ERX

Juniper Networks, Inc.1194 North Mathilda AvenueSunnyvale, CA 94089USA408-745-2000www.juniper.net

ERX Edge RoutersCommand Reference Guide

Release 4.1.0

Part No. 162-00488-00

Juniper Networks is registered in the U.S. Patent and Trademark Office and in other countries as a trademark of Juniper Networks, Inc. Broadband Cable Processor, ERX, ESP, G1, G10, G-series, Internet Processor, JUNOS, JUNOScript, M5, M10, M20, M40, M40e, M160, M-series, NMC-RX, SDX, ServiceGuard, T320, T640, T-series, UMC, and Unison are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. All specifications are subject to change without notice.

Products made or sold by Juniper Networks (including the M5, M10, M20, M40, M40e, M160, and T320 routers, T640 routing node, and the JUNOS software) or components thereof might be covered by one or more of the following patents that are owned by or licensed to Juniper Networks: U.S. Patent Nos. 5,473,599, 5,905,725, 5,909,440, 6,333,650, 6,359,479, and 6,406,312.

ERX Edge Routers Command Reference Guide, Release 4.1.0Copyright © 2002, Juniper Networks, Inc.All rights reserved. Printed in USA.

Writers: Richard Cochran, Justine Kangas, Helen Shaw, Brian Wesley Simmons, Michael TaillonEditor: Fran Mues

Revision HistoryNovember 2002

Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.

SOFTWARE LICENSE AGREEMENT1

JUNIPER NETWORKS, INC. IS WILLING TO LICENSE THE ENCLOSED SOFTWARE AND ACCOMPANYING USER DOCUMENTATION (COLLECTIVELY, THE �PROGRAM�) TO YOU ONLY UPON THE CONDITION THAT YOU ACCEPT ALL OF THE TERMS AND CONDITIONS OF THIS LICENSE AGREEMENT. PLEASE READ THESE TERMS AND CONDITIONS CAREFULLY BEFORE COPYING OR USING THE ACCOMPANYING SOFTWARE OR INSTALLING THE HARDWARE UNIT WITH PRE-ENABLED SOFTWARE OR USING THE ACCOMPANYING USER DOCUMENTATION.

BY USING THE ACCOMPANYING SOFTWARE OR INSTALLING THE HARDWARE UNIT WITH PRE-ENABLED SOFTWARE, YOU AGREE TO BE BOUND BY THE TERMS AND CONDITIONS OF THIS LICENSE AGREEMENT. IF YOU DO NOT AGREE TO BE BOUND BY THE TERMS OF THIS LICENSE AGREEMENT, JUNIPER NETWORKS IS UNWILLING TO LICENSE THE PROGRAM TO YOU, IN WHICH EVENT YOU SHOULD PROMPTLY WITHIN TEN (10) DAYS FROM SHIPMENT RETURN THE UNUSED SOFTWARE, USER DOCUMENTATION, AND RELATED EQUIPMENT AND HARDWARE TO THE PLACE OF PURCHASE AND YOU WILL RECEIVE A FULL REFUND OF YOUR LICENSE FEE. THIS LICENSE AGREEMENT REPRESENTS THE ENTIRE AGREEMENT CONCERNING THE PROGRAM BETWEEN YOU AND JUNIPER NETWORKS, AND IT SUPERSEDES ANY PRIOR PROPOSAL, REPRESENTATION OR UNDERSTANDING BETWEEN THE PARTIES.

1. License Grant. Juniper Networks, Inc. (�Juniper Networks�) and its suppliers and licensors hereby grant to you and you hereby accept a nonexclusive, personal and nontransferable license to use the computer software and/or hardware unit with pre-enabled software, including all patches, error corrections, updates, and revisions thereto in machine-readable, object code form only (the �Software�), and the accompanying User Documentation on the Juniper Networks product owned by you and only as authorized in this License Agreement. You may make one (1) archival copy of the Software for backup purposes provided you affix to such copy all copyright, confidentiality, and proprietary notices that appear on the original. Except as authorized under this paragraph, no copies of the Program or any portions thereof may be made, in whole or in part, by you or any person under your authority or control.

The Software and User Documentation are protected under copyright laws. The title to Software and User Documentation shall remain solely with Juniper Networks and its suppliers.

Except as authorized above, you shall not: copy, in whole or in part, the Software or the related User Documentation; modify, reverse assemble, reverse compile, or otherwise translate, dissemble, or obtain source code for the Software or User Documentation, in whole or in part, or permit a third party to do so; rent, lease, distribute, sell, or create derivative works of the Software; pledge, lease, rent, sublicense or share its rights under this License Agreement; or, without Juniper Networks� prior written consent, assign or transfer its rights hereunder.

2. Juniper Networks's Rights. You agree that the Software, including the User Documentation, embodies Juniper Networks's and its suppliers' and licensors' confidential and proprietary intellectual property protected under U.S. copyright law and you will use your best efforts to maintain their confidentiality. You further acknowledge and agree that Juniper Networks or its suppliers and licensors own all right, title, and interest in and to the Software, including all intellectual property rights therein. You shall take no action inconsistent with Juniper Networks's or its suppliers' ownership of such Software. You shall not sublicense, assign, or otherwise disclose to any third party the Software or any information about the operation, design, performance, or implementation of the Software and User Documentation without prior written consent of Juniper Networks. You agree to implement reasonable security measures to protect such confidential and proprietary information and copyrighted material. This License Agreement does not convey to you an interest in or to the Program, but only the limited right of use revocable in accordance with the terms of this License Agreement.

3. License Fees. The license fees paid by you are paid in consideration of the license granted under this License Agreement.

4. Term. This license is effective upon opening of the package(s) or use of the hardware containing the Software, and shall continue until terminated. You may terminate this License at any time by returning the Software, including any User Documentation, and all copies or portions thereof to Juniper Networks. This License will terminate immediately without notice from Juniper Networks if you breach any term or provision of this License. Upon such termination by Juniper Networks, you

1. If you and Juniper Networks, Inc., have executed another license agreement for the Program which is now in effect, then such agreement (�Negotiated Agreement�) shall supersede this Software License Agreement and shall exclusively govern the use and license terms of the Program.

must return the Software, including any User Documentation, and all copies or portions thereof to Juniper Networks. Termination of this License Agreement shall not prejudice Juniper Networks' rights to damages or other available remedy.

5. Limited Software Warranty: Juniper Networks warrants, for your benefit alone, that for a period of ninety (90) days from the date of shipment from Juniper Networks that the Software substantially conforms to its published specifications.

The limited warranty extends only to you as the original licensee. Your exclusive remedy and the entire liability of Juniper Networks and its suppliers under this limited warranty will be, at Juniper Networks' option, repair or replacement of the Software, or refund of the amounts paid by you under this License Agreement. You agree that this is your sole and exclusive remedy for breach by Juniper Networks, its suppliers or its licensors of any warranties made under this License Agreement.

In no event does Juniper Networks warrant that the Software is error free or that you will be able to operate the Software without problems or interruptions. Juniper Networks does not warrant: 1) that the functions contained in the software will meet your requirements; 2) that the Software will operate in the hardware or software combination that you may select; 3) that the operation of the Software will be uninterrupted or error free; or 4) that all defects in the operation of the Software will be corrected.

This warranty does not apply if the product: 1) has been altered, except by Juniper Networks; 2) has not been installed, operated, repaired, or maintained in accordance with instruction supplied by Juniper Networks; or 3) has been subjected to or damaged by improper environment, abuse, misuse, accident, or negligence.

EXCEPT FOR THE WARRANTIES SET FORTH ABOVE, THE SOFTWARE IS LICENSED �AS IS,� AND JUNIPER NETWORKS DISCLAIMS ANY AND ALL OTHER REPRESENTATIONS, CONDITIONS, AND WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING, WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE OR ANY WARRANTIES FOR NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE. ANY AND ALL SUCH WARRANTIES ARE HEREBY EXCLUDED TO THE EXTENT ALLOWED BY APPLICABLE LAW. JUNIPER NETWORKS' SUPPLIERS AND LICENSORS DO NOT MAKE OR PASS ON TO YOU OR ANY THIRD PARTY ANY EXPRESS, IMPLIED, OR STATUTORY WARRANTY OR REPRESENTATION, INCLUDING, BUT NOT LIMITED TO, IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE OR ANY WARRANTIES FOR NONINFRINGEMENT.

6. Proprietary Rights Indemnification. Juniper Networks shall at its expense defend you against and, subject to the limitations set forth elsewhere herein, pay all costs and damages made in settlement or awarded against you resulting from a claim that the Program as supplied by Juniper Networks infringes a United States copyright or a United States patent, or misappropriates a United States trade secret, provided that you: (a) provide prompt written notice of any such claim, (b) allow Juniper Networks to direct the defense and settlement of the claim, and (c) provide Juniper Networks with the authority, information, and assistance that Juniper Networks reasonably deems necessary for the defense and settlement of the claim. You shall not consent to any judgment or decree or do any other act in compromise of any such claim without first obtaining Juniper Networks� written consent. In any action based on such a claim, Juniper Networks may, at its sole option, either: (1) obtain for you the right to continue using the Program, (2) replace or modify the Program to avoid the claim, or (3) if neither (1) nor (2) can reasonably be effected by Juniper Networks, terminate the license granted hereunder and give you a pro rata refund of the license fee paid for such Program, calculated on the basis of straight-line depreciation over a five-year useful life. Notwithstanding the preceding sentence, Juniper Networks will have no liability for any infringement or misappropriation claim of any kind if such claim is based on: (i) the use of other than the current unaltered release of the Program and Juniper Networks has provided or offers to provide such release to you for its then current license fee, or (ii) use or combination of the Program with programs or data not supplied or approved by Juniper Networks if such use or combination caused the claim.

7. Limitation of Liability. IN NO EVENT WILL JUNIPER NETWORKS OR ITS SUPPLIERS OR LICENSORS BE LIABLE FOR ANY COST FOR SUBSTITUTE PROCUREMENT; SPECIAL, INDIRECT, INCIDENTAL, PUNITIVE, EXEMPLARY, OR CONSEQUENTIAL DAMAGES; OR ANY DAMAGES RESULTING FROM INACCURATE OR LOST DATA OR LOSS OF USE OR PROFITS ARISING OUT OF OR IN CONNECTION WITH THE PERFORMANCE OF THE SOFTWARE, EVEN IF JUNIPER NETWORKS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Juniper Networks' cumulative liability to you or any other party for any loss or damages resulting from any claims, demands, or actions arising out of or relating to this License Agreement shall not exceed the total fees paid to Juniper Networks for the Software.

8. Export Control. Software, including technical data, is subject to U.S. export control laws, including the U.S. Export Administration Act and its associated regulations, and may be subject to

export or import regulations in other countries. You agree to comply strictly with all such regulations and acknowledge that you have the responsibility to obtain licenses to export, re-export, or import Software.

9. Government Licensees: If any Software or associated documentation is acquired by or on behalf of a unit or agency of the United States government, the government agrees that such Software or documentation is a �commercial item� as that term is defined in 48 C.F.R. 2.101, consisting of �commercial computer software� or �commercial computer software documentation� as such terms are used in 48 C.F.R. 12.212 of the Federal Acquisition Regulations and its successors and 48 C.F.R. 227.7202-1 through 227.7202-4 of the DoD FAR Supplement and its successors. The use, duplication, or disclosure by the United States government of technical, data, computer software and documentation is subject to the restrictions set forth in FAR section 12.212(a), FAR section 52.227-14(g)(2), FAR section 52.227-19, DFARS section 252.227-7015(b), DFARS section 227.7202-1(a), and DFARS section 227.7202-3(a), as applicable. All United States government end users acquire the Software with only the rights set forth in this License Agreement.

10. General: This License shall be governed by and construed in accordance with the laws of the Commonwealth of Massachusetts, United States of America, as if performed wholly within the state and without giving effect to the principles of conflict of law. Any dispute arising out of this Agreement shall be referred to an arbitration proceeding in Boston, Massachusetts, in accordance with the commercial arbitration rules of the American Arbitration Association (the �AAA�). If the parties cannot agree upon an arbitrator, arbitration shall be conducted by a neutral arbitrator selected by the AAA who is knowledgeable in electronics equipment manufacturing and software licensing. The parties shall share the procedural costs of arbitration equally, and each party shall pay its own attorneys' fees and other costs and expenses associated with the arbitration, unless the arbitrator decides otherwise. The arbitrator's award shall be in writing and shall include a statement of reasons, but the arbitrator shall not be permitted to award punitive or indirect damages. The arbitrator's decision and award shall be final and binding and may be entered in any court having jurisdiction. The terms of this section shall not prevent any party from seeking injunctive relief in any court of competent jurisdiction in order to protect its proprietary and confidential information. If any term or provision hereof is found to be void or unenforceable by a court of competent jurisdiction, the remaining provisions of this License Agreement shall remain in full force and effect. This License Agreement constitutes the entire agreement between the parties with respect to the use of the Software and User Documentation and supersedes any and all prior oral or written agreements, discussions, negotiations, commitments, or understandings. No amendment, modification, or waiver of any provision of this License Agreement will be valid unless in writing and signed by the authorized representative of the party against which such amendment, modification, or waiver is sought to be enforced. The waiver by either party of any default or breach of this License Agreement shall not constitute a waiver of any other or subsequent default or breach. This License Agreement shall be binding upon the parties and their respective successors and permitted assigns.

Should you have any questions about this agreement, please contact:

Juniper Networks, Inc.1194 North Mathilda AvenueSunnyvale, CA 94089Attn: Contracts Administrator

About This Guide

This Command Reference Guide provides all the commands available to configure your system. Refer to the Configuration Guides for detailed information on configuring your ERX system.

Note: If the information in the latest Release Notes differs from the information in this guide, follow the Release Notes.

Your ERX system is shipped with the latest system software installed. If you need to install a future release or reinstall the system software, refer to the procedures in ERX Installation and User Guide, Appendix E, Installing ERX System Software.

ERX Edge RoutersFour models of ERX edge router are available:

• ERX-1440 system

• ERX-1400 system

• ERX-705 system

• ERX-700 system

All models use the same software. For information about the differences between the models, see ERX Installation and User Guide, Chapter 1, ERX System Overview.

In the ERX documentation, the term ERX-1400 series refers to both the ERX-1440 system and the ERX-1400 system. Similarly, the term ERX-700 series refers to both the ERX-705 system and the ERX-700 system. The terms ERX-1440 system, ERX-1400 system, ERX-705 system, and ERX-700 system refer to the specific models.

About This Guideviii

AudienceThis guide is intended for experienced system and network specialists who will configure a Juniper Networks ERX system in an Internet access environment.

ConventionsTable 1, Table 2, and Table 3 list all the conventions used in the ERX documentation. Table 1 defines notice icons. Table 2 shows text conventions used throughout the book, except for command syntax. Table 3 provides command syntax conventions used primarily in the ERX Command Reference Guide. For more information about command syntax, see ERX System Basics Configuration Guide, Chapter 1, Planning Your Network.

Table 1 Notice icons

Icon Meaning Description

Informational note Indicates important features or instructions.

Caution Indicates that you may risk losing data or damaging your hardware.

Warning Alerts you to the risk of personal injury.

Table 2 Text conventions (except for command syntax)

Convention Description Examples

Bold typeface Represents commands and keywords in text.

� Command example: Issue the clock source command.

� Keyword example:Specify the keyword exp-msg.

Bold Courier typeface Represents text that the user must type.

user input

Key name in angle brackets Indicates the name of a key on the keyboard.

Press <Enter>.

Key names linked with a plus sign (+) in angle brackets.

Indicates that you must press two or more keys simultaneously.

Press <Ctrl+B>.

Plain Courier typeface Represents information as displayed on your terminal�s screen.

host1#show ip ospf 2

Routing Process OSPF 2 withRouter ID 5.5.0.250

Router is an Area BorderRouter (ABR)

ConventionsERX Edge Routers

ix

Using the no vs. the default Version of CommandsMost system configuration commands have a no version, which you can use to negate a command (or a portion of it specified by an optional keyword) or restore its default setting. When you use a command without the keyword no, you can reenable a disabled feature or override a default setting. You have the option of using the default keyword whenever the no keyword is also a choice; simply enter the keyword default instead of no.

In most cases, when you execute the default version of a command, it produces the exact results as the no version. There are some commands for which the default version yields a different result than the no version.

Commands for which the default behavior differs from the no behavior are clearly identified in this guide. Unless otherwise specified, therefore, the default command is identical to the no command and will neither be documented nor discussed.

The syntax for each no command is described in this guide. Some commands do not have a no version; this is indicated in the individual

Italics � Emphasize words. � Identify variables. � Identify chapter, appendix, and

book names.

� There are two levels of access, user and privileged.

� clusterId, ipAddress.� Appendix A, System Specifications.

Table 2 Text conventions (except for command syntax) (continued)


Table 3 Syntax conventions in command reference guide


Words in plain text Represent keywords. terminal length

Words in italics Represent variables. mask, accessListName

Words separated by the | symbol Represent a choice to select one keyword or variable to the left or right of this symbol. (The keyword or variable may be either optional or required.)

diagnostic | line

Words enclosed in [ brackets ] Represent optional keywords or variables.

[ internal | external ]

Words enclosed in [ brackets ]* Represent optional keywords or variables that can be entered more than once.

[ level1 | level2 | l1 ]*

Words enclosed in { braces } Represent required keywords or variables.

{ permit | deny } { in | out }{ clusterId | ipAddress }

About This Guidex

command descriptions except for the show commands, none of which has a no version.

The CLI can act on no versions of commands when you have entered sufficient information to distinguish the command syntactically, and ignores all subsequent input on that line.

To be compatible with some non-ERX implementations, the no versions of commands will accept the same options as the affirmative version of the commands. The CLI ignores the optional input if it has no effect on the command behavior. If using the option changes the behavior of the no version, the individual command entry in this guide describes the difference in behavior.

Filtering show CommandsYou have access to a variety of show commands that display system and protocol information. You can filter the output of a show command by specifying | (the UNIX pipe symbol), one of the following keywords, and either a case-sensitive text string or a regular expression.

• begin – displays output beginning with the first line that contains the text string or regular expression

• include – displays output lines that contain the text string or regular expression and excludes lines that do not contain the text string or regular expression

• exclude – displays output lines that do not contain the text string or regular expression and excludes lines that do contain the text string or regular expression

For a list of regular expressions, see ERX Routing Protocols Configuration Guide, Vol. 1, Chapter 1, Configuring Routing Policy.

You can press <Ctrl+C> to interrupt the show command output.

Note: The system does not recognize beginning spaces of the text string. For example, if you enter the include option with �IP� as the text string on which to filter, the system ignores the space and displays lines that include words such as �RIP�.

Example In the following example, the output display consists only of lines that contain the string ip. The system omits all other lines of the output from the display because none of them contain the string ip.

host1#show config include-defaults | include ip

! Configuration script generated on FRI NOV 12 1999 16:56:41UTC

ip address 192.168.1.229 255.255.255.0


xi

ip rip receive version 2 1

ip rip send version 1

ip rip authentication mode md5 17

ip rip authentication key

ip route 10.6.0.0 255.255.0.0 192.168.1.1

ip route 10.10.0.0 255.255.0.0 192.168.1.1

ip route 10.10.0.166 255.255.255.255 192.168.1.1

ip debounce-time 0

router rip

Interface Types and SpecifiersMany commands take the variables interfaceType and interfaceSpecifier. Some commands support all types of interfaces, whereas other commands support only certain types of interfaces. The interface specifier depends on the type of interface. Table 4 shows the interface specifiers for each type of interface.

Table 4 Interface types and specifiers

Interface Type Description Interface Specifier Example

atm ATM interface slot/port [.subinterface]� slot � number of the chassis slot in

the range 0�6 (ERX-700 series) and 0�13 (ERX-1400 series)

� port � port number on the I/O module

� subinterface � number of the subinterface in the range 1�4294967293

atm 3/2.6

fastEthernet IEEE 802.3 Fast Ethernet (FE) interface

slot/port [.subinterface1[.subinterface2]]� slot � number of the chassis slot in



� subinterface1 � number of the FE subinterface in the range 1�4294967293; not more than 2 subinterfaces per FE interface.a

� subinterface2 � number of the higher-level subinterface in the range 1�4294967293; not more than 4094 higher-level subinterfaces per FE subinterfacea

fastEthernet 3/2.6.20

About This Guidexii

gigabitEthernet IEEE 802.3 Gigabit Ethernet (GE) interface

slot/port [.subinterface1[.subinterface2]]� slot � number of the chassis slot in



� subinterface1 � number of the GE subinterface in the range 1�4294967293; not more than 2 subinterfaces per GE interface.a

� subinterface2 � number of the higher-level subinterface in the range 1�4294967293; not more than 4094 higher-level subinterfaces per GE subinterface.a

gigabitEthernet 3/2.6.20

hssi High-speed serial interface

slot/port � slot � number of the chassis slot in



hssi 3/0

loopback Loopback interface integer� integer � integer in the range

1�4294967293

loopback 20

mlframe-relay Multilink frame relay interface

bundle-name [.subinterface ]� bundle-name � name of the bundle� subinterface � number of the MFR

subinterface in the range 1�4294967293

mlframe-relay boston.1

mlppp Multilink PPP interface bundle-name� bundle-name � name of the bundle

mlppp chicago

null Null interface, which cannot forward or receive traffic

0 null 0

pos Packet over SONET (POS) interface

slot/port� slot � number of the chassis slot in



pos 3/2

Table 4 Interface types and specifiers (continued)



xiii

serial CE1, CT1, CT3, E3-FRAME, T3-FRAME, cOCx/STMx interface, or X.21/V.35 interface

Refer to the individual formats listed below.

� CE1/CT1 slot/port:channel-group� slot � number of the chassis slot in



� channel-group � number of the channel group associated with a range of DS0 timeslots on a CE1 or CT1 module; in the range 1�31 for a CE1 module, and 1�24 for a CT1 module

serial 3/2:20

� CT3 slot/port:channel/subchannel� slot � number of the chassis slot in



� channel - number of a T1 channel on a CT3 module; in the range 1�28

� subchannel � number of the channel group associated with a range of DS0 timeslots on a CT3 module; in the range 1�28

serial 3/2:20/15

� E3/T3 FRAME slot/port� slot � number of the chassis slot in



serial 3/2



About This Guidexiv

� cOCx/STMx:unframed E1

slot/port:path-channel/path-payload/tributary-group/tributary-number/channelNumber� slot � number of the chassis slot in



� path-channel � number of the STS-1or STM-0 line in the range 1�2147483648

� path-payload � number of the payload within the path

� tributary-group � number of the tributary group within the path

� tributary-number � number of the tributary within the group

� channelNumber � 1 (the system assigns the number one to an unframed E1 channel)

serial 3/0:10/1/2/2/1

� cOCx/STMx: fractional E1/T1

slot/port:path-channel/path-payload/tributary-group/tributary-number/channel-group� slot � number of the chassis slot in




� path-payload � number of the payload within the path

� tributary-group � number of the tributary group within the path

� tributary-number � number of the tributary within the group

� channel-group � number of a fractional T1 or E1 line

serial 3/0:10/1/2/2/1




xv

� cOCx/STMx: unchannelized DS3

slot/port:path-channel/ds3-channel-number� slot � number of the chassis slot in




� ds3-channel-number � number of a T3 channel

serial 3/0:1/1

� cOCx/STMx: DS3 channelized to DS0

slot/port:path-channel/ds3-channel-number/ds1-channel-number/subchannel-number� slot � number of the chassis slot in






� subchannel-number � number of a fractional T1 channel

serial 3/0:1/1/10/15

� X.21/V.35 slot/port� slot � number of the chassis slot in



sonet � line layer Line layer of a SONET/SDH interface




sonet 3/0



About This Guidexvi

DocumentationThe ERX Installation Quick Start poster is shipped in the box with all new systems. This poster provides the basic procedures to help you get the system up and running quickly.

The document set contains the following books and online resources:

• ERX Installation and User Guide – Provides the necessary procedures for getting your system operational, including information on installing, cabling, powering up, configuring your system for management access, and general troubleshooting.

• ERX System Basics Configuration Guide – Describes planning and configuring your network, managing the system, passwords, and security, and configuring the system clock and virtual routers.

• ERX Physical and Link Layers Configuration Guide – Describes configuring physical and link layer interfaces.

• ERX Routing Protocols Configuration Guide, Vol. 1 – Provides information about configuring routing policy and configuring IP, IP routing, and IP security.

sonet � path layer Path layer of a SONET/SDH interface

slot/port:path-channel� slot � number of the chassis slot in




sonet 3/0:2

sonet � section layer Section layer of a SONET/SDH interface




sonet 3/0

tunnel Tunnel interface tunnel-type:tunnel-name� tunnel-type � type of the tunnel:

dvmrp, gre, ipsec, l2tp, or mpls� tunnel-name � name of the tunnel

tunnel gre:boston

a.See the interface fastEthernet command and the interface gigabitEthernet command for details on specifying subinterfaces with and without VLANs on Ethernet interfaces.



Using the Online Documentation CDERX Edge Routers

xvii

• ERX Routing Protocols Configuration Guide, Vol. 2 – Describes BGP routing, MPLS, BGP-MPLS VPNs, and encapsulation of layer 2 services.

• ERX Policy and QoS Configuration Guide - Provides information about configuring policy management and quality of service (QoS).

• ERX Broadband Access Configuration Guide – Provides information about configuring remote access.

• ERX Command Reference Guide – Contains important information about all system commands implemented in the system software. Use to look up command descriptions, command syntax, a command’s related mode, or a description of a command’s parameters. It is intended to be used in conjunction with the ERX Configuration Guides.

• ERX Product Overview Guide – Gives a thorough overview of the system from a software and hardware perspective. It provides illustrations and configuration examples that present the “big picture.”

• ERX Release Notes – Contains information about features, changes, known problems, and limitations. Provides final information that did not make it into the documentation.

• ERX Online Documentation CD – Provides an online version of this guide and the documents listed above. The online documents contain numerous links between guides, giving easy access to a vast amount of technical information.

AbbreviationsA complete list of abbreviations used in this document set, along with their spelled-out terms, is provided in the ERX System Basics Configuration Guide, Appendix A, Abbreviations and Acronyms.

Using the Online Documentation CDTo use the Online Documentation CD:

1 Place the Online Documentation CD in your CD-ROM drive.

2 Follow the instructions located on the inside cover of your CD jewel case to install Acrobat Reader.

3 From the Documentation folder on the CD, open the CDtips.pdf file for information on using Adobe Acrobat Reader.

About This Guidexviii

4 From the Documentation folder on the CD, open the Welcome.pdf file for access to the documentation set.

Comments About the DocumentationWe encourage you to provide feedback, comments, and suggestions so that we can improve the documentation to better meet your needs. Please e-mail your comments to:

• [email protected]

Along with your comments, be sure to indicate:

• Document name

• Document part number

• Page number

Contacting Customer SupportFor technical support, contact Juniper Networks at [email protected], or at 1-888-314-JTAC (within the United States) or 408-745-2121 (from outside the United States).

List of Commands

aaa accounting acct-stop on-aaa-failure

Description: Configures AAA to send an Acct-Stop message if a user fails AAA, but RADIUS grants access. The no version returns the parameter to the default of enable.

Syntax: aaa accounting acct-stop on-aaa-failure { enable | disable }

no aaa accounting acct-stop on-aaa-failure

Mode(s): Global Configuration

aaa accounting acct-stop on-access-deny

Description: Issues an Acct-Stop message if RADIUS denies access. The no version returns the parameter to the default of disable.

Syntax: aaa accounting acct-stop on-access-deny { enable | disable }

no aaa accounting acct-stop on-access-deny


aaa accounting duplication

Description: Sends duplicate accounting records to the accounting server of a different virtual router. The no version disables the feature.

Syntax: aaa accounting duplication routerName

no aaa accounting duplication

� routerName � virtual router name


aaa accounting interval2

aaa accounting interval

Description: Specifies the accounting interval. The no version sets the value to 0, which turns off interim accounting.

Syntax: aaa accounting interval period

no aaa accounting interval

� period � accounting interval in minutes in the range 10�1080, which sets the time period between accounting updates


aaa accounting ppp default

Description: Specifies the default accounting protocol for PPP. The no version produces the same result as specifying the radius value.

Syntax: aaa accounting ppp default accountor [ accountors ]*

no aaa accounting ppp default

� accountor � specifies the accounting method:

� radius � uses RADIUS for the accounting method

� none � disables accounting

� * � indicates that one or more parameters can be repeated multiple times in a list in the command line


aaa authentication enable defaultERX Edge Routers

3

aaa authentication enable default

Description: Allows privilege determination to be authenticated through the authenticator(s) you specify. This authentication is applied to vty users. The no version removes the authentication settings.

Syntax: aaa authentication enable default [ authenticator ] [ authenticators ] *

no aaa authentication enable default

� authenticator � specifies the authentication method

� authenticators

� radius � use RADIUS authentication

� line � use the line password

� tacacs+ � use TACACS+ authentication

� none � use no authentication

� enable � use the enable password



aaa authentication login

Description: Creates an authentication list and the criteria for login. This authentication is applied to vty users.

Syntax: aaa authentication login authListName authenticator [ authenticators ]*

no aaa authentication login authListName

� authListName � specifies an existing authentication list name (created using the login authentication command); a string of 1�32 characters

� authenticator � specifies the authentication method

� authenticators

� line � use the line password for authentication

� none � use no authentication

� radius � use RADIUS authentication

� tacacs+ � use TACACS+ authentication



aaa authentication ppp default4

aaa authentication ppp default

Description: Specifies the default authentication protocol for PPP and DHCP clients. The no version produces the same result as specifying the radius value.

Syntax: aaa authentication ppp default authenticator [ authenticators ]*

no aaa authentication ppp default

� authenticator � authentication method:

� radius � uses RADIUS for authentication

� none � means authentication is off, allowing all users access



aaa delimiter

Description: Specifies delimiters for the domain and realm names. You can specify up to eight delimiters each for domain and realm names. The no version restores the default value.

Syntax: aaa delimiter { domainName | realmName } delimiters

no aaa delimiter { domainName | realmName }

� domainName � allows you to set delimiters for the domain name

� realmName � allows you to set delimiters for the realm name

� delimiters � either the domain or realm delimiter(s). You can specify up to eight characters.

� The default domain name delimiter is @.

� The default realm name delimiter is NULL (no character). In this case, realm parsing is disabled (having no delimiter disables realm parsing).


aaa dnsERX Edge Routers

5

aaa dns

Description: Specifies the IP address of the primary DNS name server. The no version sets the corresponding address to 0.

Syntax: aaa dns { primary | secondary } ipAddress

no aaa dns { primary | secondary }

� primary � specifies the primary DNS name server

� secondary � specifies the secondary DNS name server

� ipAddress � IP address of the name server


aaa domain-map

Description: Maps a user domain name to a virtual router. When you specify only the domain name, the command sets the mode to Domain Map Configuration. The no version deletes the map entry.

Syntax: aaa domain-map domainName [ routerName [ loopback interfaceNumber ] ]

no aaa domain-map domainName

� domainName � a user domain name; specify the domain name none to assign users without domains to a specific virtual router.

� routerName � a router name associated with the domain name

� loopback � specifies the loopback interface

� interfaceNumber � interface number in the range 0�32000


aaa duplicate-address-check

Description: Allows you to enable or disable routing table address lookup or duplicate address check. There is no no version.

Syntax: aaa duplicate-address-check { enable | disable }

Note: To use this command, you must have a B-RAS license. Run the license b-ras command and enter your password.


aaa new-model6

aaa new-model

Description: Specifies AAA authentication for Telnet sessions. The no version restores simple authentication (login and password).

Syntax: [ no ] aaa new-model


aaa parse-order

Description: Specifies the order in which the system searches for a domain name. It either searches for realm and then domain, or it searches for domain and then realm. The no version returns the parse order to the default of searching for realm first.

Syntax: aaa parse-order { domain-first | realm-first }

no aaa parse-order

� domain-first � causes the system to search for a domain name starting with the right-most character. When the system reaches a delimiter, it uses anything to the right of the delimiter as the domain name.

� realm-first � causes the system to search for a domain name starting with the left-most character. When the system reaches a delimiter, it uses anything to the left of the delimiter as the domain name.


aaa profile

Description: Creates a new AAA profile to allow mapping to AAA services.

Syntax: aaa profile profileName

� profileName � profile name of up to 32 characters

Mode(s): AAA Profile Configuration

aaa subscriber limit per-portERX Edge Routers

7

aaa subscriber limit per-port

Description: Sets the maximum number of active subscribers permitted on the specified port. The no version returns the limit to the default, 0 (zero).

Syntax: aaa subscriber limit per-port interfaceValue limitValue

no aaa subscriber limit per-port interfaceValue

� interfaceValue � location of the interface in the slot/port format

� limitValue � maximum number of subscribers. The default is 0 (zero), which means there is no limit on the number of subscribers.


aaa subscriber limit per-vr

Description: Sets the maximum number of active subscribers permitted on the virtual router. The no version returns the limit to the default, 0 (zero).

Syntax: aaa subscriber limit per-vr limitValue

no aaa subscriber limit per-vr

� limitValue � maximum number of subscribers. The default is 0 (zero), which means there is no limit on the number of subscribers.


aaa timeout

Description: Sets either the default idle or session timeout for B-RAS PPP users. The no version deletes either the idle or session timeout.

Syntax: aaa timeout { idle idleTimeout | session sessionTimeout }

no aaa timeout { idle | session }

� idleTimeout � in seconds: 300, 7200

� sessionTimeout � in seconds: 60�2678400 (that is, a minimum of 1 minute to a maximum of 31 days)


aaa tunnel assignment-id-format8

aaa tunnel assignment-id-format

Description: Sets the format for the tunnel assignment ID.

Syntax: aaa tunnel assignment-id-format { assignmentId | client-server-id }

� assignmentId � configures the format to be assignmentId only

� client-server-id � configures the format to be a combination of clientAuthId + serverAuthId + assignmentId


aaa tunnel client-name

Description: Specifies the default tunnel client name. If the tunnel client name is not included in the tunnel attributes that are returned from the domain map or authentication server, the system uses the default name. The no version deletes the client name.

Syntax: aaa tunnel client-name name

no aaa tunnel client-name

� name � default tunnel client name; a string of up to 32 characters


aaa tunnel ignore

Description: Specifies whether or not the tunnel peer�s NAS-Port [5] and NAS-Port-Type [61] attributes should be used. The no version negates the command or restores the default of enable.

Syntax: aaa tunnel ignore { nas-port | nas-port-type } { enable | disable }

no aaa tunnel ignore { nas-port | nas-port-type }

� nas-port � configures the tunnel peer�s supplied nas-port value

� nas-port-type � configures the tunnel peer�s supplied nas-port-type value


aaa tunnel passwordERX Edge Routers

9

aaa tunnel password

Description: Specifies the default tunnel password. If the tunnel password is not included in the tunnel attributes that are returned from the domain map or authentication server, the system uses the default password. The no version deletes the password.

Syntax: aaa tunnel password name

no aaa tunnel password

� name � default tunnel password; a string of up to 32 characters


aaa wins

Description: Specifies the IP address of the WINS name server. The no version sets the corresponding address to 0.

Syntax: aaa wins { primary | secondary } ipAddress

no aaa wins { primary | secondary }

� primary � specifies the primary WINS name server

� secondary � specifies the secondary WINS name server

� ipAddress � IP address of the name server


access-class in

Description: Restricts incoming connections between a particular virtual terminal line and the addresses in an access list. The no version removes access restrictions.

Syntax: access-class listName in

no access-class [ listName ] in

� listName � name of the access list

Mode(s): Line Configuration

access-list10

access-list

Description: Defines a standard or extended IP access list. The extended access list enables you to specify a destination address or host, precedence, and type of service. Imposes an implicit last rule of �deny ip any any� to deny all routes that do not match previous rules in the access list. The no version removes the IP access list, the specified entry in an access list, or the log for a specified entry.

Syntax: Standard IP access list:

access-list accessListName { permit | deny } { srcIP srcWildIp | [ host ] srcIPHost | any } [ log ]

no access-list accessListName [ { permit | deny } { srcIP srcWildIp | [ host ] srcIPHost | any } [ log ] ]

Extended IP access list:

access-list accessListName { permit | deny } ip { srcIP srcWildIp | host srcIPHost | any } { dstIP dstWildIp | host dstIPHost | any } [ precedence preced ] [ tos typeOServ ] [ log ]

no access-list accessListName [ { permit | deny } ip { srcIP srcWildIp | host srcIPHost | any } { dstIP dstWildIp | host dstIPHost | any } [ log ] ]

� accessListName � string of up to 32 alphanumeric characters

� permit � permits access if the conditions are matched

� deny � denies access if the conditions are matched

� srcIP � source IP address from which the packet is being sent

� srcWildIp � wildcard mask IP address

� srcIPHost � source host IP address; assumes a wildcard mask of 0

� any � creates an address of 0.0.0.0 with a wildcard mask of 255.255.255.255

� dstIP � destination IP address

� dstWildIp � wildcard mask IP address for destination

� dstIPHost � destination host IP address to which the packet is being sent

� preced � number from 1 to the access list maximum that indicates the precedence level to which packets are filtered

� typeOServ � number from 1 to the access list maximum that indicates the type of service to which packets are filtered

� log � logs an Info event into the ipAccessList log whenever the access-list rule is matched


addressERX Edge Routers

11

address

Description: From Domain Map Tunnel Configuration mode, sets the tunnel endpoint address of an L2TP or L2F tunnel. The no version removes the address of the tunnel.

From Interface Configuration or Subinterface Configuration mode, configures RIP to run on the interface specified by the IP address or on an unnumbered interface. Uses the default values: send version is RIP version 1, receive version is RIP version 1 and version 2, authentication is not enabled. The no version deletes the RIP interface. Use the address commands to configure RIP attributes on the network.

Syntax: To set the tunnel endpoint address:

address serverAddress

no address

� serverAddress � the IP address of the LNS or home gateway endpoint

To configure RIP:[ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }

� ipAddress � address of IP interface where RIP will be run

� unnumbered � specifies that RIP will be run on an unnumbered interface

� interfaceType � interface type; see Interface Types and Specifiers in About This Guide

� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Mode(s): Interface Configuration (RIP), Subinterface Configuration (RIP), Domain Map Tunnel Configuration

address area12

address area

Description: Creates an interface on which OSPF runs in the specified area, on top of the IP interface at the specified IP address. Uses the default values. The no version deletes OSPF interfaces. If the OSPF network was previously specified with the network area command, the OSPF interface already exists, and you do not need to use this command, unless you want to change the area of the OSPF interface to an area different from the one specified by the network area command.

Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }area { areaId | areaIdInt }

� ipAddress � IP address of the interface on which OSPF will be run

� unnumbered � configures OSPF on an unnumbered interface



� areaId � OSPF area ID in IP address format

� areaIdInt � OSPF area ID as a decimal value in the range 1�4294967295

Note: Before you issue this command, you must first configure an interface with the IP address specified by ipAddress or an interface configured as unnumbered.

Note: You must issue this command before issuing any other OSPF address command.

Mode(s): Router Configuration

address authentication keyERX Edge Routers

13

address authentication key

Description: Specifies the password for text authentication and the key for MD5 authentication. The no version clears the key for the interface. Supported only in RIP version 2. Authentication is disabled by default.

Syntax: address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication key [ 0 | 8 ] authkey

no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] authentication key





� 0 � indicates the authKey is entered in unencrypted form (plaintext); this is the default option

� 8 � indicates the authKey is entered in encrypted form (ciphertext)

� authkey � password sent with RIP messages or the key used to encrypt/decrypt RIP messages, depending on the authentication mode set for this interface.

Mode(s): Interface Configuration, Subinterface Configuration

address authentication-key14

address authentication-key

Description: Assigns a password used by neighboring routers that are using OSPF simple password authentication. The no version deletes the password.

Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication-key [ 0 | 8 ] authKey

� ipAddress � OSPF interface address previously specified with the address command

� unnumbered � indicates that OSPF is running on an unnumbered interface previously specified with the address command





� authKey � password, a continuous string of characters up to 8 characters in length

Note: You must issue the address area command before issuing this command.


address authentication message-digestERX Edge Routers

15

address authentication message-digest

Description: Specifies that MD5 authentication is used for the OSPF interface. The no version sets authentication for the interface to none, but leaves any configured MD5 key intact.

Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication message-digest







address authentication mode16

address authentication mode

Description: Specifies the type of authentication used on this interface. The no version removes authentication from the interface. Supported only in RIP version 2. Authentication is disabled by default.

Syntax: address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication mode { text | md5 keyID }

no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] authentication mode


� unnumbered � specifies RIP will be run on an unnumbered interface



� text � simple text password is sent with each RIP message. If the password is not possessed by neighbors, the message is rejected.

� md5 � MD5 message-digest algorithms are used to encrypt and compress the RIP message.

� keyID � number identifying the MD5 key. Neighbors must share the MD5 key to decrypt the message and encrypt the response.


address authentication-noneERX Edge Routers

17

address authentication-none

Description: Specifies that no authentication is to be used for the OSPF interface. The no version has no effect.

Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication-none







address cost

Description: Specifies a cost metric for an OSPF interface. Used in the calculation of the SPF routing table. The no version resets the path cost to the default.

Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }cost intfCost





� intfCost � link state metric cost; a number in the range 0�65535; default value is 10



address dead-interval18

address dead-interval

Description: Sets the time period that the system�s neighbors should wait without seeing hello packets from the system before they declare the router to be down. The no version resets the dead interval to its default.

Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } dead-interval deadInterval





� deadInterval � number in the range 1�65535 seconds; default value is 40 seconds



address-familyERX Edge Routers

19

address-family

Description: For BGP, configures the router or a specific VRF to exchange IPv4 addresses in unicast, multicast, or VPN mode by creating the specified address family. The no version removes the address family.

For RIP, configures RIP in a specific VRF to exchange IPv4 addresses. The no version removes the address family.

Syntax: For BGP:

[ no ] address-family { ipv4 [ multicast | unicast | unicast vrf vrfName |vrf vrfName ] | vpnv4 [ unicast ] }

For RIP:

[ no ] address-family ipv4 [ unicast ] vrf vrfName

� ipv4 � sessions that carry standard IPv4 address prefixes (default)

� multicast � specifies multicast prefixes

� unicast � specifies unicast prefixes (default)

� vrfName � name of the VRF; string of 1�32 alphanumeric characters

� vpnv4 � sessions that carry customer VPN-IPv4 prefixes, each of which has been made globally unique by adding an 8-byte route distinguisher


address hello-interval

Description: Specifies the interval between hello packets that the router sends on the interface. The no version resets the hello interval to its default.

Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } hello-interval helloInterval





� helloInterval � number in the range 1�65535 seconds; default value is 10 seconds



address message-digest-key md520

address message-digest-key md5

Description: Enables OSPF MD5 authentication and configures the MD5 key. The no version deletes an MD5 key.

Syntax: address { ipAddress | unnumbered interfaceType interfaceSpecifier } message-digest-key keyID md5 [ 0 | 8 ] msgDigestKey

no address { ipAddress | unnumbered interfaceType interfaceSpecifier } message-digest-key keyID





� keyID � key identifier in the range 1�255

� md5 � specifies use of the MD5 algorithm

� 0 � indicates that the msgDigestKey is entered in unencrypted form (plaintext); this is the default option

� 8 � indicates that the msgDigestKey is entered in encrypted form (ciphertext)

� msgDigestKey � OSPF password; a continuous string of up to 16 alphanumeric characters.

Note: If all the MD5 keys have been deleted, the authentication type is still MD5, but you need to configure MD5 keys.

Note: To disable MD5 authentication for the interface, use the address authentication-none command.



address networkERX Edge Routers

21

address network

Description: Configures the OSPF network type for the specified interface to something other than the default for the network medium. The no version restores the default value for the medium.

Syntax: address { ipAddress | unnumbered interfaceType interfaceSpecifier } network { broadcast | non-broadcast | point-to-point }

no address { ipAddress | unnumbered interfaceType interfaceSpecifier } network





� broadcast � sets network type to broadcast

� non-broadcast � sets network type to NBMA

� point-to-point � sets network type to point-to-point



address passive-interface22

address passive-interface

Description: Disables the transmission of routing updates on an interface. OSPF routing information is neither sent nor received through the specified router interface. The specified interface address appears as a stub network in the OSPF domain. The no version reenables the transmission of routing updates.

Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } passive-interface







address-pool-name

Description: Specifies an address pool name to associate with the domain name being configured. The no version removes the pool name.

Syntax: address-pool-name poolName

no address-pool-name

� poolName � name of the pool to associate with the domain name

Mode(s): Domain Map Configuration

address priorityERX Edge Routers

23

address priority

Description: Sets the router priority. Used in determining the designated router for the particular network. This designation only applies to multi-access networks. Every broadcast and nonbroadcast multiaccess network has a designated router. The no version restores the default value.

Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }priority intfPriority





� intfPriority � priority value, an 8-bit number in the range 1�255; default value is 1



address receive version24

address receive version

Description: Restricts the RIP version that the system can receive on an interface. The no version sets the interface back to the default value, receiving both RIP version 1 and version 2.

Syntax: address { ipAddress | unnumbered interfaceType interfaceSpecifier } receive version { 1 | 2 | 1 2 | 2 1 | off }

no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] receive version





� 1 � specifies RIP version 1 only


� 1 2 � specifies RIP version 1 and version 2; the default value

� 2 1 � specifies RIP version 2 and version 1

� off � turns reception off


address retransmit-intervalERX Edge Routers

25

address retransmit-interval

Description: Specifies the time between LSA retransmissions for the interface when an acknowledgment for the LSA is not received. The no version restores the default value.

Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } retransmit-interval retransInterval





� retransInterval � number in the range 0�3600 seconds; default value is 5 seconds



address send version26

address send version

Description: Restricts the RIP version that the system can send on an interface. The no version sets the interface back to the default value, sending only RIP version 1.

Syntax: address { ipAddress | unnumbered interfaceType interfaceSpecifier } send version {1 | 2 | 1 2 | 2 1 | off }

no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] send version











address transmit-delayERX Edge Routers

27

address transmit-delay

Description: Sets the estimated time it takes to transmit a link state update packet on the interface. The no version restores the default value.

Syntax: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } transmit-delay transmDelay





� transmDelay � link state transmit delay, a number in the range 0�3600 seconds; default value is 1 second



aggregate-address28

aggregate-address

Description: Creates an aggregate entry in a BGP routing table. The no version removes the aggregate.

Syntax: [ no ] aggregate-address address mask [ as-set | summary-only | attribute-map attributeMapTag | advertise-map advertiseMapTag | suppress-map suppressMapName ]*

� address � aggregate IP address

� mask � aggregate IP mask

� as-set � if the as-set option is not specified, the path attributes of the aggregate route are set in the same way as locally originated routes, except that the atomic_aggregate and aggregator attributes are added. If the as-set option is used, the path attributes of the aggregate route are determined by combining the path attributes of the aggregated routes as described in RFC 1771. If the as-set option is used, the path attributes of the aggregate route may change whenever one of the aggregated routes changes, causing the aggregate route to be readvertised.

� summary-only � filters all more specific routes from updates. summary-only not only creates the aggregate route but also suppresses advertisements of more-specific routes to all neighbors. If you only want to suppress advertisements to certain neighbors, you may use the neighbor distribute-list command, with caution. If a more-specific route leaks out, all BGP speakers will prefer that route over the less-specific aggregate you are generating (using longest-match routing). Alternatively, you can use the suppress-map keyword to suppress specific routes

� attributeMapTag � string of up to 32 characters that identifies the route map used to set the attributes of the aggregate route

� advertiseMapTag � string of up to 32 characters that identifies the route map used to set the routes to create AS-SET origin communities in the range

� suppressMapName � string of up to 32 characters that identifies a route map that filters routes to be suppressed


Mode(s): Address Family Configuration, Router Configuration

aggressive-mode

Description: Allows aggressive mode negotiation for the tunnel. The no version restores the default, main mode.

Syntax: [ no ] aggressive-mode

Mode(s): ISAKMP Policy Configuration

allowERX Edge Routers

29

allow

Description: Specifies the domain names that are to be allowed access to AAA authentication. The no version negates the command.

Syntax: [ no ] allow domainName

� domainName � name of the domain; maximum of 64 characters


append-after

Description: Add a next hop after a particular index in the MPLS explicit path. The sequence numbers for existing hops after the index adjust automatically. There is no no version.

Syntax: append-after indexNumber next-address ipAddress [ mask ipMask ] [ loose ]

� index � number of a node in an ordered set of abstract nodes

� ipAddress � address of the next hop

� ipMask � [ not currently used] mask for the next adjacent address

� loose � indicates the node is not necessarily directly connected (adjacent) to the previous node in the path. If loose is not configured, the configuration defaults to strict. Strict indicates that the node is directly connected to the previous node.

Mode(s): Explicit Path Configuration

aps force

Description: Forces the specified interface to be replaced by the inactive interface in an APS/MSP group. The no version allows the specified interface to resume operation.

Syntax: aps force channelNumber

no aps force [ channelNumber ]

channelNumber � number that identifies the working or protect interface.The number of the working interface is the same as the number of the corresponding active port on the I/O module. If there are n active ports on the I/O module, working interfaces are identified by the numbers 0 to n-1. Protect interfaces are identified by the numbers of the corresponding working interfaces plus n. For example, if the working interface has the number 0, and there is one active port on the I/O module, the corresponding protect interface has the number 1.

Mode(s): Controller Configuration

aps group30

aps group

Description: Assigns an interface to an APS/MSP group.

Syntax: aps group groupName

no aps group

� groupName� name of the APS/MSP group to which the active and standby interfaces belong; up to 32 characters in length


aps lockout

Description: Prevents the working interface from switching to the protect interface. The no version restores the default situation, in which the working interface can switch to the protect interface.

Syntax: aps lockout [ channelNumber ]

no aps lockout

channelNumber � number that identifies the working interface. The number of the working interface is the same as the number of the corresponding active port on the I/O module.


aps manual

Description: Forces the working interface to switch to the protect interface, unless a request of equal or higher priority exists. The no version allows the specified working interface to resume the active role.

Syntax: aps manual channelNumber

no aps manual [ channelNumber ]

channelNumber � number that identifies the working or protect interface.The number of the working interface is the same as the number of the corresponding active port on the I/O module. If there are n active ports on the I/O module, working interfaces are identified by the numbers 0 to n-1. Protect interfaces are identified by the numbers of the corresponding working interfaces plus n. For example, if the working interface has the number 0, and there is one active port on the I/O module, the corresponding protect interface has the number 1.

Syntax: Controller Configuration

aps protectERX Edge Routers

31

aps protect

Description: Configures an interface as a protect interface. The no version removes the relationship between the protect interface and the active interface.

Syntax: aps protect [ channelNumber ]

no aps protect



aps revert

Description: Configures the APS/MSP group to operate in revertive mode. The no version restores the default setting, non-revertive mode.

Syntax: aps revert minutes

no aps revert

� minutes � number of minutes in the range 5�12 at which the interface resumes the active role after that interface becomes available


aps unidirectional

Description: Configures the APS/MSP group to operate in unidirectional mode, the default setting. The no version configures the APS/MSP group to operate in bidirectional mode.

Syntax: aps unidirectional

no aps unidirectional


aps working32

aps working

Description: Configures an interface as a working interface. The no version removes the configuration.

Syntax: aps working [ channelNumber ]

no aps working



area

Description: This command has only a no version. See the no area command for a complete description and syntax.

area-authentication-key

Description: Assigns a password used by neighboring routers for authentication of IS-IS level 1 LSPs, CSNPs, and PSNPs. The no version deletes the password.

Syntax: [ no ] area-authentication-key [ 0 | 8 ] authKey

no area-authentication-key



� authKey � password, a continuous string of characters up to 8 characters in length


area default-costERX Edge Routers

33

area default-cost

Description: Specifies a cost for the default summary route sent into a stub area. A stub area is an OSPF area that carries a default route, intra-area routes, and interarea routes, but does not carry external routes. You cannot configure virtual links across a stub area. Stub areas cannot contain an ASBR. The no version removes the configured default route cost.

Syntax: area { areaId | areaIdInt } default-cost defaultCost

no area { areaId | areaIdInt } default-cost


� areaIdInt � OSPF area ID as a decimal value 0�4294967295

� defaultCost � stub area�s advertised external route cost (cost metric); an integer in the range 0�16777215


area-message-digest-key34

area-message-digest-key

Description: Specifies an HMAC MD5 key that the system uses to create a secure, encrypted message digest of each IS-IS level 1 packet (LSPs, CSNPs, and PSNPs). The digest is inserted into the packet from which it is created. Using this algorithm for area routers protects against unauthorized routers injecting false routing information into your network. You can specify when the system will start (default is the current time) and stop (default is never) accepting packets that include a digest made with this key. You can specify when the system will start (default is the current time plus 2 minutes) and stop (default is never) generating packets that include a digest made with this key. The no version deletes the key specified by the key-id.

Syntax: area-message-digest-key keyId hmac-md5 [ 0 | 8 ] key [ start-accept startAcceptTime [ { startAcceptMonth startAcceptDay | startAcceptDay startAcceptMonth } startAcceptYear ] ] [ start-generate startGenTime [ { startGenMonth startGenDay | startGenDay startGenMonth } startGenYear ] ] [ stop-accept { never | stopAcceptTime [ { stopAcceptMonth stopAcceptDay | stopAcceptDay stopAcceptMonth } stopAcceptYear ] } ] [ stop-generate { never | stopGenTime [ { stopGenMonth stopGenDay | stopGenDay stopGenMonth } stopGenYear ] } ]

no area-message-digest-key keyId

� keyId � integer from 1 to 255 that is a unique identifier for the secret key, sent with the message digest in the packet.

� 0 � indicates key is entered in unencrypted form (plaintext); default option

� 8 � indicates the key is entered in encrypted form (ciphertext)

� key � string of up to 20 alphanumeric characters; secret key used by the HMAC MD5 algorithm to generate the message digest

� startAcceptTime, startAcceptMonth, startAcceptDay, startAcceptYear � time, month, day, year that the system will start accepting packets created with this password. Use military time format HH:MM[:SS ].

� startGenTime, startGenMonth, startGenDay, startGenYear � time, month, day, year that the system will start inserting this password into packets. Use military time format HH:MM[:SS ].

� never � indicates the system never stops accepting or generating packets; overrides previously specified stop times and keeps using the authentication key in sending and receiving PDUs with the corresponding authentication indefinitely

area nssaERX Edge Routers

35

� stopAcceptTime, stopAcceptMonth, stopAcceptDay, stopAcceptYear � time, month, day, year that the system will stop accepting packets created with this password. Use military time format HH:MM[:SS ].

� stopGenTime, stopGenMonth, stopGenDay, stopGenYear � time, month, day, year that the system will stop inserting this password into packets. Use military time format HH:MM[:SS ].


area nssa

Description: Configures an area as an NSSA and controls generation of type 7 default LSAs. NSSAs are similar to stub areas but have the additional capability of importing AS external routes in a limited fashion. The no version removes the specified option for default-information-originate, removes default-information-originate, or removes the NSSA designation from the area.

Syntax: [ no ] area { areaId | areaIdInt } nssa [ default-information-originate [ always | metric absoluteValue | metric-type 1 | metric-type 2 | route-map mapTag ]* ]



� default-information-originate � causes the generation of a type 7 default LSA if a default route exists in the routing table.

� always � creates the default route if it doesn�t exist

� absoluteValue � metric applied to the generated type 7 default LSAs; ranges from 0�429496729

� metric-type 1 � cost of the external routes is equal to the sum of all internal costs and the external cost

� metric-type 2 � cost of the external routes is equal to the external cost alone; this is the OSPF default

� mapTag � string of up to 32 alphanumeric characters that specifies a route map applied to the generated type 7 default LSAs



area range36

area range

Description: Aggregates the routes at an area boundary. By default, the range of configured networks is advertised in type 3 (summary) LSAs. The no version disables this function.

Syntax: [ no ] area { areaId | areaIdInt } range ipAddress mask [ do-not-advertise ]



� ipAddress � IP address to match

� mask � IP address mask

� do-not-advertise � specifies that the range of configured networks is not advertised


area stub

Description: Defines an area as a stub area. A stub area is an OSPF area that carries a default route, intra-area routes, and interarea routes, but does not carry AS external routes. This reduces the size of the area's OSPF database and decreases memory usage for external routers in the stub area. The no version disables this function.

Syntax: [ no ] area { areaId | areaIdInt } stub




area virtual-link

Description: Defines an OSPF virtual link. The no version removes the virtual link.

Syntax: [ no ] area { areaId | areaIdInt } virtual-link ipAddress



� ipAddress � IP address associated with the virtual link neighbor


area virtual-link authentication-keyERX Edge Routers

37

area virtual-link authentication-key

Description: Configures simple password (type 1) authentication for OSPF virtual links. The no version removes the password.

Syntax: [ no ] area { areaID | areaIdInt } virtual-link ipAddress authentication-key [ 0 | 8 ] line



� ipAddress � IP address of the virtual link neighbor

� 0 � indicates that the line is entered in unencrypted form (plaintext); this is the default option

� 8 � indicates that the line is entered in encrypted form (ciphertext)

� line � password to be used by neighbors. All neighboring routers on the same network must have the same password. The password can be a continuous string of up to 16 alphanumeric characters.


area virtual-link authentication message-digest

Description: Specifies that MD5 authentication is used for the virtual link. The no version sets the authentication for the virtual link to none, but leaves any configured MD5 key intact.

Syntax: [ no ] area { areaID | areaIdInt } virtual-link ipAddress authentication message-digest





area virtual-link authentication-none

Description: Specifies that no authentication is to be used for the virtual link. The no version has no effect.

Syntax: [ no ] area { areaId | areaIdInt } virtual-link ipAddress authentication-none





area virtual-link dead-interval38

area virtual-link dead-interval

Description: Defines an OSPF virtual link and the time interval allowed for detecting a dead router. The no version removes the virtual link�s dead interval.

Syntax: [ no ] area { areaID | areaIdInt } virtual link ipAddress dead-interval deadInterval




� deadInterval � integer in the range 1�8192 seconds


area virtual-link hello-interval

Description: Defines an OSPF virtual link and the time between the hello packets. The hello interval value must be the same for both ends of the virtual link. The no version removes the virtual link�s hello interval.

Syntax: [ no ] area { areaId | areaIdInt } virtual-link ipAddress hello-interval helloInterval

� areaId � OSPF area ID in IP address format.



� helloInterval � integer in the range 1�8192 seconds


area virtual-link message-digest-key md5ERX Edge Routers

39

area virtual-link message-digest-key md5

Description: Enables MD5 authentication and configures MD5 keys for virtual links. The no version deletes MD5 keys.

Syntax: area { areaId | areaIdInt } virtual-link ipAddress message-digest-key md5KeyId md5 [ 0 | 8 ] msgDigestKey

no area { areaId | areaIdInt } virtual-link ipAddress message-digest-key md5KeyId




� md5KeyId � key identifier in the range 1�255



� msgDigestKey � password to be used by neighbors. All neighboring routers on the same network must have the same password. The password can be a continuous string of up to 16 alphanumeric characters.

Note: If you delete all the MD5 keys, the authentication type for the virtual link is still MD5, but you need to configure MD5 keys.

Note: To disable MD5 authentication for the virtual link, use the area virtual-link authentication-none command.


area virtual-link retransmit-interval

Description: Defines an OSPF virtual link and the time between link state advertisement retransmissions for the adjacency belonging to the virtual link. The no version removes the virtual link�s retransmit interval.

Syntax: [ no ] area { areaId | areaIdInt } virtual-link ipAddress retransmit-interval retransmInterval

� areaId � OSPF area ID in IP address format.



� retransmInterval � LSA retransmit interval; an integer in the range 1�8192 seconds


area virtual-link transmit-delay40

area virtual-link transmit-delay

Description: Defines an OSPF virtual link and the estimated time it takes to transmit a link state update packet on the virtual link. The no version removes the virtual link�s transmit delay.

Syntax: [ no ] area { areaId | areaIdInt } virtual-link ipAddress transmit-delay transmDelay




� transmDelay � LSA transmit delay; an integer in the range 1�8192 seconds


arp

Description: Adds a permanent entry in the ARP cache. The no version removes an entry from the ARP cache. This command applies only on an Ethernet or bridged Ethernet interface.

Syntax: [ no ] arp [ vrf vrfName ] ipAddress { interfaceType interfaceSpecifier[ macAddress [ validate ] ] | macAddress }

� vrfName � name of the VRF to which the command applies; string of 1�32 alphanumeric characters

� ipAddress � IP address in 32-bit dotted-decimal format corresponding to the local data link address



� macAddress � MAC address of the interface

� validate � allows the inclusion of MAC validation entries


arp timeoutERX Edge Routers

41

arp timeout

Description: Specifies how long an entry remains in the ARP cache. You can set the ARP timeout only on bridged Ethernet and Fast Ethernet interfaces on the FE-2 module. You cannot set the timeout on the SRP module. The default value is 21600 seconds (6 hours). Use the show config command to display the current value. The no version restores the default value.

Syntax: arp timeout timeoutVal

no arp timeout

� timeoutVal � time in seconds that an entry remains in the ARP cache

Mode(s): Interface Configuration

atm

Description: The system supports the configuration of traffic-shaping parameters for PPPoA via domain-based parameters and RADIUS. The no version removes the ATM traffic-shaping configuration.

Syntax: atm { ubr | ubrpcr pcr | nrtvbr pcr scr mbs | cbr pcr }

no atm

� ubr � sets the traffic category to unspecified bit rate

� ubrpcr � sets the traffic category to unspecified bit rate with peak cell rate

� pcr � peak cell rate

� nrtvbr � sets the traffic category to non�real time variable bit rate

� scr � sustained cell rate

� mbs � maximum burst size

� cbr � sets the traffic category to constant bit rate


atm aal5 description

Description: Assigns a text description or alias to an ATM AAL5 interface. The no version removes the text description or alias. Use the show atm subinterface command to display the text description.The atm description is pushed out to RADIUS during authentication/accounting.

Syntax: atm aal5 description name

no atm aal5 description

� name � alias for the AAL5 interface; up to 32 characters


atm aal5 shutdown42

atm aal5 shutdown

Description: Sets the administrative state of an ATM AAL5 interface to disabled. The no version enables a disabled interface.

Syntax: [ no ] atm aal5 shutdown


atm aal5 snmp trap link-status

Description: Enables SNMP link status traps on the AAL5 layer on a per-interface basis. The no version disables the traps.

Syntax: [ no ] atm aal5 snmp trap link-status


atm atm1483 description

Description: Assigns a text description or alias to an ATM 1483 interface. The no version removes the text description or alias. Use the show atm aal5 interface to display the text description. The atm description is pushed out to RADIUS during authentication/accounting.

Syntax: atm atm1483 description name

no atm atm1483 description

� name � alias for the atm atm1483 interface; up to 15 characters

Mode(s): Subinterface Configuration

atm atm1483 mtu

Description: Sets the MTU size for an ATM 1483 subinterface. The no version restores the default MTU size of 9180.

Syntax: atm atm1483 mtu size

no atm atm1483 mtu

� size � maximum number of packet transmissions permitted on an ATM 1483 subinterface; the valid range is 256�9180. The default is 9180.


atm atm1483 shutdownERX Edge Routers

43

atm atm1483 shutdown

Description: Sets the administrative state of an ATM 1483 subinterface to disabled. The no version enables a disabled subinterface.

Syntax: [ no ] atm atm1483 shutdown


atm atm1483 snmp trap link-status

Description: Enables SNMP link status traps on the ATM1483 layer. The no version disables the traps.

Syntax: [ no ] atm atm1483 snmp trap link-status


atm auto-configuration

Description: Enables auto configuration of ILMI. Auto configuration is enabled by default. The no version disables auto configuration and sets the ILMI parameters to the UNI version configured using the atm uni-version command, which has a default value of UNI 4.0. Entering the atm auto-configuration command overrides any previous configuration of the atm uni-version command.

Syntax: [ no ] atm auto-configuration


atm cac

Description: Enables CAC on the ATM interface. If the subscription limit or UBR weight parameters are set to zero, the system uses the effective port bandwidth as the subscription bandwidth. The effective bandwidth varies according to line module. The no version disables CAC on the interface.

Syntax: [ no ] atm cac [ subscriptionBandwidth ] [ ubr ubrWeight ]

� subscriptionBandwidth � maximum allowable bandwidth on this port in the range 0�2147482647 kbps; the default value is 0

� ubrWeight � bandwidth associated with UBR and UBR-PCR connections in the range is 0�2147482647 kbps; the default value is 0

Note: If you modify one of these parameters after CAC is enabled, you must modify both parameters. Otherwise, the parameter not specified reverts to its default value.


atm clock internal44

atm clock internal

Description: Causes the ATM interface to generate the transmit clock internally. The no version causes ATM interfaces to recover the clock from the received signal. If the internal clock is chosen and no internal source is specified, then the internal clock source is taken from the line module.

Syntax: [ no ] atm clock internal [ internalSource ]

� internalSource � one of the following:

� module � specify that the internal clock is from the line module

� chassis � specify that the internal clock is from the configured system clock


atm description

Description: Assigns a text description or alias to the interface. The no version removes the text description or alias. The show atm interface command displays the text description.The description is pushed out to RADIUS during authentication/accounting.

Syntax: atm description name

no atm description

� name � alias for the atm interface; up to 32 characters


atm esi-address

Description: Specifies an ATM ESI address for the subinterface. The no version removes the ESI address.

Syntax: atm esi-address esiAddress

no atm esi-address

� esiAddress � end system ID portion of the ATM NSAP address in the format xxxxxxxxxxxx.xx


atm framingERX Edge Routers

45

atm framing

Description: Configures T3 or E3 framing on an ATM interface. The no version returns framing to the default. For a T3 interface, the default is cbitplcp. For an E3 interface, the default is g751plcp.

Syntax: atm framing framingType

no atm framing

� framingType � one of the following:

� cbitadm � c-bit with ATM direct mapping for a DS3 (T3) interface

� cbitplcp � c-bit with PLCP framing for a DS3 (T3) interface (default for T3)

� g832adm � G.832 ATM direct mapping for an E3 interface

� g751adm � G.751 ATM direct mapping for an E3 interface

� g751plcp � G.751 PLCP mapping for an E3 interface (default for E3)

� m23adm � M23 ATM direct mapping for a DS3 (T3) interface

� m23plcp � M23 with PLCP framing for a DS3 (T3)


atm ilmi-enable

Description: Enables ILMI on the interface. The no version removes the ILMI PVC.

