virtual router on which tunnels are configured
� ip � display tunnels that are using a particular IP address
� state � restricts display to tunnels in a particular state
� adminState � displays tunnels in an administrative state of enabled or disabled
� operStatus � displays tunnels in an operational state of up, down, lower-down, or not-present
� detail � displays configuration and statistics of tunnels
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show ipsec tunnel summary
Description: Displays a summary of all tunnels configured on the system.
Syntax: show ipsec tunnel summary [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show isis databaseERX Edge Routers
471
show isis database
Description: Displays the IS-IS link state database.
Syntax: show isis database [ level-1 | level-2 | l1 | l2 | lspid | detail | verbose ]* [ filter ]
� level-1 � displays the IS-IS link state database for level 1
� level-2 � displays the IS-IS link state database for level 2
� l1 � displays the IS-IS link state database for level 1
� l2 � displays the IS-IS link state database for level 2
� lspid � link state PDU identifier in the form xxxx.xxxx.xxxx.yy.zz; when specified, displays the contents of a single link state PDU by its ID number
� detail � additionally displays contents of each link state PDU; if not specified, a summary display is provided
� verbose � additionally displays MPLS traffic engineering information
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show isis mpls adjacency-log
Description: Displays a log of the last 20 IS-IS adjacency changes.
Syntax: show isis mpls [ traffic-eng ] adjacency-log [ filter ]
� traffic-eng � optional keyword for compatibility with non-ERX implementations
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show isis mpls advertisements
Description: Displays the last record flooded from MPLS.
Syntax: show isis mpls [ traffic-eng ] advertisements [ filter ]
� traffic-eng � optional keyword for compatibility with non-ERX implementations
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show isis mpls tunnel472
show isis mpls tunnel
Description: Displays information about tunnels used in the calculation of IS-IS next hops.
Syntax: show isis mpls [ traffic-eng ] tunnel [ filter ]
� traffic-eng � optional keyword for compatibility with non-ERX implementations
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show isis spf-log
Description: Displays how often and why the router has run a full SPF calculation.
Syntax: show isis spf-log [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show isis summary-addresses
Description: Displays aggregate address information for IS-IS.
Syntax: show isis summary-addresses [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show isis topology
Description: Displays the paths to all intermediate systems.
Syntax: show isis topology [ [ level-1 | level-2 | l1 | l2 ]* [ nsap ] | [ nsap ] [ level-1 | level-2 | l1 | l2 ]* ] [ filter ]
� level-1 � displays paths to all level 1 routers in the area
� level-2 � displays paths to all level 2 routers in the domain
� l1 � displays paths to all level 1 routers in the area
� l2 � displays paths to all level 2 routers in the domain
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
� nsap � the NSAP address
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show l2fERX Edge Routers
473
show l2f
Description: Displays global configuration and status information for L2F on the system.
Syntax: show l2f [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show l2f destination
Description: Displays information about selected L2F destinations.
Syntax: show l2f destination [ detail ] [ destinationName | | virtual-router vrName | ip ipAddress ] [ filter ]
� detail � provides complete information about the specified destinations
� destinationName � name the system assigns to the peer at the other end of the tunnel
� vrName � name of the virtual router on which the destination exists
� ipAddress � IP address of the peer at the other end of the tunnel
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show l2f destination summary
Description: Displays the configured and operational status of all L2F destinations.
Syntax: show l2f destination summary [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show l2f session474
show l2f session
Description: Displays detailed information about selected L2F sessions.
Syntax: show l2f session [ detail ] [ state { adminState | operStatus } ] [ sessionName | [ virtual-router vrName ] ip ipAddress [ sessionName ] ] [ filter ]
� detail � provides complete information about the specified sessions
� state � displays information on sessions that are in a particular administrative state or operational status
� adminState � use the online Help to see a list of possible administrative states
� operStatus � use the online Help to see a list of possible selections for operational status
� sessionName � a session name
� vrName � name of the virtual router on which the session exists
� ipAddress � IP address of the peer at the other end of the session
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show l2f session summary
Description: Displays the configured and operational status of all L2F sessions.
Syntax: show l2f session summary [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show l2f tunnelERX Edge Routers
475
show l2f tunnel
Description: Displays detailed information on the configured and operational status of selected L2F tunnels.
Syntax: show l2f tunnel [ detail ] [ state { adminState | operStatus } ] [ tunnelName | [ virtual-router vrName ] ip ipAddress [ tunnelName ] ] [ filter ]
� detail � provides complete information about the specified tunnels
� state � displays information on tunnels that are in a particular administrative state or operational status
� adminState � use the online Help to see a list of possible administrative states
� operStatus � use the online Help to see a list of possible selections for operational status
� tunnelName � name of an L2F tunnel
� vrName � name of the virtual router on which the tunnel exists
� ipAddress � IP address of the peer at the other end of the tunnel
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show l2f tunnel summary
Description: Displays the configured and operational status of all L2F tunnels.
Syntax: show l2f tunnel summary [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show l2tp
Description: Displays information about the L2TP configuration on the system.
Syntax: show l2tp [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show l2tp destination476
show l2tp destination
Description: Displays information about selected L2TP destinations.
Syntax: show l2tp destination [ detail ] [ destinationName | [ virtual-router vrName ] ip ipAddress ] [ filter ]
� detail � provides complete information about the specified destinations, including destination profiles
� destinationName � name the system assigns to the peer at the other end of the tunnel
� vrName � name of the virtual router on which the destination exists
� ipAddress � IP address of the peer at the other end of the tunnel
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show l2tp destination profile
Description: Displays destination profile configuration.
Syntax: show l2tp destination profile [ profileName ]
� profilename � provides detailed information on a designated profile
Mode(s): Privileged Exec
show l2tp destination summary
Description: Displays the configured and operational status of all L2TP destinations.
Syntax: show l2tp destination summary [ filter ]
� filter � see Filtering show Commands in About This GuideEdinburgh5.0
Mode(s): Privileged Exec
show l2tp sessionERX Edge Routers
477
show l2tp session
Description: Displays detailed information about selected L2TP sessions.
Syntax: show l2tp session [ detail ] [ state { adminState | ifOperStatus } ] [ l2tpName | [ virtual-router vrName ] ip ipAddress [ l2tpNameNoDest ] ] [ filter ]
� detail � provides complete information about the specified sessions
� state � restricts display to sessions in a specific state
� adminState � effective administrative state
� ifOperStatus � operational state
� l2tpName � session name
� vrName � name of the virtual router on which the session exists
� ipAddress � IP address
� l2tpNameNoDest � name of the session
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show l2tp session summary
Description: Displays the configured and operational status of all L2TP sessions.
Syntax: show l2tp session summary [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show l2tp tunnel478
show l2tp tunnel
Description: Displays detailed information on the configured and operational status of selected L2TP tunnels.
Syntax: show l2tp tunnel [ detail ] [ state { adminState | ifOperStatus } ] [ l2tpName | [ virtual-router vrName ] ip ipAddress [ l2tpNameNoDest ] ] [ filter ]
� detail � provides complete information about the specified sessions, including the L2TP host profile name
� state � restricts display to tunnels in one of the following specific states:
� adminState � effective administrative state
� ifOperStatus � operational state
� l2tpName � tunnel name
� vrName � the name of the virtual router on which the tunnel exists
� ipAddress � IP address
� l2tpNameNoDest � tunnel name
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show l2tp tunnel summary
Description: Displays the configured and operational status of all L2TP tunnels.
Syntax: show l2tp tunnel summary [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show last-reset
Description: Displays information describing the reason for the system�s last reload, whether specified by the user or resulting from a system problem.
Syntax: show last-reset [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show license b-rasERX Edge Routers
479
show license b-ras
Description: Displays the b-ras license string.
Syntax: show license b-ras [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show license ipsec-tunnels
Description: Displays the IPSec tunnel license string.
Syntax: show license ipsec-tunnel [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show line console 0
Description: Displays the speed configured for all future console sessions and the current console session.
Syntax: show line console 0 [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show line vty
Description: Displays the configuration of vty lines.
Syntax: show line vty lineNumber [ filter ]
� lineNumber � number of the vty line; only line numbers that you have configured are available for display
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show log configuration480
show log configuration
Description: Displays information on the logging configuration settings for a selected category.
Syntax: show log configuration [ category eventCategory ] [ filter ]
� category � limits the display to a specific log category
� eventCategory � the log category to be displayed; refer to the CLI online help for available options
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show log data
Description: Displays the system log.
Syntax: show log data [ nv-file | category eventCategory ] [ severity { severityValue | severityNumber } ] [ delta ] [ filter ]
� nv-file � displays the nv-file log
� category � limits the display to a specific log category
� eventCategory � log category to display; refer to the CLI online help for available options
� severity � minimum severity of the log messages displayed; described either by a descriptive term�severityValue�or by a corresponding number�severityNumber�in the range 0�7; the lower the number, the higher the priority:
� emergency or 0 � system unusable
� alert or 1 � immediate action needed
� critical or 2 � critical condition exists
� error or 3 � error condition
� warning or 4 � warning condition
� notice or 5 � normal but significant condition
� info or 6 � informational message
� debug or 7 � debug message
� delta � limits the display to events that occurred after the baseline
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show mplsERX Edge Routers
481
show mpls
Description: Displays status and configuration information about MPLS on the router or on specific interfaces.
Syntax: show mpls [ interface [ shim ] [ state not-up ] [ brief | interfaceType interfaceSpecifier ] ] [ filter ]
� interface � displays information only for the MPLS interfaces; if not specified, only global information is displayed
� shim � displays information about shim interfaces
� state not-up � displays information only about interfaces that are not up
� brief � displays limited interface information
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show mpls binding482
show mpls binding
Description: Displays label bindings for routes that are used for forwarding; from the MPLS label information base.
Syntax: show mpls [ ip ] binding [ ldp | cr-ldp | layer2-vc ] [ destAddr [ maskLength | maskAddress ][ longer-prefixes ] ] [ interface interfaceType interfaceSpecifier ][ neighbor ipAddress ] [ generic | atm ] [ local | remote ] [ label { atm vpi vci | implicit-null-label | labelNumber [ labelRangeEnd ] } ] [ brief ] [ filter ]
� ip � optional keyword for compatibility with non-ERX implementations
� ldp � displays binding information for routes learned via LDP
� cr-ldp � displays binding information for routes learned via CR-LDP
� layer2-vc � displays binding information for routes learned via layer 2 over MPLS
� destAddr � destination address for which you want information displayed; if not specified, displays all fields
� maskLength � prefix length for the destination address
� maskAddress � address mask to be applied to the destination address
� longer-prefixes � displays information for prefixes that are equal to or more specific than the specified prefix
� interface � displays information for the specified interface
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� ipAddress � displays information for neighbor with this IP address
� generic � displays information only for generic labels
� atm � displays information only for ATM VPI/VCI labels
� local � displays information only for local labels
� remote � displays information only for remote labels
� atm � displays information for the specified ATM VPI/VCI labels
� vpi � specifies ATM VPI that partially designates a label
� vci � specifies ATM VCI that partially designates a label
� implicit-null-label � displays binding information for the implicit null label
show mpls explicit-pathsERX Edge Routers
483
� labelNumber � displays information for this label only; a number in the range 16�1048575
� labelRangeEnd � when specified, displays information for labels ranging from labelNumber to labelRangeEnd; a number in the range 16�1048575
� brief � displays limited information
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show mpls explicit-paths
Description: Displays all explicit paths or a particular explicit path.
Syntax: show { mpls | ip } explicit-paths [ detail | { name pathName | identifier pathNum } ] [ filter ]
� ip � keyword for compatibility with non-ERX implementations
� mpls � specify this keyword for our MPLS implementation
� detail � specifies a verbose display [not currently supported]
� pathName � name that identifies an explicit path
� pathNum � number that identifies an explicit path
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show mpls forwarding484
show mpls forwarding
Description: Displays statistics and configuration forwarding information for LSPs created on the LSR.
Syntax: show mpls forwarding [ ldp | cr-ldp | rsvp-te | layer2-vc ] [ label { atm vpi vci | implicit-null-label | labelNumber [ labelRangeEnd ] } ] [ destination destAddr [ { maskLength | maskAddress } [ longer-prefixes ] ] ] [ interface interfaceType interfaceSpecifier ] [ nexthop ipAddress ] [ brief | count-only ] [ filter ]
� ldp � displays LDP-specific forwarding information
� cr-ldp � displays CR-LDP�specific forwarding information
� rsvp-te � displays RSVP-TE�specific forwarding information
� layer2-vc � displays layer-2-over-MPLS�specific forwarding information
� atm � displays information for the specified ATM VPI/VCI labels
� vpi � specifies ATM VPI that partially designates a label
� vci � specifies ATM VCI that partially designates a label
� implicit-null-label � displays forwarding information for the implicit null label
� labelNumber � displays information for this label only; a number in the range 16�1048575
� labelRangeEnd � displays information for labels ranging from labelNumber to labelRangeEnd; a number in the range 16�1048575
� destAddress � destination address of tunnels to be displayed
� maskLength � prefix length for the destination address
� maskAddress � address mask to be applied to the destination address
� longer-prefixes � displays information for prefixes that are equal to or more specific than the specified prefix
� interface � displays information for the specified interface
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� ipAddress � displays information for next hop with this IP address
� brief � displays only brief or summary information about the tunnels
� count-only � displays a count of entries that match the specified conditions
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show mpls ldp targeted sessionERX Edge Routers
485
show mpls ldp targeted session
Description: Displays information about the LDP targeted sessions.
Syntax: show mpls ldp targeted session [ all | receive | send ]
� all � displays all targeted sessions
� receive � displays only targeted receive sessions
� send � displays only targeted send sessions
Mode(s): User Exec, Privileged Exec
show mpls minor-interface486
show mpls minor-interface
Description: Displays status and configuration for all minor interfaces or a specific minor interface in the current router context.
Syntax: show mpls [ traffic-eng ] minor-interface [ name interfaceName ] [ role { all | head | tail | middle | remote | lower } | up | down ] [ source-id sourceAddress [ srcId ] ] [ destination destAddr [ { maskLength | maskAddress } [ longer-prefixes ] ] ] [ interface interfaceType interfaceSpecifier ] [ nexthop ipAddress ] [ brief | count-only ] [ filter ]
� interfaceName � name of minor interface to be displayed
� role � displays tunnels in which the system has a specified role:
� all � displays all tunnels of which the system is a part
� head � displays tunnels where the system is the ingress router, or tunnel head end
� tail � displays tunnels where system is the egress router, or tunnel tail end (endpoint or destination of the tunnel)
� middle � displays tunnels where system is a transit router on the tunnel
� remote � displays tunnels where system is a transit router or egress router (tail end)
� lower � displays tunnels with stacked upper tunnels
� up � displays tunnels that are up
� down � displays tunnels that are down
� sourceAddress � source address of tunnels to be displayed
� srcId � local ID associated with source address of tunnels to be displayed, an integer from 0 to 65535
� destAddress � destination address of tunnels to be displayed
� maskLength � prefix length for the destination address
� maskAddress � address mask to be applied to the destination address
� longer-prefixes � displays information for prefixes that are equal to or more specific than the specified prefix
� interface � displays information for the specified interface
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
show mpls profileERX Edge Routers
487
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� ipAddress � displays information for next hop with this IP address
� brief � displays only brief or summary information about the tunnels
� count-only � displays a count for entries that match the specified conditions
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show mpls profile
Description: Displays a specific LDP, RSVP-TE, or tunnel profile, or all LDP, RSVP-TE, or tunnel profiles.
Syntax: show mpls { ldp | rsvp | tunnels } profile [ profileName ] [ filter ]
� ldp � specifies LDP profile
� rsvp � specifies RSVP-TE profile
� tunnels � specifies the tunnel profile
� profileName � name of the profile to be displayed
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show mpls rsvp
Description: Displays RSVP path control blocks, reservation state control blocks, or complete RSVP session information for the virtual router.
Syntax: show mpls rsvp { psb | rsb | sessions }
� psb � displays path state control blocks
� rsb � displays reservation state control blocks
� sessions � displays RSVP session information
Mode(s): User Exec, Privileged Exec
show mpls tunnels488
show mpls tunnels
Description: Displays status and configuration for all tunnels or for a specific tunnel in the current router context.
Syntax: show mpls [ traffic-eng ] tunnels [ name tunnelName ] [ role { all | head | tail | middle | remote | lower } | up | down ] [ source-id sourceAddress [ srcId ] ] [ destination destAddr [ { maskLength | maskAddress } [ longer-prefixes ] ] ] [ interface interfaceType interfaceSpecifier ] [ nexthop ipAddress ] [ brief | count-only ] [ filter ]
� traffic-eng � optional keyword for compatibility with non-ERX implementations
� tunnelName � name of tunnel or minor interface to be displayed
� role � displays tunnels in which the system has a specified role:
� all � displays all tunnels of which the system is a part
� head � displays tunnels where the system is the ingress router, or tunnel head end
� tail � displays tunnels where system is the egress router, or tunnel tail end (endpoint or destination of the tunnel)
� middle � displays tunnels where system is a transit router on the tunnel
� remote � displays tunnels where system is a transit router or egress router (tail end)
� lower � displays tunnels with stacked upper tunnels
� up � displays tunnels that are up
� down � displays tunnels that are down
� sourceAddress � source address of tunnels to be displayed
� srcId � local ID associated with source address of tunnels to be displayed, an integer from 0 to 65535
� destAddress � destination address of tunnels to be displayed
� maskLength � prefix length for the destination address
� maskAddress � address mask to be applied to the destination address
� longer-prefixes � displays information for prefixes that are equal to or more specific than the specified prefix
� interface � displays information for the specified interface
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
show multicast group limitERX Edge Routers
489
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� ipAddress � displays information for next hop with this IP address
� brief � displays only brief or summary information about the tunnels
� count-only � displays a count for entries that match the specified conditions
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show multicast group limit
Description: Displays the number of IGMP groups associated with a port, and if configured, the maximum number of groups that a port can accept.
Syntax: show multicast group limit [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show nbma arp
Description: Displays ARP table entries for NBMA interfaces.
Syntax: show nbma arp [ interfaceType interfaceSpecifier ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): User Exec, Privileged Exec
show ntp associations
Description: Displays information about NTP servers.
Syntax: show ntp associations [ detail ] [ filter ]
� detail � provides expanded information about the ntp servers, rather than a summary
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show ntp status490
show ntp status
Description: Displays the NTP configuration and status for the system.
Syntax: show ntp status [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show nvs
Description: Displays information about NVS.
Syntax: show nvs summary [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show policy-list
Description: Displays information on policy lists.
Syntax: show policy-list [ policyName [ precedence precValue [ rule ruleNumber ] ] ][ brief ] [ filter ]
� policyName � policy name to be displayed
� precValue � policy rule precedence to be displayed
� ruleNumber � policy rule to be displayed
� brief � display information in a condensed format
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show ppp interface
Description: Displays information about the PPP interface type that you specify.