Syntax: [ no ] atm ilmi-enable


atm ilmi-keepalive

Description: Enables generation of ILMI keepalive messages on the system. The no version disables the generation of keepalive messages. Enabling generation of keepalive messages has an effect on the operational state of the ATM interface.

Syntax: [ no ] atm ilmi-keepalive [ seconds ]

� seconds � number in the range 0�4294967295; the interval in seconds between two consecutive ILMI keepalive requests


atm lbo46

atm lbo

Description: Specifies the cable length (line build-out) for the ATM T3 or E3 interface. The length of cable determines power requirements. The no version restores the default value.

Syntax: atm lbo { long | short }

no atm lbo

� short � a cable length in the range 0�225 feet (the default)

� long � a cable length in the range 255�450 feet


atm oam

Description: Configures F4 OAM on an interface or circuit. The no version deletes F4 OAM circuits.

Syntax: atm oam [ vpi ] [ [ seg-loopback | end-loopback [ loopback-timer time ] ][ cc { source | sink | both } ] ]

no atm oam [ vpi ] [ [ seg-loopback | end-loopback [ loopback-timer time ] ] ]

Note: If you do not specify any options, both end-to-end and segment loopback are enabled on all VPIs on the interface.

� vpi � VPI on which you want to enable F4 OAM. If you do not specify a VPI, F4 OAM flow is enabled on all VPIs on the interface.

� seg-loopback � enables F4 segment OAM

� end-loopback � enables F4 end-to-end OAM

� loopback-timer � to generate F4 loopback cells on the VPI, you must configure the loopback timer; you can set the loopback timer only for end-to-end loopback

� time � time interval in the range 0�600 seconds between transmissions of F4 loopback cells. This value is a multiple of 20 and is based on the number of circuits with VC integrity enabled. The values are 20 seconds for 1�1999 circuits, 40 seconds for 2000�3999 circuits, 60 seconds for 4000�5999 circuits, and so on. These values are used regardless of the setting of this parameter.

� cc � enables CC cells on the PVC; you can enable CC cells only on data circuits, not on control circuits, such as ILMI or signaling circuits

� sink � enables this VC as a sink point (cell receiver)

� source � enables this VC as the source point (cell generator)

� both � enables this VC as both a sink point and a source point


atm oam flushERX Edge Routers

47

atm oam flush

Description: Indicates that all OAM cells received on an interface should be ignored. OAM performs fault management and performance management functions on an ATM interface. The no version disables the feature.

Syntax: [ no ] atm oam flush [ alarm-cells ]

� alarm-cells � causes the system to ignore only AIS and RDI cells and to accept all other OAM cells


atm oam loopback-location

Description: Sets the location ID of the ATM interface. The no version returns the loopback location to the default setting of all 1s (ones).

Syntax: atm oam loopback-location locationID

[ no ] atm oam loopback-location

� locationID � value of the four-octet long location ID of the ATM interface


atm pvc48

atm pvc

Description: Creates a PVC on an ATM interface. The no version removes the specified PVC.

Syntax: atm pvc vcd vpi vci { encapsulation } [ { cbr cbr } | { peak [ average burst [ rt ] ] } ] [ oam [ seconds | cc [ segment | end-to-end ] { source | sink | both } ] ] [ inArp [ minutes ] ]

no atm pvc vcd

� vcd � virtual circuit descriptor that is an identifier for the VC in other commands; the range is 1�2147483647

� vpi � virtual path identifier of this PVC. The allowable numeric range depends on the line module capabilities and current configuration. The VPI and VCI cannot both be set to 0; if one is 0, the other cannot be 0.

� vci � virtual circuit identifier of this PVC. The allowable numeric range depends on the line module capabilities and current configuration. The VPI and VCI cannot both be set to 0; if one is 0, the other cannot be 0.

� encapsulation � one of the following:

� aal5snap � LLC encapsulated circuit; LLC/SNAP precedes the protocol datagram

� aal5mux ip � VC-based multiplexed circuit used for IP only

� aal5autoconfig � enables autodetection of the 1483 encapsulation (LLC/SNAP or VC multiplexed)

� ilmi � integrated local management interface encapsulation

� qsaal � Q.2931 signalling

� peak � PCR in Kbps

� average � average rate in Kbps; also referred to as SCR

� burst � length in cells of the burst.; also referred to as MBS

� rt � selects VBR-RT as the service type; the default type is VBR-NRT. You can select rt only if you set the peak, average, and burst parameters.

� cbr � constant bit rate in Kbps

� oam � enable generation of OAM F5 loopback cells on this circuit. This option enables VC integrity features that have an effect on the operational state of the ATM PVC.

� seconds - time interval in seconds between transmissions of OAM F5 end-to-end loopback cells for VC connectivity verification. This value is a multiple of 20 and is based on the number of circuits with VC integrity

atm shutdownERX Edge Routers

49

enabled. The values are: 20 seconds for 1�1999 circuits, 40 seconds for 2000�3999 circuits, 60 seconds for 4000�5999 circuits, and so on. These values are used regardless of the setting of this parameter.

� inarp � enables Inverse ARP

� minutes � InARP refresh rate in minutes; 15 minutes is the default

Note: The optional peak, average, and burst parameters configure traffic-shaping parameters for the circuit. The allowable traffic-shaping features and range specifications depend on the line module capabilities.

� cc � enables CC cells on the PVC; you can enable CC cells only on data circuits, not on control circuits, such as ILMI or signaling circuits

� segment � opens an OAM CC segment cell flow

� end-to-end � opens an OAM CC end-to-end cell flow

� sink � enables this VC as a sink point (cell receiver)

� source � enables this VC as the source point (cell generator)

� both � enables this VC as both a sink point and a source point


atm shutdown

Description: Administratively disables an ATM interface. The no version enables a disabled interface.

Syntax: [ no ] atm shutdown


atm snmp trap link-status

Description: Enables SNMP link status traps on the ATM layer on a per-interface basis. The no version disables the traps.

Syntax: [ no ] atm snmp trap link-status


atm sonet stm-1

Description: Sets the mode of operation on the physical interface to SDH STM-1. The no version restores the default value, SONET STS-3c operation.

Syntax: [ no ] atm sonet stm-1


atm svc50

atm svc

Description: Defines an SVC on an ATM subinterface. The system will attempt to set up an SVC to the destination address with the requested traffic parameters and encapsulation. The no version removes the specified SVC definition.

Syntax: atm svc nsap nsapAddress [ { encapsulation } [ { cbr cbr } | peak [ average burst [ rt ] ] ] ]

no [ atm ] svc [ nsap nsapAddress ]

� nsapAddress � destination address in the format

� encapsulation � one of the following:

� aal5snap � LLC encapsulated circuit; LLC/SNAP precedes the protocol datagram

� aal5mux ip � VC-based multiplexed circuit used for IP only

� cbr � constant bit rate in Kbps

� peak � PCR in Kbps

� average � average rate in Kbps; also referred to as SCR

� burst � length in cells of the burst.; also referred to as MBS

� rt � selects VBR-RT as the service type


atm uni-version

Description: Specifies the UNI version the interface should use. There is no no version.

Syntax: atm uni-version versionNumber

� versionNumber � UNI version number: 3.0, 3.1, or 4.0


xx xxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxx xx⋅ ⋅ ⋅{ {

122 24 2

atm vc-per-vpERX Edge Routers

51

atm vc-per-vp

Description: Configures the number of virtual circuits per virtual path. This command controls the VPI and VCI range on the ATM interface. The allowable configuration range depends on the line module. The system will not execute the command if any virtual circuits are open on the interface. The no version restores the default.

Note: The minimum number of VCs per VP is 4096 for 0C3-4 modules and 1024 for UT3a modules. If you enter a value that is below the minimum, the system uses the minimum value.

Syntax: atm vc-per-vp [ vcCount ]

no atm vc-per-vp

� vcCount � number of virtual circuits per virtual path


atm vp-tunnel

Description: Defines a virtual path tunnel and configures the rate of traffic flow within the tunnel. The no version removes the restriction.

Syntax: atm vp-tunnel vpi [ cbr ] kbps

no atm vp-tunnel vpi

� vpi � number in the range 0�255; virtual path identifier of this PVC

� cbr � specifies the service class as constant bit rate

� kbps � tunnel rate for a virtual path. The aggregate to this traffic from all circuits configured in the tunnel is held to the specified rate. Certain line modules may have minimum rates for VP tunnels.


authentication

Description: Specifies the authentication method to use in the IKE policy. The no version restores the default, preshared keys.

Syntax: authentication { pre-share }

no authentication

� pre-share � specifies preshared keys as the authentication method


authentication key52

authentication key

Description: Specifies the password for text authentication and the key for MD5 authentication for RIP remote-neighbor interface. The no version clears the key for the interface. Supported only in RIP version 2. Authentication is disabled by default.

Syntax: authentication key [ 0 | 8 ] authkey

no authentication key

� 0 � the authKey is entered in unencrypted form (plaintext); this is the default option

� 8 � the authKey is entered in encrypted form (ciphertext)

� authkey � specifies the password sent with RIP messages or the key used to encrypt/decrypt RIP messages, depending on the authentication mode set for this remote-neighbor interface.

Mode(s): Remote Neighbor Configuration

authentication-key

Description: Enables simple password authentication and assigns a password used by OSPF remote neighbors. The no version deletes the password.

Syntax: authentication-key [ 0 | 8 ] authKey

no authentication-key



� authKey � a password, a continuous string of characters up to 8 characters in length


authentication message-digest

Description: Specifies that MD5 authentication is used for the OSPF remote-neighbor interface. There is no no version.

Syntax: authentication message-digest


authentication modeERX Edge Routers

53

authentication mode

Description: Specifies the type of authentication used on the RIP remote-neighbor interface. The no version removes authentication from the interface. Supported only in RIP version 2. Authentication is disabled by default.

Syntax: authentication mode { text | md5 keyID }

no authentication mode

� text � a simple text password is sent with each RIP message. If the password is not possessed by remote neighbors, the message is rejected.


� keyID � number identifying the MD5 key in the range 1�255. Remote neighbors must share the MD5 key to decrypt the message and encrypt the response.


authentication-none

Description: Specifies that no authentication is to be used for the OSPF remote-neighbor interface. There is no no version.

Syntax: authentication-none


auto-configure

Description: Specifies the type(s) of dynamic encapsulations that will be accepted or detected by the static ATM 1483 interface.The command may be entered repeatedly in ATM subinterface mode.

Syntax: [ no ] auto-configure upperInterfaceType

� upperInterfaceType � dynamic encapsulation type: bridgedEthernet, ip, ppp, pppoe


automatic-virtual-link

Description: Enables or disables automatic virtual link configuration. The no version disables an automatic virtual link.

Syntax: [ no ] automatic-virtual-link


auto-summary54

auto-summary

Description: Reenables the automatic summarization of routes redistributed into BGP to their natural network masks. Automatic summarization is enabled by default. The no version disables automatic summarization.

Syntax: [ no ] auto-summary


bandwidthERX Edge Routers

55

bandwidth

Description: Specifies the total bandwidth available on the interface. The no version removes the admission control configuration from the interface. For total reservable bandwidth, see the mpls bandwidth command.

Syntax: bandwidth bandwidth

no bandwidth

� bandwidth � available bandwidth in kilobits per second, a value from 1�10,000,000


bandwidth oversubscription

Description: Allows the line modules to operate below line rate performance. The no version forces the line modules to operate at line rate performance.

Syntax: [ no ] bandwidth oversubscription

Mode(s): Privileged Exec

banner

Description: Configures message-of-the-day, login, or exec banners to be displayed by the CLI. If you do not specify an option, the behavior is the same as if you specified the motd option. The no version deletes the banner.

Syntax: banner [ motd | login | exec ] bannerText

no banner [ motd | login | exec ]

� motd � displays the banner when a console or vty connection is initiated

� login � displays the banner before any user authentication (line or RADIUS authentication); the banner is also displayed if user authentication is not configured

� exec � displays the banner after user authentication (if any) and before the first prompt of a CLI session

� bannerText � alphanumeric string truncated at 1024 characters; delimited by the first character of the string, which must be repeated at the end of the string and must not occur anywhere else in the string


baseline aaa56

baseline aaa

Description: Sets a statistics baseline for authentication and authorization statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.

Syntax: baseline aaa


baseline cbf interface

Description: Sets a statistics baseline for CBF interfaces. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.

Syntax: baseline cbf interface interfaceType interfaceSpecifier


� interfaceSpecifier � see Interface Types and Specifiers in About This Guide.


baseline clns

Description: Sets a statistics baseline for CLNS. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.

Syntax: baseline clns [ interfaceType interfaceSpecifier ]




baseline dhcpERX Edge Routers

57

baseline dhcp

Description: Sets a statistics baseline for DHCP relay statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.

Syntax: baseline dhcp { server | relay }

� server � sets baseline for DHCP proxy server statistics

� relay � sets baseline for DHCP relay statistics


baseline frame-relay interface

Description: Sets a statistics baseline for Frame Relay and MFR interfaces, subinterfaces, and circuits. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.

Syntax: baseline frame-relay interface interfaceType interfaceSpecifier [ dlci ]

� interfaceType � one of the following interface types:

� hssi � limits baseline for HSSI interface

� mlframe-relay � limits baseline for an MFR bundle or subinterface

� pos � limits baseline for POS interface

� serial � limits baseline for serial interface

� tunnel � limits baseline for GRE tunnel interface


� dlci � DLCI number to be used on the specified subinterface to identify a virtual circuit in the range 16�1007


baseline frame-relay multilinkinterface58

baseline frame-relay multilinkinterface

Description: Sets a statistics baseline for MFR links. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.

Syntax: baseline frame-relay multilinkinterface interfaceType interfaceSpecifier

� interfaceType � one of the following interface types:

� serial � limits baseline for serial interface

� pos � limits baseline for POS interface



baseline hdlc interface

Description: Sets a statistics baseline for Cisco HDLC interfaces. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.

Syntax: baseline hdlc interface type interfaceSpecifier

� type � one of the following interface types:

� serial � limits baseline to serial interface

� hssi � limits baseline to HSSI interface



baseline interfaceERX Edge Routers

59

baseline interface

Description: Sets a statistics baseline for an interface or a specific ATM virtual circuit. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.

Syntax: baseline interface interfaceType interfaceSpecifier [ vcd ]



� vcd � virtual circuit descriptor; number in the range 1�4294967295; an identifier for the VC in other commands (ATM interfaces only)


baseline ip

Description: Sets the baseline on general IP traffic statistics as the current value.

Syntax: baseline ip [ vrf vrfName ]



baseline ip bgp

Description: Sets the baseline on all BGP statistics as the current value.

Syntax: baseline ip bgp


baseline ip dhcp-local

Description: Sets a baseline for DHCP local server statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.

Syntax: baseline ip dhcp-local


baseline ip dvmrp60

baseline ip dvmrp

Description: Sets a baseline for DVMRP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.

Syntax: baseline ip dvmrp


baseline ip http

Description: Sets a baseline for HTTP server statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.

Syntax: baseline ip http


baseline ip igmp

Description: Sets a baseline for IGMP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.

Syntax: baseline ip igmp


baseline ip igmp-proxy interface

Description: Sets the baseline on all IGMP statistics by setting the counters for the numbers of queries received and reports sent on the upstream interface to zero. There is no no version.

Syntax: baseline ip igmp-proxy interface


baseline ip interfaceERX Edge Routers

61

baseline ip interface

Description: Sets a baseline for IP interface statistics.

Syntax: baseline ip interface [ vrf vrfName ] interfaceType interfaceSpecifier





baseline ip ospf

Description: Sets a baseline for OSPF statistics and counters.

Syntax: baseline ip ospf


baseline ip rip

Description: Sets a statistics baseline for RIP interfaces. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.

Syntax: baseline ip rip


baseline ip tcp62

baseline ip tcp

Description: Sets a statistics baseline for TCP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.

Syntax: baseline ip tcp [ vrf vrfName ] [ localAddress localPort remoteAddress remotePort ]


� localAddress � local IP address on the system

� localPort � local TCP port number on the system

� remoteAddress � IP address of remote system

� remotePort � TCP port number on remote system


baseline ip udp

Description: Sets a statistics baseline for UDP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.

Syntax: baseline ip udp [ vrf vrfName ]



baseline ip vrrp

Description: Sets a statistics baseline for VRRP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.

Syntax: baseline ip vrrp


baseline line interface sonetERX Edge Routers

63

baseline line interface sonet

Description: Sets a statistics baseline for SONET/SDH statistics at the line layer. The system implements the baseline by reading and storing the MIB statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.

Syntax: baseline line interface sonet interfaceSpecifier



baseline local pool

Description: Sets a statistics baseline for the system local address pool statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.

Syntax: baseline local pool


baseline log

Description: Sets a baseline for logging events. Only log messages timestamped after the baseline will appear when you enter the show log data delta command. To use the current system time, do not enter any options.

Syntax: baseline log [ last-reset | time [ utc ] month day year ]

� last-reset � causes the system to display log messages generated since the last time the system was reset

� time � causes the system to display messages that are timestamped after the time and date that you set. To set the time, use the following syntax:

Hour:Minute[:Second] � current time in 24-hour format; seconds are optional� utc � indicates that the time entered is UTC (GMT) time; if you do not

include this keyword, the system considers the time entered to be local time

� month � name of the month in English

� day � number of the day in the range 1�31

� year � four-digit number of the year


baseline path interface sonet64

baseline path interface sonet

Description: Sets a statistics baseline for SONET/SDH statistics at the path layer. The system implements the baseline by reading and storing the MIB statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.

Syntax: baseline path interface sonet interfaceSpecifier



baseline ppp interface

Description: Sets a statistics baseline for PPP interfaces. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.

Syntax: baseline ppp interface { atm | mlppp | pos | serial | hssi } interfaceSpecifier

� atm � specifies an ATM interface

� mlppp � specifies an MLPPP interface

� pos � specifies a POS interface

� serial � specifies a serial interface

� hssi � specifies a HSSI interface



baseline pppoe interfaceERX Edge Routers

65

baseline pppoe interface

Description: Sets a statistics baseline for PPPoE interfaces, subinterfaces, and/or circuits. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.

Syntax: baseline pppoe interface { serial | atm | fastEthernet | gigabitEthernet } interfaceSpecifier

� serial � specifies a serial interface; however, PPPoE is not currently supported on serial interfaces


� fastEthernet � specifies a Fast Ethernet interface

� gigabitEthernet � specifies a Gigabit Ethernet interface



baseline radius

Description: Sets a statistics baseline for RADIUS statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.

Syntax: baseline radius


baseline section interface sonet

Description: Sets a statistics baseline for SONET/SDH statistics at the section layer. The system implements the baseline by reading and storing the MIB statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.

Syntax: baseline section interface sonet interfaceSpecifier



baseline show-delta-counts66

baseline show-delta-counts

Description: Configures the system to always display the statistics relative to the most recent appropriate baseline.

Syntax: [ no ] baseline show-delta-counts


baseline smds interface

Description: Sets a baseline for SMDS statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version.

Syntax: baseline smds interface interfaceType interfaceSpecifier

� interfaceType � hssi, tunnel



baseline snmp

Description: Sets a baseline for SNMP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.

Syntax: baseline snmp


baseline tacacs

Description: Sets a baseline for TACACS+ statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrived.

Syntax: baseline tacacs


bertERX Edge Routers

67

bert

Description: Enables bit error rate tests using the specified pattern on an E1 line on a CE1 line module and on a T1 line on a CT1 line module. The no version stops the test that is running.

Syntax: bert pattern pattern interval time [ unframed ]

no bert

� pattern � one of the following test patterns

� 0s � repetitive test pattern of all zeros, 00000...

� 1s � repetitive test pattern of all ones, 11111...

� 2^11 � pseudorandom test pattern, 2,048 bits in length

� 2^15 � pseudorandom 0.151 test pattern, 32,768 bits in length

� 2^20-O153 � pseudorandom 0.153 test pattern, 1,048,575 bits in length

� 2^20-QRSS � pseudorandom QRSS 0.151 test pattern, 1,048,575 bits in length

� 2^23- � pseudorandom 0.151 test pattern, 8,388,607 bits in length

� alt-0-1 � repetitive alternating test pattern of zeros and ones, 01010101...

� time � interval between test patterns, ranging from 1�14400 minutes

� unframed � the test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern occupies only the payload bits.


bgp advertise-inactive

Description: Enables the advertisement of inactive BGP received routes�routes that are considered by BGP to be �best routes� and therefore are present in the IP forwarding table, but that are not being used for forwarding. The no version restores the default state of normal route advertisement, whereby BGP advertises received routes only if they are in the IP forwarding table and are being used to forward traffic, or if synchronization is enabled.

Syntax: [ no ] bgp advertise-inactive


bgp always-compare-med68

bgp always-compare-med

Description: Enables the comparison of the MED for paths from neighbors in different ASs. The no version disables the feature.

Syntax: [ no ] bgp always-compare-med


bgp bestpath med confed

Description: Specifies that BGP considers the MED when comparing routes originated from different sub-ASs within the confederation to which this BGP speaker belongs. The no version restores the default state, where the MED attribute is not considered.

Syntax: [ no ] bgp bestpath med confed


bgp bestpath missing-as-worst

Description: Specifies that a route with a MED is always considered to be better than a route without a MED by causing the missing MED attribute to have a value of infinity. The no version restores the default state, where the missing MED attribute is considered to have a value of zero.

Syntax: [ no ] bgp bestpath missing-as-worst


bgp client-to-client reflection

Description: Restores route reflection from a BGP route reflector to clients. The no version disables client-to-client reflection. By default, BGP reflects routes received from any route reflector client to all other route reflector clients. This command can be used to disable or restore this behavior.

Syntax: [ no ] bgp client-to-client reflection


bgp cluster-idERX Edge Routers

69

bgp cluster-id

Description: Configures a cluster ID if the BGP cluster has more than one route reflector. The no version causes BGP to use the router ID as the cluster ID.

Syntax: bgp cluster-id { clusterId | ipAddress }

no bgp cluster-id [ clusterId | ipAddress ]

� clusterId � a number in the range 0�4294967295; the cluster ID of this router acting as a route reflector

� ipAddress � the cluster ID of this router acting as a route reflector specified as an IP address


bgp confederation identifier

Description: Configures a BGP confederation identifier. The no version removes a BGP confederation identifier.

Syntax: bgp confederation identifier autonomousSystem

no bgp confederation identifier [ autonomousSystem ]

� autonomousSystem � number in the range 1�4294967295; the confederation identifier


bgp confederation peers

Description: Specifies the sub-ASs that belong to a confederation by listing individual AS numbers or by reference to an AS-path access list (the filter list). If the remote AS of a peer appears in the list of sub-AS numbers or in the filter list, then the peer is considered to be in the same confederation. The no version removes individually specified sub-ASs, all sub-ASs specified by the filter list, or all sub-ASs from the confederation.

Syntax: bgp confederation peers { autonomousSystem [ autonomousSystem ]* | filter-list filterListName }

no bgp confederation peers [ autonomousSystem [ autonomousSystem ]* | filter-list filterListName ]

� autonomousSystem � AS number in the range 1� 4294967295


� filterListName� name of an AS-path access list; a string of up to 32 characters


bgp dampening70

bgp dampening

Description: Enables BGP route dampening. The system assesses a penalty of 1000 each time a route flaps and adds this to any previously accumulated penalty value. Penalties are cumulative. The no version disables route flap dampening.

Syntax: [ no ] bgp dampening [ halfLife [ reuse suppress maxSuppressTime[ halfLifeUnreachable ] ] ] [ route-map mapTag ]

� halfLife � half-life period in minutes in the range 1�45. The default is 15. When a BGP route has been assigned a penalty, the penalty is decreased by half after the half-life period.

� reuse � reuse limit in the range 1�20000. The default is 750. As the penalty for a flapping route decreases and falls below this reuse limit, the route is unsuppressed. That is, the route is added back to the BGP table and used for forwarding.

� suppress � suppress limit in the range 1�20000. A route is suppressed when its penalty exceeds this limit. The default value is 2000.

� maxSuppressTime � maximum suppression time in minutes in the range 1�255. This value is the maximum amount of time a route can be suppressed. The default value is four times the half-life value.

� halfLifeUnreachable � alternate half-life period in minutes for unreachable routes; a number in the range 1�45. If this value is not specified, the same half-life period is used for both reachable and unreachable routes.

� route-map � specifies that dampening can be applied to routes according to the route map behavior. If the route map permits a route, the route is subject to dampening. If the route map denies a route, the route is not subject to dampening. The route map can contain a no dampening clause that determines dampening characteristics.

� mapTag � name of the route map; a string of up to 32 alphanumeric characters.


bgp default ipv4-unicast

Description: Causes all neighbors subsequently created with the neighbor remote-as or neighbor peer-group commands to be automatically activated in the IPv4 unicast address family. The no version disables the IPv4 unicast address family on all neighbors.

Syntax: [ no ] bgp default ipv4-unicast


bgp default local-preferenceERX Edge Routers

71

bgp default local-preference

Description: Changes the default local preference value. Generally, the default value of 100 allows you to easily define a particular path as less preferable than paths with no local preference attribute. The preference is sent to all routers in the local AS. The preferred path is the one with the highest preference value.The no version restores the default setting.

Syntax: bgp default local-preference value

no bgp default local-preference [ value ]

� value � the local preference number in the range 0�4294967295


bgp default route-target filter

Description: Controls whether incoming BGP routes are filtered according to membership in route-target communities. Automatic filtering is enabled by default. The no version disables automatic filtering.

Syntax: [ no ] bgp default route-target filter


bgp enforce-first-as

Description: Forces BGP to compare the configured remote AS number of an external peer with the first AS in the AS path of routes received from the peer. If the AS numbers do not match, BGP sends the peer an error message. The no version restores the default condition, which does not perform the AS comparison.

Syntax: [ no ] bgp enforce-first-as


bgp fast-external-fallover

Description: Automatically brings down a BGP session to any adjacent external peer immediately after the link fails (as opposed to waiting for the TCP connection to fail or the hold timer to expire). The no version disables automatic session termination.

Syntax: [ no ] bgp fast-external-fallover


bgp log-neighbor-changes72

bgp log-neighbor-changes

Description: Causes BGP to log a message of severity notice to the bgpNeighborChanges log whenever a peer enters or leaves the Established state for any reason. No other messages are logged to the bgpNeighborChanges log.The no version disables this log.

Syntax: [ no ] bgp log-neighbor-changes


bgp maxas-limit

Description: Causes BGP to check the length of AS paths received in update messages and to not forward routes whose AS paths are greater than the specified length. The no version halts checking of the AS path length.

Syntax: bgp maxas-limit limit

no bgp maxas-limit [ limit ]

� limit � maximum acceptable length of a received AS path; number in the range 1�1000


bgp redistribute-internal

Description: Authorizes redistribution of internal BGP routes (in addition to external BGP routes) into protocols that have BGP route redistribution enabled. This command is not required for IBGP routes within a VRF, for which redistribution is always enabled. The no version restores the default, redistributing only external BGP routes.

Syntax: [ no ] bgp redistribute-internal


bgp router-id

Description: Sets the BGP identifier. The no version restores the system router ID as the identifier.

Syntax: bgp router-id ipAddress

no bgp router-id [ ipAddress ]

� ipAddress � IP address to be used as the BGP identifier; ignored if present in the no version


bgp shutdownERX Edge Routers

73

bgp shutdown

Description: Administratively disables BGP. The no version reenables BGP.

Syntax: [ no ] bgp shutdown


boot backup

Description: Sets the release and the configuration to be used the next (and every subsequent) time the boot logic chooses backup mode. The no version removes the setting.

Syntax: boot backup relFilename { cnfFilename | scrFilename | factory-defaults }

no boot backup

� relFilename � system software file

� cnfFilename � name of an existing configuration file (.cnf)

� scrFilename � name of an existing script file (.scr)

� factory-defaults � the system reverts to factory default configuration when rebooted


boot config74

boot config

Description: Specifies how the system obtains its startup configuration. The no version clears a previous request to reboot in a specified manner; the next reboot uses the configuration saved in nonvolatile storage.

Syntax: boot config { cnfFilename [ once ] | scrFilename | running-configuration | startup-configuration | factory-defaults }

no boot config

� cnfFilename � name of an existing startup configuration file (.cnf) to be used on all subsequent reboots

� once � restores a configuration from the specified configuration file only on the next reboot. Subsequent reboots revert to the running-configuration settings.

� scrFilename � name of an existing script file (.scr)

� running-configuration � specifies that the running configuration is to be used for reboot; only available if the system is in Automatic Commit mode

� startup-configuration � specifies that the running configuration is to be used for reboot; only available if the system is in Manual Commit mode

� factory-defaults � specifies that the factory default configuration is to be used for the next reboot. Subsequent reboots revert to the running-configuration settings.

Caution: All boot config commands except for boot config running-configuration and boot config startup-configuration erase the existing running configuration when you reboot the system. Before executing this command, you might want to save the current configuration to a .cnf file using the copy running-configuration command.


boot force-backup

Description: Forces the system to use the backup software release file or system configuration file on the next boot. The no version sets the system to use the default release or configuration file on the next boot.

Syntax: [ no ] boot force-backup

Note: Once the system has used the backup settings, the no boot force-backup command is the only way to get the system to use the default settings again.


boot revert-toleranceERX Edge Routers

75

boot revert-tolerance

Description: Sets the reversion tolerances that the boot logic uses to determine whether the system should use the normal or backup settings. The no version restores the default reversion tolerance settings. The default settings are 3 crashes in 30 minutes.

Syntax: boot revert-tolerance count time

no boot revert-tolerance

� count � number of times the operational SRP software crashes; the range is 0�4294967295; the default setting is 3

� time � time (in seconds) in which the set number (count) of crashes occurs; the range is 0�4294967295; the default setting is 1800


boot revert-tolerance never

Description: Sets the boot logic to never revert to the backup release or configuration. There is no no version.

Syntax: boot revert-tolerance never


boot slot

Description: Configures the module in the selected slot to use the specified software release the next time the module is booted. The no version clears the override for the slot if a slot number is provided; if no slot number is provided, all slot overrides are cleared. The backup option enables you to specify a backup release for the module in the specified slot in case the module reboots more times than allowed within the period specified by the boot revert-tolerance command.

Syntax: boot [ backup ] slot slotNum relFileName

no boot [ backup ] slot [ slotNum ]

� backup � configures a backup setting

� slotNum � number of the selected slot in the system chassis

� relFileName � release (.rel) filename


boot subsystem76

boot subsystem

Description: Configures the selected subsystem to use the specified release the next time the subsystem is booted. The no version disables the subsystem. The backup option enables you to specify a backup release for the module in the specified slot in case the module reboots more times than allowed within the period specified by the boot revert-tolerance command.

Syntax: boot [ backup ] subsystem subsysName relFileName

no boot [ backup ] subsystem [ subsysName ]

� backup � configure a backup setting

� subsysName � name of the subsystem to be configured

� relFileName � name of system software file to use


boot system

Description: Specifies the software release (.rel) file to use on reboot. There is no no version.

Syntax: boot system relFileName

� relFileName � name of the software release file (.rel) that contains the software release


buffer-weight

Description: Sets the buffer weight of the queue. The no version returns the queue to its default buffer weight.

Syntax: buffer-weight bufferWeight

no buffer-weight

� bufferWeight � range 1�63; default is 8

Mode(s): Queue Profile Configuration

bulkstats collectorERX Edge Routers

77

bulkstats collector

Description: Creates and configures a collector of bulk statistical data to collect MIB-2 ifTable MIB objects. You can configure up to six collectors. The no version restores the default value for specified options; if no options are specified the no version deletes the collector.

Syntax: bulkstats collector collectorIndex [ collect-mode { auto-xfer | on-file-full | manual-xfer } | description descrip | interval intrvl | max-size maxSize | primary-receiver primRecvIndex | secondary-receiver secRecvIndex | single-interval ]

no bulkstats collector collectorIndex [ collect-mode | description | interval | max-size | primary-receiver | secondary-receiver | single-interval ]*

� collectorIndex � a number in the range 1�65535 that identifies the particular data collector

� collect-mode � specifies one of the following collection modes:

� auto-xfer � agent automatically transfers file when interval expires

� on-file-full � agent automatically transfers file when it is full

� manual-xfer � system- or user-initiated transfers; default collection mode

� descrip � descriptive information to insert into the bulkstats file

� intrvl � time period in the range 300� 86400 seconds for which the collector transfers data from the system to the receivers; default interval is 360 seconds

� maxSize � maximum size of the file in the range 10240�20971520 bytes; default file size is 2,621,440 bytes

� primRecvIndex � number in the range 1�65535 that identifies the primary receiver to which the system transfers the data; by default the primary receiver is cleared

� secRecvIndex � number in the range 1�65535 that identifies the secondary (backup) receiver to which the system transfers the data; by default the secondary receiver is cleared

� single-interval � specifies that the collector retrieves the bulk statistics data only once; by default, the collector receives the data periodically



bulkstats file-format endOfLine-Lf78

bulkstats file-format endOfLine-Lf

Description: Removes the carriage return (CR) and leaves only a line feed (LF) at the end of each line in the bulkstats file. The no version returns the end of line format to the default, CR and LF.

Syntax: [no] bulkstats file-format endOfLine-LF


bulkstats interfaces description-format common

Description: Enables the conventional industry method of encoding the SNMP ifDescr object that the bulkstats application reports. The no version returns the encoding method to a proprietary encoding scheme.

Syntax: [ no ] bulkstats interfaces description-format common


bulkstats interfaces rfc1213

Description: Enables RFC 1213 interface numbering mode on bulkstats. The no version disables RFC 1213 interface numbering mode on bulkstats.

Syntax: [ no ] bulkstats interfaces rfc1213


bulkstats interface-type

Description: Configures the interface type on which you want to collect statistics. The no version deletes the interface type from bulkstats collection.

Syntax: bulkstats interface-type interfaceType [ collector collectorIndex ]

no bulkstats interface-type interfaceType [ collector collectorIndex ]

� interfaceType � type of interface to collect statistics on: ATM, ATM 1483, Ethernet, Frame Relay, Frame Relay subinterface, Cisco HDLC, IP, PPP

� collectorIndex � number in the range 1�65535 that identifies the particular data collector. Always specify this option if you defined more than one collector.


bulkstats receiver remote-nameERX Edge Routers

79

bulkstats receiver remote-name

Description: Configures the bulk statistics receiver parameters. The no version deletes the receiver.

Syntax: bulkstats receiver receiver-index remote-name remote-name.sts[ receiverAttrib [ receiverAttrib ]* ]

no bulkstats receiver receiverIndex [ remote-name remoteName ]

� receiverIndex � number in the range 1�65535 that identifies the receiver of the data

� remoteName � composed of the remote host, path, filename, and formatters; include a .sts filename extension

� receiverAttrib � one of the following dynamic attributes

� sysName � inserts the system name into the stored remote filename

� sysUpTime � inserts the system up time into the stored remote filename

� collectorSequence � inserts a sequence number into the stored remote filename



bulkstats schema

Description: Configures the schema for collecting bulk statistics. The no version removes the schema.

Syntax: bulkstats schema schemaIndex [ collector collectorIndex ]

no bulkstats schema schemaIndex

� schemaIndex � identifier for the schema in the range 1�65535

� collectorIndex � identifier for the collector in the range 1�65535


bulkstats schema subtree80

bulkstats schema subtree

Description: Configures the schema for collecting if-stack, if-stats, or system data. The no version removes the schema.

Syntax: bulkstats schema schemaIndex subtree{ if-stack | if-stats [ subtreelist ifstatsList [ ifstatsList ]* ] | system }



� if-stack � retrieves ifStackTable

� if-stats � retrieves ifTable/ifXTable counters

� ifstatsList � type of statistics and time-offset keyword, which includes the offset from the master interval at which the record was collected in each bulkstats interface record

� system � retrieves sysUpTime and nvsUtilPct global statistics; retrieves slotDescr, the cpuUtilPct, and memUtilPct per-slot statistics



bulkstats schema subtree policy

Description: Configures the schema to collect statistics on a specific policy, a type of policy, or based on color-coded tags applied by a policy. The no version removes the schema.

Syntax: bulkstats schema schemaIndex subtree policy [ policy-name policyName ] [ policy-type policyType ] [ policy-subtreelist policylist [ policylist ]* ]



� policyName � name of policy for which you want to collect statistics

� policyType � select one of the following types:

� input � collect data on input policies

� localInput � collect data on local input policies

� output � collect data on output policies

� policyList � retrieves statistics based on color-coded tags applied by a policy


bulkstats trapsERX Edge Routers

81

bulkstats traps

Description: Configures the bulkstats traps. The no version disables the trap.

Syntax: bulkstats traps { nearly-full [ threshold ] | full }

no bulkstats traps { nearly-full | full }

� nearly-full � a percentage less than 100%

� threshold � a percentage less than 100%; if not specified, defaults to 99%

� full � 100%


cablelength82

cablelength

Description: Specifies the length of the cable, which determines power requirements. The no version uses the default value, 0 feet.

Syntax: cablelength length

no cablelength

� length � a cable length in the range 0�450


cablelength short

Description: Specifies the cable length (line build-out) for a CT1 interface. The length of cable determines power requirements. The no version restores the default value, 0.

Syntax: cablelength short length

no cablelength short

� length � a cable length in the range 0�660 feet


cbf

Description: Creates a connection-based forwarding interface over the interface you are configuring. The no version removes the CBF interface.

Syntax: [ no ] cbf


cbf connectionERX Edge Routers

83

cbf connection

Description: Creates a CBF connection between two CBF interfaces. The CBF connection is a bidirectional connection consisting of a symmetrical pair of unidirectional connections, one from interface1 to interface2 and a second from interface2 to interface1. The no version removes an existing connection.

Syntax: [ no ] cbf connection interface1Type interface1Specifier interface2Type interface2Specifier

� interface1Type � interface type; see Interface Types and Specifiers in About This Guide

� interface1Specifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

� interface2Type � interface type; see Interface Types and Specifiers in About This Guide

� interface2Specifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide


cbf shutdown

Description: Administratively disables a CBF interface. The no version enables a CBF interface. (Newly created CBF interfaces are enabled by default.)

Syntax: [ no ] cbf shutdown


channel-group shutdown

Description: Disables a CT1 channel group on a CT1 module or an E1 fractional interface on a CE1 module. The no version restarts a disabled channel group or fractional interface.

Syntax: [ no ] channel-group subchan shutdown

� subchan � fractional T1 interface in the range 1�24 or fractional E1 interface in the range 1�31


channel-group snmp trap link-status84

channel-group snmp trap link-status

Description: Enables processing of SNMP link status information on a CT1 channel group on a CT1 module or on an E1 fractional interface on an CE1 module. The no version disables the processing of SNMP link status information.

Syntax: [ no ] channel-group subchan snmp trap link-status

� subchan � fractional T1 interface in the range 1�24 or fractional E1 interface in the range 1�31


channel-group timeslots

Description: Configures the timeslots and data rate used on each CE1 channel on the CE1 module or on each CT1 channel on the CT1 module.

Syntax: channel-group subchan timeslots range [ speed { 56 | 64 } ]

no channel-group subchan

� subchan � fractional E1 interface in the range 1�31 or fractional T1 interface in the range 1�24

� range � timeslots assigned to the CE1 channel in the range 1�31 or to the CT1 channel in the range 1�24. A dash represents a range of timeslots, and a comma separates timeslots. For example, 1-10, 15-18 assigns timeslots 1�10 and 15�18.

� speed � specifies the data rate for the CE1 or CT1 channel as one of the following values:

� 56 Kbps

� 64 Kbps (default)


channelized

Description: Configures a port on the CT3/T3-F0 line module and associated I/O module to support channelized T3 operation. The no version configures the port for unchannelized operation.

Syntax: [ no ] channelized


check-diskERX Edge Routers

85

check-disk

Description: Finds and repairs structural inconsistencies and damage in the DOS file system in NVS on the primary SRP module. There is no no version.

Syntax: check-disk [ repair ]

Mode(s): Boot

To access the BOOT mode from the local console:1 At the Privileged Exec prompt, type the reload command.

Information on the reloading process appears.2 When the countdown begins, press the <M+B> key combination.

This puts the CLI in Boot mode (:boot## prompt). If you do not press the <M+B> key combination, the reloading process continues and returns the CLI to the normal User Exec mode.

classifier-list86

classifier-list

Description: Creates or modifies a classifier control list. Use the not variables to deny traffic for a specific protocol, source address, or destination address. The no version removes the classifier control list.

Syntax: [ ip ] classifier-list classifierName [ traffic-class trafficClassName ] [ color { green | yellow | red } ] [ user-packet-class ] [ notProtocol ] { protocolNumber | protocolName } [ notSrcIpAddr ] { srcIp srcWildIp | hostSrcIpAddr srcIpHost | anySrcIpAddr } [ sourceQualifier ] [ notDestIpAddr ] { anyDestIpAddr | destIp destWildIp | hostDestIpAddr dstIpHost } [ destinationQualifier ] [ tcpQualifier ] [ ip-flags ipFlags ] [ ip-frag-offset { eq fragEqValue | gt 1 } ] [ precedence precNum | dsField dsFieldNum | tos tosNum ]

no classifier-list classifierName [ classifierNumber ]

� classifierName � name of the classifier control list entry

� trafficClassName � name of the traffic class to match

� color � match the color

� notProtocol � variable matches any but the immediately following protocol argument

� protocolNumber � protocol number matched by this classifier control list in the range 0�255

� protocolName � protocol name matched by this classifier control list

� notSrcIPAddr �variable matches any but the immediately following source address argument

� srcIp � source address to match

� srcWildIp � wild-card mask to apply to the source address

� hostSrcIpAddr � source address as a host

� srcIPHost � source host address to match

� anySrcIpAddr � matches any source address

� sourceQualifier � one of the following protocol-specific classifier parameters for source ports for UDP or TCP protocols only. See ERX Policy and QoS Configuration Guide, Chapter 1, Configuring Policy Management, for details.

� portOperator � one of the following boolean operator keywords: lt (less than), gt (greater than), eq (equal to), or ne (not equal), or range (range of port numbers)

� fromPort � single port number or the beginning of a range of port numbers

classifier-listERX Edge Routers

87

� toPort � end of a range of port numbers

� notDestIpAddr � variable matches any but the immediately following destination address argument

� anyDestIpAddr � matches any destination address

� destIp � destination address to match

� destWildIp � wild-card mask to apply to the destination address

� hostDestIpAddr � destination host address to match

� destIpHost � destination host address to match

� destinationQualifier � one of the following protocol-specific classifier parameters for destination TCP or UDP ports, ICMP code and type, or IGMP type. The portOperator, fromPort, and toPort arguments are used with TCP and UDP. The icmpType, icmpCode, and igmpType arguments are used with ICMP and IGMP.

� portOperator � one of the following boolean operator keywords: lt (less than), gt (greater than), eq (equal to), or ne (not equal), or range (range of port numbers) (TCP and UDP only)

� fromPort � single port number or the beginning of a range of port numbers (TCP and UDP only)

� toPort � end of a range of port numbers (TCP and UDP only)

� icmpType � ICMP message type (ICMP only)

� icmpCode � ICMP message code (ICMP only)

� igmpType � IGMP message type (IGMP only)

� tcpQualifier � TCP flags classification parameters

� tcpFlag � for TCP only; a logic equation that specifies flag bit values; ! means logical NOT and & means logical AND; use any of the following flag names:

� ack � 0x10

� fin � 0x01

� push � 0x08

� rst � 0x04

� syn � 0x02

� urgent � 0x20

� ipFlags � a logic equation that specifies flag bit values; ! means logical NOT and & means logical AND; use any of the following flag names:

� dont-fragment � 0x02

� more-fragments � 0x01

� reserved � 0x04

cleanup-timeout-factor88

� ipFragOffset � matches the specified IP fragmentation offset; use any of the following:

� eq 0 � equals 0

� eq 1 � equals 1

� gt 1 � greater than 1

� precNum � upper three bits of the ToS byte; range is 0�7

� dsfieldNum � upper six bits of the ToS byte; range is 0�63

� tosNum � whole eight bits of the ToS byte; range is 0�255


cleanup-timeout-factor

Description: Specifies the number of refresh messages that can be lost before the PATH or RESV state is ended. The no version restores the default value of 3.

Syntax: cleanup-timeout-factor lostRefreshes

no cleanup-timeout-factor

� lostRefreshes � number of lost refresh messages

Mode(s): RSVP Profile Configuration

clear access-list

Description: Clears counters for entries in IP access lists. There is no no version.

Syntax: clear access-list [ accessListName ]

� accessListName � name of the access list; a string of up to 32 characters


clear arpERX Edge Routers

89

clear arp

Description: Clears entries from the ARP cache. There is no no version.

Syntax: clear [ ip ] arp [ vrf vrfName ] { ipAddress interfaceType interfaceSpecifier | * }


� ipAddress � IP address in 32-bit dotted-decimal format of the entry to be cleared



� * � clears all dynamic ARP entries


clear cbf interface

Description: Clears statistics on CBF interfaces. There is no no version.

Syntax: clear cbf interface interfaceType interfaceSpecifier




clear egress-queue

Description: Clears egress queue statistics for the specified interface and traffic class. There is no no version.

Syntax: clear egress-queue interfaceType interfaceSpecifier [ stacked ] [ traffic-class trafficClassName ]



� stacked � clears queue statistics for all interfaces stacked above the specified interface


clear fabric-queue90

clear fabric-queue

Description: Clears fabric queue statistics for the specified traffic-class and egress-slot. The default is that statistics for all traffic classes and all slots are cleared. There is no no version.

Syntax: clear fabric-queue [ traffic-class trafficClassName ] [ egress-slot egressSlot ] [ filter ]

� traffic-class � clear fabric-queue statistics for a traffic class

� egress-slot � clear fabric-queue statistics for an egress-slot


clear ip bgp

Description: If the soft option is not used, brings down the underlying TCP connection and then brings it back up again, causing both peers to resend their complete BGP routing table. If the soft out option is used, the BGP speaker reapplies outbound policy and resends all routes to the specified peer(s). If the soft in option is used, the BGP speaker reapplies inbound policy to the routes received from the specified peer(s). This is possible only if soft reconfiguration inbound has been enabled for the peer or the peer supports the route-refresh capability. There is no no version.

Syntax: clear ip bgp [ { ipAddress | peer-group peerGroupName | * } ] [ vrf vrfName ][ ipv4 { unicast | multicast } | vpnv4 unicast ] [ soft [ in [ prefix-filter ] | out ] ]

� ipAddress � IP address of identified BGP neighbor to clear

� peerGroupName � name of a BGP peer group to clear

� * � clears all connections

� vrfName � name of a virtual routing and forwarding instance to clear

� ipv4 unicast � clears the IPv4 unicast routing table; the default option

� ipv4 multicast � clears the IPv4 multicast routing table

� vpnv4 unicast � clears the VPNv4 unicast routing and forwarding table

� soft � soft reconfiguration

� in � triggers inbound soft reconfiguration

� prefix-filter � pushes out prefix list and Cisco-proprietary prefix list outbound route filters and triggers inbound soft reconfiguration

� out � triggers outbound soft reconfiguration


clear ip bgp dampeningERX Edge Routers

91

clear ip bgp dampening

Description: Clears route flap dampening information and reinstates the suppressed routes. The dampening keyword and the flap-statistics keyword both have the same effect. There is no no version.

Syntax: clear ip bgp [ vrf vrfName ] [ ipv4 { unicast | multicast } | vpnv4 unicast ]{ dampening | flap-statistics } [ ipAddress [ addressMask ] ]

� vrfName � name of a virtual routing and forwarding instance to clear

� ipv4 unicast � clears the IPv4 unicast routing table; the default option

� ipv4 multicast � clears the IPv4 multicast routing table

� vpnv4 unicast � clears the VPNv4 unicast routing and forwarding table

� ipAddress � IP address of the BGP neighbor to clear

� ipMask � address mask to be applied to the network IP address


clear ip bgp redistribution

Description: Reapplies policy to routes that have been redistributed into BGP. There is no no version.

Syntax: clear ip bgp redistribution

Mode(s): User Exec, Privileged Exec

clear ip dvmrp routes

Description: Clears DVMRP routes from the routing table. There is no no version.

Syntax: clear ip dvmrp routes [ ipAddress [ addressMask ] ]

� ipAddress � clears the longest match to this IP address

� addressMask � clears route that matches exactly to this subnet mask


clear ip interface92

clear ip interface

Description: Clears the counters on the specified IP interface. The default is all interface types and all interfaces. There is no no version.

Syntax: clear ip interface [ vrf vrfName ] interfaceType interfaceSpecifier





clear ip isis redistribution

Description: Clears all the routes that have previously been redistributed into IS-IS and redistributes them using the current policy configuration. There is no no version.

Syntax: clear ip isis redistribution


clear ip mroute

Description: Clears all or the specified multicast forwarding entries. There is no no version.

Syntax: clear ip mroute { * | grpAddress [ sourceAddress ] }

� * � clear all IP multicast forwarding entries

� grpAddress � address of the multicast group for which forwarding entries should be cleared

� sourceAddress � address of the multicast source for which forwarding entries should be cleared


clear ip ospf redistribution

Description: Clears all the routes that have previously been redistributed into OSPF. There is no no version.

Syntax: clear ip ospf redistribution


clear ip pim auto-rpERX Edge Routers

93

clear ip pim auto-rp

Description: Clears the group-to-RP router mappings the system learned via autoRP. There is no no version.

Syntax: clear ip pim auto-rp [ ipAddress ]

� ipAddress � IP address of the system designated as an RP router


clear ip pim interface count

Description: Clears the counters for multicast packet statistics on all interfaces or the specified interface. There is no no version.

Syntax: clear ip pim interface [ interfaceType interfaceSpecifier ] count




clear ip pim remote-neighbor count

Description: Clears the counters for multicast packet statistics on all interfaces or the specified interface. There is no no version.

Syntax: clear ip pim remote-neighbor [ ipAddress ] count

� ipAddress � IP address of the interface


clear ip prefix-list

Description: Clears all hit counts in the prefix lists, the specified prefix list, or the specified entry from the specified prefix list. There is no no version.

Syntax: clear ip prefix-list [ listName [ network/length] ]

� listName � name of the prefix list; a character string up to 32 characters in length

� network � base address of the network route to be filtered; for example, 192.168.32.0 or 10.10.0.0

� length � length of the network prefix; number of bits masking base address to produce address to be matched


clear ip prefix-tree94

clear ip prefix-tree

Description: Clears all prefix trees, the specified prefix tree, or the specified entry from the specified prefix tree. There is no no version.

Syntax: clear ip prefix-tree [ treeName [ network/length ] ]

� treeName � name of the prefix list; a character string up to 32 characters in length




clear ip rip redistribution

Description: Clears all the routes that have previously been redistributed into RIP. There is no no version.

Syntax: clear ip rip redistribution


clear ip routes

Description: Clears a specified route or all dynamic routes from the routing table of a specified VRF or all VRFs. There is no no version.

Syntax: clear ip routes [ vrf vrfName ] { * | ipAddress [ ipMask ] }

� vrfName � name of the VRF context from which routes are to be cleared

� * � clears all dynamic routes

� ipAddress � IP address prefix for routes that are cleared; in 32-bit dotted-decimal format

� ipMask � mask of the IP address prefix for routes that are cleared; in 32-bit dotted-decimal format


clear isis adjacencyERX Edge Routers

95

clear isis adjacency

Description: Clears all entries from the adjacency database, or clears only adjacencies with a specified neighbor. There is no no version.

Syntax: clear isis adjacency [ systemId | hostname ]

� systemID � system ID of an IS-IS neighbor

� hostname � hostname of an IS-IS neighbor


clear isis database

Description: Clears all entries from the IS-IS link state database, or clears only entries associated with a specified neighbor. There is no no version.

Syntax: clear isis database [ systemId | hostname ]

� systemID � system ID of an IS-IS neighbor

� hostname � hostname of an IS-IS neighbor


clear line

Description: Removes any services on a vty line and closes any files opened as a result of services on that line. There is no no version.

Syntax: clear line lineNumber

� lineNumber � number of the vty line

Mode(s): User Exec

clear mpls ldp

Description: Removes and reestablishes all existing LDP LSPs, thereby forcing the reapplication of all policies on every configured topology-driven LDP LSP. There is no no version.

Syntax: clear mpls ldp


client-name96

client-name

Description: Sets a hostname for a tunnel. For L2TP, specifies the hostname used by the LAC when communicating with the LNS about the tunnel. For L2F, specifies the hostname used by the NAS when communicating with the home gateway. The no version removes the hostname from the tunnel.

Note: This command has replaced the hostname command for Domain Map Tunnel Configuration mode only.

Syntax: client-name clientname

no client-name

� clientname � string of up to 64 characters (no spaces)

Mode(s): Domain Map Tunnel Configuration

clns configuration-time

Description: Specifies the rate at which ES hellos and IS hellos are sent. The no version restores the default value of 10 seconds.

Syntax: clns configuration-time configTime

no clns configuration-time

� configTime � number in the range 1�65535; rate in seconds at which ES and IS hello packets are sent; the default is 10 seconds


clns holding-time

Description: Allows the sender of an ES hello or IS hello to specify the length of time you consider the information in the hello packets to be valid. The no version restores the default value, 30 seconds.

Syntax: clns holding-time holdTime

no clns holding-time

� holdTime � number in the range 1�65535; length of time in seconds during which the information in the hello packets is considered valid


clns hostERX Edge Routers

97

clns host

Description: Use to define a name-to-NSAP mapping that can then be used with commands requiring NSAPs. The no version restores the default of no mapping defined. Enables dynamic resolution of hostnames to system IDs (within the NSAP address). The hostname mapping is sent in the LSPs within the dynamic hostname TLV tuple. Display the TLV by issuing the show isis database detail command. Use the show hosts command to display the mapping.

Syntax: clns host name nsap

no clns host name

� name � name for the NSAP; first character can be either a letter or a number. If a number is used, the operations you can perform are limited.

� nsap � the NSAP to which that name maps


clock rate

Description: Sets the rate of the internal clock in MHz for HSSI and X.21/V.35 interfaces. The no version restores the default value; for HSSI the default is 44.736 MHz, for X.21/V.35, the default is 2048000 Hz.

Syntax: The syntax depends on the type of interface.

HSSI Interfaces:

clock rate { 34 | 44 }

no clock rate

� 34 � specifies a rate of 34.368 MHz

� 44 � specifies a rate of 44.736 MHz

X.21/V.35 Interfaces:

[ no ] clock rate rate

no clock rate

� rate � speed of the clock in Hz; one of the following values:1200 | 2400 | 4800 | 9600 | 19200 | 38400 | 50000 | 64000 | 128000 | 1024000 | 2048000 | 3072000 | 4096000 | 4915200 | 6144000 | 6192000


clock set98

clock set

Description: Allows you to manually set the system clock. There is no no version.

Syntax: clock set time { month day | day month } year

� time � current time (in 24-hour format � HH:MM:SS)

� month � name of the month (January, February, �)

� day � day of the month (1�31)

� year � year (2000, 2001, �)


clock source

Description: Determines how an interfaces obtains clocking signals. The no version restores the default value, line.

Syntax: clock source { line | internal { module | chassis } }

no clock source

� line � interface clocks data from a clock recovered from the line�s receive data stream; the default.

� internal � internal clock source transmits data from its internal clock. You must specify one of the following for internal clocking:

� module � internal clock is from the line module itself

� chassis � internal clock is from the configured system clock

Mode(s): Controller Configuration, Interface Configuration (POS only)

clock summer-time dateERX Edge Routers

99

clock summer-time date

Description: Sets the system to automatically switch to summer time (Daylight Saving Time � DST). It should start on the first specific date listed in the command and end on the second specific date in the command. The no version configures the software so that it does not automatically switch to summer time.

Syntax: clock summer-time name date { startDay startMonth | startMonth startDay } startYear startTime { stopDay stopMonth | stopMonth stopDay } stopYear stopTime [ dstOffset ]

no clock summer-time

� name � name of the time zone (for example, PDT) to be displayed when daylight saving (summer) time is in effect

� date � indicates that summer time should start on the first specific date listed in the command and end on the second specific date in the command

� startDay � DST start day (1�31)

� startMonth � DST start month (January, February, �)

� startYear � DST start year (2000, 2001, �)

� startTime � DST start time (24-hour format) in hours and minutes (hh:mm)

� stopDay � DST stop day

� stopMonth � DST stop month

� stopYear � DST stop year

� stopTime � DST stop time (24-hour format)

� dstOffset � number of minutes to add during summer time in the range 1�1440; default = 60


clock summer-time recurring100

clock summer-time recurring

Description: Sets the system to automatically switch to summer time (Daylight Saving Time) on the specified dates every year. The no version configures the software not to automatically switch to summer time.

Syntax: clock summer-time name recurring [ { startWeekNumber | startWeekEnum } startDay startMonth startTime { stopWeekNumber | stopWeekEnum } stopDay stopMonth stopTime [ dstOffset ] ]

no clock summer-time

� name � name of the time zone (for example, EDT for Eastern Daylight Savings Time) to be displayed when daylight saving (summer) time is in effect

� recurring � indicates that summer time should start and end on the specified days every year

� startWeekNumber � DST start week of the month (1�5)

� startWeekEnum � first week in month (first); or last week in month (last)

� startDay � DST start day of the week (Sunday, Monday, �)

� startMonth � DST start month (January, February, �)

� startTime � DST start time (24-hour format) in hours and minutes (hh:mm)

� stopWeekNumber � DST stop week of the month (1�5)

� stopWeekEnum � first week in month (first); or last week in month (last)

� stopDay � DST stop day of the week

� stopMonth � DST stop month

� stopTime � DST stop time in hours and minutes (hh:mm)

� dstOffset � number of minutes to add during summer time in the range 1�1440; default = 60


clock timezone

Description: Sets the time zone for display. The no version sets the time zone to UTC.

Syntax: clock timezone name hours [ minutes ]

no clock timezone

� name � name of the time zone to be displayed when Standard time is in effect, such as EST or PST.

� hours � hours offset from UTC (-23, -22 � 23)

� minutes � minutes offset from UTC (0�59)


colorERX Edge Routers

101

color

Description: Defines a policy rule that assigns a color to packets in the specified classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with the policy list for this rule. Use the suspend keyword to temporarily suspend color assignment. The no version removes the rule from the policy list; the suspend version temporarily suspends the policy rule; the no suspend version resumes application of a suspended rule.

Syntax: [ no ] [ suspend ] color { green | yellow | red } [ classifier-group claclName ] [ precedence precValue ]

� color � one of the following colors assigned to packets:

� green � highest precedence

� yellow � intermediate precedence

� red � lowest precedence

� claclName � classifier control list used to classify packets for this coloring service

� precValue � precedence value in the range 0�32768

Mode(s): Policy Configuration

committed-action

Description: Sets the action for packets conforming to the committed rate and committed burst size and conforming to the exceed rate and exceed burst size for a rate limit profile. The no version restores the value to the default value, drop.

Syntax: [ no ] committed-action { drop | transmit | mark markVal }

� drop � drop the packet

� transmit � transmit the packet

� mark � mark the packet

� markVal � mark value in the range 0�255

Mode(s): Rate Limit Profile Configuration

committed-burst

Description: Sets the committed burst for a rate limit profile. The no version restores the default value, 8192.

Syntax: [ no ] committed-burst size

� size � size in bytes in the range 8192�4294967295


committed-length102

committed-length

Description: Sets minimum and maximum constraints for the queue�s committed lengths. The no version removes constraints on the queue�s committed length.

Syntax: committed-length minimumCommittedLength [ maximumCommittedLength ]

no committed-length

� minimumCommittedLength � range 0�1073741824

� maximumCommittedLength � range 0�1073741824


committed-rate

Description: Sets the committed rate for a rate limit profile. The no version restores the default value, 0.

Syntax: [ no ] committed-rate rate

� rate � rate in bits per second in the range 0�4294967295


configure

Description: Enters the Global Configuration mode. To enter Global Configuration commands, you must be in the Privileged Exec mode. There is no no version.

Syntax: configure [ terminal | file [ fileName ] [ verbose | show-progress [ dotPeriod ] ] ]

� terminal � configure from a terminal

� file � configure from a script file

� fileName � script file to execute

� verbose � echo each command as the script is executed

� show-progress � display a �.� during script execution

� dotPeriod � displays a �.� after this number of commands; default is 100


confirmations explicitERX Edge Routers

103

confirmations explicit

Description: Requires the user to enter y, ye, or yes to confirm a prompt, and to enter n or no to deny a prompt. The no version restores the default state, which permits pressing <Enter> or <y> to confirm a prompt and entering any other characters to deny a prompt.

Syntax: [ no ] confirmations explicit


conformed-action

Description: Sets the action for packets not conforming to the committed rate and committed burst size, but conforming to the peak rate and peak burst size for a rate limit profile. The no version restores the value to the default value, drop.

Syntax: [ no ] conformed-action { drop | transmit | mark markVal }



� mark � mark the packet

� markVal � mark value in the range 0�255


conformed-fraction

Description: Sets the percentage of the total queue that can be occupied before dropping conformed packets. The no version returns the conformed fraction to its default setting.

Syntax: conformed-fraction conformedFraction

no conformed-fraction

� conformedFraction � percentage range 0�100; default is 50%


conformed-length104

conformed-length

Description: Sets minimum and maximum constraints for the queue�s conformed lengths. The no version removes constraints on the queue�s conformed length.

Syntax: conformed-length minimumConformedLength [ maximumConformedLength ]

no conformed-length

� minimumConformedLength � range 0�1073741824

� maximumConformedLength � range 0�1073741824


controller e1

Description: Accesses Controller Configuration mode so that you can configure a CE1 controller. There is no no version.

Syntax: controller e1 interfaceSpecifier

� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.


controller e3

Description: Accesses Controller Configuration mode so that you can configure an E3 controller. There is no no version.

Syntax: controller e3 interfaceSpecifier



controller sonet

Description: Selects an interface on which you want to configure SONET or SDH. There is no no version.

Syntax: controller sonet interfaceSpecifier



controller t1ERX Edge Routers

105

controller t1

Description: Accesses Controller Configuration mode so that you can configure a CT1 controller. There is no no version.

Syntax: controller t1 interfaceSpecifier



controller t3

Description: Accesses Controller Configuration mode so that you can configure a T3 controller. There is no no version.

Syntax: controller t3 interfaceSpecifier



copy106

copy

Description: Copies a local or network file. There is no no version.

Note: You cannot change the extension of a file, for example, .scr.

Note: You can only copy software release (.rel) files to the system (download); you cannot copy them from the system (upload).

Syntax: copy sourcePath:sourceFilename destinationPath:destinationFilename [force]

� sourcePath � path to the source in the format: networkPath | /incoming/subdirectory | /outgoing/subdirectory

� networkPath � path to the network host

� incoming � specifies the ERX system�s incoming FTP directory

� subdirectory � name of a subdirectory on the ERX system�s FTP server. If the subdirectory does not exist, the system creates it.

� outgoing � specifies the ERX system�s outgoing FTP directory

� source_filename � name of source file

� destinationPath � path to the destination in the format: networkPath | /incoming/subdirectory | /outgoing/subdirectory

� networkPath � path to the network host

� incoming � specifies the incoming ERX system�s FTP directory

� subdirectory � name of a subdirectory on the ERX system�s FTP server. If the subdirectory does not exist, the system creates it.

� outgoing � specifies the ERX system�s outgoing FTP directory

� destinationFilename � name of destination file

� force � forces a copy, even if the destination file already exists


copy running-configuration

Description: Saves the configuration currently running on the system to a local or remote (network) system configuration file (.cnf). Available only if the system is in Automatic Commit mode. There is no no version.

Syntax: copy running-configuration destination [ force ]

� destination � destination filename (*.cnf)

� force � creates a copy even if the destination file already exists


copy running-configuration startup-configurationERX Edge Routers

107

copy running-configuration startup-configuration

Description: Saves all outstanding (unsaved) configuration changes to nonvolatile storage; an exact alias of the write memory command. Available if the system is in either Automatic Commit mode or Manual Commit mode. If issued while in Automatic Commit mode, the CLI notifies you that the command is not necessary, but allows you to proceed. There is no no version.

Syntax: copy running-configuration startup-configuration


copy startup-configuration

Description: Copies the previously saved startup configuration to a local or remote (network) system configuration (*.cnf) file. Available only if the system is in Manual Commit mode. If you have made but not saved any configuration changes, those changes are not in the startup configuration. There is no no version.

Syntax: copy startup-configuration destination [ force ]

� destination � destination filename (*.cnf)

� force � creates a copy even if the destination file already exists


cost

Description: Specifies a cost metric for an OSPF remote-neighbor interface. Used in the calculation of the SPF routing table. The no version restores the default value.

Syntax: cost intfCost

no cost

� intfCost � link state metric cost; a number in the range 1�65535; default value is 10 if there is no route to the remote neighbor; otherwise, the default is calculated based on the bandwidth of the physical interface used to reach the remote neighbor and the OSPF auto-cost reference bandwidth


crc108

crc

Description: Sets the size of the cyclic redundancy check. CRC is an error-checking technique that uses a calculated numeric value to detect errors in transmitted data. 16 and 32 indicate the number of check digits per frame that are used to calculate the FCS. Both the sender and receiver must use the same setting. The default is 16. The no version restores the value to the default.

Syntax: crc { 16 | 32 | none }

no crc

� 16 � specifies CRC-16, which transmits streams of 8-bit characters and generates 16-bit check bits per frame

� 32 � specifies CRC-32, which transmits longer streams at faster rates and therefore provides better ongoing error detection

� none � disables CRC checking


cr-ldp

Description: Specifies that the traffic-engineering extensions to LDP are in effect on this interface. CR-LDP is enabled by default. The no version disables CR-LDP in the profile.

Syntax: [ no ] cr-ldp

Mode(s): LDP Profile Configuration

crypto key dss

Description: Controls SSH server daemon and creation/deletion of SSH server host key. This command is not displayed by the show config command. There is no no version.