Syntax: show ppp interface [ interfaceType interfaceSpecifier ] [ full | { dataRestriction }* [ protocolRestriction ]* ][ state stateRestriction ] [ delta ] [ filter ]
For multilinked PPP interfaces, the following options are additionally available:
show ppp interface mlppp [ interfaceSpecifier ] members [ filter ]
show ppp interface mlppp links [ filter ]
show ppp interfaceERX Edge Routers
491
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� full � displays configuration, status, and statistics information for the interface, including information specific to LCP, IPCP, OSINLCP, MPLSNLCP, PAP, and CHAP; equivalent to specifying config status statistics
� dataRestriction � one or more of the following keywords; you can repeat a keyword without effect
� config � displays information on the PPP interface configuration
� status � displays information on the PPP interface operational status
� statistics � displays information on the PPP interface statistics
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
� protocolRestriction � one or more of the following keywords
� lcp � displays LCP-specific information
� ip � displays IPCP-specific information
� osi � displays OSINLCP-specific information
� mpls � displays MPLSNLCP-specific information
� pap � displays PAP-specific information
� chap � displays CHAP-specific information
� stateRestriction � information is displayed only for interfaces in one of the following specified states:
� open � interface is administratively enabled, meaning that the no ppp shutdown command is operational
� closed � interface is administratively disabled, meaning that the ppp shutdown command is operational
� up � interface on which the LCP has been negotiated
� down � interface on which the LCP has not been negotiated, the negotiations have failed, or the connection has been ended
� lower-layer-down � interface that is not up and is waiting for the lower layer to come up to initiate negotiations for LCP
� not-present � interface that is not present because the hardware is not available. When the interface is in this state, no detailed information is available.
� passive � interface with the operational status passive
� tunneled � tunneled PPP interfaces
show ppp interface492
� no-ip � interface on which IPCP is not configured
� ip-open � interface on which IPCP is administratively enabled, meaning that the no ppp shutdown ip command is operational
� ip-closed � interface on which IPCP is administratively disabled, meaning that the ppp shutdown ip command is operational
� ip-up � interface on which the IPCP has been negotiated
� ip-down � interface on which the IPCP has not been negotiated, the negotiations failed, or the connection has been ended
� no-osi � interface on which OSINLCP is not configured
� osi-open � interface on which OSINLCP is administratively enabled, meaning that the no ppp shutdown osi command is operational
� osi-closed � interface on which OSINLCP is administratively disabled, meaning that the ppp shutdown osi command is operational
� osi-up � interface on which the OSINLCP has been negotiated
� osi-down � interface on which the OSINLCP has not been negotiated, the negotiations failed, or the connection has been ended
� no-mpls � interface on which MPLSNLCP is not configured
� mpls-open � interface on which MPLSNLCP is administratively enabled, meaning that the no ppp shutdown mpls command is operational
� mpls-closed � interface on which MPLSNLCP is administratively disabled, meaning that the ppp shutdown mpls command is operational
� mpls-up � interface on which the MPLSNLCP has been negotiated
� mpls-down � interface on which the MPLSNLCP has not been negotiated, the negotiations failed, or the connection has been ended
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
� members � lists all MLPPP member links, or only those for a specified MLPPP bundle
� links � lists the MLPPP bundles and the PPP interfaces contained within them.
Mode(s): User Exec, Privileged Exec
show ppp interface summaryERX Edge Routers
493
show ppp interface summary
Description: Displays a summary of all nonmultilinked and multilinked PPP interfaces configured on the system.
Syntax: show ppp interface summary [ config | admin | oper ] [ filter ]
� config � displays summary information about PPP configuration status
� admin � displays summary information about PPP administration status
� oper � displays summary information about PPP operational status
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show pppoe interface
Description: Displays information on the PPPoE interface you specify. Use the summary keyword to display information for all configured PPPoE interfaces.
Syntax: show pppoe interface [ { fastEthernet | gigabitEthernet | serial | atm } interfaceSpecifier ] [ delta ] [ filter ]
show pppoe interface [ summary ] [ full ]
� fastEthernet � specifies an FE interface
� gigabitEthernet � specifies a GE interface
� serial � specifies a serial interface; however, PPPoE is not currently supported on serial interfaces
� atm � specifies an ATM interface
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
� summary � displays administrative and operational status of all configured PPPoE interfaces
� full � displays configuration, status, and statistics information
Mode(s): User Exec, Privileged Exec
show pppoe subinterface494
show pppoe subinterface
Description: Displays all available data for a specific PPPoE subinterface. Use the summary keyword to display information for all configured PPPoE subinterfaces.
Syntax: show pppoe subinterface [ { fastEthernet | gigabitEthernet | serial | atm } interfaceSpecifier ] [ delta ] [ filter ]
show pppoe subinterface [ summary ] [ full ]
� fastEthernet � specifies an FE interface
� gigabitEthernet � specifies a GE interface
� serial � specifies a serial interface; however, PPPoE is not currently supported on serial interfaces
� atm � specifies an ATM interface
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
� summary � displays administrative and operational status of all configured PPPoE subinterfaces
� full � displays configuration, status, and statistics information
Mode(s): User Exec, Privileged Exec
show processes
Description: Use to show memory or CPU resources used by system processes and to force the system to release available memory on the SRP module.
Syntax: show processes [ cpu | memory ] [ filter ]
cpu � displays CPU utilization; default display if you omit any keyword
memory � displays system memory used and forces the system to release available memory
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show profileERX Edge Routers
495
show profile
Description: Displays information about a specific IP profile, such as the available PPPoE profile information: PPPoE URL string, PPPoE MOTM string, or both. If neither exists, the fields do not appear in the display.
Syntax: show profile profileName [ filter ]
� profileName � name of the profile you want to display
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privilege Exec
show profile brief
Description: Lists the names of all IP profiles.
Syntax: show profile brief [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show qos interface-hierarchy
Description: Displays information on the systems QoS interface hierarchy.
Syntax: show qos-interface-hierarchy interfaceType interfaceSpecifier [ filter ]
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show qos-port-type-profile
Description: Displays information on the QoS port-type profile for particular interface type.
Syntax: show qos-port-type-profile [ interfaceType ] [ filter ]
� interfaceType � specifies one of the following interface types to be associated with the QoS port-type profile: atm, ethernet, serial, server-port
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show qos-profile496
show qos-profile
Description: Displays information on QoS profile(s) configured on the ERX system.
Syntax: show qos-profile [ qosProfileName ] [ brief | references ] [ filter ]
� qosProfileName � name of the QoS profile
� brief � display information in a condensed format
� references � display interface profiles which reference this profile
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show qos queue-thresholds
Description: Displays the color-based thresholds for queues on each egress slot.
Displaying queue thresholds by queue-profile shows buffer memory information by queue-profile, and, within that profile, shows the thresholds for each region.
Displaying queue thresholds by region organizes the buffer memory information by queue region, and, within each region, shows the buffer allocations for each queue-profile.
Syntax: show qos queue-thresholds egress-slot egressSlot [ queue-profile [ queueProfileName ] | region [ regionNumber ] ] [ filter ]
� queue-thresholds � displays color-based thresholds for queues on an egress-slot
� egress-slot � displays color-based thresholds for an egress-slot
� queue-profile � displays thresholds for each region of the queue profile
� queueProfileName � name of the queue profile
� region � displays egress memory or buffer region oversubscription
� regionNumber � number identifying the egress memory or buffer region on the line card; range 0 � 7
Mode(s): Privileged Exec, User Exec
show queue-profileERX Edge Routers
497
show queue-profile
Description: Displays information on queue profile(s) configured on the ERX system.
Syntax: show queue-profile [ queueProfileName ] [ brief | references ] [ filter ]
� queueProfileName � name of the queue profile
� brief � display information in a condensed format
� references � display QoS profiles that reference this profile
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show radius
Description: Displays information on RADIUS authentication and accounting servers.
Syntax: show radius [ authentication | accounting ] { servers | statistics [ delta ] } [ filter ]
� authentication � displays authentication information only
� accounting � displays accounting information only
� servers � displays a list of authentication and/or accounting servers
� statistics � displays authentication and/or accounting statistics
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show radius acct-session-id-format
Description: Displays RADIUS Acct-Session-Id format used for RADIUS attribute 44, Acct-Session-Id.
Syntax: show radius acct-session-id-format [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show radius algorithm
Description: Displays the RADIUS algorithm that the RADIUS servers use.
Syntax: show radius algorithm [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show radius attributes-ignored498
show radius attributes-ignored
Description: Displays whether RADIUS attribute 9, framed-ip-netmask, is accepted or ignored by the RADIUS server. See radius ignore framed-ip-netmask command.
Syntax: show radius attributes-ignored [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show radius attributes-included
Description: Display the RADIUS attributes that are included in and excluded from Access-Request, Acct-Start, and Acct-Stop messages. You configure attribute inclusion using the radius include commands.
Syntax: show radius attributes-included [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show radius calling-station-delimiter
Description: Displays the delimiter used in RADIUS attribute 30, Calling-Station-Id, for the authenticated ATM PPP users.
Syntax: show radius calling-station-delimiter [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show radius calling-station-format
Description: Displays the format of RADIUS attribute 31, Calling-Station-Id.
Syntax: show radius calling-station-format [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show radius dsl-port-typeERX Edge Routers
499
show radius dsl-port-type
Description: Displays the DSL port type used in RADIUS attribute 61, NAS-Port-Type, for ATM users.
Syntax: show radius dsl-port-type [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show radius ethernet-port-type
Description: Display RADIUS attribute 61, NAS-Port-Type, for Ethernet interfaces.
Syntax: show radius ethernet-port-type [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show radius nas-identifier
Description: Displays the RADIUS client�s value for RADIUS attribute 32, NAS-Identifier.
Syntax: show radius nas-identifier [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show radius nas-port-format
Description: Displays the format used for RADIUS attribute 5, NAS-Port.
Syntax: show radius nas-port-format [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show radius override
Description: Displays whether the RADIUS client (LNS) uses RADIUS attribute 66, Tunnel-Client-Endpoint (LAC) IP address for RADIUS attribute 4, NAS-IP-Address.
Syntax: show radius override [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show radius rollover-on-reject500
show radius rollover-on-reject
Description: Displays the configuration of the rollover on reject feature.
Syntax: show radius rollover-on-reject [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show radius tunnel-accounting
Description: Displays information on RADIUS accounting for L2TP tunnels.
Syntax: show radius tunnel-accounting [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show radius udp-checksum
Description: Displays information on UDP checksums.
Syntax: show radius udp-checksum [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show radius update-source-addr
Description: Displays the IP source address of the RADIUS client.
Syntax: show radius update-source-addr [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show rate-limit-profile
Description: Displays information on rate-limit-profiles.
Syntax: show rate-limit-profile [ rateLimitProfileName ] [ filter ]
� rateLimitProfileName � name of a rate limit profile
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show reboot-historyERX Edge Routers
501
show reboot-history
Description: Displays information about the reboot history of the system.
Syntax: show reboot-history [ fileName.hty ] [ filter ]
� fileName � name of a history file to display; if not specified, displays the current reboot.hty file
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show redundancy
Description: Displays the way you configured the system for line module redundancy.
Syntax: show redundancy [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show reload
Description: Displays the reload status on the router.
Syntax: show reload [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show route-map
Description: Displays all the route maps or the route map you specify. The default is all route maps.
Syntax: show route-map [ listName ] [ filter ]
� listName � specifies the route map name
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show rtr application502
show rtr application
Description: Displays RTR application information.
Syntax: show rtr application [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show rtr collection-statistics
Description: Displays RTR collection information.
Syntax: show rtr collection-statistics [ rtrIndex ] [ filter ]
� rtrIndex � number of the operation
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show rtr configuration
Description: Displays the configuration for all RTR entries or for a specified entry.
Syntax: show rtr configuration [ rtrIndex ] [ filter ]
� rtrIndex � number of the operation
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show rtr history
Description: Displays the history collected for all RTR entries or for a specified entry.
Syntax: show rtr history [ rtrIndex ] [ filter ]
� rtrIndex � number of the operation
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show rtr hopsERX Edge Routers
503
show rtr hops
Description: Displays information discovered on each of the hops.
Syntax: show rtr hops [ rtrIndex ] [ filter ]
� rtrIndex � number of the operation
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show rtr operational-state
Description: Displays the operational state for all RTR entries or for a specified entry.
Syntax: show rtr operational-state [ rtrIndex ] [ filter ]
� rtrIndex � number of the operation
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show running-configuration
Description: Displays the configuration currently running on the system. Available only if the system is in Manual Commit mode.
Syntax: show running-configuration [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show scheduler-profile
Description: Displays information on scheduler profile(s) configured on the ERX system.
Syntax: show scheduler-profile [ schedulerProfileName ] [ brief | references ] [ filter ]
� schedulerProfileName � name of the scheduler profile
� brief � displays information in a condensed format
� references � displays QoS profiles that reference this profile
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show secrets504
show secrets
Description: Displays passwords and secrets.
Syntax: show secrets [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show smds interface
Description: Displays the status and statistical information of SMDS interfaces.
Syntax: show smds interface [ dataRestriction ] [ delta ] [ interfaceType interfaceSpecifier ] [ filter ]
� dataRestriction � specify one of the following keywords:
� full � displays full status information and statistics
� statistics � displays statistics information
� delta � displays baselined statistics
� interfaceType � displays statistics for SMDS interface configured on the interface type, hssi or tunnel
� interfaceSpecifier � location of the interface in the appropriate format; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show snmp
Description: Displays information on the status of communications between the SNMP agent and the SNMP manager.
Syntax: show snmp [ delta ] [ filter ]
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show snmp accessERX Edge Routers
505
show snmp access
Description: Displays information about the groups you configured.
Syntax: show snmp access [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show snmp community
Description: Displays information on configured communities.
Syntax: show snmp community [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show snmp interfaces
Description: Displays the configuration of your SNMP interface tables.
Syntax: show snmp interfaces [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show snmp trap
Description: Displays information on configured traps and trap destinations.
Syntax: show snmp trap [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show snmp user
Description: Displays information about users.
Syntax: show snmp user [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show snmp view506
show snmp view
Description: Displays information about the views you created.
Syntax: show snmp view [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show sscc info
Description: Displays information about SDX (formerly SSC) servers and SDX client (formerly SSCC) statistics.
Syntax: show sscc info [ brief ] [ filter ]
� brief � abbreviated display of SDX client and server information
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show sscc version
Description: Displays the SDX client (formerly SSCC) version number.
Syntax: show sscc version [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show statistics tacacs
Description: Displays TACACS+ server or TACACS+ statistics information.
Syntax: show statistics tacacs [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show subscribersERX Edge Routers
507
show subscribers
Description: Displays the authenticated PPP users. Use the summary keyword to display all PPP subscribers for each virtual router, port, or domain.
Syntax: show subscribers [ username userName | domain domainName | virtual-router vrName | port interfaceLocation ] [ filter ]
show subscribers summary [ domain | port | virtual-router ] [ filter ]
� summary � active PPP subscribers per virtual router
� userName � active PPP subscriber whose names match the username; 64 character string maximum
� domainName � active PPP subscribers whose usernames have that domain name; 64 character string maximum
� vrName � active PPP subscribers whose interfaces are bound to a specific virtual router; 513 character string maximum
� port � displays active PPP subscribers for the port
� interfaceLocation � location of the port in slot/port format; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show subsystems
Description: Displays the names of subsystem files in the current software release or in a specified release file.
Syntax: show subsystems [ file fileName.rel ] [ filter ]
� fileName � name of the software release file; you can specify a file on a remote server by including the path as part of the filename; absence of a path indicates a local file
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show tacacs508
show tacacs
Description: Displays general or detailed TACACS+ information.
Syntax: show tacacs [ statistics | delta ] [ filter ]
� statistics � specifies TACACS+ server statistics
� delta � displays baselined statistics
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show telnet
Description: Displays telnet daemons.
Syntax: show telnet
Mode(s): Privileged Exec
show terminal
Description: Displays information about terminal configuration settings for the current terminal line.
Syntax: show terminal [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show timing
Description: Displays system timing settings and operational status.
Syntax: show timing [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show traffic-classERX Edge Routers
509
show traffic-class
Description: Displays information on traffic class(es) configured on the ERX system.
Syntax: show traffic-class [ trafficClassName ] [ brief | references ] [ filter ]
� trafficClassName � name of the traffic class
� brief � displays information in a condensed format
� references � displays QoS profiles that reference this profile
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show traffic-class-group
Description: Displays information on a traffic class group configured on the ERX system.
Syntax: show traffic-class-group [ trafficClassGroupName ] [ filter ]
� trafficClassGroupName � name of the traffic class group
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
show tunnel-server
Description: Displays information about the tunnels that a specific Tunnel Service module or all Tunnel Service modules support.
Syntax: show traffic-server slot/port [ filter ]
� slot � slot in which the Tunnel Service module resides
� port � internal port on the module to which the tunnels are assigned
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show users
Description: Displays information about users of the vty lines.
Syntax: show users [ detail ] [ all ] [ filter ]
� detail � displays detailed information
� all � displays information about all lines
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show utilization510
show utilization
Description: Displays information about the resources that the installed modules consume and forces the system to release available memory on the SRP module.
Note: When you issue this command, the system releases available memory on the SRP module immediately; however, the display appears a few seconds later.
Syntax: show utilization [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
show version
Description: Displays armed and running releases for every slot in the system and also displays each module�s operational status.
Syntax: show version [ filter ]
� filter � see Filtering show Commands in About This Guide
Mode(s): User Exec, Privileged Exec
show virtual-router
Description: Displays virtual routers configured on your system.
Syntax: show virtual-router [ routerName ] [ detail ] [ filter ]
� routerName � name of the virtual router
� filter � see Filtering show Commands in About This Guide
� detail � displays detailed information about the virtual router
Mode(s): Privileged Exec
show vlan subinterfacesERX Edge Routers
511
show vlan subinterfaces
Description: Displays status of VLAN subinterfaces on FE and GE modules.
Syntax: show vlan subinterface [ { fastEthernet | gigabitEthernet } interfaceSpecifier ] [ filter ]
� fastEthernet � specifies an FE interface
� gigabitEthernet � specifies a GE interface
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec
shutdown
Description: In Controller Configuration Mode, disables CE1, CT1, CT3, E3, SONET, and T3 controllers. These controllers are disabled by default. In Interface Configuration mode, disables Ethernet interfaces, HSSI interfaces, X.21/V.35 interfaces, the HDLC layer of serial interfaces, and the SONET layer of ATM or POS interfaces. These interfaces are enabled by default. In Subinterface Configuration mode, disables ATM 1483, Ethernet, Frame Relay, PPPoE, and VLAN subinterfaces. These subinterfaces are enabled by default. The no version restarts disabled controllers, interfaces, and subinterfaces.
Syntax: [ no ] shutdown
Mode(s): Controller Configuration, Interface Configuration, Subinterface Configuration
sleep
Description: Causes the CLI to pause for a specified period of time. There is no no version.
Syntax: sleep sleepFor
� sleepFor � number of seconds in the range 0�4294967295
Mode(s): All modes
slot accept512
slot accept
Description: Erases from NVS the type and configuration of the previous line module in the specified slot, allows you to configure a new module. Issue this command after you have installed a different type of line module in a slot. There is no no version.
Syntax: slot accept slotNum
� slotNum � for an ERX-700 series system, a number in the range 0�6; for an ERX-1400 series system, a number in the range 0�13
Mode(s): Global Configuration
slot disable
Description: Disables the module installed in the specified slot. There is no no version.
Syntax: slot disable slotNum
� slotNum � for an ERX-700 series system, a number in the range 2�6; for an ERX-1400 series system, a number in the range 0�5 or 8�13
Mode(s): Global Configuration
slot enable
Description: Enables the module installed in the specified slot. There is no no version.
Syntax: slot enable slotNum
� slotNum � for an ERX-700 series system, a number in the range 2�6; for an ERX-1400 series system, a number in the range 0�5 or 8�13
Mode(s): Global Configuration
slot erase
Description: Erases from NVS the type and configuration of the previous line module in the specified slot, allows you to configure a new module. Issue this command before you install a different type of line module in a slot. There is no no version.