Syntax: crypto key { generate | zeroize } dss

� generate � creates the SSH server host key and enables the daemon

� zeroize � deletes the SSH server host key and stops the SSH daemon if it is running. Issuing this command terminates any active client sessions. The next time the system boots after this command is issued, the SSH server daemon is not started.


data-character-bitsERX Edge Routers

109

data-character-bits

Description: Sets the number of data bits available for characters for all sessions on the specified vty lines. There is no no version.

Syntax: data-character bits { 7 | 8 }

� 7 � 7 data bits per character; this setting supports only characters in the standard ASCII set

� 8 � 8 data bits per character; default setting, supports the full set of 8-bit international characters


dead-interval

Description: Sets the time period that the OSPF router waits without seeing hello packets from a remote neighbor before declaring the neighbor to be down. The no version restores the default value.

Syntax: dead-interval deadInterval

no dead-interval



deadtime

Description: Use to configure the amount of time (in minutes) that a server is marked as unavailable if a request times out for the configured retry count. If a server fails to answer a request, it is marked �unavailable� by the system. The system does not send requests to the server for the configured time. The no version restores the default value, 0, turning off the deadtime mechanism.

Syntax: deadtime recovery

no deadtime

� recovery � amount of time that a server is marked as unavailable in the range 0�30 (minutes). The default is 0.

Mode(s): Radius Configuration

debounce-time110

debounce-time

Description: Sets the interval to wait before bringing up a RIP interface that was brought down. The no version restores the default value, 10.

Syntax: debounce-time interval

no debounce-time

� interval � seconds in the range 0�60


debug ip bgp

Description: Shows information on the selected variable. The no version disables the display.

Syntax: debug ip bgp [ in | out ] [ peerAddress [ peerAddressMask ] ][ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] [ severity { severityValue | severityNumber } ][ verbosity verbosityLevel ] [ secondary ]

no debug ip bgp [ in | out ] [ peerAddress [ peerAddressMask ] ][ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ]

� in � displays information for inbound events

� out � displays information for outbound events

� peerAddress � IP address of BGP peer for which information is displayed

� peerAddressMask � network mask of BGP peer for which information is displayed

� bgpLog � BGP log of interest; one of the following options:

� dampening � BGP dampening event; route is suppressed or no longer suppressed by route-flap dampening

� events � BGP finite state machine events and transitions

� keepalives � BGP keepalive message events

� updates � BGP routing table update events

� vpnv4 � BGP VPNv4 NLRI events

� import � displays BGP import processing events; appears only if you specify the vpnv4 keyword

debug ip bgpERX Edge Routers

111

� routerName � name of the virtual router that owns the BGP router for which information is being displayed

� filteringRouterName � name of the virtual router that owns the access class and route map parameters

� accessClassName � name of an access list to filter output

� mapName � name of a route map to filter output

� severity �specifies the minimum severity of the log messages displayed for the selected category; described either by a descriptive term�severityValue�or by a corresponding number�severityNumber�in the range 0�7; the lower the number, the higher the priority:

� emergency or 0 � system unusable

� alert or 1 � immediate action needed

� critical or 2 � critical condition exists

� error or 3 � error condition

� warning or 4 � warning condition

� notice or 5 � normal but significant condition

� info or 6 � informational message

� debug or 7 � debug message

� verbosityLevel � verbosity of the log category�s messages; can be any of the following:

� low � terse

� medium � moderate detail

� high � verbose

� secondary � indicates that the specified filter conditions for the log are imposed in addition to any that were previously specified; if omitted, the specified filter conditions replace any that were previously specified


debug ip mbgp112

debug ip mbgp


Syntax: debug ip mbgp [ in | out ] [ peerAddress [ peerAddressMask ] ][ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] [ severity { severityValue | severityNumber } ][ verbosity verbosityLevel ] [ secondary ]

no debug ip mbgp [ in | out ] [ peerAddress [ peerAddressMask ] ][ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ]
















� severity � specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command.

debug ip ospfERX Edge Routers

113

� verbosityLevel � verbosity of the log category�s messages. See the debug ip bgp command.

� secondary � indicates that the specified filter conditions for the log are imposed in addition to any that were previously specified; if omitted, the specified filter conditions replace any that were previously specified


debug ip ospf


Syntax: debug ip ospf ospfLog [ severity { severityValue | severityNumber } ][ verbosity verbosityLevel ]

no debug ip ospf ospfLog

� ospfLog � OSPF log of interest; one of the following options:

� adj � OSPF adjacency events

� elect-dr � OSPF designated router election

� events � OSPF general events

� lsa � OSPF link state advertisements events

� neighbor � OSPF neighbor state machine

� packets-rcvd � OSPF packets received

� packets-sent � OSPF packets sent

� route � OSPF route events

� spf � all OSPF shortest path first calculation events

� spf-ext � OSPF shortest path first external route calculation events

� spf-inter � OSPF shortest path first interarea route calculation events

� spf-intra � OSPF shortest path first intra-area route calculation events




debug ip pim114

debug ip pim


Syntax: The syntax differs for PIM Dense Mode and PIm Sparse Mode.

PIM Dense Mode:debug ip pim { pimLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] | switchState groupAddress sourceAddress |dense-mode { on | off } }

PIM Sparse Mode:debug ip pim { pimLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] |switchState groupAddress sourceAddress |sparse-mode { on | off | sg-state [ group groupAddress [ source sourceAddress ] | rp rpAddress ] [ count ] } }

no debug ip pim pimLog

� pimLog � PIM log of interest; one of the following options:

� autoRp-rcvd � autoRP packets received

� autoRP-sent � autoRP packets sent

� engineering � PIM engineering

� hellos-rcvd � PIM hello messages received

� hellos-sent � PIM hello messages sent

� packets � PIM packets received and sent

� packets-rcvd � PIM packets received

� packets-sent � PIM packets sent



� switchState � switches from one type of tree to another

� rpt-switch � switch from a shortest path tree to a shared path tree

� spt-switch � switch from a shared path tree to a shortest path tree

� groupAddress � IP address of the multicast group

� sourceAddress � IP address of the multicast source

� on � turns on the specified PIM mode on all virtual routers

debug ip ripERX Edge Routers

115

� off � turns off the specified PIM mode on all virtual routers

� sg-state � displays information about the relationship between a source, multicast group, and RP router

� rp � displays information about the relationships between sources, groups, and the specified RP router

� rpAddress � address of the RP router

� count � displays one of the following

� (with no optional keywords) number of relationships between a source, multicast group, and RP router

� (with the group keyword) number of sources associated with the multicast group for PIM SM

� (with the source and group keywords) number of source-group pairs for PIM SM

� (with the rp keyword) number of source-group pairs associated with the RP router for PIM SM


debug ip rip


Syntax: debug ip rip ripLog [ severity { severityValue | severityNumber } ][ verbosity verbosityLevel ]

no debug ip rip ripLog

� ripLog � RIP log of interest; one of the following options:

� events � general RIP events, such as removing RIP from an interface or creating the RIP process

� route � events associated with two RIP routers exchanging routes




debug isis116

debug isis

Description: Displays debug-related information about selected IS-IS log parameters. This command manipulates the same log as the Global Configuration log commands. The no version disables debugging display.

Syntax: debug isis isisLog [ severity { severityValue | severityNumber } ][ verbosity verbosityLevel ]

no debug isis isisLog

� isisLog � IS-IS log of interest; one of the following options:

� adj-packets � IS-IS adjacency-related packets, such as hello packets sent and IS-IS received adjacencies going up and down

� mpls traffic-eng advertisements � MPLS traffic-engineering agent advertisements

� mpls traffic-eng agents � MPLS traffic-engineering agents

� snp-packets � IS-IS CSNPs/PSNPs

� spf-events � shortest path first events

� spf-statistics � SPF timing and statistic data

� spf-triggers � SPF triggering events

� update-packets � update-related packets




default-fields peerERX Edge Routers

117

default-fields peer

Description: Specifies the fields that will appear by default in the output of a subsequently issued show ip bgp summary command.

Syntax: [ no ] default-fields peer fieldOptions

� fieldOptions � field(s) to be displayed, in the formatall | [ intro | last-reset-reason | messages-received | messages-sent | peer-type | prefixes-received | remote-as | state | times-up | up-down-time | updates-received | updates-sent ]*

� all � all available information; not recommended, as this information for each network does not fit on a single line and is difficult to read

� intro � introductory information about the state of various BGP attributes; this information is displayed only if you specify this keyword

� last-reset-reason � reason for most recent reset

� messages-received � total number of messages received from the peer

� messages-sent � total number of messages sent to the peer

� peer-type � type of BGP peer: internal, external, or confederation

� prefixes-received � number of unique prefixes received from the peer

� remote-as � the remote AS number of the peer

� state � state of the BGP session

� times-up � number of times the session has been established

� up-down-time � how long the session has been up or down

� updates-received � number of update messages received from the peer

� updates-sent � number of update messages sent to the peer



default-fields route118

default-fields route

Description: Specifies the fields that will appear by default in the output of any subsequently issued show ip bgp command that displays routes (except for the show ip bgp summary command).

Syntax: [ no ] default-fields route fieldOptions

� fieldOptions � field(s) to be displayed, in the formatall | [ afi | aggregator | as-path | atomic-aggregate | best | clusters | communities | extended-communities | imported | intro | in-label | loc-pref | med | next-hop | next-hop-cost | origin | originator-id | out-label | peer | peer-type | rd | safi | unknown-types | weight ]*


� afi � address family identifier

� aggregator � AS number and IP address of aggregator

� as-path � AS path through which this route bas been advertised

� atomic-aggregate � whether the atomic aggregate attribute is present

� best � whether this is the best route for the prefix

� clusters � list of cluster IDs through which the route has been advertised

� communities � community number associated with the route

� extended-communities � extended community

� imported � whether the route was imported


� in-label � MPLS label for the route; the label received with incoming MPLS frames

� loc-pref � local preference for the route

� med � multiexit discriminator for the route

� next-hop � IP address of the next router that is used when forwarding a packet to the destination network

� next-hop-cost � whether the indirect next hop of the route is unreachable, if not, displays IGP cost to the indirect next hop

� out-label � MPLS label for the route; the label with outgoing MPLS frames

� peer � IP address of BGP peer from which route was learned


� origin � origin of the route

default-fields routeERX Edge Routers

119

� originator-id � router ID of the router in the local AS that originated the route

� rd � route distinguisher

� safi � subsequent address family identifier

� unknown-types � attribute codes for unknown path attributes

� weight � weight of the route



default-information originate120

default-information originate

Description: Enables BGP to advertise a default route (0.0.0.0/0) if the default route exists in the IP routing table. If the default route does not exist, you must configure it using the ip route command.

For IS-IS, OSPF, and RIP, configures a default route for the distribution of default information into the respective routing domain. IS-IS creates the default route (0.0.0.0/0) if it does not exist in the IP routing table. OSPF and RIP do not create the default route unless you use the always option.

For all protocols, the no version disables advertisement of the default route. The syntax varies with the protocol.

Syntax: For BGP:

[ no ] default-information originate

For IS-IS:

[ no ] default-information originate [ route-map mapTag ]

For RIP:

[ no ] default-information originate [ always | route-map mapTag ]

For OSPF:

[ no ] default-information originate [ always | metric metricValue | metric-type 1 | metric-type 2 | route-map mapTag ]*

� mapTag � name of route map used to import the default route; string of up to 32 characters

� always � creates the default route, so that it is always advertised

� metricValue � sets the metric for the default route; a value ranging from 0�4294967295

� metric-type 1 � sets the default route�s metric type to OSPF external type 1

� metric-type 2 � sets the default route�s metric type to OSPF external type 2



default-metricERX Edge Routers

121

default-metric

Description: Configures RIP to use this metric when advertising routes on all subsequently created interfaces. The no version restores the default value, 0.

Syntax: [ no ] default-metric metricValue [ interfaceType interfaceSpecifier ]

� metricValue � metric to apply to routes, a value ranging from 1�16




default-router

Description: Specifies the IP address of the router that the subscriber�s computer will use for traffic destined for locations beyond the local subnet. The no version removes the association between the address pool and the router.

Syntax: default-router ipAddressPrimary [ ipAddressSecondary ]

no default-router

� ipAddressPrimary � IP address of preferred router

� ipAddressSecondary � IP address of secondary router

Mode(s): Pool Configuration

delete

Description: Deletes a directory or file in nonvolatile storage. There is no no version.

Syntax: delete filename | directory directoryName [ force ]

� filename � name of the local file you are deleting (for example, system1.cnf)

� directoryName � path of a directory

� force � forces deletion of directory even if it is not empty

Mode(s): Boot, User Exec, Privileged Exec

deny122

deny

Description: Specifies the domain name(s) that are to be denied access to AAA authentication. The no version negates the command.

Syntax: [ no ] deny domainName



description

Description: In Interface Configuration mode, adds a text description to an IP interface. In VRF Configuration mode, adds a text description to the VRF. The no version removes the description from the interface or VRF.

Syntax: description name

no description

� name � string of up to 256 characters in Interface Configuration mode; string of up to 80 characters in VRF Configuration mode

Mode(s): Interface Configuration, VRF Configuration

dir

Description: Displays information about the files in nonvolatile storage, including name, size, date created, and whether they are in use. There is no no version.

Syntax: dir [ path ] [ short ]

� path � path to a specific directory

� short � limits display to file name and creation date


disableERX Edge Routers

123

disable

Description: When used from Privileged Exec mode, exits Privileged Exec mode and returns to User Exec mode.

When used from Router Configuration or Interface Configuration mode in the context of a DVMRP configuration, disables DVMRP on the virtual router or interface. The no version reenables DVMRP on the virtual router or interface.

When used from Router Configuration mode in the context of a RIP configuration, disables RIP on the virtual router. The no version enables RIP processing on the virtual router.

Syntax: To return to User Exec mode:

disable [ level ]

� level � one of the following privilege levels; the default is 10

� 0 � allows the user to execute the help, enable, disable, and exit commands

� 1 � allows the user to execute commands in User Exec mode plus commands at level 0

� 5 � allows the user to execute Privileged Exec show commands plus the commands at levels 1 and 0

� 10 � allows the user to execute all commands except support commands, which may be provided by Juniper Networks Customer Service

� 15 � allows the user to execute support commands

DVMRP, RIP:

[ no ] disable

Mode(s): Privileged Exec, Router Configuration (DVMRP or RIP), Interface Configuration (DVMRP only)

disable-autosync

Description: Halts automatic synchronization between the primary and standby SRP modules. The no version restores the default situation, in which automatic synchronization runs as a background process every 5 minutes.

Syntax: [ no ] disable-autosync


disable-dynamic-redistribute124

disable-dynamic-redistribute

Description: Halts the dynamic redistribution of routes that are initiated by changes to a route map. Supported by DVMRP, BGP, IS-IS, OSPF, and RIP. The no version reenables dynamic redistribution of routes.

Syntax: [ no ] disable-dynamic-redistribute


disable proxy lcp

Description: Disables the proxy LCP parameter for the remote host. The no version enables the proxy LCP parameter for the remote host.

Syntax: [ no ] disable proxy lcp

Mode(s): L2TP Destination Profile Host Configuration

disable-switch-on-error

Description: Prevents the redundant SRP module from taking over if the primary SRP module experiences a software failure or if you push the reset button on the primary SRP module. Issue the sync command immediately before you issue this command. The no version restores the default situation, in which the redundant SRP module takes over if the primary SRP module experiences a failure.

Syntax: [ no ] disable-switch-on-error


disconnect ssh

Description: Terminates an active SSH session. Use the show ip ssh command to determine the session identifier for the session to terminate. There is no no version.

Syntax: disconnect ssh { vty vtyId | sessionId }

� vtyId � virtual terminal identifier for VTY where the SSH session resides; use the show users command to determine the identifier

� sessionId � identifier for the session to be terminated


distanceERX Edge Routers

125

distance

Description: Defines an administrative distance for RIP or OSPF routes. A distance of 255 prevents the route from being installed in the routing table. The no version either negates a command or restores the command�s defaults.

Syntax: The options available vary depending on your routing protocol context; that is, on whether you are configuring OSPF or RIP.

OSPF:

[ no ] distance { weight | ospf { external distExt | inter-area disInter | intra-area disIntra } [ external distExt | inter-area distInter | intra-area distIntra ]* }

� distance � weight applied to OSPF routes

� weight � value assigned to OSPF routes that are added to the IP routing table; a number in the range 1�255

� ospf � OSPF routes

� distExt � distance for external type 5 and type 7 routes; a number in the range 1�255

� disInter � distance for interarea routes; a number in the range 1�255

� disIntra � distance for intra-area routes; a number in the range 1�255


RIP:

[ no ] distance weight

� weight � administrative distance assigned to RIP routes added to the IP routing table in the range 0�255; the default is 120


distance bgp126

distance bgp

Description: Sets the administrative distances for BGP routes. A distance of 255 prevents the route from being installed in the routing table. The no version restores the default values.

Syntax: distance bgp externalDistance internalDistance localDistance

no distance bgp [ externalDistance [ internalDistance [ localDistance ] ] ]

� externalDistance � administrative distance for routes external to the AS in the range 1�255; the default is 20

� internalDistance � administrative distance for routes internal to the AS in the range 1�255; the default is 200

� localDistance � administrative distance for local (redistributed) routes in the range 1�255; the default is 200


distance ip

Description: Sets the administrative distance for IS-IS routes that are inserted into the IP routing table. A distance of 255 prevents the route from being installed in the routing table. The no version restores the default value of 115.

Syntax: [ no ] distance weight ip

� weight � administrative distance assigned to IS-IS routes added to the IP routing table in the range 1�255


distribute-domain-wide

Description: Increases the granularity of routing information within an IS-IS domain by allowing routes to be distributed from level 2 to level 1. This results in more accurate routing between level 1 areas. The no version disables command.

Syntax: [ no ] distribute-domain-wide


distribute-listERX Edge Routers

127

distribute-list

Description: Specifies the distribute list, an access list applied to incoming or outgoing RIP route updates. In Remote Neighbor Configuration mode, applies only to a RIP remote-neighbor interface. The no version removes the distribute list. An IP access list acts as a filter; refer to the access-list command for details.

Syntax: In Router Configuration mode:

[ no ] distribute-list accessListNumber { in | out } [ interfaceType interfaceSpecifier ]

In Remote Neighbor Configuration mode:

[ no ] distribute-list accessListName { in | out }

� accessListName � name of the access list

� in � applies the access list to incoming route updates

� out � applies the access list to outgoing route updates



Mode(s): Router Configuration, Remote Neighbor Configuration

dns-server

Description: Assigns a DNS server to an address pool. The no version removes the association between the address pool and the DNS server.

Syntax: dns-server ipAddressPrimary [ ipAddressSecondary ]

no dns-server

� ipAddressPrimary � IP address of preferred DNS server

� ipAddressSecondary � IP address of secondary DNS server


domain-authentication-key128

domain-authentication-key

Description: Assigns a password for authentication of IS-IS level 2 LSPs, CSNPs, and PSNPs. The no version deletes the password.

Syntax: domain-authentication-key [ 0 | 8 ] authKey

no domain-authentication-key





domain-id

Description: Sets the OSPF domain ID for an OSPF VRF on a PE. The no version restores the default value.

Syntax: domain-id domainIdAddress | domainId

no domain-id

� domainIdAddress � OSPF domain ID in IP address format; default is the IP address of the OSPF router configured in the VRF

� domainId � OSPF domain ID as an integer value in the range 0�4294967295; default is 0


domain-message-digest-key

Description: Specifies an HMAC MD5 key that the system uses to create a secure, encrypted message digest of each IS-IS level 2 packet (LSPs, CSNPs, and PSNPs). The digest is inserted into the packet from which it is created. Using this algorithm for domain routers protects against unauthorized routers injecting false routing information into your network. You can specify when the system will start (default is the current time) and stop (default is never) accepting packets that include a digest made with this key. You can specify when the system will start (default is the current time plus 2 minutes) and stop (default is never) generating packets that include a digest made with this key. The no version deletes the key specified by the key-id.

Syntax: domain-message-digest-key keyId hmac-md5 [ 0 | 8 ] key [ start-accept startAcceptTime [ { startAcceptMonth startAcceptDay | startAcceptDay startAcceptMonth } startAcceptYear ] ] [ start-generate startGenTime [ { startGenMonth startGenDay | startGenDay startGenMonth } startGenYear ] ]

domain-nameERX Edge Routers

129

[ stop-accept { never | stopAcceptTime [ { stopAcceptMonth stopAcceptDay | stopAcceptDay stopAcceptMonth } stopAcceptYear ] } ] [ stop-generate { never | stopGenTime [ { stopGenMonth stopGenDay | stopGenDay stopGenMonth } stopGenYear ] } ]

no domain-message-digest-key keyId


� 0 � the key is entered in unencrypted form (plaintext); this is the default option

� 8 � the key is entered in encrypted form (ciphertext)

� key � string of up to 20 alphanumeric characters; secret key used by the HMAC MD5 algorithm to generate the message digest.

� startAcceptTime, startAcceptMonth, startAcceptDay, startAcceptYear � time, month, day, year that the system will start accepting packets created with this password. Use military time format HH:MM[ :SS ].

� startGenTime, startGenMonth, startGenDay, startGenYear � time, month, day, year that the system will start inserting this password into packets. Use military time format HH:MM[ :SS ].

� never � the system never stops accepting or generating packets; overrides previously specified stop times.

� stopAcceptTime, stopAcceptMonth, stopAcceptDay, stopAcceptYear � time, month, day, year that the system will stop accepting packets created with this password. Use military time format HH:MM[ :SS ].

� stopGenTime, stopGenMonth, stopGenDay, stopGenYear � time, month, day, year that the system will stop inserting this password into packets. Use military time format HH:MM[ :SS ].


domain-name

Description: Specifies a domain name that can be returned to the subscriber of an address pool if requested. The no version removes the association between the address pool and the domain name.

Syntax: domain-name domainName

no domain-name

� domainName � name of the domain


domain-tag130

domain-tag

Description: Sets the VPN route tag for an OSPF VRF on a PE to prevent routing loops back into the VPN. The no version restores the default value.

Syntax: domain-tag routeTag

no domain-tag

� routeTag � number identifying the VPN route tag in the range 0�4294967295


ds3-scramble

Description: Enables scrambling of the ATM cell payload on a T3 interface. DS3 scrambling assists clock recovery on the receiving end of the interface.The no version disables cell scrambling.

Syntax: [ no ] ds3-scramble


dsr-detect

Description: Requires that a DSR signal be detected on the line for a user to log into the console. DSR is carried on pin 6 of the SRP module�s RS-232 (DB-9) connector. The DSR input must be connected to the DSR output of a modem or the DTR output of another DTE device, such as a terminal server, that supports this signal. If a session is in progress and the DSR signal is lost, the user is logged out automatically. The no version restores the default of no DSR required.

Syntax: [ no ] dsr-detect


dsu bandwidthERX Edge Routers

131

dsu bandwidth

Description: Sets the speed for the fractional T3 lines. The no version clears the bandwidth. If you issue this command, be sure to issue the dsu mode and scramble commands. Similarly, if you issue the no version, be sure to issue the no dsu mode and no scramble commands; otherwise, the interface may drop packets unexpectedly.

Syntax: dsu bandwidth bandwidthValue

no dsu bandwidth

� bandwidth � sets a fractional bandwidth

� bandwidthValue � value of the fractional bandwidth in the range 22�44210 Kbps. The system offers a set of speeds in increments that depend on the DSU mode you specify. The actual speed of the fractional T3 lines will be the value closest to the fractional bandwidth you specify.


dsu mode

Description: Sets the DSU mode for the lines. The no version clears the dsu mode. If you issue this command, be sure to issue the dsu bandwidth and scramble commands. Similarly, if you issue the no version, be sure to issue the no dsu bandwidth and no scramble commands; otherwise, the interface may drop packets unexpectedly.

Syntax: dsu mode 0 | 2

no dsu mode

� 0 � Digital Link mode

� 2 � Larscom mode


duplex132

duplex

Description: Specifies the duplex mode for an Ethernet interface. The no version specifies the default value, automatically negotiate. This command works in conjunction with the speed command; if you set or accept the automatically negotiate setting for either duplex mode or speed, the system negotiates both parameters with the remote device. This command is not available for the Ethernet interface on the SRP module.

Syntax: duplex duplexMode

no duplex

� duplexMode � one of the following the duplex options

� automatically negotiate � specifies that the system negotiates duplex mode with the remote device

� full � specifies that the system uses full duplex on an FE or GE interface

� half � specifies that the system uses half duplex on an FE interface; this value is not valid for GE interfaces


e3-scrambleERX Edge Routers

133

e3-scramble

Description: Enables scrambling of the ATM cell payload on an E3 interface. E3 scrambling assists clock recovery on the receiving end of the interface.The no version disables scrambling.

Syntax: [ no ] e3-scramble


enable

Description: Enters Privileged Exec mode at the specified privilege level. There is no no version.

Syntax: enable [ level ]

� level � one of the following privilege levels; the default is 10



� 5 � allows the user to execute Privileged Exec show commands plus the commands at levels 1 and 0



Mode(s): User Exec

enable password134

enable password

Description: Sets a password to control access to certain types of commands. The no version removes the password requirement.

Syntax: enable password [ level securityLevel ] [ passwordType ] passwordText

no enable password [ level securityLevel ]

� securityLevel � the security level for which you want to set the password; the default is 5



� 5 � allows the user to execute Privileged Exec show commands plus the commands at levels 1 and 0; this is the default level



� passwordType:

� 0 � specifies that an unencrypted password follows; this is the default

� 7 � specifies that an encrypted password follows

� passwordText � password, either encrypted or unencrypted, depending on the password type

Note: On your system, all passwords are stored as encrypted passwords.


enable proxy authenticate

Description: Configures proxy authenticate for a remote host. The no version removes proxy authenticate configuration from the remote host.

Syntax: [ no ] enable proxy authenticate


enable secretERX Edge Routers

135

enable secret

Description: Sets a secret to control access to certain types of commands. The no version removes the secret requirement.

Syntax: enable secret [ level securityLevel ] [ secretType ] secretText

no enable secret [ securityLevel ]

� securityLevel � the security level for which you want to set the secret; the default is 5



� 5 � allows the user to execute Privileged Exec show commands plus the commands at levels 1 and 0; this is the default level



� secretType:

� 0 � specifies that an unencrypted secret follows; this is the default

� 7 � specifies that an encrypted secret follows

� secretText � secret, either encrypted or unencrypted, depending on the secret type

Note: On your system, all secrets are stored as encrypted secrets.


encapsulation bridge1483

Description: Configures bridged Ethernet as the encapsulation method on an interface. The no version removes bridged Ethernet as the encapsulation method on the interface.

Syntax: [ no ] encapsulation bridge1483


encapsulation hdlc136

encapsulation hdlc

Description: Enables Cisco HDLC encapsulation. The no version disables Cisco HDLC on an interface.

Syntax: [ no ] encapsulation hdlc


encapsulation ietf

Description: Enables Frame Relay or Multilink Frame Relay encapsulation. The no version removes Frame Relay or Multilink Frame Relay configuration from an interface.

Syntax: encapsulation { frame-relay | mlframe-relay } ietf

no encapsulation { frame-relay | mlframe-relay }


encapsulation mlppp

Description: Configures MLPPP as the encapsulation method on an individual interface. Creates an MLPPP link interface, also known as an MLPPP bundle member. The no version disables MLPPP on an interface.

Syntax: [ no ] encapsulation mlppp


encapsulation ppp

Description: Configures PPP as the encapsulation method for the interface. The no version disables PPP on an interface.

Syntax: [ no ] encapsulation ppp


encapsulation pppoe

Description: Configures PPPoE as the encapsulation method for the interface. The no version disables PPPoE on an interface.

Syntax: [ no ] encapsulation pppoe

� encapsulation � configure pppoe encapsulation


encapsulation smds-trunkERX Edge Routers

137

encapsulation smds-trunk

Description: Configures SMDS trunk as the encapsulation method for the interface. SMDS trunk encapsulation allows SMDS traffic to be sent over a GRE tunnel or a HSSI interface. The no version disables SMDS trunk encapsulation on an interface.

Syntax: [ no ] encapsulation smds-trunk


encapsulation vlan

Description: Configures VLAN as the encapsulation method for the interface. The no version disables VLAN on an interface.

Syntax: [ no ] encapsulation vlan


encryption

Description: Sets the encryption algorithm to use in the IKE policy. The no version restores the default, 3DES.

Syntax: encryption des | 3des

no encryption

� des � specifies 56-bit DES-CBC as the encryption algorithm

� 3des � specifies 168-bit 3DES-CBC as the encryption algorithm


end

Description: Exits Global Configuration mode or any of the Configuration submodes and returns to the User Exec mode. There is no no version.

Syntax: end


erase secrets138

erase secrets

Description: Removes all CLI passwords or secrets. Execute before pressing the NMI button on the SRP module. There is no no version.

Note: If you enter the service unattended password-recovery command, the behavior of the erase secrets command changes. The erase secrets command will not take any parameters and will not be available through a vty session until you enter no service unattended password-recovery.

Syntax: erase secrets seconds

� seconds � number of seconds in the range 1�60 to allow for the operation

Mode(s): User Exec

ethernet description

Description: Adds a text description to a non-SRP Fast Ethernet or Gigabit Ethernet interface. The no version removes the description from the interface.

Syntax: ethernet description name

no ethernet description

� name � string of up to 15 characters


exceeded-action

Description: Sets the action for packets not conforming to the committed rate and committed burst size, and not conforming to the peak rate and peak burst size. The no version restores the default value, drop.

Syntax: [ no ] exceeded-action { drop | transmit | mark markVal }



� markVal � mark value for the packet in the range 0�255


exceeded-fractionERX Edge Routers

139

exceeded-fraction

Description: Sets the percentage of the total queue length that can be occupied before dropping exceeded packets. The no version returns the exceeded fraction to its default setting.

Syntax: exceeded-fraction exceededFraction

no exceeded-fraction

� exceededFraction � percentage range 0�100; default is 25


exceeded-length

Description: Sets minimum and maximum constraints for the queue�s exceeded lengths. The no version removes constraints on the queue�s exceeded length.

Syntax: exceeded-length minimumExceededLength [ maximumExceededLength ]

no exceeded-length

� minimumExceededLength � range 0�1073741824

� maximumExceededLength � range 0�1073741824


exception dump

Description: Specifies the location from and to which the system should transfer a core dump file. The no version disables the command.

Syntax: exception dump { except-srp | srp-only } { local | ipAddress [ directoryName ] }

no exception dump

� except-srp � generates core dump for all non-SRP modules

� srp-only � generates core dump for only the SRP modules

� local � nonvolatile storage memory

� ipAddress � IP address of the server to which the system will transfer the core dump file

� directoryName � name of the directory on the server to which the system will transfer the core dump file


exception gateway140

exception gateway

Description: Specifies the gateway through which the system sends the core dump file to the remote FTP server. There is no no version.

Syntax: exception gateway ipAddress

� ipAddress � IP address of the gateway


exception protocol ftp

Description: Specifies the username and password for FTP access to a host where you transferred a core dump file. The no version restores the defaults.

Syntax: exception protocol ftp[ [ algorithmType ] userName [ [ algorithmType ] password ] ]

no exception protocol

� algorithmType � type of user name or password

� 0 � unencrypted password, the default.

� 8 � encrypted password

� userName � username required to access the FTP server; the default username is anonymous

� password � password required to access the FTP server; the default is no password


exception source

Description: Specifies the IP address and mask of the system interface over which you want to send the core dump file to the remote FTP server. There is no no version.

Syntax: exception source ipAddress ipAddressMask

� ipAddress � IP address of the interface

� ipAddressMask � optionally add the IP address mask of the interface


excess-burstERX Edge Routers

141

excess-burst

Description: Sets amount of bandwidth allocated to accommodate a packet in progress when the rate is in excess of the burst.

Syntax: [ no ] excess-burst [ size ]

� size � the amount of bandwidth allocated; in the range 0�4294967295


exclude-subsystem

Description: Excludes subsystem files from being copied when you copy a software release to the system. The no version removes the exclusion for a specified subsystem file or all subsystem files.

Syntax: exclude-subsystem subsystemName

no exclude-subsystem [ subsystemName ]

� subsystemName � name of the subsystem file to be excluded


exec-banner

Description: Controls display of an exec banner (configured with the banner command) on a particular line after user authentication (if any) and before the first prompt of a CLI session. The no version disables the banner.

Syntax: [ no ] exec-banner


exec-timeout

Description: Sets the time interval that the console or vty line waits for expected user input. The no version restores the default value, which is no time limit.

Syntax: exec-timeout minutes [ seconds ]

no exec-timeout

� minutes � number of minutes for the time limit

� seconds � number of seconds in addition to the minutes for the time limit


exit142

exit

Description: Exits the current command mode. There is no no version.

Syntax: exit

Mode(s): All modes

exit-address-family

Description: Exits from Address Family Configuration mode and returns to Router Configuration mode. There is no no version.

Syntax: exit-address-family

Mode(s): Address Family Configuration

exit-remote-neighbor

Description: Exits from Remote Neighbor Configuration mode and returns to Router Configuration mode. There is no no version.

Syntax: exit-remote-neighbor


export map

Description: Associates a route map with a VRF to filter routes exported by the VRF. The no version disables the application of the route map to exported routes.

Syntax: [ no ] export map routeMap

� routeMap � name of a route map

Mode(s): VRF Configuration

fabric-strict-priority

Description: Specifies strict priority scheduling for queues in the traffic class in the fabric. The no version deletes the strict priority setting.

Syntax: [ no ] fabric-strict-priority

Mode(s): Traffic Class Configuration

fabric-weightERX Edge Routers

143

fabric-weight

Description: Specifies the relative weight for queues in the traffic class in the fabric. The no version sets the fabric weight to the default value.

Syntax: fabric-weight weight

no fabric-weight

� weight � range 1�63; default is 8

Mode(s): Traffic Class Configuration

fdl

Description: Specifies the facility data link standard used by a CT1 interface. The no version restores the default, none.

Syntax: fdl { ansi | att | all | none }

no fdl [ ansi | att | all ]

� ansi � specifies ANSI T1.403 Standard for extended superframe FDL exchange support

� att � specifies AT&T Technical Reference 54016 for extended superframe FDL exchange support

� all � specifies both the AT&T and ANSI mode for extended superframe FDL exchange support

� none � removes the current FDL mode settings


fdl carrier

Description: Specifies that an CT1 interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment.

Syntax: [ no ] fdl carrier


fdl string144

fdl string

Description: Defines an FDL message on a T1 interface as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages.

Syntax: fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue | generator generatorValue }

no fdl string { eic | fic | lic | unit | pfi | port | generator }

� eicValue � equipment identification code; 1�10 characters; default is the null value

� licValue � line identification code; 1�10 characters; default is the null value

� ficValue � frame identification code; 1�10 characters; default is the null value

� unitValue � unit identification code; 1�6 characters; default is the null value.

� pfiValue � facility identification code to send in the FDL path message; 1�38 characters; default is the null value.

� portValue � equipment port number to send in the FDL idle signal message; 1�38 characters; default is the null value.

� generatorValue � generator number to send in the FDL test signal message; 1�38 characters; default is the null value.


fdl transmit

Description: Configures the system to send the specified type of FDL message on the T1 interface. The no version stops the system from sending the specified type of FDL message or all FDL messages.

Syntax: [ no ] fdl transmit { path-id | idle-sIgnal | test-signal }

no fdl transmit

� path-id � transmits a path identification message every second

� idle-sIgnal � transmits an idle signal every 10 seconds

� test-signal� transmits a test signal every 10 seconds


filterERX Edge Routers

145

filter

Description: Defines a policy rule that drops all packets conforming to the specified classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with this policy list for this rule. Use the suspend keyword to suspend a filter rule temporarily. The no version removes the rule from the policy list.

Syntax: [ no ] [ suspend ] filter [ classifier-group claclName ] [ precedence precValue ]

� suspend � suspend the policy rule

� claclName � classifier control list used to classify packets for this filter policy

� precValue � precedence of this rule in relation to other rules within this set


flash-disk duplicate

Description: Copies the contents of NVS on the primary SRP module to another NVS card. There is no no version.

Syntax: flash-disk duplicate

Mode(s): Boot

To access the Boot mode from the local console:1 At the Privileged Exec prompt, type the reload command.



flash-disk initialize

Description: Performs a low-level format of NVS. There is no no version.

Syntax: flash-disk initialize [ no-format ]

� no-format � erases all files but does not format NVS

Mode(s): Boot




flash-disk scan146

flash-disk scan

Description: Scans NVS on the primary SRP module to detect corrupt sectors, deletes files and directories that contain corrupt sectors, fixes errors associated with unused sectors. There is no no version.

Syntax: flash-disk scan [ repair ]

Mode(s): Boot




forward

Description: Defines a rule that forwards all packets conforming to the specified classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with this policy list for this rule. Use the suspend keyword to suspend a forward rule temporarily. The no version removes the rule from the policy list.

Syntax: [ no ] [ suspend ] forward [ classifier-group claclName ] [ precedence precValue ]

� suspend � suspend a policy rule

� claclName � classifier control list used to classify packets for this filter policy



frame-relay class

Description: Associates a map class with a subinterface. The no version removes the association between the map class and the subinterface.

Syntax: [ no ] frame-relay class mapName

� mapName � name of the map class; use up to 64 characters


frame-relay descriptionERX Edge Routers

147

frame-relay description

Description: Assigns a text description or alias to a Frame Relay major interface or subinterface. The no version removes the description or alias.

Syntax: frame-relay description name

no frame-relay description

� name � text description or alias for the Frame Relay interface or subinterface; up to 64 characters


frame-relay fragment

Description: Configures fragmentation and reassembly for the map class created with the map-class frame-relay command. The no version stops fragmentation and/or reassembly on the subinterface.

Syntax: frame-relay fragment [ [ fragmentSize ] [ fragmentation-only ] | reassembly-only ]

no frame-relay fragment

� fragmentSize � maximum payload size of a fragment in bytes; a number in the range 16�8188; default value is 52

� fragmentation-only � specifies fragmentation only

� reassembly-only � specifies reassembly only

Mode(s): Map Class Configuration

frame-relay interface-dlci ietf

Description: Assigns a data-link connection identifier to a specified Frame Relay subinterface on the router or access server. The DLCI number identifies a virtual circuit. The no version removes this assignment.

Syntax: frame-relay interface-dlci dlci ietf

no frame-relay interface-dlci dlci



frame-relay intf-type148

frame-relay intf-type

Description: Configures a Frame Relay interface type. The no version restores the default value, DTE.

Syntax: frame-relay intf-type type

no frame-relay intf-type

� type � one of the following interface types:

� dce � router is connected to user DTE equipment

� dte � router is connected to a Frame Relay network; the default

� nni � router connects two Frame Relay networks


frame-relay keepalive

Description: Enables the LMI mechanism for serial lines using Frame Relay encapsulation. The no version disables this capability. The keepalive command is similar to the frame-relay lmi-t391dte command.

Syntax: frame-relay keepalive [ seconds ]

no frame-relay keepalive

� seconds � number in the range 5�30; default is 10 seconds; defines the keepalive interval; the interval must be set, and the value on the DTE should be less than the value set on the DCE


frame-relay lmi-n391dte

Description: Sets the full-status polling counter (N391) on a DTE interface. The no version restores the default value, assuming an LMI has been configured.

Syntax: frame-relay lmi-n391dte keepExchanges

no frame-relay lmi-n391dte

� keepExchanges � number in the range 1� 255; default is 6; number of keep exchanges to be done before requesting a full-status message. If you specify a value of 1, you receive full-status messages only.


frame-relay lmi-n392dceERX Edge Routers

149

frame-relay lmi-n392dce

Description: Sets the error threshold counter (N392) on a DCE interface. The no version removes current setting and sets the default.

Syntax: frame-relay lmi-n392dce threshold

no frame-relay lmi-n392dce

� threshold � positive number in the range 1� 10; number of errors that will place the interface in an operationally down state; the default is 2 errors



Description: Sets the error threshold counter (N392) on a DTE interface. The no version removes current setting and sets the default.

Syntax: frame-relay lmi-n392dte threshold


� threshold � positive number in the range 1�10; number of errors that will place the interface in an operationally down state; the default is 3 errors


frame-relay lmi-n393dce

Description: Sets the monitored events count (N393) on a DCE interface. The no version removes current setting and sets the default.

Syntax: frame-relay lmi-n393dce events

no frame-relay lmi-n393dce

� events � number in the range 1�10 events; specifies the diagnostic window used to verify link integrity; the default is 2 events (The detection of N392 errors within the window of N393 samples places the interface in an operationally down state.)


frame-relay lmi-n393dte150


Description: Sets the monitored event count (N393) on a DTE interface. The no version removes current setting and sets the default.

Syntax: frame-relay lmi-n393dte events


� events � number in the range 1�10 events; the default is 4 events; specifies the diagnostic window used to verify link integrity (The detection of N392 errors within the window of N393 samples places the interface in an operationally down state)


frame-relay lmi-t391dte

Description: Sets the link integrity verification polling timer (T391) on a DTE interface. The no version removes the current setting and sets the default.

Syntax: frame-relay lmi-t391dte seconds

no frame-relay lmi-t391dte

� seconds � number in the range 5�30 seconds; specifies the interval in seconds between status inquiries issued by the DTE; the default is 10 seconds


frame-relay lmi-t392dce

Description: Sets the polling verification timer (T392) on a DCE interface. The no version removes current setting and sets the default.

Syntax: frame-relay lmi-t392dce seconds

no frame-relay lmi-t392dce

� seconds � number in the range 5�30 seconds; specifies the expected interval in seconds between status inquiries issued by the DTE equipment; the default is 15 seconds


frame-relay lmi-typeERX Edge Routers

151

frame-relay lmi-type

Description: Selects the LMI type. The no version restores the default value.

Syntax: frame-relay lmi-type type

no frame-relay lmi-type

� type � one of the following types:

� ansi � ANSI T1.617 Annex D

� cisco � original Group of Four specification developed by DEC, Northern Telecom, Stratacom, and Cisco

� q933a � ITU-T Q.933 Annex A

� none � no management interface is used


framing152

framing

Description: Specifies the framing mode used by a CE1, CT1, E3, or T3 interfaces. Available modes vary by the type of interface. The no version restores the default for that interface.

Syntax: framing framingType

no framing

� framingType � one of the following framing types:

CE1 module

� crc4 � default; CRC4 frame

� no-crc4 � disables CRC4 framing

CT1 module

� esf � default; extended superframe; sets the HDLC idle code to 0x7E

� sf � superframe; sets the HDLC idle code to 0xFF

E3-FRAME module

� g751 � default; G.751 compliant frame

� g832 � G.832 compliant frame

E3-ATM module

� g751adm � G.751 ATM direct mapping

� g751plcp � default; G.751 PLCP mapping

� g832adm � G.832 ATM direct mapping

T3 module

� c-bit � default; specifies c-bit parity framing

� m23 � specifies M23 multiplexer framing


frequency

Description: Sets the time interval between RTR operations. The no version restores the default value.

Syntax: frequency frequencyValue

no frequency

� frequencyValue � number of seconds between RTR operations; for both types (echo and pathEcho), the default is 60 seconds

Mode(s): RTR Configuration

ftp-server enableERX Edge Routers

153

ftp-server enable

Description: Enables the FTP server and monitors the FTP port for attempts to connect to the FTP server. The no version terminates the current FTP sessions and disables the FTP server.

Syntax: [ no ] ftp-server enable


group

Description: From QoS Profile Configuration mode, specifies that a group scheduler node be configured for each interface of the given interface type. The no version removes this rule from the QoS profile.

From ISAKMP Policy Configuration mode, assigns a Diffie-Hellman group to the IKE policy. The no version restores the default, 1024-bit Diffie-Hellman group.

Syntax: To specify a group scheduler node for QoS:

[ no ] interfaceType group groupName scheduler-profile schedulerProfileName

� interfaceType � one of the following interface types for which groups should be configured: atm, ethernet, serial, server-port

� groupName � name of the traffic class group

� schedulerProfileName � name of the scheduler profile

To Specify a Diffie-Hellman group:

group { 1 | 2 | 5 }

no group

� 1 � specifies the 768-bit group



Mode(s): QoS Profile Configuration, ISAKMP Policy Configuration

halt154

halt

Description: Stops operation on both SRP modules or on the specified SRP module. There is no no version.

Caution: To prevent corruption of NVS, issue this command before you remove or power down an SRP module.

Syntax: The syntax of the command depends on whether you enter it in Boot mode or Privileged Exec mode.

Boot Mode:halt

Privileged Exec Mode:halt [ force | primary [ force ] | standby [ force ] ]

� force � prompts the user to confirm that the system should stop operation if the SRP modules are in certain states, such as writing configuration data to NVS, that could lead to loss of configuration data or corruption of NVS.

� primary � stop operation on primary SRP module only

� standby � stop operation on standby SRP module only

Mode(s): Boot, Privileged Exec




hash

Description: Sets the hash algorithm in an IKE policy. The no version restores the default, SHA-1.

Syntax: hash sha | md5

no hash

� sha � specifies SHA-1 (HMAC variant) as the hash algorithm

� md5 � specifies MD5 (HMAC variant) as the hash algorithm


hdlc down-when-loopedERX Edge Routers

155

hdlc down-when-looped

Description: Enables loopback detection on a Cisco HDLC interface. Loopback detection is disabled by default. The no version disables loopback detection.

Syntax: [ no ] hdlc down-when-looped


hdlc keepalive

Description: Specifies a keepalive value. The keepalive mechanism tracks the health of the connection. The no version turns off the keepalive feature.

Syntax: hdlc keepalive [ seconds ]

no hdlc keepalive

� seconds � keepalive timeout period in the range 0�6553 seconds. The default is 10. A value of zero (0) turns off the keepalive feature.


hdlc shutdown

Description: Stops or restarts a Cisco HDLC session. The no version restarts a Cisco HDLC session.

Syntax: [ no ] hdlc shutdown


hello hold-time

Description: Configures the MPLS hold time, the period that a sending LSR maintains a record of hello messages from the receiving LSR without receipt of another hello from that LSR. The no version restores the default value of 0.

Syntax: hello hold-time holdTime

no hello hold-time

� holdTime � a number in the range 0�65535; a value of 0 indicates 15 seconds for link hellos and 45 seconds for targeted hellos; a value of 65535 indicates an infinite hold time

Mode(s): LDP Profile Configuration

hello-interval156

hello-interval

Description: Specifies the interval between hello packets that the router sends on the OSPF remote-neighbor interface. The no version restores the default value.

Syntax: hello-interval helloInterval

no hello-interval

� helloInterval � a number in the range 1�65535 seconds; default value is 10 seconds


help

Description: Displays basic information on the Help system. There is no no version.

Syntax: help

Mode(s): All modes

hops-of-statistics-kept

Description: Sets the number of hops to keep statistics for an entry. The no version restores the default value.

Syntax: hops-of-statistics-kept [ hopsKeptValue ]

no hops-of-statistics-kept

� hopsKeptValue � number of hops for which statistics are collected for a particular pathEcho type; the default is 16 for a pathEcho entry and 1 for an echo entry; if you omit this option, all hops found are recorded

Note: The only types your system supports are the pathEcho and the echo.


hostERX Edge Routers

157

host

Description: Adds or modifies an entry to the host table. The no version removes the specified host.

Syntax: host hostname ipAddress [ ftp [ [ algorithmType ] userName [ [ algorithmType ] password ] ] ]

no host hostname

� hostname � hostname to add or modify; up to 20 characters

� ipAddress � IP address of the host

� ftp � specifies that the host is an FTP server

� algorithmType � type of username or password

� 0 � unencrypted password, the default.

� 8 � encrypted password

� userName � username used to access an FTP server (but not an NFS server); defaults to anonymous

� password � password used to access an FTP server (but not an NFS server); defaults to null


hostname

Description: Sets the name for the system in Global Configuration mode; this hostname subsequently appears in the system CLI prompt. The no version removes the hostname from the system.

Note: In Domain Map Tunnel Configuration mode, this command has been deprecated in favor of the client-name command. See the client-name command.

Syntax: hostname hostname

no hostname

� hostname � string of up to 64 characters (no spaces)

Mode(s): Global Configuration, Domain Map Tunnel Configuration (deprecated)

hssi force-dte-acknowledge158

hssi force-dte-acknowledge

Description: Provides compatibility with DCE devices that wait for the DTE side to set the acknowledge bit first. Issue this command if the HSSI interface is configured as DTE, both sides of the connection are correctly configured, and the link does not come up. The no version prevents the HSSI interface from sending acknowledgment signals when in DTE mode.

Syntax: [ no ] hssi force-dte-acknowledge


hssi internal-clock

Description: Enable the internal clock for DCE mode on a HSSI interface. The no version disables the internal clock for DCE mode on a HSSI interface.

Syntax: [ no ] hssi internal-clock


identificationERX Edge Routers

159

identification

Description: Specifies the assignment ID of an L2TP or L2F tunnel in Domain Map Tunnel Configuration mode. The no version removes the assignment ID from the tunnel.

Syntax: identification serverId

no identification

� serverId � L2TP or L2F tunnel assignment ID up to 32 characters


igmp disable

Description: Disables IGMP on a virtual router.The no version reenables IGMP on a virtual router.

Syntax: [ no ] igmp disable


igmp promiscuous

Description: Allows all IGMP interfaces on the router to accept IGMP reports from hosts on any subnet. The no version allows IGMP interfaces on the router to accept IGMP reports only from hosts on their associated subnets.

Syntax: [ no ] igmp promiscuous


ignore dcd

Description: Prevents the system from using the DTD signal when determining whether the interface is working, if an interface is configured as a V.35 DTE. The no version allows the system to use the DTD signal when determining whether the interface is working.

Syntax: [ no ] ignore dcd


ignore link-state-signals160

ignore link-state-signals

Description: Prevents the system from using any link state signal when determining whether a V.35/X.21 interface is working. The no version allows the system to use the link state signals when determining whether the interface is working.

Syntax: [ no ] ignore link-state-signals


ignore-lsp-errors

Description: Allows the router to ignore IS-IS link state packets that are received with internal checksum errors rather than purging the link state packets. The no version disables this function.

Syntax: [ no ] ignore-lsp-errors


import map

Description: Associates a route map with a VRF to filter routes received by the VRF. The no version disables the application of the route map to imported routes.

Syntax: [ no ] import map routeMap

� routeMap � name of a route map


index

Description: Sets a next hop at a particular index in the MPLS explicit path. The no version removes the next hop from the index.

Syntax: index indexNumber next-address ipAddress [ mask ipMask ] [ loose ]

no index indexNumber

� index � number of a node in an ordered set of abstract nodes, a value ranging from 1�255

� ipAddress � address of the next hop

� ipMask � [ not currently used] mask for the next adjacent address

� loose � node is not necessarily directly connected (adjacent) to the previous node in the path. If loose is not configured, the configuration defaults to strict. Strict indicates that the node is directly connected to the previous node.


interfaceERX Edge Routers

161

interface

Description: Configures an interface. The no version removes the subinterface or the logical interface.

Syntax: [ no ] interface interfaceType interfaceSpecifier [ extension ]



� extension � option that depend on the type of interface

Note: See the following entries for the syntax of each type of interface.


interface atm

Description: Configures an ATM interface or subinterface type. The no version removes the interface or subinterface.

Syntax: [ no ] interface atm interfaceSpecifier [ multipoint | point-to-point ]


� multipoint � use to specify an NBMA subinterface

� point-to-point � default; use to specify an ATM interface or subinterface

Mode(s): Global Configuration, Interface Configuration

interface-event-disable

Description: Specifies that RIP does not purge the routing table on a RIP interface that has been brought down. The no version restores the default condition, wherein RIP does purge the routing table on an interface after a down event.

Syntax: [ no ] interface-event-disable


interface fastEthernet162

interface fastEthernet

Description: Specifies a Fast Ethernet interface or subinterface or creates a subinterface over a Fast Ethernet interface. The no version removes the interface or subinterface.

Syntax: [ no ] interface fastEthernet interfaceSpecifier

� interfaceSpecifier � location of the interface in the formatslot/port [ .subinterface1 [ .subinterface2 ] ]

� slot � number of the chassis slot in the range 0�13 (ERX-1400 series) and 0�6 (ERX-700 series)

� port � number of the port; 0 or 1 for a dual-port Fast Ethernet module, 0�7 for an eight-port Fast Ethernet module, 0 for the Fast Ethernet port on the SRP module

. For a list of interface types and their corresponding specifiers, see Interface Types and Specifiers in About This Guide.

The meaning of the subinterface variables depends on the configuration context. You can configure Fast Ethernet interfaces with or without VLANS. If you do not use VLANS, you can use either of two different configuration methods.

VLANs

� subinterface1 � number of the VLAN subinterface in the range 1�4294967293; no more than 4096 VLAN subinterfaces per Fast Ethernet physical port

� subinterface2 � when using PPPoE, the number of the PPPoE subinterface in the range 1�4294967293; no more than 4094 PPPoE subinterfaces per Fast Ethernet physical port

No VLANs � New Configuration Method


� subinterface2 � not used

No VLANs � Alternative Configuration Method

� subinterface1 � number of the Fast Ethernet subinterface in the range 1�4294967293; no more than 2 subinterfaces per Fast Ethernet physical port


Note: If you are configuring Fast Ethernet interfaces without VLANs and you are running software release 3.0.0 or higher, we highly recommend that you use the current configuration method. If you are configuring Fast Ethernet

interface gigabitEthernetERX Edge Routers

163

interfaces without VLANs and you are running a software release earlier than 3.0.0 or if you are using scripts or macros created with such a release, you must use the alternative configuration method.


interface gigabitEthernet

Description: Specifies or creates a Gigabit Ethernet interface or a subinterface over a Gigabit Ethernet interface. The no version removes the interface or subinterface.

Syntax: [ no ] interface gigabitEthernet interfaceSpecifier

� interfaceSpecifier � the location of the interface in the formatslot/port [ .subinterface1 [ .subinterface2 ] ]

For a list of interface types and their corresponding specifiers, see Interface Types and Specifiers in About This Guide.

The meaning of the subinterface variables depends on the configuration context. You can configure Gigabit Ethernet interfaces with or without VLANS.

VLANs

� subinterface1 � the number of the VLAN subinterface in the range 1�4294967293; no more than 4096 VLAN subinterfaces per Gigabit Ethernet physical port

� subinterface2 � when using PPPoE, the number of the PPPoE subinterface in the range 1�4294967293; no more than 4094 PPPoE subinterfaces per Gigabit Ethernet physical port

No VLANs

� subinterface1 � when using PPPoE, the number of the PPPoE subinterface in the range 1�4294967293; no more than 4094 PPPoE subinterfaces per Gigabit Ethernet physical port

� subinterface2 � not used

Note: You can configure only the primary port, 0, on a GE I/O module. The system automatically uses the redundant port if the primary fails.


interface hssi164

interface hssi

Description: Selects a HSSI interface. The no version clears the configuration on the HSSI interface.

Syntax: [ no ] interface hssi interfaceSpecifier



interface ip

Description: Defines a shared IP interface. The no version removes the IP interface.

Syntax: [ no ] interface ip interfaceName

� interfaceName � string of up to 15 characters


interface loopback

Description: Defines a loopback interface. The no version removes the loopback interface.

Syntax: [ no ] interface loopback interfaceSpecifier



interface mlframe-relay

Description: Defines an MFR bundle or a subinterface in a bundle. The no version removes the bundle or subinterface.

Syntax: [ no ] interface mlframe-relay interfaceSpecifier



interface mlpppERX Edge Routers

165

interface mlppp

Description: Creates an MLPPP network interface, also known as the MLPPP bundle. The no version deletes the MLPPP bundle.

Syntax: [ no ] interface mlppp interfaceSpecifier



interface null

Description: Defines a null interface, which does not forward traffic. The no version removes the null interface.

Syntax: [ no ] interface null 0


interface pos

Description: Configures a Packet over SONET interface. The no version removes the interface.

Syntax: [ no ] interface pos interfaceSpecifier



interface serial

Description: Specifies the location of the serial interface on CE1/CT1, CT3, E3/T3 FRAME, cOCx/STMx, and X.21/V.35 modules. The no version disables the interface.

Syntax: [ no ] interface serial interfaceSpecifier



interface tunnel166

interface tunnel

Description: Creates a tunnel interface for use by DVMRP, GRE, MPLS, or IPSec. You can specify that the tunnel be established in the routing space of a virtual router other than the current VR. If you specify another VR, all tunnel commands apply to the tunnel in that VR. If you do not specify another VR, tunnel commands apply to the current VR. The no version removes the tunnel interface.

Syntax: [ no ] interface tunnel interfaceSpecifier [ transport-virtual-router vrName ]


� vrName � name of virtual router in which the tunnel will be established


invert data

Description: Enables data stream inversion. Data stream inversion must be turned on by network personnel at the other end of the line. The no version disables data stream inversion.

Syntax: [ no ] invert data


invert txclock

Description: Enables inversion of the transmit clock signal, to compensate for differences between the clock and data rate when data is travelling at fast speeds over long cables. Data stream inversion must be turned on by network personnel at the other end of the line. The no version disables inversion of the transmit clock signal.

Syntax: [ no ] invert txclock


ip access-routes

Description: Enables the ability to create host access routes on a PPP interface, which is useful for the B-RAS application. It also enables an access route in a profile. The no version disables the feature.

Syntax: [ no ] ip access-routes

Mode(s): Interface Configuration, Subinterface Configuration, Profile Configuration

ip addressERX Edge Routers

167

ip address

Description: Sets a primary or secondary IP address for an interface or subinterface. The no version removes an IP address or disables IP processing. You must specify the layer 2 encapsulation before you can set the IP address.

Syntax: ip address ipAddress ipMask [ secondary ]

no ip address [ ipAddress ipMask [ secondary ] ]

� ipAddress � IP address in 32-bit dotted decimal format (for example, 192.56.32.2)

� ipMask � mask for associated IP subnet

� secondary � specifies that the configured address is a secondary IP address; if omitted, the configured address is the primary IP address


ip address-pool

Description: Specifies to the system where to get an IP address for the remote user. The no version uses the default value, local.

Syntax: ip address pool { dhcp | local | none }

no ip address pool

� dhcp � enable the use of a DHCP server for address allocations

� local � enable the use of local address pool for address allocations

� none � do not enable an IP address pool


ip alwaysup

Description: Forces the interface to appear as if it is up, regardless of the state of the lower layers. Use this command to reduce route topology changes when the network attached to this link is single-homed. The no version makes the interface appear in its current state.

Syntax: [ no ] ip alwaysup


ip as-path access-list168

ip as-path access-list

Description: Defines a BGP-related access list. You can specify an access list filter on both inbound and outbound BGP routes. Each filter is an access list based on regular expressions. If the regular expression matches the representation of the AS path of the route as an ASCII string, then the permit or deny condition applies. The AS path does not contain the local AS number. The no version removes a single access list entry if permit or deny and a pathExpression are specified. Otherwise, the entire access list is removed.

Syntax: ip as-path access-list accessListName { permit | deny } pathExpression

no ip as-path access-list accessListName


� permit � permits access for matching conditions

� deny � denies access to matching conditions

� pathExpression � the regular expression describing the AS paths to be matched

Use a sequence of one or more elements, each of which is either an AS number or one of the following punctuation characters:

^ start of the path

$ end of the path

{ start of an AS_SET

} end of an AS_SET

( start of an AS_CONFED_SET or AS_CONFED_SEQ

) end of an AS_CONFED_SET or AS_CONFED_SEQ

Use the following regular expression metacharacters to match individual elements:

. matches any single element

* matches zero or more occurrences of any element

+ matches one or more occurrences of any element

[ ] matches any elements enclosed between brackets ([ ])

� hyphen; used within brackets to specify a range of AS numbers

^ matches any AS number except the ones specified when used as a first item within brackets

_ underscore; used in non-ERX implementations on either side of a path to specify a literal and disallow substring matching. Allowed but not required in our CLI.


ip atm-vcERX Edge Routers

169

ip atm-vc

Description: Associates a protocol and address to a specific virtual circuit.

Syntax: ip ipAddress atm-vc vcd broadcast

no ip ipAddress atm-vc vcd

� ipAddress � ip address to be associated with the virtual circuit

� vcd � number in the range 1�4294967295; virtual circuit descriptor; an identifier for the VC in other commands

� broadcast � specifies that the circuit should participate in broadcast operations

Mode(s): Map List Configuration

ip bgp-community new-format

Description: Specifies that communities must be displayed in AA:NN format, where AA is a number that identifies the autonomous system and NN is a number that identifies the community within the autonomous system. The no version restores the default display.

Syntax: [ no ] ip bgp-community new-format


ip bgp-confed-as-set new-format

Description: Specifies that AS-confed-sets must be displayed within square brackets, [ ], with the ASs delimited by commas. The no version restores the default, displaying AS-confed-sets within parentheses, ( ), with the ASs delimited by spaces.

Syntax: [ no ] ip bgp-confed-as-set new-format


ip broadcast-address

Description: Defines a broadcast address for an interface. The no version restores the default IP broadcast address.

Syntax: [ no ] ip broadcast-address [ ipAddress ]

� ipAddress � broadcast IP address


ip community-list170

ip community-list

Description: Creates a community list for BGP and controls access to it. The no version removes the community list, including all list entries.

Syntax: ip community-list communityLisName { permit | deny } { communityNumber | asCommunityNumber | no-export | no-advertise | local-as | internet }[ communityNumber | asCommunityNumber | no-export | no-advertise | local-as | internet ]*

ip community-list communityLisName { permit | deny } communityExpression

no ip community-list communityLisName

� communityLisName � name of a community list; a string of up to 32 characters; identifies one or more permit or deny groups of communities; used for standard community lists

� permit � permits access for a matching condition

� deny � denies access for a matching condition

� communityNumber � community number in the range 1�4294967295

� asCommunityNumber � community number in the format AA:NN, where AA is a number that identifies the autonomous system and NN is a number that identifies the community within the autonomous system.

� no-export � specifies that BGP does not advertise this route outside a BGP confederation boundary

� no-advertise � specifies that BGP does not advertise this route to any peer (internal or external)

� local-as � specifies that BGP does not advertise this route to external peers; sometimes known as the no-export-subconfed community

� internet � specifies the Internet community


� communityExpression � a regular expression that matches the community


ip debounce-timeERX Edge Routers

171

ip debounce-time

Description: Defines the minimum time an IP interface must be in a given state�for example, up or down�before being reported. The no version removes the debounce time.

Syntax: ip debounce-time [ vrf vrfName ] period

no ip debounce-time [ vrf vrfName ]


� period � interval in the range 0�60000 seconds


ip demux-type da-prefix

Description: Specifies that a subscriber interface will demultiplex traffic using destination addresses. The no version restores the default situation, in which the subscriber interface demultiplexes traffic using source addresses.

Syntax: [ no ] ip demux-type da-prefix


ip destination-prefix

Description: Configures a subscriber interface to demultiplex traffic with the specified destination address. The no version removes the association between the subscriber interface and the specified destination address.

Syntax: [ no ] ip destination-prefix ipAddress ipAddressMask

� ipAddress � destination IP address that the system uses to identify packets for this subscriber interface

� ipAddressMask � network mask for associated IP subnet


ip dhcp-local cable-modem

Description: Specifies the IP address of the external DHCP server to which the DHCP local server will relay DHCP messages from cable modems. The no version removes the cable modem configuration.

Syntax: [no] ip dhcp-local cable-modem dhcp-server ipAddress

� ipAddress � IP address of the cable modem DHCP server


ip dhcp-local excluded-address172

ip dhcp-local excluded-address

Description: Specifies IP addresses that the DHCP local server should not supply from the default address pool because those addresses are already used by devices on the subnet. The no version allows the DHCP local server to supply the specified IP address.

Syntax: [ no ] ip dhcp-local excluded-address ipAddressStart ipAddressStop

� ipAddressStart � single IP address or start of the range of IP addresses that the DHCP local server should not supply

� ipAddressStop � end of the range of IP addresses that the DHCP local server should not supply


ip dhcp-local limit

Description: Specifies the maximum number of IP addresses that the DHCP local server can supply to each VPI, VCI, VLAN, or Ethernet subnet. The no version restores the default situation, in which there is no limit on the number of token IP addresses that the DHCP local server can supply to each VPI, VCI, VLAN, or Ethernet subnet.

Syntax: ip dhcp-local limit { atm | ethernet | vlan | } leaseNumber

no ip dhcp-local limit [ atm | ethernet | vlan ]

� atm � specifies the limit for VPIs and VCIs

� ethernet � specifies the limit for Ethernet subnets

� vlan � specifies the limit for VLANs

� leaseNumber � maximum number of leases in the range 0�32767


ip dhcp-local pool

Description: Accesses Pool Configuration mode. The no version prevents the DHCP local server from supplying IP addresses from the specified pool.

Syntax: [ no ] ip dhcp-local pool { poolName | default }

� poolName � name of the address pool

� default � specifies the default address pool


ip dhcp-serverERX Edge Routers

173

ip dhcp-server

Description: Adds the IP address of a single DHCP server to the list of DHCP servers from which the system can request addresses to allocate to remote users. A maximum of five DHCP servers can be specified. The no version removes the specified DHCP server or removes all DHCP servers from the list.

Syntax: ip dhcp-server dhcpServerAddress [ adminStatus ]

no ip dhcp-server [ dhcpServerAddress [ adminStatus ] ]

� Ipaddress � IP address of the DHCP server that will allocate addresses for remote users

� adminStatus � one of the following options:

� disable � disable the DHCP server

� drain � drain the DHCP server


ip directed-broadcast

Description: Enables translation of directed broadcast to physical broadcasts. The no version disables the function.

Syntax: [ no ] ip directed-broadcast


ip disable-forwarding

Description: Disables forwarding of packets on the SRP Ethernet interface to maintain system performance. The no version enables forwarding of packets on the SRP Ethernet interface. You see an error message if you try to set this command for interfaces other than the SRP Ethernet interface.

Syntax: [ no ] ip disable-forwarding


ip domain-lookup174

ip domain-lookup

Description: Without the transit-virtual-router option, enables the system to query the configured DNS name servers when it needs an IP hostname�to�IP address translation. With the transit-virtual-router option, configures a virtual router to use the name servers you configured for another virtual router. The no version without the transit-virtual-router option restores the default situation, in which the system does not query the DNS server. The no version with the transit-virtual-router option stops a virtual router from using the same name servers you configured for another virtual router.