Syntax: slot erase slotNum
� slotNum � for an ERX-700 series system, a number in the range 0�6; for an ERX-1400 series system, a number in the range 0�13
Mode(s): Global Configuration
snmp trap ip link-statusERX Edge Routers
513
snmp trap ip link-status
Description: Enables link status traps on an IP interface. The no version disables link status traps on an IP interface.
Syntax: snmp trap ip link-status
no snmp trap ip
Mode(s): Interface Configuration
snmp trap link-status
Description: Enables processing of SNMP link status information on an interface. The no version disables the processing of SNMP link status information.
Syntax: [ no ] snmp trap link-status
Mode(s): Controller Configuration, Interface Configuration
snmp-server
Description: Enables the SNMP agent operation. The no version disables this operation.
Syntax: [ no ] snmp-server
Mode(s): Global Configuration
snmp-server community514
snmp-server community
Description: Configures an authorized SNMP community and associates SNMPv1/v2c communities with SNMPv3 views. The no version removes an authorized community from the list of communities.
Syntax: snmp-server community commString [ view viewName ] [ priv ] [ accessListName ]
no snmp-server community commString
� commString � name of the SNMPv1/v2c community
� viewName � name of the SNMPv3 view
� priv � Privileged Exec level � ro (read-only); rw (read-write); admin (administrator)
� accessListName � IP access list name to filter SNMP clients
Mode(s): Global Configuration
snmp-server contact
Description: Sets the system�s contact information. The no version clears the system�s contact information.
Syntax: snmp-server contact text
no snmp-server contact
� text � string of text that describes the system�s contact person
Mode(s): Global Configuration
snmp-server enable traps
Description: Enables and configures global SNMP trap generation. The no version disables SNMP trap generation.
Syntax: [ no ] snmp-server enable traps [ trapCategory | snmp authentication ] [ trapfilters trapFilter ]
� trapCategory � the SNMP trap category
� addrPool � local address pool traps
� atmPing � ERX system proprietary ATM ping traps
� bgp � BGP state change traps
� bulkstats � bulkstats file full and nearly full traps
� cliSecurityAlert � security alerts traps
� dvmrp � DVMRP traps
snmp-server enable trapsERX Edge Routers
515
� dvmrpUni � ERX system proprietary DVMRP traps
� environment � power/temperature/fan traps
� fileXfer � file transfer status change traps
� inventory � system inventory/status traps
� link � SNMP linkUp/linkDown traps
� log � system log capacity traps
� ntp � ERX system proprietary traps
� ospf � OSPF traps
� ping � ping operation traps (in disman remops MIB)
� snmp � SNMP coldstart, warmstart, link, authenticationFailure traps
� traceroute � traceroute operation traps (in disman remops MIB)
� snmp � specifies the SNMP coldStart, warmStart, and authenticationFailure traps
� authentication � specifies the SNMP authenticationFailure trap
� trapfilters � filters traps according to severity level
� trapFilter � minimum severity level of traps generated
� alert � severity level 1
� critical � severity level 2
� debug � severity level 7
� emergency � severity level 0
� error � severity level 3
� informational � severity level 6
� notice � severity level 5
� warning � severity level 4
Mode(s): Global Configuration
snmp-server host516
snmp-server host
Description: Configures the host(s) that should receive an SNMP trap. The no version removes the specified host from the list of recipients.
Syntax: snmp-server host ipAddress [ version ver ] securityString [ udp-port port ][ trapCategory ]* [ trapFilters trapFilter ]
no snmp-server host ipAddress
� ipAddress � IP address of the SNMP trap recipient
� ver � SNMP protocol version for traps sent to host: v1, v2c, or v3
� securityString � SNMP community string
� port � UDP port number of SNMP trap recipient
� trapCategory � SNMP trap category
� addrPool � local address pool traps
� atmPing � ERX system proprietary ATM ping traps
� bgp � BGP state change traps
� bulkstats � bulkstats file full and nearly full traps
� cliSecurityAlert � security alerts traps
� dvmrp � DVMRP traps
� dvmrpUni � ERX system proprietary DVMRP traps
� environment � power/temperature/fan traps
� fileXfer � file transfer status change traps
� inventory � system inventory/status traps
� link � SNMP linkUp/linkDown traps
� log � system log capacity traps
� ospf � OSPF traps
� ping � ping operation traps (in disman remops MIB)
� radius � RADIUS traps
� snmp � SNMP coldstart, warmstart, link, authenticationFailure traps
� traceroute � traceroute operation traps (in disman remops MIB)
� trapfilters � filters traps according to severity level
� trapFilter � minimum severity level of traps sent to this host
� alert � severity level 1
� critical � severity level 2
� debug � severity level 7
� emergency � severity level 0
snmp-server interfaces compressERX Edge Routers
517
� error � severity level 3
� informational � severity level 6
� notice � severity level 5
� warning � severity level 4
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Global Configuration
snmp-server interfaces compress
Description: Removes a set of sublayers from the ifTable and the ifStackTable. You can enter this command multiple times to remove multiple interfaces. The no version negates the compression.
Syntax: [ no ] snmp-server interfaces compress [ interfaceLayer ]*
� interfaceLayer � specifies the interface layer you want to remove from the ifTable and the ifStackTable. If you do not specify an interface layer, the following interface layers are removed:
� ip
� ppp
� ethernetSubinterface
� hdlc
� pppoeInterface
� ipLoopback
� ipVirtual
� pppLinkInterface
� slepInterface/ciscoHdlc
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Global Configuration
snmp-server interfaces compress-restriction
Description: Excludes interfaces from the ifTable and the ifStackTable if the ifAdminStatus of the interfaces is down. The no version negates the restriction.
Syntax: [ no ] snmp-server interfaces compress-restriction ifAdminStatusDown
Mode(s): Global Configuration
snmp-server interfaces description-format common518
snmp-server interfaces description-format common
Description: Enables the conventional industry method of encoding the SNMP ifDescr and ifName objects. The no version returns the encoding method to a proprietary encoding scheme.
Syntax: [ no ] snmp interfaces description-format common
Mode(s): Global Configuration
snmp-server interfaces rfc1213
Description: Specifies that the system bases numbering in the IfTable on RFC 1213. The no version restores the default value, which is to use RFC 1573 style numbering in interface tables.
Caution: Reducing the value of the maxIfIndex, the maxIfNumber, or both, causes the system to automatically reboot to factory default settings.
The system does not reboot to factory defaults if you:
� Increase the values of maxIfIndex and/or maxIfNumber.
� Issue a no version of the snmp-server interfaces rfc1213 command when the system is already set up for RFC 1573 style numbering.
� Enter the snmp-server interfaces rfc1213 command with the same options multiple times.
Syntax: snmp interfaces rfc1213 [ maxIfIndex ] [ maxIfNumber ]
[ no ] snmp interfaces rfc1213
� maxIfIndex � maximum value of index numbers in the interface tables; range is 100�524800; default is 65535
� maxIfNumber � maximum number of interfaces in each interface table; range is 100�524800; default is 65535
Mode(s): Global Configuration
snmp-server location
Description: Sets information on the system�s location. The no version clears this information.
Syntax: snmp-server location text
no snmp-server location
� text � string of text that describes the system�s location
Mode(s): Global Configuration
snmp-server packetsizeERX Edge Routers
519
snmp-server packetsize
Description: Specifies the maximum SNMP packet size in bytes. The no version restores the default value.
Syntax: snmp-server packetsize byteCount
no snmp-server packetsize
� byteCount � size of an SNMP packet (in bytes)
Mode(s): Global Configuration
snmp-server trap-proxy
Description: Use to enable or disable the SNMP trap proxy.
Syntax: [ no ] snmp-server trap-proxy state
� trap-proxy � specifies this agent as the SNMP trap proxy
� state � enable or disable
Mode(s): Global Configuration
snmp-server trap-source
Description: Specifies the interface whose IP address is the source address for SNMP traps. The no version disables this feature.
Syntax: snmp-server trap-source interfaceType interfaceSpecifier
no snmp-server trap-source
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Global Configuration
snmp-server user520
snmp-server user
Description: Use to create and modify SNMPv3 users. The no version removes the user.
Syntax: snmp-server user userName group groupName [ authentication authType authKey ] [ privacy privType privKey ]
no snmp-server user userName
� userName � name of the SNMPv3 user
� groupName � name of the group to which the user belongs
� one of the three predefined groups (admin, public, or private) or a custom group created via SNMPv3 commands
� authType � authorization protocol required for this user
� md5 � HMAC-MD5-96 authorization protocol
� sha � HMAC-SHA-96 authorization protocol
� authKey � SNMP user authentication key
� authPassword � password for the authentication procedure; use a 16-character password for HMAC-MD5-96 and a 20-character password for HMAC-SHA-96
� privType � privacy protocol required for this user
� des � CBC-DES encryption algorithm for privacy
� privKey � user�s privacy key
� privPassword � password for the privacy verification; use a16-character password for CBC-DES
Mode(s): Global Configuration
source-address
Description: For L2TP, specifies a source IP address for the LAC tunnel endpoint. For L2F, specifies a source IP address for the home gateway tunnel endpoint. The no version removes the source address.
Syntax: source-address sourceAddress
no source-address
� sourceAddress � address of the local tunnel endpoint (the LAC)
Mode(s): Domain Map Tunnel Configuration
speedERX Edge Routers
521
speed
Description: When used from Line Configuration mode, sets the speed for the current and all new console sessions immediately. The no version reverts to the default value of 9600 bps.
When used from Interface Configuration mode, specifies the line speed for an Ethernet interface. The no version specifies the default, automatically negotiate. This command works in conjunction with the duplex command; if you set or accept the automatically negotiate setting for either duplex mode or speed, the system negotiates both parameters with the remote device. This command is not available for the Ethernet interface on the SRP module.
Syntax: For console sessions:
speed baudRate
no speed
� baudRate � terminal speed for the current console session.
Possible values are: 2400, 4800, 9600, 14400, 19200, 28800, 38400, 57600, 115200
For Ethernet interfaces on line modules:
speed speedValue
no speed
� speedValue � value of the line speed
� automatically negotiate � specifies that the system negotiates the line speed with the remote device
� 10 � specifies that the system uses a line speed of 10 Mbps on a Fast Ethernet interface (not valid for GE interfaces)
� 100 � specifies that the system uses a line speed of 100 Mbps on a Fast Ethernet interface (not valid for GE interfaces)
� 1000 � specifies that the system uses a line speed of 1000 Mbps on a Gigabit Ethernet interface (not valid for FE interfaces)
Mode(s): Line Configuration, Interface Configuration
spf-interval522
spf-interval
Description: Controls the minimum interval between the shortest path first calculation for IS-IS. The no version restores the default interval of 5 seconds. If you do not specify a level, the interval applies to both level 1 and level 2.
Syntax: spf-interval [ level-1 | level-2 ] seconds
no spf-interval [ level-1 | level-2 ]
� seconds � number in the range 0�120; the minimum time between SPF calculations in seconds; the default value is 5
� level1 � level 1 SPF
� level2 � level 2 SPF
Mode(s): Router Configuration
split-horizon
Description: Controls the split horizon and poison reverse features for RIP remote neighbors. Split horizon is enabled by default; poison reverse routing updates are disabled by default. The no version disables the split horizon and enables poison reverse routing updates which set the metric for routes originating on the interface to infinity to explicitly advertise that the network is unreachable, reducing the possibility of routing loops.
Syntax: [ no ] split-horizon
Mode(s): Remote Neighbor Configuration
srp switch
Description: Switches from the primary SRP module to the standby. This command is equivalent to the redundancy force-failover command with the srp option. There is no no version.
Syntax: srp switch [ [ force ] [ reason ] ]
� force � prompts the user to confirm that the system should switch from the primary SRP module to the standby if the SRP modules are in certain states, such as writing configuration data to NVS, that could lead to loss of configuration data or corruption of NVS.
� reason � reason for the change
Mode(s): Privileged Exec
sscc addressERX Edge Routers
523
sscc address
Description: Configures the SDX client (formerly SSCC) with the IP addresses of the SDX servers and the ports on which the servers listen for activity. The no version removes the specified server (primary, secondary, or tertiary) from the list of SDX servers.
Syntax: [ no ] sscc { primary | secondary | tertiary } address ipAddress port portNumber
� primary � primary SDX server
� secondary � secondary SDX server
� tertiary � tertiary SDX server
� ipAddress � IP address of an SDX server
� portNumber � SDX server port number on which the server listens for activity
Mode(s): Global Configuration
sscc enable
Description: Enables the SDX (formerly SSC). The no version disables the feature.
Syntax: [ no ] sscc enable
Mode(s): Global Configuration
sscc retryTimer
Description: Configures the delay period during which the SDX client (formerly SSCC) waits for a response from an SDX (formerly SSC) server. When the timer expires, the client submits the request to the next server and waits again for the timer to expire. The request is sent to each timer in rotation until there is a response. The no version restores the default delay period of 90 seconds.
Syntax: [ no ] sscc retryTimer timer
� timer � time in seconds from 5 to 300
Mode(s): Global Configuration
sscc sourceAddress
Description: Specifies a fixed source address for the TCP/COPS connection.
Syntax: [ no ] sscc sourceAddress ipAddress
� ipAddress � the source (or local) IP address of the TCP/COPS connection
Mode(s): Global Configuration
sscc transportRouter524
sscc transportRouter
Description: Configures the router on which the TCP/COPS connection is to be established.
Syntax: [ no ] sscc transportRouter name
� name � the transport router�s name
Mode(s): Global Configuration
strict-priority
Description: Sets strict-priority scheduling for the scheduler node. The no version deletes the strict priority setting.
Syntax: [ no ] strict-priority
Mode(s): Scheduler Profile Configuration
strip-domain
Description: Use to strip the domain name from the username before sending an access-request message to the RADIUS server. The domain name is the text after the last @ character. For example, xyz.com is the domain name of the following: [email protected]@xyz.com. To stop stripping the domain name, use the disable keyword. The no version resets the default, disable.
Syntax: strip-domain { enable | disable }
no strip domain
Mode(s): Domain Map Configuration
subscriberERX Edge Routers
525
subscriber
Description: Configures a local subscriber (when one cannot be obtained externally, as in PPP) on the ERX to support authentication and configuration from the RADIUS server. The no version negates the command.
Syntax: subscriber upperInterfaceType userNameUsage userName domain domainName [ passwordUsage password ]
no subscriber upperInterfaceType
� upperInterfaceType � upper interface type, bridged Ethernet or IP
� userNameUsage � specifies how the supplied username is used for authentication purposes: as specified or postpended with the interface physical location
� userName � RADIUS username
� domainName � domain name
� passwordUsage � specifies how the supplied password is used for authentication purposes: as specified or postpended with the interface physical location; password usage is optional
� password � RADIUS password; password usage is optional
Mode(s): Interface Configuration, Subinterface Configuration
summary-address526
summary-address
Description: Creates aggregate addresses for IS-IS or aggregates external routes at the border of the OSPF domain. The no version restores the default.
Syntax: ISIS:
summary-address address mask [ level-1 | level-1-2 | level-2 ] [ metric ]
no summary-address address mask [ level-1 | level-1-2 | level-2 ]
� address � summary IP address designated for a range of addresses
� mask � IP subnet mask used for the summary route
� level-1 � redistributed routes into level 1 are summarized; when distributing routes domain wide, routes leaked from level 2 into level 1 are summarized
� level 1-2 � summary route is applied both when redistributing routes into level 1 and level 2 IS-IS, and when routes are leaked between levels
� level-2 � routes learned by level 1 routing are summarized into the level 2 backbone with the configured address/mask value; redistributed routes into level 2 IS-IS are also summarized
� metric � number in the range 1�16777215; the default metric value; the summary uses this value when advertising the summary address. When no metric is supplied, uses the value of the lowest-cost route that this is summarizing (default)
OSPF:
[ no ] summary-address address mask
� address � summary address designated for a range of addresses
� mask � IP subnet mask used for the summary route
Mode(s): Router Configuration
suppress-default
Description: Suppresses an IS-IS level 1-2 router from indicating that it can reach destinations outside the area, thus preventing level 1 routers from installing a default route to the level 1-2 router. The no version disables suppression of default routes.
Syntax: [ no ] suppress-default
Mode(s): Router Configuration
svlan idERX Edge Routers
527
svlan id
Description: Specifies an S-VLAN. There is no no version.
Syntax: svlan id S-VlanIdValue VlanIdValue
� S-VlanIdValue � S-VLAN ID number in the range of 0�4095, which is unique within the Ethernet interface
� VlanIdValue � VLAN ID number in the range of 0�4095, which is unique within the Ethernet interface
Mode(s): Interface Configuration
svlan ethertype
Description: Specifies the Ethertype of an S-VLAN. The no version removes the Ethertype.
Syntax: [ no ] svlan ethertype { 9100 | 9200 }
� 9100 � specifies Ethertype value 0x9100
� 9200 � specifies Ethertype value 0x9200
Mode(s): Interface Configuration
synchronization
Description: Enables synchronization between BGP and your IGP. The no version advertises a network route without waiting for the IGP.
Syntax: [ no ] synchronization
Mode(s): Address Family Configuration, Router Configuration
synchronize
Description: Forces the NVS file system of the redundant SRP module to synchronize with the NVS file system of the primary SRP module. There is no no version.
Syntax: synchronize
Mode(s): Privileged Exec
t1 bert528
t1 bert
Description: Enables bit error rate tests using the specified pattern on a T1 line on a CT3 module. The no version stops the test that is running.
Syntax: t1 channel bert pattern pattern interval time [ unframed ]
no t1 channel bert
� channel � T1 channel number in the range 1�28
� pattern � one of the following test patterns
� 0s � repetitive test pattern of all zeros, 00000...
� 1s � repetitive test pattern of all ones, 11111...
� 2^11 � pseudorandom test pattern, 2048 bits in length
� 2^15 � pseudorandom 0.151 test pattern, 32768 bits in length
� 2^20-O153 � pseudorandom 0.153 test pattern, 1048575 bits in length
� 2^20-QRSS � pseudorandom QRSS 0.151 test pattern, 1048575 bits in length
� 2^23- � pseudorandom 0.151 test pattern, 8388607 bits in length
� alt-0-1 � repetitive alternating test pattern of zeros and ones, 01010101...
� time � interval between test patterns, ranging from 1�14,400 minutes
� unframed � the test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern only occupies T1 payload bits.
Mode(s): Controller Configuration
t1 clock sourceERX Edge Routers
529
t1 clock source
Description: Determines which end of the T1 interface provides clocking. The no version uses the default value, line.
Syntax: t1 channel clock source { line | internal { module | chassis } }
no t1 channel clock source
� channel � T1 channel number in the range 1�28
� line � interface transmits data from a clock recovered from the line�s receive data stream
� internal � interface transmits data using its internal clock. You must specify one of the following for internal clocking:
� module � internal clock is from the line module itself
� chassis � internal clock is from the configured system clock
Mode(s): Controller Configuration
t1 fdl
Description: Specifies the FDL standard used by a specific T1 channel on the CT3 interface. The no version restores the default, none.
Syntax: t1 channel fdl { ansi | att | all | none }
no t1 channel fdl [ ansi | att | all ]
� channel � T1 channel number in the range 1�28
� ansi � specifies ANSI T1.403 Standard for extended superframe FDL exchange support
� att � specifies AT&T Technical Reference 54016 for extended superframe FDL exchange support
� all � specifies both the AT&T and ANSI mode for extended superframe FDL exchange support
� none � removes the current FDL mode settings
Mode(s): Controller Configuration
t1 fdl carrier530
t1 fdl carrier
Description: Specifies that an interface is used in the carrier environment of a T1 channel on a CT3 interface. The no version restores the default situation, in which an interface does not operate in the carrier environment.
Syntax: [ no ] t1 channel fdl carrier
� channel � T1 channel number in the range 1�28
Mode(s): Controller Configuration
t1 fdl string
Description: Defines an FDL message on a T1 channel on a CT3 interface as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages.
Syntax: t1 channel fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue | generator generatorValue }
no t1 channel fdl string { eic | fic | lic | unit | pfi | port | generator }
� channel � T1 channel number in the range 1�28
� eicValue � equipment identification code; 1�10 characters; default is the null value
� licValue � line identification code; 1�10 characters; default is the null value
� ficValue � frame identification code; 1�10 characters; default is the null value
� unitValue � unit identification code; 1�6 characters; default is the null value.
� pfiValue � facility identification code to send in the FDL path message; 1�38 characters; default is the null value.
� portValue � equipment port number to send in the FDL idle signal message; 1�38 characters; default is the null value.
� generatorValue � generator number to send in the FDL test signal message; 1�38 characters; default is the null value.
Mode(s): Controller Configuration
t1 fdl transmitERX Edge Routers
531
t1 fdl transmit
Description: Configures the system to send the specified FDL message on a T1 channel on a CT3 interface. The no version stops the system from sending the specified FDL message or all FDL messages.
Syntax: [ no ] t1 channel fdl transmit { path-id | idle-sIgnal | test-signal }
no t1 channel fdl transmit
� channel � T1 channel number in the range 1�28
� path-id � transmits a path identification message every second
� idle-sIgnal � transmits an idle signal every 10 seconds
� test-signal� transmits a test signal every 10 seconds
Mode(s): Controller Configuration
t1 framing
Description: Specifies the type of framing used by a specific T1 channel on the CT3 interface. The no version uses the default value, esf.
Syntax: t1 channel framing { esf | sf }
no t1 channel framing
� channel � T1 channel number in the range 1�28
� esf � specifies extended superframe
� sf � specifies superframe
Mode(s): Controller Configuration
t1 lineCoding
Description: Specifies the type of line coding used by a specific T1 channel on the CT3. The no version uses the default value, b8zs.
Syntax: t1 channel lineCoding { ami | b8zs }
no t1 channel lineCoding
� channel � T1 channel number in the range 1�28
� ami � specifies alternate mark inversion
� b8zs � specifies bipolar with eight-zero substitution
Mode(s): Controller Configuration
t1 loopback532
t1 loopback
Description: Configures a loopback test for a T1 line on a CT3 module. The no version deactivates the loopback test; if you specify the remote keyword, the no version sends the 16-bit ESF data link code word or inband pattern to deactivate the loopback at the remote end based on the last activate request sent to the remote end. If you do not specify the remote keyword, the no version clears the local loopback configuration.
Syntax: t1 channel loopback [ local | network { line | payload } | remote { line { fdl { ansi | bellcore } | inband } payload [ fdl ] [ansi ] } ]
no t1 channel loopback [ remote ]
� channel � T1 channel number in the range 1�28
� local � loops the router output data back toward the router at the T1 framer and sends an alarm indication signal out toward the network. This is the default setting if you specify no optional keywords.
� network { line | payload } � Specify the line keyword to loop the data back toward the network before the T1 framer and automatically set a local loopback at the HDLC controllers. Specify the payload keyword to loop the payload data back toward the network at the T1 framer and automatically set a local loopback at the HDLC controllers.
� remote line fdl ansi � sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 channel, according to the ANSI T1.403 specification.
� remote line fdl bellcore � sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 channel, according to the Bellcore TR-TSY-000312 specification.
� remote line inband �sends a repeating 5-bit inband pattern (00001) to the remote end requesting that it enter into a network line loopback
� remote payload [ fdl ] [ ansi ] � sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 channel. You can optionally specify fdl and ansi, but it is not necessary.
Mode(s): Controller Configuration
t1 remote-loopbackERX Edge Routers
533
t1 remote-loopback
Description: Enables the acceptance of remote loopback requests. The no version restores the default value, which is to reject remote loopback requests.
Syntax: [ no ] t1 channel remote-loopback
� channel � T1 channel number in the range 1�28
Mode(s): Controller Configuration
t1 shutdown
Description: Disables a T1 or fractional T1 channel on the CT3. The no version restarts a disabled interface.
Syntax: [ no ] t1 channel | channel/subchan shutdown
� channel � T1 channel number in the range 1�28
� subchan � FT1 subchannel on a T1 interface in the range 1�24
Mode(s): Controller Configuration
t1 snmp trap link-status
Description: Enables processing of SNMP link status information on a T1 or fractional T1 channel on the CT3. The no version disables the processing of SNMP link status information.
Syntax: [ no ] t1 channel | channel/subchan snmp trap link-status
� channel � T1 channel number in the range 1�28
� subchan � specifies the FT1 subchannel on a T1 interface in the range 1�24
Mode(s): Controller Configuration
t1 timeslots534
t1 timeslots
Description: Configures the timeslots and data rate used on each T1 channel on the CT3 interface. The no version deletes the fractional T1 circuit.
Syntax: t1 channel/subchan timeslots range [ speed { 56 | 64 } ]
no t1 subchan
� channel � T1 channel number in the range 1�28
� subchan � subchannel specifies the logical subchannel on a T1 in the range 1�24
� range � specifies the timeslot assigned to the T1 channel in the range 1�24. A dash represents a range of timeslots, and a comma separates timeslots. For example, 1-10, 15-18 assigns timeslots 1 through 10 and 15 through 18.
� speed � specifies the data rate for the T1 channel. Values are 56 Kbps or 64 Kbps. The default is 64 Kbps.
Mode(s): Controller Configuration
t1 yellow
Description: Generates or detects a yellow alarm for a T1 channel on the CT3 interface. The no version restores the default value, to not generate or to not detect a yellow alarm.
Syntax: [ no ] t1 channel yellow { generate | detect }
� channel � T1 channel number in the range 1�28
Mode(s): Controller Configuration
table-mapERX Edge Routers
535
table-map
Description: Applies the specified route map to all BGP, OSPF, or RIP routes about to be added to the IP routing table. The no version halts application of the route map.
Syntax: table-map mapTag
no table-map [ mapTag ]
� mapTag � name of the route map; a string of up to 32 alphanumeric characters; for each protocol, the route map can set only the values as specified below:
BGP: distance, IP next hop, level, metric, metric type, route type, and tag values
OSPF: distance, metric, metric type, route type, and tag values
RIP: distance, metric, and tag values
Mode(s): Address Family Configuration (BGP), Router Configuration (BGP, OSPF, RIP)
tacacs-server host
Description: Adds or deletes a host to or from the list of TACACS+ servers. If host is not assigned as primary host, the system assigns an existing host as the primary. The no version deletes the host from the list of TACACS+ servers.
Syntax: tacacs-server host ipAddress [ port portNumber ] [ timeout timeoutValue ] [ key keyValueString ] [ primary ]
no tacacs-server host ipAddress
� ipAddress � IP address of the TACACS+ server
� portNumber � TACACS+ server�s TCP port number in the range 1�655535
� timeoutValue � specifies response timeout interval for the TACACS+ client to server exchange; number in the range 1 to 255; default is 5
� keyValueString � specifies the secret used in TACACS+ client to server exchange; value string can be up to 100 characters
� primary � assigns the host as the primary host
Mode(s): Global Configuration
tacacs-server key536
tacacs-server key
Description: Sets or resets the authentication and encryption key value shared by all TACACS+ servers that do not have a server-specific key set up by the tacacs-server host command. The no version removes the key value shared by all TACACS+ servers.
Syntax: tacacs-server key keyValueString
no tacacs-server key
Mode(s): Global Configuration
tacacs-server source-address
Description: Sets or resets an alternative source address to be used for TACACS+ server communications. The no version removes the address.
Syntax: tacacs-server source-address ipAddress
no tacacs-server source-address
� ipAddress � IP address used as source by the TACACS+ server
Mode(s): Global Configuration
tacacs-server timeout
Description: Sets the interval in seconds that the server waits for the TACACS+ server host to reply. This value is shared by those TACACS+ servers that do not have a timeout interval set by the tacacs-server host command. The no version resets the timeout interval shared by all TACACS+ servers.
Syntax: tacacs-server timeout timeoutValue
no tacacs-server timeout
� timeoutValue � specifies response timeout interval for the TACACS+ client to server exchange; number in the range 1 to 255; default is 5
Mode(s): Global Configuration
tagERX Edge Routers
537
tag
Description: Specifies a user-defined tag. The no version removes the tag from the operation. You can configure a tag for both echo and echoPath types.
Syntax: tag tagValue
no tag
� tagValue � name of a group that the operation belongs to: 0�255 ASCII characters; the default is to have no tag
Mode(s): RTR Configuration
telnet538
telnet
Description: Enables connections to remote systems via the embedded Telnet client. There is no no version.
Syntax: telnet IpAddress | hostname [ vrf vrfName ] [ ipPortNumber | ipPortType ] [ source-interface interfaceType interfaceSpecifier | noecho | line | debug | verbose ]*
� ipAddress � IP address of the remote system
� hostname � name of the remote system
� vrfName � name of the VRF to which the command applies; string of 1�32 alphanumeric characters
� ipPortNumber � number in the range 0�65535 of the port for the connection to the remote system. The default is port number 23, the Telnet port. For more information on port numbers and associated processes, see www.iana.org.
� ipPortType � name of a well-known port, as follows:
� bgp � Border Gateway Protocol (port 179)
� chargen � character generator (port 19)
� cmd � remote commands (port 514)
� daytime � daytime (port 13)
� discard � discard (port 9)
� domain � Domain Name Service (port 53)
� echo � echo (port 7)
� exec � exec (port 512)
� finger � finger (port 79)
� ftp � File Transfer Protocol (port 21)
� ftp-data � FTP data connections (port 20)
� gopher � gopher (port 70)
� hostname � NIC hostname server (port 101)
� ident � Ident Protocol (port 113)
� irc � Internet Relay Chat (port 194)
� klogin � Kerberos login (port 543)
� kshell � Kerberos shell (port 544)
telnetERX Edge Routers
539
� login � Login (port 513)
� lpd � printer service (port 515)
� nntp � Network News Transport Protocol (port 119)
� pim-auto-rp � Protocol Independent Multicast Auto RP (port 496)
� pop2 � Post Office Protocol version 2 (port 109)
� pop3 � Post Office Protocol version 2 (port 110)
� smtp � Simple Mail Transport Protocol (port 25)
� sunrpc � Sun Remote Procedure Call (port 111)
� syslog � Syslog (port 514)
� tacacs � Terminal Access Concentrator Access Control System (port 49)
� talk � Talk (port 517)
� telnet � Telnet (port 23)
� time � Time (port 37)
� uucp � Unix-to-Unix Copy Program (port 540)
� whois � nickname (port 43)
� www � World Wide Web (port 80)
� source-interface � forces Telnet to use the IP address of the specified interface as the source address for the Telnet connection
� interfaceType � type of interface to use to obtain the source address for the Telnet connection; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � number of interface to use to obtain the source address for the Telnet connection; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� noecho � disables local echo of user input
� line � enables line mode
� debug � enables debugging
� verbose � enables verbose mode
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Privileged Exec
telnet listen540
telnet listen
Description: Sets the Telnet daemon to listen in a virtual router other than the default. The no version deletes the Telnet daemon.
Syntax: telnet listen [ port portValue ]
no telnet listen
� portValue � TCP port on which the Telnet daemon listens; if not specified, the default port 23 is used
Mode(s): Global Configuration
terminal data-character-bits
Description: Sets the number of data bits available for characters for the current session on the terminal screen. There is no no version.
Syntax: terminal data-character-bits { 7 | 8 }
� 7 � 7 data bits per character; this setting supports only characters in the standard ASCII set
� 8 � 8 data bits per character; default setting, supports the full set of 8-bit international characters
Mode(s): User Exec, Privileged Exec
terminal length
Description: Sets the number of lines on the current terminal screen for the current session. There is no no version.
Syntax: terminal length value
� value � number for the screen length in the range 0�512. If 0, the router does not pause between screens of output. If not 0, the router pauses between screens.
Mode(s): User Exec, Privileged Exec
terminal speed
Description: Sets the speed for the current console session. There is no no version.
Syntax: terminal speed baudRate
� baudRate � terminal speed for the current console session; possible values are: 2400, 4800, 9600, 14400, 19200, 28800, 38400, 57600, 115200
Mode(s): Privileged Exec
terminal widthERX Edge Routers
541
terminal width
Description: Sets the number of character columns on the current terminal screen for the current line for a session. There is no no version.
Syntax: terminal width value
� value � number of characters in the range 30�512
Mode(s): User Exec, Privileged Exec
test aaa
Description: Verifies RADIUS authentication and accounting and IP address assignment setup. The test uses a username and password and attempts to authenticate a user, get an address assignment, and issue a start accounting request. The test immediately terminates the session by issuing a stop accounting request and an address release. Optionally, a virtual router context may be specified.
Syntax: test aaa { ppp | mlppp } userName [ password ] [ virtual-router vrContext ][ aaa-profile profileName ] [ zero-stats ]
� ppp � indicates a PPP user
� mlppp � simulates Multilink PPP
� userName � username to test
� password � password to associate with username; password is optional�when omitted, the RADIUS access request has no User-Password attribute
� vrContext � virtual router context in which to authenticate the user
� aaa-profile � specifies the AAA profile for the user
� profileName � specifies the AAA profile name
� zero-stats � specifies that accounting statistics should be set to zero for this test
Mode(s): Privileged Exec
test ip bgp neighbor542
test ip bgp neighbor
Description: Tests BGP policy for routes advertised to or received from peers without implementing the policy. There is no no version.
Syntax: test ip bgp [ addressFamilyIdentifier ] neighbor { ipAddress | peerGroupName } {advertised-routes | routes } [ routeAddr [ routeMask [ route-rd distinguisher ] ] ][ distribute-list accessListName | filter-list asPathAccessListName [ weight weightValue ] | route-map mapTag | prefix-list prefixListName | prefix-tree prefixTreeName ][ fields { fieldOptions } ] [ filter ]
� addressFamilyIdentifier � type of address family, which determines the routing table for which information is displayed, in the format[ ipv4 { unicast | multicast } | vpnv4 { all | vrf vrfName } ]
� ipv4 unicast � the IPv4 unicast routing table; the default option
� ipv4 multicast � the IPv4 multicast routing table
� vpnv4 all � all IPv4 VPN routing and forwarding instances
� vpn4 vrf vrfname � the IPv4 VPN routing and forwarding instance with the name vrfname
� ipAddress � neighbor�s IP address
� peerGroupName � name of BGP peer group. If you specify a BGP peer group by using the peer-group-name argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
� advertised-routes � tests only outgoing advertisements to the specified neighbor
� routes � tests only the incoming advertisements from the specified neighbor
� routeAddr � prefix advertised by BGP
� routeMask �subnet mask associated with prefix; if not specified, a best match on routeAddr is performed
� distinguisher � unique two-part identifier of the format number1:number2 where:
� number1 � AS number or an IP address
� number2 � unique integer; 32 bits if number1 is an AS number; 16 bits if number1 is an IP address
If not specified, considers all destinations with the same routeAddress and routeMask.
� accessListName � name of an access list used as a distribute list to filter routes by prefix; string of up to 32 alphanumeric characters
test ip bgp neighborERX Edge Routers
543
� asPathAccessListName � name of a single AS path access list used to filter routes by AS path; string of up to 32 characters
� weightValue � weight to set for the filtered incoming route; an integer in the range 0�4294967295
� mapTag � name of a route map; a string of up to 32 alphanumeric characters
� prefixListName � name of a BGP prefix list used to filter routes by prefix
� prefixTreeName � name of a BGP prefix tree used to filter routes by prefix
� fields � displays only the specified fields
� fieldOptions � field(s) to be displayed, in the formatall | [ afi | aggregator | as-path | atomic-aggregate | best | clusters | communities | extended-communities | imported | intro | label | loc-pref | med | next-hop | next-hop-cost | origin | originator-id | peer | peer-type | rd | safi | unknown-types | weight ]*
� all � all available information; not recommended, as this information for each network does not fit on a single line and is difficult to read
� afi � address family identifier
� aggregator � AS number and IP address of aggregator
� as-path � AS path through which this route bas been advertised
� atomic-aggregate � whether the atomic aggregate attribute is present
� best � whether this is the best route for the prefix
� clusters � list of cluster IDs through which the route has been advertised
� communities � community number associated with the route
� extended-communities � extended community
� imported � whether the route was imported
� intro � introductory information about the state of various BGP attributes; this information is displayed only if you specify this keyword
� label � MPLS label
� loc-pref � local preference for the route
� med � multiexit discriminator for the route
� next-hop � IP address of the next router that is used when forwarding a packet to the destination network
� next-hop-cost � whether the indirect next hop of the route is unreachable, if not, displays IGP cost to the indirect next hop
� origin � origin of the route
� originator-id � router ID of the router in the local AS that originated the route
� peer � IP address of BGP peer from which route was learned
threshold544
� peer-type � type of BGP peer: internal, external, or confederation
� rd � route distinguisher
� safi � subsequent address family identifier
� unknown-types � attribute codes for unknown path attributes
� weight � weight of the route
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
� filter � see Filtering show Commands in About This Guide
Mode(s): Privileged Exec, User Exec
threshold
Description: Sets the threshold values for bit error rates used in APS/MSP alarms. The no version restores the default value, 6, for the specified alarm.
Syntax: threshold { sd-ber | sf-ber } rate
no threshold { sd-ber | sf-ber }
sd-ber � bit error rate that specifies signal degradation
sf-ber � bit error rate that specifies signal failure
rate � integer in the range 3�9; a value of n corresponds to a rate of 10-n (10e-n) errors per second
Mode(s): Controller Configuration
timeoutERX Edge Routers
545
timeout
Description: When used from RADIUS Configuration mode, specifies the interval, in seconds, before the system retransmits a RADIUS packet to an authentication or accounting server. The no version uses the default.
When used from RTR Configuration mode, specifies the timeout for a Response Time Reporter operation. The no version returns the operation to the default value. You can apply this parameter only to echo entries.
Syntax: RADIUS:
timeout waitTime
no timeout
� waitTime � specifies the number of seconds in the range 3�10. The default is 3.
RTR:
timeout timeoutValue
no timeout
� timeoutValue � number in milliseconds that the operation waits for a response; if the value is set to 0 or is larger than frequency, it will be ignored; the default is 5000 milliseconds
Mode(s): Radius Configuration, RTR Configuration
timeout login response
Description: Sets a time limit during which users must provide a password when they log into the console or a vty line. Specifying a value of 0 indicates that there is no time limit during which users must enter a password. The no version restores the default value, 30 seconds.
Syntax: timeout login response seconds
no timeout login response
� seconds � length of the timeout in the range 0�300 seconds
Mode(s): Line Configuration
timers546
timers
Description: Configures RIP timers. The no version restores the default values.
Syntax: timers update invalid holddown flush
no timers
� update � interval in seconds at which routing updates are sent. The default is 30.
� invalid � interval in seconds after which a route is declared invalid (null). The default is 180.
� holddown � interval in seconds during which routing information regarding better paths is disregarded by the system. The default is 120.