Syntax: [ no ] ip domain-lookup [ transit-virtual-router vrName ]

vrName � name of the virtual router that has the DNS configuration you want to use for a second virtual router


ip domain-name

Description: Defines a default domain name for the clients that a name resolver serves. The no version deletes the domain name; that is, the domain name will no longer be appended to hostnames in the static host table.

Syntax: [ no ] ip domain-name domainName

� domainName � default domain name for your hosts


ip dvmrp

Description: Activates DVMRP on an interface.The no version removes DVMRP from an interface.

Syntax: [ no ] ip dvmrp


ip dvmrp accept-filterERX Edge Routers

175

ip dvmrp accept-filter

Description: Filters incoming DVMRP reports in accordance with a standard IP access list. The no version disables the filter.

Syntax: [ no ] ip dvmrp accept-filter listName1 [ distance ] neighbor-list listName2

� listName1 � name of the IP access list. If the name is 0, the interface accepts all destinations. You can specify a simple or extended access list; with an extended access list you can specify an address and a subnet mask.

� distance � distance associated with the DVMRP route when the router determines the RPF interface for the source of a multicast packet. The default is 0; the range is 0 to 255.

� listName2 � name of an access list containing the neighbors from which the system will accept reports. If the name is 0, the interface accepts destinations from all its neighbors.


ip dvmrp announce-filter

Description: Specifies a list of DVMRP routes that the system will advertise on an interface. The no version restores the default situation, in which the system advertises all known routes on the interface.

Syntax: ip dvmrp announce-filter listName

no ip dvmrp announce-filter

� listName � name of the IP access list that specifies the DVMRP routes that the system will advertise on the interface. You can specify a simple or extended access list; with an extended access list you can specify an address and a subnet mask.


ip dvmrp auto-summary

Description: Summarizes routes automatically on an interface. By default, automatic summarization is enabled. The no version disables automatic summarization.

Syntax: [ no ] ip dvmrp auto-summary


ip dvmrp disable176

ip dvmrp disable

Description: Disables DVMRP on an interface without removing the DVMRP configuration. The no version reenables the DVMRP configuration on a disabled interface.

Syntax: [ no ] ip dvmrp disable


ip dvmrp metric-offset

Description: Adjusts the number of hops associated with routes passing through an interface. This action indicates that the route is more efficient or less efficient than an alternative route. The no version restores the default values.

Syntax: [ no ] ip dvmrp metric-offset { in | out } [ increment ]

� in � increments the number of hops for a DVMRP route advertised in incoming DVMRP reports. If you do not specify a key word, this option is the default.

� out � increments the number of hops for a DVMRP route advertised in outgoing DVMRP reports

� increment � number of hops associated with this interface. The default is 1 for incoming reports and 0 for outgoing reports.


ip dvmrp route-hog-notification

Description: Sets the number of DVMRP routes that the system can record before it generates a syslog warning message.The no version restores the default setting, 10,000 routes.

Syntax: [ no ] ip dvmrp route-hog-notification [ limit ]


ip dvmrp route-limit

Description: Limits the number of routes that the system can advertise on each interface. The default value is 7000. The no version removes the limit for the number of routes that the system can advertise on each interface.

Syntax: [ no ] ip dvmrp route-limit [ limit ]

� limit � number of routes that the system can advertise


ip dvmrp summary-addressERX Edge Routers

177

ip dvmrp summary-address

Description: Advertises a DVMRP summary address on the interface. The no version stops the advertising of a summary address on an interface.

Syntax: [ no ] ip dvmrp summary-address ipAddress mask [ metric cost ]

� ipAddress � summary address

� mask � subnet mask

� cost � cost associated with this summary address


ip dvmrp unicast-routing

Description: Enables the exchange of DVMRP unicast routes on an interface not owned by DVMRP. The no version disables the exchange of DVMRP unicast routes on an interface not owned by DVMRP.

Syntax: [ no ] ip dvmrp unicast-routing


ip dynamic-interface-prefix

Description: Specifies the prefix for the names of dynamic shared IP interfaces created for overlapping BGP/MPLS VPNs.The no version restores the default prefix, dyn.

Syntax: ip dynamic-interface-prefix [ vrfName ] prefix

no ip dynamic-interface-prefix [ vrfName ]

� vrfName � name of the VRF in which the shared interface is created; a string of 1�32 alphanumeric characters

� prefix � string of 1�10 alphanumeric characters


ip explicit-path178

ip explicit-path

Description: Defines an explicit path by name and also enables or disables explicit path routing in a non-ERX implementation. See the mpls explicit-path command for a complete description and syntax.

ip extcommunity-list

Description: Defines an extended-community (extcommunity) list to be referenced in a route map. The no version deletes the extcommunity.

Syntax: ip extcommunity-list listName { permit | deny }extendedCommunity [ extendedCommunity ]*

no ip extcommunity-list listName

� listName � name of the extended-community list

� permit � permits membership in the extended community for matching conditions

� deny � denies membership in the extended community for matching conditions

� extendedCommunity � extended community specified in the format:{rt | soo } { ASN:nn | ipAddress:nn }

� rt � specifies a route-target community; consists of one or more routers that can receive a set of routes advertised by BGP that carry the extended-community attribute

� soo � specifies a Site-of-Origin community; consists of one or more routers that injects a set of routes into BGP that carry the extended-community attribute

� ASN:nn � identifies the extended community by a 16-bit autonomous system number followed by a 32-bit integer

� ipAddress:nn � identifies the extended community identified by an IP address followed by a 32-bit integer



ip filter-options all

Description: Enables filtering of packets with IP options on an interface. IP options filtering is disabled by default. The no version disables filtering of packets with IP options.

Syntax: [ no ] ip filter-options all


ip ftp source-addressERX Edge Routers

179

ip ftp source-address

Description: Specifies an operational interface by IP address as the source interface in FTP packets sent via the system�s FTP client. The no version restores the source address in the FTP packets to that on which the FTP connection is made.

Syntax: ip ftp source-address sourceAddress

no ip ftp source-address [ sourceAddress ]

� sourceAddress � source IP address


ip ftp source-interface

Description: Identifies an interface by type and location as the source interface in FTP packets sent via the system�s FTP client. The no version restores the source address in the FTP packets to that on which the FTP connection is made.

Syntax: ip ftp source-interface interfaceType interfaceSpecifier

no ip ftp source-interface [ interfaceType interfaceSpecifier ]




ip-hint

Description: When enabled, the ERX will preallocate an IP address for the remote (B-RAS) user before calling authentication.The address is then passed as a hint in the authentication request to the RADIUS server. The no version disables the feature.

Syntax: ip-hint { enable | disable }

no ip-hint


ip http access-class180

ip http access-class

Description: Allows only subscribers on a standard IP access list to connect to the HTTP local server. The no version removes the association between the access list and the HTTP local server.

Syntax: ip http access-class listName

no ip http access-class

� listName � name of the access list


ip http max-connection-time

Description: Specifies the maximum time that the HTTP local server maintains an inactive connection. The no version restores the default time, 30 seconds.

Syntax: ip http max-connection-time seconds

no ip http max-connection-time

� seconds � time that the HTTP local server maintains a connection; either 0 (forever) or in the range 3�7200 seconds


ip http not-found-url

Description: Specifies the Web page or message that appears if the subscriber requests a URL that is not available. The no version displays the standard HTTP message �404 not found.�

Syntax: ip http not-found-url { url | root-url }

no ip http not-found-url

� url � URL of the Web page that appears on the subscriber�s computer if the DHCP local server is not configured or enabled

� root-url � displays the root Web page


ip http portERX Edge Routers

181

ip http port

Description: Specifies the port on which the HTTP local server receives connection attempts. The no version restores the default port number, 80.

Syntax: ip http port portNumber

no ip http port

� portNumber � number of the port on which connection attempts are received, in the range 0�65535


ip http realm

Description: Specifies the name the Web browser displays to subscribers when the HTTP client requests the user information. The no version restores the default value, the name of the virtual router.

Syntax: ip http realm connectionName

no ip http realm

� connectionName � connection name that subscribers see when the HTTP client requests user information


ip http root-refresh

Description: Specifies how often the browser updates the default internal starting (root) Web page. The no version restores the default time interval, 0 seconds.

Syntax: ip http root-refresh seconds

no ip http root-refresh

� seconds � time interval, in the range 0�65535 seconds, at which the default internal starting Web page is refreshed


ip http root-url182

ip http root-url

Description: Specifies a URL external to the system for the starting (root) Web page that appears on the subscriber�s computer when the subscriber logs in. The no version restores the default internal URL as the starting Web page.

Syntax: ip http root-url url

no ip http root-url

� url � external URL of the Web page that appears on the subscriber�s computer when the connection to the HTTP local server is established


ip http same-host-limit

Description: Specifies the maximum number of connections that can exist between one IP address and the HTTP local server. The no version restores the default number of allowed connections, 3.

Syntax: ip http same-host-limit maxConnections

no ip http same-host-limit

� maxConnections � maximum number of connections allowed between one IP address and the HTTP local server, in the range 0�1000


ip http server

Description: Creates or enables the HTTP local server. The no version deletes or disables the HTTP local server.

Syntax: [ no ] ip http [ server ]

� server � enables or disables the HTTP local server. If you do not specify the keyword server, the command creates the HTTP local server and the no version removes the server.


ip igmp

Description: Enables IGMPv2 on an interface. The no version disables IGMPv2 on an interface.

Syntax: [ no ] ip igmp

Mode(s): Interface Configuration, Profile Configuration

ip igmp access-groupERX Edge Routers

183

ip igmp access-group

Description: Restricts hosts on this subnet to joining multicast groups on the specified IP access list. The no version removes the association with the specified access list and allows hosts on the subnet to join any multicast group.

Syntax: ip igmp access-group accessListName

no ip igmp access-group



ip igmp group limit

Description: Limits the number of IGMP groups that an interface can accept. The no version restores the default situation, in which there is no limit to the number of IGMP groups that the interface accepts.

Syntax: ip igmp group limit groupLimit

no ip igmp group limit

� groupLimit � maximum number of IGMP groups that an interface can accept in the range 0�64,000


ip igmp immediate-leave

Description: Removes an interface immediately when the router receives an leave group membership message from the host associated with this interface. The no version restores the default situation, in which the router issues query messages to multicast groups and removes an interface if the associated host does not return a group membership report within a certain length of time.

Caution: Issue this command only on IGMPv2 interfaces to which one IGMP client is connected. Do not issue this command to interfaces to which more than one IGMP client is connected.

Syntax: [ no ] ip igmp immediate-leave


ip igmp last-member query-interval184

ip igmp last-member query-interval

Description: Specifies in tenths of a second how long the system waits after receiving an IGMP leave message before it sends another query. The no version restores the default value, 10 tenths of a second (1 second).

Syntax: ip igmp last-member-query-interval tenthsOfaSecond

no ip igmp last-member-query-interval

� tenthsOfaSecond � time interval between receipt of an IGMP leave message and sending out of a query in the range 1�254 tenths of a second. Using a lower value allows members to leave groups more quickly.


ip igmp promiscuous

Description: Enables the specified interface to accept IGMP reports from hosts on any subnet. The no version specifies that an IGMP interface should use the Router Configuration mode setting (see the igmp promiscuous command) to determine from which subnets it can accept IGMP reports.

Syntax: ip igmp promiscuous { on | off }

no ip igmp promiscuous

� on � enables the interface to accept IGMP reports from hosts on any subnet

� off � allows the interface to accept IGMP reports only from hosts on subnets associated with this interface


ip igmp-proxy

Description: Enables IGMP proxy on an interface. The no version disables IGMP proxy for an interface.

Syntax: [ no ] ip igmp-proxy


ip igmp-proxy unsolicited-report-intervalERX Edge Routers

185

ip igmp-proxy unsolicited-report-interval

Description: Specifies how often the upstream interface should transmit unsolicited reports. This command has no effect on interfaces other than the upstream value. The no version transmits unsolicited reports using the default value, 400 seconds.

Note: Issue this command only on the upstream interface. Otherwise, this command will have no effect.

Syntax: ip igmp-proxy unsolicited-report-interval seconds

no ip igmp-proxy unsolicited-report-interval

� seconds � time interval at which the interface transmits unsolicited reports


ip igmp-proxy V1-router-present-time

Description: Specifies how long the system assumes that there is an IGMPv1 querier router on the subnet after the system receives an IGMP V1 query on this interface. The no version restores the default value, 10 seconds.

Syntax: ip igmp-proxy V1-router-present-time seconds

no ip igmp-proxy V1-router-present-time

� seconds � time for which the system assumes that there is an IGMPv1 querier router on the subnet after the system receives an IGMP V1 query on this interface


ip igmp querier

Description: Specifies that the interface will act as a querier when you configure IGMPv1 on an interface. The no version specifies that this interface will not issue query packets.

Note: This command is invalid for interfaces on which you configured IGMPv2.

Syntax: [ no ] ip igmp querier


ip igmp querier-timeout186

ip igmp querier-timeout

Description: Sets the time that the interface waits before declaring itself as the querier. The no version restores the default value, twice the query interval.

Syntax: ip igmp querier-timeout seconds

no ip igmp querier-timeout

� seconds � time interval between the last query from the previous router and the first query from this interface


ip igmp query-interval

Description: Sets how often the system sends IGMP host-query packets from this interface. The no version restores the default value, 125 seconds.

Syntax: ip igmp query-interval seconds

no ip igmp query-interval

� seconds � polling interval in the range 0�65535 seconds


ip igmp query-max-response-time

Description: Specifies the period in tenths of a second during which the host is expected to respond to an IGMP query. IGMP version 2 includes this value in IGMP query messages sent out on the interface. You cannot set this value on interfaces running IGMP version 1. The no version restores the default value of 10 tenths of a second (1 second).

Syntax: ip igmp query-max-response-time tenthsOfaSecond

no ip igmp query-max-response-time

� tenthsOfaSecond � time interval between receipt of an IGMP query and the response; the range is 1�254 tenths of a second.


ip igmp robustnessERX Edge Routers

187

ip igmp robustness

Description: Specifies the number of times that the system sends IGMP group-specific queries before declaring a group to no longer have any members on an interface. The no version restores the default value, 3.

Syntax: ip igmp robustness numberOfMessages

no ip igmp robustness

� numberOfMessages � number of times that the system sends IGMP group-specific queries in the range 1�4


ip igmp static-group

Description: Assigns an interface to handle all multicast traffic for a group. The interface sets no timers for this group. The no version removes the group from the interface.

Syntax: [ no ] ip igmp static-group groupAddress

� groupAddress � address of the group


ip igmp version

Description: Sets the IGMP version for the interface. The no version restores the default value, IGMPv2.

Syntax: ip igmp version { 2 | 1 }

no ip igmp version

2 � IGMP version 2

1 � IGMP version 1


ip ignore-df-bit

Description: Specifies that the system ignores the don�t-fragment bit if present in the IP header of packets crossing the configured interface; the system then fragments packets even if the bit is present. The no version restores the default behavior, which is to consider the DF bit before fragmenting.

Syntax: [ no ] ip ignore-df-bit


ip interface188

ip interface

Description: This command has only a no version. See the no ip interfacecommand for a complete description and syntax.

ip irdp

Description: Enables ICMP Router Discovery Protocol processing on an interface. The no version disables IRDP routing.

Syntax: [ no ] ip irdp


ip local pool

Description: Specifies the pool name, the starting address, the ending address, group name, the utilization threshold, and the SNMP trap flag. The no version deletes a local pool.

Syntax: [ no ] ip local pool name [ startIpAddress [ endIpAddress ][ warning highUtilization abatedUtilization ] [ snmpTrap ] ]

� name � text string in the range 1�16 characters that defines the name of the local address pool

� startIpAddress � starting IP address in the local address pool

� endIpAddress � ending IP address in the local address pool

� warning � specifies one of the following utilization warnings:

� highUtilization � high utilization value; a number in the range 1�100; default is 85

� abatedUtilization � abated utilization value; a number in the range 1�100; default is 75

� snmpTrap � enables SNMP pool utilization traps


ip local pool snmpTrap

Description: Enables SNMP pool utilization traps. The no version disables SNMP pool utilization traps.

Syntax: [ no ] ip local pool name snmpTrap



ip local pool warningERX Edge Routers

189

ip local pool warning

Description: Use to identify the warning threshold values. The no version resets the thresholds to their default values.

Syntax: ip local pool name warning highUtilization abatedUtilization [ snmpTrap ]

no ip local pool name warning [ highUtilization abatedUtilization ]


� highUtilization � high utilization value; a number in the range 1�100; default is 85

� abatedUtilization � abated utilization value; a number in the range 1�100; default is 75

� snmpTrap � enables snmp pool utilization traps


ip mac-validate

Description: Enables MAC address validation on a per interface basis. The no version disables the feature.

Syntax: ip mac-validate [ strict | loose ]

no ip mac-validate

� strict � prevents transmission of IP packets that do not reside in the validation table

� loose � allows IP packets to pass through even though the packets do not have entries in the validation table; only packets that have matching IP�MAC pair entries in the table are validated


ip mask-reply

Description: Enables ICMP netmask reply. The no version disables the feature.

Syntax: [ no ] ip mask-reply


ip mpls forwarding-mode label-switched190

ip mpls forwarding-mode label-switched

Description: Generates a label for each different FEC that a BGP route points to in a BGP/MPLS VPN. The no version restores the default, generating a single label for all BGP routes sent from a given VRF.

Note: For some types of routes, the system always generates a per-VRF label, regardless of the status of this command. See ERX Routing Protocols Configuration Guide, Vol. 2, Chapter 3, Configuring BGP/MPLS VPNs, for details.

Syntax: [ no ] ip mpls forwarding-mode label-switched


ip mpls vpn-interface per-label

Description: Creates a VPN interface for each received stacked label in a BGP/MPLS VPN, enabling collection of statistics on a per-label basis. The no version restores the default, creating a VPN interface for each next-hop PE.

Note: Operating in per-label mode limits the number of egress FECs supported to the order of thousands.

Syntax: [ no ] ip mpls vpn-interface per-label


ip mtu

Description: Sets the maximum transmission unit size of IP packets sent on an interface. The no version restores the default value.

Syntax: [ no ] ip mtu [ mtuSize ]

� mtuSize � maximum number of packet transmissions permitted on an interface. The range is 128�10240. The default is 0, which means that the system takes the value from a lower protocol layer.


ip multicast-routing

Description: Enables IP multicast routing on the system. The no version disables IP multicast routing on the system.

Syntax: [ no ] ip multicast-routing


ip multipath round-robinERX Edge Routers

191

ip multipath round-robin

Description: Specifies round-robin as the mode for ECMP load sharing on an interface. The no version restores the default value, hashed.

Syntax: [ no ] ip multipath round-robin


ip name-server

Description: Specifies a DNS name server that the system can query for hostname�to�IP address resolution. The no version deletes the name server.

Syntax: [ no ] ip name-server serverIpAddress [ serverIpAddress ]*

� serverIpAddress � IP address of a DNS name server



ip nfs

Description: Specifies the ERX interface that the current virtual router uses to exchange NFS communications with an NFS server. The no version prevents this interface from sending or receiving NFS communications for the current virtual router.

Syntax: ip nfs { source-address ipAddress | source-interface interfaceType interfaceSpecifier }

no ip nfs { source-address | source-interface }

� ipAddress � IP address of an ERX interface that sends and receives NFS communications

� interfaceType � ERX interface type; see Interface Types and Specifiers in About This Guide

� interfaceSpecifier � particular ERX interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.


ip nfs host192

ip nfs host

Description: Configures a remote host as an NFS server for the current virtual router. The no version disassociates the NFS server from the virtual router.

Syntax: ip nfs host hostName [ user userID [ group groupID ] ]

no ip nfs host hostName

� hostName � name of the remote host

� userID � user identity in the range 0�4294967295 that a user must enter to connect to the remote host; default is 2001

� groupID � group identity in the range 0�4294967295 that the user must enter to connect to the remote host; default is 100


ip ospf authentication-key

Description: Assigns a password used by neighboring routers that are using OSPF simple password authentication. The no version deletes the password.

Syntax: ip ospf authentication-key authKey

no ip ospf authentication-key

� authKey � password; continuous string of characters up to 8 characters in length


ip ospf authentication message-digest

Description: Specifies that the authentication mode for the interface is MD5. The no version sets authentication for the interface to none, but leaves any configured MD5 key intact.

Syntax: [ no ] ip ospf authentication message-digest


ip ospf authentication-none

Description: Specifies that no authentication is to be used for the interface. The no version has no effect.

Syntax: ip ospf authentication-none


ip ospf costERX Edge Routers

193

ip ospf cost

Description: Specifies a cost metric for an interface. Used in the calculation of the SPF routing table. The no version resets the path cost to the default.

Syntax: [ no ] ip ospf cost intfCost

� intfCost � link state metric cost; number in the range 0�65535; default value is 10


ip ospf dead-interval

Description: Sets the time period during which the router�s neighbors do not see hello packets before they declare the router to be down. The no version resets the dead interval to its default.

Syntax: [ no ] ip ospf dead-interval deadInterval



ip ospf hello-interval

Description: Specifies the interval between hello packets that the router sends on the interface. The no version resets the hello interval to its default.

Syntax: [ no ] ip ospf hello-interval helloInterval

� helloInterval � number in the range 1�65535 seconds; default value is 10 seconds


ip ospf message-digest-key md5194

ip ospf message-digest-key md5

Description: Enables OSPF MD5 authentication and configures the MD5 key. The no version deletes an MD5 key.

Syntax: ip ospf message-digest-key keyID md5 [ 0 | 8 ] msgDigestKey

no ip ospf message-digest-key keyID



� 0 � indicates the msgDigestKey is entered in unencrypted form (plaintext); this is the default option

� 8 �indicates the msgDigestKey is entered in encrypted form (ciphertext)

� msgDigestKey � OSPF password; a continuous string of up to 16 alphanumeric characters

Note: If all the MD5 keys have been deleted, the authentication type is still MD5, but you must configure MD5 keys.

Note: To disable MD5 authentication for the interface, use the ip ospf authentication-none command.

Note: To display the password only in encrypted text, use the service password-encryption command.


ip ospf network

Description: Configures the OSPF network type to something other than the default for the network medium. The no version restores the default value for the medium.

Syntax: ip ospf network { broadcast | non-broadcast | point-to-point }

no ip ospf network

� broadcast � sets the network type to broadcast

� non-broadcast � sets the network type to NBMA

� point-to-point � sets the network type to point-to-point


ip ospf priorityERX Edge Routers

195

ip ospf priority

Description: Sets the router priority. Used in determining the designated router for the particular network. This designation applies only to multiaccess networks. Every broadcast and nonbroadcast multiaccess network has a designated router. The no version restores the default value.

Syntax: [ no ] ip ospf priority intfPriority

� intfPriority � priority value, an 8-bit number in the range 1�255; default value is 1


ip ospf retransmit-interval

Description: Specifies the time between LSA retransmissions for the interface when an acknowledgment for the LSA is not received. The no version restores the default value.

Syntax: [ no ] ip ospf retransmit-interval retransInterval

� retransInterval � number in the range 1�65535 seconds; default value is 5 seconds


ip ospf shutdown

Description: Disables OSPF on an interface. The no version enables OSPF on the interface.

Syntax: [ no ] ip ospf shutdown


ip ospf transmit-delay

Description: Sets the estimated time it takes to transmit a link state update packet on the interface. The no version restores the default value.

Syntax: [ no ] ip ospf transmit-delay transmDelay

� transmDelay � link state transmit delay, a number in the range 1�65535 seconds; default value is 1 second


ip pim196

ip pim

Description: Enables PIM on an interface. The no version disables PIM on an interface.

Syntax: [ no ] ip pim [ dense-mode | sparse-mode | sparse-dense-mode ]

� dense-mode � enables PIM in dense mode

� sparse-mode � enables PIM in sparse mode

� sparse-dense-mode � enables PIM in sparse-dense mode


ip pim query-interval

Description: Specifies how often the system sends PIM router query messages from this interface. The no version specifies the default time interval, 30 seconds.

Syntax: ip pim query-interval queryTime

no ip pim query-interval

� queryTime � interval in the range 0�210 seconds at which the system sends PIM router query messages from this interface


ip pim rp-address

Description: Specifies a static PIM group�to�RP mapping. The no version clears the mapping from this interface.

Syntax: [ no ] ip pim rp-address ipAddress [ ipAccessList ] [ override ]

� ipAddress � IP address of the system you want to designate as an RP router

� ipAccessList � name of the IP access list that specifies which multicast groups use this RP

� override � specifies that this static RP mapping has priority over group-to-RP mappings learned by auto-RP

Mode(s): Configuration Mode

ip pim send-rp-announceERX Edge Routers

197

ip pim send-rp-announce

Description: Sends autoRP announcement messages from a system you configured as an RP. The no version clears the filter from this interface.

Syntax: ip pim send-rp-announce interfaceType interfaceSpecifier scope ttl [ group-list ipAccessList] [ interval seconds ]

no ip pim send-rp-announce interfaceType interfaceSpecifier [ group-list ipAccessList ]


� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. The autoRP announcement messages will contain the IP address for this interface.

� ttl � time-to-live value; the number of hops for which the announcement is valid

� ipAccessList � name of the IP access list that specifies which multicast groups use this RP

� seconds � time interval at which the system sends the announcements; default interval is 60 seconds


ip pim send-rp-discovery scope

Description: Configures the system as an RP mapping agent, which records RP-to-group mappings and notifies PIM DRs about the mappings. The no version stops the system from acting as an RP mapping agent.

Syntax: ip pim send-rp-discovery scope ttl [ interfaceType interfaceSpecifier ]

no ip pim send-rp-discovery

� ttl � time-to-live value; number of hops for which the RP discovery message is valid. Specify a value that covers the PIM domain.


� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. If you specify an interface, the autoRP discovery messages will contain the IP address for this interface.


ip pim spt-threshold198

ip pim spt-threshold

Description: Specifies the network configuration that PIM SM uses when a source starts sending multicast messages. The no version restores the default value, 0.

Syntax: [ no ] ip pim spt-threshold { 0 | nonzero_integer | infinity } [ group-list ipAccessList ]

� 0 � configures PIM SM to switch to an SPT when a source begins to send multicast messages

� nonzero_integer � integer in the range 1�4294967294; prevents PIM SM from switching from a shared tree to an SPT

� infinity � prevents PIM SM from switching from a shared tree to an SPT

� ipAccessList � name of the IP access list that specifies the groups to which the threshold applies


ip policy

Description: Assign a policy list to the ingress or egress of an interface. If you execute a policy command and the policy list does not exist, the system creates a policy list with no rules, the default. When no rules are found in a policy list, the system performs a routing table lookup and forwards packets on the interface based on the routing table information. You must specify the input or output keyword to assign the policy list to the ingress or egress of the interface. The no version removes the association between a policy list and an interface.

Syntax: [ no ] ip policy { input | local-input | output} policyName [ statistics { enabled [ baseline { enabled | disabled } ] | disabled } ]

� input � apply policy to data arriving at this interface

� local-input � apply policy to data that arrives at this interface but is addressed to a local interface

� output � apply policy to data leaving this interface

� policyName � name of the policy; a maximum of 16 characters

� statistics � enable or disable collection of policy routing statistics

� enabled � enable collection of policy routing statistics

� baseline enabled � enables baselining of policy routing statistics

� baseline disabled � disables baselining of policy routing statistics

� disabled � disable collection of policy routing statistics


ip prefix-listERX Edge Routers

199

ip prefix-list

Description: Creates a prefix list for route filtering; specifies a list entry�a permit or deny clause for a network address. The no version removes the specified prefix list or the specified list entry.

Syntax: ip prefix-list listName { description desc |[ seq sequence ] { permit | deny } ipPrefix [ ge geNumber ] [ le leNumber ] }

no ip prefix-list listName [ description | [ seq sequence ] [ { permit | deny } ipPrefix [ ge geNumber ] [ le leNumber ] ] ]

� listName � name of the prefix list; a string of up to 32 characters

� desc � description of the prefix list

� sequence � number in the range 0�65535 that indicates the position the prefix list entry is to have in the list of entries already configured for the prefix list. If given with the no version of this command, it specifies the position of the list entry to be deleted. If sequence is not specified, the value of the last sequence number + 5 is used.

� permit � if the prefix of the route being filtered matches the specified prefix and permit is specified, the route is redistributed as controlled by the set actions

� deny � if the prefix of the route being filtered matches the specified prefix and deny is specified, the route is not redistributed

� ipPrefix � network route to be filtered, in the format network/length, where



� geNumber � route being filtered matches if its prefix is within the range specified: greater than or equal to geNumber and less than or equal to 32

� leNumber � route being filtered matches if its prefix is within the range specified: greater than or equal to length and less than or equal to leNumber


ip prefix-tree200

ip prefix-tree

Description: Creates a prefix tree for best-match route filtering; specifies a tree entry�a deny or permit clause for a network address. The no version removes the specified prefix tree or the specified tree entry.

Syntax: ip prefix-tree treeName { description desc | { permit | deny } ipPrefix }

no ip prefix-tree treeName [ description | { permit | deny } ipPrefix ]

� treeName � name of the prefix list; a string of up to 32 characters

� desc � description of the prefix list

� deny � if the prefix of the route being filtered matches the specified prefix and deny is specified, the route is not redistributed

� permit � if the prefix of the route being filtered matches the specified prefix and permit is specified, the route is redistributed as controlled by the set actions

� ipPrefix � network route to be filtered, in the format network/length, where




ip proxy-arp

Description: Enables proxy ARP on an Ethernet or bridge1483 interface. Proxy ARP is enabled by default. The no version disables proxy ARP on an Ethernet or bridge1483 interface.

Syntax: ip proxy-arp [ restricted | unrestricted ]

no ip proxy-arp

� restricted � restricts proxy-arp to hosts on the local interface

� unrestricted � enables proxy-arp for all reachable hosts


ip redirects

Description: Enables the sending of redirect messages if the software is forced to resend a packet through the same interface on which it was received. The no version disables the sending of redirect messages.

Syntax: [ no ] ip redirects


ip refresh-routeERX Edge Routers

201

ip refresh-route

Description: Reinstalls routes removed from the IP routing table by the clear ip route command. There is no no version.

Syntax: ip refresh-route [ vrf vrfName ]



ip rip

Description: Configures RIP to run on the network specified by the network command. Uses the default values: send version is RIP version 1, receive version is RIP version 1 and version 2, authentication is not enabled. The no version deletes the RIP interface.

Syntax: [ no ] ip rip


ip rip authentication key

Description: Specifies the password for text authentication and the key for MD5 authentication. The no version clears the key for the interface. Supported only in RIP version 2. Authentication is disabled by default.

Syntax: ip rip authentication key [ 0 | 8 ] authkey

no ip rip authentication key



� authkey � password sent with RIP messages or the key used to encrypt/decrypt RIP messages, depending on the authentication mode set for this interface


ip rip authentication mode202

ip rip authentication mode

Description: Specifies the type of authentication used on this interface. The no version removes authentication from the interface. Supported only in RIP version 2. Authentication is disabled by default.

Syntax: ip rip authentication mode { text | md5 keyID }

no ip rip authentication mode

� text � a simple text password is sent with each RIP message. If the password is not possessed by neighbors, the message is rejected.


� keyID � number identifying the MD5 key. Neighbors must share the MD5 key to decrypt the message and encrypt the response.


ip rip receive version

Description: Restricts the RIP version that the system can receive on an interface. The no version sets the interface back to the default value, receiving both RIP version 1 and version 2.

Syntax: ip rip receive version { 1 | 2 | 1 2 | 2 1 | off }

no ip rip receive version







ip rip send versionERX Edge Routers

203

ip rip send version

Description: Restricts the RIP version that the system can send on an interface. The no version sets the interface back to the default value, sending only RIP version 1.

Syntax: ip rip send version { 1 | 2 | 1 2 | 2 1 | off }

no ip rip send version







ip route

Description: Establishes static routes. The no version removes static routes.

Syntax: ip route [ vrf vrfName ] ipAddress ipMask { ipNextHop [ InterfaceType interfaceSpecifier ] |interfaceType interfaceSpecifier } [ distance ] [ tag tagVal ] [ permanent ]

no ip route [ vrf vrfName ] ipAddress ipMask [ ipNextHop | interfaceType interfaceSpecifier ] [ distance ]

� vrfName � name of the VRF if the static route is being established within a VRF context

� ipAddress � destination IP address

� ipMask � IP mask for the destination

� ipNextHop � IP address of the next hop that can be used to reach the destination network



� distance � administrative distance metric for this route in the range 0�254

� tagVal � number in the range 0�255 that identifies the tag for this route

� permanent � specifies that the route will not be removed, even if the interface shuts down


ip router-id204

ip router-id

Description: Establishes the IP address of a router. The no version removes the IP address assignment.

Syntax: [ no ] ip router-id [ vrfName ] ipAddress


� ipAddress � IP address of the router


ip router isis

Description: Configures an IS-IS routing process for IP on an interface. The no version disables IS-IS for IP on the interface.

Syntax: [ no ] ip router isis [ tag ]

� tag � meaningful name for a routing process. If not specified, a null tag is assumed. The name must be unique among all IP router processes for a given router. Use the same text for the argument tag as specified in the router isis command.


ip route-type

Description: Specifies whether BGP, IS-IS, OSPF, or RIP routes are available only for unicast forwarding, only for multicast reverse path forwarding checks, or for both. The no version restores the default value, unicast for BGP or both for IS-IS, OSPF, and RIP.

Syntax: For BGP:

ip route-type [ unicast | | both ]

no ip route-type

For IS-IS, OSPF, and RIP:

ip route-type [ unicast | multicast | both ]

no ip route-type

� unicast � specifies that routes for the protocol are available only for unicast forwarding

� multicast � specifies that routes for the protocol are available only for multicast route path forwarding checks; this option is not available for BGP

� both � specifies that routes for the protocol are available for both unicast forwarding and multicast route path forwarding checks


ip rpf-routeERX Edge Routers

205

ip rpf-route

Description: Customizes static routes that the system can use to verify source addresses in multicast packets. The no version removes the static route.

Syntax: ip rpf-route ipAddress addressMask { nextHopIpAddress | nextHopInterfaceType nextHopInterfaceSpecifier } [ distanceValue ] [ tag tagValue ]

[ no ] rpf-route ipAddress address-mask

� ipAddress � IP address of the destination network

� addressMask � subnet mask for the destination network

� nextHopIpAddress � IP address of the next hop

� nextHopInterfaceType � interface type; see Interface Types and Specifiers in About This Guide

� nextHopInterfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

� distanceValue � number in the range 0�255 that indicates the preference for this route

� tagValue � number in the range 0�4294967295 that identifies the route in the routing table


ip rsvp bandwidth

Description: Specifies the total bandwidth reservable on the interface in a non-ERX implementation. See the mpls bandwidth command for a complete description and syntax.

ip sa-validate

Description: Enables source address validation on an interface. This feature verifies that a packet has been sent from a valid source address. When a packet arrives on an interface, the system performs a route-table lookup using the source address. The result from the route-table lookup is an interface to which packets destined for that address are routed. This interface must match the interface that the packet arrived on. If it does not match, the system drops the packet.The no version disables source address validation.

Syntax: [ no ] ip sa-validate


ip share-interface206

ip share-interface

Description: Specifies the layer 2 interface used by a shared IP interface in the current virtual router. The no version removes the association between the layer 2 interface and the shared IP interface.

Syntax: ip share-interface interfaceType interfaceSpecifier

no ip share-interface




ip share-nexthop

Description: Specifies that the shared IP interface dynamically tracks a next hop for the specified destination. The no version halts tracking of the next hop.

Syntax: ip share-nexthop ipAddress [ virtual-router vrName ]

no ip share-nexthop

� ipAddress � IP address of the destination for which the next hop is tracked

� vrName � name of the virtual router for the next hop


ip shutdown

Description: Shuts down an IP interface. The no version restarts the interface.

Syntax: [ no ] ip shutdown


ip source-prefix

Description: Configures a subscriber interface to demultiplex traffic with the specified IP address and mask. The no version removes the association between the subscriber interface and the specified IP address and mask.

Syntax: [ no ] ip source-prefix ipAddress ipAddressMask

� ipAddress � IP address of the physical interface that receives messages for this subscriber

� ipAddressMask � network mask for associated IP subnet


ip source-routeERX Edge Routers

207

ip source-route

Description: Enables the forwarding of source-routed packets. The no version disables forwarding. Forwarding is enabled by default.

Syntax: [ no ] ip source-route [ vrfName ]



ip speed

Description: Sets the speed of an IP interface in bits per second. The no version restores the default value, 0 bps.

Syntax: [ no ] ip speed adminSpeed

� adminSpeed � speed of the interface in bps in the range 1�4294967295


ip split-horizon

Description: Enables split horizon, preventing the RIP router from advertising routes from the interface originating the route, reducing the possibility of routing loops; this is the default condition. The no version disables split horizon.

Syntax: [ no ] ip split-horizon


ip ssh authentication-retries

Description: Sets the number of times that a user can retry a failed authentication (such as trying to correct a wrong password) before the server terminates the connection. The no version restores the default value of 20 retries.

Syntax: ip ssh authentication-retries retryLimit

no ip ssh authentication-retries

� retryLimit � number of times authentication can be retried after the initial failure within a given connection attempt


ip ssh crypto208

ip ssh crypto

Description: Adds an encryption algorithm to the specified list of supported algorithms. The no version removes or excludes an algorithm from the specified list. The default version restores the default algorithms for the specified list.

Syntax: ip ssh crypto [ client-to-server | server-to-client ] [ no | default ] cipherAlgorithm

� client-to-server � adds the specified algorithm to the SSH server�s list of supported inbound algorithms

� server-to-client � adds the specified algorithm to the SSH server�s list of supported outbound algorithms

� no � removes or excludes the specified algorithm from the list

� default � restores the specified list to the factory defaults, which includes 3des-cbc, twofish-cbc, and blowfish-cbc

� cipherAlgorithm � algorithm to add to the list


ip ssh disable-user-authentication

Description: Disables RADIUS password authentication, resulting in the acceptance of all SSH clients that pass protocol negotiation.

Syntax: [ no ] ip ssh disable-user-authentication


ip ssh mac

Description: Adds a MAC algorithm to the specified list of supported algorithms. The no version removes or excludes an algorithm from the specified list. The default version restores the default algorithms for the specified list.

Syntax: ip ssh mac [ client-to-server | server-to-client ] [ no | default ] macAlgorithm

� client-to-server � adds the specified algorithm to the SSH server�s list of supported inbound algorithms

� server-to-client � adds the specified algorithm to the SSH server�s list of supported outbound algorithms

� no � removes or excludes the specified algorithm from the list

� default � restores the specified list to the factory defaults, which includes hmac-md5, hmac-sha1, and hmac-sha1-96

� macAlgorithm � algorithm to add to the list


ip ssh sleepERX Edge Routers

209

ip ssh sleep

Description: Sets a sleep period in seconds for users that have exceeded the authentication retry limit. Connection attempts from the user at the same host are denied until this period expires. The no version restores the default value of 600 seconds.

Syntax: ip ssh sleep sleepPeriod

no ip ssh sleep

� sleepPeriod � period in seconds


ip ssh timeout

Description: Sets a timeout period in seconds. The SSH server terminates the connection if protocol negotiation�including user authentication�is not complete within this timeout. The no version restores the default value of 600 seconds.

Syntax: ip ssh timeout timeout

no ip ssh timeout

� timeout � period in the range 10�600 seconds


ip summary-address

Description: Summarizes specified addresses for RIP. The no version removes the summarization.

Syntax: ip summary-address [ rip ] ipAddress ipAddressMask [ metric ]

no ip summary-address [ rip ] ipAddress ipAddressMask

� rip � optional keyword for compatibility with non-ERX implementations

� ipAddress � IP address identifying the route to be summarized

� ipAddressMask � network mask identifying the route to be summarized

� metric � specifies a metric for the summary address; the default is 1


ip ttl210

ip ttl

Description: Sets the hop count specified by the TTL field in the IP header used by IP for all operations unless overridden by another command. The no version restores the default value, 127.

Syntax: ip ttl [ vrfName ] ttlValue

no ip ttl [ vrfName ]


� ttlValue � number in the range 1�255


ip tunnel reassembly

Description: Enables the reassembly of fragmented IP tunnel packets that are received on the current virtual router. The no version restores the default of disabled.

Syntax: [ no ] ip tunnel reassembly


ip unnumbered

Description: Enables IP processing on an interface without assigning an explicit IP address to the interface. The no version disables IP processing on the interface.

Syntax: [ no ] ip unnumbered interfaceType interfaceSpecifier




ip unreachables

Description: Enables the generation of an ICMP unreachable message when a packet is received that cannot be delivered by the router. The no version disables this function.

Syntax: [ no ] ip unreachables


ip virtual-routerERX Edge Routers

211

ip virtual-router

Description: Specifies a virtual router in an IP profile. Dynamic interfaces created with the profile are assigned to this VR. The no version removes the VR from the profile; if a VR is not specified via RADIUS, then any subsequent creation process for dynamic interfaces using the profile fails.

Syntax: [ no ] ip virtual-router vrName

� vrName � name of the virtual router; a string of 1�15 alphanumeric characters

Mode(s): Profile Configuration

ip vpn-id

Description: Associates a VPN ID with the virtual router. The no version removes the VPN ID from the virtual router.

Syntax: ip vpn-id [ vrfName ] oui ouiNumber index ipAddress

no ip vpn-id [ vrfName ]


� ouiNumber � identifies the OUI portion of the VPN ID, ranges from 0�16777215

� ipAddress � IP address that identifies the index portion of the VPN ID


ip vrf

Description: Creates a VRF or accesses VRF Configuration mode to configure a VRF. The no version deletes the VRF.

Note: After creating the VRF, you must configure a route distinguisher for it via the rd command; otherwise, the VRF will not operate.

Syntax: [ no ] ip vrf vrfName

� vrfName � name of the VRF; a string of 1�32 alphanumeric characters


ip vrf forwarding212

ip vrf forwarding

Description: Assigns a VRF to an interface or subinterface. The no version removes the assignment.

Syntax: [ no ] ip vrf forwarding vrfName

� vrfName � name of the VRF; a string of 1�32 alphanumeric characters


ip vrrp

Description: Creates a VRRP instance ID. The no version removes a VRID. The default is disabled.

Syntax: [ no ] ip vrrp vrid

� vrid � VRID identifier; a number in the range 1�255


ip vrrp advertise-interval

Description: Configures the VRRP advertisement interval time. You must use seconds to comply with RFC 2338. Use milliseconds only if all VRRP instances peering for the given VRID are composed of ERX systems. The no version restores the default value of 1 second.

Syntax: ip vrrp vrid advertise-interval advertiseInterval [ seconds | milliseconds ]

no ip vrrp vrid advertise-interval


� advertiseInterval � the advertisement period in seconds or milliseconds; 1�255 seconds; 100�255000 milliseconds

� seconds � specify interval in seconds

� milliseconds � specify interval in milliseconds


ip vrrp authentication-keyERX Edge Routers

213

ip vrrp authentication-key

Description: Specify the authentication key. This command is only valid if the text keyword was selected in the ip vrrp authentication-type command. The no version negates the command or restores the default.

Syntax: ip vrrp vrid authentication-key key

no ip vrrp vrid authentication-key


� key � string of 1�8 characters


ip vrrp authentication-type

Description: Specifies the VRRP authentication type. The no version restores the default value, none.

Syntax: ip vrrp vrid authentication-type { none | text }

no ip vrrp vrid authentication-type


� none � authentication disabled

� text � simple text password


ip vrrp enable

Description: Enables a VRID. The no version disables a VRID. The default is disabled.

Syntax: [ no ] ip vrrp vrid [ enable ]



ip vrrp preempt

Description: Enables VRRP preemption. The no version disables VRRP preemption. The default is enabled.

Syntax: [ no ] ip vrrp vrid preempt



ip vrrp priority214

ip vrrp priority

Description: Configures the priority of VRRP routers. The no version restores the default value, 100.

Syntax: ip vrrp vrid priority priorityValue

no ip vrrp vrid priority


� priorityValue � priority value of the VRRP router; a number in the range 1�255; default is 100


ip vrrp virtual-address

Description: Associates an IP address to a VRID. The no version removes a list of IP addresses associated with a VRID. The no version clears the auto flag, if auto addresses are being used. There is no default.

Syntax: ip vrrp vrid virtual-address { auto | ipAddress ipAddress [ ipAddress ipAddress ]* }

no ip vrrp vrid virtual-address [ ipAddress ipAddress ]*


� ipAddress � the IP address that associates to the VRID


ipsec clear sa

Description: Refreshes ISAKMP/IKE or IPSec SAs. There is no no version.

Syntax: ipsec clear sa { all [ state tunnelState ] | tunnel tunnelName } [ phase {1 | 2 } ]

� all � reinitializes all SAs

� state � reinitializes SAs on tunnels that are in a specific state

� tunnelState � state of tunnel, up, down, not-present

� tunnel � specifies that an SA on a specific tunnel is to be reinitialized

� tunnelName � name of tunnel

� phase � specifies one of the following types of tunnel to be reinitialized:

� 1 � ISAKMP/IKE tunnels

� 2 � IPSec tunnels


ipsec isakmp-policy-ruleERX Edge Routers

215

ipsec isakmp-policy-rule

Description: Defines and prioritizes an ISAKMP/IKE policy. ISAKMP/IKE policies define parameters to be used during ISAKMP/IKE negotiation. You can have up to 10 ISAKMP/IKE policies per system. The no version removes a policy. If you do not include a priority number with the no version, the software removes all ISAKMP/IKE policies.

Syntax: ipsec isakmp-policy-rule priority

no ipsec isakmp-policy-rule [ priority ]

� priority � identifies and prioritizes the ISAKMP/IKE policy; the range is 1�10000, with 1 having the highest priority


ipsec key manual

Description: Specifies that a peer use a manual key for authentication and displays the prompt from which you can enter manual keys. Manually configured keys are used during the tunnel establishment phase when the ISAKMP/IKE policy specifies either preshared key authentication or encrypted nonce authentication. The no version deletes a manually configured key.

Note: You must enter this command in the virtual router context where the IP address of the peer is defined.

Syntax: [ no ] ipsec key manual { pre-share } ipAddress

� pre-share � specifies preshared manual keys as the authentication method

� ipAddress � address of the peer for which the key can be used


ipsec lifetime

Description: Specifies the default lifetime in volume of traffic and/or seconds. The default lifetime applies to secure tunnels that do not have a tunnel lifetime defined. When either the volume of traffic or number of seconds limit is reached, IPSec renegotiates the SA. The no version restores the default values.

Syntax: [ no ] ipsec lifetime { kilobytes kilobytes | seconds seconds }

� kilobytes � volume of traffic in kilobytes that can pass between IPSec peers before the SA expires; the range is 102400�4294967295; the default is 4294967295 kilobytes; a setting of zero turns off the kilobyte lifetime

� seconds � number of seconds an SA lives before expiring; the range is 7200�4294967295; the default is 28800 seconds (8 hours)


ipsec local-endpoint216

ipsec local-endpoint

Description: Defines a default local endpoint used for ISAKMP/IKE negotiations and all IPSec tunnels for a transport virtual router. The no version restores the default settings of the local endpoint.

Syntax: [ no ] ipsec local-endpoint ipAddress transport-virtual-router transportVRName

� ipAddress � IP address to use as the local endpoint

� transportVRName � name of transport virtual router in which the IP address is defined


ipsec transform-set

Description: Creates a transform set. Transform sets used for manually configured tunnels can have only one transform. Transform sets used for signaled tunnels can have up to six transforms. Transforms are numbered in a priority sequence in the order in which you enter them. The no version deletes the transform set.

Each transform provides a different combination of data authentication and confidentiality. Use the online Help to view available transforms.

Syntax: ipsec transform-set transformSetName transform0 [ transform1 [ transform2 [ transform3 [ transform4 [ transform5 ] ] ] ] ]

no ipsec transform-set transformSetName

� transformSetName � name of the transform set

� transform0 through transform5 � AH or ESP transform


isis authentication-key

Description: Assigns a password for IS-IS level 1 and level 2 hellos used by neighboring routers that are using IS-IS password authentication. The no version deletes the password.

Syntax: isis authentication-key [ level-1 | level-2 ] authKey

no isis authentication-key [ level-1 | level-2 ]

� level-1 � inserts the password into level 1 hello packets

� level-2 � inserts the password into level 2 hello packets



isis circuit-typeERX Edge Routers

217

isis circuit-type

Description: Use to configure the type of adjacency desired for the specified interface. The no version resets the circuit type to level 1 and level 2.

Syntax: isis circuit-type [ level-1 | level-1-2 | level-2-only ]

no isis circuit-type

� level-1 � establishes a level 1 adjacency if there is at least one area address in common between this system and its neighbors

� level-1-2 � (default) establishes a level 1 and 2 adjacency if the neighbor is also configured as a level 1-2 router and there is at least one area in common. If there is no area in common, a level 2 adjacency is established.

� level-2-only � establishes a level 2 adjacency on the circuit. If the neighboring router is a level 1 only router, no adjacency will be established.


isis csnp-interval

Description: Configures the IS-IS CSNP interval for the specified interface. The no version restores the default value.

Syntax: isis csnp-interval seconds [ level-1 | level-2 ]

no isis csnp-interval [ seconds ] [ level-1 | level-2 ]

� seconds � number in the range 0�65535; the interval of time in seconds between the transmission of CSNPs on multiaccess networks for the designated router; default is 10 seconds, except for WAN interfaces, where the default is 0

� level-1 � sets the interval of time between transmission of CSNPs for level 1 independently

� level-2 � sets the interval of time between transmission of CSNPs for level 2 independently


isis hello-interval218

isis hello-interval

Description: Specifies the length of time in seconds between hello packets that the router sends on the specified interface. The no version restores the default value.

Syntax: isis hello-interval seconds [ level-1 | level-2 ]

no isis hello-interval [ seconds ] [ level-1 | level-2 ]

� seconds � number in the range 0�65535; a value equal to the hello multiplier times the hello interval seconds is advertised as the holdtime in the hello packets transmitted; the default is 10 seconds. The value must be the same for all routers attached to a common network. With smaller hello intervals, topological changes are detected faster, but there is more routing traffic.

� level-1 � sets the hello-interval for level 1 independently

� level-2 � sets the hello-interval for level 2 independently


isis hello-multiplier

Description: Specifies the number of IS-IS hello packets a neighbor must miss before the router should declare the adjacency to be down. The no version restores the multiplier default value of 3.

Syntax: isis hello-multiplier multiplier [ level-1 | level-2 ]

no isis hello-multiplier [ multiplier | level-1 | level-2 ]

� multiplier � number in the range 3�1000; the default is 3. The advertised hold time in IS-IS hellos will be set to the hello-multiplier times the hello-interval. Neighbors will declare an adjacency to this router to be down after not having received any IS-IS hellos during the advertised hold time. The hold time (and thus the hello-multiplier and the hello-interval) can be set on a per interface basis, and can be different between different routers in one area. Using a smaller hello-multiplier will give fast convergence, but can result in more routing instability. Increment the hello-multiplier to a larger value to help network stability when needed. Never configure a hello-multiplier lower than the default.

� level-1 � sets the hello-multiplier independently for level 1 adjacencies

� level-2 � sets the hello-multiplier independently for level 2 adjacencies


isis lsp-intervalERX Edge Routers

219

isis lsp-interval

Description: Configures the time delay between successive IS-IS link state packet transmissions. The no version restores the default value of 33 milliseconds.

Syntax: isis lsp-interval milliseconds

no isis lsp-interval

� milliseconds � number of milliseconds in the range 1�4294967295; an interval between successive link state packets


isis mesh-group

Description: Configures an interface in the same mesh group to act as a virtual multiaccess network. The no version disables the feature.

Syntax: isis mesh-group { blocked | number }

no isis mesh-group

� blocked � blocks reserved LSPs from being flooded out on this defined configured interface

� number � mesh group number in the range 1�4294967295


isis message-digest-key220

isis message-digest-key

Description: Specifies an HMAC MD5 key that the system uses to create a secure, encrypted message digest of IS-IS level 1 or level 2 hello packets on the interface. Level 1 packets are the default. The digest is inserted into the packet from which it is created. Using this algorithm protects against intrusion by preventing unauthorized routers from forming adjacencies with your system.

You can specify when the system will start (default is the current time) and stop (default is never) accepting packets that include a digest made with this key. You can specify when the system will start (default is the current time plus 2 minutes) and stop (default is never) generating packets that include a digest made with this key. The no version deletes the key specified by the key-id.

Syntax: isis message-digest-key keyId hmac-md5 key [ start-accept startAcceptTime [ { startAcceptMonth startAcceptDay | startAcceptDay startAcceptMonth } startAcceptYear ] ] [ start-generate startGenTime [ { startGenMonth startGenDay | startGenDay startGenMonth } startGenYear ] ] [stop-accept { never | stopAcceptTime [ { stopAcceptMonth stopAcceptDay | stopAcceptDay stopAcceptMonth } stopAcceptYear ] } ] [ stop-generate { never | stopGenTime [ { stopGenMonth stopGenDay | stopGenDay stopGenMonth } stopGenYear ] } ][ level-1 | level-2 ]

no isis message-digest-key keyId [ level 1 | level 2 ]


� key � string of up to 20 alphanumeric characters; secret key used by the HMAC MD5 algorithm to generate the message digest.

� startAcceptTime, startAcceptMonth, startAcceptDay, startAcceptYear � time, month, day, year that the system will start accepting packets created with this password. Use military time format HH:MM[ :SS ].

� startGenTime, startGenMonth, startGenDay, startGenYear � time, month, day, year that the system will start inserting this password into packets. Use military time format HH:MM[ :SS ].

� never � the system never stops accepting or generating packets; overrides previously specified stop times.

� stopAcceptTime, stopAcceptMonth, stopAcceptDay, stopAcceptYear � time, month, day, year that the system will stop accepting packets created with this password. Use military time format HH:MM[ :SS ].

� stopGenTime, stopGenMonth, stopGenDay, stopGenYear � time, month, day, year that the system will stop inserting this password into packets. Use military time format HH:MM[ :SS ].

� level1 � Inserts the password into level 1 hello packets

� level2 � Inserts the password into level 2 hello packets


isis metricERX Edge Routers

221

isis metric

Description: Configures the metric (cost) for the specified interface. The no version restores the default metric value.

Syntax: isis metric defaultMetric [ level-1 | level-2 ]

no isis metric [ defaultMetric | level-1 | level-2 ]

� defaultMetric � metric used for the redistributed route; a number in the range 0�63 if the system is configured with the metric-style narrow command; a number in the range 0�16777215 if the system is configured with the metric-style transition or metric-style wide command; the default value is 10

� level-1 � apply metric to level 1 links

� level-2 � apply metric to level 2 links


isis priority

Description: Configures the priority of this system for designated router election. The no version resets priority to the default value, 64.

Syntax: isis priority value [ level-1 | level-2 ]

no isis priority [ value | level-1 | level-2 ]

� value � number in the range 0�127; the priority of a router; the default value is 64

� level-1 � sets the priority of a router for level 1 independently

� level-2 � sets priority of a router for level 2 independently


isis retransmit-interval

Description: Configures the number of seconds between retransmission of LSPs with the same lsp-id for point-to-point links. The no version restores the default value.

Syntax: isis retransmit-interval seconds

no isis retransmit-interval

� seconds � number of seconds in the range 1�65535; the default value is 5. The number should be greater than the expected round-trip delay between any two routers on the attached network. The setting of this parameter should be conservative, or needless retransmission will result. The value should be larger for serial lines.


isis retransmit-throttle-interval222

isis retransmit-throttle-interval

Description: Configures the amount of time between retransmissions of any IS-IS LSPs on a point-to-point interface. The no version restores the default value, 33 milliseconds.

Syntax: isis retransmit-throttle-interval milliseconds

no isis retransmit-throttle-interval

� milliseconds � the number of milliseconds in the range 0�65535; the minimum delay between LSP retransmissions on the interface


is-type

Description: Configures the IS-IS level at which the router is to operate. The no version resets the parameter to the default level-1-2.

Syntax: is-type { level-1 | level-1-2 | level-2-only }

no is-type

� level-1 � causes the router to act as a station router

� level-1-2 � causes the router to act as both a station router and an area router; the default setting

� level-2-only � causes the router to act as an area router


j1ERX Edge Routers

223

j1

Description: Enables the J1 variant (Japan) of the T1 framing. The no version disables the feature (default).

Syntax: [ no ] j1


key

Description: From Radius Configuration mode, specifies the authentication or accounting server secret. The no version removes the secret.

From Manual Key Configuration mode, configures a manual ISAKMP/IKE preshared key. There is no no version. To delete a key, use the no version of the ipsec key manual command.

Syntax: To assign a RADIUS key:

key secret

no key

� secret � authentication or accounting server secret text string used by RADIUS to encrypt the client and server authenticator field during exchanges between the system and a RADIUS server. The system encrypts PPP PAP passwords using this text string.

To assign an ISAKMP/IKE key:

key keyString

� keyString � key value in ASCII format; up to 200 characters

Mode(s): Radius Configuration, Manual Key Configuration

l2f checksum

Description: Enables the generation of checksums for L2F data packets running over IP/UDP. The no version disables the generation of checksums for data packets running over IP/UDP. The default setting is disabled.

Syntax: [ no ] l2f checksum


l2f destruct-timeout224

l2f destruct-timeout

Description: Specifies the maximum time for which the system maintains dynamic destinations, tunnels, and sessions that have terminated. If resources are low, the system will replace the terminated objects with new requests. The no version restores the default value, 600 seconds.

Syntax: l2f destruct-timeout seconds

no l2f destruct-timeout

� seconds � a time in the range 10�3600 seconds (1 hour)


l2f drain

Description: Prevents the creation of new destinations, tunnels, and sessions for the system. This command works with the l2f shutdown command. Both commands affect the administrative state of L2F on the system. The l2f drain command sets the administrative state to drain, and the l2f shutdown command sets the administrative state to disabled. The no version allows the creation of new destinations, tunnels, and sessions for the system.

Syntax: [ no ] l2f drain


l2f drain destination

Description: Prevents the creation of new tunnels and sessions at a destination. This command works with the l2f shutdown destination command. Both commands affect the status of the administrative state of L2F for the destination. The l2f drain destination command sets the administrative state to drain, and the l2f shutdown destination command sets the administrative state to disabled. The no version allows the creation of new tunnels and sessions at a destination.

Syntax: [ no ] l2f drain destination { destinationName |[ virtual-router virtualRouterName ] ip ipAddress }

� destinationName � name the system assigns to the home gateway

� virtualRouterName � name of the virtual router on which the destination exists

� ipAddress � IP address of the home gateway


l2f drain tunnelERX Edge Routers

225

l2f drain tunnel

Description: Prevents the assignment of new sessions to a tunnel. This command works with the l2f shutdown tunnel command. Both commands affect the status of the administrative state of L2F for the tunnel. The l2f drain tunnel command sets the administrative state to drain, and the l2f shutdown tunnel command sets the administrative state to disabled. The no version allows the assignment of new sessions to a tunnel.

Syntax: [ no ] l2f drain tunnel { destinationName | [ virtual-router vrName ] ip ipAddress tunnelName }


� vrName � name of the virtual router on which the tunnel exists


� tunnelName � name of the tunnel


l2f ignore-receive-data-sequencing

Description: Suppresses sequence number checking for data packets received on all L2F tunnels in the system. This setting affects only packets received on a tunnel, not packets sent on a tunnel. The L2F NAS still inserts sequence numbers into data packets if the NAS receives packets from the home gateway that contain sequence numbers. The no version, which is the default, causes the system to check sequence numbers in data packets that it receives on L2F tunnels.

Note: If you are using IP reassembly, we recommend that you set up the system to ignore sequence numbers in received data packets. Because IP reassembly may reorder L2F packets, out-of-order packets may be dropped if sequence numbers are being used on L2F data packets.

Syntax: [ no ] l2f ignore-receive-data-sequencing


l2f shutdown226

l2f shutdown

Description: Closes all destinations, tunnels, and sessions and prevents the creation of new destinations, tunnels, and sessions for the system. This command works with the l2f drain command. Both commands affect the administrative state of L2F on the system. The l2f shutdown command sets the administrative state to disabled, and the l2f drain command sets the administrative state to drain. The no version allows the creation of new destinations, tunnels, and sessions for the system.

Syntax: [ no ] l2f shutdown


l2f shutdown destination

Description: Closes all tunnels and sessions at a destination, and prevents the creation of new tunnels and sessions at that destination. This command works with the l2f drain destination command. Both commands affect the status of the administrative state of L2TP on the destination. The l2f shutdown destination command sets the administrative state to disabled, and the l2f drain destination command sets the administrative state to drain. The no version enables the creation of new tunnels and sessions at that destination.

Syntax: [ no ] l2f shutdown destination { destinationName | [ virtual-router vrName ] ip ipAddress }


� vrName � name of the virtual router on which the destination exists



l2f shutdown session

Description: Closes a specific session. The no version has no effect because all L2F sessions are dynamic and cannot be restarted after they have been shut down.

Syntax: [ no ] l2f shutdown session { destinationName | [ virtual-router vrName ] ip ipAddress sessionName }

� destinationName � name that the system assigns to the LNS



� sessionName � name of the session


l2f shutdown tunnelERX Edge Routers

227

l2f shutdown tunnel

Description: Closes all sessions in a tunnel, and prevents the creation of new sessions in that tunnel. This command works with the l2f drain tunnel command. Both commands affect the status of the administrative state of L2F on the tunnel. The l2f shutdown tunnel command sets the administrative state to disabled, and the l2f drain tunnel command sets the administrative state to drain. The no version enables the creation of new sessions in that tunnel.

Syntax: [ no ] l2f shutdown tunnel { destinationName | [ virtual-router vrName ] ip ipAddress tunnelName }


� virtualRouterName � name of the virtual router on which the tunnel exists




l2tp checksum

Description: Enables the generation of checksums for data packets running over IP/UDP. The no version disables the generation of checksums for data packets running over IP/UDP. The default setting is disabled.

Syntax: [ no ] l2tp checksum


l2tp destination profile228

l2tp destination profile

Description: Defines the location of the LAC(s) by virtual router and IP address. Accesses the L2TP Destination Profile Configuration mode. The no version removes the L2TP destination profile.

Syntax: l2tp destination profile { profileName [ [ virtual-router vrName ] ip address ipAddress ] | [ virtual-router vrName ] ip address ipAddress }

no l2tp destination profile { profileName |[ virtual-router vrName ] ip address ipAddress }

� profileName � name of the L2TP destination profile

� vrName � name of the virtual router to be used to reach the destination (that is, the LAC). If you do not specify a virtual router, the current virtual router context is used.

� ipAddress � IP address to be used to reach the destination

Note: To manage an existing destination profile, use this version of the command: l2tp destination profile profileName. This version assumes that the L2TP destination profile already exists.


l2tp destruct-timeout

Description: Specifies the maximum time for which the system maintains dynamic destinations, tunnels, and sessions that have terminated. If resources are low, the system will replace the terminated objects with new requests. The no version restores the default value, 600 seconds.

Syntax: l2tp destruct-timeout seconds

no l2tp destruct-timeout

� seconds � time in the range 10�3600 seconds (1 hour)


l2tp drain

Description: Prevents the creation of new destinations, tunnels, and sessions for the system. This command works in conjunction with the l2tp shutdown command. Both commands affect the status of the administrative state of L2TP on the system; the l2tp drain command sets the administrative state to drain. The no version allows the creation of new destinations, tunnels, and sessions for the system.

Syntax: [ no ] l2tp drain


l2tp drain destinationERX Edge Routers

229

l2tp drain destination

Description: Prevents the creation of new tunnels and sessions at a destination. This command works in conjunction with the l2tp shutdown destination command. Both commands affect the status of the administrative state of L2TP for the destination; the l2tp drain destination command sets the administrative state to drain. The no version allows the creation of new tunnels and sessions at a destination.

Syntax: [ no ] l2tp drain destination { destinationName | [ virtual-router vrName ] ip ipAddress }

� destinationName � name the system assigns to the LNS


� ipAddress � IP address of the LNS


l2tp drain tunnel

Description: Prevents the assignment of new sessions to a tunnel. This command works in conjunction with the l2tp shutdown tunnel command. Both commands affect the status of the administrative state of L2TP for the tunnel; the l2tp drain tunnel command sets the administrative state to drain. The no version allows the assignment of new sessions to a tunnel.

Syntax: [ no ] l2tp drain tunnel { destinationName | [ virtual-router vrName ] ip ipAddress tunnelName }






l2tp fail-over-within-preference

Description: Enables tunnel selection within a preference level. The no version restores the default behavior.

The default fail-over scheme is to drop down a preference level when a connection attempt has failed.

Syntax: [ no ] l2tp fail-over-within-preference


l2tp ignore-receive-data-sequencing230

l2tp ignore-receive-data-sequencing

Description: Suppresses sequence number checking for data packets received on all L2TP tunnels in the system. This setting affects only packets received on a tunnel, not packets sent on a tunnel. The L2TP LAC still inserts sequence numbers into data packets if the LAC receives packets from the LNS that contain sequence numbers. The no version, which is the default, causes the system to check the sequence numbers in data packets that it receives on L2TP tunnels.

Note: If you are using IP reassembly, we recommend that you set up the system to ignore sequence numbers in received data packets. Because IP reassembly may reorder L2TP packets, out-of-order packets may be dropped if sequence numbers are being used on L2TP data packets.

Syntax: [ no ] l2tp ignore-receive-data-sequencing


l2tp retransmission

Description: Sets the number of retransmission retries. The no version resets the number of retransmissions to the default value, 5.

Syntax: l2tp retransmission retries

no l2tp retransmission

� retries � in the range 2�7


l2tp shutdown

Description: Closes all destinations, tunnels, and sessions and prevents the creation of new destinations, tunnels, and sessions for the system. This command works in conjunction with the l2tp drain command. Both commands affect the status of the administrative state of L2TP on the system; the l2tp shutdown command sets the administrative state to disabled. The no version allows the creation of new destinations, tunnels, and sessions for the system.