� flush � interval in seconds that must pass before a route is removed from the routing table. Set this value greater than the invalid value. The default is 300.
Mode(s): Router Configuration
timers bgp
Description: Sets keepalive and hold-time timers for all neighbors. The no version restores the default values.
Syntax: timers bgp keepaliveTime holdTime
no timers bgp [ keepaliveTime [ holdTime ] ]
� keepaliveTime � interval in seconds between keepalive messages; range is 0�65535 seconds; default is 30 seconds; a value of zero prevents BGP from sending keepalive messages
� holdTime � period in seconds that BGP waits for keepalive messages before declaring the neighbor to be unavailable; range is 0�65535 seconds; default is 90 seconds; a value of zero informs BGP not to expect any hold-time messages
Mode(s): Router Configuration
timers spf
Description: Configures the delay time between when OSPF receives a topology change and when it starts an SPF calculation and the hold time between two consecutive SPF calculations. The no version restores the default value.
Syntax: [ no ] timers spf holdTime
� holdTime � number in the range 1�5 seconds; default is 3seconds; the hold time between consecutive SPF calculations
Mode(s): Router Configuration
time-to-liveERX Edge Routers
547
time-to-live
Description: Specifies a hop count by setting the value of the time-to-live field used by packets sent to a RIP remote neighbor. The no version restores the default value.
Syntax: time-to-live ttlValue
no time-to-live
� ttlValue � number in the range 1�16; the default value is 16
Mode(s): Remote Neighbor Configuration
timing disable-auto-upgrade
Description: Disables the auto-upgrade feature of the system timing. The no version enables the auto-upgrade feature.
Syntax: [ no ] timing disable-auto-upgrade
Mode(s): Global Configuration
timing select
Description: Configures the preferred timing selector. There is no no version.
Syntax: timing select selector
� selector � timing selector
� primary � highest-priority preferred selection
� secondary � middle-priority preferred selection
� tertiary � lowest-priority preferred selection
Mode(s): Global Configuration
timing source548
timing source
Description: Configures the system�s timing sources. Only one of these timing sources can be an external source received via an interface on an I/O module other than the SRP I/O module; the other two must be either internal sources or external sources received via the SRP I/O modules. There is no no version.
Syntax: timing source selector { internal | line lineType |{ sonet | ds3 | ds1 | e1 | e3 } interfaceValue }
� selector � priority of the timing source; in descending order primary, secondary, or tertiary
� internal � internal SC oscillator
� line � external timing input on SRP module
� lineType � one of the following timing sources:
� e1:a � E1 clock, port A on SRP module
� e1:b � E1 clock, port B on SRP module
� t1:a � T1 clock, port A on SRP module
� t1:b � T1 clock, port B on SRP module
� sonet � specifies a SONET interface
� ds3 � specifies a DS3 interface
� ds1 � specifies a DS1 interface
� e1 � specifies an E1 interface
� e3 � specifies an E3 interface
� interfaceValue � interface specifier, in the form slot/port[:subPort]
Mode(s): Global Configuration
tos
Description: Defines a type of service byte in the RTR operation�s IP header. The no version returns the operation to the default value.
Syntax: tos tosValue
no tos
� tosValue � ToS byte in the IP header: 0�255; the default is 0 for both RTR types.
Mode(s): RTR Configuration
tracerouteERX Edge Routers
549
traceroute
Description: Discovers the paths that router packets follow when travelling to their destinations. There is no no version.
Syntax: traceroute [ vrf vrfName ] destination [ ttl maxTTLCount ] [ timeout timeOutVal ] [ data-size sizeValue ] [ source { interface interfaceType interfaceSpecifier | address sourceAddress } ] [ extended [ tos tosVal ] [ set-dont-fragment-bit ] [ interface iType iNumber ]
� vrfName � name of the VRF context
� destination � IP address or domain name of the trace
� maxTTLCount � maximum number of hops of the trace in the range 1�255; default is 32
� timeOutVal � time in seconds to wait for trace responses in the range 1�20; default is 2
� sizeValue � number of bytes comprising the IP packet and reflected in the IP header in the range 0�64000
� source interface � specifies an interface as the source for the transmitted packets
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
� source address � specifies an IP address as the source for the transmitted packets
� sourceAddress � IP address or domain name used as the source address
� extended � specifies extended IP header attributes
� tosVal � value of the ToS byte
� set-dont-fragment-bit � specifies the don�t-fragment bit
� iType � interface type
� iNumber � interface location
Mode(s): User Exec, Privileged Exec
traffic-class550
traffic-class
Description: In Policy Configuration mode, specifies a traffic class in a policy list for policy management. The no version removes a traffic class from a policy list. The suspend version temporarily suspends the policy rule.
In Global Configuration mode, configures a traffic class in the ERX system. In Traffic Class Group Configuration mode, specifies a traffic class that belongs to the traffic class group. The no version deletes the traffic class.
Syntax: In Policy Configuration mode:
[ no ] [ suspend ] traffic-class trafficClassName [ classifier-group claclName ] [ precedence precValue ]
� trafficClassName � name of the traffic class
� claclName � name of the classifier group
� precValue � precedence value in the range 0�32768
In Global Configuration and Traffic Class Group Configuration modes:
[ no ] traffic-class trafficClassName
� trafficClassName � name of the traffic class
Mode(s): Global Configuration, Policy Configuration, Traffic Class Group Configuration
traffic-class-group
Description: Configures a traffic class group. The no version deletes the selected traffic-class group.
Syntax: [ no ] traffic-class-group trafficClassGroupName
� trafficClassGroupName � name of the traffic class group
Mode(s): Global Configuration
translate
Description: Maps the original domain name to the mapped domain name for domain map lookup. The no version negates the command.
Syntax: translate domainName mappedDomainName
no translate domainName
� domainName � name of the domain; maximum of 64 characters
� mappedDomainName � name of the mapped domain name; maximum of 64 characters
Mode(s): AAA Profile Configuration
transmit-delayERX Edge Routers
551
transmit-delay
Description: Sets the estimated time it takes to transmit a link state update packet on the OSPF remote-neighbor interface. The no version restores the default value.
Syntax: transmit-delay transmDelay
no transmit-delay
� transmDelay � the link state transmit delay, a number in the range 0�3600 seconds; default value is 1 second
Mode(s): Remote Neighbor Configuration
triggered-update-disable
Description: Specifies that RIP does not send triggered routing updates. The no version restores the default condition, wherein RIP does send triggered updates.
Syntax: [ no ] triggered-update-disable
Mode(s): Router Configuration
ttl
Description: Specifies a hop count by setting the value of the time-to-live field used by packets sent to an OSPF remote neighbor. The no version restores the default value.
Syntax: ttl ttlValue
no ttl
� ttlValue � number in the range 1�255; the default value is 1
Mode(s): Remote Neighbor Configuration
tunnel
Description: Specifies an L2TP or L2F tunnel and changes the mode to Domain Map Tunnel Configuration. In Domain Map Tunnel Configuration mode, you can set the attributes of the tunnel. The no version deletes the L2TP or L2F tunnel configuration from the system.
Syntax: [ no ] tunnel tag
� tag � tunnel tag value in the range 1�31
Mode(s): Domain Map Configuration
tunnel checksum552
tunnel checksum
Description: Enables end-to-end checksum computation for GRE tunnels. The no version disables the checksum option.
Syntax: [ no ] tunnel checksum
Mode(s): Interface Configuration
tunnel destination
Description: For DVMRP or GRE, configures the tunnel endpoint for static tunnels.The no version deletes the endpoint.
For IPSec, configures the remote tunnel endpoint.
For MPLS in Interface Configuration mode, configures the tunnel endpoint for static MPLS tunnels.The no version deletes the endpoint.
For MPLS in Tunnel Profile Configuration mode, configures the source of tunnel endpoints (destinations) within a tunnel profile. You can specify that the endpoints are to be learned from BGP, IS-IS, or OSPF, or you can provide one or more IP addresses as the endpoint(s). If you specify the destination address, it must be the address of the MPLS interface or the router ID of the destination router. The no version deletes the endpoints.
Syntax: For DVMRP and GRE:
tunnel destination ipAddress | hostname
no tunnel destination
� ipAddress � IP address of the interface on the remote system
� hostname � name of the host that will serve as the tunnel endpoint
For IPSec:
tunnel destination ipAddress
no tunnel destination
� ipAddress � IP address of the interface on the remote system or the router ID of the destination router that serves as the tunnel endpoint
tunnel ip profileERX Edge Routers
553
For MPLS in Interface Configuration mode:
tunnel destination ipAddress
no tunnel destination
For MPLS in Tunnel Profile Configuration mode:
[ no ] tunnel destination{ ipAddress | ipAddress [ ipAddress ]* | { isis-level-2 | ospf-bdr } [ { access-list | prefix-list } listName ] }
� isis-level-2 � specifies IS-IS level-2 routers as acceptable destinations
� ospf-bdr � specifies OSPF border routers as acceptable destinations
� listName � name of access list or prefix list that contains the IP addresses that are acceptable as tunnel endpoints
� ipAddress � IP address of the interface on the remote system or the router ID of the destination router that serves as the tunnel endpoint; for a tunnel profile, you can list multiple addresses
� * � indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s): Interface Configuration, Tunnel Profile Configuration
tunnel ip profile
Description: Assigns an IP profile to the MPLS tunnel. The no mpls tunnels profile version removes the IP profile from the tunnel.
Syntax: tunnel ip profile ipProfileId
no tunnel ip profile
� ipProfileId � name of an IP profile
Mode(s): Tunnel Profile Configuration
tunnel lifetime554
tunnel lifetime
Description: Sets the lifetime of IPSec SAs running on this tunnel. You can specify the lifetime in seconds and/or volume of traffic. Before either limit is reached, the SA is renegotiated, ensuring that the tunnel does not go down before the renegotiation is finished. The no version sets the lifetime to the default lifetime defined by the ipsec lifetime command.
Syntax: tunnel lifetime { seconds seconds kilobytes kilobytes | seconds seconds | kilobytes kilobytes }
no tunnel lifetime { seconds | kilobytes }
� seconds � number of seconds security SAs on this tunnel live before expiring; the range is 7200�4284967295
� kilobytes � volume of traffic in kilobytes that can pass between the tunnel endpoints using a given SA before the SA expires; the range is 102400�4294967295
Mode(s): Interface Configuration
tunnel local-identity
Description: Specifies the local identity of the IPSec tunnel. The no version removes the local endpoint and sets the default identity, which is subnet 0.0.0.0 0.0.0.0.
Syntax: tunnel local-identity { address ipAddress | subnet ipAddress subnetMask | range ipAddressLow ipAddressHigh }
no tunnel local-identity
� address � specifies an IP address as the local identity
� subnet � specifies a subnet as the local identity
� range � specifies a range of IP addresses as the local identity
Mode(s): Interface Configuration
tunnel mpls affinityERX Edge Routers
555
tunnel mpls affinity
Description: Assigns an affinity to the tunnel. The no version removes the affinity from the tunnel.
Syntax: tunnel mpls [ traffic-eng ] affinity affinity [ mask mask ]
no tunnel mpls [ traffic-eng ] affinity
� traffic-eng � optional keyword for compatibility with non-ERX implementations
� affinity � attributes that must be configured on the interface in order to be considered by the tunnel; ranges from 0x0 to 0xFFFFFFFF; the default is 0x0
� mask � mask to identify attributes to be checked; a 1 signifies that the attribute value must match, a 0 signifies that the attribute value does not matter; ranges from 0x0 to 0xFFFFFFFF; the default is 0x0000FFFF
Mode(s): Interface Configuration, Tunnel Profile Configuration
tunnel mpls autoroute announce
Description: Configures the LSP tunnel to register its endpoint (the egress router) with the configured routing protocol. If you do not specify a routing protocol, the default is IS-IS and OSPF. The no version disables endpoint announcements.
Syntax: [ no ] tunnel mpls [ traffic-eng ] autoroute announce [ ospf | isis | bgp ]
� traffic-eng � optional keyword for compatibility with non-ERX implementations
� ospf � endpoint is announced to OSPF
� isis � endpoint is announced to IS-IS
� bgp � endpoint is announced to BGP
Mode(s): Interface Configuration, Tunnel Profile Configuration
tunnel mpls autoroute metric556
tunnel mpls autoroute metric
Description: Specifies the tunnel metric. The value determines tunnel preference when there is more than one tunnel or native IP path to a tunnel endpoint. A lower value is preferred to a higher value. When you set up multiple tunnels, if the primary tunnel goes down, the existing tunnel with the lowest metric is used immediately. If you specify an absolute value from 1�65535, this value overrides the metric for the path provided by the IGP. If you specify a relative value from -10 to +10, this value is subtracted from (-) or added to (+) the metric for the path provided by the IGP. The no version restores the default value of relative 0, meaning that the tunnel metric is the IGP value.
Syntax: tunnel mpls [ traffic-eng ] autoroute metric {absolute | relative} metricValue
no tunnel mpls [ traffic-eng ] autoroute metric
� traffic-eng � optional keyword for compatibility with non-ERX implementations
� absolute � metric is an absolute value
� relative � metric is a signed relative value
� metricValue � preference value for a path
Mode(s): Interface Configuration, Tunnel Profile Configuration
tunnel mpls bandwidth
Description: Specifies the bandwidth required for the tunnel. The no version removes the bandwidth constraint from the tunnel.
Syntax: tunnel mpls [ traffic-eng ] bandwidth bandwidth
no tunnel mpls [ traffic-eng ] bandwidth
� traffic-eng � optional keyword for compatibility with non-ERX implementations
� bandwidth � amount of bandwidth required for the tunnel in kilobits per second, a value ranging from 0�4294967295; the default value is 0
Mode(s): Interface Configuration, Tunnel Profile Configuration
tunnel mpls base-tunnel
Description: Stacks the tunnel on the specified MPLS base tunnel. The no version removes the tunnel from on top of the base tunnel.
Syntax: tunnel mpls base-tunnel baseName
no tunnel mpls base-tunnel
� baseName � name of the tunnel; up to 20 alphanumeric characters
Mode(s): Interface Configuration, Tunnel Profile Configuration
tunnel mpls descriptionERX Edge Routers
557
tunnel mpls description
Description: Associates a description with the MPLS tunnel. The no version deletes the description.
Syntax: tunnel mpls description textString
no tunnel mpls description
� textString � description or name of the tunnel; up to 40 alphanumeric characters
Mode(s): Interface Configuration, Tunnel Profile Configuration
tunnel mpls dynamic target
Description: Specifies that the tunnel is a targeted tunnel for MPLS to stack above a base LSP that is dynamically created by topology-driven LDP. The no version stops the tunnel from being dynamically stacked over a base LSP.
Syntax: [ no ] tunnel mpls dynamic target
Mode(s): Interface Configuration, Tunnel Profile Configuration
tunnel mpls ip propagate-ttl
Description: Controls the value for the TTL field in the MPLS header when a label is assigned to an IP packet. Enabled by default, this command sets the TTL to the TTL value from the IP packet header. Optionally controls how network structure is hidden from the traceroute command; by default the structure is revealed to forwarded and local packets. The no version sets the value to 255. The default version reverts to the settings configured at the global level; if none, reverts to the global default (causing the TTL field to be copied from the IP packet header, enabling the traceroute command to show all the hops in the network, and propagating the label TTL into the IP header at the tunnel egress).
Syntax: tunnel mpls ip propagate-ttl [ forwarded | local ]
{ no | default } tunnel mpls ip propagate-ttl [ forwarded | local ]
� forwarded � controls whether the network structure is revealed to or hidden from traceroute for forwarded packets
� local � controls whether the network structure is revealed to or hidden from traceroute for local packets
Mode(s): Interface Configuration
tunnel mpls label-dist558
tunnel mpls label-dist
Description: Specifies the label distribution protocol. The no version removes the label distribution protocol.
Syntax: tunnel mpls [ traffic-eng ] label-dist { cr-ldp | rsvp-te }
no tunnel mpls [ traffic-eng ] label-dist
� traffic-eng � optional keyword for compatibility with non-ERX implementations
� cr-ldp � sets the label distribution protocol to CR-LDP
� rsvp-te � sets the label distribution protocol to RSVP-TE
Mode(s): Interface Configuration, Tunnel Profile Configuration
tunnel mpls no-route retries
Description: Specifies for a particular tunnel the number of attempts that will be made to set up an LSP for CR-LDP and RSVP-TE after a failure due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful.
Syntax: tunnel mpls lsp no-route retries retryNum
no tunnel mpls lsp no-route retries
� retryNum � number of retry attempts from 0�65535
Mode(s): Interface Configuration, Tunnel Profile Configuration
tunnel mpls no-route retry-time
Description: Specifies for a particular tunnel the interval in seconds between attempts to set up an LSP for CR-LDP and RSVP-TE after a failure due to no available route. The no version restores the default value of 5 seconds.
Syntax: tunnel mpls lsp no-route retry-time retryTime
no tunnel mpls lsp no-route retry-time
� retryTime � interval from 1�60
Mode(s): Interface Configuration, Tunnel Profile Configuration
tunnel mpls path-optionERX Edge Routers
559
tunnel mpls path-option
Description: Specifies the path options for a tunnel. You can configure one or more path options�each identified by a unique number�for a given tunnel. The path option number expresses the preference for that option; lower numbers have a higher preference, with 1 having the highest preference. The no version deletes the path options.
Syntax: tunnel mpls [ traffic-eng ] path-option number { dynamic | explicit { name pathName | identifier idNumber } } [ hop-by-hop | ospf | isis ] [ lockdown ]
no tunnel mpls [ traffic-eng ] path-option number
� traffic-eng � optional keyword for compatibility with non-ERX implementations
� number � identifier for a set of path options
� dynamic � the path is dynamically calculated
� explicit � an explicit path is used
� pathName � name of the explicit path, a string of up to 20 characters
� idNumber � number identifying the explicit path, ranging from 1�65535
� hop-by-hop � specifies that hop-by-hop routing is used for this path option
� ospf � specifies that OSPF routing is used for this path option
� isis � specifies that IS-IS routing is used for this path option
� lockdown � specifies that optimization is not done for this path option
Mode(s): Interface Configuration, Tunnel Profile Configuration
tunnel mpls priority560
tunnel mpls priority
Description: Assigns a setup priority and optionally a hold priority to the tunnel. The priority can range from 0 (the highest) to 7 (the lowest). The hold priority, if set, must be equal to or better (lower numerically) than the setup priority. In the event of insufficient resources when a tunnel is being established, its setup priority is evaluated against the hold priorities of existing tunnels. Tunnels with lower hold priorities (higher values) are preempted and torn down to free their resources for the new tunnel. The no version removes the priority from the tunnel.
Syntax: tunnel mpls [ traffic-eng ] priority setupPriority [ holdPriority ]
no tunnel mpls [ traffic-eng ] priority
� traffic-eng � optional keyword for compatibility with non-ERX implementations
� setupPriority � priority for the tunnel as it is being established; the default value is 4
� holdPriority � priority for the tunnel after it has been established; the default value is equal to the configured value of the setup priority
Mode(s): Interface Configuration, Tunnel Profile Configuration
tunnel mpls lsp retries
Description: Specifies for a particular tunnel the number of attempts that will be made to set up an LSP for CR-LDP and RSVP-TE after a failure other than one due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful.
Syntax: tunnel mpls retries retryNum
no tunnel mpls retries
� retryNum � number of retry attempts from 0�65535
Mode(s): Interface Configuration, Tunnel Profile Configuration
tunnel mpls lsp retry-time
Description: Specifies for a particular tunnel the interval in seconds between attempts to set up an LSP for CR-LDP and RSVP-TE after a failure other than one due to no available route. The no version restores the default value of 5 seconds.