Syntax: [ no ] l2tp shutdown


l2tp shutdown destinationERX Edge Routers

231

l2tp shutdown destination

Description: Closes all tunnels and sessions at a destination, and prevents the creation of new tunnels and sessions at that destination. This command works in conjunction with the l2tp drain destination command. Both commands affect the status of the administrative state of L2TP on the destination; the l2tp shutdown destination command sets the administrative state to disabled. The no version enables the creation of new tunnels and sessions at that destination.

Syntax: [ no ] l2tp shutdown destination { destinationName | [ virtual-router vrName ] ip ipAddress }





l2tp shutdown session

Description: Closes a specific session. The no version has no effect because all L2TP sessions are dynamic and cannot be restarted after they have been shut down.

Syntax: [ no ] l2tp shutdown session { destinationName | [ virtual-router vrName ] ip ipAddress sessionName }

� destinationName � name that the system assigns to the LNS



� sessionName � name of the session


l2tp shutdown tunnel232

l2tp shutdown tunnel

Description: Closes all sessions in a tunnel, and prevents the creation of new sessions in that tunnel. This command works in conjunction with the l2tp drain tunnel command. Both commands affect the status of the administrative state of L2TP on the tunnel; the l2tp shutdown tunnel command sets the administrative state to disabled. The no version enables the creation of new sessions in that tunnel.

Syntax: [ no ] l2tp shutdown tunnel { destinationName | [ virtual-router vrName ] ip ipAddress tunnelName }






l2tp tunnel idle-timeout

Description: Configures the tunnel idle-timeout value and creates persistent tunnels by setting the value to 0. There is no no version.

Syntax: l2tp tunnel idle-timeout [ timerValue ]

� timerValue � range is 0�86400 seconds


l2tp tunnel-switching

Description: Enables tunnel switching chassis-wide. The no version disables tunnel switching. Disabled is the default.

Syntax: [ no ] l2tp tunnel-switching


l2tp tunnel testERX Edge Routers

233

l2tp tunnel test

Description: Allows you to force the establishment of a tunnel in order to verify the tunnel configuration and to verify connectivity.

Syntax: l2tp tunnel test authenticateName [ tunnelName ]

� authenticateName � authenticate name used to look up tunnel test parameters

� tunnelName � name of the tunnel to be tested


l2tp weighted-load-balancing

Description: Allows you to use a weighted load balancing scheme for session distribution. The no version restores the default behavior, wherein the session load of a chassis is distributed evenly across all tunnels defined to be at the same preference level.

Syntax: [ no ] l2tp weighted-load-balancing


lease

Description: Specifies the time period for which the supplied IP address is valid. The no version restores the default lease time, one day.

Syntax: lease { days [ hours [ minutes [ seconds ] ] ] | infinite }

no lease

� days � number of days for which the IP address is valid in the range 0�32768

� hours � number of hours for which the IP address is valid in the range 0�24

� minutes � number of minutes for which the IP address is valid in the range 0�60

� seconds � number of seconds for which the IP address is valid in the range 0�60

� infinite � assigns a lease that does not expire


license b-ras234

license b-ras

Description: Specifies the B-RAS license provided by your sales representative or Juniper Networks Customer Service. Depending on the license purchased, the system supports up to 2,000, 4,000, 8,000, 16,000, or 20,000 authenticated PPP or SDX (formerly SSC) sessions. The no version disables the license.

Syntax: license b-ras licenseKey

no license b-ras

� licenseKey � unique string of alphanumeric characters up to 15 characters long that we provide to you


license ipsec-tunnels

Description: Specifies the IPSec license key provided by your sales representative or Juniper Networks Customer Service. Depending on the license purchased, the system supports up to 5,000, 7,500, or 10,000 tunnels per chassis. The no version disables the license.

Syntax: license ipsec-tunnels licenseKey

no license ipsec-tunnels

� licenseKey � unique string of alphanumeric characters that we provide to you


lifetime

Description: Associates a lifetime with IKE SAs established using this IKE policy. The no version restores the lifetime to its default, 28800 seconds (8 hours).

Syntax: lifetime seconds

no lifetime

� seconds � number of seconds an SA lives before expiring; range is 7200 to 864000 (10 days)


limitsERX Edge Routers

235

limits

Description: Sets memory limits for BGP internal tables maintained by BGP software. If you set a particular memory limit to a value lower than the current value and the system uses the memory up to the previous limit, then memory allocations will start to fail when the new value takes effect. The no version restores the default values; entering an optional value in the no version has the same effect as entering no optional values.

Syntax: limits { { nlre | received-route } receivedRouteLimit | { nlri | destination } destinationLimit | path-attribute pathAttributeLimit | vrf vrfLimit | address-family addressFamilyLimit | peer peerLimit | peer-address-family peerAddressFamilyLimit | peer-group peer-groupLimit | peer-group-address-family peer-groupAddressFamilyLimit | dampening dampeningLimit | network-route networkRouteLimit | aggregated-route aggregatedRouteLimit | redistributed-route redistributedRouteLimit | auto-summary-route autoSummaryRouteLimit | next-hop nextHopLimit | route-flap-history routeFlapHistoryLimit | rib-out ribOutLimit |group-rib-out groupRibOutLimit | send-queue-entry sendQueueEntryLimit | route-target-entry routeTargetEntryLimit }

no limits { { nlre | received-route } [ receivedRouteLimit ] | { nlri | destination } [ destinationLimit ] | path-attribute [ pathAttributeLimit ] | vrf [ vrfLimit ] | address-family [ address-family-Limit ] | peer [ peerLimit ] | peer-address-family [ peerAddressFamilyLimit ] | peer-group [ peer-groupLimit ] | peer-group-address-family [ peer-groupAddressFamilyLimit ] | dampening [ dampeningLimit ] | network-route [ networkRouteLimit ] | aggregated-route [ aggregatedRouteLimit ] | redistributed-route [ redistributedRouteLimit ] | auto-summary-route [ autoSummaryRouteLimit ] | next-hop [ nextHopLimit ] | route-flap-history [ routeFlapHistoryLimit ] | rib-out [ ribOutLimit ] | group-rib-out [ groupRibOutLimit ] | send-queue-entry [ sendQueueEntryLimit ] | route-target-entry [ routeTargetEntryLimit ] }

Note: The nlre and received-route keywords have the same purpose in this command, to set a limit on the received routes table. Similarly, the nlri and destination keywords have the same purpose, to set a limit on the BGP destination table. The nlre and nlri keywords are maintained for compatibility with previous software releases.

� receivedRouteLimit � maximum number of received routes stored by BGP in the range 0�2147483648; the default is 5,000,000

� destinationLimit � maximum number of BGP destinations stored by BGP in the range 0�2147483648; the default is 5,000,000

� pathAttributeLimit � maximum number of path attributes stored by BGP in the range 0�2147483648; the default is 5,000,000

limits236

� vrfLimit � maximum number of VRFs stored by BGP in the range 0�2147483648; the default is 5,000,000

� addressFamilyLimit � maximum number of address families stored by BGP in the range 0�2147483648; the default is 5,000,000

� peerLimit � maximum number of peers stored by BGP in the range 0�2147483648; the default is 5,000,000

� peerAddressFamilyLimit � maximum number of peers per address family stored by BGP in the range 0�2147483648; the default is 5,000,000

� peer-groupLimit � maximum number of peer groups stored by BGP in the range 0�2147483648; the default is 5,000,000

� peer-groupAddressFamilyLimit � maximum number of peer-groups per address family stored by BGP in the range 0�2147483648; the default is 5,000,000

� dampeningLimit � maximum number of dampening parameter blocks stored by BGP in the range 0�2147483648; the default is 5,000,000. BGP creates a dampening parameter block for each unique set of dampening parameters�such as suppress threshold, reuse threshold, and so on�used by BGP. For example, if you have a route map that sets the dampening parameters to one set of values for some routes and to another set of values for the remaining routes, BGP uses and stores two dampening parameter blocks, one for each set.

� networkRouteLimit � maximum number of network routes stored by BGP in the range 0�2147483648; the default is 5,000,000

� aggregatedRouteLimit � maximum number of aggregated routes stored by BGP in the range 0�2147483648; the default is 5,000,000

� redistributedRouteLimit � maximum number of redistributed routes stored by BGP in the range 0�2147483648; the default is 5,000,000

� autoSummaryRouteLimit � maximum number of automatically summarized routes stored by BGP in the range 0�2147483648; the default is 5,000,000

� nextHopLimit � maximum number of next hops stored by BGP in the range 0�2147483648; the default is 5,000,000

� routeFlapHistoryLimit � maximum number of route-flap histories stored by BGP in the range 0�2147483648; the default is 5,000,000

� ribOutLimit � maximum number of RIB-Out routes stored by BGP for individual peers in the range 0�2147483648; the default is 1,000,000

� groupRibOutLimit � maximum number of RIB-Out routes stored by BGP for peer groups in the range 0�2147483648; the default is 1,000,000

� sendQueueEntryLimit � maximum number of send queue entries stored by BGP in the range 0�2147483648; the default is 5,000,000

� routeTargetEntryLimit � maximum number of combined import and export route-target entries in the range 0�2147483648; the default is 5,000,000


lineERX Edge Routers

237

line

Description: Opens virtual terminal lines or the console line and allows you to configure the lines. By default five vty lines (0�4) are open.

The no version removes a vty line or a range of lines from your configuration; users will not be able to run Telnet, SSH, or FTP to lines that you remove. When you remove a vty line, the system removes all lines above that line. For example, no line vty 6 causes the system to remove lines 6 through 19. You cannot remove lines 0 through 4.

Note: Once lines are open, login is enabled by default. Before users can access the lines, you must configure a password, disable login using the no login command, or configure AAA authentication on the line.

Syntax: line { console lineNumber | vty lineRangeStart [ lineRangeEnd ] }

no line vty lineNumber

� console � specifies the console line

� vty � specifies vty lines

� lineNumber � number of a single line; 0 for the console line

� lineRangeStart � start of the vty line range; a number from 0�19;

� lineRangeEnd � end of the vty line range; a number from 0�19


lineCoding

Description: Specifies the type of line coding used by a CE1 or CT1 interface. The no version restores the default�hdb3 for CE1 interfaces and b8zs for CT1 interfaces.

Syntax: lineCoding linecodingType

no lineCoding

� linecodingType � one of the following:

� ami � alternate mark inversion

� b8zs � bipolar with eight-zero substitution; CT1 default

� hdb3 � high-density bipolar 3; CE1 default


link238

link

Description: Links the pool currently being configured to another DHCP local address pool. The linked pool acts as a backup pool. The no version removes the link.

Syntax: link poolName

no link

� poolName � name of pool to which you want to link the pool currently being configured


list

Description: Lists the currently configured MPLS explicit path (optionally starting at a particular index). There is no no version.

Syntax: list [ index ]

� index � number of a node in an ordered set of abstract nodes, a value ranging from 1�255; set with the index command


load-interval

Description: Sets the time interval at which the system calculates bit rates and packet rates for an interface. The no version restores the default time interval, which is 300 seconds. This command is not available for the Ethernet interface on the SRP module.

Syntax: load-interval timeInterval

no load-interval

� timeInterval � a multiple of 30 seconds in the range 30�300


local host

Description: Configures an L2TP local hostname to be used with a remote host. The no version removes the local hostname from use with a remote host.

Syntax: local host hostname

no local host

� hostname � an L2TP local hostname; can be up to 64 characters in length (no spaces)


local ip addressERX Edge Routers

239

local ip address

Description: Configures a local IP address for use with a remote host. The no version removes the local IP address from use with a remote host.

Syntax: local ip address ipAddress

no local ip address

� ipAddress � an IP address


log

Description: Configures logging settings. The no version negates the command. The suspend version suspends the policy rule.

Syntax: [ no ] [ suspend ] log [ classifier-group claclName ] [ precedence precValue ]

� claclName � classifier control list to be logged

� precValue � precedence of rule in relation to be logged


log-adjacency-changes240

log-adjacency-changes

Description: Generates a log message when a NLSP adjacency changes state (up or down). The no version disables this function. This command manipulates the same log as the Global Configuration log commands.

Syntax: log-adjacency-changes [ severity { severityValue | severityNumber } ][ verbosity verbosityLevel ]

no log-adjacency-changes

� severity � minimum severity of the log messages for this category; described either by a descriptive term�severityValue�or by a corresponding number�severityNumber�in the range 0�7. The lower the number, the higher the priority:









� verbosity � specifies the verbosity of this log category�s messages

� verbosityLevel � specifies the verbosity of the log category�s messages; can be any of the following:


� low � terse



log destinationERX Edge Routers

241

log destination

Description: Configures the logging of system messages. You can direct messages to a destination, limit the messages logged based on severity level, or limit the event categories for which messages are logged. The no versions restore default settings or reverse the effect of previous commands that limited event categories.

Note: You can display traffic logs�such as ipTraffic, icmpTraffic, tcpTraffic, and udpTraffic�only via the show log data command or from the SRP module console. You cannot redirect traffic logs elsewhere, such as to a syslog or nonvolatile storage file, or to a Telnet session.

Syntax: To specify the destination and severity of messages logged:

log destination { console | nv-file | syslog ipAddress [ facility facilityId ] } { severity { severityValue | severityNumber } | off }

no log destination [ syslog [ ipAddress ] ]

To specify which event categories are logged to syslog: log destination syslog ipAddress { include | exclude } category [ category ]*

no log destination syslog ipAddress { include | exclude } [ category ]*

� console � configure or modify logging to the local console

� nv-file � configure or modify logging to the nonvolatile log file; the nv-file can accept only events at a severity level of critical or higher in importance

� syslog � configure or modify logging to a syslog server

� ipAddress � IP address of the syslog application on a remote host

� facility � specifies the syslog facility on the host

� facilityId � number in the range 0�7 that identifies the corresponding logging facility, local0�local7

� severity � minimum severity of the log messages displayed; described either by a descriptive term�severityValue�or by a corresponding number�severityNumber�in the range 0�7. The lower the number, the higher the priority:








log destination syslog source242


� off � disable logging to this destination

� include � send only the specified event categories to the syslog server

� exclude � send all event categories except those specified to the syslog server

Issuing an include command after an exclude command (or vice versa) overrides the earlier command.

You can issue successive include commands or successive exclude commands. Successive commands expand the list of included or excluded categories.



log destination syslog source

Description: Specifies a source interface type and location for events logged to a syslog server. Overrides the type and location of the actual source to enable server access behind firewalls. The no version restores the default state, which is to use the actual interface type and location of the source.

Syntax: log destination syslog ipAddress source interfaceType interfaceSpecifier

no log destination syslog ipAddress source [ interfaceType interfaceSpecifier ]

� ipAddress � IP address of the syslog application

� interfaceType � type of interface; the source of the events logged; see Interface Types and Specifiers in About This Guide.



log engineering

Description: Enables engineering logs. The no version disables engineering logs.

Syntax: [ no ] log engineering


log fieldsERX Edge Routers

243

log fields

Description: Selects optional fields to be added to all logs. The no version disables the optional log fields.

Syntax: log fields { timestamp | no-timestamp } { instance | no-instance }{ calling-task | no-calling-task }

no log fields

� timestamp � include the timestamp in log messages

� no-timestamp � do not include the timestamp in log messages

� instance � include the event ID in log messages

� no-instance � do not include the event ID in log messages

� calling-task � include the logging task name in log messages

� no-calling-task � do not include the logging task name in log messages


log filters

Description: This command has only a no version. See the no log filterscommand for a complete description and syntax.

log here

Description: Enables the current terminal as a log console. The no version disables logs destined for a console from being displayed on the current terminal.

Syntax: [ no ] log here

Mode(s): User Exec, Privileged Exec, Global Configuration

log severity244

log severity

Description: Sets the severity value for the selected category. The no version removes an override severity setting and returns a log to its default value or the system-wide setting.

Syntax: log severity { severityValue | off | severityNumber }[ eventCategory [ instanceTree ] | eventCategory instanceTree | eventCategory ]

no log severity [ severityValue | off | severityNumber ] [ eventCategory [ filters | instanceTree ] | eventCategory { filters | instanceTree } | eventCategory | * ]

� severityValue and severityNumber � minimum severity of the log messages displayed for the selected category; described either by a descriptive term�severityValue�or by a corresponding number�severityNumber�in the range 0�7. The lower the number, the higher the priority:









� off � disables log messages for all event categories or for a specified event category

� eventCategory � log category; refer to the CLI online Help for available options

� filters � removes all log filters for the event category

� instanceTree � log-specific filter parameters; refer to the CLI online Help for available options

� * � resets all log severities, system wide and individual, to default settings


log unlimitERX Edge Routers

245

log unlimit

Description: Removes the limit on the number of outstanding buffers for an event category. The no version returns the number of buffers to the default value.

Syntax: [ no ] log unlimit [ eventCategory ]


Mode(s): User Exec, Privileged Exec, Global Configuration

log verbosity

Description: Sets the verbosity level for a selected category. The no version returns the log verbosity to its default value, low.

Syntax: log verbosity verbosityLevel [ eventCategory ]

no log verbosity [ verbosityLevel ] [ eventCategory ]

� verbosityLevel � specifies the verbosity for the log category:

� low � terse (default)





login

Description: Requires you to log in with a password. The no version removes the password requirement and allows connections without a password.

Syntax: [ no ] login


Note: If this command has been configured and no password has been configured, access to Telnet is refused.

login authentication246

login authentication

Description: Applies an AAA authentication list to the vty sessions that you specified for AAA authentication.The no version removes all authentication methods, which means the system accepts Telnet sessions without challenge.

Syntax: login authentication authListName

no login authentication

� authListName � specifies an authentication list name of up to 32 characters


logout subscribers

Description: Logs out the authenticated PPP users. If you do not specify a license, B-RAS configuration commands are disabled. There is no no version.

Syntax: logout subscribers { all | username userName | domain domainName | virtual-router vrName | port interfaceLocation }

� all � all PPP sessions

� userName � active PPP session whose names match the username

� domainName � active PPP session whose usernames have that domain name

� vrName � active PPP session whose interfaces are bound to a specific virtual router

� port � active PPP subscribers for the port

� interfaceLocation � location of the port in slot/port format; format varies according to interface type; see Interface Types and Specifiers in About This Guide


loopbackERX Edge Routers

247

loopback

Description: Specifies the loopback mode for a module controller or interface, or maps a loopback interface to a user domain name in Domain Map Configuration mode. The no version clears all loopback on the module or interface (the default), or deletes the mapping to the user domain name.

Syntax: Module controllers � The options available vary depending on the module being configured.

CE1 module:

loopback { local | network { payload | line } }

no loopback

CT1 module:

loopback { local | network { payload | line } | remote { line { fdl { ansi | bellcore } | inband } payload [ fdl ] [ ansi ] } }

no loopback [ remote ]

CT3, E3, or T3 module:

loopback { local | network | payload }

no loopback

cOCx/STMx SONET controller (SONET/SDH section layer), OCx/STMx line modules:

loopback { local | network }

no loopback

X.21/V.35 module:

[ no ] loopback

� local � loops the data back toward the router and sends an AIS out toward the network.

� network payload � loops the data toward the network after the framer has processed the data.

� network line � loops the data toward the network before the data reaches the framer.

� remote line fdl ansi � sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 line, according to the ANSI T1.403 specification.

loopback248

� remote line fdl bellcore � sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 line, according to the Bellcore TR-TSY-000312 specification.

� remote line inband � sends a repeating 5-bit inband pattern (00001) to the remote end requesting that it enter into a network line loopback.

� remote payload [ fdl ] [ ansi ] � sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 line. You can specify fdl and ansi, but it is not necessary.

� remote � based on the last activate request sent to the remote end, sends the 16-bit ESF data link code word or inband pattern to deactivate the loopback at the remote end.

� network � loops the data toward the network before the data reaches the framer.

� payload � loops the data toward the network after the framer has processed the data.

Interfaces � The options available vary depending on the interface being configured.

ATM interface � This command cannot be used on a subinterface:

loopback { diagnostic | line }

no loopback

POS interface:

[ no ] loopback internal | line

� diagnostic � places the interface into internal loopback

� line � ATM interface: places the interface into external loopback; POS interface: connects the received network signal directly to the transmit network signal. When configured in line loopback mode, the system never receives data from the network.

� internal � connects the local transmitted signal to the local received signal

User Domain Name

loopback interface-number

no loopback

� interface-number � interface number in the range 1�32000

Mode(s): Controller Configuration, Interface Configuration, Domain Map Configuration

lsp-gen-intervalERX Edge Routers

249

lsp-gen-interval

Description: Sets the minimum interval at which originated IS-IS link state packets are generated on a per LSP basis. The no version restores the default interval.

Syntax: lsp-gen-interval [ level-1 | level-2 ] seconds

no lsp-gen-interval [ level-1 | level-2 ]

� level-1 � sets interval for level 1 only

� level-2 � sets interval for level 2 only

� seconds � number in the range 0�120; the minimum interval in seconds; the default value is 5 seconds


lsp-mtu

Description: Sets the maximum size of an IS-IS link state packet generated by the software. The no version restores the default MTU size of 1497 bytes.

Syntax: lsp-mtu bytes

no lsp-mtu

� bytes � number in the range 128�9180; the MTU size in bytes; the default value is 1497


lsp-refresh-interval

Description: Sets the link state packet rate at which locally generated IS-IS link state packets are periodically transmitted.The no version restores the default refresh interval.

Syntax: lsp-refresh-interval seconds

no lsp-refresh-interval

� seconds � number in the range 1�65535; the refresh interval in seconds; the default value is 900


macro250

macro

Description: Executes a macro file, which can consist of one or more macros. If you do not use the macroName option to specify a macro, the command searches in the specified macro file for a macro named �start,� and returns an error if the �start� macro is not found. If you do not specify fileName.mac, you must specify name macroName; the command then searches only in local memory for a file called macroName.mac that contains the macroName macro. There is no no version.

Syntax: macro [ test | verbose ] { fileName.mac [ macroName [ arg ]* ] |name macroName [ arg ]* }

� test � displays the output of the macro without issuing the commands to the system, and displays comments

� verbose � echoes each command as the macro executes and displays comments

� fileName � name of the file containing the macro; requires the .mac extension

� macroName � name of a macro within the macro file

� arg � zero or more arguments passed to the macro; if the argument contains a space or other special character, the argument must be enclosed within double quotation marks


Mode(s): All

map-class frame-relay

Description: Creates a map class. Command is used when configuring Frame Relay end-to-end fragmentation and reassembly. The no version removes the map-class.

Syntax: [ no ] map-class frame-relay mapName

� mapName � name of the map class; use up to 64 characters


map-groupERX Edge Routers

251

map-group

Description: Associates a map list to an NBMA interface when configuring static mapping. The no version removes the association. Use in conjunction with the map-list command.

Syntax: [ no ] map-group name

� name � name of the map group


map-list

Description: Creates a map list for an NBMA interface when configuring static mapping. The no version removes the map list. Use in conjunction with the map-group command.

Syntax: [ no ] map-list name

� name � name of the map list

Mode(s): Map List Configuration

mark252

mark

Description: Sets the precedence field of the ToS byte in the IP header to a specified value. Unlike the committed-mark-value, conformed-mark-value, and the exceeded-mark-value commands, the mark command is not tied to a rate limit profile, but marks packets based on a classifier control list. Use the suspend keyword to suspend a mark rule temporaily.The no version removes the mark rule from a policy list.

Syntax: [ no ] [ suspend ] mark { tosByteValue mask maskValue | tos-precedence tosPrecNum | dsfield dsFieldNum | tos tosNum } [ classifier-group claclName ] [ precedence precValue ]


� tosByteValue � ToS byte value to be assigned to packets; in the range 0�255

� maskValue � mask to be used when applying ToS Byte values to packets; in the range 1�255

� tosPrecNum � ToS precedence value to be assigned to packets; in the range 0�7

� dsFieldNum � DS field value to be assigned to packets; in the range 0�63

� tosNum � ToS value to be assigned to packets; in the range 0�255

� claclName � classifier control list used to classify packets for this IP precedence policy

� precValue � precedence of this rule in relation to other rules within this set in the range 0�32768


mask-val

Description: Sets the mask value. Use the mask-val command in conjunction with the committed-mark-value, conformed-mark-value, and exceeded-mark-value commands. The no version restores the default value, 255.

Syntax: [ no ] mask-val value

� value � mask value in the range 0�255. Use the following mask values to set the appropriate bits in the ToS field of the IP packet header:

� IP Precedence � 0xED (three most significant bits)

� DS Field � 0xFC (six significant bits)


match as-pathERX Edge Routers

253

match as-path

Description: Matches a BGP AS path access list. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.

Syntax: match as-path listName [ listName ]*

no match as-path [ listName ] *

� listName � name of an AS path access list; string of up to 32 characters


Mode(s): Route Map Configuration

match community

Description: Matches a BGP community list. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.

Syntax: match community listName [ listName ]* [ exact-match ]

no match community [ listName ]* [ exact-match ]

� listName � a string of up to 32 characters that designates a community list; you can optionally use a regular expression to specify the listName

� exact-match � limits the match to a route that contains only the communities contained in the specified list; cannot be used with a community list specified by a regular expression



match distance254

match distance

Description: Use to match any routes that have the specified administrative distance. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.

Note: Matching a distance is useful only when applied to a route being redistributed out of a routing table. Distance is used to determine the relative preference between routes to the same prefix in order to pick the best route to that prefix in the routing table. Distance has no meaning in any other circumstance and any attempt to match distance will fail.

Syntax: match distance distance [ distance ]*

no match distance [ distance ]

� distance � administrative distance in the range 0�255



match extcommunity

Description: Matches a BGP extcommunity list. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.

Syntax: match extcommunity listName [ listName ]* [ exact-match ]

no match extcommunity [ listName ]*



� exact-match � limits the match to a route that contains only the extended communities contained in the specified list; cannot be used with an extended community list specified by a regular expression


match ip addressERX Edge Routers

255

match ip address

Description: Matches any routes that have a destination network number address that is permitted by a standard or extended access list, a prefix list, or a prefix tree, or performs policy routing on packets. You cannot mix references in the same match command; you can only specify either access list(s), prefix list(s), or prefix tree(s). The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.

Syntax: match ip address { accessListName [ accessListName ]* | prefix-list listName [ listName ]* | prefix-tree treeName [ treeName ]* }

no match ip address [ accessListName ]* | prefix-list [ listName ]* | prefix-tree [ treeName ]*


� listName � name of a single prefix list; string of up to 32 characters

� treeName � name of a single prefix tree; string of up to 32 characters



match ip next-hop

Description: Matches any routes that have a next-hop router address passed by the specified access list, prefix list, or prefix tree. You cannot mix references in the same match command; you can only specify either access list(s), prefix list(s), or prefix tree(s). The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.

Syntax: match ip next-hop { accessListName [ accessListName ]* | prefix-list listName [ listName ]* | prefix-tree treeName [ treeName ]* }

no match ip next-hop [ accessListNumber ]* | prefix-list [ listName ]* | prefix-tree [ treeName ]*

� accessListName � name of a single standard access list; string of up to 32 characters

� listName � name of a single prefix list; string of up to 32 characters

� treeName � name of a single prefix tree; string of up to 32 characters



match level256

match level

Description: Matches import routes for the specified type. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.

Syntax: match level { backbone | level-1 | level-1-2 | level-2 | stub-area } *

no match level [ backbone | level-1 | level-1-2 | level-2 | stub-area ]

� backbone � an OSPF backbone area

� level-1 � a level 1 area

� level-1-2 � a level 1 and a level 2 area

� level 2 � a level 2 subdomain

� stub-area � an OSPF NSSA area



match metric

Description: Matches a route for the specified metric value. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.

Syntax: match metric metricValue [ metricValue ]*

no match metric [ metricValue ]

� metricValue � number in the range 0�4294967295, which indicates the preference value for a specific route in a route map



match metric-type

Description: Matches routes having the specified metric type. The no version removes the match clause from a route map.

Syntax: match metric-type { external | internal }

no match metric-type [ external | internal ]

� external � IS-IS external metric type

� internal � IS-IS internal metric type


match route-typeERX Edge Routers

257

match route-type

Description: Matches routes of the specified type. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.

Syntax: match route-type internal [ intra | inter ] [ level-1 | level-2 ] [ external [ type-1 | type-2 ] ] [ level-1 | level-2 ]*

match route-type external [ type-1 | type-2 ] [ level-1 | level-2 ] [ internal [ intra | inter ] ] [ level-1 | level-2 ]*

match route-type { level-1 | level-2 } [ internal [ intra | inter ] ] [level-1 | level-2 ] [ external [ type-1 | type-2 ] ] [ level-1 | level-2 ]*

match route-type { level-1 | level-2 } [ external [ type-1 | type-2 ] ] [ level-1 | level-2 ] [ internal [ intra | inter ] ] [ level-1 | level-2 ]*

no match route-type [ internal [ intra | inter ] | external [ type-1 | type-2 ] | level-1 | level-2 ]

� internal � internal routes

� intra � OSPF intra-area routes

� inter � OSPF interarea routes

� external � external routes

� type-1 � OSPF type 1 external routes

� type-2 � OSPF type 2 external routes

� level-1 � IS-IS level 1 routes

� level-2 � IS-IS level 2 routes



match-set summary prefix-tree

Description: Sets condition for a route map that matches routes based on the network base address set in the specified prefix tree and summarizes them by preserving only the bits set in the prefix tree. The no version disables the use of the prefix tree by the route map.

Syntax: match-set summary prefix-tree treeName

no match-set summary prefix-tree

� treeName � name of the prefix tree


match tag258

match tag

Description: Matches the tag value of the destination routing protocol. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause.

Syntax: match tag tagValue [ tagValue ]*

no match tag [ tagValue ]*

� tagValue � number in the range 0�4294967295



maximum-paths

Description: Controls the maximum number of equal-cost paths to the same destination that BGP, IS-IS, OSPF, or RIP can install in the routing table to support ECMP.

For BGP, issue the command from Router Configuration mode to apply to routes in the global RIB. In Address Family Configuration mode, issue the command only in the context of IPv4 unicast address families to apply the value only to routes in the global RIB or the specific VRF for the IPv4 unicast address family; VPNv4 address families are not supported.

For IS-IS, OSPF, or RIP, issue from Router Configuration mode.

The no version restores the default value, 1 path for BGP or 4 paths for IS-IS, OSPF, and RIP.

Syntax: For BGP:

maximum-paths [ ibgp ] maxPaths

no maximum-paths [ ibgp ] [ maxPaths ]

� ibgp � specifies that the maxPaths value applies only to routes received from internal (IBGP) peers; if this keyword is not specified, the maxPaths value applies only to routes received from external (EBGP) peers

� maxPaths � maximum number of parallel paths (routes) in the range 1�6

For IS-IS and RIP:

maximum-paths maxPaths

no maximum-paths


For OSPF:

[ no ] maximum-paths maxPaths


Mode(s): Address Family Configuration, Router Configuration, VRF Configuration

maximum routesERX Edge Routers

259

maximum routes

Description: Sets a warning threshold and maximum limit for routes imported by a PE router into a VRF from associated CE routers. The no version removes the limit and warning threshold.

Syntax: maximum routes limit { warningThreshold | warning-only }

no maximum routes

� limit � number in the range 1�4294967295 that when exceeded prevents routes from being imported into the routing table; when first exceeded generates a limit-exceeded log entry; if the route count fluctuates below and up to this value, an interval of five minutes must pass before another limit-exceeded log entry can be generated

� warningThreshold � percentage in the range 1�100 that when first exceeded generates a warning-threshold-exceeded log entry; if the route count fluctuates around this value, an interval of five minutes must pass before another warning-threshold-exceeded log entry can be generated

� warning-only � causes the limit to function as a warningThreshold; specifies that exceeding the limit generates a warning-threshold-exceeded log entry instead of a limit-exceeded log entry and permits routes exceeding the limit to be added to the routing table; if the route count fluctuates around the limit, an interval of five minutes must pass before another warning-threshold-exceeded log entry can be generated


max-lsp-lifetime

Description: Sets the maximum time that IS-IS link state packets persist without being refreshed. The no version restores the default time.

Syntax: max-lsp-lifetime seconds

no max-lsp-lifetime

� seconds � number in the range 1�65535; the lifetime of LSP in seconds; the default value is 1200 seconds


max-response-failure260

max-response-failure

Description: Terminates a test when the maxFailureValue is reached. That is, when there is no response to a designated number of operation requests, the test is terminated. This feature applies only to pathEcho entries. The no version restores the default value, five consecutive failures.

Syntax: max-response-failure maxFailureValue

no max-response-failure

� maxFailureValue � number of operation requests not responded to; 0 turns this feature off; the default is 5


max-sessions

Description: For RADIUS, specifies the number of outstanding requests to a server. The no version reverts to the default value.

For tunnelss, sets the maximum sessions per tunnel. The no version disables the feature. The default version sets the value to zero.

Syntax: For RADIUS:

max-sessions sessionLimit

no max-sessions

� sessionLimit � maximum number of outstanding requests to a specific server in the range 10�4000; the default is 255

For tunnels:

max-sessions maxSessionsPerTunnel

default max-sessions

no max-sessions

� maxSessionsPerTunnel � maximum number of sessions that can be configure on a tunnel in the range 0�4294967295; the default is zero

Mode(s): Domain Map Tunnel Configuration, Radius Configuration

mdl carrier

Description: Specifies that a T3 interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment.

Syntax: [ no ] mdl carrier


mdl stringERX Edge Routers

261

mdl string

Description: Allows you to specify an MDL message on a T3 interface as defined in the ANSI T1.107a-1990 specification. The no version restores the default value to the specified MDL message or to all MDL messages.

Syntax: mdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiCode | port portValue | generator genValue }

no mdl string { eic | fic | lic | unit | pfi | port | generator }

� eicValue � equipment identification code; 1�10 characters; default is the null value.

� ficValue � frame identification code; 1�10 characters; default is the null value.

� licValue � line identification code; 1�11 characters; default is the null value.


� pfiCode � facility identification code to send in the MDL path message; 1�38 characters; default is the null value.

� portValue � equipment port number to send in the MDL idle signal message; 1�38 characters; default is the null value.

� genValue � generator number to send in the MDL test signal message; 1�38 characters; default is the null value.


mdl transmit

Description: Transmits an MDL message from a T3 interface. The no version disables transmission of the specified MDL message or all MDL messages.

Syntax: [ no ] mdl transmit { path-id | idle-signal | test signal }

no mdl transmit

� path-id � MDL path message; default is disabled

� idle-signal � MDL idle signal message; default is disabled

� test-signal � MDL test signal message; default is disabled


medium ipv4262

medium ipv4

Description: Specifies the medium type of an L2TP or L2F tunnel to IPv4 (the only medium type currently supported). The no version restores the default value, ipv4.

Syntax: medium ipv4

no medium


member-interface

Description: Adds an MLPPP link interface�also known as an MLPPP bundle member�to an MLPPP bundle or adds an MFR link interface�also known as an MFR bundle member� to an MFR bundle. The no version deletes the specified interface from the MLPPP or MFR bundle.

Syntax: [ no ] member-interface interfaceType interfaceSpecifier

� interfaceType � interface type: serial or pos

� interfaceSpecifier � particular interface; see Interface Types and Specifiers in About This Guide


memory

Description: Configures memory warning parameters. When the system reaches the high memory utilization value, it sends warning messages. When memory usage falls to the abated memory utilization value, the system stops sending warning messages. The no version returns the memory warning parameters to the default values.

Syntax: [ no ] memory warning highUtilization abatedUtilization

� highUtilization � high memory utilization value; the range is 1�99, and the default is 85

� abatedUtilization � abated memory utilization value; the range is 1�99, and the default is 75


message-digest-key md5ERX Edge Routers

263

message-digest-key md5

Description: Enables OSPF MD5 authentication for the remote-neighbor interface and configures the MD5 key. The no version deletes an MD5 key.

Syntax: message-digest-key keyID md5 [ 0 | 8 ] msgDigestKey

no message-digest-key keyID





� msgDigestKey � the OSPF password. The password can be a continuous string of up to 16 alphanumeric characters.

Note: If all the MD5 keys have been deleted, the authentication type is still MD5, but you need to configure MD5 keys.

Note: To disable MD5 authentication for the remote-neighbor interface, use the authentication-none command.


metric-style narrow

Description: Configures the system to generate and accept only old-style IS-IS TLVs with narrow (six-bit) metric fields. If you issue this command, the value configured with the isis metric command can range only from 0�63. The no version restores the default value, which is to generate and accept only old-style TLVs with narrow (six-bit) metric fields.

Syntax: [ no ] metric-style narrow [ transition ] [ level-1 | level-2 | level-1-2 ]

� transition � configures the system to additionally accept new-style TLVs with wider metric fields

� level-1 � configuration applies only to level 1 routing


� level-1-2 � configuration applies to both level 1 and level 2 routing


metric-style transition264

metric-style transition

Description: Configures the system to generate and accept both old-style IS-IS TLVs with narrow (six-bit) metric fields and new-style IS-IS TLVs with wider metric fields. If you issue this command, the value configured with the isis metric command can range from 0�16777215. The no version restores the default value, which is to generate and accept only old-style TLVs with narrow (six-bit) metric fields.

Syntax: [ no ] metric-style transition [ level-1 | level-2 | level-1-2 ]





metric-style wide

Description: Configures the system to generate and accept only new-style IS-IS TLVs with wider metric fields. If you issue this command, the value configured with the isis metric command can range from 0�16777215. The no version restores the default value, which is to generate and accept only old-style TLVs with narrow (six-bit) metric fields.

Syntax: [ no ] metric-style wide [ transition ] [ level-1 | level-2 | level-1-2 ]

� transition � configures the system to additionally accept old-style TLVs with narrow (six-bit) metric fields





motd-banner

Description: Controls display of a message-of-the-day banner (configured with the banner command) on a particular line when a connection is initiated. The no version disables the banner.

Syntax: [ no ] motd-banner


mplsERX Edge Routers

265

mpls

Description: Enables, disables, or deletes MPLS on either a virtual router or on an interface. MPLS does not exist by default and must be created explicitly or implicitly. If it is created implicitly, MPLS remains disabled until explicitly enabled. The no mpls version halts MPLS on the virtual router or interface and deletes the MPLS configuration. The no mpls disable version enables MPLS that was previously disabled or implicitly created on the virtual router or interface.

Syntax: [ no ] mpls [ traffic-eng tunnels ] [ disable ]

� traffic-eng tunnels � optional keyword for compatibility with non-ERX implementations

� disable � stops MPLS on the virtual router, but leaves the MPLS global configuration intact


mpls atm vci range

Description: Specifies the range for virtual circuit identifiers used for MPLS on ATM major interfaces. An interface can support LDP, RSVP-TE, or both as the label distribution protocol. You can set VCI ranges independently for each protocol. If you do not specify a keyword, the range applies to both protocols. The no version deletes the range.

Syntax: mpls atm vci range [ ldp | rsvp ] minVCI maxVCI

no mpls atm vci range [ ldp | rsvp ]

� ldp � specifies the range when LDP is used as the label distribution protocol

� rsvp � specifies the range when RSVP is used as the label distribution protocol

� minVCI � lowest virtual circuit identifier acceptable for a label, a value from 33�65535

� maxVCI � highest virtual circuit identifier acceptable for a label, a value from 33�65535


mpls atm vpi range266

mpls atm vpi range

Description: Specifies the range for virtual path identifiers used for MPLS on ATM major interfaces. An interface can support LDP, RSVP-TE, or both as the label distribution protocol. You can set VPI ranges independently for each protocol. If you do not specify a keyword, the range applies to both protocols. The no version deletes the range.

Syntax: mpls atm vpi range [ ldp | rsvp ] minVPI maxVPI

no mpls atm vpi range [ ldp | rsvp ]

� ldp � specifies the range when LDP is used as the label distribution protocol

� rsvp � specifies the range when RSVP-TE is used as the label distribution protocol

� minVPI � lowest virtual path identifier acceptable for a label, a value in the range 0�255

� maxVPI � highest virtual path identifier acceptable for a label, a value in the range 0�255


mpls bandwidth

Description: Specifies the total bandwidth reservable for MPLS on the interface. The no version restores the default value of 0.

Syntax: { ip rsvp | mpls} bandwidth bandwidth

no { ip rsvp | mpls} bandwidth

� ip rsvp � keyword for compatibility with non-ERX implementations of MPLS

� mpls � specify this keyword for our MPLS implementation

� bandwidth � reservable bandwidth in kilobits per second, a value in the range 1�10000000


mpls disable

Description: Disables the specified label distribution protocol on the interface. The no version reenables the label distribution protocol when it was previously disabled on the interface.

Syntax: [ no ] mpls { ldp | rsvp } disable


mpls explicit-pathERX Edge Routers

267

mpls explicit-path

Description: Defines an explicit path by name or ID number and also enables or disables the explicit path. The no version deletes the explicit path.

Syntax: { ip | mpls } explicit-path { name name | identifier number } [ enable | disable ]

no { ip | mpls } explicit-path { name name | identifier number }

� ip � keyword for compatibility with non-ERX implementations


� name � name for the explicit path; string of up to 20 characters

� number � number identifying the explicit path in the range 1�65535

� enable � reenables the explicit path that was previously disabled on the virtual router; to prevent a partially configured explicit path from being used, do not enable it until you have finished configuring or modifying the path

� disable � disables the explicit path that was previously enabled on the virtual router


mpls ip propagate-ttl

Description: Controls the value for the TTL field in the MPLS header when a label is assigned to an IP packet. Enabled by default, this command sets the TTL to the TTL value from the IP packet header. The no version sets the value to 255 and controls how the network structure is hidden from the traceroute command. The default version reverts to the global default, causing the TTL field to be copied from the IP packet header and enabling the traceroute command to show all the hops in the network., and propagating the label TTL into the IP header at the tunnel egress.

Syntax: mpls ip propagate-ttl [ forwarded | local ]

{ no | default } mpls ip propagate-ttl [ forwarded | local ]

� forwarded � hides the network structure from traceroute only for forwarded packets

� local � hides the network structure from traceroute only for local packets


mpls label-range268

mpls label-range

Description: Specifies the range for the platform label space; all configured virtual routers can share this range. The no version restores the default values, 16�1048575.

Syntax: mpls label-range minLabel maxLabel

no mpls label-range

� minLabel � lowest number acceptable for a label, a value in the range 16�1048575

� maxLabel � highest number acceptable for a label, a value in the range 16�1048575


mpls ldp advertise-labels

Description: Controls the distribution of incoming labels distributed by LDP. The no version halts advertisement of all incoming labels or the specified labels.

Syntax: mpls ldp advertise-labels { host-only | for routeAccessList[ to neighborAccessList ] }

no mpls ldp advertise-labels { policy-list | host-only |for routeAccessList [ to neighborAccessList ] }

� host-only � advertises only labels for host routes (routes with a 32-bit mask)

� routeAccessList � name of access list identifying routes for which label advertisement is permitted or denied

� neighborAccessList � name of access list identifying neighbors to which the LSR advertises labels

� policy-list � deletes all lists configured with the for routeAccessList option


mpls ldp discovery transport-address

Description: Specifies the transport address of the local peer advertised in LDP discovery hello messages. The no version halts advertisement of the address.

Syntax: mpls ldp discovery transport-address { interface | ipAddress }

no mpls ldp discovery transport-address

� interface � specifies that the interface IP address is advertised as the transport address

� ipAddress � IP address advertised as the transport address


mpls ldp no-route retriesERX Edge Routers

269

mpls ldp no-route retries

Description: Specifies the number of attempts that will be made to set up an LSP for topology-driven LDP after a failure due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful.

Syntax: mpls ldp no-route retries retryNum

no mpls ldp no-route retries

� retryNum � number of retry attempts in the range 0�65535


mpls ldp no-route retry-time

Description: Specifies the interval in seconds between attempts to set up an LSP for topology-driven LDP after a failure due to no available route. The no version restores the default value of 30 seconds.

Syntax: mpls ldp no-route retry-time retryTime

no mpls ldp no-route retry-time

� retryTime � interval in the range 1�60


mpls ldp retries

Description: Specifies the number of attempts that will be made to set up an LSP for topology-driven LDP after a failure other than one due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful.

Syntax: mpls ldp retries retryNum

no mpls ldp retries



mpls ldp retry-time270

mpls ldp retry-time

Description: Specifies the interval in seconds between attempts to set up an LSP for topology-driven LDP after a failure other than one due to no available route. The no version restores the default value of 30 seconds.

Syntax: mpls ldp [ no-route ] retry-time retryTime

no mpls ldp retry-time



mpls ldp session retries

Description: Specifies the number of attempts that will be made to set up an LDP session. The default value of 0 means the attempts will be made until successful. The no version restores the default value.

Syntax: mpls ldp session retries retryNum

no mpls ldp session retries

� retryNum � number of attempts in the range 0�65535


mpls ldp session retry-time

Description: Use to specify the interval in seconds between attempts to set up an LDP session. The no version restores the default value of 30 seconds.

Syntax: mpls ldp session retry-time retryTime

no mpls ldp session retry-time



mpls ldp targeted-hello receive listERX Edge Routers

271

mpls ldp targeted-hello receive list

Description: Configures the list of peer addresses from which MPLS accepts targeted hello messages. The no version removes the list of peer addresses.

Syntax: [ no ] mpls ldp targeted-hello receive list { access-list accessListName | ipAddress [ ipAddress ]* }

� accessListName � string of up to 32 alphanumeric characters that identifies an access list

� ipAddress � IP address of a peer



mpls ldp targeted-hello send list

Description: Configures the list of peer addresses to which MPLS sends targeted hello messages. The no version removes the list of peer addresses.

Syntax: [ no ] mpls ldp targeted-hello send list { access-list accessListName | ipAddress [ ipAddress ]* }

� accessListName � string of up to 32 alphanumeric characters that identifies an access list

� ipAddress � IP address of a peer



mpls lsp no-route retries

Description: Specifies the number of attempts that will be made to set up an LSP for CR-LDP and RSVP-TE after a failure due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful.

Syntax: mpls lsp no-route retries retryNum

no mpls lsp no-route retries



mpls lsp no-route retry-time272

mpls lsp no-route retry-time

Description: Specifies the interval in seconds between attempts to set up an LSP for CR-LDP and RSVP-TE after a failure due to no available route. The no version restores the default value of 5 seconds.

Syntax: mpls lsp no-route retry-time retryTime

no mpls lsp no-route retry-time



mpls lsp retries

Description: Specifies the number of attempts that will be made to set up an LSP for CR-LDP and RSVP-TE after a failure other than one due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful.

Syntax: mpls lsp retries retryNum

no mpls lsp retries



mpls lsp retry-time

Description: Specifies the interval in seconds between attempts to set up an LSP for CR-LDP and RSVP-TE after a failure other than one due to no available route. The no version restores the default value of 5 seconds.

Syntax: mpls lsp [ no-route ] retry-time retryTime

no mpls lsp retry-time



mpls match exp-bitsERX Edge Routers

273

mpls match exp-bits

Description: Sets the traffic class and color for incoming traffic matching the specified EXP bits value in the MPLS shim header. The no version reverts to the default behavior for traffic matching the specified EXP bits value, setting neither traffic class nor color.

Syntax: mpls match exp-bits bitValue set traffic-class className color { green | yellow | red }

no mpls match exp-bits bitValue

� bitValue � value in the range 0�7 that matches the corresponding binary value (000�111) for the three EXP bits

� className � name of a traffic class; the system supports up to eight traffic classes

� green � sets packet color to green, indicating a low drop preference

� yellow � sets packet color to yellow, indicating a medium drop preference

� red � sets packet color to red, indicating a high drop preference


mpls match traffic-class

Description: Sets the EXP bits in the MPLS shim header of outgoing traffic matching the specified combination of traffic class and color. The no version reverts to the default behavior for traffic matching the specified traffic class and color combination. The default behavior sets the EXP bits to 000 for traffic entering an LSP and has no effect on the EXP bits for transit traffic.

Syntax: mpls match traffic-class className color { green | yellow | red } set exp-bits bitValue

no mpls match traffic-class className color { green | yellow | red }

� className � name of a traffic class; the system supports up to eight traffic classes

� green � sets packet color to green, indicating a low drop preference

� yellow � sets packet color to yellow, indicating a medium drop preference

� red � sets packet color to red, indicating a high drop preference

� bitValue � value in the range 0�7 that sets the corresponding binary value (000�111) for the three EXP bits


mpls profile274

mpls profile

Description: In Global Configuration mode, creates or modifies a configuration profile for the specified label distribution protocol�either LDP or RSVP-TE. Places the CLI in either LDP Configuration mode or RSVP Configuration mode. You can specify the name of a previously created profile to modify its parameters. If you specify a profile that was not previously configured, the command creates the new profile with the factory default settings. If you do not specify a profile name, the factory default profile is assumed. The no version deletes the specified profile.

In Interface Configuration mode, enables either LDP or RSVP-TE on the interface. You can specify the name of a profile configured in Global Configuration mode to set the parameters for the protocol. If you specify a profile that was not previously configured, the command creates the new profile with the factory default settings. If you do not specify a profile name, the factory default profile values are applied. The no mpls version deletes the protocol on the interface. The no mpls profile version reverts to the default profile on the interface.

Syntax: In Global Configuration mode:

mpls { ldp | rsvp } [ interface ] profile [ profileName ]

no mpls { ldp | rsvp } interface profile profileName

In Interface Configuration mode:

mpls { ldp | rsvp } [ profile profileName ]

no mpls { ldp | rsvp } [ profile ]

� ldp � specifies LDP as the label distribution protocol

� rsvp � specifies RSVP-TE as the label distribution protocol

� interface � keyword for compatibility with non-ERX implementations

� profileName � name of a profile to be created or modified (Global Configuration mode), applied to an interface (Interface Configuration mode), or deleted (both modes); the profile sets the values for the protocol parameters; until you modify the profile settings, the values match those of the implicit default profile


mpls-relayERX Edge Routers

275

mpls-relay

Description: Route traffic on the specified interface over an MPLS LSP.

Syntax: { mpls-relay remoteAddress | route interface interfaceType interfaceSpecifier } [ vc-id ] vcidValue [ group ID groupIdValue ]

no { mpls-relay | route } [ group ID groupIdValue ]

� mpls-relay � routes the traffic on this interface over an MPLS LSP

� remoteAddress � destination ip address

� route interface � routes the traffic on this interface over another one

� interfaceType � interface type: serial or pos

� interfaceSpecifier � particular interface; see Interface Types and Specifiers in About This Guide

� vcidValue � virtual connection ID; can be any 32-bit value. The two ends across the MPLS core must match inside each VC type.

� groupIdValue � group of virtual connections ID; can be any 32-bit value


mpls reoptimize

Description: Performs an immediate check for better paths for all existing LSPs. There is no no version.

Syntax: mpls [ traffic-eng ] reoptimize

� traffic-eng � optional keyword for compatibility with non-ERX implementations


mpls reoptimize timers frequency

Description: Specifies the frequency at which existing LSPS are checked for better paths. The no version restores the default value of 3600 seconds.

Syntax: mpls [ traffic-eng ] reoptimize timers frequency seconds

no mpls [ traffic-eng ] reoptimize timers frequency


� seconds � number of seconds in the range 0�604800; a value of zero means that no reoptimization is performed


mpls rsvp message-bundling276

mpls rsvp message-bundling

Description: Enables RSVP-TE to send bundle messages, each of which includes multiple standard RSVP-TE messages, to reduce the overall message processing overhead. The no version disables RSVP-TE message bundling.

Syntax: [ no ] mpls rsvp message-bundling

Mode(s): RSVP Configuration

mpls rsvp refresh-reduction

Description: Enables RSVP-TE summary refresh and reliability features, including the message ID object, the message ack object, and summary refresh messages. The no version disables summary refresh and reliability.

Syntax: [ no ] mpls rsvp refresh-reduction

Mode(s): RSVP Configuration

mpls spf-use-any-best-path

Description: Enables the SPF calculations to consider both the best IGP (IS-IS) paths and the MPLS tunnel to reach the tunnel endpoint. The no version restores the default value, which is to always use the MPLS tunnel to reach the tunnel endpoint�the IGP best paths are not considered.

Syntax: [ no ] mpls spf-use-any-best-path


mpls topology-driven-lsp

Description: Enables topology-driven LSP creation on the virtual router or in an IP profile. The no version disables topology-driven LSPs on the virtual router or in IP profiles.

Syntax: mpls topology-driven-lsp [ ip-profile ipProfileName ]

no mpls topology-driven-lsp [ ip-profile ]

� ipProfileName � name of an IP profile used for creating IP interfaces over topology-driven LSPs


mpls topology-driven-lsp ip-interfacesERX Edge Routers

277

mpls topology-driven-lsp ip-interfaces

Description: Enables the creation of IP interfaces over topology-driven LSPs. The no version prevents creation of IP interfaces over topology-driven LSPs.

Syntax: mpls topology-driven-lsp ip-interfaces [ egress | ingress ][ { access-list | prefix-list } listName ] [ host-only ]

no mpls topology-driven-lsp ip-interfaces [ egress | ingress ] [ host-only ][ policy-list ]

� egress � specifies that IP interfaces are created only over the LSP egress

� ingress � specifies that IP interfaces are created only over the LSP ingress

� access-list � specifies listName is an access list

� prefix-list � specifies that listName is a prefix list

� listName � name of access list or prefix list that specifies LSPs over which IP interfaces are created

� host-only � specifies that IP interfaces are created only over LSPs to host addresses

� policy-list � removes previously applied access lists or prefix lists


mpls traffic-eng

Description: Enables flooding of MPLS traffic-engineering link information into the specified IS-IS level. Flooding is disabled by default. The no version disables flooding.

Syntax: mpls traffic-eng { level-1 | level-2 }

no mpls traffic-eng { level-1 | level-2 | router-id }

� level-1 � floods IS-IS level 1

� level-2 � floods IS-IS level 2


mpls traffic-eng administrative-weight

Description: Specifies the administrative weight for the interface. The no version restores the default value, which matches the IGP-determined weight (cost).

Syntax: mpls traffic-eng administrative-weight weight

no mpls traffic-eng administrative-weight

� weight � administrative weight, a value in the range0�4294967295


mpls traffic-eng area278

mpls traffic-eng area

Description: Enables flooding of MPLS traffic-engineering link information into the specified OSPF area. Flooding is disabled by default. The no version disables flooding.

Syntax: [ no ] mpls traffic-eng area { areaId | areaIdInt }




mpls traffic-eng attribute-flags

Description: Specifies attributes for the interface for traffic engineering. The attributes are compared with tunnel affinity bits to determine links eligibility for the tunnel. The no version restores the default value, 0x0.

Syntax: mpls traffic-eng attribute-flags bitmask

no mpls traffic-eng attribute-flags

� bitmask � mask that sets the attributes, a value in the range 0x0�0xFFFFFFFF


mpls traffic-eng flood thresholdsERX Edge Routers

279

mpls traffic-eng flood thresholds

Description: Specifies thresholds for the flooding of the current reservable bandwidth throughout the network. You can configure a set of thresholds for increases or decreases in bandwidth. Flooding is triggered when the reservable bandwidth increases past any up threshold or decreases past any down threshold. The no version restores the following default values:

� For increases in bandwidth (up changes) � 15, 30, 45, 60, 75, 80, 85, 90, 95, 97, 98, 99, 100

� For decreases in bandwidth (down changes) � 100, 99, 98, 97, 96, 95, 90, 85, 80, 75, 60, 45, 30, 15

Syntax: mpls traffic-eng flood thresholds { up | down } percentage [ percentage ]*

no mpls traffic-eng flood thresholds { up | down }

� up � specifies that an increase in bandwidth past the threshold triggers flooding

� down � specifies that a decrease in bandwidth past the threshold triggers flooding

� percentage � percentage of reservable bandwidth, a value from 1 to 100 percent for increasing bandwidth and from 0 to 99 percent for decreasing bandwidth

� * � indicates that the percentage can be repeated multiple times in a list in the command line


mpls traffic-eng link-management timers periodic-flooding

Description: Specifies the interval at which bandwidth values are flooded to the entire network. Configuring a value of 0 turns off flooding.The no version restores the default value, 180.

Syntax: mpls traffic-eng link-management timers periodic-flooding frequency

no mpls traffic-eng link-management timers periodic-flooding

� frequency � interval in seconds, a value from 0 to 3600


mpls traffic-eng router-id280

mpls traffic-eng router-id

Description: Specifies a stable interface to be used as a router ID for MPLS traffic engineering with IS-IS, typically a loopback interface. The interface acts as the destination node for tunnels originating at other nodes. The no version removes the interface as a router ID.

Syntax: [ no ] mpls traffic-eng router-id interfaceType interfaceSpecifier




mpls tunnels profile

Description: Creates or disables a tunnel profile for MPLS. The no mpls tunnels profile version deletes the tunnel profile. The no mpls tunnels profile disable version reenables tunnels previously disabled.

Syntax: [ no ] mpls tunnels profile profileName [ disable ]

� profileName � name of a tunnel configuration profile used for MPLS tunnels

� disable � disables all tunnels associated with the profile


mru

Description: Sets the maximum allowable size in bytes of the maximum receive unit for CE1, cOCx/STMx, CT1, CT3, E3-FRAME, HSSI, POS, T3-FRAME, or X.21/V.35 interfaces. The no version restores the default value, which varies according to interface type.

Syntax: mru mruSize

no mru

� mruSize � maximum allowable size of the MRU

CE1, CT1, cOCx/STMx, CT3, E3-FRAME, T3-FRAME, and X.21/V.35 interfaces � default is 1600; range is 4�32765

HSSI interfaces � default is 4770; range is 4�32768

POS interfaces � default is 4470; range is 1�65529


mtraceERX Edge Routers

281

mtrace

Description: Discovers the routes that multicast packets follow when travelling to their destinations. There is no no version.

Syntax: mtrace sourceAddress [ destinationAddress [ groupAddress[ responseAddress ] ] ] [ maxHops ] [ detailed ]

� sourceAddress � DNS name or unicast IP address of the multicast-capable device at the beginning of the path.

� destinationAddress � DNS name or unicast address of the device at the end of the path. The default destination is the system from which you type the command.

� groupAddress � DNS name or multicast address of the group for which you want to trace routes. The default address is 224.2.0.1 (the group used for MBONE Audio).

� responseAddress � IP address that receives the results of the trace

� maxHops � maximum number of hops allowed for the trace. The default is 64.

� detailed � provides a detailed description of the trace, rather than a summary


mtu

Description: Sets the maximum allowable size in bytes of the maximum transmission unit for CE1, cOCx/STMx, CT1, CT3, E3-FRAME, Ethernet, HSSI, POS, T3-FRAME, or X.21/V.35 interfaces. The no version restores the default value, which varies according to interface type. This command is not available for the Ethernet interface on the SRP module.

Syntax: mtu mtuSize

no mtu

� mtuSize � maximum allowable size of the MTU

CE1, CT1, cOCx/STMx, CT3, E3-FRAME, T3-FRAME, and X.21/V.35 interfaces � default is 1600; range is 4�32765

HSSI interfaces � default is 4770; range is 4�32768

Ethernet interfaces � default is 1518; range is 64�9188, except on the FE-2 and FE-8 I.O modules, where the range is 64�9042; you cannot configure MTU on Ethernet interfaces on the SRP module

POS interfaces � default is 4470; range is 1�65529


multicast group port limit282

multicast group port limit

Description: Limits the number of IGMP groups that a port can accept. The no version restores the default situation, in which there is no limit to the number of IGMP groups the port can accept.

Syntax: multicast group port slot/port limit groupLimit

no multicast group port slot/port limit

� slot � number of slot in which the line module resides

� port � number of port

� groupLimit� maximum number of IGMP groups that an interface can accept in the range 0�64,000


neighborERX Edge Routers

283

neighbor

Description: For OSPF, configures OSPF neighbors on an NBMA network. For RIP, specifies a RIP neighbor to which the router sends unicast messages. The no version removes the neighbor (OSPF and RIP) or restores the default values (OSPF).

Syntax: For OSPF:

neighbor ipAddress [ pollinterval seconds | priority number ]

no neighbor ipAddress [ pollinterval | priority ]

� ipAddress � IP address of the neighbor�s interface; this interface must itself be configured for the NBMA network type

� number � router priority value of the neighbor in the range 1�4294967295; the default is 0

� seconds � interval in seconds at which the neighbor is polled; should be much larger than the hello interval (per RFC 1247); ranges from 0�255, the default is 120 seconds

For RIP:

[ no ] neighbor ipAddress

� ipAddress � IP address of the neighbor�s interface; this interface must be defined as a passive interface with the passive-interface command


neighbor activate

Description: Specifies a peer or peer group with which routes of the current address family are exchanged. A peer or peer group can be activated in more than one address family. By default, a peer or peer group is activated only for the IPv4 unicast address family. The address families that are actively exchanged over a BGP session are negotiated when the session is established. The no version indicates that routes of the current address family should not be exchanged with the peer or peer group. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.

Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } activate

� ipAddress � neighbor�s IP address

� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.


neighbor advertisement-interval284

neighbor advertisement-interval

Description: Sets the minimum interval between the sending of BGP updates for a given prefix. The no version restores the default interval.

Syntax: neighbor { ipAddress | peerGroupName } advertisement-interval seconds

no neighbor { ipAddress | peerGroupName } advertisement-interval [ seconds ]



� seconds � interval in seconds between update messages; range is from 0�600; default is 30 seconds for external peers and 5 seconds for internal peers


neighbor allowas-in

Description: Specifies the number of times that the AS path of a received route may contain the recipient BGP speaker�s AS number and still be accepted. The no version restores the default state, which is to reject as a loop any route whose path contains the speaker�s AS number.

Syntax: [ no ] neighbor { ipAddress | peerGroupName } allowas-in number



� number � number in the range 1�10


neighbor as-overrideERX Edge Routers

285

neighbor as-override

Description: Prevents routing loops between routers within a VPN by substituting the current router�s AS number in routing tables for that of the neighboring router. The no version halts this substitution. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.

Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } as-override


� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.


neighbor capability286

neighbor capability

Description: Controls advertisement of BGP capabilities to peers. Capability negotiation and advertisement of all capabilities, except the ORF capability, is enabled by default. The no version disables capability negotiation or prevents advertisement of the specified capability. The default version restores the default condition, advertising the capability.

Syntax: For all capabilities except ORF:

[ no | default ] neighbor { ipAddress | peerGroupName } capability { negotiation | dynamic-capability-renegotiation | four-octet-as-numbers | route-refresh | route-refresh-cisco }

For the ORF capability:

neighbor { ipAddress | peerGroupName } capability orf { prefix-list | prefix-list-cisco } { send | receive | both }

{ no | default } neighbor { ipAddress | peerGroupName } orf { prefix-list | prefix-list-cisco } [ send | receive | both ]


� peerGroupName � name of BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.

� negotiation � determines whether the capabilities option is sent in the open message while establishing a session; if it is not sent, no capability negotiation is conducted with that peer

� dynamic-capability-renegotiation � indicates support of renegotiation of capabilities (sending new capabilities or removing previously negotiated capabilities) without performing a hard clear of the BGP session

� four-octet-as-numbers � indicates support of AS numbers and sub-AS numbers that are four octets in length, a range from 0�4294967295

� route-refresh � indicates support of route-refresh messages that request the peer to resend its routes to the system, enabling the BGP speaker to apply modified or new policies to the routes when it receives them again

� route-refresh-cisco � indicates support of Cisco-proprietary (pre-standard) route-refresh messages for interoperability with older Cisco devices

� orf � indicates support of cooperative route filtering to install a BGP speaker�s inbound route filter as an outbound route filter on the peer

� prefix-list � installs the filter�any inbound prefix list or distribute list�as an outbound prefix list

� prefix-list-cisco � installs the filter�any inbound prefix list or distribute list�as an outbound Cisco proprietary prefix list

� send � sends inbound route filter to peer to install as outbound route filter

neighbor default-originateERX Edge Routers

287

� receive � accepts inbound route filter from peer and installs it as outbound route filter; cannot be configured for a peer group or a peer that is a member of a peer groups

� both � sends and accepts inbound route filters with peer for installation as outbound route filter


neighbor default-originate

Description: Allows a BGP speaker (the local router) to send the default route 0.0.0.0/0 to a neighbor for use as a default route. The no version halts sending a default route to the neighbor. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.

Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } default-originate




neighbor description

Description: Associates a textual description with a BGP neighbor. The no version removes the description.

Syntax: neighbor { ipAddress | peerGroupName } description text

no neighbor { ipAddress | peerGroupName } description



� text � up to 80 characters of text that describes the neighbor


neighbor distribute-list288

neighbor distribute-list

Description: Distributes BGP neighbor information as specified in an access list. The no version removes an entry.

Using distribute lists is one of several ways to filter BGP advertisements. You can also use route maps or use AS-path filters, as with the ip as-path access-list Global Configuration command and the neighbor filter-list command.

Syntax: neighbor { ipAddress | peerGroupName } distribute-list accessListName{ in | out }

no neighbor { ipAddress | peerGroupName } distribute-list [ accessListName ]{ in | out }



� accessListName � string of up to 32 alphanumeric characters identifying an access list

� in � applies list to incoming routes (inbound policy)

� out � applies list to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy


neighbor ebgp-multihop

Description: Allows BGP to accept route updates from external peers residing on networks that are not directly connected. The no version halts accepting such routers. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.

Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } ebgp-multihop [ ttl ]



� ttl � maximum number of hops to the peer; the value ranges from 1 to 255, with a default of 255


neighbor filter-listERX Edge Routers

289

neighbor filter-list

Description: Applies an AS path access list to advertisements inbound from or outbound to the specified neighbor, or assigns a weight to incoming routes that match the AS path access list. The no version stops the application of the list or assignment of the weight.

Syntax: To apply an access list:

neighbor { ipAddress | peerGroupName } filter-list accessListName { in | out }

no neighbor { ipAddress | peerGroupName } filter-list [ accessListName ] { in | out }

To assign a weight:

neighbor { ipAddress | peerGroupName } filter-list accessListName weight value

no neighbor { ipAddress | peerGroupName } filter-list [ accessListName ] weight [ value ]



� accessListName � name of a single AS path access list; string of up to 32 characters

� in � applies access list to incoming routes (inbound policy)

� out � applies access list to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy

� value � number in the range 0�65535; assigns relative importance to incoming routes matching AS paths


neighbor local-as290

neighbor local-as

Description: Assigns a local AS number for the specified BGP peer or peer group. The no version restores the default value set globally for the BGP instance with the router bgp command.

Syntax: neighbor { ipAddress | peerGroupName } local-as number

no neighbor { ipAddress | peerGroupName } local-as [ number ]

� ipAddress � neighbor IP address

� peerGroupName � name of the BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.

� number � number in the range 1�4294967295; the local AS to assign to the peer


neighbor maximum-orf-entries

Description: Sets the maximum number of ORF entries of a particular type that are accepted from the specified neighbor. The no version restores the default value of no limits.

Syntax: neighbor ipAddress maximum-orf-entries maximum

no neighbor ipAddress maximum-orf-entries [ maximum ]


� maximum � maximum number of ORF entries in the range 0�4294967295; the default is no limit


neighbor maximum-prefixERX Edge Routers

291

neighbor maximum-prefix

Description: Sets the number of prefixes that can be received from a neighbor. The no version removes the maximum prefix limitation.

Syntax: neighbor { ipAddress | peerGroupName } maximum-prefix maximum[ threshold ] [ strict ] [ warning-only ]

no neighbor { ipAddress | peerGroupName } maximum-prefix [ maximum ][ threshold ] [ strict ] [ warning-only ]



� maximum � maximum number of prefixes; the default is no limit

� threshold � percent of maximum at which to log a warning in the range 0�100; the default is 75

� strict � checks the maximum prefix limit against all received routes rather than the default behavior of checking it only against accepted routes

� warning-only � causes BGP software to log a warning, rather than reset the connection if the maximum or threshold value is exceeded


neighbor maximum-update-size

Description: Sets the maximum size of update messages transmitted to a BGP peer. The no version removes the maximum update size limitation.

Syntax: neighbor { ipAddress | peerGroupName } maximum-update-size value

no neighbor { ipAddress | peerGroupName } maximum-update-size [ value ]



� value � maximum update size in octets in the range 256�4096; he default is 1024


neighbor next-hop-self292

neighbor next-hop-self

Description: Forces the BGP speaker to report itself as the next hop for an advertised route it advertised to a neighbor. Typically you use this command to prevent third-party next hops from being used on NBMA media such as Frame Relay. The no version disables the feature. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.

Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } next-hop-self

� ipAddress � IP address of BGP-speaking neighbor



neighbor password

Description: Enables MD5 authentication on a TCP connection between two BGP peers. The no version disables MD5 authentication.

Syntax: neighbor { ipAddress | peerGroupName } password [ 0 | 8 ] string

no neighbor { ipAddress | peerGroupName } password

� ipAddress � IP address of the BGP neighbor that belongs to the peer group specified by the name

� peerGroupName � name of the BGP peer group to which this neighbor belongs. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.

� 0 � indicates the MD5 password is entered in unencrypted form (plaintext)

� 8 � indicates the MD5 password is entered in encrypted form (ciphertext)

� string � MD5 password, an alphanumeric text string of up to 80 characters


neighbor peer-groupERX Edge Routers

293

neighbor peer-group

Description: When used from Router Configuration mode without specifying an IP address, creates a BGP peer group. The no version removes a peer group.

When used from Router Configuration mode with an IP address or from Address Family Configuration mode, configures a BGP neighbor to be a member of a peer group. The no version removes a neighbor from a peer group.

Syntax: Creating a peer group:

neighbor peerGroupName peer-group

no neighbor peerGroupName [ peer-group ]

� peerGroupName � name of BGP peer group

Assigning members to a peer group:

neighbor ipAddress peer-group peerGroupName

no neighbor ipAddress peer-group [ peerGroupName ]

� ipAddress � IP address of the BGP neighbor that belongs to the peer group specified by the name

� peerGroupName � name of the BGP peer group to which this neighbor belongs


neighbor prefix-list

Description: Assigns an inbound or outbound prefix list. The no version removes the prefix list.

Syntax: neighbor { ipAddress | peerGroupName } prefix-list prefix-list-name { in | out }

no neighbor { ipAddress | peerGroupName } prefix-list [ prefixListName ]{ in | out }



� prefixListName � name of a BGP prefix list

� in � assigns prefix list to incoming routes (inbound policy)

� out � assigns prefix list to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy


neighbor prefix-tree294

neighbor prefix-tree

Description: Assigns an inbound or outbound prefix tree. The no version removes the prefix tree.

Syntax: neighbor { ipAddress | peerGroupName } prefix-tree prefixTreeName{ in | out }

no neighbor { ipAddress | peerGroupName } prefix-tree [ prefixTreeName ]{ in | out }



� prefixTreeName � name of a BGP prefix tree

� in � assigns prefix tree to incoming routes (inbound policy)

� out � assigns prefix tree to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy


neighbor remote-as

Description: Adds an entry to the BGP neighbor table. The no version removes an entry from the table. Specifying a neighbor with an AS number that matches the AS number specified in the router bgp Global Configuration command identifies the neighbor as internal to the local AS. Otherwise, the neighbor is considered external.

Syntax: neighbor { ipAddress | peerGroupName } remote-as number

no neighbor { ipAddress | peerGroupName } [ remote-as [ number ] ]

� ipAddress � IP address

� peerGroupName � the name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.

� number � number in the range 1�4294967295; the AS to which the neighbor belongs


neighbor remove-private-asERX Edge Routers

295

neighbor remove-private-as

Description: Removes private AS numbers in updates sent to external peers. The no version halts removing private AS numbers. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.

Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } remove-private-as

� ipAddress � neighbor's IP address



neighbor rib-out disable

Description: Disables storage of routes to the Adj-RIBs-Out table (disables rib-out) for the neighbor or peer group. Storage is disabled by default. The no version enables the route storage. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.

Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } rib-out disable

� ipAddress � neighbor�s IP address; you can independently enable or disable the Adj-RIBs-Out table for a peer, regardless of whether it is a member of a peer group

� peerGroupName � name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, a single Adj-RIBs-Out table is established for the peer group; BGP does not enable individual Adj-RIBs-Out tables for each peer group member.

Note: If you enable or disable rib-out for a peer or peer group and this action changes the current configuration, the peer session or all peer group sessions are automatically bounced.


neighbor route-map296

neighbor route-map

Description: Applies a route map to incoming or outgoing routes. If an outbound route map is specified, BGP advertises only routes that match at least one section of the route map. The no version removes a route map.

Syntax: neighbor { ipAddress | peerGroupName } route-map mapTag { in | out }

no neighbor { ipAddress | peerGroupName } route-map [ mapTag ] { in | out }


� peerGroupName � name of BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.

� mapTag � name of the route map; a string of up to 32 alphanumeric characters

� in � apply to incoming routes

� out � apply to outgoing routes; you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy


neighbor route-reflector-client

Description: Configures a system as a BGP route reflector and configures the specified neighbor as its client. The no version indicates that the neighbor is not a client. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.

Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } route-reflector-client

� ipAddress � IP address of BGP neighbor being identified as a client

� peerGroupName � name of BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.


neighbor send-communityERX Edge Routers

297

neighbor send-community

Description: Enables a BGP speaker to send a community attribute to the peer. The no version causes the speaker to send only standard communities to the peer. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.

Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } send-community [ standard | extended | both ]



� standard � sends only standard communities

� extended � sends only extended communities

� both � sends both standard and extended communities


neighbor shutdown

Description: Shuts down the specified neighbor or peer group without removing the neighbor or peer group configuration. The no version reenables a neighbor or peer group that was previously shut down. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.

Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } shutdown




neighbor soft-reconfiguration inbound298

neighbor soft-reconfiguration inbound

Description: Initiates storage of unmodified copies of routes from the specified neighbor or all members of the specified peer group. The no version halts this storage. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration.

Syntax: [ no | default ] neighbor { ipAddress | peerGroupName } soft-reconfiguration inbound




neighbor timers

Description: Sets keepalive and hold-time timers for the specified neighbor or peer group. Overrides values set for the router via the timers bgp command. The no version restores the default values.

Syntax: neighbor { ipAddress | peerGroupName } timers keepaliveTime holdTime

no neighbor { ipAddress | peerGroupName } timers [ keepaliveTime ][ holdTime ]



� keepaliveTime � interval in seconds between keepalive messages; range is from 0�65535 seconds, default is 30 seconds; a value of zero prevents BGP from sending keepalive messages

� holdTime � period in seconds that BGP waits for keepalive messages before declaring the neighbor to be unavailable; range is from 0�65535 seconds; default is 90 seconds; a value of zero informs BGP not to expect any keepalive messages


neighbor unsuppress-mapERX Edge Routers

299

neighbor unsuppress-map

Description: Restores the advertisement of routes suppressed by policy-based route flap dampening. The no version restores the default values.

Syntax: neighbor { ipAddress | peerGroupName } unsuppress-map mapTag

no neighbor { ipAddress | peerGroupName } unsuppress-map [ mapTag ]





neighbor update-source

Description: Allows a BGP session to use the IP address of any operational interface as the source address of TCP connections used by BGP. The no version restores the interface assignment to the closest interface.

Syntax: neighbor { ipAddress | peerGroupName } update-source { interfaceType interfaceSpecifier | updateSourceAddress }

no neighbor { ipAddress | peerGroupName } update-source [ interfaceType interfaceSpecifier | updateSourceAddress ]





� updateSourceAddress � the source IP address


neighbor weight300

neighbor weight

Description: Assigns a weight to a neighbor connection. The no version removes a weight assignment. All routes learned from this neighbor will have the assigned weight initially. The route with the highest weight will be chosen as the preferred route when multiple routes are available to a particular network.

The weights assigned with the match as-path and set weight route-map commands override the weights assigned using the neighbor weight and neighbor filter-list commands.

Syntax: neighbor { ipAddress | peerGroupName } weight value

no neighbor { ipAddress | peerGroupName } weight [ value ]



� value � number in the range 0�65535; the weight to assign


net

Description: Configures an IS-IS network entity title for the specified routing process. The no version removes a specific NET. You must specify a NET. You can add multiple manual area IDs by adding multiple NETs with the same system ID. The last NET cannot be removed.

Syntax: [ no ] net networkEntityTitle

� networkEntityTitle � NET that specifies the area ID and the system ID for an IS-IS routing process; can be either an address or a name; in the form of: areaID.systemID.nSelector For example:

� areaID � all bytes in front of the system ID; the number of bytes can vary from 1�13 bytes

� systemID � always 6 bytes and cannot vary

� nSelector � the last byte; always 0


47.0010.0000.0000.0001.0001.1111.1111.1111.00area ID system ID N selector

netbios-name-serverERX Edge Routers

301

netbios-name-server

Description: Assigns a Net-Bios server to subscribers of an address pool. The no version removes the association between the address pool and the Net-Bios server.

Syntax: netbios-name-server ipAddressPrimary [ ipAddressSecondary ]

no netbios-name-server

� ipAddressPrimary � IP address of preferred Netbios server

� ipAddressSecondary � IP address of secondary DNS server


netbios-node-type

Description: Specifies a Net-Bios node type. The no version restores the default situation, in which the node type is unspecified.

Syntax: netbios-node-type nodeType

no netbios-node-type

� nodeType � one of the following types of Net-Bios servers:

� b-node � Net-Bios Broadcast node

� p-node � Net-Bios Peer-to-Peer node

� m-node � Net-Bios mixed node

� h-node � Net-Bios hybrid node


network302

network

Description: For BGP, configures a BGP speaker with a prefix originating within its AS that it advertises to its peers if a non-BGP route to the prefix exists in the IP forwarding table. The no version removes the prefix.

For RIP, enables RIP on a specific network (not on a range of networks). If you do not associate a network with RIP, the system cannot advertise the network in any RIP update. The no version disables RIP on a specific network. If you do not specify a network mask, the system applies the natural mask. Use the ip rip commands to configure RIP attributes on the network.

For DHCP local server, specifies the IP addresses that the DHCP local server can provide from an address pool. The no version removes the network address and mask.

Syntax: For BGP:

[ no ] network networkNumber [ mask networkMask ] [ route-map mapTag ][ weight weight ] [ backdoor ]

� networkNumber � prefix that BGP will advertise

� networkMask � subnet mask


� weight � number in the range 0�65535; default is 32768; assigns an absolute weight to the network route that overrides a weight assigned by the redistribute command

� backdoor � lowers the preference of an EBGP route to the specified prefix by setting the administrative distance to the value of an internal BGP route. Use this option to favor an IGP backdoor route over an EBGP route to a specific network. BGP does not advertise the prefix specified with this option.

For RIP:

[ no ] network networkAddress [ networkMask ]

� networkAddress � IP address of the network

� networkMask � subnet mask; the command accepts either the standard mask (network 10.2.1.0 255.255.255.0) or the inverse mask (network 10.2.1.0 0.0.0.255)

network areaERX Edge Routers

303

For DHCP local server:

network networkAddress { networkMask | prefix }

no network [ force ]

� ipAddress � IP address of the network

� networkMask � subnet mask for the network

� prefix � network prefix

� force � deletes address pool even if the pool is in use

Mode(s): Address Family Configuration or Router Configuration for BGP; Router Configuration for RIP; Pool Configuration for DHCP local server

network area

Description: Defines the interfaces on which OSPF runs and the area ID for those interfaces. The no version deletes OSPF interfaces, ranges, and areas.

Syntax: [ no ] network ipNet maskWildCard area { areaId | areaIdInt }

� ipNet � network number

� maskWildCard � wild-card mask for the network number


� areaIdInt � OSPF area ID as a decimal value, in the range 0�4294967295

Note: Before you issue this command, you must first configure one or more interface with an IP address that is within the range specified by ipNet.


next-address

Description: Configures an IPv4 hop at the end of the MPLS explicit path. There is no no version.

Syntax: next-address ipAddress [ mask ipMask ] [ loose ]

� ipAddress � address of the node

� ipMask � [not currently used] mask for the next adjacent address

� loose � indicates the node is not necessarily directly connected (adjacent) to the previous node in the path. If loose is not configured, the configuration defaults to strict. Strict indicates that the node is directly connected to the previous node.


next-hop304

next-hop

Description: Defines the IP address of the next hop for a policy list. The classifier-group keyword and claclName argument specify the classifier control list. If you do not specify a classifier group, the system selects all packets from the interface associated with this policy list for this rule. Use the suspend keyword to suspend a filter rule temporarily. The no version removes a next hop rule from a policy list.

Note: The SRP module does not support the next-hop command.

Syntax: [ no ] [ suspend ] next-hop address [ classifier-group claclName ][ precedence precValue ]


� address � IP address for the next hop

� claclName � classifier control list used to classify packets for this next-hop policy



next-interface

Description: Defines an output interface for a policy list. Use the classifier-group option to specify the classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with this policy list for this rule. Specify a next-hop command when the interfaceType is a broadcast medium. The no version removes a next-interface rule from a policy list. The suspend version suspends a filter rule temporarily.

Note: The SRP module does not support the next-interface command.

Syntax: [ no ] [ suspend ] next-interface interfaceType interfaceNumber [ next-hop nextHop ] [ classifier-group claclName ] [ precedence precValue ]


� interfaceType � type of interface to route packets to

� interfaceNumber � number of the interface to route packets to

� nextHop � next-hop IP address

� claclName � classifier control list used to classify packets for this next-interface policy



no areaERX Edge Routers

305

no area

Description: Removes the specified OSPF area if there are no OSPF interfaces configured in the area.

Syntax: no area { areaId | areaIdInt }




no ip interface

Description: Removes the IP configuration from the interface or subinterface and disables IP processing on the interface.

Syntax: no ip interface


no log filters

Description: Turns off all log filters. To turn off a specific filter, use the no version of the log severity command that you used to add the filter.

Syntax: no log filters


no radius client

Description: Use to unconfigure all RADIUS servers for the virtual router context and to delete the RADIUS client for the virtual router context.

Syntax: no radius client


node306

node

Description: Specifies that a scheduler node be configured for each interface of the given interface type. The no version removes this rule from the QoS profile.

Syntax: [ no ] interfaceType node [ scheduler-profile schedulerProfileName ] [ group groupName ]

� interfaceType � one of the following interface types for which scheduler nodes should be configured: atm-vc, cbf, fr-vc, ip, ip-tunnel, l2tp-tunnel, vlan


� groupName � name of the traffic class group

Mode(s): QoS Profile Configuration

nrzi-encoding

Description: Use to enable NRZI encoding.

Syntax: [ no ] nrzi-encoding


ntp access-group

Description: Specifies the type of broadcasts that the system will accept and respond to, and specifies the servers from which the system will accept broadcasts. The no version enables the system to receive all NTP broadcasts on interfaces configured to receive broadcasts.

Syntax: ntp access-group { peer | serve-only | serve | query-only } accessListName

no ntp access-group { peer | serve-only | serve | query-only }

Note: The system can accept, but does not use, NTP control queries.

� peer � enables the system to receive time requests, receive NTP control queries, and synchronize itself to the servers specified on the access-list

� serve-only � enables the system to receive time requests and NTP control queries from servers specified on the access-list, but not to synchronize itself to the specified servers

� serve � enables the system only to receive time requests from the servers specified on the access-list

� query-only � enables the system only to receive NTP control queries from the servers specified on the access-list

� accessListName � name of the access list


ntp broadcast-clientERX Edge Routers

307

ntp broadcast-client

Description: Enables an interface to receive NTP broadcasts.The no version prevents an interface from receiving NTP broadcasts.

Syntax: [ no ] ntp broadcast-client


ntp broadcast-delay

Description: Sets the estimated round-trip delay between the broadcast NTP server and the system. The no version restores the round-trip delay to the default value, 3000 microseconds.

Syntax: ntp broadcast-delay delayTime

no ntp broadcast-delay

� delayTime � a value in the range 0�999999 microseconds


ntp disable

Description: Disables NTP on an interface. The no version enables NTP on an interface. The default setting is enable.

Syntax: [ no ] ntp disable


ntp enable

Description: Enables NTP services on the system and attaches the NTP client to the current virtual router. The no version disables reception of NTP packets on the system and removes the association between NTP and the virtual router. The default setting is disable.

Syntax: [ no ] ntp enable


ntp master308

ntp master

Description: Specifies the stratum number of a virtual router you configured as an NTP server. By default, if the system is configured as an NTP server, the stratum number is set to the stratum number of the master plus one. The no version restores the default stratum number.

Syntax: [ no ] ntp master [ stratumNumber ]

Note: Although you can specify a stratum number of 1, the system does not support stratum 1 service. The system can synchronize only with an NTP server, and not directly with an atomic clock or radio clock.

� stratumNumber � number in the range 1�15 that indicates how many hops the NTP server is from an accurate time source, such as a radio clock or atomic clock. Stratum n servers are n hops from an accurate time source. The default is 8.


ntp server

Description: Specifies an NTP server for time synchronization. The source option for this command overrides the ntp source command.The no version terminates NTP communications between this server and the interface.

Syntax: ntp server ipAddress [ version number ] [ prefer ] [ source interfaceType interfaceSpecifier ]

no ntp server ipAddress

� ipAddress � IP address of the NTP server

� number � value from 1 to 4; indicates the version of the NTP software on the server

� prefer � indicates that this server is the first choice for time synchronization

� source � directs responses from the NTP server to a specific interface on the system; overrides the ntp source command




ntp server enableERX Edge Routers

309

ntp server enable

Description: Enables a virtual router to act as an NTP server. The no version prevents a virtual router from acting as an NTP server.

Syntax: [ no ] ntp server enable


ntp source

Description: Directs responses from all NTP servers to a specific interface. Using the source option with the ntp server command overrides the ntp source command. The no version restores the default situation in which servers reply to the interface from which the NTP request was sent.

Syntax: ntp source interfaceType interfaceSpecifier

no ntp source




operations-per-hop310

operations-per-hop

Description: Configures the number of operations sent to a designated hop before the TTL value is increased. This option applies only to the pathEcho type. The no version restores the default value, 3.

Syntax: operations-per-hop operationsHopValue

no operations-per-hop

� operationsHopValue � number of operations per hop; the default is 3


ospf auto-cost reference-bandwidth

Description: Controls how OSPF calculates default metrics for the interface. The no version assigns cost based only on the interface type.

Syntax: [ no ] ospf auto-cost reference-bandwidth refBw

� refBw � bandwidth in megabits per second in the range 1�4294967; default is 100


ospf enable

Description: Enables OSPF on the router. The no version disables OSPF on the router.

Syntax: [ no ] ospf enable


ospf log-adjacency-changesERX Edge Routers

311

ospf log-adjacency-changes

Description: Configures the router to send a syslog message when the state of an OSPF neighbor changes. The no version turns off this feature.

Syntax: [ no ] ospf log-adjacency-changes [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ]

� severity � minimum severity of the log messages displayed for the selected category; described either by a descriptive term�severityValue�or by a corresponding number�severityNumber�in the range 0�7; the lower the number, the higher the priority:









� verbosityLevel � specifies the verbosity of the log category�s messages; can be any of the following:

� low � terse




ospf shutdown

Description: Administratively disables OSPF on the router. The no version reenables OSPF on the router.

Syntax: [ no ] ospf shutdown


overload shutdown

Description: Causes BGP to shut down when it runs out of resources. The no version restores the default behavior, which is to continue running.

Syntax: [ no ] overload shutdown


override-user312

override-user

Description: Specifies a single username and single password for all users from a domain. The no version removes the username and reverts to the original username.

Syntax: override-user [ name newName ] password newPassword

no override-user

� newName � identifier that replaces the username

� newPassword � password that replaces the user�s password


owner

Description: Configures the owner of the RTR operation. The no version restores the default value.

Syntax: owner ownerValue

no owner

� ownerValue � specifies the owner�s identifier: 0�255 ASCII characters; by default, no owner is configured


padn

Description: Configures PADN parameters for a domain name. The no version deletes the PADN parameters from the domain name.

Syntax: padn ipAddress ipmask distance

no padn ipAddress ipmask

� ipAddress � destination IP address

� ipmask � IP mask for the destination

� distance � administrative distance metric for this route in the range 0�255


passive-interfaceERX Edge Routers

313

passive-interface

Description: Modifies the transmission of routing updates for IS-IS, OSPF, and RIP.

For IS-IS, configures an IS-IS interface to only advertise its IP address in the link state PDUs; the interface does not send or receive IS-IS packets. Issue the complementary interface command to enable the interface to send and receive IS-IS packets. The no version disables the advertising of the IP address.

For OSPF, halts the transmission of routing updates on an OSPF interface. OSPF neither sends nor receives routing information through the specified interface, which appears as a stub network in the OSPF network. The no version reenables the transmission of routing updates.

For RIP, halts the transmission of multicast RIP messages. RIP messages are unicast to the interface (if it is the best path to a configured neighbor). The no version reenables the transmission of multicast messages on the interface.

Syntax: [ no ] passive-interface interfaceType interfaceSpecifier




password314

password

Description: Configures a password to be used at login on the console, a line or a range of lines; or specifies the password for an L2TP of L2F tunnel. The no version removes the password.

Syntax: Login Password:

password [ encryptionType ] passwordValue

no password

� encryptionType � one of the following types:

� 0 � unencrypted (the default)

� 5 � secret

� 7 � hidden

� passwordValue � character string that specifies the line password. The first character cannot be a number. The string can contain any alphanumeric characters, including spaces, up to 50 characters. The password checking is case sensitive. For example, the password Secret is different from the password secret.

L2TP or L2F Tunnel Password:

password tunnelPassword

no password

� tunnelPassword � up to 32-character password

Mode(s): Line Configuration for a login password; Domain Map Tunnel Configuration for a tunnel password

pathERX Edge Routers

315

path

Description: Configures paths over channelized SONET and SDH interfaces. The no version deletes a path.

Syntax: path pathChannel [ pathSpeed [ pathHierarchy ] ]

no path pathChannel

� pathChannel � number in the range 1�2147483648 that identifies the STS-1 or STM-0 line

� pathSpeed � speed of the path

� oc1, oc3, or oc12 for SONET � only oc1 or oc3 is available for cOC3/STM1 interfaces

� stm0, stm1, or stm4 for SDH � only stm0 or stm1 is available for cOC3/STM1 interfaces

Note: Although the path speed appears to be optional in the software, you must specify a value.

� pathHierarchy � identifier that defines the structure of the path

� If you specify a path speed that matches the speed of the module (for example, a path speed of oc3 for a cOC3/STM1 interface), do not specify an identifier.

� If you specify a speed of oc1 or stm0 for a cOC3/STM1 interface, the identifier is a number in the range 1�3 that represents either the STS-1 within the STS-3 or the STM-0 within the STM-1.

� If you specify a speed of oc3 or stm1 for a cOC12/STM4 interface, the identifier is a number in the range 1�4 that represents either the STS-3 within the STS-12 or the STM-1 within the STM-4.

� If you specify a speed of oc1 or stm0 for a cOC12/STM4 interface, the identifier is of the form X/Y. X is a number in the range 1�4 that represents either the STS-3 within the STS-12 or the STM-1 within the STM-4; Y is a number in the range 1�3 that represents either the STS-1 within the STS-3 or the STM-0 within the STM-1.


path ds1|e1316

path ds1|e1

Description: Creates and configures SONET and SDH tributaries. The no version deletes a tributary.

Syntax: path pathChannel { ds1 | e1 } tributaryIdentifier [ tributary-type ]

[ no ] pathChannel { ds1 | e1 } path tributaryIdentifier

� pathChannel � number in the range 1�2147483648 that identifies the path

� tributaryIdentifier � specifier for the tributary in the format pathChannel { ds1 | e1 } pathPayload/tributaryGroup/tributaryNumber

� pathPayload � payload number for the path; value is 1 for SONET and in the range 1�3 for SDH

� tributaryGroup � number in the range 1�7 that identifies the group within the path

� tributaryNumber � number of the tributary within the tributary group; the value is in the range 1�4 if the tributary type is vt15 or tu11 and in the range 1�3 if the tributary type is tu12

� tributaryType � virtual tributary type

� vt15 � default for SONET DS1 tributaries

� tu11 � default for SDH DS1 tributaries

� tu12 � default for SDH E1 tributaries


path ds1|e1 bertERX Edge Routers

317

path ds1|e1 bert

Description: Enables bit error rate tests using the specified pattern at the T1/E1 over SONET/SDH VT layer on channelized SONET and SDH interfaces. The no version stops the test that is running.

Syntax: path pathChannel { ds1 | e1 } tributaryIdentifier bert pattern pattern interval time [ unframed ]

no path pathChannel { ds1 | e1 } tributaryIdentifier bert

� tributaryIdentifier � identifier for the tributary. See description for the path ds1|e1 command.

� pattern � one of the following test patterns:

� 2^11 � pseudorandom test pattern, 2048 bits in length

� 2^15 � pseudorandom 0.151 test pattern, 32768 bits in length

� 2^20-O153 � pseudorandom 0.153 test pattern, 1048575 bits in length


� unframed � test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern occupies only T1/E1 payload bits.


path ds1|e1 channel-group shutdown

Description: Disables a DS1 or an E1 channel group for channelized SONET and SDH interfaces. DS1 and E1 channel groups are enabled by default. The no version restarts a disabled interface.

Syntax: [ no ] path pathChannel { ds1 | e1 } tributaryIdentifier channel-group channelGroupNumber shutdown




path ds1|e1 channel-group snmp trap link-status318

path ds1|e1 channel-group snmp trap link-status

Description: Enables SNMP link status processing for a DS1 or an E1 channel group of channelized SONET and SDH interfaces. The no version disables SNMP link status processing for a DS1 or E1 channel group.

Syntax: [ no ] path pathChannel { ds1 | e1 } tributaryIdentifier channel-group channelGroupNumber snmp trap link-status



� channelGroupNumber � either a fractional T1 interface in the range 1�24 or a fractional E1 interface in the range 1�31


path ds1|e1 channel-group timeslots

Description: Configures T1 or E1 line parameters for channelized SONET and SDH interfaces. To configure a line, you specify a DS1 or an E1 channel group number and assign a range of timeslots. To configure a whole T1 or E1 line, assign all the timeslots to the channel group. You can specify a line speed that applies to all DS0 timeslots assigned to a channel group. The no version removes the timeslots from the channel group.

Syntax: path pathChannel { ds1 | e1 } tributaryIdentifier channel-group channelGroupNumber timeslots range [ speed { 56 | 64 } ]

no pathChannel { ds1 | e1 } tributaryIdentifier channel-group channelGroupNumber



� channelGroupNumber � either a fractional T1 interface in the range 1�24 or a fractional E1 interface in the range 1�31

� range � specifies the timeslot assigned to the T1 or E1 channel in the range 1�31. A dash represents a range of timeslots, and a comma separates timeslots. For example, 1-10, 15-18 assigns timeslots 1�10 and 15 �18.

� speed � specifies the data rate for the T1 or E1 channel. Values are 56 Kbps or 64 Kbps. The default is 64 Kbps.


path ds1|e1 clock sourceERX Edge Routers

319

path ds1|e1 clock source

Description: Configures the transmit clock source for channelized SONET and SDH interfaces. The no version restores the default value.

Syntax: path pathChannel { ds1 | e1 } tributaryIdentifier clock source { line | internal { module | chassis } }

no path pathChannel { ds1 | e1 } tributaryIdentifier clock source



� line � interface transmits data from a clock recovered from the line�s receive data stream

� internal � interface transmits data using its internal clock. You must specify one of the following for internal clocking:




path ds1|e1 framing

Description: Configures the framing format for T1 or E1 over channelized SONET and SDH interfaces. The no version restores the default value.

Syntax: path pathChannel { ds1 | e1 } tributaryIdentifier framing framingType

no path pathChannel { ds1 | e1 } tributaryIdentifier framing



� framingType � one of the following types:

� crc4 � cyclic redundancy check (default for E1); not available for T1

� no-crc4 � no cyclic redundancy check; not available for T1

� esf � extended superframe (T1 default); not available for E1

� sf � superframe; not available for E1


path ds1|e1 loopback320

path ds1|e1 loopback

Description: Configures a loopback at the T1/E1 over SONET/SDH VT layer on channelized SONET and SDH interfaces. The no version turns off the loopback.

Syntax: path pathChannel ds1|e1 tributaryIdentifier loopback { local | network { payload | line } | remote { line fdl { ansi | bellcore } | payload [fdl ] [ ansi ] } }

no path pathChannel ds1 tributaryIdentifier loopback [ remote ]

� pathChannel � a number in the range 1�2147483648 that identifies the path


� local � loops the router output data back toward the router at the T1/E1 framer and sends an alarm indication signal out toward the network

� network { line | payload } � specify the line keyword to loop the data back toward the network before the T1/E1 framer and automatically set a local loopback at the HDLC controllers. Specify the payload keyword to loop the payload data back toward the network at the T1/E1 framer and automatically set a local loopback at the HDLC controllers.

� remote line fdl ansi (T1 line only) � sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 channel, per the ANSI T1.403 specification.

� remote line fdl bellcore (T1 line only) � sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 channel, per the Bellcore TR-TSY-000312 specification.

� remote payload [ fdl ] [ ansi ] (T1 line only) � sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 channel. You can optionally specify fdl and ansi, but it is not necessary.

Note: You cannot send an inband pattern to the remote end requesting that it enter into a network line loopback.


path ds1|e1 shutdownERX Edge Routers

321

path ds1|e1 shutdown

Description: Disables DS1 or E1 over channelized SONET and SDH interfaces. DS1 and E1 interfaces are enabled by default. The no version restarts a disabled interface.

Syntax: [ no ] path pathChannel { ds1 | e1 } tributaryIdentifier shutdown




path ds1|e1 snmp trap link-status

Description: Enables SNMP link status processing for DS1 or E1 over channelized SONET and SDH interfaces. The no version disables SNMP link status processing.

Syntax: [ no ] path pathChannel { ds1 | e1 } tributaryIdentifier snmp trap link-status


� tributaryIdentifier � the identifier for the tributary. See description for the path ds1|e1 command.


path ds1 fdl

Description: Specifies the facility data link standard for a T1 over channelized SONET or SDH interface. The no version restores the default, none.

Syntax: path pathChannel ds1 tributaryIdentifier fdl { ansi | att | all | none }

no path pathChannel ds1 tributaryIdentifier fdl [ ansi | att | all ]








path ds1 fdl carrier322

path ds1 fdl carrier

Description: Specifies that a T1 over channelized SONET or SDH interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment.

Syntax: [ no ] path pathChannel ds1 tributaryIdentifier fdl carrier




path ds1 fdl string

Description: Defines an FDL message for a T1 over channelized SONET or SDH interface as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages.

Syntax: path pathChannel ds1 tributaryIdentifier fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue |generator generatorValue }

no path pathChannel ds1 tributaryIdentifier fdl string { eic | fic | lic | unit | pfi | port | generator }







� pfiValue � facility identification code to send in the FDL path message; 1�38 characters; default is the null value

� portValue � equipment port number to send in the FDL idle signal message; 1�38 characters; default is the null value

� generatorValue � generator number to send in the FDL test signal message; 1�38 characters; default is the null value


path ds1 fdl transmitERX Edge Routers

323

path ds1 fdl transmit

Description: Configures the system to send the specified FDL message on a T1 over channelized SONET or SDH interface. The no version stops the system from sending the specified FDL message or all FDL messages.

Syntax: [ no ] path pathChannel ds1 tributaryIdentifier fdl transmit { path-id | idle-sIgnal | test-signal }

no path pathChannel ds1 tributaryIdentifier fdl transmit







path ds1 remote-loopback

Description: Enables acceptance of remote loopback requests at the T1/E1 over SONET/SDH VT layer on channelized SONET and SDH interfaces. The no version restores the factory default value, which is to reject remote loopback requests.

Syntax: [ no ] path pathChannel ds1 tributaryIdentifier remote-loopback




path ds3

Description: Creates and configures a T3 over channelized SONET interface. If you do not specify whether or not the path should be channelized, the system creates a channelized path by default. The no version deletes a path.

Syntax: path pathChannel ds3 ds3Channel { [ channelized ] | unchannelized }

no path pathChannel ds3 ds3Channel


� ds3Channel � number in the range 1�3 that identifies the path


path ds3 clock source324

path ds3 clock source

Description: Configures the transmit clock source for a a T3 over channelized SONET interface. The no version restores the default value.

Syntax: path pathChannel ds3 ds3Channel clock source { line | internal { module | chassis } }

no path pathChannel ds3 ds3Channel clock source








path ds3 framing

Description: Configures the framing format for a T3 over channelized SONET interface. The no version restores the default value.

Syntax: path pathChannel ds3 ds3Channel framing framingType

no path pathChannel ds3 ds3Channel framing



� framingType � choose one of the following:

� c-bit � default; specifies c-bit parity framing

� m23 � specifies M23 multiplexer framing


path ds3 loopbackERX Edge Routers

325

path ds3 loopback

Description: Configures a loopback at the DS3 layer for a T3 over channelized SONET interface. The no version turns off the loopback.

Syntax: path pathChannel ds3 ds3Channel loopback { local | network { payload | line } }

no path pathChannel ds3 ds3Channel loopback



� local � loops the data back toward the router and sends an alarm indication signal out toward the network

� network payload � loops the data toward the network after the framer has processed the data

� network line � loops the data toward the network before the data reaches the framer


path ds3 mdl carrier

Description: Specifies that a T3 over channelized SONET interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment.

Syntax: [ no ] path pathChannel ds3 ds3Channel mdl carrier




path ds3 mdl string326

path ds3 mdl string

Description: Allows you to configure an MDL message on a T3 over channelized SONET interface as defined in the ANSI T1.107a-1990 specification. The no version restores the default value to the specified MDL message or to all MDL messages.

Syntax: path pathChannel ds3 ds3Channel mdl string { eic eicValue | fic ficValue | generator genValue | lic licValue | pfi pfiCode | port portValue | unit unitValue }

no path pathChannel ds3 ds3Channel mdl string { eic | fic | generator | lic | pfi | port | unit }





� genValue � generator number to send in the MDL test signal message; 1�38 characters; default is the null value


� pfiCode � facility identification code to send in the MDL path message; 1�38 characters; default is the null value

� portValue � equipment port number to send in the MDL idle signal message; 1�38 characters; default is the null value

� unitValue � unit identification code; 1�6 characters; default is the null value


path ds3 mdl transmitERX Edge Routers

327

path ds3 mdl transmit

Description: Enables you to transmit an MDL message on a T3 over channelized SONET interface. The no version disables transmission of the specified message or all messages.

Syntax: [ no ] path pathChannel ds3 ds3Channel mdl transmit { path-id | idle-signal | test signal }

no path ds3 mdl transmit



� path-id � MDL path message; factory default is disabled

� idle-signal � MDL idle signal message; factory default is disabled

� test-signal � MDL test signal message; factory default is disabled


path ds3 shutdown

Description: Disables a T3 over channelized SONET interface. DS3 interfaces are enabled by default. The no version restarts a disabled interface.

Syntax: [ no ] path pathChannel ds3 ds3Channel shutdown




path ds3 snmp trap link-status

Description: Enables SNMP link status processing for a T3 over channelized SONET interface. The no version disables SNMP link status processing on an interface.

Syntax: [ no ] path pathChannel ds3 ds3Channel snmp trap link-status




path ds3 t1328

path ds3 t1

Description: Creates and configures a T1 channel on a T3 over channelized SONET interface. The no version deletes a path.

Syntax: [ no ] path pathChannel ds3 ds3Channel t1 t1Channel


� ds3Channel � number in the range 1�3 that identifies the DS3 channel

� t1Channel � number in the range 1�28 that identifies the T1 channel


path ds3 t1 bert

Description: Enables bit error rate tests using the specified pattern for a T1 channel on a T3 over channelized SONET interface. The no version stops the test that is running.

Syntax: path pathChannel ds3 ds3Channel t1 t1Channel bert pattern pattern interval time [ unframed ]

no path pathChannel ds3 ds3Channel t1 t1Channel bert




� pattern � one of the following test patterns:

� 2^11 � pseudorandom test pattern, 2,048 bits in length

� 2^15 � pseudorandom 0.151 test pattern, 32,768 bits in length

� 2^20-O153 � pseudorandom 0.153 test pattern, 1,048,575 bits in length


� unframed � test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern occupies only T1/E1payload bits.


path ds3 t1 clock sourceERX Edge Routers

329

path ds3 t1 clock source

Description: Configures the transmit clock source for a T1 channel on a T3 over channelized SONET interface.The no version restores the default value, line.

Syntax: path pathChannel ds3 ds3Channel t1 t1Channel clock source { line | internal { module | chassis } }

no path pathChannel ds3 ds3Channel t1 t1Channel clock source









path ds3 t1 framing

Description: Configures the framing format for a T1 channel on a T3 over channelized SONET interface. The no version restores the default value.

Syntax: path pathChannel ds3 ds3Channel t1 t1Channel framing framingType

no path pathChannel ds3 ds3Channel t1 t1Channel framing




� framingType � one of the following types:

� esf � default; specifies extended superframe

� sf � specifies superframe


path ds3 t1 fdl330

path ds3 t1 fdl

Description: Specifies the facility data link standard for a T1 channel on a T3 over channelized SONET interface. The no version restores the default, none.

Syntax: path pathChannel ds3 ds3Channel t1 t1Channel fdl { ansi | att | all | none }

no path pathChannel ds3 ds3Channel t1 t1Channel fdl [ ansi | att | all ]









path ds3 t1 fdl carrier

Description: Specifies that a T1 channel on a T3 over channelized SONET interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment.

Syntax: [ no ] path pathChannel ds3 ds3Channel t1 t1Channel fdl carrier





path ds3 t1 fdl stringERX Edge Routers

331

path ds3 t1 fdl string

Description: Defines an FDL message for a T1 channel on a T3 over channelized SONET interface, as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages.

Syntax: path pathChannel ds3 ds3Channel t1 t1Channel fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue |generator generatorValue }

no path pathChannel ds3 ds3Channel t1 t1Channel fdl string { eic | fic | lic | unit | pfi | port | generator }







� unitValue � unit identification code; 1�6 characters; default is the null value

� pfiValue � facility identification code to send in the FDL path message; 1�38 characters; default is the null value

� portValue � equipment port number to send in the FDL idle signal message; 1�38 characters; default is the null value

� generatorValue � generator number to send in the FDL test signal message; 1�38 characters; default is the null value


path ds3 t1 fdl transmit332

path ds3 t1 fdl transmit

Description: Configures the system to send the specified type of FDL message for a T1 channel on a T3 over channelized SONET interface. The no version stops the system from sending the specified type of FDL message or all FDL messages.

Syntax: [ no ] path pathChannel ds3 ds3Channel t1 t1Channel fdl transmit { path-id | idle-signal | test-signal }

no path pathChannel ds3 ds3Channel t1 t1Channel fdl transmit




� path-id � transmits a path identification FDL message every 10 seconds

� idle-sIgnal � transmits an idle signal FDL message every second

� test-signal � transmits a test signal FDL message every second


path ds3 t1 loopbackERX Edge Routers

333

path ds3 t1 loopback

Description: Configures a loopback for a T1 channel on a T3 over channelized SONET interface. The no version turns off the loopback.

Syntax: path pathChannel ds3 ds3Channel t1 t1Channel loopback { local | network { payload | line } | remote { line fdl { ansi | bellcore } | payload [fdl ] [ ansi ] } }

no path pathChannel ds3 ds3Channel t1 t1Channel loopback [ remote ]


� ds3Channel � a number in the range 1�3 that identifies the DS3 channel

� t1Channel � a number in the range 1�28 that identifies the T1 channel

� local � loops the router output data back toward the router at the T1 framer and sends an alarm indication signal out toward the network

� network { line | payload } � Specify the line keyword to loop the data back toward the network before the T1 framer and automatically set a local loopback at the HDLC controllers. Specify the payload keyword to loop the payload data back toward the network at the T1 framer and automatically set a local loopback at the HDLC controllers.

� remote line fdl ansi � sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 channel, according to the ANSI T1.403 specification.

� remote line fdl bellcore � sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 channel, according to the Bellcore TR-TSY-000312 specification.

� remote payload [ fdl ] [ ansi ] � sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 channel. You can optionally specify fdl and ansi, but it is not necessary.


path ds3 t1 remote-loopback334

path ds3 t1 remote-loopback

Description: Enables acceptance of remote loopback requests by a T1 channel on a T3 over channelized SONET interface. The no version restores the default value, which is to reject remote loopback requests.

Syntax: [ no ] path pathChannel ds3 ds3Channel t1 t1Channel remote-loopback





path ds3 t1 shutdown

Description: Disables a T1 channel or subchannel on a T3 over channelized SONET interface. T1 channels are enabled by default. The no version restarts a disabled interface.

Syntax: [ no ] path pathChannel ds3 ds3Channel t1 t1Channel[/subchannel] shutdown




� subchannel � fractional T1 interface in the range 1�24


path ds3 t1 snmp trap link-status

Description: Enables SNMP link status processing for a T1 channel group or subchannel for a T3 over channelized SONET interface. The no version disables SNMP link status processing for a T1 channel.

Syntax: [ no ] path pathChannel ds3 ds3Channel t1 t1Channel[ /subchannel ] snmp trap link-status






path ds3 t1 timeslotsERX Edge Routers

335

path ds3 t1 timeslots

Description: Assigns a range of DS0 timeslots to a subchannel as a single data stream for a T1 channel on a T3 over channelized SONET interface. You can optionally specify a line speed that applies to all DS0 timeslots assigned to a subchannel. The no version deletes the fractional T1 circuit.

Syntax: path pathChannel ds3 ds3Channel t1 t1Channel/subchannel timeslots range [ speed { 56 | 64 } ]

no path pathChannel ds3 ds3Channel t1 t1Channel/subchannel





� range � timeslots assigned to the T1 channel in the range 1�24; a dash represents a range of timeslots, and a comma separates timeslots. For example, 1-10, 15-18 assigns timeslots 1�10 and 15�18.

� speed � specifies the data rate for the T1 channel. Values are 56 Kbps or 64 Kbps. The default is 64 Kbps.


path e1 unframed

Description: Configures unframed E1 for channelized SONET and SDH interfaces. The no version deletes an unframed E1 interface from the path.

Syntax: [ no ] path pathChannel e1 tributaryIdentifier unframed




path overhead j1336

path overhead j1

Description: Specifies trace messages to check for connectivity between the system and the SONET/SDH device at the other end of the line. The no version restores the default situation, in which all characters of the trace message are zeros.

Syntax: [ no ] path pathChannel overhead j1 { msg | exp-msg } [ message ]

� pathChannel � identifier for the path

� For OC3 (dual port) or OCx/STMx interfaces, there is no identifier

� For cOCx/STMx interfaces, a number in the range 1�2147483648 that identifies the path

� msg � send the specified transmit message

� exp-msg � expect the specified trace message

� message � text of the message. The maximum is 15 characters for SDH mode and 62 characters for SONET mode.


path snmp trap link-status

Description: Enables SNMP link status processing for the path layer of SONET and SDH interfaces. The no version disables SNMP link status processing.

Syntax: [ no ] path [ pathChannel ] snmp trap link-status

� pathChannel � number in the range 1�2147483648 that identifies the path on a channelized interface


peak-burst

Description: Sets the peak burst for a rate limit profile. The no version restores the default value, 8192.

Syntax: [ no ] peak-burst size

� size � size in bytes in the range 8192�4294967295


peak-rateERX Edge Routers

337

peak-rate

Description: Sets the peak rate for a rate limit profile. The no version restores the default value, 0.

Syntax: [ no ] peak-rate rate

� rate � rate in bits per second in the range 0�4294967295


pim disable

Description: Disables PIM on a virtual router. The no version reenables PIM on a virtual router.

Syntax: [ no ] pim disable


ping338

ping

Description: Sends an ICMP echo request packet to the IP address that you specify. There is no no version.

Syntax: ping [ vrf vrfName ] [ ip ] destination [ packetCount ] [ timeout timeOutVal ] [ transmit-delay delayVal ] [ ttl ttlValue ] [ data-size dataSize ][ data-pattern { ones | zeros | random | hex-data hexData } ][ source { interface interfaceType interfaceSpecifier | address sourceAddr } ] [ sweep-sizes sweepMin sweepMax [ sweep-interval sweepInt ] ][ extended [ tos tosVal ] [ set-dont-fragment-bit ] [ set-router-alert ][ { loose-source-route | strict-source-route } [ srtAddrs ]* ] [ record-route numRoutes ] [ timestamp numTstamps ][ interface interfaceType InterfaceSpecifier ] ]

� vrfName � name of the VRF context

� ip � optional keyword for compatibility with non-ERX implementations

� destination � IP address or domain name of the host to ping

� packetCount � number of packets to send to the destination IP address in the range 0�4294967295; the default is 5; 0 means ping forever

� timeOutVal � number of seconds in the range 1�20 to wait for an ICMP echo reply packet before the connection attempt times out

� delayVal � number of milliseconds in the range 1�50 between transmission of each ICMP request; default is 10 ms

� ttlValue � specifies a hop count by setting the time-to-live field in the IP header in the range 1�255; default is 32

� dataSize � number of bytes comprising the IP packet and reflected in the IP header in the range 0�64000; the default is 100 bytes

� data-pattern � type of bits contained in the packet. You can set the bits to all ones, all zeros, a random mixture of ones and zeros, or a specific hexadecimal data pattern that can range from 0x0 � 0xFFFFFFFF. The default data pattern is all zeros.

� source interface � specifies an interface as the source of the packets



� source address � specifies an IP address as the source of the packets

� sourceAddr � IP address or domain name used as the source address

� sweep-sizes � configures payload sizes, enabling you to vary the sizes of the echo packets being sent. This capability is useful for determining the minimum sizes of the MTUs configured on the nodes along the path to the

pingERX Edge Routers

339

destination address. This reduces packet fragmentation which contributes to performance problems. The default is not to sweep (all packets are the same size).

� sweepMin � minimum payload size in the range 0�64000

� sweepMax � maximum payload size in the range 0�64000

� sweepInt � number of bytes to add to the size of the packet; the change in the size of subsequent ping packets while sweeping across a range of sizes. For example, you can configure the sweep interval to sweep across the range of packets from 100 bytes to 1000 bytes in increments of sweepInt. By default, send 100, 101, 102, 103...1000. If sweepInt is 5, send 100, 105, 110, 115...1000). When �sweeping,� the default interval is 1.

� extended � enables you to configure extended header attributes

� tosVal � specifies the value set in the ToS byte in the range 0�255 to support QoS offerings

� set-dont-fragment-bit � sets the don�t-fragment bit in the IP header to prevent IP from fragmenting the packet if it is too long for the MTU of a link; if the nonfragmented packet cannot be delivered, it is discarded

� loose-source-route � specifies a set of hops through which the packet must traverse; the hops do not have to be adjacent

� strict-source-route � specifies every hop through which the packet must traverse and generates an ICMP error if the exact path cannot be followed

� srtAddrs � IP addresses or domain name of the intermediate hops on the way to the destination that will be used in the loose-source or strict-source route


� numRoutes � specifies how many routes are to be recorded as the packet travels; ranges from 1 to 9

� numTstamps � specifies how many timestamps from routers are to be recorded as the packet travels; ranges from 1 to 9

� interfaceType � interface type of a destination address on the system that is configured for external loopback; see Interface Types and Specifiers in About This Guide

� interfaceSpecifier � particular interface of a destination address on the system that is configured for external loopback; format varies according to interface type; see Interface Types and Specifiers in About This Guide


ping atm interface atm340

ping atm interface atm

Description: Sets up the ATM interface or circuit to send loopback cells. There is no no version.

Syntax: ping atm interface atm interfaceSpecifier vpi vci [ end-loopback [ destination ] | seg-loopback [ destination ] ][ count cellCount ] [ timeout #OfSeconds ]


� vpi � virtual path identifier

� vci � virtual circuit identifier. By default F5 end-to-end loopback OAM cells are used for the ping operation.

� To send F4 segment loopback cells, set the VCI to 3.

� To send F5 end-to-end loopback cells, set the VCI to 4.

� end-loopback � sends the ping to the connection endpoint

� seg-loopback � sends the ping to the first segment endpoint

� destination � value of the location ID included the loopback cell. The location ID is a 16-octet field, and the destination portion is 4 octets. You can set the destination to a specific location ID or to 0s (zeros) or 1s (ones). If the destination is set to:

� 0s � loopback location ID in the loopback cell is initialized to all 0s, and each segment endpoint in the network responds to the ping.

� 1s � loopback location ID in the loopback cell is initialized to all 1s, and only the connection endpoint responds to the ping.

The default value is 0xFFFFFFFF, which causes the loopback location ID in the loopback cell to be initialized to all 1s.

� cellCount � number of OAM echo cells to send to the destination. The default value is 5. The range is 1�32.

� timeout � amount of time to wait for a response to the sent OAM cell. If no response is received when this time expires, the system sends the next cell. This process is repeated for the number of cells specified in the cellCount parameter.

� #OfSeconds � number of seconds in the timeout period. The default value is 5 seconds. The range is 1�5 seconds.


policy-listERX Edge Routers

341

policy-list

Description: Creates or modifies a policy list. If you execute a policy-list command and type exit, the system creates a policy list with no rules, the default. When no rules are found in a policy list, the system automatically inserts a default filter rule. Attaching this policy list to an interface will filter all packets on that interface. The no version removes a policy list.

Syntax: [ no ] policy-list policyName

� policyName � name associated with the policy list


pos framing

Description: Sets the type of framing for a POS interface. There is no no version.

Syntax: pos framing { sdh | sonet }

� sdh � uses SDH framing format

� sonet � uses SONET framing format (the default)


pos scramble-atm

Description: Enables payload scrambling on a POS interface. When enabled, both sides of the connection must be using the scrambling algorithm. The system uses a 43rd-order synchronous scrambler to scramble the output data. The no version disables scrambling on the POS interface.

Syntax: [ no ] pos scramble-atm


ppp authentication342

ppp authentication

Description: Requests authentication from a PPP peer system. The no version removes the authentication requirement.

Syntax: ppp authentication [ virtual-router vrName ] chap [ pap ] | pap [ chap ]

no ppp authentication

� vrName � name of a virtual router to be used as the authentication virtual router

� chap � specifies CHAP authentication protocol. If the peer system refuses to use CHAP and you additionally specified PAP on the command line, the system requests the PAP protocol. If the peer system refuses to negotiate authentication, the system terminates the session.

� pap � specifies PAP authentication protocol. If the peer system refuses to use PAP and you additionally specified CHAP on the command line, the system requests the PAP protocol.


ppp aaa-profile

Description: Maps an AAA profile to static and dynamic, multilink and nonmultilink PPP interfaces. The no version removes the AAA profile assignment to the PPP interface.

Syntax: ppp aaa-profile profileName

no ppp aaa-profile

� profileName � name of the AAA profile; 32 characters maximum


ppp chap-challenge-lengthERX Edge Routers

343

ppp chap-challenge-length

Description: Modifies the length of the CHAP challenge by specifying the minimum and maximum allowable length. The no version restores the defaults.

Caution: We recommend that you do NOT use the ppp chap-challenge-length command; increasing the minimum length (from the default 16 bytes) or decreasing the maximum length (from the default 32 bytes) reduces the security of your system.

Syntax: ppp chap-challenge-length minLength maxLength

no ppp chap-challenge-length

� minLength � minimum length of the CHAP challenge in bytes in the range 8�63; default value is 16 bytes

� maxLength � maximum length of the CHAP challenge in bytes in the range 8�63; value must be equal to or greater than the minimum length; default value is 32 bytes


ppp description

Description: Assigns a text description or alias to a static PPP interface. The no version removes the text description or alias.

Syntax: ppp description name

no ppp description

� name � text description or alias for the ppp interface; up to 64 characters


ppp ipcp netmask

Description: Explicitly enables the IPCP option 0x90 on a per-PPP interface basis, either in a profile or on a static interface. By default, the IPCP option 0x90 is disabled on the interface. The no version disables the IPCP option 0x90.

Syntax: [ no ] ppp ipcp netmask


ppp keepalive344

ppp keepalive

Description: Specifies a keepalive value. The keepalive mechanism tracks the status of the connection. The no version disables keepalive. High-density mode is automatically selected when PPP is layered over ATM, Tunnel, or PPPoE. Low-density mode is selected when PPP is layered over HDLC.

Syntax: ppp keepalive [ seconds ]

no ppp keepalive

� seconds � keepalive timeout period in the range 30�300 seconds for high-density mode or 10�300 seconds for low-density mode. The default is 30.


ppp log

Description: Enables PPP packet or state machine logging on any dynamic interface that uses the profile being configured. The no version disables the logging.

Syntax: [ no ] ppp log logCategory

� logCategory � one of the following categories

� pppPacket � enables PPP packet logging

� pppStateMachine � enables PPP state machine logging


ppp magic-number disable

Description: Disables negotiation of the local magic number. Issuing this command prevents the system from detecting loopback configurations. The no version enables negotiation.

Syntax: [ no ] ppp magic-number disable


ppp max-bad-authERX Edge Routers

345

ppp max-bad-auth

Description: Specifies the maximum number of authentication retries the system accepts before terminating a PPP session. The no version returns the value to the default.

Syntax: ppp max-bad-auth maxBadAuth

no ppp max-bad-auth

� maxBadAuth � number of authentication retries after which the interface resets itself in the range: 0�7. The default is 0, which indicates that no retries are allowed.


ppp mru

Description: Sets the maximum allowable size in bytes of the maximum receive unit for PPP or MLPPP serial interfaces. If the command is executed from an encapsulated PPP or MLPPP serial interface, it affects only that interface. If executed from an MLPPP bundle, it affects all serial member links within that bundle. The no version restores the default value, which varies according to module type.

Syntax: ppp mru mruSize

no ppp mru

� mruSize � the maximum allowable size of the MRU; the range is from 64�65535


ppp multilink enable

Description: Enables creation of dynamic MLPPP interfaces when used in a profile. The no version causes the LNS to reject any incoming requests to establish dynamic MLPPP interfaces.

Syntax: [ no ] ppp multilink enable


ppp passive-mode346

ppp passive-mode

Description: Forces dynamic and static PPP interfaces into passive mode before LCP negotiation begins for a period of one second, enabling slow clients time to start up and to initiate LCP negotiation. The no version disables passive mode.

Syntax: [ no ] ppp passive-mode


ppp peer

Description: Resolves conflicts when the system and the PPP peer system have the primary and secondary DNS and WINS name server addresses configured with different values. If the PPP peer system has the address and the system does not, the peer always supplies the address regardless of how you have configured the PPP peer. The no version configures the system to take precedence during setup negotiations between the system and the remote personal computer client.

Syntax: [ no ] ppp peer { dns | wins }

� dns � sets the peer to take precedence over the system for resolving conflicts in the DNS primary and secondary addresses

� wins � sets the peer to take precedence over the system for resolving conflicts in the WINS primary and secondary addresses


ppp shutdown

Description: Stops a PPP session. For MLPPP, issue only in the context of a network interface; the command disables the service for the MLPPP network interface (MLPPP bundle). The no version restarts a PPP session.

Syntax: [ no ] ppp shutdown [ ip | mpls | osi ]

� ip � disables the IPCP service

� mpls � disables MPLS service

� osi � disables the OSINLCP service


pppoeERX Edge Routers

347

pppoe

Description: Creates a PPPoE major interface. The no version removes the interface.

Syntax: [ no ] pppoe


pppoe acName

Description: Allows you to configure an access concentrator name for a PPPoE interface or profile. If no AC name is configured, the system name is used. The no version removes the access concentrator name.

Syntax: pppoe acName string

no pppoe acName

� string � AC name; 64 characters maximum


pppoe auto-configure

Description: Sets up the system to dynamically create PPPoE subinterfaces on the PPPoE major interfaces. The no version removes this configuration.

Syntax: [ no ] pppoe auto-configure


pppoe always-offer

Description: Sets up the system to offer to set up a session, even if the system has insufficient resources to establish a session. The no version disables this feature, and is the default setting.

Syntax: [ no ] pppoe always-offer

Mode(s): Subinterface Configuration, Profile Configuration

pppoe duplicate-protection

Description: Sets up the system to prevent a client from establishing more than one session using the same MAC address. The no version disables this feature, and is the default setting.

Syntax: [ no ] pppoe duplicate-protection

Mode(s): Subinterface Configuration, Profile Configuration

pppoe log pppoeControlPacket348

pppoe log pppoeControlPacket

Description: Enables packet trace logging on PPPoE dynamic interfaces created using the profile being configured. Packet trace information is logged to the pppoeControlPacket log. The no version disables the logging.

Syntax: [ no ] pppoe log pppoeControlPacket


pppoe motm

Description: Causes the PPPoE application to send a PADM message of the minute message. The no version disables the message.

The recipient of the message is determined by the mode from which the command is issued. From Privileged Exec mode the message is sent to all PPPoE clients connected to the system; from Interface Configuration mode the PADM message is sent to the client as it is configured (if connected); and from Profile Configuration mode the message is sent to the new client created when the profile is dynamically attached to an IP interface. The MOTM string is passed with no changes.

Syntax: pppoe motm string

no pppoe motm

� string � message sent

Mode(s): Privileged Exec, Interface Configuration, Profile Configuration

pppoe sessions

Description: Specifies the number of subinterfaces permitted on a PPPoE interface. The command affects only subinterfaces that are created after the command is entered. Previously created interfaces remain, even if their number exceeds the new value of the sessions parameter. The no version restores the default value, 4094.

Syntax: pppoe sessions sessions

no pppoe sessions

� sessions � number of subinterfaces permitted on the interface in the range 1�4094; the default is 4094


pppoe subinterfaceERX Edge Routers

349

pppoe subinterface

Description: Creates a PPPoE subinterface on an FE, GE, or ATM interface.

Syntax: [ no ] pppoe subinterface interfaceType interfaceSpecifier




pppoe url

Description: Causes the PPPoE application to send string to the new client. The no version disables the message.

The recipient of the message is determined by the mode from which the command is issued. From Interface Configuration mode the PADM message is sent to the client as it is configured (if connected). From Profile Configuration mode the message is sent to the new client created when the profile is dynamically attached to an IP interface.

Syntax: pppoe url url

no pppoe url

� url � URL string sent


preference

Description: Specifies the preference value for an L2TP or L2F tunnel in Domain Map Configuration mode. The no version restores the default value, 0.

Syntax: preference tunnelPreference

no preference

� tunnelPreference � tunnel preference in the range 0�2000; 0 is the highest preference


profile350

profile

Description: When used from Global Configuration mode, the command creates a profile. Use profiles to configure interfaces dynamically, allowing you to manage a large number of interfaces effectively. The no version removes the profile.

When used from Subinterface Configuration mode, the command assigns a profile to an interface. Use profiles to configure interfaces dynamically, allowing you to manage a large number of interfaces effectively. The no version removes the profile assigned to the interface.

When used from L2TP Destination Profile Host Configuration mode, sets an attribute of the current remote host. The no version removes the attribute from the remote host.

Syntax: To assign a profile name for a remote host:

[ no ] profile profileName

To create a profile or assign a profile to a subinterface:

profile [ bridgedEthernet | ip | ppp | pppoe | any ] profileName

no profile [ bridgedEthernet | ip | ppp | pppoe | any ]

� bridgedEthernet � specifies a bridged Ethernet encapsulation type to which the profile applies

� ip � specifies an IP encapsulation type to which the profile applies

� ppp � specifies a PPP encapsulation type to which the profile applies

� pppoe �specifies a PPPoE encapsulation type to which the profile applies

� any � specifies any auto-configured encapsulation that does not have a specific profile assignment

� profileName � profile name of up to 80 characters

Mode(s): Global Configuration, Subinterface Configuration, L2TP Destination Profile Host Configuration

qos-mode-port

Description: Configures an ATM port for per-port queuing. The no version removes per-port queuing on the ATM port.

Syntax: [ no ] qos-mode-port


qos-port-type-profileERX Edge Routers

351

qos-port-type-profile

Description: Associates a QoS profile with all the ports of a given interface type. There is no no version for this command.

Syntax: [ no ] qos-port-type-profile interfaceType qos-profile qosProfileName

� interfaceType � one of the following interface types to be associated with the QoS port-type profile: atm, ethernet, serial, server-port

� qosProfileName � name of the QoS profile


qos-profile

Description: In Global Configuration mode, creates a QoS profile on your system. The no version deletes the QoS profile in Global Configuration mode.

In Interface Configuration mode, attaches a QoS profile to a given interface. The no version detaches the QoS profile from the interface in Interface Configuration mode.

Syntax: [ no ] qos-profile qosProfileName



query-interval

Description: Specifies how often the system sends PIM router query messages to remote neighbors. The no version specifies the default time interval, 30 seconds.

Syntax: query-interval queryTime

no query-interval

� queryTime � interval in the range 0�210 seconds at which the system sends PIM router query messages from this interface


queue352

queue

Description: Specifies that a queue traffic class be configured for the selected interface type. The no version removes this rule from the QoS profile.

Syntax: [ no ] interfaceType queue traffic-class trafficClassName [ queue-profile queueProfileName ] [ scheduler-profile schedProfileName ] | [ scheduler-profile schedProfileName ] [ queue-profile queueProfileName ] ]

� interfaceType � one of the following interface types for which queue traffic classes should be configured: atm, atm-vc, cbf, ethernet, fr-vc, ip, ip-tunnel, l2tp-tunnel, serial, server-port, vlan

� trafficClassName � name of the traffic class

� queueProfileName � name of the queue profile

� schedProfileName � name of the scheduler profile

Mode(s): QoS Profile Configuration

queue-profile

Description: Configures a queue profile. The no version removes the named queue profile.

Syntax: [ no ] queue-profile queueProfileName



radius acct-session-id-format

Description: Configures the RADIUS client�s use of a specific format for RADIUS attribute 44, Acct-Session-Id. The no version negates the Acct-Session-Id format.

Syntax: radius acct-session-id-format { decimal | description }

no radius acct-session-id-format


radius algorithmERX Edge Routers

353

radius algorithm

Description: Specifies the algorithm that the RADIUS client uses to contact the RADIUS server. The no version restores the default value, direct.

Syntax: radius algorithm direct | round-robin

no radius algorithm

� direct � contacts the first AAA server on the list for each user, and the second if the first one fails, and so on.

� round-robin � contacts the first AAA server for the first user, and the second for the second user, and so on.


radius calling-station-delimiter

Description: Specifies the delimiter for DSL PPP users for RADIUS attribute, Calling-Station-Id. The no version removes the delimiter.

Syntax: radius calling-station-delimiter delimiter

no radius calling-station-delimiter

� delimiter � special character to set off items in the Calling-Station-Id�s definition (for example, # or %)


radius calling-station-format354

radius calling-station-format

Description: On a virtual router, specifies the format of RADIUS attribute 31, Calling-Station-Id, when the PPP user is terminated at the non-LNS ERX system. The no version returns the Calling-Station-Id format to delimited.

Syntax: radius calling-station-format delimited | fixed-format

no radius calling-station-format

� delimited � specifies that the RADIUS client uses the delimited format:delimiter systemName delimiter interfaceDescription delimiter vpi delimiter vci

In the case of Ethernet vpi delimiter vci is replaced with vlan.

� fixed-format � specifies that the RADIUS client uses the fixed format:systemName (up to four bytes) slot (two bytes) port (one byte) VPI (three bytes) VCI (five bytes)

� All fields are in ASCII, making the format up to 15 characters in length.

� In the case of Ethernet, the VPI and VCI bytes are replaced by an 8-byte VLAN.

� In the case of PPP terminated from LNS, the Calling-Station-Id attribute is the value passed as the calling-station AVP.


radius client

Description: This command has only a no version. See the no radius clientcommand for a complete description and syntax.

radius dsl-port-typeERX Edge Routers

355

radius dsl-port-type

Description: Sets RADIUS attribute 61, NAS-Port-Type, in RADIUS access request packets and accounting start and stop packets for ATM interfaces. The no version restores the default setting of xdsl.

Syntax: radius dsl-port-type { sdsl | adsl-cap | adsl-dmt | idsl | xdsl | virtual }

no radius dsl-port-type

� sdsl � symmetric DSL

� adsl-cap � asymmetric DSL, carrierless amplitude phase modulation

� adsl-dmt � asymmetric DSL, discrete multitone

� idsl � ISDN DSL

� xdsl � DSL of unspecified type (default)

� virtual � virtual


radius ethernet-port-type

Description: Indicates to RADIUS which Ethernet port type to use in RADIUS attribute 61, NAS-Port-Type, for all Ethernet users on the ERX.