Syntax: tunnel mpls [ no-route ] retry-time retryTime
no tunnel mpls retry-time
� retryTime � interval from 1�60
Mode(s): Interface Configuration, Tunnel Profile Configuration
tunnel mpls vpn-idERX Edge Routers
561
tunnel mpls vpn-id
Description: Associates a tunnel with a VPN. Specify the same values for the VPN ID that you specified when you associated a VR with the VPN ID. The no version removes the VPN ID from the virtual router.
Syntax: [ no ] tunnel mpls vpn-id oui ouiNumber index ipAddress
� ouiNumber � identifies the OUI portion of the VPN ID, ranges from 0�16777215
� ipAddress � IP address that identifies the index portion of the VPN ID
Mode(s): Interface Configuration, Tunnel Profile Configuration
tunnel mtu
Description: Configures the maximum transmission unit size for the particular tunnel. The no version restores the default value: 1024 for DVMRP and GRE tunnels and 1440 for IPSec tunnels.
Syntax: tunnel mtu mtuSize
no tunnel mtu
� mtuSize � packet size allowed for transmission through the tunnel in the range: 1024�0240 bytes for DVMRP and GRE tunnels and 160�10240 for IPSec tunnels
Mode(s): Interface Configuration
tunnel password
Description: Configures a password for the L2TP tunnel. The no version removes the password.
Syntax: tunnel password tunnelPassword
no tunnel password
� tunnelPassword � password used for challenge response to the tunnel peer. In the domain map, it is used only by the LAC.
Mode(s): L2TP Destination Profile Host Configuration
tunnel peer-identity562
tunnel peer-identity
Description: Specifies the peer identity of the IPSec tunnel. The no version removes the peer endpoint.
Syntax: tunnel peer-identity { address ipAddress | subnet ipAddress subnetMask | range ipAddressLow ipAddressHigh }
no tunnel peer-identity
� address � specifies an IP address as the peer identity
� subnet � specifies a subnet as the peer identity
� range � specifies a range of IP addresses as the peer identity
Mode(s): Interface Configuration
tunnel pfs group
Description: Configures perfect forward secrecy for the IPSec tunnel by assigning a Diffie-Hellman prime modulus group. The no version removes PFS from this tunnel.
Syntax: tunnel pfs group { 1 | 2 | 5 }
no tunnel pfs group
� 1 � 768-bit Diffie-Hellman prime modulus group
� 2 � 1024-bit Diffie-Hellman prime modulus group
� 5 � 1536-bit Diffie-Hellman prime modulus group
Mode(s): Interface Configuration
tunnel sequence-datagrams
Description: Enables the use of GRE sequence numbers. The no version disables the use of GRE sequence numbers.
Syntax: [ no ] tunnel sequence-datagrams
Mode(s): Global Configuration
tunnel session-key-inboundERX Edge Routers
563
tunnel session-key-inbound
Description: Specifies the encryption and authentication algorithm set and session keys for manual inbound SAs. The no version removes the keys.
Syntax: tunnel session-key-inbound inSaAlgorithms { encryptKey authKey | authKey }
no tunnel session-key-inbound
� inSAalgorithms � algorithms to use for manual inbound SAs; use the online Help to see a list of available algorithms
� encryptKey � encryption key; up to 48 characters
� authKey � authentication key; up to 48 characters
Mode(s): Interface Configuration
tunnel session-key-outbound
Description: Specifies the encryption and authentication algorithm set, SPI, and session keys for manual outbound SAs. The no version removes the keys.
Syntax: tunnel session-key-outbound outSAalgorithms spi { encryptKey authKey | encryptKey | authKey }
no tunnel session-key-outbound
� outSAalgorithms � algorithms to use for manual outbound SAs; use the online Help to see a list of available algorithms
� spi � number that uniquely identifies an SA; the range is 256 to 4294967295 (0xFFFFFFFF)
� encryptKey � encryption key; up to 48 characters
� authKey � authentication key; up to 48 characters
Mode(s): Interface Configuration
tunnel signaling
Description: Sets the signaling protocol used to negotiate security parameters and keys. The no version restores the default, isakmp.
Syntax: tunnel signaling { isakmp | manual }
no tunnel signaling
� isakmp � uses ISAKMP/IKE to negotiate parameters
� manual � specifies that security parameters are configured manually
Mode(s): Interface Configuration
tunnel source564
tunnel source
Description: Configures the source for a DVMRP, GRE, or IPSec tunnel. The no version deletes the tunnel source.
Syntax: For DVMRP and GRE tunnels:
tunnel source { ipAddress | interfaceType interfaceSpecifier }
no tunnel source
For IPSec tunnels:
tunnel source ipAddress
no tunnel source
� ipAddress � IP address of an existing interface that will serve as the tunnel�s source
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Interface Configuration
tunnel transform-set
Description: Specifies a transform set that ISAKMP uses during SA negotiations on this tunnel. Transform sets used for manually configured tunnels can have only one transform. The no version removes the transform set from a tunnel.
Syntax: [ no ] tunnel transform-set transformSetName
� transformSetName � name of the transform set
Mode(s): Interface Configuration
typeERX Edge Routers
565
type
Description: For RTR Configuration, configures an RTR operation. The no version removes the configured type from the operation and resets all configuration for an RTR index.
Note: You must configure the operation�s type before you can configure any other characteristics of the operation.
For Domain Map Tunnel Configuration, specifies the type of tunnel as either L2TP or L2F. The no version restores the default value, L2TP.
Syntax: To configure an RTR operation:
[ no ] type rtrType protocol ipIcmpEcho destination [ source-ipaddr srcAddr | source ifType ifValue ]
� rtrType � one of the following types of operation:
� echo � performs end-to-end operation only
� pathEcho � discovers a path to the destination and echoes each device on the path
� destination � IP address or an IP hostname or domain name
� srcAddr � source IP address
� ifType � source�s type of interface (for example, FastEthernet)
� ifValue � interface identifier; for example, FastEthernet 0/0
To specify the type of tunnel:
Syntax: type { l2tp | l2f }
no type
Mode(s): RTR Configuration, Domain Map Tunnel Configuration
udp-port
Description: Specifies the UDP port on the system where the RADIUS authentication or accounting servers reside. The system uses this port to communicate with the RADIUS servers. The no version restores the default value.
Syntax: udp-port port
no udp-port
� port � one of the following port numbers:
� 1812 (default for RADIUS authentication servers)
� 1813 (default for RADIUS accounting servers)
Mode(s): Radius Configuration
undebug ip bgp566
undebug ip bgp
Description: Turns off the display of information previously enabled with the debug ip bgp command. There is no no version.
Syntax: undebug ip bgp [ in | out ] [ peerAddress [ peerAddressMask ] ][ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ]
� in � displays information for inbound events
� out � displays information for outbound events
� peerAddress � IP address of BGP peer for which information is displayed
� peerAddressMask � network mask of BGP peer for which information is displayed
� bgpLog � BGP log of interest; one of the following options:
� dampening � BGP dampening event; route is suppressed or no longer suppressed by route-flap dampening
� events � BGP finite state machine events and transitions
� keepalives � BGP keepalive message events
� updates � BGP routing table update events
� vpnv4 � BGP VPNv4 NLRI events
� import � displays BGP import processing events; appears only if you specify the vpnv4 keyword
� routerName � name of the virtual router that owns the BGP router for which information is being displayed
� filteringRouterName � name of the virtual router that owns the access class and route map parameters
� accessClassName � name of an access list to filter output
� mapName � name of a route map to filter output
Mode(s): Privileged Exec
undebug ip mbgpERX Edge Routers
567
undebug ip mbgp
Description: Turns off the display of information previously enabled with the debug ip mbgp command. There is no no version.
Syntax: undebug ip mbgp [ in | out ] [ peerAddress [ peerAddressMask ] ][ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ]
� in � displays information for inbound events
� out � displays information for outbound events
� peerAddress � IP address of BGP peer for which information is displayed
� peerAddressMask � network mask of BGP peer for which information is displayed
� bgpLog � BGP log of interest; one of the following options:
� dampening � BGP dampening event; route is suppressed or no longer suppressed by route-flap dampening
� events � BGP finite state machine events and transitions
� keepalives � BGP keepalive message events
� updates � BGP routing table update events
� vpnv4 � BGP VPNv4 NLRI events
� import � displays BGP import processing events; appears only if you specify the vpnv4 keyword
� routerName � name of the virtual router that owns the BGP router for which information is being displayed
� filteringRouterName � name of the virtual router that owns the access class and route map parameters
� accessClassName � name of an access list to filter output
� mapName � name of a route map to filter output
Mode(s): Privileged Exec
undebug ip pim
Description: Turns off the display of information previously enabled with the debug ip pim command. There is no no version.
Syntax: undebug ip pim pimLog
� pimLog � PIM log of interest
Mode(s): Privileged Exec
undebug ip ospf568
undebug ip ospf
Description: Turns off the display of information for the selected variable. See debug ip ospf command for a complete list of the ospfLog variables. There is no no version.
Syntax: undebug ip ospf ospfLog
� ospfLog � OSPF log of interest; one of the following options:
� adj � OSPF adjacency events
� elect-dr � OSPF designated router election
� events � OSPF general events
� lsa � OSPF link state advertisements events
� neighbor � OSPF neighbor state machine
� packets-rcvd � OSPF packets received
� packets-sent � OSPF packets sent
� route � OSPF route events
� spf � all OSPF shortest path first calculation events
� spf-ext � OSPF shortest path first external route calculation events
� spf-inter � OSPF shortest path first interarea route calculation events
� spf-intra � OSPF shortest path first intra-area route calculation events
Mode(s): Privileged Exec
undebug ip rip
Description: Turns off the display of information previously enabled with the debug ip rip command. There is no no version.
Syntax: undebug ip rip ripLog
� ripLog � RIP log of interest; one of the following options:
� events � general RIP events, such as removing RIP from an interface or creating the RIP process
� route � events associated with two RIP routers exchanging routes
Mode(s): Privileged Exec
undebug isisERX Edge Routers
569
undebug isis
Description: Turns off the display of information for the selected variable. See the debug isis command for a complete list of the IS-IS log variables. There is no no version.
Syntax: undebug isis isisLog
� isisLog � IS-IS log of interest; one of the following options:
� adj-packets � IS-IS adjacency-related packets, such as hello packets sent and IS-IS received adjacencies going up and down
� mpls traffic-eng advertisements � MPLS traffic-engineering agent advertisements
� mpls traffic-eng agents � MPLS traffic-engineering agents
� snp-packets � IS-IS CSNPs/PSNPs
� spf-events � shortest path first events
� spf-statistics � SPF timing and statistic data
� spf-triggers � SPF triggering events
� update-packets � update-related packets
Mode(s): Privileged Exec
unframed
Description: Configures an unchannelized line for a CE1 interface.The no version switches the interface to the default crc4 framing mode and deletes channel group 1.
Syntax: [ no ] unframed
Mode(s): Controller Configuration
update-source570
update-source
Description: Specifies the loopback interface whose local address is used as the source address for the OSPF, PIM, or RIP connection to a remote neighbor. The no version deletes the source address from the connection.
Syntax: For OSPF:
[ no ] update-source loopback interfaceSpecifier
� interfaceSpecifier � integer in the range 1�4294967293 identifying the loopback interface
For PIM
[ no ] update-source interfaceType interfaceSpecifier
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
For RIP:
[ no ] update-source interfaceType interfaceSpecifier
� interfaceType � interface type; see Interface Types and Specifiers in About This Guide
� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s): Remote Neighbor Configuration
version
Description: Specifies the global RIP version. The no version reverts to the default value, RIP version 1. Use the ip rip receive and ip rip send version commands to specify the RIP version for a specific interface.
Syntax: version versionNumber
no version
� versionNumber � RIP version number
Mode(s): Router Configuration
virtual-routerERX Edge Routers
571
virtual-router
Description: When used from Domain Map Configuration mode, maps a virtual router to a user domain name. The no version deletes the virtual-router parameter, and the system defaults to the default virtual router.
When used from Privileged Exec or Global Configuration mode, creates a virtual router or accesses the context of a previously created virtual router or a VRF. The no version deletes the virtual router, and the system defaults to the default virtual router. Issuing a no version that specifies an existing VRF only displays the error message: �Cannot delete a VRF with this command�; you must use the no ip vrf command to remove a VRF.
Syntax: Mapping to a user domain name:
virtual-router vrName
no virtual-router [ vrName ]
Creating a virtual router or accessing a virtual router or VRF:
virtual-router vrName | :vrfName | vrName:vrfName
no virtual-router vrName
� vrName � name of the virtual router; a string of 1�15 alphanumeric characters
� :vrfName � specifies a VRF in the current VR context; a string of 1�32 alphanumeric characters
� vrName:vrfName � specifies a VRF in the context of a VR other than the current VR
Mode(s): Domain Map Configuration, Privileged Exec, Global Configuration
vlan description
Description: Assigns an alias or description to a VLAN subinterface.
Syntax: vlan description aliasName
no vlan description
� aliasName � the alias or description; up to 64 characters
Mode(s): Interface Configuration
vlan id572
vlan id
Description: Specifies a VLAN ID. There is no no version.
Syntax: vlan id IdValue [ untagged ]
� idValue � number in the range of 0�4095, which is unique within the Ethernet interface
� untagged � specifies that frames be sent untagged; only valid for VLAN ID 0
Mode(s): Interface Configuration
weight
Description: Sets the weighted round-robin weight of the scheduler node or queue. The no version sets the weight to the default value.
Syntax: weight weightValue
no weight
� weightValue � number in the range 1�63; default is 8
Mode(s): Scheduler Profile Configuration
write memory
Description: Saves all outstanding (unsaved) configuration changes to nonvolatile storage; an exact alias of the copy running-configuration startup-configuration command. Available if the system is in either Automatic Commit mode or Manual Commit mode. If issued while in Automatic Commit mode, the CLI notifies you that the command is not necessary, but allows you to proceed. There is no no version.
Syntax: write memory
Mode(s): Privileged Exec
yellow
Description: Generates or detects a yellow alarm for a T1 controller. The no version restores the default value, to not generate or to not detect a yellow alarm.