Syntax: radius ethernet-port-type [ virtual | ethernet ]

no radius ethernet-port type

� virtual � sets RADIUS NAS-Port-Type to virtual

� ethernet � sets RADIUS NAS-Port-Type to Ethernet


radius ignore framed-ip-netmask

Description: Ignores the Framed-Ip-Netmask attribute 9, returned by RADIUS in the access-accept packet. The default is enable. The no version restores the default.

Syntax: radius ignore framed-ip-netmask enable | disable

no radius ignore framed-ip-netmask


radius include356

radius include

Description: Configures the inclusion of RADIUS attributes in RADIUS messages. Not all attributes are available in all message types. All attributes are included by default except for tunnel-server-attributes. The no version restores the default.

Syntax: radius include attributeName { access-request | acct-start | acct-stop } { enable | disable }

no radius include attributeName { access-request | acct-start | acct-stop }

� attributeName � one of the following RADIUS attributes; not all attributes are available in all message types:

Attributes available for Access-Request, Acct-Start, and Acct-Stop messages:

� acct-tunnel-connection � includes RADIUS attribute 68, Acct-Tunnel-Connection

� called-station-id � includes RADIUS attribute 30, Called-Station-Id

� calling-station-id � includes RADIUS attribute 31, Calling-Station-Id

� connect-info � includes RADIUS attribute 77, Connect-Info

� nas-identifier � includes RADIUS attribute 32, NAS-Identifier

� nas-port � includes RADIUS attribute 5, NAS-Port,

� nas-port-id � includes RADIUS attribute 87, NAS-Port-Id

� nas-port-type � includes RADIUS attribute 61, NAS-Port-Type

� pppoe-description � includes RADIUS attribute 26-24, Pppoe-Description

� tunnel-client-auth-id � includes RADIUS attribute 90, Tunnel-Client-Auth-Id

� tunnel-client-endpoint � includes RADIUS attribute 66, Tunnel-Client-Endpoint

� tunnel-medium-type � includes RADIUS attribute 65, Tunnel-Medium-Type

� tunnel-server-attributes � includes all supported tunnel server attributes, that is, the attributes of the tunnel client when PPP is terminated at the LNS on the system

� tunnel-server-auth-id � includes RADIUS attribute 91, Tunnel-Server-Auth-Id

� tunnel-server-endpoint � includes RADIUS attribute 67, Tunnel-Server-Endpoint

� tunnel-type � includes RADIUS attribute 64, Tunnel-Type

radius includeERX Edge Routers

357

Attributes available for Access-Request messages only:

� acct-session-id � includes RADIUS attribute 44, Acct-Session-Id

Attributes available for Acct-Start messages only:

� framed-ip-addr � includes RADIUS attribute 8, Framed-IP-Address

Attributes available for Acct-Start and Acct-Stop messages only:

� acct-link-count � includes RADIUS attribute 51, Acct-Link-Count

� acct-multi-session-id � includes RADIUS attribute 50, Acct-Multi-Session-ID

� class � includes RADIUS attribute 25, Class

� egress-policy-name � includes RADIUS attribute 26-11, Egress-Policy-Name

� event-timestamp � includes RADIUS attribute 55, Event-Timestamp

� framed-compression � includes RADIUS attribute 13, Framed-Compression

� framed-ip-netmask � includes RADIUS attribute 9, Framed-IP-Netmask

� ingress-policy-name � includes RADIUS attribute 26-10, Ingress-Policy-Name

� tunnel-assignment-id � includes RADIUS attribute 82, Tunnel-Assignment-Id

� tunnel-preference � includes RADIUS attribute 83, Tunnel-Preference

Attributes available for Acct-Stop messages only:

� input-gigapkts � includes RADIUS attribute 26-35, Acct-Input-Gigapackets

� input-gigawords � includes RADIUS attribute 52, Acct-Input-Gigawords

� output-gigapkts � includes RADIUS attribute 26-36, Acct-Output-Gigapackets

� output-gigawords � includes RADIUS attribute 53, Acct-Output-Gigawords

� access-request � specifies RADIUS Access-Request messages

� acct-start � specifies RADIUS Acct-Start messages

� acct-stop � specifies RADIUS Acct-Stop messages

� enable � enables attribute inclusion

� disables � disables attribute inclusion; the attribute is excluded


radius nas-identifier358

radius nas-identifier

Description: Configures the RADIUS client�s value for RADIUS attribute 32, NAS-Identifier. The no version deletes the NAS-Identifier.

Syntax: radius nas-identifier identifierValue

no radius nas-identifier

� identifierValue � value in the range is 1� 64 characters; this value is used in the NAS-Identifier attribute for authentication and accounting requests


radius nas-port-format

Description: Configures the RADIUS client�s use of a specific format for RADIUS attribute 5, NAS-Port. The no version removes the format.

Syntax: radius nas-port-format { 0ssssppp | ssss0ppp }

no radius nas-port-format

� 0ssssppp � sets the RADIUS client to use the 0ssssppp format where �s� is slot and �p� is port

� ssss0ppp � sets the RADIUS client to use the ssss0ppp format where �s� is slot and �p� is port


radius override nas-ip-addr tunnel-client-endpoint

Description: Configures the RADIUS client (LNS) to use the tunnel-client-endpoint (LAC) IP address for RADIUS attribute 4, NAS-IP-Address. The no version restores the default address.

Syntax: radius override nas-ip-addr tunnel-client-endpoint

no radius override nas-ip-addr

� radius � configures the RADIUS server

� override � configures the RADIUS client to override the standard use for an attribute

� nas-ip-addr � configures the RADIUS client value for the nas-ip-addr attribute

� tunnel-client-endpoint � configures the RADIUS client to use the tunnel-client-endpoint in an attribute


radius rollover-on-rejectERX Edge Routers

359

radius rollover-on-reject

Description: On a virtual router, specifies whether the system should roll over to the next RADIUS server when the system receives an access-reject message for the user it is authenticating. The no version restores the default value, disable.

Syntax: radius rollover-on-reject { enable | disable }

no radius rollover-on-reject


radius server

Description: Specifies the IP address of a RADIUS authentication and accounting servers. The no version deletes the instance of the RADIUS server.

Syntax: radius { authentication | accounting } server ipAddress

no radius { authentication | accounting } server ipAddress

� authentication � configure the RADIUS authentication server

� accounting � configure the RADIUS accounting server

� ipAddress � IP address of the server


radius trap acct-server-not-responding

Description: Enables or disables SNMP traps when a particular RADIUS accounting server fails to respond to a RADIUS accounting request. The no version restores the default value, disable.

Syntax: [ no ] radius trap acct-server-not-responding { enable | disable }


radius trap auth-server-not-responding

Description: Enables or disables SNMP traps when a particular RADIUS authentication server fails to respond to a RADIUS Access-Request message. The no version restores the default value, disable.

Syntax: [ no ] radius trap auth-server-not-responding { enable | disable }


radius trap no-acct-server-responding360

radius trap no-acct-server-responding

Description: Enables or disables SNMP traps when all of the configured RADIUS accounting servers per VR fail to respond to a RADIUS accounting request. The no version restores the default value, disable.

Syntax: [ no ] radius trap no-acct-server-responding { enable | disable }


radius trap no-auth-server-responding

Description: Enables or disables SNMP traps when all of the configured RADIUS authentication servers per VR fail to respond to a RADIUS Access-Request message. The no version restores the default value, disable.

Syntax: [ no ] radius trap no-auth-server-responding { enable | disable }


radius tunnel-accounting

Description: Enables or disables tunnel accounting. The no version restores the default value, disable.

Syntax: radius tunnel-accounting { enable | disable }

no radius tunnel-accounting


radius udp-checksum

Description: Enables or disables UDP checksum for RADIUS packets on virtual routers you configure for B-RAS. The no version restores the default value, enable.

Syntax: radius udp-checksum { enable | disable }

no radius udp-checksum


radius update-source-addrERX Edge Routers

361

radius update-source-addr

Description: Specifies an alternate source IP address for the system to use rather than the default router ID. The no version deletes the alternate address, and the system uses the router ID.

Syntax: radius update-source-addr sourceAddr

no radius update-source-addr

� sourceAddr � source address of the RADIUS client


rate-limit-profile

Description: From Global Configuration mode, creates a rate limit profile and accesses Rate Limit Profile Configuration mode. The no version removes the rate limit profile.

From Policy Configuration mode, specifies a rate limit profile as a rule in a policy list. The no version removes a rate limit profile from a policy list. The suspend version suspends the rule temporarily.

Syntax: To create a rate limit profile:

[ no ] rate-limit-profile profileName [ rateLimitProfileType

� profileName � name of the rate limit profile

� rateLimitProfileType � one-rate or two-rate

To specify a rate limit profile in a policy:

[ no ] [ suspend ] rate-limit-profile profileName [ classifier-group claclName ][ precedence precValue ]

� profileName � name of the rate limit profile to be created or to be used in a policy

� claclName � classifier control list used to classify packets for this rate limit profile


Mode(s): Global Configuration, Policy Configuration

rd362

rd

Description: Specifies the unique two-part route distinguisher for a VRF. There is no no version.

Syntax: rd distinguisher

� distinguisher � unique two-part identifier of the format number1:number2 where:

� number1 � AS number or an IP address

� number2 � unique integer; 32 bits if number1 is an AS number; 16 bits if number1 is an IP address


receive version

Description: Restricts the RIP version that the system can receive on a RIP remote-neighbor interface. The no version sets the remote-neighbor interface back to the default value, receiving both RIP version 1 and version 2.

Syntax: receive version [ 1 ] [ 2 ] [ off ]

no address receive version





redistributeERX Edge Routers

363

redistribute

Description: Redistributes routes from one routing domain into another routing domain. For DVMRP, only routes that appear in the RPF table can be redistributed. The no version ends redistribution of information.

Syntax: The options available vary depending on your routing protocol context; that is, on whether you are configuring BGP, DVMRP, IS-IS, OSPF, or RIP.

BGP:

redistribute { fromProtocol | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ metric absoluteValue | route-map mapTag | weight wtValue ]*

no redistribute { fromProtocol | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ metric [ absoluteValue ] |route-map [ mapTag ] | weight [ wtValue ] ]*

DVMRP:

[ no ] redistribute fromProtocol [ route-map mapTag ]

IS-IS:

redistribute { fromProtocol | static [ ip ] | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ level-1 | level-1-2 | level-2 | metric absoluteValue | metric-type { external | internal } | route-map mapTag ]*

no redistribute { fromProtocol | static [ ip ] | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ level-1 | level-1-2 | level-2 | metric [ absoluteValue ] | metric-type { external | internal } | route-map [ mapTag ] ]*

OSPF:

redistribute { fromProtocol | ospf match internal } [ metric-type [ 1 | 2 ] | metric absoluteValue | tag tagValue | route-map mapTag ]*

no redistribute { fromProtocol | ospf match internal } [ metric-type [ 1 | 2 ] | metric [ absoluteValue ] | tag [ tagValue ] | route-map [ mapTag ] ]*

redistribute { ospf match internal external [ 1 | 2 ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric absoluteValue | route-map mapTag | tag tagValue ]*

no redistribute { ospf match internal external [ 1 | 2 ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric [ absoluteValue ] | route-map [ mapTag ] | tag [ tagValue ] ]*

redistribute364

RIP:

redistribute { fromProtocol | ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric absoluteValue | route-map mapTag ]*

no redistribute { fromProtocol | ospf match internal } [ external [ 1 | 2 ] ]| ospf match external [ 1 | 2 ] [ internal ] } [ metric [ absoluteValue ] | route-map [ mapTag ] ]*

� fromProtocol � source protocol from which routes are being redistributed; the default is no source protocol defined

� access � redistributes access-server routes (BGP)

� access-internal � redistributes internal routes to directly connected clients (BGP)

� bgp � routes sourced from BGP protocol

� connected � routes that are established automatically when IP is enabled on an interface (non-multicast routing protocols). For routing protocols such as OSPF and IS-IS, these routes are redistributed as external to the AS. When redistributing from connected, only those connected networks that are configured on an interface that is not configured to run IS-IS will be redistributed. For DVMRP, this keyword redistributes routes that are established automatically in the RPF table because another multicast routing protocol, such as PIM, is enabled on an interface.

� dvmrp � routes sourced from DVMRP

� isis � routes sourced from IS-IS

� ospf � routes sourced from OSPF

� rip � routes sourced from RIP

� static � redistributes static routes; for IS-IS, you can specify static or static ip

� ospf match � determines what type(s) of routes to redistribute from OSPF; all OSPF routes are redistributed if you do not specify a type

� internal � redistributes OSPF internal routes

� external 1 � redistributes OSPF external routes of metric-type 1

� external 2 � redistributes OSPF external routes of metric-type 2

� absoluteValue � a metric that is applied to all routes from the source protocol; ranges from 0�429496729; in BGP this value is the MED, which defaults to the IGP metric of the redistributed route

� mapTag � a string of up to 32 alphanumeric characters that specifies a route map applied to all routes from the source protocol; all routes are redistributed if you do not specify a route map

� wtValue � administrative weight (relative importance) for routes redistributed into the protocol; a number in the range 0�65535

redistribute isis ipERX Edge Routers

365

� level-1 � specifies the redistribution of only IS-IS level 1 routes

� level-1-2 � specifies the redistribution of both IS-IS level 1 and level 2 routes

� level-2 � specifies the redistribution of only IS-IS level 2 routes

� metric-type � specifies the OSPF or IS-IS metric type for all routes from the source protocol

For routes redistributed into IS-IS:

� metric-type external � only the metric of the route itself is considered for comparison

� metric-type internal � both the metric of the route and the cost to the router that advertised the route are considered for comparison; this is the IS-IS default

For routes redistributed into OSPF:

� metric-type 1 � cost of the external routes is equal to the sum of all internal costs and the external cost

� metric-type 2 � cost of the external routes is equal to the external cost alone; this is the OSPF default

� tagValue � a tag that is applied to all routes from the source protocol; ranges from 0�429496729



redistribute isis ip

Description: Redistributes routes from one IS-IS routing level into the other. The no version ends the redistribution.

Syntax: [ no ] redistribute isis ip { level-1 into level-2 | level-2 into level-1 }distribute-list accessListName

� level-1 � specifies the redistribution of routes from or into IS-IS level 1

� level-2 � specifies the redistribution of routes from or into IS-IS level 2

� accessListName � string of up to 32 alphanumeric characters specifying the IP access list used to filter routes between levels


redundancy force-failover366

redundancy force-failover

Description: Forces the system to switch from the primary line module in the specified slot or the primary SRP module to the spare line module or SRP module. This command overrides the redundancy lockout command. With the srp option, the command is equivalent to the srp switch command. There is no no version.

Syntax: redundancy force-failover { slotNumber | srp }

� slotNumber � number of the slot in which the primary line module resides

� srp � indicates that the system should switch from the active to the standby SRP module


redundancy lockout

Description: Prevents the system from switching automatically to a spare line module if the primary module fails on a slot. The no version reverts to the default situation, in which the system switches automatically to a spare line module if the primary module fails on a slot. The redundancy force-failover command overrides this command. There is no no version.

Syntax: [ no ] redundancy lockout slotNumber



redundancy revertERX Edge Routers

367

redundancy revert

Description: Forces the system to revert to the primary line module in the specified slot. If you specify a time or time and date, reversion occurs when the primary line module becomes available after that time. Otherwise, reversion occurs immediately. Issuing this command causes reversion once; after reboot, the system returns to the settings configured in the software. The no version has no effect.

Syntax: [ no ] redundancy revert slotNumber [ startTime [ [ startMonth startDay | startDay startMonth ] startYear ] ]


� startTime � time, in 24-hour format (00:00:00), at which the system reverts to this line module

� startMonth � name of the month in which the system reverts to this line module

� startDay � day of the month on which the system reverts to this line module

� startYear � four-digit year in which the system reverts to this line module


redundancy revertive

Description: Enables the system to revert from spare line modules to available primary line modules automatically. The no version reverts to the default situation, in which there is no automatic reversion from spare to primary line modules.

Syntax: [ no ] redundancy revertive [ timeOfDay ]

� timeOfDay � time, in 24-hour format (00:00:00), at which the system reverts to the available primary line modules every day


refresh-period

Description: Specifies the timeout period in milliseconds between generation of RSVP refresh messages. The no version restores the default value of 30000 milliseconds.

Syntax: refresh-period period

no refresh-period

� period � interval from 0�4294967295

Mode(s): RSVP Profile Configuration

reload368

reload

Description: Reloads the operating system in the designated interval or at the designated time. There is no no version.

Syntax: reload [ force [ reason ] | in inTime [ reason ] | at atTime [ month day | day month ] [ reason ] | cancel ]

� force � prompts for confirmation to reboot if the system is in certain states, such as during the synchronization of SRP modules, that could lead to a loss of configuration data or an NVS corruption.

� reason � reason for the reload (1�255 characters long)

� inTime � schedules a reload of the software to take place in the specified minutes or hours and minutes ([ hh: ] mm). If the system is in a state that could lead to a loss of configuration data or an NVS corruption, it will delay the reboot for one minute, up to five times. If the system cannot reboot on its sixth attempt, the scheduled reboot fails.

� atTime � schedules a reload of the software to take place at the specified time (hh:mm) (using a 24-hour clock). If you specify the month and day, the reload takes place at the specified time and date. If you do not specify the month and day, the reload takes place at the specified time on the current day (if the specified time is later than the current time) or on the next day (if the specified time is earlier than the current time). Specifying 00:00 schedules the reload for midnight. If the system is in a state that could lead to a loss of configuration data or an NVS corruption, it will delay the reboot for one minute, up to five times. If the system cannot reboot on its sixth attempt, the scheduled reboot fails.

� month � name of the month (any number of characters in a unique string)

� day � number of the day of the month, in the range 1�31

� cancel � cancels a scheduled reload


reload slot

Description: Reboots the module in the selected slot. There is no no version.

Syntax: reload slot slotNumber [ force ]

� reason � reason for the reload (1�255 characters long)

� slotNumber � number of a selected slot in the router

� force � prompts for confirmation to reboot if the system is in certain states, such as during the synchronization of SRP modules, that could lead to a loss of configuration data or an NVS corruption.


remote hostERX Edge Routers

369

remote host

Description: Defines an L2TP host profile. Accesses the L2TP Destination Profile Host Configuration mode. The no version removes an L2TP host profile.

Syntax: remote host { hostname | default }

no remote host { hostname | default }

� hostname � name the LAC must supply in the hostname AVP of the receive SCCRQ; can be up to 64 characters in length (no spaces)

� default � allows the LAC to use any hostname in the hostname AVP

Mode(s): L2TP Destination Profile Configuration

remote-loopback

Description: Enables the acceptance of remote loopback requests on a T1 line on a CT1 line module. The no version restores the default value, which is to reject remote loopback requests.

Syntax: [ no ] remote-loopback


remote-neighbor

Description: Configures an OSPF, PIM, or RIP remote neighbor. The no version removes the remote neighbor and any attributes configured for the neighbor.

Syntax: For OSPF:

[ no ] remote-neighbor ipAddress area { areaId | areaIdInt }

For PIM

[ no ] remote-neighbor ipAddress sparse-mode

For RIP:

[ no ] remote-neighbor ipAddress

� ipAddress � IP address identifying the remote neighbor




rename370

rename

Description: Renames a local file. There is no no version.

Note: You cannot change the extension of a file, for example, .scr.

Syntax: rename oldFileName newFileName

� oldFileName � file to rename

� newFileName � new filename


request-data-size

Description: Sets the request payload data size. The no version restores the default value.

Syntax: request-data-size requestSizeValue

no request-data-size

� requestSizeValue � size of the data in bytes in the request packet�s payload; the default is 1 byte


reserve

Description: For DHCP local server clients, reserves an IP address for a specific MAC address. The no version removes the reservation.

Syntax: reserve ipAddress macAddress

no reserve ipAddress

ipAddress � IP address to reserve

macAddress � MAC address for which the IP address is reserved.


retransmit

Description: Specifies maximum number of times the system retransmits a RADIUS packet to an authentication or accounting server. The no version restores the default value.

Syntax: retransmit retries

no retransmit

� retries � number of retries in the range 0�10. The default is 3.


retransmit-intervalERX Edge Routers

371

retransmit-interval

Description: Specifies the time between LSA retransmissions for the OSPF remote-neighbor interface when an acknowledgment for the LSA is not received. The no version restores the default value.

Syntax: retransmit-interval retransInterval

no retransmit-interval

� retransInterval � a number in the range 0�3600 seconds; default value is 5 seconds


rib-out disable

Description: Disables storage of routes to the Adj-RIBs-Out tables (disables rib-out) for all BGP peers. Storage is disabled by default. The no version enables the route storage. The default version removes the explicit global configuration for all peers and reestablishes inheritance of the feature configuration.

Note: If you enable or disable rib-out globally and this action changes the current configuration, all sessions are automatically bounced.

Syntax: [ no | default ] rib-out disable


route-map372

route-map

Description: Specifies a route map for DVMRP or RIP, or defines the conditions for applying routing policies to filter or modify routes redistributed into or propagated by a routing protocol. The no version deletes the route map.

Syntax: Specifying for DVMRP or RIP:

[ no ] route-map mapTag [ interfaceType interfaceSpecifier ]

� mapTag � a string of up to 32 alphanumeric characters.



Defining a route map:

[ no ] route-map mapTag [ permit | deny ] [ sequence ]

� mapTag � string of up to 32 alphanumeric characters. The redistribute Router Configuration command uses this string to reference this route map. Multiple route maps may share the same map tag.

� permit � if the match criteria are met for this route map and permit is specified, the route is redistributed as controlled by the set actions.

� deny � if the match criteria are met for the route map and deny is specified, the route is not redistributed, and no further route maps sharing the same map tag are examined.

� sequence � number in the range 0�65535 that indicates the position a new route map is to have in the list of route maps already configured with the same map tag. If given with the no version of this command, it specifies the position of the route map that should be deleted.


router bgp

Description: Configures the BGP routing process. Allows you to set up a distributed routing core that automatically guarantees the loop-free exchange of routing information between ASs. The no version removes a routing process.

Syntax: [ no ] router bgp autonomousSystem

� autonomousSystem � number in the range 1�4294967295; the AS number that identifies the router to other BGP routers


router dvmrpERX Edge Routers

373

router dvmrp

Description: Creates and enables DVMRP on a virtual router; accesses DVMRP router configuration mode. The no version deletes DVMRP from a virtual router.

Syntax: [ no ] router dvmrp


router igmp

Description: Creates and enables IGMP on a virtual router; accesses IGMP router configuration mode. The no version disables IGMP on a virtual router.

Syntax: [ no ] router igmp

Description: Global Configuration

router isis

Description: Enables the IS-IS routing protocol and specifies an IS-IS process for IP. The no version disables IS-IS routing.

Syntax: [ no ] router isis [ tag ]

� tag � meaningful name for a routing process; name must be unique among all IP router processes for a given router; if not specified, a null tag is assumed, and the process is referenced with a null tag


router ospf

Description: Configures an OSPF routing process. The no version disables an OSPF routing process.

Syntax: [ no ] router ospf processId [ vrf vrfName ]

� processId � number in the range 1�65535 that identifies the OSPF process

� vrfName � name of the VRF; string of 1�32 alphanumeric characters; available only in virtual router context, not VRF context


router pim374

router pim

Description: Creates and enables PIM on a virtual router; accesses PIM router configuration mode. The no version deletes PIM from a virtual router.

Syntax: [ no ] router pim


router rip

Description: Enables RIP routing protocol configuration. The no version deletes the RIP process and removes the configuration from the system.

Syntax: [ no ] router rip


route-target

Description: Creates or adds to a list of VPN extended communities used to determine which routes are imported by a VRF. If at least one route target in the route-target export list contained in the update message advertising a route matches a route target in the route-target import list associated with a VRF, that route is installed in the VRF�s forwarding table. The no version removes a route target from the specified list.

Syntax: [ no ] route-target { import | export | both } extendedCommunity

� import � adds the route target to the current VRF�s import list; the VRF accepts only routes that have at least one route target that matches a route target in the import list

� export � adds the route target to the current VRF�s export list; all routes advertised from this VRF are associated with the export list; at least one route target in the export list must match a route target in the import list of a VRF receiving the route for the route to be installed in the VRF�s forwarding table

� both � adds the route target to both the import list and export list of the current VRF

� extendedCommunity � two-part number of the format number1:number2 that identifies an extended community of VPNs where:

� number1 � an AS number or an IP address

� number2 � a unique integer; 32 bits if number1 is an AS number; 16 bits if number1 is an IP address


rtrERX Edge Routers

375

rtr

Description: Sets the number of the RTR operation to be configured and accesses the RTR Configuration mode. The no version removes all configuration information for a given RTR operation.

Syntax: [ no ] rtr rtrIndex

no rtr

� rtrIndex � number of the operation to be configured; there is no default


rtr reaction-configuration

Description: This command has only a no version. The no version clears all traps for all the rtr reaction-configuration command options.

Syntax: no rtr reaction-configuration rtrIndex

� rtrIndex � number of the operation configured


rtr reaction-configuration action-type

Description: Sets certain actions to occur based on events under control of the RTR. The default is that traps of enabled events are taken. See the rtr reaction-configuration command. There is no no version.

Syntax: rtr reaction-configuration rtrIndex [ action-type actionType ]

� rtrIndex � number of the operation to be configured

� actionType � one of the following types:

� none � no action; selecting this option clears all traps for the given operation

� trapOnly � trap only action; this is the default; enabled events trigger the trap


rtr reaction-configuration operation-failure376

rtr reaction-configuration operation-failure

Description: Enables operation-failure reaction. When the type of RTR entry is echo, you can also configure a value that triggers the operation-failure trap. When the type of RTR entry is pathEcho, you cannot configure the operation-failure trap. See the rtr reaction-configuration command. There is no no version.

Syntax: rtr reaction-configuration rtrIndex operation-failure [ operationFailureValue ]


� operationFailureValue � number in the range 0�15; default is 1


rtr reaction-configuration path-change

Description: Enables path change reaction. When the type of RTR entry is echo, you cannot configure the path-change trap. See the rtr reaction-configuration command. There is no no version.

Syntax: rtr reaction-configuration rtrIndex path-change

� rtrIndex � number of the operation to be configured; no default


rtr reaction-configuration test-completion

Description: Enables test completion reaction. See the rtr reaction-configuration command. There is no no version.

Syntax: rtr reaction-configuration rtrIndex test-completion



rtr reaction-configuration test-failure

Description: Enables test failure reaction to occur. When the type of RTR entry is echo, you can also configure a value that triggers the test-failure trap. See the rtr reaction-configuration command. There is no no version.

Syntax: rtr reaction-configuration rtrIndex test-failure [ testFailureValue ]


� testFailureValue � number in the range 0�15; default is 1


rtr resetERX Edge Routers

377

rtr reset

Description: Shuts down all RTR operations and clears the RTR configuration for the given virtual router. The no version negates the reset operation.

Syntax: [ no ] rtr reset


rtr schedule

Description: Configures the RTR time parameters for an RTR operation. The no version stops the operation by putting it in the pending state. The no version also resets the restart-time attribute and the life attribute.

Syntax: [ no ] rtr schedule rtrIndex



rtr schedule life

Description: Specifies the length of the test. There is no no version.

Syntax: rtr schedule rtrIndex life lifeValue


� life � value that depends on the type of the RTR entry; not a length of time:

� If the type is echo, life relates to the number of operations sent until a test finishes. The default is 90. If you use 60 operations * 60 seconds, the frequency between each operation that a test completes is 3,600 seconds (one hour).

� If the type is pathEcho, life relates to the maximum number of hops used by the traceRoute trap. The default is 30. If you use 30 (as the maximum hops) * 3 (operations per hop) * 60 seconds frequency between each operation, a test is completed within 3,600 seconds. If a destination is reached in fewer than 30 hops, the test is completed earlier.

� lifeValue � number of operations or maximum TTL in the range 1�2147483647


rtr schedule restart-time378

rtr schedule restart-time

Description: Specifies the test�s restart in seconds. There is no no version.

Syntax: rtr schedule rtrIndex restart-time restartValue


� restartValue � default is 0; 0 calls for no restart after the test finishes


rtr schedule start-time

Description: Configures an entry�s start. There is no no version.

Syntax: rtr schedule rtrIndex start-time { now | pending }


� now � RTR immediately begins to collect information.

� pending � RTR does not begin to collect information. This is the default.


run

Description: Allows you to issue a command that operates in User Exec mode from any CLI mode. There is no no version.

Syntax: run userExecCommand

userExecCommand � a CLI command that you can issue from User Exec mode

Mode(s): All modes

samples-of-history-keptERX Edge Routers

379

samples-of-history-kept

Description: Sets the number of entries kept in the history table for each RTR operation. The no version restores the default value.

Syntax: samples-of-history-kept samples

no samples-of-history-kept

� samples � number of entries for each RTR index in the history table. The default is 16 for a pathEcho type and 1 for an echo type.


scheduler-profile

Description: Configures a scheduler profile. The no version deletes the scheduler profile.

Syntax: [ no ] scheduler-profile schedulerProfileName

� schedulerProfileName � name for the scheduler profile


scramble

Description: Enables cell scrambling on a T3 Frame interface. The no version disables cell scrambling on the interface. If you issue this command, be sure to issue the dsu mode and dsu bandwidth commands. Otherwise, the interface may drop packets unexpectedly.

Syntax: [ no ] scramble


sdh

Description: Specifies that the interface supports SDH. The no version restores SONET operation on this interface.

Syntax: [ no ] sdh


send380

send

Description: Sends a message to one or more terminals. If you begin the message on the same line as the command, the first character is a delimiter; you must end the message with the same delimiter. If you begin the message on another line, you must enter <Ctrl+Z> to end the message. There is no no version.

Syntax: send { * | absoluteLineNumber | console consoleLineNumber | vty vtyLineNumber } [ message ]

� * � sends the message to all terminals

� absoluteLineNumber � line number of a terminal to which the message is sent

� consoleLineNumber � line number of a console to which the message is sent

� vtyLineNumber � line number of a vty to which the message is sent

� message � text of message to send; a string of up to 1023 alphanumeric characters


send-more-specific-routes-disable

Description: Specifies that RIP does not send a more-specific route if it has a less-specific route with any metric. The no version restores the default condition, wherein RIP always sends a more-specific route even if a less-specific route with a metric is available.

Syntax: [ no ] send-more-specific-routes-disable


send version

Description: Restricts the RIP version that the system can send on a remote-neighbor interface. The no version sets the remote-neighbor interface back to the default value, sending only RIP version 1.

Syntax: send version [ 1 | 2 | off ]

no send version [ 1 | 2 | off ]





server-addressERX Edge Routers

381

server-address

Description: Sets the DHCP server address that is sent to DHCP clients. The no version removes server address.

Syntax: server-address address

no server-address [ address ]

address � DHCP server address


server-name

Description: Specifies the hostname expected from the L2TP LNS or the L2F home gateway when you set up a tunnel. The no version removes the server name.

Syntax: server-name serverName

no server-name

� serverName � hostname; can be up to 64 characters in length (no spaces)


service ctrl-x-reboot

Description: Enables the <Ctrl+X> key combination to reboot the system at all times, except that the key combination has no effect if you are accessing the system via a Telnet session. The no version restores the default condition, disabled.

Syntax: [ no ] service ctrl-x-reboot


service dhcp-local

Enables the DHCP local server. The no version disables the DHCP local server, and does not save the previous settings.

Syntax: [ no ] service dhcp-local [ equal-access | standalone ]

� equal-access � enables the DHCP local server to work with the SDX (formerly SSC) or HTTP local server for non-PPP equal access, the default option.

� standalone � configures the system as a DHCP local server


service manual-commit382

service manual-commit

Description: Stops the system from automatically saving configuration changes to nonvolatile storage. Places the system into Manual Commit mode; this mode has no effect on the CLI prompt. Causes an immediate save of configuration data not yet committed to nonvolatile storage. The no version returns the ERX system to Automatic Commit mode (with no effect on the CLI prompt).

Syntax: [ no ] service manual-commit


service password-encryption

Description: Directs the system to encrypt passwords that are saved in the configuration file. The command should be used as a simple cipher to prevent unauthorized users from viewing passwords.

Syntax: [ no ] service password-encryption


service timestamps

Description: Formats timestamps associated with log messages. The no version removes timestamps from log messages.

Syntax: service timestamps log datetime [ show-timezone [ localtime ] ]

no service timestamps [ log ]

� log � indicates that a timestamp will appear on log messages

� datetime � displays the date and time

� show-timezone � displays the time zone

� localtime � displays the timestamp in local time


service unattended password-recovery

Description: Allows you to delete all passwords and secrets from the console without being physically present at the router. When executed, this command changes the behavior of the erase secrets command, which will not take any parameters and will not be available through a vty session. The no version reverts erase secrets to factory default settings.

Syntax: [ no ] service unattended-password-recovery


set as-path prependERX Edge Routers

383

set as-path prepend

Description: Prepends one or more AS numbers or a list of AS numbers to the AS path for BGP routes. The no version removes the set clause from a route map.

Syntax: set as-path prepend { list listName | asPathNumber [ asPathNumber ] * }

no set as-path prepend

� listName � name of a list of AS path numbers; string of up to 32 characters

� asPathNumber � a number in the range 1�65535 that appends the string following the keyword prepend to the as-path of the route that is matched by the route map. Applies to outbound BGP route maps.



set automatic-tag

Description: Automatically computes the tag value. The no version removes the set clause from a route map.

Syntax: [ no ] set automatic-tag


set comm-list delete

Description: Removes communities specified by the community list from the community attribute of routes matching the route map. The no version removes the set clause from a route map.

Syntax: set comm-list { communityList | regularExpression } delete

no set comm-list

� communityList � community list identifier; a string of up to 32 characters

� regularExpression � the regular expression that matches the community


set community384

set community

Description: Sets the BGP community attribute to one or more community numbers or a list of community numbers. The no version removes the set clause from a route map.

Syntax: set community { list communityListName [ additive ] | none }

set community { communityNumber | knownCommunity | asCommunityNumber } [ communityNumber | knownCommunity | asCommunityNumber ]* [ additive ]

no set community

� communityListName � name of a community; a string of up to 32 characters

� additive � adds the community number to the community list

� none � removes the community attribute

� communityNumber � a number in the range 1� 4294967295 that specifies the community number

� knownCommunity � any of the following well-known communities; the internet community is not an option:

� local-as � prevents advertisement outside of the local AS

� no-advertise � prevents advertisement to any peer

� no export � prevents advertisement beyond the BGP confederation boundary

� asCommunityNumber � AS community number in the format AA:NN:

� AA � number in the range 1�65535 that identifies an AS

� NN � number in the range 1�65535 that uniquely identifies a community within an AS



set dampeningERX Edge Routers

385

set dampening

Description: Enables route flap dampening and optionally specifies dampening parameters for routes passing through the route map. The no version removes the set clause from a route map.

Syntax: set dampening halfLife reuse suppress maxSuppressTime [ halfLifeUnreachable ]

no set dampening

� halfLife � half-life period in minutes in the range 1�45. The default is 10. When a BGP route has been assigned a penalty, the penalty is decreased by half after each half-life period. Each time a route flaps, the router configured for route flap dampening assigns the route a penalty. Penalties are cumulative. BGP stores the penalty for all reachable and unreachable routes that have experienced recent flaps.

� reuse � reuse limit in the range 1�20000. The default is 750. As the penalty for a flapping route decreases and falls below this reuse limit, the route is unsuppressed. That is, the route is added back to the BGP table and used for forwarding.

� suppress � suppress limit in the range 1�20000. A route is suppressed when its penalty exceeds this limit. The default value is 2000.

� maxSuppressTime � maximum suppression time in minutes in the range 1�255. This value is the maximum amount of time a route can be suppressed. The default value is 60.

� halfLifeUnreachable � the alternate half-life period in minutes for unreachable routes; a number in the range 1�45. The default value is 20. If you do not specify this value, the system uses the same half-life period for both reachable and unreachable routes.


set dhcp relay386

set dhcp relay

Description: Adds a new DHCP/BOOTP server. The no version disables the specified server or disables the addition of the relay agent information. If you specify the no version, all DHCP servers are deleted from the list.

Syntax: set dhcp relay { dhcpServerAddress | agent [ circuit-ID-only | remote-ID-only ] | discard-access-routes { interface interfaceType interfaceSpecifier | all }

no set dhcp relay { [ dhcpServerAddress | agent }

� dhcpServerAddress � IP address of the DHCP server

� agent � adds the agent information suboptions (circuit-ID and remote-ID) to every packet the system relays from a DHCP client to a DHCP server

� circuit-ID-only � specifies circuit ID suboption only

� remote-ID-only � specifies remote-ID suboption only

� discard-access-routes � removes existing access routes for an interface from the routing table and from NVS

� interfaceType � interface type whose access routes should be discarded; see Interface Types and Specifiers in About This Guide



set distance

Description: Configures an administrative distance to apply to routes that match the route map. The no version removes the set clause from a route map.

Note: Setting a distance in a route map is useful only when it is set on a route being installed into the routing table. Distance is used to establish preference between routes to the same prefix to identify the best route to that prefix. Setting distance is any other circumstance has no effect.

Syntax: set distance distance

no set distance

� distance � administrative distance, ranging from 0�255


set extcommunityERX Edge Routers

387

set extcommunity

Description: Sets the BGP extended communities attribute. The no version removes the set clause from a route map.

Syntax: set extcommunity { rt | soo } extCommValue [ extCommValue ]* [ additive ]

no set extcommunity

� rt � specifies a route-target extended community, which consists of one or more routers that can receive a set of routes advertised by BGP that carry the extended-community attribute

� soo � specifies a site-of-origin extended community, which consists of one or more routers that inject into BGP a set of routes that carry the extended-community attribute

� extCommValue � number identifying the extended community in one of the following formats:

� AS:nn � 16-bit autonomous system number followed by a 32-bit integer

� AS:nn � 32-bit autonomous system number followed by a 16-bit integer

� ipAddress:nn � IP address followed by a 16-bit integer

� extCommValue � number identifying the extended community; in the format AA:NN, where any of the following is true:

� AA is an AS number in the range 1�65535 and NN is an integer in the range 1�4294967295; for example, 320:72358

� AA is an AS number in the range 1�4294967295 and NN is an integer in the range 1�65535; for example, 84511:45

� AA is a dotted decimal IP address and NN is an integer in the range 1�65535; for example, 10.10.21.5:1256


� additive � adds the specified extended communities to any previously configured for the attribute; if omitted, the specified extended communities replace any previously configured for the attribute


set ip next-hop388

set ip next-hop

Description: Indicates where to send packets that pass a match clause of a route map for policy routing. The no version removes the set clause from a route map.

Syntax: set ip next-hop { ipAddress | interface interfaceType interfaceSpecifier | peerAddress }

no set ip next-hop [ ipAddress | peerAddress]

� ipAddress � IP address of next hop to which packets are sent; does not need to be an adjacent router



� peerAddress � on outbound route maps, disables the next hop calculation by setting the next hop to the IP address of the BGP speaker; on inbound route maps, overrides any third-party next hop configuration by setting the next hop to the IP address of the peer


set level

Description: Specifies where to import routes when all of a route map�s match criteria are met. The no version removes the set clause from a route map.

Syntax: set level atLevel

no set level

� atLevel � specifies one of the following levels:

� level-1 � imports routes into a level 1 area

� level-1-2 � imports routes into a level 1 and a level 2 area

� level-2 � imports routes into a level 2 subdomain

� stub-area � imports routes into an OSPF NSSA area

� backbone � imports routes into an OSPF backbone area


set local-preferenceERX Edge Routers

389

set local-preference

Description: Specifies a preference value for the AS path. The no version removes the set clause from a route map.

Syntax: set local-preference value

no set local-preference

� value � preference number in the range 0�4294967295


set metric

Description: Modifies the metric value (for BGP, the MED) for a route that matches the route map by applying a relative or absolute metric. The no version removes the set clause from a route map.

Note: You cannot have an absolute and relative metric within the same route map sequence. Issuing either command overrides any previously configured metric in the route map.

Syntax: set metric [ signrelValue absValue ]

no set metric

� sign � one of the following values:

� + � specifies that the value is added to the metric for routes matching the route map; immediately precedes the metric value with no intervening space

� - � specifies that the value is subtracted from the metric for routes matching the route map; immediately precedes the metric value with no intervening space

� relValue � number of a single standard access list; string up to 32 characters (a number in the range 0�4294967295)

� absValue � number in the range 0�294967295


set metric-type390

set metric-type

Description: Sets the metric type for the destination routing protocol. The no version removes the set clause from a route map.

Syntax: set metric-type atMetric

no set metric-type

� atMetric � specifies the metric type from the following choices:

For BGP:

� external � reverts to the normal BGP rules for propagating the MED; this is the BGP default

� internal � sets the MED of a received route that is being propagated to an external peer equal to the IGP cost of the indirect next hop

For IS-IS:

� external � only the metric of the route itself is considered for comparison

� internal � both the metric of the route and the cost to the router that advertised the route are considered for comparison; this is the IS-IS default

For OSPF:

� 1 � cost of the external routes is equal to the sum of all internal costs and the external cost

� 2 � cost of the external routes is equal to the external cost alone; this is the OSPF default


set origin

Description: Sets the BGP origin of an advertised route. The no version removes the set clause from a route map.

Syntax: set origin atOrigin

no set origin

� atOrigin � specifies the origin from the following choices:

� egp � remote exterior gateway protocol

� igp � local interior gateway protocol

� incomplete � origin unknown


set-overload-bitERX Edge Routers

391

set-overload-bit

Description: Configures the system in IS-IS to signal other routers not to use it as an intermediate hop in their SPF calculations. The no version removes the designation. By default, the overload bit is not set.

Syntax: set-overload-bit [ on-startup period ]

no set-overload-bit

� on-startup � specifies that the overload bit is set for a period of time after system reboot. Use to prevent other routers from routing through the system before it is fully operational. The overload bit is cleared when the period expires.

� period � duration in seconds of period after system reboot that overload bit is set; ranges from 5�86400 seconds


set route-type

Description: Sets routes of the specified type. The no version removes the set clause from a route map.

Syntax: set route-type { internal | internal-intra | internal-inter | external }

no set route-type

� internal � internal route (including OSPF intra-area and interarea)

� internal-intra � intra-area route

� internal-inter � interarea route

� external � external route (BGP and OSPF type 1/2)


set tag

Description: Sets the tag value of the destination routing protocol. The no version removes the set clause from a route map.

Syntax: set tag tagValue

no set tag

� tagValue � preference number in the range 0�4294967295


set weight392

set weight

Description: Specifies the BGP weight for the routing table. Overrides the weights assigned using the neighbor weight and neighbor filter-list commands. The no version removes the set clause from a route map.

Syntax: [ no ] set weight value

no set weight

� value � weight value in the range 0�4294967295


shaping-rate

Description: Sets the shaping rate in bits per second. The no version deletes the shaping rate.

Syntax: shaping-rate shapingRate [ burst burstSize ]

no shaping-rate

� shapingRate � range 64000�1,000,000,000

� burstSize � range 8192�32767

Mode(s): Scheduler Profile Configuration

show aaa

Description: Displays accounting or authentication information regarding PPP.

Syntax: show aaa { accounting | authentication } ppp default [ filter ]

� filter � see Filtering show Commands in About This Guide


show aaa accounting

Description: Displays the name of the virtual router for which duplication accounting records are sent to the accounting server.

Syntax: show aaa accounting [ filter ]



show aaa accounting intervalERX Edge Routers

393

show aaa accounting interval

Description: Displays information on the accounting interval.

Syntax: show aaa accounting interval [ filter ]



show aaa delimiters

Description: Displays the domain name and realm name delimiters configured on the system.

Syntax: show aaa delimiters [ filter ]



show aaa domain-map

Description: Displays the mapping between user domains and virtual routers.

Syntax: show aaa domain-map [ filter ]



show aaa duplicate-address-check

Description: Configures AAA to query the routing table for duplicate address assignment before granting access.

Syntax: show aaa duplicate-address-check [ filter ]



show aaa model

Description: Displays AAA model.

Syntax: show aaa model [ filter ]



show aaa name-servers394

show aaa name-servers

Description: Displays the IP addresses of the primary and secondary DNS and WINS name servers.

Syntax: show aaa name-servers [ filter ]



show aaa profile

Description: Displays AAA profile names and the actions associated with each specified AAA profile name.

Syntax: show aaa profile [ filter ]



show aaa statistics

Description: Displays the authentication and authorization statistics.

Syntax: show aaa statistics [ delta ] [ filter ]

� delta � displays baselined statistics



show aaa subscriber per-port-limit

Description: Displays the number of active subscribers on each interface.

Syntax: show aaa subscriber per-port-limit [ filter ]

filter � see Filtering show Commands in About This Guide


show aaa subscriber per-vr-limit

Description: Displays the number of active subscribers on each virtual router.

Syntax: show aaa subscriber per-vr-limit [ filter ]

filter � see Filtering show Commands in About This Guide


show aaa timeoutERX Edge Routers

395

show aaa timeout

Description: Displays information on the idle or session timeout.

Syntax: show aaa timeout [ filter ]



show aaa tunnel-parameters

Description: Displays default tunnel parameters that are configured for tunnel definitions.

Syntax: show aaa tunnel-parameters [ filter ]



show access-list

Description: Displays access list information about the access list specified.

Syntax: show [ ip ] access-list [ accessListName ] [ detail ] [ filter ]


� detail � displays detailed information about the access list



show aps

Description: Displays information about APS/MSP interfaces or groups.

Syntax: show aps [ group [ groupNumber ] ]

groupNumber � number of the APS/MSP group


show arp396

show arp

Description: Displays information about the Address Resolution Protocol cache.

Syntax: show [ ip ] arp [ vrfName ] [ ipAddress ] [ interfaceType interfaceSpecifier ][ all ] [ filter ]

� vrfName � name of the VRF

� ipAddress � ARP entries matching this IP address are displayed



� all � displays all ARP entries



show atm aal5 interface

Description: Displays configuration information about an ATM AAL interface.

Syntax: show atm aal interface atm interfaceSpecifier [ filter ]

� atm � specify an ATM interface



Mode(s): Privileged Exec, User Exec

show atm interfaceERX Edge Routers

397

show atm interface

Description: Displays configuration information about an ATM interface or a brief description of all ATM (major) interfaces configured in the system.

Syntax: show atm interface {atm interfaceSpecifier [ signalling-stats ] | brief } [ delta ] [ filter ]


� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide; subinterfaces are not supported by the syntax

� signalling-stats � displays signalling statistics for the ATM interface


� brief � displays the status and number of configured VCs for all ATM interfaces configured in the system



show atm map

Description: Displays the list of all configured ATM static maps to remote hosts on an ATM network.

Syntax: show atm map [ mapName ] [ brief ] [ filter ]

� mapName � name of the map list to display information for

� brief � display information in a condensed format



show atm oam

Description: Displays F4 OAM statistics.

Syntax: show atm oam interfaceSpecifier [ vpi ] [ segment | end-to-end ] [ filter ]


� vpi � virtual path identifier

� segment � displays information on segment F4 OAM circuits

� end-to-end � displays information on end-to-end F4 OAM circuits



show atm ping398

show atm ping

Description: Displays a summary of the results (number of ping cells sent, number of ping cells received, success rate) of the ping operation. These results are overwritten when a new ATM ping is invoked for the circuit. If you do not specify any of the options, the command shows ping entries for the entire system.

Syntax: show atm ping [atm interfaceSpecifier [ vpi vci ] ] [ filter ]


� vpi � shows details of the last ping atm command on this VPI

� vci � shows details of the last ping atm command on this VCI



show atm subinterface

Description: Displays current state of all ATM subinterfaces you specify.

Syntax: show atm subinterface [ atm interfaceSpecifier ] [ summary interfaceType interfaceSpecifier ] [ filter ]



� summary � specifies that summary information is displayed



show atm vcERX Edge Routers

399

show atm vc

Description: Displays a summary of all configured ATM virtual circuits.

Syntax: show atm vc [ interfaceType interfaceSpecifier ] [ vpi vpi ] [ category categoryType ] [ status statusType ] [ delta ] [ filter ]



� vpi � displays VCs on a specific VPI

� category � displays VCs that have a specific service category

� categoryType � one of the following:

� cbr

� nrt-vbr

� rt-vbr

� ubr

� ubr-pc

� status � displays VCs with a certain status

� statusType � specify up or down




show atm vc atm

Description: Displays OAM statistics on a VC. You can specify the circuit to display by entering the VCD or the VPI and VCI.

Syntax: show atm vc atm interfaceSpecifier { vcd | vpi-vci vpi vci } [ delta ]


� vcd � specify the circuit by entering the VCD

� vpi-vci � specify the circuit by entering the VPI and VCI



show atm vp-tunnel400

show atm vp-tunnel

Description: Displays a summary of all configured ATM virtual path tunnels.

Syntax: show atm vp-tunnel [ interfaceSpecifier ] [ filter ]




show bandwidth oversubscription

Description: Displays the bandwidth oversubscription status.

Syntax: show bandwidth oversubscription [ filter ]



show boot

Description: Displays the configuration and system settings that are used at startup.

Syntax: show boot [ filter ]



show bulkstats

Description: Displays bulkstats statistical information.

Syntax: show bulkstats [ filter ]



show bulkstats collector description

Description: Displays the collector�s file description.

Syntax: show bulkstats collector description [ filter ]



show bulkstats collector intervalERX Edge Routers

401

show bulkstats collector interval

Description: Displays the time for which the system transfers data to the receivers.

Syntax: show bulkstats collector interval [ filter ]



show bulkstats collector max-size

Description: Displays the maximum size of the bulkstats file.

Syntax: show bulkstats collector max-size [ filter ]



show bulkstats collector transfer-mode

Description: Displays the way in which the system transfers data to the receivers.

Syntax: show bulkstats collector transfer-mode [ filter ]



show bulkstats interface-type

Description: Displays information on the collection of statistical data for the particular interface type (for example, ATM).

Syntax: show bulkstats interface-type [ filter ]



show bulkstats receiver

Description: Displays the configuration of the receiver�s remote files.

Syntax: show bulkstats receiver [ filter ]



show bulkstats schema402

show bulkstats schema

Description: Use to display data on the selected schema.

Syntax: show bulkstats schema [ filter ]

� filter � if-stack or if-stats; see Filtering show Commands in About This Guide


show bulkstats statistics

Description: Displays information on statistics counters.

Syntax: show bulkstats statistics [ filter ]



show bulkstats traps

Description: Displays information on bulkstats traps.

Syntax: show bulkstats traps [ filter ]



show cac

Description: Displays global call admission control configuration.

Syntax: show cac [ filter ]



show cac interfaceERX Edge Routers

403

show cac interface

Description: Displays all interfaces on which TE accounting is configured, or information only for the specified interface.

Syntax: show cac interface [ brief | interfaceType interfaceSpecifier ] [ filter ]

� brief � displays summary information about the interface





show cbf connection

Description: Displays all configured CBF connections.

Syntax: show cbf connection [ all ] [ filter ]

� all � does not combine parallel unidirectional connections



show cbf interface

Description: Displays status information and statistics about CBF interfaces.

Syntax: show cbf interface [ brief | full ] [ interfaceType [ interfaceSpecifier ] ] [ delta ] [ filter ]

� brief � displays only an interface�s name and up/down status

� full � displays an interface�s name, full status information, and statistics

� If you do not specify the brief or full keyword, the software displays an interface�s name and full status.






show classifier-list404

show classifier-list

Description: Displays information about classifier control lists.

Syntax: show classifier-list [ classifierName [ classifierNumber ] ] [ brief | detailed ][ filter ]

� classifierName � classifier list name

� classifierNumber � classifier list number


� detailed � display detailed information

� filter � specify a CLI output filter. See Filtering show Commands in About This Guide.


show clns

Description: Displays information about the CLNS network

Syntax: show clns [ es-neighbors | is-neighbors ] [ interfaceType interfaceSpecifier ] [ detail ] [ filter ]

� es-neighbors � displays IS-IS related information for IS-IS end-system adjacencies. Neighbor entries are sorted according to the area in which they are located.

� is-neighbors � displays IS-IS related information for IS-IS intermediate-system adjacencies. Neighbor entries are sorted according to the area in which they are located.



� detail � displays area addresses and IP addresses; if not specified, a summary display is provided



show clns interfaceERX Edge Routers

405

show clns interface

Description: Lists the Connectionless Network Service information about each interface.

Syntax: show clns interface [ interfaceType interfaceSpecifier ] [ filter ]





show clns neighbors

Description: Displays both ES and IS neighbors.

Syntax: show clns neighbors [ interfaceType interfaceSpecifier ] [ detail ] [ filter ]



� detail � when specified, the area addresses advertised by the neighbor in the hello messages are displayed; otherwise, a summary display is provided



show clns protocol

Description: Lists the protocol-specific information for each IS-IS routing process in the router.

Syntax: show clns protocol [ filter ]



show clns traffic406

show clns traffic

Description: Lists the IS-IS protocol statistics seen by the specified system.

Syntax: show clns traffic [ detail | interfaceType interfaceSpecifier ] [ delta ] [ filter ]

� detail � when specified, interface statistics are displayed; otherwise, only global statistics are displayed






show clock

Description: Displays the system�s clock source.

Syntax: show clock [ detail ] [ filter ]

� detail � provides expanded information about the clock settings, rather than a summary



show columns

Description: Displays configuration information of bridged Ethernet over ATM, IP over ATM, PPP, or PPPoE static and dynamic interface columns. It is designed to categorize interface subscribers into PPP, PPPoE, bridged, or routed.

Syntax: show columns


show configurationERX Edge Routers

407

show configuration

Description: Displays the current (running) configuration of the system, a specified virtual router, or a specified interface within the current VR context. You can create a configuration script from this output by saving it as a file with the .scr extension. This command was formerly documented as show config; that abbreviation is still supported.

Syntax: show configuration [ [ interface interfaceType interfaceSpecifier ] | [ virtual-router routerName ] [ exclude-category interfaceType ]* ][ include-defaults ] [ filter ]



� routerName � name of the virtual router

� exclude-category � excludes information associated with a particular type of interface

� include-defaults � includes commands that set default values for various parameters



show controllers e3

Description: Displays information about E3 controller interfaces.

Syntax: show controllers e3 { interfaceSpecifier [ brief | all | summary ] | serial[ interfaceSpecifier ] } [ filter ]


� brief � abbreviated display of E3 controller information

� all � detailed display of all available E3 controller information

� summary � displays link status summary

� serial � displays information about serial interfaces



show controllers sonet408

show controllers sonet

Description: Displays the statistics or the configuration for the different layers of channelized SONET and SDH interfaces.

Syntax: show controllers sonet { [ brief ] | slot/port [ :controllerSpecifier ] { [ configuration ] | layerType [ interval | total [ delta ] ] | controllerType [ interval ] | all [ total [ delta ] ] } } [ filter ]

� brief � displays a summary of information about all controllers

� slot � number of the chassis slot of the line module in the range 0�13 (ERX-1400 series) and 0�6 (ERX-700 series)


� There is no controllerSpecifier for a section or line.

� For a path, controllerSpecifier is the number of the path.

� For a tributary, controllerSpecifier has the format pathChannel[ /pathPayload ] [ /tributaryGroup ] [ /tributaryNumber ]

� For an E1 or a DS1 controller, controllerSpecifier has the format pathChannel [ /pathPayload ] [ /tributaryGroup ] [ /tributaryNumber ][ /channelGroup ]

� For a DS3 controller, controllerSpecifier has the format pathChannel ds3-channel-number [ ds1-channel-number ] [ subchannelNumber ]

� pathChannel � number of the path

� pathPayload � number of the payload within the path. In SONET mode, pathPayload is always 1. In SDH mode, pathPayload is the number of the TUG-3 group.

� tributaryGroup � number of the tributary group within the path. In SONET mode, tributary group is the number of the VT group. In SDH mode, tributary group is the number of the TUG-2 group.

� tributaryNumber � number of the tributary within the group. In SONET mode, tributaryNumber is the number of the VT. In SDH mode, tributaryNumber is the number of the TUG-1 group or tributary unit.

� channelGroup � number of the channel group

� ds3-channel-number � number of the ds3 channel

� ds1-channel-number � number of the ds1 channel in the range 1�28

� subchannelNumber � number of the subchannel in the range 1�24

� configuration � displays the configuration of each controller at the specified level and above

� layerType � type of SONET/SDH layer

� section � section layer of an interface

� line � line layer of an interface

show controllers sonetERX Edge Routers

409

� path � SONET or SDH path

� interval � number of 15-minute intervals over which the system monitors information; a value between 1 and 96. The default is the current interval, number 1.

� controllerType � type of interface or channel

� tributary � SONET or SDH virtual tributary

� e1 � E1 channel over SDH virtual tributary

� ds1 � T1 channel over SONET/SDH virtual tributary

� ds3 � T3 over channelized SONET interface

� t1 � T1 channel on T3 over channelized SONET interface

� total � displays the MIB statistics for all intervals

� delta � displays baselined statistics for all intervals

� all � shows statistics for all time intervals, rather than statistics for selected time intervals



show controllers sonet remote410

show controllers sonet remote

Description: Displays information about the statistics on the remote device when MDL is configured on a T3 over channelized SONET interface or FDL is configured on either a T1 channel on a T3 over channelized SONET interface or a T1 over SONET/SDH interface.

Syntax: show controllers sonet { slot/port [ :controllerSpecifier ] remote [ all ] } [ filter ]



� There is no controllerSpecifier for a section or line.

� For a T3 over channelized SONET interface, controllerSpecifier has the format pathChannel ds3-channel-number [ ds1-channel-number ] [ subchannelNumber ]

� For a T1 over SONET/SDH interface., controllerSpecifier has the format pathChannel [ /pathPayload ] [ /tributaryGroup ] [ /tributaryNumber ][ /channelGroup ]

� pathChannel � number of the path

� pathPayload � number of the payload within the path. In SONET mode, pathPayload is always 1. In SDH mode, pathPayload is the number of the TUG-3 group.

� tributaryGroup � number of the tributary group within the path. In SONET mode, tributary group is the number of the VT group. In SDH mode, tributary group is the number of the TUG-2 group.

� tributaryNumber � number of the tributary within the group. In SONET mode, tributaryNumber is the number of the VT. In SDH mode, tributaryNumber is the number of the TUG-1 group or tributary unit.

� channelGroup � number of the channel group

� ds3-channel-number � number of the ds3 channel

� ds1-channel-number � number of the ds1 channel in the range 1�28

� subchannelNumber � number of the subchannel in the range 1�24




show controllers t1 | e1ERX Edge Routers

411

show controllers t1 | e1

Description: Displays information about the CT1 or CE1 controller interfaces.

Syntax: show controllers { t1 | e1 } { { fractional | serial } [ interfaceSpecifier ] | interfaceSpecifier [ brief | all | summary ] } [ filter ]

� fractional � displays information about T1 or E1 fractional interfaces

� serial � displays information about T1 or E1 serial interfaces


� brief � abbreviated display of CT1 or CE1 controller information





show controllers t1 remote

Description: Displays information about the T1 statistics at the remote end when you configure FDL on an interface.

Syntax: show controllers t1 interfaceSpecifier remote [ all ]




show controllers t3412

show controllers t3

Description: Displays information about the T3 controller interfaces.

Syntax: show controllers t3 { interfaceSpecifier [ brief | all | summary ] | { ft1 | serial } [ interfaceSpecifier ] } [ filter ]


� brief � abbreviated display of T3 controller information



� ft1 � displays information about fractional T1 subchannels

� serial � displays information about serial interfaces



show controllers t3 remote

Description: Displays information about the statistics on the remote device when MDL is configured on a T3 interface or FDL is configured on a T1 channel.

Syntax: show controllers t3 interfaceSpecifier remote [ all ]




show cops info

Description: Displays information about SDX (formerly SSC) sessions and about the COPS layer created for SDX sessions.

Syntax: show cops info [ filter ]



show dhcpERX Edge Routers

413

show dhcp

Description: Displays the IP address(es) and statistics of the configured DHCP server or relay agent.

Syntax: show dhcp { server | relay } [ statistics [ delta ] ] [ filter ]

� server � DHCP Proxy Client configuration

� relay � DHCP Relay configuration

� statistics � displays statistics for the DHCP server or relay agent




show dvmrp tunnel

Description: Displays information about DVMRP tunnels.

Syntax: show dvmrp tunnel [ detail ] [ state tunnelStatus ] [ tunnelName | [ virtual-router vrName ] ip ipAddress [ tunnelName ] ] [ filter ]

� detail � shows detailed tunnel information about DVMRP tunnels

� state � shows information about tunnels in the specified state

� tunnelStatus � state of the tunnel, as follows:

� disabled � tunnel is disabled

� down � tunnel is not operational

� enabled � tunnel is enabled

� lower-down � an interface layer below the tunnel is not operational

� not-present � TSM is not in slot

� up � tunnel is operational

� tunnelName � name of a tunnel for which you want to display information

� virtual-router � displays information about tunnels on the specified virtual router

� vrName � name of a virtual router

� ip � displays information about tunnels associated with the specified IP address





show dvmrp tunnel summary414

show dvmrp tunnel summary

Description: Displays a summary of information about DVMRP tunnels.

Syntax: show dvmrp tunnel summary [ filter ]



show environment

Description: Displays information on the system�s physical environment, such as power and temperature.

Syntax: show environment [ all ] [ table ] [ filter ]

� all � displays system environment information and temperature status table

� table � displays temperature status table only



show exception dump

Description: Displays the parameters for transferring core dump files.

Syntax: show exception dump [ filter ]



show fabric-queue

Description: Displays forwarded and dropped statistics for the queues in the fabric.

Syntax: show fabric-queue [ traffic-class trafficClassName [ detail ] | [ egress-slot egressSlotNumber | detail | traffic-class trafficClassName egress-slot egressSlotNumber ] [ filter ]


� detail � provides detailed information about the queues in the fabric

� egressSlotNumber � number of the egress slot



show flashERX Edge Routers

415

show flash

Description: Displays information about the NVS card.

Syntax: show flash


show frame-relay interface

Description: Displays Frame Relay statistics for interfaces.

Syntax: show frame-relay interface [ interfaceType interfaceSpecifier ] [ members ][ brief ] [ delta ] [ filter ]

� interfaceType � one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide

� hssi

� serial

� pos

� mlframe-relay

� tunnel � GRE tunnel


� members � displays the status of MFR links

� displays the status of all MFR links if you specify the interface type mlframe-relay without a specifier for an MFR bundle

� displays the status of MFR links in an MFR bundle if you specify that bundle

� brief � displays a summary of interface information




show frame-relay lip416

show frame-relay lip

Description: Displays Link Integrity Protocol state and statistics for a link in an MFR bundle.

Syntax: show frame-relay lip [ interface interfaceType interfaceSpecifier ] [ brief ] [ delta ] [ filter ]


� serial

� pos

� interfaceSpecifier � specifies the location of the interface in the format slot/port:link


� port � port number in the range 0�2

� link � number of a link in the range 1�8

� brief � summarized format




show frame-relay lmiERX Edge Routers

417

show frame-relay lmi

Description: Displays state and statistics for the local management interface.

Syntax: show frame-relay lmi [ interface interfaceType interfaceSpecifier ] [ brief ] [ delta ] [ filter ]


� hssi

� serial

� pos

� mlframe-relay



� brief � summarized format




show frame-relay map

Description: Displays the current Frame Relay map entries and information about the Frame Relay connections.

Syntax: show frame-relay map [ filter ]

� filter � specifies a CLI output filter. See Filtering Show Commands in About This Guide.


show frame-relay multilinkInterface418

show frame-relay multilinkInterface

Description: Displays statistics about all MFR interfaces or the specified MFR interfaces.

Syntax: show frame-relay multilinkInterface [ interfaceType interfaceSpecifier ] [ brief ][ delta ] [ filter ]


� serial

� pos


� brief � displays a summary of interface information




show frame-relay pvc

Description: Displays permanent virtual circuit statistics for Frame Relay or MFR interfaces.

Syntax: show frame-relay pvc [ dlci | interface interfaceType interfaceSpecifier ][ brief ] [ delta ] [ filter ]



� hssi

� serial

� pos

� mlframe-relay



� brief � displays the abbreviated version of the command output




show frame-relay subinterfaceERX Edge Routers

419

show frame-relay subinterface

Description: Displays statistics about Frame Relay subinterfaces.

Syntax: show frame-relay subinterface [ interfaceType interfaceSpecifier ] [ brief ] [ delta ] [ filter ]


� serial

� pos

� mlframe-relay


� brief � displays a summary of subinterface information




show frame-relay summary

Description: Scans all defined Frame Relay interfaces and circuits and reports aggregate status counts.

Syntax: show frame-relay summary [ filter ]



show ftp-server

Description: Use to display information about the FTP server.

Syntax: show ftp-server


show gre tunnel420

show gre tunnel

Description: Displays information about GRE tunnels.

Syntax: show gre tunnel [ detail ] [ state tunnelStatus ] [ tunnelName | [ virtual-router vrName ] ip ipAddress ] [ filter ]

� detail � shows detailed tunnel information about GRE tunnels

� state � shows information about tunnels in the specified state

� tunnelStatus � state of the tunnel, as follows:

� disabled � tunnel is disabled

� down � tunnel is not operational

� enabled � tunnel is enabled

� lower-down � an interface layer lower below the tunnel is not operational

� not-present � TSM is not in slot

� up � tunnel is operational


� virtual-router � displays information about tunnels on the specified virtual router

� vrName � name of a virtual router

� ip � displays information about tunnels associated with the specified IP address




show gre tunnel summary

Description: Displays a summary of information about GRE tunnels.

Syntax: show gre tunnel summary [ filter ]



show hardwareERX Edge Routers

421

show hardware

Description: Displays information about the modules installed in the system.

Syntax: show hardware [ filter ]



show hdlc interface422

show hdlc interface

Description: Displays statistics about specified Cisco HDLC interfaces.