Syntax: [ no ] yellow { generate | detect }
Mode(s): Controller Configuration
Index
AAAA commands
aaa accounting acct-stop on-aaa-failure 1aaa accounting acct-stop on-access-deny 1aaa accounting duplication 1aaa accounting interval 2aaa accounting ppp default 2aaa authentication enable default 3aaa authentication login 3aaa authentication ppp default 4aaa delimiter 4aaa dns 5aaa domain-map 5aaa duplicate-address-check 5aaa new-model 6aaa parse-order 6aaa subscriber limit per-port 7aaa subscriber limit per-vr 7aaa timeout 7aaa tunnel assignment-id-format 8aaa tunnel client-name 8aaa tunnel ignore 8aaa tunnel password 9aaa wins 9baseline aaa 56login authentication 246show aaa 392show aaa accounting 392show aaa accounting interval 393show aaa delimiters 393show aaa domain-map 393show aaa duplicate-address-check 393show aaa model 393show aaa name-servers 394show aaa statistics 394show aaa subscriber per-port-limit 394show aaa subscriber per-vr-limit 394show aaa timeout 395show aaa tunnel-parameters 395test aaa 541
AAA profile commandsaaa profile 6allow 29deny 122
ppp aaa-profile 342show aaa profile 394translate 550
APS/MSP commandsaps force 29aps group 30aps lockout 30aps manual 30aps protect 31aps revert 31aps unidirectional 31aps working 32show aps 395threshold 544
ARP commandsarp 40arp timeout 41clear arp 89ip proxy-arp 200show arp 396
ATM commandsatm 41atm aal5 description 41atm aal5 shutdown 42atm aal5 snmp trap link-status 42atm atm1483 description 42atm atm1483 mtu 42atm atm1483 shutdown 43atm atm1483 snmp trap link-status 43atm auto-configuration 43atm cac 43atm clock internal 44atm description 44atm esi-address 44atm framing 45atm ilmi-enable 45atm ilmi-keepalive 45atm lbo 46atm oam 46atm oam flush 47atm oam loopback-location 47atm pvc 48atm shutdown 49atm snmp trap link-status 49
Index2
atm sonet stm-1 49atm svc 50atm uni-version 50atm vc-per-vp 51atm vp-tunnel 51auto-configure 53baseline interface atm 59ds3-scramble 130e3-scramble 133interface atm 161ip atm-vc 169load-interval 238loopback 247map-group 251map-list 251ping atm interface atm 340show atm aal5 interface 396show atm interface 397show atm map 397show atm oam 397show atm ping 398show atm subinterface 398show atm vc 399show atm vc atm 399show atm vp-tunnel 400show interfaces 424show nbma arp 489shutdown 511
BBGP commands
address-family 19aggregate-address 28auto-summary 54baseline ip bgp 59bgp advertise-inactive 67bgp always-compare-med 68bgp bestpath med confed 68bgp bestpath missing-as-worst 68bgp client-to-client reflection 68bgp cluster-id 69bgp confederation identifier 69bgp confederation peers 69bgp dampening 70bgp default ipv4-unicast 70bgp default local-preference 71bgp enforce-first-as 71bgp fast-external-fallover 71bgp log-neighbor-changes 72bgp maxas-limit 72
bgp redistribute-internal 72bgp router-id 72bgp shutdown 73clear access-list 88clear ip bgp 90clear ip bgp dampening 91clear ip bgp redistribution 91debug ip bgp 110debug ip mbgp 112default-fields peer 117default-fields route 118disable-dynamic-redistribute 124distance bgp 126exit-address-family 142ip as-path access-list 168ip bgp-community new-format 169ip bgp-confed-as-set new-format 169ip community-list 170ip extcommunity-list 178limits 235match as-path 253match community 253match distance 254match extcommunity 254match ip address 255match ip next-hop 255match level 256match metric 256match metric-type 256match route-type 257match tag 258maximum-paths 258neighbor activate 283neighbor advertisement-interval 284neighbor allowas-in 284neighbor as-override 285neighbor capability 286neighbor default-originate 287neighbor description 287neighbor distribute-list 288neighbor ebgp-multihop 288neighbor filter-list 289neighbor local-as 290neighbor maximum-prefix 290, 291neighbor maximum-update-size 291neighbor next-hop-self 292neighbor password 292neighbor peer-group 293neighbor prefix-list 293neighbor prefix-tree 294
ERX Edge Routers3
neighbor remote-as 294neighbor remove-private-as 295neighbor rib-out disable 295neighbor route-map 296neighbor route-reflector-client 296neighbor send-community 297neighbor shutdown 297neighbor soft-reconfiguration inbound 298neighbor timers 298neighbor unsuppress-map 299neighbor update-source 299neighbor weight 300network 302overload shutdown 311redistribute 363rib-out disable 371router bgp 372set as-path prepend 383set comm-list delete 383set community 384set dampening 385set extcommunity 387set ip next-hop 388set local-preference 389set metric 389set metric-type 390set origin 390set tag 391set weight 392show ip as-path access-list 425show ip bgp 426show ip bgp advertised-routes 428show ip bgp aggregate-address 428show ip bgp cidr-only 429show ip bgp community 429show ip bgp community-list 430show ip bgp dampened-paths 430show ip bgp filter-list 430show ip bgp flap-statistics 431show ip bgp inconsistent-as 431show ip bgp neighbors 431show ip bgp neighbors dampened-routes 432show ip bgp neighbors paths 432show ip bgp neighbors received
prefix-filter 432show ip bgp neighbors received-routes 433show ip bgp neighbors routes 433show ip bgp network 434show ip bgp next-hops 434show ip bgp paths 434
show ip bgp peer-group 435show ip bgp quote-regexp 436show ip bgp regexp 438show ip bgp summary 440show ip community-list 441show ip extcommunity-list 446synchronization 527table-map 535test ip bgp neighbor 542timers bgp 546undebug ip bgp 566undebug ip mbgp 567
BGP/MPLS VPN commandsaddress-family 19bgp default route-target filter 71clear ip routes vrf 94domain-id 128domain-tag 130exit-address-family 142export-map 142import-map 160ip dynamic-interface-prefix 177ip mpls forwarding-mode label-switched 190ip mpls vpn-interface per-label 190ip share-interface 206ip share-nexthop 206ip vrf 211ip vrf forwarding 212maximum routes 259rd 362route-target 374show ip protocols 460show ip vrf 467
booting commandsboot backup 73boot config 74boot force-backup 74boot revert-tolerance 75boot revert-tolerance never 75boot slot 75boot subsystem 76boot system 76check-disk 85delete 121flash-disk duplicate 145flash-disk initialize 145flash-disk scan 146reload 368reload slot 368show boot 400
Index4
show last-reset 478show reload 501
B-RAS commandsaaa accounting acct-stop on-aaa-failure 1aaa accounting acct-stop on-access-deny 1aaa accounting duplication 1aaa accounting interval 2aaa accounting ppp default 2aaa authentication ppp default 4aaa delimiter 4aaa dns 5aaa domain-map 5aaa duplicate-address-check 5aaa parse-order 6aaa profile 6aaa subscriber limit per-port 7aaa subscriber limit per-vr 7aaa timeout 7aaa tunnel assignment-id-format 8aaa tunnel client-name 8aaa tunnel ignore 8aaa tunnel password 9aaa wins 9address 11address-pool-name 22allow 29baseline aaa 56baseline dhcp 57baseline local pool 63baseline radius 65baseline tacacs 66deadtime 109deny 122identification 159ip address-pool 167ip dhcp-server 173ip-hint 179ip local pool 188ip local pool snmpTrap 188ip local pool warning 189key 223license b-ras 234logout subscribers 246loopback 247max-sessions 260medium ipv4 262override-user 312password 314ppp aaa-profile 342preference 349
profile 350radius acct-session-id-format 352radius algorithm 353radius calling-station-delimiter 353radius calling-station-format 354radius dsl-port-type 355radius ethernet-port-type 355radius ignore framed-ip-netmask 355radius include 356radius nas-identifier 358radius nas-port-format 358radius override nas-ip-addr
tunnel-client-endpoint 358radius rollover-on-reject 359radius server 359radius trap acct-server-not-responding 359radius trap auth-server-not-responding 359radius trap no-acct-server-responding 360radius trap no-auth-server-responding 360radius tunnel-accounting 360radius udp-checksum 360radius update-source-addr 361retransmit 370set dhcp relay 386show aaa 392show aaa accounting 392show aaa accounting interval 393show aaa delimiters 393show aaa domain-map 393show aaa duplicate-address-check 393show aaa model 393show aaa name-servers 394show aaa profile 394show aaa statistics 394show aaa subscriber per-port-limit 394show aaa subscriber per-vr-limit 394show aaa timeout 395show aaa tunnel-parameters 395show cops info 412show dhcp 413show ip local pool 451show license b-ras 479show radius 497show radius acct-session-id-format 497show radius algorithm 497show radius attributes-ignored 498show radius attributes-included 498show radius calling-station-delimiter 498show radius calling-station-format 498show radius dsl-port-type 499
ERX Edge Routers5
show radius ethernet-port-type 499show radius nas-identifier 499show radius nas-port-format 499show radius override 499show radius rollover-on-reject 500show radius tunnel-accounting 500show radius udp-checksum 500show radius update-source-addr 500show sscc info 506show sscc version 506show statistics tacacs 506show subscribers 507show tacacs 508sscc address 523sscc enable 523sscc retryTimer 523sscc sourceAddress 523sscc transportRouter 524strip-domain 524subscriber 525tacacs-server host 535tacacs-server key 536tacacs-server source-address 536tacacs-server timeout 536test aaa 541timeout 545translate 550tunnel 551type 565udp-port 565virtual-router 571
Bridged Ethernet commandsip mac-validate 189show ip mac-validate 451
bridged IP commandsencapsulation bridge1483 135set dhcp relay 386show dhcp relay 413
CCBF commands
baseline CBF interface 56cbf 82cbf connection 83cbf shutdown 83clear CBF interface 89show cbf connection 403show cbf interface 403
CE1 commandsbert 67
channel-group timeslots 84controller e1 104interface serial 165lineCoding 237load-interval 238loopback 247mru 280mtu 281show controllers e1 411show interfaces serial 424shutdown 511unframed 569
Cisco HDLC commandsbaseline hdlc interface 58encapsulation hdlc 136hdlc down-when-looped 155hdlc keepalive 155hdlc shutdown 155show hdlc interface 422show interfaces serial 424
CLI commands. See user interface commandsCLNS commands
clns configuration-time 96clns holding-time 96clns host 97show clns 404show clns interface 405show clns neighbors 405show clns protocol 405show clns traffic 406
cOCx/STMx commandsbaseline line interface sonet 63baseline path interface sonet 64baseline section interface sonet 65controller sonet 104interface serial 165loopback 247mru 280mtu 281path 315path ds1|e1 316path ds1|e1 bert 317path ds1|e1 channel-group shutdown 317path ds1|e1 channel-group snmp trap
link-status 318path ds1|e1 channel-group timeslots 318path ds1|e1 clock source 319path ds1|e1 framing 319path ds1|e1 loopback 320path ds1|e1 shutdown 321
Index6
path ds1|e1 snmp trap link-status 321path ds1 fdl 321path ds1 fdl carrier 322path ds1 fdl string 322path ds1 fdl transmit 323path ds1 remote-loopback 323path ds3 323path ds3 clock source 324path ds3 framing 324path ds3 loopback 325path ds3 mdl carrier 325path ds3 mdl string 326path ds3 mdl transmit 327path ds3 shutdown 327path ds3 snmp trap link-status 327path ds3 t1 328path ds3 t1 bert 328path ds3 t1 clock source 329path ds3 t1 fdl 330path ds3 t1 fdl carrier 330path ds3 t1 fdl string 331path ds3 t1 fdl transmit 332path ds3 t1 framing 329path ds3 t1 loopback 333path ds3 t1 remote-loopback 334path ds3 t1 shutdown 334path ds3 t1 snmp trap link-status 334path ds3 t1 timeslots 335path e1 unframed 335path overhead j1 336path snmp trap link-status 336sdh 379show controllers sonet 408show controllers sonet remote 410show interfaces 424shutdown 511
CT1 commandsbert 67cablelength short 82channel-group shutdown 83channel-group snmp trap link-status 84controller t1 105fdl 143fdl carrier 143fdl string 144fdl transmit 144interface serial 165invert data 166j1 223lineCoding 237
load-interval 238loopback 247mru 280mtu 281remote-loopback 369show controllers t1 411show controllers t1 remote 411show interfaces serial 424shutdown 511yellow 572
CT3 commandsloopback 247mdl carrier 260mdl string 261mdl transmit 261mru 280mtu 281show controllers t3 412show controllers t3 remote 412show interfaces serial 424shutdown 511snmp trap link-status 513t1 bert 528t1 clock source 529t1 fdl 529t1 fdl carrier 530t1 fdl string 530t1 fdl transmit 531t1 framing 531t1 lineCoding 531t1 loopback 532t1 remote-loopback 533t1 shutdown 533t1 snmp trap link-status 533t1 timeslots 534t1 yellow 534
customer support xviii
DDHCP local server commands
ip dhcp-local cable-modem 171link 238network 302reserve 370server-address 381show ip dhcp-local cable-modem 441show ip dhcp-local excluded 442show ip dhcp-local pool 442show ip dhcp-local reserved 442
ERX Edge Routers7
DNS commandsip domain-lookup 174ip domain-name 174ip name-server 191show ip domain-lookup 443
DVMRP commandsbaseline ip dvmrp 60clear ip dvmrp routes 91disable 123disable-dynamic-redistribute 124ip dvmrp 174ip dvmrp accept-filter 175ip dvmrp announce-filter 175ip dvmrp auto-summary 175ip dvmrp disable 176ip dvmrp metric-offset 176ip dvmrp routehog-notification 176ip dvmrp route-limit 176ip dvmrp summary-address 177ip dvmrp unicast-routing 177redistribute 363router dvmrp 373show dvmrp tunnel 413show dvmrp tunnel summary 414show ip dvmrp 443show ip dvmrp interface 444show ip dvmrp mroute 444show ip dvmrp neighbor 445show ip dvmrp route 445show ip dvmrp routeNextHop 446tunnel destination 552
EE3 commands
atm framing 45clock source 98controller e3 104framing 152load-interval 238loopback 247mru 280mtu 281show controllers e3 407shutdown 511
E3-Frame command, interface serial 165Ethernet commands
baseline interface fastEthernet 59baseline interface gigabitEthernet 59duplex 132ethernet description 138
interface fastEthernet 162interface gigabitEthernet 163ip mac-validate 189mtu 281show interfaces 424show ip mac-validate 451shutdown 511speed 521svlan ethertype 527svlan id 527
FFast Ethernet command, load-interval 238file management commands
copy 106copy running-configuration 106copy running-configuration
startup-configuration 107copy startup-configuration 107host 157rename 370write memory 572
Frame Relay commandsbaseline frame-relay interface 57encapsulation ietf 136frame-relay class 146frame-relay description 147frame-relay fragment 147frame-relay interface-dlci ietf 147frame-relay intf-type 148frame-relay keepalive 148frame-relay lmi-n391dte 148frame-relay lmi-n392dce 149frame-relay lmi-n392dte 149frame-relay lmi-n393dce 149frame-relay lmi-n393dte 150frame-relay lmi-t391dte 150frame-relay lmi-t392dce 150frame-relay lmi-type 151map-class frame-relay 250show frame-relay interface 415show frame-relay lip 416show frame-relay lmi 417show frame-relay map 417show frame-relay multilinkInterface 418show frame-relay pvc 418show frame-relay subinterface 419show frame-relay summary 419shutdown 511
Index8
FTP client commandsip ftp source-address 179ip ftp source-interface 179
FTP server commandsdelete 121ftp-server enable 153show ftp-server 419show users 509
GGRE commands
show gre tunnel 420show gre tunnel summary 420tunnel destination 552
HHDLC commands, Cisco
baseline hdlc interface 58encapsulation hdlc 136hdlc down-when-looped 155hdlc keepalive 155hdlc shutdown 155show hdlc interface 422show interfaces serial 424
HSSI commandsclock rate 97crc 108hssi force-dte-acknowledge 158hssi internal-clock 158interface hssi 164invert data 166load-interval 238mru 280mtu 281show interfaces 424shutdown 511snmp trap link-status 513
IIGMP commands
baseline ip igmp 60baseline ip igmp-proxy interface 60igmp disable 159igmp promiscuous 159ip igmp 182ip igmp access-group 183ip igmp group limit 183ip igmp immediate-leave 183ip igmp last-member query-interval 184
ip igmp promiscuous 184ip igmp querier 185ip igmp querier-timeout 186ip igmp query-interval 186ip igmp query-max-response-time 186ip igmp robustness 187ip igmp static-group 187ip igmp version 187multicast group port limit 282router igmp 373show ip igmp 447show ip igmp groups 448show ip igmp interface 448show multicast group limit 489See also IGMP Proxy commands
IGMP Proxy commandsip igmp-proxy 184ip igmp-proxy unsolicited-report-interval 185ip igmp-proxy V1-router-present-time 185show ip igmp-proxy 448show ip igmp-proxy groups 449show ip igmp-proxy interface 449
interface commandsbaseline interface serial 59baseline ip interface 61clear ip interface 92interface 161interface ip 164interface loopback 164interface mlframe-relay 164interface mlppp 165interface null 165interface pos 165interface serial 165interface tunnel 166ip address 167ip alwaysup 167ip broadcast-address 169ip debounce-time 171ip dynamic-interface-prefix 177ip redirects 200ip share-interface 206ip share-nexthop 206ip shutdown 206show interfaces 424show ip interface 450show ip interface shares 450show ip interface vrf 451show ip vrf interfaces 467snmp trap ip link-status 513
ERX Edge Routers9
IP commandsarp 40arp timeout 41baseline ip 59baseline ip tcp 62baseline ip udp 62baseline ip vrrp 62baseline show-delta-counts 66clear access-list 88clear arp 89clear ip prefix-list 93clear ip prefix-tree 94clear ip rip redistribution 94clear ip routes 94distance 125ip access-routes 166ip address 167ip address-pool 167ip alwaysup 167ip as-path access-list 168ip broadcast-address 169ip community-list 170ip debounce-time 171ip demux-type da-prefix 171ip destination-prefix 171ip dhcp-server 173ip directed-broadcast 173ip disable-forwarding 173ip explicit-path. See MPLS commands: mpls
explicit-pathip extcommunity-list 178ip ignore-df-bit 187ip interface. See IP commands: no ip interfaceip irdp 188ip local pool 188ip local pool snmpTrap 188ip local pool warning 189ip mac-validate 189ip mask-reply 189ip mtu 190ip multipath round-robin 191ip prefix-list 199ip prefix-tree 200ip proxy-arp 200ip redirects 200ip refresh-route 201ip rip commands. See RIP commandsip route 203ip router-id 204ip rsvp bandwidth. See mpls bandwidth
ip sa-validate 205ip shutdown 206ip source-prefix 206ip source-route 207ip speed 207ip ssh. See SSH commandsip ttl 210ip tunnel reassembly 210ip unnumbered 210ip unreachables 210ip virtual-router 211ip vrrp 212ip vrrp advertise-interval 212ip vrrp authentication-key 213ip vrrp authentication-type 213ip vrrp enable 213ip vrrp preempt 213ip vrrp priority 214ip vrrp virtual-address 214no ip interface 305ping 338profile 350route-map 372router rip 374show access-list 395show arp 396show ip 424show ip address 424show ip as-path-access-list 425show ip demux interface 441show ip domain-lookup 443show ip dynamic-interface-prefix 446show ip explicit-paths. See MPLS commands:
show mpls explicit-pathsshow ip extcommunity-list 446show ip forwarding-table slot 447show ip interface 450show ip interface shares 450show ip mac-validate 451show ip prefix-list 459show ip prefix-list summary | detail 459show ip prefix-tree 459show ip prefix-tree summary | detail 460show ip profile 460show ip protocols 460show ip redistribute 460show ip route 463show ip route slot 464show ip rpf-route 464show ip ssh 465
Index10
show ip static 465show ip tcp statistics 465show ip traffic 466show ip tunnel reassembly statistics 466show ip udp statistics 466show ip vrrp 467show ip vrrp brief 467show ip vrrp neighbor 468show ip vrrp statistics 468show ip vrrp summary 468show profile 495show profile brief 495show route-map 501timers 546traceroute 549ip-hint 179
IP multicast commandsip multicast-routing 190ip rpf-route 205mtrace 281show ip mroute 452show ip multicast protocols 452show ip multicast routing 452
IPSec commandsaggressive-mode 28authentication 51encryption 137group 153hash 154ipsec clear sa 214ipsec isakmp-policy-rule 215ipsec key manual 215ipsec lifetime 215ipsec local-endpoint 216ipsec transform-set 216license ipsec-tunnels 234lifetime 234show ike policy-rule 423show ike sa 423show ipsec lifetime 469show ipsec local-endpoint 469show ipsec transform-set 469show ipsec tunnel 470show ipsec tunnel summary 470show license ipsec-tunnels 479tunnel lifetime 554tunnel local-identity 554tunnel mtu 561tunnel peer-identity 562tunnel pfs group 562
tunnel session-key-inbound 563tunnel session-key-outbound 563tunnel signaling 563tunnel source 564tunnel transform-set 564
IP tunnel commandsshow gre tunnel 420show gre tunnel summary 420tunnel checksum 552tunnel mtu 561tunnel source 564
IS-IS commandsarea-authentication-key 32area-message-digest-key 34baseline clns 56clear ip isis redistribution 92clear isis adjacency 95clear isis database 95clns configuration-time 96clns holding-time 96clns host 97debug isis 116disable-dynamic-redistribute 124distance ip 126distribute-domain-wide 126domain-authentication-key 128domain-message-digest-key 128ignore-lsp-errors 160ip router isis 204ip route-type 204isis authentication-key 216isis circuit-type 217isis csnp-interval 217isis hello-interval 218isis hello-multiplier 218isis lsp-interval 219isis mesh-group 219isis message-digest-key 220isis metric 221isis priority 221isis retransmit-interval 221isis retransmit-throttle-interval 222is-type 222log-adjacency-changes 240lsp-gen-interval 249lsp-mtu 249lsp-refresh-interval 249maximum-paths 258max-lsp-lifetime 259metric-style narrow 263
ERX Edge Routers11
metric-style transition 264metric-style wide 264mpls spf-use-any-best-path 276mpls traffic-eng 277mpls traffic-eng router-id 280net 300passive-interface 313redistribute 363redistribute isis ip 365router isis 373set-overload-bit 391show clns 404show clns interface 405show clns neighbors 405show clns protocol 405, 406show host 423show isis database 471show isis mpls adjacency-log 471show isis mpls advertisements 471show isis mpls tunnel 472show isis spf-log 472show isis summary-addresses 472show isis topology 472spf-interval 522summary-address 526suppress-default 526undebug isis 569
Kkeepalive commands
hdlc keepalive 155ppp keepalive 344
LL2F commands
client-name 96l2f checksum 223l2f destruct-timeout 224l2f drain 224l2f drain destination 224l2f drain tunnel 225l2f ignore-receive-data-sequencing 225l2f shutdown 226l2f shutdown destination 226l2F shutdown session 226l2f shutdown tunnel 227show l2f 473show l2f destination 473show l2f destination summary 473
show l2f session 474show l2f session summary 474show l2f tunnel 475show l2f tunnel summary 475type 565
L2TP commandsaaa tunnel assignment-id-format 8address 11client-name 96disable proxy lcp 124enable proxy authenticate 134l2tp checksum 227l2tp destination profile 228l2tp destruct-timeout 228l2tp drain 228l2tp drain destination 229l2tp drain tunnel 229l2tp ignore-receive-data-sequencing 230l2tp retransmission 230l2tp shutdown 230l2tp shutdown destination 231l2tp shutdown session 231l2tp shutdown tunnel 232l2tp tunnel idle-timeout 232l2tp tunnel-switching 232l2tp tunnel test 233local host 238local ip address 239max-sessions 260remote host 369server name 381show dhcp 413show l2tp 475show l2tp destination 476show l2tp destination profile 476show l2tp destination summary 476show l2tp session 477show l2tp session summary 477show l2tp tunnel 478show l2tp tunnel summary 478source-address 520tunnel 551tunnel password 561type 565
Mmanagement commands, system
bandwidth oversubscription 55copy running-configuration
startup-configuration 106, 107
Index12
copy startup-configuration 107service manual-commit 382write memory 572
MFR commandsbaseline frame-relay interface 57baseline frame-relay multilink interface 58encapsulation ietf 136frame-relay interface-dlci ietf 147frame-relay intf-type 148frame-relay keepalive 148frame-relay lmi-n391dte 148frame-relay lmi-n392dce 149frame-relay lmi-n392dte 149frame-relay lmi-n393dce 149frame-relay lmi-n393dte 150frame-relay lmi-t391dte 150frame-relay lmi-t392dce 150frame-relay lmi-type 151interface mlframe-relay 164member-interface 262show frame-relay interface 415show frame-relay lip 416show frame-relay lmi 417show frame-relay map 417show frame-relay multilinkInterface 418show frame-relay pvc 418show frame-relay subinterface 419show frame-relay summary 419
MLPPP commandsencapsulation mlppp 136interface mlppp 165member-interface 262
MPLS commandsappend-after 29bandwidth 55cleanup-timeout-factor 88clear mpls ldp 95cr-ldp 108hello hold-time 155index 160interface tunnel 166ip explicit-path. See mpls explicit-pathip rsvp bandwidth. See mpls bandwidthip vpn-id 211list 238mpls 265mpls atm vci range 265mpls atm vpi range 266mpls bandwidth 266mpls disable 266
mpls explicit-path 267mpls ip propagate-ttl 267mpls label-range 268mpls ldp advertise-labels 268mpls ldp disable 266mpls ldp discovery transport-address 268mpls ldp no-route retries 269mpls ldp no-route retry-time 269mpls ldp profile 274mpls ldp retries 269mpls ldp retry-time 270mpls ldp session retries 270mpls ldp session retry-time 270mpls ldp targeted-hello receive list 271mpls ldp targeted-hello send list 271mpls lsp no-route retries 271mpls lsp no-route retry-time 272mpls lsp retries 272mpls lsp retry-time 272mpls match exp-bits 273mpls match traffic-class 273mpls profile 274mpls reoptimize 275mpls reoptimize timers frequency 275mpls rsvp disable 266mpls rsvp message-bundling 276mpls rsvp profile 274mpls rsvp refresh-reduction 276mpls topology-driven-lsp 276mpls topology-driven-lsp ip-interfaces 277mpls traffic-eng administrative-weight 277mpls traffic-eng attribute-f lags 278mpls traffic-eng flood thresholds 279mpls traffic-eng link-management timers
periodic-flooding 279mpls tunnels profile 280next-address 303refresh-period 367show cac 402show cac interface 403show ip explicit-paths. See show mpls
explicit-pathsshow mpls 481show mpls binding 482show mpls explicit-paths 483show mpls forwarding 484show mpls ldp profile. See show mpls profileshow mpls ldp targeted session 485show mpls minor-interface 486show mpls profile 487
ERX Edge Routers13
show mpls rsvp 487show mpls rsvp profile. See show mpls profileshow mpls tunnels 488show mpls tunnels profile. See show mpls
profiletunnel destination 552tunnel ip profile 553tunnel mpls affinity 555tunnel mpls autoroute announce 555tunnel mpls autoroute metric 556tunnel mpls bandwidth 556tunnel mpls base-tunnel 556tunnel mpls description 557tunnel mpls dynamic target 557tunnel mpls ip propagate-ttl 557tunnel mpls label-dist 558tunnel mpls lsp no-route retries 558tunnel mpls lsp no-route retry-time 558tunnel mpls path-option 559tunnel mpls priority 560tunnel mpls retries 560tunnel mpls retry-time 560tunnel mpls vpn-id 561
MPLS commands (IS-IS)mpls spf-use-any-best-path 276mpls traffic-eng 277mpls traffic-eng router-id 280
MPLS commands (OSPF)mpls traffic-eng area 278mpls traffic-eng router-id 280
Multilink Frame Relay commands. See MFR commands
NNBMA command, show nbma arp 489NFS commands
host 157ip nfs 191ip nfs host 192show ip nfs 452
non-PPP equal access commandsbaseline ip dhcp-local 59baseline ip http 60default-router 121dns-server 127domain-name 129ip dhcp-local excluded-address 172ip dhcp-local limit 172ip dhcp-local pool 172ip http access-class 180
ip http max-connection-time 180ip http not-found-url 180ip http port 181ip http realm 181ip http root-refresh 181ip http root-url 182ip http same-host-limit 182ip http server 182lease 233netbios-name-server 301netbios-node-type 301service dhcp-local 381show ip dhcp-local binding 441show ip dhcp-local limits 442show ip dhcp-local statistics 443show ip http 447
NTP commandsclock set 98clock summer-time date 99clock summer-time recurring 100clock timezone 100ntp access-group 306ntp broadcast-client 307ntp broadcast-delay 307ntp disable 307ntp enable 307ntp master 308ntp server 308ntp server enable 309ntp source 309show clock 406show ntp associations 489show ntp status 490
NVS commandscheck-disk 85flash-disk duplicate 145flash-disk initialize 145flash-disk scan 146
OOCx/STMx commands
baseline line interface sonet 63baseline path interface sonet 64baseline section interface sonet 65clock source 98controller sonet 104loopback 247path 315path overhead j1 336sdh 379
Index14
show controllers sonet 408shutdown 511
OSPF commandsaddress area 12address authentication-key 14address authentication message-digest 15address authentication-none 17address cost 17address dead-interval 18address hello-interval 19address message-digest-key md5 20address network 21address passive-interface 22address priority 23address retransmit-interval 25address transmit-delay 27area 305area. See OSPF commands: no areaarea default-cost 33area nssa 35area range 36area stub 36area virtual-link 36area virtual-link authentication-key 37area virtual-link authentication
message-digest 37area virtual-link authentication-none 37area virtual-link dead-interval 38area virtual-link hello-interval 38area virtual-link message-digest-key md5 39area virtual-link retransmit-interval 39area virtual-link transmit-delay 40authentication-key 52authentication message-digest 52authentication-none 53automatic-virtual-link 53baseline ip ospf 61clear ip ospf redistribution 92cost 107dead-interval 109debug ip ospf 113disable-dynamic-redistribute 124distance 125domain-id 128domain-tag 130hello-interval 156ip ospf authentication-key 192ip ospf authentication message-digest 192ip ospf authentication-none 192ip ospf cost 193
ip ospf dead-interval 193ip ospf hello-interval 193ip ospf message-digest-key md5 194ip ospf network 194ip ospf priority 195ip ospf retransmit-interval 195ip ospf shutdown 195ip ospf transmit-delay 195ip route-type 204maximum-paths 258message-digest-key md5 263mpls traffic-eng area 278mpls traffic-eng router-id 280neighbor 283network area 303no area 305ospf auto-cost reference-bandwidth 310ospf enable 310ospf log-adjacency-changes 311ospf shutdown 311passive-interface 313redistribute 363remote-neighbor 369retransmit-interval 371router ospf 373show ip ospf 453show ip ospf border-routers 453show ip ospf database 453show ip ospf interface 454show ip ospf internal-statistics 454show ip ospf neighbors 454show ip ospf remote-neighbor interface 455show ip ospf spf-log 455show ip ospf virtual-links 455summary-address 526timers spf 546transmit-delay 551ttl 551undebug ip ospf 568update-source 570
PPIM commands
clear ip mroute 92clear ip pim auto-rp 93clear ip pim interface count 93clear ip pim remote-neighbor count 93debug ip pim 114ip pim 196ip pim query-interval 196
ERX Edge Routers15
ip pim rp-address 196ip pim send rp-announce 197ip pim send rp-discovery scope 197ip pim spt-threshold 198pim disable 337query-interval 351remote-neighbor 369router pim 374show ip pim auto-rp 455show ip pim dense-mode sg-state 456show ip pim interface 456show ip pim neighbor 456show ip pim remote-neighbor 457show ip pim rp 457show ip pim rp-hash 457show ip pim sparse-mode sg-state 458show ip pim sparse-mode unicast-route 458show ip pim spt-threshold 458undebug ip pim 567update-source 570
policy management commandsclassifier-list 86color 101committed-action 101committed-burst 101committed-rate 102conformed-action 103exceeded-action 138excess-burst 141filter 145forward 146ip filter-options all 178ip policy 198log 239mark 252mask-val 252next-hop 304next-interface 304peak-burst 336peak-rate 337policy-list 341rate-limit-profile 361show classifier-list 404show policy-list 490show rate-limit-profile 500
POS commandsbaseline interface pos 59crc 108encapsulation ppp 136interface pos 165
loopback 247mru 280mtu 281pos framing 341pos scramble-atm 341show interfaces 424shutdown 511
PPP commandsbaseline ppp interface 64ppp aaa-profile 342ppp authentication 342ppp chap-challenge-length 343ppp description 343ppp ipcp netmask 343ppp keepalive 344ppp log 344ppp magic-number disable 344ppp max-bad-auth 345ppp mru 345ppp multilink enable 345ppp passive-mode 346ppp peer 346ppp shutdown 346show ppp interface 490show ppp interface summary 493
PPPoE commandsbaseline pppoe interface 65encapsulation pppoe 136pppoe 347pppoe acName 347pppoe always-offer 347pppoe auto-configure 347pppoe duplicate-protection 347pppoe log pppoeControlPacket 348pppoe motm 348pppoe sessions 348pppoe subinterface 349pppoe url 349show pppoe interface 493show pppoe subinterface 494shutdown 511
QQoS commands
buffer-weight 76clear egress-queue 89clear fabric-queue 90committed-length 102conformed-fraction 103conformed-length 104
Index16
exceeded-fraction 139exceeded-length 139fabric-strict-priority 142fabric-weight 143group 153node 306qos-mode-port 350qos-port-type-profile 351qos-profile 351queue 352queue-profile 352scheduler-profile 379shaping-rate 392show fabric-queue 414show qos interface-hierarchy 495show qos-port-type-profile 495show qos-profile 496show qos queue-thresholds 496show queue-profile 497show scheduler-profile 503show traffic-class 509show traffic-class-group 509strict-priority 524traffic-class 550traffic-class-group 550weight 572
RRADIUS commands
baseline radius 65max-sessions 260no radius client 305radius acct-session-id-format 352radius algorithm 353radius calling-station-delimiter 353radius calling-station-format 354radius client. See RADIUS commands: no
radius clientradius dsl-port-type 355radius ethernet-port-type 355radius ignore framed-ip-netmask 355radius include 356radius nas-identifier 358radius nas-port-format 358radius override nas-ip-addr
tunnel-client-endpoint 358radius rollover-on-reject 359radius server 359radius trap acct-server-not-responding 359radius trap auth-server-not-responding 359
radius trap no-acct-server-responding 360radius trap no-auth-server-responding 360radius tunnel-accounting 360radius udp-checksum 360radius update-source-addr 361show radius acct-session-id-format 497show radius algorithm 497show radius attributes-ignored 498show radius attributes-included 498show radius calling-station-delimiter 498show radius calling-station-format 498show radius dsl-port-type 499show radius ethernet-port-type 499show radius nas-identifier 499show radius nas-port-format 499show radius override 499show radius rollover-on-reject 500show radius tunnel-accounting 500show radius udp-checksum 500show radius update-source-addr 500strip-domain 524subscriber 525timeout 545
redundancy commandsdisable-autosync 123disable-switch-on-error 124redundancy force-failover 366redundancy lockout 366redundancy revert 367redundancy revertive 367show redundancy 501srp switch 522synchronize 527
Response Time Reporter commandsfrequency 152hops-of-statistics-kept 156max-response-failure 260operations-per-hop 310owner 312request-data-size 370rtr 375rtr reaction-configuration 375rtr reaction-configuration action-type 375rtr reaction-configuration
operation-failure 376rtr reaction-configuration path-change 376rtr reaction-configuration test-completion 376rtr reaction-configuration test-failure 376rtr reset 377rtr schedule 377
ERX Edge Routers17
rtr schedule life 377rtr schedule restart-time 378rtr schedule start-time 378samples-of-history-kept 379show rtr application 502show rtr application collection-statistics 502show rtr application configuration 502show rtr application history 502show rtr application hops 503show rtr application operational-state 503tag 537timeout 545tos 548type 565
RIP commandsaddress 11address authentication key 13address authentication mode 16address receive version 24address send version 26authentication key 52authentication mode 53baseline ip rip 61clear ip rip redistribution 94debounce-time 110debug ip rip 115default-information originate 120default-metric 121disable 123disable-dynamic-redistribute 124distance 125distribute-list 127exit-remote-neighbor 142interface-event-disable 161, 551ip rip 201ip rip authentication key 201ip rip authentication mode 202ip rip receive version 202ip rip send version 203ip route-type 204ip split-horizon 207ip summary-address 209match-set summary prefix-tree 257neighbor 283network 302receive version 362redistribute 363remote neighbor 369route-map 372router rip 374
send-more-specific-routes-disable 380send version 380show ip rip 461show ip rip database 461show ip rip network 461show ip rip peer 462show ip rip statistics 462show ip rip summary-address 462split-horizon 522table-map 535timers 546time-to-live 547undebug ip rip 568update-source 570version 570
routing policy commandsmatch as-path 253match community 253match distance 254match extcommunity 254match ip address 255match ip next-hop 255match level 256match metric 256match metric-type 256match route-type 257match-set summary prefix-tree 257match tag 258route-map 372set as-path prepend 383set automatic-tag 383set comm-list delete 383set community 384set dampening 385set distance 386set extcommunity 387set ip next-hop 388set level 388set local-preference 389set metric 389set metric-type 390set origin 390set route-type 391set tag 391set weight 392
Index18
SSDH commands. See cOCx/STMx commands
and OCx/STMx commandsshutdown commands
ip shutdown 206shutdown 511
SMDS commandsbaseline smds interface 66encapsulation smds-trunk 137show smds interface 504
SNMP commandsbaseline snmp 66bulkstats collector 77bulkstats collector collector-mode 77bulkstats collector description 77bulkstats collector interval 77bulkstats collector max-size 77bulkstats collector primary-receiver 77bulkstats collector secondary-receiver 77bulkstats collector single-interval 77bulkstats file-format endOfLine-Lf 78bulkstats interfaces description-format
common 78bulkstats interfaces rfc 1213 78bulkstats interface-type 78bulkstats receiver remote-name 79bulkstats schema 79bulkstats schema subtree 80bulkstats schema subtree policy 80bulkstats traps 81show bulkstats 400show bulkstats collector description 400show bulkstats collector interval 401show bulkstats collector max-size 401show bulkstats collector transfer-mode 401show bulkstats interface-type 401show bulkstats receiver 401show bulkstats schema 402show bulkstats statistics 402show bulkstats traps 402show snmp 504show snmp access 505show snmp community 505show snmp interfaces 505show snmp trap 505show snmp user 505show snmp view 506snmp-server 513snmp-server community 514snmp-server contact 514
snmp-server enable traps 514snmp-server host 516snmp-server interfaces compress 517snmp-server interfaces
compress-restriction 517snmp-server interfaces description-format
common 518snmp-server interfaces rfc1213 518snmp-server location 518snmp-server packetsize 519snmp-server trap-proxy 519snmp-server trap-source 519snmp-server user 520snmp trap ip link-status 513snmp trap link-status 513t1 snmp trap link-status 533
SONET commands. See cOCx/STMx commands and OCx/STMx commands
SSH commandscrypto key dss 108disconnect ssh 124ip ssh authentication-retries 207ip ssh crypto 208ip ssh disable-user-authentication 208ip ssh mac 208ip ssh sleep 209ip ssh timeout 209show ip ssh 465
subscriber interface commandsip demux-type da-prefix 171ip destination-prefix 171ip source-prefix 206show ip demux interface 441
system commandsaaa authentication enable default 3aaa authentication login 3aaa new-model 6access-class in 9access-list 10banner 55clear line 95crypto key dss 108data-character-bits 109delete 121description 122dir 122disconnect ssh 124dsr-detect 130enable password 134enable secret 135
ERX Edge Routers19
erase secrets 138exception dump 139exception gateway 140exception protocol ftp 140exception source 140exclude-subsystem 141exec-banner 141exec-timeout 141halt 154help 156host 157hostname 157ip domain-lookup 174ip domain-name 174ip name-server 191ip nfs 191ip nfs host 192ip ssh authentication-retries 207ip ssh crypto 208ip ssh disable-user-authentication 208ip ssh mac 208ip ssh sleep 209ip ssh timeout 209line 237login 245login authentication 246macro 250memory 262motd-banner 264password 314service ctrl-x-reboot 381service password-encryption 382service unattended password-recovery 382show bandwidth oversubscription 400show columns 406show configuration 407show environment 414show exception dump 414show flash 415show hardware 421show hosts 423show ip domain-lookup 443show ip nfs 452show ip ssh 465show line console 0 479show line vty 479show nvs 490show processes 494show reboot-history 501show running-configuration 503
show secrets 504show subsystems 507show telnet 508show timing 508show users 509show utilization 510show version 510slot accept 512slot disable 512slot enable 512slot erase 512speed 521telnet 538timeout login response 545timing disable-auto-upgrade 547timing select 547timing source 548
TT1 command, interface serial 165T3 commands
atm framing 45cablelength 82channelized 84controller t3 105dsu bandwidth 131dsu mode 131load-interval 238loopback 247mru 280mtu 281scramble 379show controllers t3 412shutdown 511
T3-Frame command, interface serial 165TACACS+ commands
aaa authentication enable default 3baseline tacacs 66show statistics tacacs 506show tacacs 508tacacs-server host 535tacacs-server key 536tacacs-server source-address 536tacacs-server timeout 536
time commands, systemclock set 98clock summer-time date 99clock summer-time recurring 100clock timezone 100ntp access-group 306
Index20
ntp broadcast-client 307ntp broadcast-delay 307ntp disable 307ntp enable 307ntp master 308ntp server 308ntp source 309show clock 406show ntp associations 489show ntp status 490
timing commandsclock source 98show timing 508t1 clock source 529timing disable-auto-upgrade 547timing select 547timing source 548
troubleshooting commandsbaseline log 63bgp log-neighbor-changes 72debug ip bgp 110debug ip mbgp 112debug ip ospf 113debug ip pim 114debug ip rip 115debug isis 116log 239log destination 241log destination syslog source 242log engineering 242log fields 243log filters. See troubleshooting commands: no
log filterslog here 243log severity 244log unlimit 245log verbosity 245no log filters 305service timestamps 382show log configuration 480show log data 480undebug ip bgp 566undebug ip mbgp 567undebug ip ospf 568undebug ip pim 567undebug ip rip 568undebug isis 569
Tunnel Service command, show tunnel-server 509
Uuser interface commands
configure 102confirmations explicit 103disable 123enable 133end 137exit 142run 378send 380show terminal 508sleep 511telnet listen 540terminal data-character- bits 540terminal length 540terminal speed 540terminal width 541
Vvirtual router commands
show configuration 407show virtual-router 510virtual-router 571
VLAN commandsencapsulation vlan 137show vlan subinterfaces 511shutdown 511svlan ethertype 527svlan id 527vlan id 572
VPN command, virtual-router 571VRRP commands
baseline ip vrrp 62ip vrrp 212ip vrrp advertise-interval 212ip vrrp authentication-key 213ip vrrp authentication-type 213ip vrrp enable 213ip vrrp preempt 213ip vrrp priority 214ip vrrp virtual-address 214show ip vrrp 467show ip vrrp brief 467show ip vrrp neighbor 468show ip vrrp statistics 468show ip vrrp summary 468
vty line command, show users 509
ERX Edge Routers21
XX.21/V.35 commands
clock rate 97crc 108ignore dcd 159ignore link-state-signals 160interface serial 165invert data 166invert txclock 166load-interval 238loopback 247mru 280mtu 281nrzi-encoding 306shutdown 511
Index22