Syntax: show hdlc interface [ { dataRestriction }* | full ] [ delta ] [ stateRestriction ][ { interfaceType } interfaceSpecifier ] [ filter ]

� dataRestriction � specify one or more of the following keywords:

� config � displays information on the HLDC interface configuration

� status � displays information on the HLDC interface operational status

� statistics � displays information on the HLDC interface statistics


� full � displays configuration, status, and statistics information; equivalent to specifying config status statistics


� stateRestriction � specify only one of the following keywords:

� open � displays an interface that is administratively enabled, which means that the no ppp shutdown command is operational

� closed � displays an interface that is administratively disabled, which means that the ppp shutdown command is operational

� up � displays an interface that is up, which means that the LCP has been negotiated

� down � displays an interface that is down, which means that the LCP has not been negotiated, the negotiations have failed, or the connection has been terminated

� lower-layer-down � displays an interface that is not up and is waiting for the lower layer to come up to initiate negotiations for LCP

� not present � displays an interface on which traffic cannot flow because hardware is unavailable





show hostERX Edge Routers

423

show host

Description: Displays the IS-IS name-to-NSAP mappings defined with the clns host command.

Syntax: show host


show hosts

Description: Displays a list of configured network servers.

Syntax: show hosts [ filter ]



show ike policy-rule

Description: Displays configuration of IKE phase 1 policy rules.

Syntax: show ike policy-rule


show ike sa

Description: Displays IKE phase 1 SAs running on the system.

Syntax: show ike sa


show interfaces424

show interfaces

Description: Displays current state of all interfaces or the interface you specify.

Syntax: show interfaces interfaceType interfaceSpecifier [ delta ] [ brief ] [ filter ]


� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide; for ATM, subinterfaces are not supported by the syntax


� brief � displays a brief summary of the interface



show ip

Description: Displays general information for IP.

Syntax: show ip


show ip address

Description: Displays interface information for the specified IP address.

Syntax: show ip address [ vrfName ] [ brief | detail ] localAddress


� brief � displays summary information about the interface

� detail � displays detailed information about the interface

� localAddress � IP address of the specific interface


show ip as-path-access-listERX Edge Routers

425

show ip as-path-access-list

Description: Displays information about AS-path access lists.

Syntax: show ip as-path-access-list [ accessListName ] [ filter ]

� accessListName � name of an AS-path access list; string of up to 32 characters



show ip bgp426

show ip bgp

Description: Displays filtered information about a specified network, or all networks, in the BGP routing table associated with a specified address family. Only those fields that you specify are displayed, except that the Prefix field is always displayed. Default fields can be set with the default-fields route command.

Syntax: show ip bgp [ addressFamilyIdentifier ] [ network [ networkMask [ longer-prefixes ] ] ] [ fields { fieldOptions } ] [ filter ]

� addressFamilyIdentifier � type of address family, which determines the routing table for which information is displayed, in the format

� [ ipv4 { unicast | multicast } | vpnv4 { all | vrf vrfName } ]

� ipv4 unicast � the IPv4 unicast routing table; the default option

� ipv4 multicast � the IPv4 multicast routing table

� vpnv4 all � all IPv4 VPN routing and forwarding instances

� vpn4 vrf vrfname � the IPv4 VPN routing and forwarding instance with the name vrfname

� network � displays the route that best matches this IP address; if no network is specified, displays the fields for all networks

� networkMask � address mask to be applied to the network address

� longer-prefixes � displays all routes with a prefix that is equal to or more specific than the specified prefix

� fields � displays only the specified fields; the display order of the fields is hard-coded and not affected by the order in which you enter them

� fieldOptions � field(s) to be displayed, in the formatall | [ afi | aggregator | as-path | atomic-aggregate | best | clusters | communities | extended-communities | imported | intro | in-label | loc-pref | med | next-hop | next-hop-cost | origin | originator-id | out-label | peer | peer-type | rd | safi | unknown-types | weight ]*











show ip bgpERX Edge Routers

427


� in-label � MPLS label for the route; the label received with incoming MPLS frames; typically, but not always, this is the label advertised to MP-BGP peers







� out-label � MPLS label for the route; the label sent with outgoing MPLS frames; also the label received from MP-BGP peer; typically, but not always, this is the label received from MP-BGP peers










show ip bgp advertised-routes428

show ip bgp advertised-routes

Description: Displays the routes in the Adj-RIBs-Out table of the specified peer or peer group. For peers, displays routes that have been previously advertised to the peer and the attributes for the routes prior to the application of outbound policy. For peer groups, displays routes that will be advertised to the peer group, but includes the full set of route attributes associated with the routes after the application of outbound policy. This command returns an error message unless you first enable rib-out via the no neighbor rib-out disable command or the no rib-out disable command.

Syntax: show ip bgp [ addressFamilyIdentifier ] { neighbors ipAddress | peer-group peerGroupName } advertised-routes [ network [ networkMask [ longer-prefixes ] ] ] [ fields { fieldOptions } ] [ delta ] [ filter ]

� addressFamilyIdentifier � type of BGP address family. See the show ip bgp command.

� ipAddress � address of a neighbor whose routes the system has learned

� peerGroupName � name of a BGP peer group

� network � displays the route that best matches this IP address; if no network is specified, displays the fields for all networks


� longer-prefixes � displays all routes with a prefix that is equal to or more specific than the specified prefix

� fieldOptions � field(s) to be displayed. See the show ip bgp command.




show ip bgp aggregate-address

Description: Displays information about aggregate addresses.

Syntax: show ip bgp [ addressFamilyIdentifier ] aggregate-address [ ipAddress mask ] [ filter ]


� ipAddress � aggregate address

� mask � aggregate address mask



show ip bgp cidr-onlyERX Edge Routers

429

show ip bgp cidr-only

Description: Displays information only about routes having nonnatural network masks.

Syntax: show ip bgp [ addressFamilyIdentifier ] cidr-only [ fields { fieldOptions } ] [ filter ]





show ip bgp community

Description: Displays routes that belong to the specified BGP community.

Syntax: show ip bgp [ addressFamilyIdentifier ] community { communityNumber | local-as | no-advertise | no-export } [ communityNumber | local-as | no-advertise | no-export ] * [ exact-match ] [ fields { fieldOptions } ] [ filter ]


� communityNumber � filters routes according to this community number, specified either as a number in the range 1�4294967295 or in AA:NN format (autonomous system number:community number); displays only routes that are members of the specified community

� local-as � displays only routes belonging to the local-AS community

� no-advertise � displays only routes belonging to the no-advertise community

� no-export � displays only routes belonging to the no-export community


� exact-match � displays only routes that have exactly the specified communities




show ip bgp community-list430

show ip bgp community-list

Description: Displays routes that belong to the BGP community specified by the community list.

Syntax: show ip bgp [ addressFamilyIdentifier ] community-list communityListName[ exact-match ] [ fields { fieldOptions } ] [ filter ]


� communityListName � filters routes according to community list; displays only routes that are members of a community on the specified list

� exact-match � displays only routes that have exactly the specified communities




show ip bgp dampened-paths

Description: Displays information on dampened BGP routes.

Syntax: show ip bgp [ addressFamilyIdentifier ] dampened-paths [ fields { fieldOptions } ] [ filter ]





show ip bgp filter-list

Description: Displays all routes whose AS path matches the specified AS path access list.

Syntax: show ip bgp [ addressFamilyIdentifier ] filter-list asPathAccessListName [ fields { fieldOptions } ] [ filter ]


� asPathAccessListName � name of AS path access list to filter routes; displays only routes that have AS paths matching the specified list




show ip bgp flap-statisticsERX Edge Routers

431

show ip bgp flap-statistics

Description: Displays information about routes that are dampened.

Syntax: show ip bgp [ addressFamilyIdentifier ] flap-statistics [ network [ networkMask ] ] [ filter ]


� network � IP address of the network for which you want information displayed; if no network is specified, the fields are displayed for all networks




show ip bgp inconsistent-as

Description: Displays information only about routes with inconsistent AS paths.

Syntax: show ip bgp [ addressFamilyIdentifier ] inconsistent-as [ fields { fieldOptions } ] [ filter ]





show ip bgp neighbors

Description: Displays information about the BGP neighbors.

Syntax: show ip bgp [ addressFamilyIdentifier ] neighbors [ ipAddress ] [ delta ] [ filter ]






show ip bgp neighbors dampened-routes432

show ip bgp neighbors dampened-routes

Description: Displays information about routes with a dampening history for the specified BGP neighbor.

Syntax: show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress dampened-routes [ fields { fieldOptions } ] [ delta ] [ filter ]







show ip bgp neighbors paths

Description: Displays path information for the specified BGP neighbor.

Syntax: show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress paths [ regularExpression ] [ filter ]



� regularExpression � regular expression to match the AS path. See show ip bgp regexp for information on regular expressions.



show ip bgp neighbors received prefix-filter

Description: Displays prefix-list outbound route filters received from the neighbor.

Syntax: show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress received prefix-filter [ filter ]





show ip bgp neighbors received-routesERX Edge Routers

433

show ip bgp neighbors received-routes

Description: Displays routes originating from the specified BGP neighbor before inbound policy is applied.

Syntax: show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress received routes [ fields { fieldOptions } ] [ delta ] [ filter ]







show ip bgp neighbors routes

Description: Displays routes originating from the specified BGP neighbor after inbound policy is applied.

Syntax: show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress routes [ fields { fieldOptions } ] [ delta ] [ filter ]







show ip bgp network434

show ip bgp network

Description: Displays information about a potentially originated prefix that was configured with the network command.

Syntax: show ip bgp [ addressFamilyIdentifier ] network [ networkNumber [ mask networkMask ] ] [ filter ]


� networkNumber � IP address of the network for which you want information displayed; if no network is specified, the fields are displayed for all networks




show ip bgp next-hops

Description: Displays information about BGP next hops.

Syntax: show ip bgp [ addressFamilyIdentifier ] next-hops [ ipAddress ] [ filter ]


� ipAddress � displays information only for this indirect next hop



show ip bgp paths

Description: Displays information about BGP AS paths.

Syntax: show ip bgp paths [ regularExpression ] [ filter ]

� regularExpression � regular expression to match that specifies the desired AS paths. See show ip bgp regexp for information on regular expressions.



show ip bgp peer-groupERX Edge Routers

435

show ip bgp peer-group

Description: Displays information about BGP peer groups.

Syntax: show ip bgp [ addressFamilyIdentifier ] peer-group [ peerGroupName ] [ filter ]


� peerGroupName � name of the BGP peer group



show ip bgp quote-regexp436

show ip bgp quote-regexp

Description: Displays information about BGP routes whose AS path matches the specified regular expression. Regular expressions match numbers for which the specified path is a substring�for example, if you specify 20, 200 matches because 20 is a substring of 200. You can disallow substring matching by using the underscore (_) metacharacter to constrain matching to the specified pattern; for example, _20_. You can use output filtering on the display.

Syntax: show ip bgp [ addressFamilyIdentifier ] quote-regexp pathExpression [ fields { fieldOptions } ] [ filter ]


� quote-regexp � indicates that only a single element is matched

� pathExpression � regular expression string describing the AS path or community to be matched. You must enclose elements containing a space within double quotes (�one element�).

Each element is either an AS number, a metacharacter, or a combination:

^ Matches the beginning of the path unless appearing as the first character within brackets; see below

[^ ] Matches any AS number except the ones specified within the brackets

$ Matches the end of the path

{ Matches the beginning of an AS_SET

} Matches the end of an AS_SET

( Matches the start of an AS_CONFED_SET or AS_CONFED_SEQ

) Matches the end of an AS_CONFED_SET or AS_CONFED_SEQ

. Matches any single character

* Matches zero or more occurrences of the preceding character

+ Matches one or more occurrences of the preceding character

? Matches zero or one occurrence of the preceding character. To use the ? metacharacter in a regular expression, you must enter the following key sequence: <Ctrl-v-?>. Otherwise, the CLI considers this to be a request for assistance in completing the command, rather than understanding it as a metacharacter.

show ip bgp quote-regexpERX Edge Routers

437

() Used with a multiplier metacharacter (*, +, ?) to specify patterns for multiple use. You can specify that a parenthesis be construed as a literal token instead of a metacharacter by immediately preceding it with a backslash:

$ matches the beginning of an AS_CONFED_SET or AS_CONFED_SEQ

$ matches the end of an AS_CONFED_SET or AS_CONFED_SEQ.

[ ] Matches any enclosed character; specifies a range of single characters

� Used within brackets to specify a range of AS numbers

_ Matches a ^, a $, a comma, a space, a {, or a }. Placed on either side of a string to specify a literal and disallow substring matching. Numerals enclosed by underscores can be preceded or followed by any of the characters listed above.

| Matches characters on either side of the metacharacter; logical OR




show ip bgp regexp438

show ip bgp regexp

Description: Displays information about BGP routes whose AS path matches the specified regular expression. Regular expressions match numbers for which the specified path is a substring�for example, if you specify 20, 200 matches because 20 is a substring of 200. You can disallow substring matching by using the underscore (_) metacharacter to constrain matching to the specified pattern; for example, _20_. You can use output filtering on the display.

Syntax: show ip bgp [ addressFamilyIdentifier ] regexp pathExpression [ fields { fieldOptions } ] [ filter ]


� regexp � indicates that multiple elements can be matched

� pathExpression � regular expression string describing the AS paths to be matched. You do not have to enclose elements containing a space within quotation marks (one element).

Each element is either an AS number, a metacharacter, or a combination:

^ Matches the beginning of the path unless appearing as the first character within brackets; see below

[^ ] Matches any AS number except the ones specified within the brackets

$ Matches the end of the path

{ Matches the beginning of an AS_SET

} Matches the end of an AS_SET

( Matches the start of an AS_CONFED_SET or AS_CONFED_SEQ

) Matches the end of an AS_CONFED_SET or AS_CONFED_SEQ

. Matches any single character

* Matches zero or more occurrences of the preceding character

+ Matches one or more occurrences of the preceding character

? Matches zero or one occurrence of the preceding character. To use the ? metacharacter in a regular expression, you must enter the following key sequence: <Ctrl-v-?>. Otherwise, the CLI considers this to be a request for assistance in completing the command, rather than understanding it as a metacharacter.

show ip bgp regexpERX Edge Routers

439

() Used with a multiplier metacharacter (*, +, ?) to specify patterns for multiple use. You can specify that a parenthesis be construed as a literal token instead of a metacharacter by immediately preceding it with a backslash:

$ matches the beginning of an AS_CONFED_SET or AS_CONFED_SEQ

$ matches the end of an AS_CONFED_SET or AS_CONFED_SEQ.

[ ] Matches any enclosed character; specifies a range of single characters

� Used within brackets to specify a range of AS numbers

_ Matches a ^, a $, a comma, a space, a {, or a }. Placed on either side of a string to specify a literal and disallow substring matching. Numerals enclosed by underscores can be preceded or followed by any of the characters listed above.

| Matches characters on either side of the metacharacter; logical OR




show ip bgp summary440

show ip bgp summary

Description: Displays filtered information about the status of all BGP connections. Only those fields that you specify are displayed, except that the Prefix field is always displayed. Default fields can be set with the default-fields peer command.

Syntax: show ip bgp [ addressFamilyIdentifier ] summary [ fields { fieldOptions } ] [ delta ] [ filter ]


� fields � displays only the specified fields; the display order of the fields is hard-coded and not affected by the order in which you enter them

� fieldOptions � field(s) to be displayed, in the formatall | [ intro | last-reset-reason | messages-received | messages-sent | peer-type | prefixes-received | remote-as | state | times-up | up-down-time | updates-received | updates-sent ]


� last-reset-reason � reason for most recent reset

� messages-received � total number of messages received from the peer

� messages-sent � total number of messages sent to the peer


� prefixes-received � number of unique prefixes received from the peer

� remote-as � the remote AS number of the peer

� state � state of the BGP session

� times-up � number of times the session has been established

� up-down-time � how long the session has been up or down

� updates-received � number of update messages received from the peer

� updates-sent � number of update messages sent to the peer




show ip community-listERX Edge Routers

441

show ip community-list

Description: Displays community list information.

Syntax: show ip community list [ listName ] [ filter ]

� listName � name of a community list



show ip demux interface

Description: Displays information about a subscriber interface.

Syntax: show ip demux interface interfaceType interfaceSpecifier [ filter ]





show ip dhcp-local binding

Description: Displays the mapping between the token or enduring IP address and the MAC address of the non-equal PPP subscriber�s computer.

Syntax: show ip dhcp-local binding ipAddress [ filter ]

� ipAddress � IP address of the subscriber�s personal computer



show ip dhcp-local cable-modem

Description: Displays the configuration and statistics for cable modem DHCP servers configured on the system.

Syntax: show ip dhcp-local cable-modem { dhcp-servers | statistics } [ delta ] [ filter ]

� dhcp-servers � displays a list of cable modem DHCP servers configured on the system

� statistics � displays statistics on responses and requests received from external DHCP servers and cable modems


show ip dhcp-local excluded442

show ip dhcp-local excluded

Description: Displays IP addresses that have been excluded. These are addresses that the DHCP local server does not allocate because they are already used by devices on the subnet.

Syntax: show ip dhcp-local excluded [ filter ]


show ip dhcp-local limits

Description: Displays the maximum number of leases available for each VPI, VCI, VLAN, and Ethernet Subnet from the DHCP local server.

Syntax: show ip dhcp-local limits [ filter ]



show ip dhcp-local pool

Description: Displays the configuration of DHCP local pools.

Syntax: show ip dhcp-local pool [ filter ]



show ip dhcp-local reserved

Description: Displays the static IP address/MAC address pairs that the DHCP local server supplies in standalone mode. This command does not display address pairs that the DHCP local server supplies in non-PPP equal access mode.

Syntax: show ip dhcp-local reserved [ filter ]



show ip dhcp-local statisticsERX Edge Routers

443

show ip dhcp-local statistics

Description: Displays statistics for the DHCP local server.

Syntax: show ip dhcp-local statistics [ delta ] [ filter ]





show ip domain-lookup

Description: Displays the name servers that you have specified on the system with the ip name-server command.

Syntax: show ip domain-lookup [ filter ]



show ip dvmrp

Description: Displays DVMRP information for a virtual router.

Syntax: show ip dvmrp [ delta ] [ filter ]




show ip dvmrp interface444

show ip dvmrp interface

Description: Displays dvmrp parameters for the specified interfaces.

Syntax: show ip dvmrp interface [ brief ] [ delta ] [ interfaceType interfaceSpecifier ] [ filter ]

� brief � specifies that a summary rather than detailed information is displayed






show ip dvmrp mroute

Description: Displays information about DVMRP routes to multicast groups.

Syntax: show ip dvmrp mroute [ group [ sourceAddress [ sourceMask ] ] ] [ filter ]

� group � IP address of a specific multicast group

� sourceAddress � IP address of the network on which the source resides

� sourceMask � subnet mask



show ip dvmrp neighborERX Edge Routers

445

show ip dvmrp neighbor

Description: Displays information about DVMRP neighbors.

Syntax: show ip dvmrp neighbor [ interfaceType interfaceSpecifier [ ipAddress ] ][ brief ] [ delta ] [ filter ]



� ipAddress � displays information about the neighbor at this IP address

� brief � specifies that a summary rather than detailed information is displayed




show ip dvmrp route

Description: Displays information about DVMRP routes.

Syntax: show ip dvmrp route [ ipAddress [ addressMask ] | interfaceType interfaceSpecifier ] [ brief ] [ filter ]

� ipAddress � displays the best route for this IP address

� addressMask � displays the route that exactly matches this IP address and subnet mask



� brief � displays a summary rather than detailed information



show ip dvmrp routeNextHop446

show ip dvmrp routeNextHop

Description: Displays information about the next hop.

Syntax: show ip dvmrp routeNextHop [ ipAddress [ addressMask [ interfaceType interfaceSpecifier ] ] ] [ filter ]

� ipAddress � IP address of the network for which you want to display information

� addressMask � mask for the subnet for which you want display information





show ip dynamic-interface-prefix

Description: Displays the prefix for the names of dynamic IP shared interfaces.

Syntax: show ip dynamic-interface-prefix [ vrfName ]



show ip explicit-paths

Description: Displays all explicit paths or a particular explicit path in a non-ERX implementation. See the show mpls explicit-paths command for a complete description and syntax.

show ip extcommunity-list

Description: Displays all extended-community lists or a specific extended-community list.

Syntax: show ip extcommunity-list [ listName ] [ filter ]




show ip forwarding-table slotERX Edge Routers

447

show ip forwarding-table slot

Description: Displays information on routing table memory, load errors, and status for the forwarding table of a specific line module.

Syntax: show ip forwarding-table slot slotNumber

� slotNumber � number of the slot containing the line module for which the table is displayed


show ip http

Description: Displays information about HTTP local servers, information about the parameters configured for the HTTP local server, and statistics about the connections to the HTTP local server.

Syntax: show ip http [ scalar | server | statistics [ delta ] ] [ filter ]

� scalar � display only information about the connections to the HTTP local server

� server � display only information about the parameters configured for the HTTP local server

� statistics� display only statistics about the connections to the HTTP local server




show ip igmp

Description: Displays IGMP information for a virtual router.

Syntax: show ip igmp [ delta ] [ filter ]




show ip igmp groups448

show ip igmp groups

Description: Displays information about statically joined and directly connected groups learned via IGMP.

Syntax: show ip igmp groups [ count ][ groupAddress [ interfaceType interfaceSpecifier ] ] [ filter ]

� count � displays the total number of groups learned

� groupAddress � IP address of a group for which you want to display information

� interfaceType � type of interface associated with the group address; for interface types, see Interface Types and Specifiers in About This Guide

� interfaceSpecifier � specifier for the interface associated with the group address; see Interface Types and Specifiers in About This Guide



show ip igmp interface

Description: Displays IGMP information for interfaces on which you enabled IGMP.

Syntax: show ip igmp interface [ brief | count ] [ delta ] [ interfaceType interfaceSpecifier ] [ filter ]

� brief � displays a summary of the information

� count � displays the total number of interfaces on which you enabled IGMP






show ip igmp-proxy

Description: Use to display IGMP proxy parameters on a virtual router.

Syntax: show ip igmp-proxy [ filter ]



show ip igmp-proxy groupsERX Edge Routers

449

show ip igmp-proxy groups

Description: Displays information about multicast groups that IGMP proxy interfaces reported.

Syntax: show ip igmp-proxy groups [ groupAddress | count ] [ filter ]

� groupAddress � IP address of a group for which you want to display information

� count � displays the number of groups that IGMP proxy reported



show ip igmp-proxy interface

Description: Display information about the interface on which you configured IGMP proxy.

Syntax: show ip igmp-proxy interface [ brief ] [ delta ] [ interfaceType interfaceSpecifier ] [ filter ]

� brief � displays summarized information






show ip interface450

show ip interface

Description: Displays current state of all IP interfaces or the IP interfaces you specify. The default is all interface types and all interfaces.

Syntax: show ip interface [ vrf vrfName ] { { [ brief | detail ] { other | [ interfaceType interfaceSpecifier ] } } | summary } [ delta ] [ filter ]


� brief � displays a brief summary of IP status and configuration information

� detail � shows a detailed display of IP status and configuration information



� summary � shows a detailed summary of IP status and configuration




show ip interface shares

Description: Displays information about shared IP interfaces for all IP interfaces or for the IP interfaces you specify. The default is all interface types and all interfaces.

Syntax: show ip interface shares [ vrf vrfName ] [ brief | detail ] [ interfaceType interfaceSpecifier ] [ delta ] [ filter ]


� brief � displays a brief summary of IP status and configuration information

� detail � shows a detailed display of IP status and configuration information






show ip interface vrfERX Edge Routers

451

show ip interface vrf

Description: Displays current state of all interfaces on the specified VRF.

Syntax: show ip interface vrf vrfName [ filter ]




show ip local pool

Description: Displays information about the local address pools configured on your system.

Syntax: show ip local pool [ [ name ] | [ statistics | group [ delta ] ] ] [ filter ]

� name � name of a specific local address pool (default is all pools)

� statistics � specifies that local pool statistics are to be shown

� group � specifies that local pool groups are to be shown




show ip mac-validate interface

Description: Displays the status of MAC address validation on the physical interface that you specify.

Syntax: show ip mac-validate interface interfaceType interfaceSpecifier ] [ filter ]


� interfaceSpecifier � particular interface; format varies according to interface type; see Interface Types and Specifiers


Mode(s): Privilege Exec

show ip mroute452

show ip mroute

Description: Displays information about all or specified multicast routes.

Syntax: show ip mroute [ groupIpAddress [ sourceIpAddress ] ] [ summary | count | statistics ] [ filter ]

� groupIpAddress � IP address of a multicast group

� sourceIpAddress � IP address of a multicast source

� summary � displays brief information about the multicast routes

� count � displays the number of groups and sources

� statistics � displays statistics for packets received through multicast routes that the system has added to the multicast routing table and established on the appropriate line modules



show ip multicast routing

Description: Displays information about the status of multicast routing on the system.

Syntax: show ip multicast routing



show ip multicast protocols

Description: Displays information about the multicast protocols enabled on the system.

Syntax: show ip multicast protocols [ brief ] [ filter ]

� brief � displays a summary rather than detailed information



show ip nfs

Description: Displays information about the interface that the current virtual router uses to exchange messages with the NFS server.

Syntax: show ip nfs [ filter ]



show ip ospfERX Edge Routers

453

show ip ospf

Description: Displays general information about OSPF routing processes.

Syntax: show ip ospf [ vrf vrfName ] [ delta ] [ filter ]





show ip ospf border-routers

Description: Displays routing table entries for area border and AS boundary routers.

Syntax: show ip ospf border-routers [ vrf vrfName ] [ filter ]




show ip ospf database

Description: Displays either the full IP OSPF database or a summary of the database.

Syntax: show ip ospf database [ vrf vrfName ] [ database-summary | { asbr-summary | external | network | nssa-external | router | summary | opaqueArea } [ ipAddress | internal ] ] [ filter ]


� database-summary � a summary of the database

� asbr-summary � ASBR summary link states

� external � external link states

� network � network link states

� nssa-external � NSSA External link states

� router � router link states

� summary � network summary link states

� opaqueArea � traffic-engineering opaque LSA states

� ipAddress � a link state IP address

� internal � internal LSA information



show ip ospf interface454

show ip ospf interface

Description: Displays a list of OSPF interfaces.

Syntax: show ip ospf interface [ vrf vrfName ] [ interfaceType interfaceSpecifier ] [ filter ]






show ip ospf internal-statistics

Description: Displays internal OSPF statistics.

Syntax: show ip ospf internal-statistics [ vrf vrfName ] [ filter ]




show ip ospf neighbors

Description: Displays a list of OSPF neighbors.

Syntax: show ip ospf neighbors [ vrf vrfName ] [ neighborAddress ] [ interfaceType interfaceSpecifier ] [ filter ]


� neighborAddress � router ID of a specified neighbor





show ip ospf remote-neighbor interfaceERX Edge Routers

455

show ip ospf remote-neighbor interface

Description: Displays interfaces associated with OSPF remote neighbors.

Syntax: show ip ospf remote-neighbor [ ipAddress ] interface [ vrf vrfName ] [ filter ]

� ipAddress � source IP address of a remote neighbor




show ip ospf spf-log

Description: Displays how often and why the router has run a full SPF calculation.

Syntax: show ip ospf spf-log [ vrf vrfName ] [ filter ]




show ip ospf virtual-links

Description: Displays the parameters and the current state of OSPF virtual links. A virtual link is a logical connection between two systems. To establish or maintain connectivity to the backbone, you can configure virtual links through nonbackbone areas. Virtual links serve to connect physically separate components of the backbone. The two endpoints of a virtual link are area border routers.

Syntax: show ip ospf virtual-links [ vrf vrfName ] [ filter ]




show ip pim auto-rp

Description: Displays information about rendezvous point routers and the RP mapping agent in a PIM-SM environment.

Syntax: show ip pim auto-rp [ filter ]



show ip pim dense-mode sg-state456

show ip pim dense-mode sg-state

Description: Displays information for each SG entry that PIM-DM knows about.

Syntax: show ip pim dense-mode sg-state [ group groupAddress [ source sourceAddress ] ] [ filter ]

� groupAddress � IP address of a multicast group

� sourceAddress � IP address of a multicast source



show ip pim interface

Description: Displays information about each PIM-DM interface.

Syntax: show ip pim interface [ interfaceType interfaceSpecifier ] [ count ] [ filter ]



� count � displays the number of incoming and outgoing PIM control packets



show ip pim neighbor

Description: Displays information about each PIM neighbor that the system has discovered.

Syntax: show ip pim neighbor [ interfaceType interfaceSpecifier ] [ filter ]





show ip pim remote-neighborERX Edge Routers

457

show ip pim remote-neighbor

Description: Displays information about all PIM remote neighbors or the specified remote neighbor.

Syntax: show ip pim remote-neighbor [ ipAddress ] [ count ] [ filter ]

� ipAddress � ipAddress of a remote neighbor

� count � display the number of remote neighbors



show ip pim rp

Description: Displays information about PIM group-to-RP mappings.

Syntax: show ip pim rp { groupAddress | mapping } [ filter ]

� groupAddress � address of a group for which you want to view group-to-RP mappings

� mapping � displays all RP-to-group mappings that the system has recorded



show ip pim rp-hash

Description: Shows which RP a multicast group is using.

Syntax: show ip pim rp-hash groupAddress [ filter ]

� group � IP address of multicast group for which you want to view the RP



show ip pim sparse-mode sg-state458

show ip pim sparse-mode sg-state

Description: Displays information for each SG entry that PIM-SM knows about.

Syntax: show ip pim sparse-mode sg-state [ group groupAddress [ source sourceAddress ] | rp rpAddress ] [ count ] [ filter ]

� groupAddress � IP address of a multicast group

� sourceAddress � IP address of a multicast source

� rpAddress � IP address of an RP router

� count � displays the number of SG entries



show ip pim sparse-mode unicast-route

Description: Displays the unicast routes that PIM-SM is using.

Syntax: show ip pim sparse-mode unicast-route [ routeAddress routeMask ] [ count ] [ filter ]

� routeAddress � IP address associated with a unicast route

� routeMask � network mask associated with a unicast route

� count � shows the number of unicast routes that PIM-SM is using.



show ip pim spt-threshold

Description: Displays the threshold for switching to the shortest-path-tree at a PIM DR.

Syntax: show ip pim spt-threshold [ filter ]



show ip prefix-listERX Edge Routers

459

show ip prefix-list

Description: Displays information about prefix lists.

Syntax: show ip prefix-list [ listName [ seq seqNum | ipPrefix [ longer | first-match ] ] ] [ filter ]

� listName � displays information for the prefix list having this name

� seqNum � displays the information for the prefix list entry having this sequence number

� ipPrefix � displays the information for the prefix list entry having this prefix, in the format IPbaseaddress/length; for example, 10.10.10.0/24

� longer � displays all entries for a prefix that are equal to or more specific than the specified prefix

� first-match � displays only an entry that matches the specified prefix



show ip prefix-list summary | detail

Description: Displays detailed or summary information about one or all prefix lists.

Syntax: show ip prefix-list { summary | detail } [ listName ] [ filter ]

� summary � displays summary information

� detail � displays detailed information

� listName � name of the prefix list



show ip prefix-tree

Description: Displays information about prefix trees.

Syntax: show ip prefix-tree [ treeName [ ipPrefix [ longer ] ] ] [ filter ]


� ipPrefix � displays the information for the prefix list entry having this prefix, in the format IPbaseaddress/length; for example, 10.10.10.0/24

� longer � displays all entries for a prefix that are equal to or more specific than the specified prefix



show ip prefix-tree summary | detail460

show ip prefix-tree summary | detail

Description: Displays detailed or summary information about one or all prefix trees.

Syntax: show ip prefix-tree {summary | detail } [ treeName ] [ filter ]

� summary � displays summary information





show ip profile

Description: Displays information on a specific IP profile.

Syntax: show ip profile profileName [ filter ]

� profileName � name of the profile you want to display


Mode(s): User Exec, Privilege Exec

show ip protocols

Description: Displays detailed information on IP protocols currently configured on the router.

Syntax: show ip protocols [ vrf vrfName ] [ summary ] [ filter ]

� vrfName � displays information on protocols only for the specified VRF

� summary � displays only a list of currently configured protocols



show ip redistribute

Description: Displays configured route redistribution policy.

Syntax: show ip redistribute [ vrfName ] [ filter ]




show ip ripERX Edge Routers

461

show ip rip

Description: Displays limited RIP general status information.

Syntax: show ip rip [ vrf vrfName ] [ brief ] [ ifconfig ] [ ipAddress ] [ filter ]


� brief � displays limited information

� ifconfig � displays address and interface configuration information instead of the default operational data

� ipAddress � displays information only for specific RIP network



show ip rip database

Description: Displays route entries in the RIP routing table (RIP database).

Syntax: show ip rip database [ vrf vrfName ] [ all ] [ inactive ] [ filter ]


� all � displays active and inactive routes learned via RIP updates

� inactive � displays routes the system will discard in the immediate future



show ip rip network

Description: Displays the networks associated with the RIP routing process.

Syntax: show ip rip network [ vrf vrfName ] [ filter ]




show ip rip peer462

show ip rip peer

Description: Displays all RIP neighbors with limited information about each peer.

Syntax: show ip rip peer [ vrf vrfName ] [ filter ]




show ip rip statistics

Description: Displays global statistics associated with the RIP routing process. If you specify an IP address, additionally displays statistics for that interface.

Syntax: show ip rip statistics [ vrf vrfName ] [ ipAddress ] [ delta ] [ filter ]


� ipAddress � address of IP interface where RIP is running; identifies RIP network




show ip rip summary-address

Description: Displays RIP summary addresses.

Syntax: show ip rip summary-address [ vrf vrfName ] [ ipAddress [ ipMask ] ] [ filter ]


� ipAddress � address of IP interface where RIP is running

� ipMask � IP mask of the specific address



show ip routeERX Edge Routers

463

show ip route

Description: Displays current state of the routing table.

Syntax: show ip route [ vrf vrfName ] [ ipAddress [ ipMask ] [ detail ] ] [ all ] [ bgp | isis | local | ospf | other | rip | static ] [ filter ]

show ip route summary [ vrf vrfName ] [ filter ]

� vrfName � displays the contents of the IP routing table associated with a VRF

� name � displays the best route to the IP address resolved from this domain name

� ipAddress � specifies the IP address or domain name to show

� domainName � displays information for the IP address resolved from the specified domain name

� ipMask � IP mask of the specific address to show

� detail � displays detailed information about the specific prefix; currently shows the tag added via the ip route command

� all � displays all routes in the routing table inserted from all protocols (not just the best routes that are used for forwarding)

� bgp � displays the best BGP routes in the routing table

� isis � displays the best IS-IS routes in the routing table

� local � displays the best locally connected routes in the routing table

� ospf � displays the best OSPF routes owned by in the routing table

� other � displays the best internal control routes in the routing table

� rip � displays the best RIP routes in the routing table

� static � displays the best static routes added by network management to the routing table

� summary � displays summary counters for all routes in the IP routing table



show ip route slot464

show ip route slot

Description: Displays the interface and next hop for an IP address in the routing table of a line module.

Syntax: show ip route slot slotNumber [ vrf vrfName ] ipAddress

� slotNumber � number of slot containing the line module for which the information is displayed

� vrf � specifies a VRF context


� ipAddress � IP address to look up in the routing table


show ip rpf-route

Description: Displays routes that the system can use to verify source addresses in multicast packets.

Syntax: show ip rpf-route [ ipAddress [ ipMask ] ] [ protocol ] [ filter ]

� ipAddress � specific IP address to show

� ipMask � IP mask of the specific address to show

� protocol � one of the following options

� access � displays access-server routes (BGP)

� access-internal � displays internal routes to directly connected clients (BGP)

� bgp � displays routes owned by BGP

� isis � displays routes owned by IS-IS

� local � displays locally connected routes

� ospf � displays routes owned by OSPF

� other � displays internal control routes

� rip � displays routes owned by RIP

� static � displays static routes added by network management



show ip sshERX Edge Routers

465

show ip ssh

Description: Displays the current state of the SSH server.

Syntax: show ip ssh [ detail ] [ filter ]




show ip static

Description: Displays general status information for static routes added by network management to the routing table.

Syntax: show ip static [ vrfName ] [ ipAddress ipMask [ all ] ] [ filter ]


� ipAddress � an IP address to show

� ipMask � an IP mask of the specific address to show

� all � displays all routes starting at the specified prefix



show ip tcp statistics

Description: Displays TCP statistics.

Syntax: show ip tcp statistics [ vrf vrfName ] [ brief | detailed ] [ delta ] [ localAddress [ localPort [ remoteAddress [ remotePort ] ] ] ] [ filter ]


� brief � displays a brief summary of each TCP connection

� detailed � displays detailed statistics for each TCP connection


� localAddress � displays TCP connections to and from the IP address on this system

� localPort � displays TCP connections to/from the port on this router

� remoteAddress � displays TCP connections to and from the remote IP address

� remotePort � displays TCP connections to and from the remote port



show ip traffic466

show ip traffic

Description: Displays statistics about IP traffic.

Syntax: show ip traffic [ vrfName ] [ delta ] [ filter ]





show ip tunnel reassembly statistics

Description: Displays statistics on the reassembly of fragmented tunnel packets within the current virtual router context.

Syntax: show ip tunnel reassembly statistics [ detail ] [ all ] [ filter ]

� detail � displays detailed reassembly statistics that include packets reassembled or discarded per protocol

� all � displays reassembly statistics for all virtual routers on the system



show ip udp statistics

Description: Displays UDP statistics.

Syntax: show ip udp statistics [ vrfName ] [ delta ] [ filter ]





show ip vrfERX Edge Routers

467

show ip vrf

Description: Displays information for a specified VRF and its associated interfaces or all VRFs and their associated interfaces for the current virtual router context.

Syntax: show ip vrf [ [ detail ] [ vrfName ] [ filter ] | interfaces [ detail ] ]

� vrfName - name of the VRF for which information is displayed

� detail - displays detailed information


� interfaces - displays all VRFs in the virtual router and their associated interfaces


show ip vrrp

Description: Displays detailed summary of VRID configured on interface identified. If the VRID is not identified, a detailed summary of all VRIDs configured on interface identified is provided.

Syntax: show ip vrrp [ interface interfaceType interfaceSpecifier [ vrid ] ] [ filter ]



� vrid � virtual router ID; a number in the range 1�255

� filter� see Filtering show Commands in About This Guide


show ip vrrp brief

Description: Displays brief summary of VRIDs configured on the interface identified.

Syntax: show ip vrrp brief [ interface interfaceType interfaceSpecifier [ vrid ] ] [ filter ]






show ip vrrp neighbor468

show ip vrrp neighbor

Description: Displays summary of all neighbors known to the VRRP router configured on the interface identified.

Syntax: show ip vrrp neighbor [ interface interfaceType interfaceSpecifier [ vrid ] ] [ filter ]






show ip vrrp statistics

Description: Displays either global statistics and/or per interface and VRID pair statistics.

Syntax: show ip vrrp statistics [ global | [ interface interfaceType interfaceSpecifier [ vrid ] ] [ delta ] [ filter ]

� global � specify for global counters







show ip vrrp summary

Description: Displays a summary count on all VRIDs configured.

Syntax: show ip vrrp summary


show ipsec lifetimeERX Edge Routers

469

show ipsec lifetime

Description: Displays the configured default lifetime of phase II SAs.

Syntax: show ipsec lifetime


show ipsec local-endpoint

Description: Displays the address and transport virtual router of local endpoints.

Syntax: show ipsec local-endpoint [ transport-virtual-router transportVirtualRouter ]

� transportVirtualRouter � name of virtual router that includes source and/or destination addresses assigned to tunnel interfaces


show ipsec transform-set

Description: Displays transform sets configured on the system.

Syntax: show ipsec transform-set [ transformSetName ]

� transformSetName � displays information on a specific transform set


show ipsec tunnel470

show ipsec tunnel

Description: Displays information on tunnels that are configured on a specific virtual router.

Syntax: show ipsec tunnel [ tunnelName | [ virtual-router vrName ] ip ipAddress ][ state { adminState | operStatus } ] [ filter ] [ detail ] [ delta ]

� tunnelName � displays information for the specified tunnel

� vrName � name of virtual router on which tunnels are configured

� ip � display tunnels that are using a particular IP address

� state � restricts display to tunnels in a particular state

� adminState � displays tunnels in an administrative state of enabled or disabled

� operStatus � displays tunnels in an operational state of up, down, lower-down, or not-present

� detail � displays configuration and statistics of tunnels




show ipsec tunnel summary

Description: Displays a summary of all tunnels configured on the system.

Syntax: show ipsec tunnel summary [ filter ]



show isis databaseERX Edge Routers

471

show isis database

Description: Displays the IS-IS link state database.

Syntax: show isis database [ level-1 | level-2 | l1 | l2 | lspid | detail | verbose ]* [ filter ]

� level-1 � displays the IS-IS link state database for level 1

� level-2 � displays the IS-IS link state database for level 2

� l1 � displays the IS-IS link state database for level 1

� l2 � displays the IS-IS link state database for level 2

� lspid � link state PDU identifier in the form xxxx.xxxx.xxxx.yy.zz; when specified, displays the contents of a single link state PDU by its ID number

� detail � additionally displays contents of each link state PDU; if not specified, a summary display is provided

� verbose � additionally displays MPLS traffic engineering information




show isis mpls adjacency-log

Description: Displays a log of the last 20 IS-IS adjacency changes.

Syntax: show isis mpls [ traffic-eng ] adjacency-log [ filter ]




show isis mpls advertisements

Description: Displays the last record flooded from MPLS.

Syntax: show isis mpls [ traffic-eng ] advertisements [ filter ]




show isis mpls tunnel472

show isis mpls tunnel

Description: Displays information about tunnels used in the calculation of IS-IS next hops.

Syntax: show isis mpls [ traffic-eng ] tunnel [ filter ]




show isis spf-log

Description: Displays how often and why the router has run a full SPF calculation.

Syntax: show isis spf-log [ filter ]



show isis summary-addresses

Description: Displays aggregate address information for IS-IS.

Syntax: show isis summary-addresses [ filter ]



show isis topology

Description: Displays the paths to all intermediate systems.

Syntax: show isis topology [ [ level-1 | level-2 | l1 | l2 ]* [ nsap ] | [ nsap ] [ level-1 | level-2 | l1 | l2 ]* ] [ filter ]

� level-1 � displays paths to all level 1 routers in the area

� level-2 � displays paths to all level 2 routers in the domain

� l1 � displays paths to all level 1 routers in the area

� l2 � displays paths to all level 2 routers in the domain


� nsap � the NSAP address



show l2fERX Edge Routers

473

show l2f

Description: Displays global configuration and status information for L2F on the system.

Syntax: show l2f [ filter ]



show l2f destination

Description: Displays information about selected L2F destinations.

Syntax: show l2f destination [ detail ] [ destinationName | | virtual-router vrName | ip ipAddress ] [ filter ]

� detail � provides complete information about the specified destinations

� destinationName � name the system assigns to the peer at the other end of the tunnel


� ipAddress � IP address of the peer at the other end of the tunnel



show l2f destination summary

Description: Displays the configured and operational status of all L2F destinations.

Syntax: show l2f destination summary [ filter ]



show l2f session474

show l2f session

Description: Displays detailed information about selected L2F sessions.

Syntax: show l2f session [ detail ] [ state { adminState | operStatus } ] [ sessionName | [ virtual-router vrName ] ip ipAddress [ sessionName ] ] [ filter ]

� detail � provides complete information about the specified sessions

� state � displays information on sessions that are in a particular administrative state or operational status

� adminState � use the online Help to see a list of possible administrative states

� operStatus � use the online Help to see a list of possible selections for operational status

� sessionName � a session name

� vrName � name of the virtual router on which the session exists

� ipAddress � IP address of the peer at the other end of the session



show l2f session summary

Description: Displays the configured and operational status of all L2F sessions.

Syntax: show l2f session summary [ filter ]



show l2f tunnelERX Edge Routers

475

show l2f tunnel

Description: Displays detailed information on the configured and operational status of selected L2F tunnels.

Syntax: show l2f tunnel [ detail ] [ state { adminState | operStatus } ] [ tunnelName | [ virtual-router vrName ] ip ipAddress [ tunnelName ] ] [ filter ]

� detail � provides complete information about the specified tunnels

� state � displays information on tunnels that are in a particular administrative state or operational status

� adminState � use the online Help to see a list of possible administrative states

� operStatus � use the online Help to see a list of possible selections for operational status

� tunnelName � name of an L2F tunnel





show l2f tunnel summary

Description: Displays the configured and operational status of all L2F tunnels.

Syntax: show l2f tunnel summary [ filter ]



show l2tp

Description: Displays information about the L2TP configuration on the system.

Syntax: show l2tp [ filter ]



show l2tp destination476

show l2tp destination

Description: Displays information about selected L2TP destinations.

Syntax: show l2tp destination [ detail ] [ destinationName | [ virtual-router vrName ] ip ipAddress ] [ filter ]

� detail � provides complete information about the specified destinations, including destination profiles

� destinationName � name the system assigns to the peer at the other end of the tunnel





show l2tp destination profile

Description: Displays destination profile configuration.

Syntax: show l2tp destination profile [ profileName ]

� profilename � provides detailed information on a designated profile


show l2tp destination summary

Description: Displays the configured and operational status of all L2TP destinations.

Syntax: show l2tp destination summary [ filter ]

� filter � see Filtering show Commands in About This GuideEdinburgh5.0


show l2tp sessionERX Edge Routers

477

show l2tp session

Description: Displays detailed information about selected L2TP sessions.

Syntax: show l2tp session [ detail ] [ state { adminState | ifOperStatus } ] [ l2tpName | [ virtual-router vrName ] ip ipAddress [ l2tpNameNoDest ] ] [ filter ]

� detail � provides complete information about the specified sessions

� state � restricts display to sessions in a specific state

� adminState � effective administrative state

� ifOperStatus � operational state

� l2tpName � session name

� vrName � name of the virtual router on which the session exists


� l2tpNameNoDest � name of the session



show l2tp session summary

Description: Displays the configured and operational status of all L2TP sessions.

Syntax: show l2tp session summary [ filter ]



show l2tp tunnel478

show l2tp tunnel

Description: Displays detailed information on the configured and operational status of selected L2TP tunnels.

Syntax: show l2tp tunnel [ detail ] [ state { adminState | ifOperStatus } ] [ l2tpName | [ virtual-router vrName ] ip ipAddress [ l2tpNameNoDest ] ] [ filter ]

� detail � provides complete information about the specified sessions, including the L2TP host profile name

� state � restricts display to tunnels in one of the following specific states:

� adminState � effective administrative state

� ifOperStatus � operational state

� l2tpName � tunnel name

� vrName � the name of the virtual router on which the tunnel exists


� l2tpNameNoDest � tunnel name



show l2tp tunnel summary

Description: Displays the configured and operational status of all L2TP tunnels.

Syntax: show l2tp tunnel summary [ filter ]



show last-reset

Description: Displays information describing the reason for the system�s last reload, whether specified by the user or resulting from a system problem.

Syntax: show last-reset [ filter ]



show license b-rasERX Edge Routers

479

show license b-ras

Description: Displays the b-ras license string.

Syntax: show license b-ras [ filter ]



show license ipsec-tunnels

Description: Displays the IPSec tunnel license string.

Syntax: show license ipsec-tunnel [ filter ]



show line console 0

Description: Displays the speed configured for all future console sessions and the current console session.

Syntax: show line console 0 [ filter ]



show line vty

Description: Displays the configuration of vty lines.

Syntax: show line vty lineNumber [ filter ]

� lineNumber � number of the vty line; only line numbers that you have configured are available for display



show log configuration480

show log configuration

Description: Displays information on the logging configuration settings for a selected category.

Syntax: show log configuration [ category eventCategory ] [ filter ]

� category � limits the display to a specific log category

� eventCategory � the log category to be displayed; refer to the CLI online help for available options



show log data

Description: Displays the system log.

Syntax: show log data [ nv-file | category eventCategory ] [ severity { severityValue | severityNumber } ] [ delta ] [ filter ]

� nv-file � displays the nv-file log

� category � limits the display to a specific log category

� eventCategory � log category to display; refer to the CLI online help for available options

� severity � minimum severity of the log messages displayed; described either by a descriptive term�severityValue�or by a corresponding number�severityNumber�in the range 0�7; the lower the number, the higher the priority:









� delta � limits the display to events that occurred after the baseline



show mplsERX Edge Routers

481

show mpls

Description: Displays status and configuration information about MPLS on the router or on specific interfaces.

Syntax: show mpls [ interface [ shim ] [ state not-up ] [ brief | interfaceType interfaceSpecifier ] ] [ filter ]

� interface � displays information only for the MPLS interfaces; if not specified, only global information is displayed

� shim � displays information about shim interfaces

� state not-up � displays information only about interfaces that are not up

� brief � displays limited interface information





show mpls binding482

show mpls binding

Description: Displays label bindings for routes that are used for forwarding; from the MPLS label information base.

Syntax: show mpls [ ip ] binding [ ldp | cr-ldp | layer2-vc ] [ destAddr [ maskLength | maskAddress ][ longer-prefixes ] ] [ interface interfaceType interfaceSpecifier ][ neighbor ipAddress ] [ generic | atm ] [ local | remote ] [ label { atm vpi vci | implicit-null-label | labelNumber [ labelRangeEnd ] } ] [ brief ] [ filter ]

� ip � optional keyword for compatibility with non-ERX implementations

� ldp � displays binding information for routes learned via LDP

� cr-ldp � displays binding information for routes learned via CR-LDP

� layer2-vc � displays binding information for routes learned via layer 2 over MPLS

� destAddr � destination address for which you want information displayed; if not specified, displays all fields

� maskLength � prefix length for the destination address

� maskAddress � address mask to be applied to the destination address

� longer-prefixes � displays information for prefixes that are equal to or more specific than the specified prefix

� interface � displays information for the specified interface



� ipAddress � displays information for neighbor with this IP address

� generic � displays information only for generic labels

� atm � displays information only for ATM VPI/VCI labels

� local � displays information only for local labels

� remote � displays information only for remote labels

� atm � displays information for the specified ATM VPI/VCI labels

� vpi � specifies ATM VPI that partially designates a label

� vci � specifies ATM VCI that partially designates a label

� implicit-null-label � displays binding information for the implicit null label

show mpls explicit-pathsERX Edge Routers

483

� labelNumber � displays information for this label only; a number in the range 16�1048575

� labelRangeEnd � when specified, displays information for labels ranging from labelNumber to labelRangeEnd; a number in the range 16�1048575

� brief � displays limited information



show mpls explicit-paths

Description: Displays all explicit paths or a particular explicit path.

Syntax: show { mpls | ip } explicit-paths [ detail | { name pathName | identifier pathNum } ] [ filter ]

� ip � keyword for compatibility with non-ERX implementations


� detail � specifies a verbose display [not currently supported]

� pathName � name that identifies an explicit path

� pathNum � number that identifies an explicit path



show mpls forwarding484

show mpls forwarding

Description: Displays statistics and configuration forwarding information for LSPs created on the LSR.

Syntax: show mpls forwarding [ ldp | cr-ldp | rsvp-te | layer2-vc ] [ label { atm vpi vci | implicit-null-label | labelNumber [ labelRangeEnd ] } ] [ destination destAddr [ { maskLength | maskAddress } [ longer-prefixes ] ] ] [ interface interfaceType interfaceSpecifier ] [ nexthop ipAddress ] [ brief | count-only ] [ filter ]

� ldp � displays LDP-specific forwarding information

� cr-ldp � displays CR-LDP�specific forwarding information

� rsvp-te � displays RSVP-TE�specific forwarding information

� layer2-vc � displays layer-2-over-MPLS�specific forwarding information

� atm � displays information for the specified ATM VPI/VCI labels

� vpi � specifies ATM VPI that partially designates a label

� vci � specifies ATM VCI that partially designates a label

� implicit-null-label � displays forwarding information for the implicit null label

� labelNumber � displays information for this label only; a number in the range 16�1048575

� labelRangeEnd � displays information for labels ranging from labelNumber to labelRangeEnd; a number in the range 16�1048575

� destAddress � destination address of tunnels to be displayed







� ipAddress � displays information for next hop with this IP address

� brief � displays only brief or summary information about the tunnels

� count-only � displays a count of entries that match the specified conditions




show mpls ldp targeted sessionERX Edge Routers

485

show mpls ldp targeted session

Description: Displays information about the LDP targeted sessions.

Syntax: show mpls ldp targeted session [ all | receive | send ]

� all � displays all targeted sessions

� receive � displays only targeted receive sessions

� send � displays only targeted send sessions


show mpls minor-interface486

show mpls minor-interface

Description: Displays status and configuration for all minor interfaces or a specific minor interface in the current router context.

Syntax: show mpls [ traffic-eng ] minor-interface [ name interfaceName ] [ role { all | head | tail | middle | remote | lower } | up | down ] [ source-id sourceAddress [ srcId ] ] [ destination destAddr [ { maskLength | maskAddress } [ longer-prefixes ] ] ] [ interface interfaceType interfaceSpecifier ] [ nexthop ipAddress ] [ brief | count-only ] [ filter ]

� interfaceName � name of minor interface to be displayed

� role � displays tunnels in which the system has a specified role:

� all � displays all tunnels of which the system is a part

� head � displays tunnels where the system is the ingress router, or tunnel head end

� tail � displays tunnels where system is the egress router, or tunnel tail end (endpoint or destination of the tunnel)

� middle � displays tunnels where system is a transit router on the tunnel

� remote � displays tunnels where system is a transit router or egress router (tail end)

� lower � displays tunnels with stacked upper tunnels

� up � displays tunnels that are up

� down � displays tunnels that are down

� sourceAddress � source address of tunnels to be displayed

� srcId � local ID associated with source address of tunnels to be displayed, an integer from 0 to 65535







show mpls profileERX Edge Routers

487




� count-only � displays a count for entries that match the specified conditions




show mpls profile

Description: Displays a specific LDP, RSVP-TE, or tunnel profile, or all LDP, RSVP-TE, or tunnel profiles.

Syntax: show mpls { ldp | rsvp | tunnels } profile [ profileName ] [ filter ]

� ldp � specifies LDP profile

� rsvp � specifies RSVP-TE profile

� tunnels � specifies the tunnel profile

� profileName � name of the profile to be displayed



show mpls rsvp

Description: Displays RSVP path control blocks, reservation state control blocks, or complete RSVP session information for the virtual router.

Syntax: show mpls rsvp { psb | rsb | sessions }

� psb � displays path state control blocks

� rsb � displays reservation state control blocks

� sessions � displays RSVP session information


show mpls tunnels488

show mpls tunnels

Description: Displays status and configuration for all tunnels or for a specific tunnel in the current router context.

Syntax: show mpls [ traffic-eng ] tunnels [ name tunnelName ] [ role { all | head | tail | middle | remote | lower } | up | down ] [ source-id sourceAddress [ srcId ] ] [ destination destAddr [ { maskLength | maskAddress } [ longer-prefixes ] ] ] [ interface interfaceType interfaceSpecifier ] [ nexthop ipAddress ] [ brief | count-only ] [ filter ]


� tunnelName � name of tunnel or minor interface to be displayed

� role � displays tunnels in which the system has a specified role:

� all � displays all tunnels of which the system is a part

� head � displays tunnels where the system is the ingress router, or tunnel head end

� tail � displays tunnels where system is the egress router, or tunnel tail end (endpoint or destination of the tunnel)

� middle � displays tunnels where system is a transit router on the tunnel

� remote � displays tunnels where system is a transit router or egress router (tail end)

� lower � displays tunnels with stacked upper tunnels

� up � displays tunnels that are up

� down � displays tunnels that are down

� sourceAddress � source address of tunnels to be displayed

� srcId � local ID associated with source address of tunnels to be displayed, an integer from 0 to 65535







show multicast group limitERX Edge Routers

489




� count-only � displays a count for entries that match the specified conditions




show multicast group limit

Description: Displays the number of IGMP groups associated with a port, and if configured, the maximum number of groups that a port can accept.

Syntax: show multicast group limit [ filter ]



show nbma arp

Description: Displays ARP table entries for NBMA interfaces.

Syntax: show nbma arp [ interfaceType interfaceSpecifier ]




show ntp associations

Description: Displays information about NTP servers.

Syntax: show ntp associations [ detail ] [ filter ]

� detail � provides expanded information about the ntp servers, rather than a summary



show ntp status490

show ntp status

Description: Displays the NTP configuration and status for the system.

Syntax: show ntp status [ filter ]



show nvs

Description: Displays information about NVS.

Syntax: show nvs summary [ filter ]



show policy-list

Description: Displays information on policy lists.

Syntax: show policy-list [ policyName [ precedence precValue [ rule ruleNumber ] ] ][ brief ] [ filter ]

� policyName � policy name to be displayed

� precValue � policy rule precedence to be displayed

� ruleNumber � policy rule to be displayed




show ppp interface

Description: Displays information about the PPP interface type that you specify.

Syntax: show ppp interface [ interfaceType interfaceSpecifier ] [ full | { dataRestriction }* [ protocolRestriction ]* ][ state stateRestriction ] [ delta ] [ filter ]

For multilinked PPP interfaces, the following options are additionally available:

show ppp interface mlppp [ interfaceSpecifier ] members [ filter ]

show ppp interface mlppp links [ filter ]

show ppp interfaceERX Edge Routers

491



� full � displays configuration, status, and statistics information for the interface, including information specific to LCP, IPCP, OSINLCP, MPLSNLCP, PAP, and CHAP; equivalent to specifying config status statistics

� dataRestriction � one or more of the following keywords; you can repeat a keyword without effect

� config � displays information on the PPP interface configuration

� status � displays information on the PPP interface operational status

� statistics � displays information on the PPP interface statistics


� protocolRestriction � one or more of the following keywords

� lcp � displays LCP-specific information

� ip � displays IPCP-specific information

� osi � displays OSINLCP-specific information

� mpls � displays MPLSNLCP-specific information

� pap � displays PAP-specific information

� chap � displays CHAP-specific information

� stateRestriction � information is displayed only for interfaces in one of the following specified states:

� open � interface is administratively enabled, meaning that the no ppp shutdown command is operational

� closed � interface is administratively disabled, meaning that the ppp shutdown command is operational

� up � interface on which the LCP has been negotiated

� down � interface on which the LCP has not been negotiated, the negotiations have failed, or the connection has been ended

� lower-layer-down � interface that is not up and is waiting for the lower layer to come up to initiate negotiations for LCP

� not-present � interface that is not present because the hardware is not available. When the interface is in this state, no detailed information is available.

� passive � interface with the operational status passive

� tunneled � tunneled PPP interfaces

show ppp interface492

� no-ip � interface on which IPCP is not configured

� ip-open � interface on which IPCP is administratively enabled, meaning that the no ppp shutdown ip command is operational

� ip-closed � interface on which IPCP is administratively disabled, meaning that the ppp shutdown ip command is operational

� ip-up � interface on which the IPCP has been negotiated

� ip-down � interface on which the IPCP has not been negotiated, the negotiations failed, or the connection has been ended

� no-osi � interface on which OSINLCP is not configured

� osi-open � interface on which OSINLCP is administratively enabled, meaning that the no ppp shutdown osi command is operational

� osi-closed � interface on which OSINLCP is administratively disabled, meaning that the ppp shutdown osi command is operational

� osi-up � interface on which the OSINLCP has been negotiated

� osi-down � interface on which the OSINLCP has not been negotiated, the negotiations failed, or the connection has been ended

� no-mpls � interface on which MPLSNLCP is not configured

� mpls-open � interface on which MPLSNLCP is administratively enabled, meaning that the no ppp shutdown mpls command is operational

� mpls-closed � interface on which MPLSNLCP is administratively disabled, meaning that the ppp shutdown mpls command is operational

� mpls-up � interface on which the MPLSNLCP has been negotiated

� mpls-down � interface on which the MPLSNLCP has not been negotiated, the negotiations failed, or the connection has been ended



� members � lists all MLPPP member links, or only those for a specified MLPPP bundle

� links � lists the MLPPP bundles and the PPP interfaces contained within them.


show ppp interface summaryERX Edge Routers

493

show ppp interface summary

Description: Displays a summary of all nonmultilinked and multilinked PPP interfaces configured on the system.

Syntax: show ppp interface summary [ config | admin | oper ] [ filter ]

� config � displays summary information about PPP configuration status

� admin � displays summary information about PPP administration status

� oper � displays summary information about PPP operational status



show pppoe interface

Description: Displays information on the PPPoE interface you specify. Use the summary keyword to display information for all configured PPPoE interfaces.

Syntax: show pppoe interface [ { fastEthernet | gigabitEthernet | serial | atm } interfaceSpecifier ] [ delta ] [ filter ]

show pppoe interface [ summary ] [ full ]

� fastEthernet � specifies an FE interface

� gigabitEthernet � specifies a GE interface






� summary � displays administrative and operational status of all configured PPPoE interfaces

� full � displays configuration, status, and statistics information


show pppoe subinterface494

show pppoe subinterface

Description: Displays all available data for a specific PPPoE subinterface. Use the summary keyword to display information for all configured PPPoE subinterfaces.

Syntax: show pppoe subinterface [ { fastEthernet | gigabitEthernet | serial | atm } interfaceSpecifier ] [ delta ] [ filter ]

show pppoe subinterface [ summary ] [ full ]








� summary � displays administrative and operational status of all configured PPPoE subinterfaces

� full � displays configuration, status, and statistics information


show processes

Description: Use to show memory or CPU resources used by system processes and to force the system to release available memory on the SRP module.

Syntax: show processes [ cpu | memory ] [ filter ]

cpu � displays CPU utilization; default display if you omit any keyword

memory � displays system memory used and forces the system to release available memory



show profileERX Edge Routers

495

show profile

Description: Displays information about a specific IP profile, such as the available PPPoE profile information: PPPoE URL string, PPPoE MOTM string, or both. If neither exists, the fields do not appear in the display.

Syntax: show profile profileName [ filter ]

� profileName � name of the profile you want to display


Mode(s): User Exec, Privilege Exec

show profile brief

Description: Lists the names of all IP profiles.

Syntax: show profile brief [ filter ]



show qos interface-hierarchy

Description: Displays information on the systems QoS interface hierarchy.

Syntax: show qos-interface-hierarchy interfaceType interfaceSpecifier [ filter ]





show qos-port-type-profile

Description: Displays information on the QoS port-type profile for particular interface type.

Syntax: show qos-port-type-profile [ interfaceType ] [ filter ]

� interfaceType � specifies one of the following interface types to be associated with the QoS port-type profile: atm, ethernet, serial, server-port



show qos-profile496

show qos-profile

Description: Displays information on QoS profile(s) configured on the ERX system.

Syntax: show qos-profile [ qosProfileName ] [ brief | references ] [ filter ]



� references � display interface profiles which reference this profile



show qos queue-thresholds

Description: Displays the color-based thresholds for queues on each egress slot.

Displaying queue thresholds by queue-profile shows buffer memory information by queue-profile, and, within that profile, shows the thresholds for each region.

Displaying queue thresholds by region organizes the buffer memory information by queue region, and, within each region, shows the buffer allocations for each queue-profile.

Syntax: show qos queue-thresholds egress-slot egressSlot [ queue-profile [ queueProfileName ] | region [ regionNumber ] ] [ filter ]

� queue-thresholds � displays color-based thresholds for queues on an egress-slot

� egress-slot � displays color-based thresholds for an egress-slot

� queue-profile � displays thresholds for each region of the queue profile


� region � displays egress memory or buffer region oversubscription

� regionNumber � number identifying the egress memory or buffer region on the line card; range 0 � 7


show queue-profileERX Edge Routers

497

show queue-profile

Description: Displays information on queue profile(s) configured on the ERX system.

Syntax: show queue-profile [ queueProfileName ] [ brief | references ] [ filter ]



� references � display QoS profiles that reference this profile



show radius

Description: Displays information on RADIUS authentication and accounting servers.

Syntax: show radius [ authentication | accounting ] { servers | statistics [ delta ] } [ filter ]

� authentication � displays authentication information only

� accounting � displays accounting information only

� servers � displays a list of authentication and/or accounting servers

� statistics � displays authentication and/or accounting statistics




show radius acct-session-id-format

Description: Displays RADIUS Acct-Session-Id format used for RADIUS attribute 44, Acct-Session-Id.

Syntax: show radius acct-session-id-format [ filter ]



show radius algorithm

Description: Displays the RADIUS algorithm that the RADIUS servers use.

Syntax: show radius algorithm [ filter ]



show radius attributes-ignored498

show radius attributes-ignored

Description: Displays whether RADIUS attribute 9, framed-ip-netmask, is accepted or ignored by the RADIUS server. See radius ignore framed-ip-netmask command.

Syntax: show radius attributes-ignored [ filter ]



show radius attributes-included

Description: Display the RADIUS attributes that are included in and excluded from Access-Request, Acct-Start, and Acct-Stop messages. You configure attribute inclusion using the radius include commands.

Syntax: show radius attributes-included [ filter ]



show radius calling-station-delimiter

Description: Displays the delimiter used in RADIUS attribute 30, Calling-Station-Id, for the authenticated ATM PPP users.

Syntax: show radius calling-station-delimiter [ filter ]



show radius calling-station-format

Description: Displays the format of RADIUS attribute 31, Calling-Station-Id.

Syntax: show radius calling-station-format [ filter ]



show radius dsl-port-typeERX Edge Routers

499

show radius dsl-port-type

Description: Displays the DSL port type used in RADIUS attribute 61, NAS-Port-Type, for ATM users.

Syntax: show radius dsl-port-type [ filter ]



show radius ethernet-port-type

Description: Display RADIUS attribute 61, NAS-Port-Type, for Ethernet interfaces.

Syntax: show radius ethernet-port-type [ filter ]



show radius nas-identifier

Description: Displays the RADIUS client�s value for RADIUS attribute 32, NAS-Identifier.

Syntax: show radius nas-identifier [ filter ]



show radius nas-port-format

Description: Displays the format used for RADIUS attribute 5, NAS-Port.

Syntax: show radius nas-port-format [ filter ]



show radius override

Description: Displays whether the RADIUS client (LNS) uses RADIUS attribute 66, Tunnel-Client-Endpoint (LAC) IP address for RADIUS attribute 4, NAS-IP-Address.

Syntax: show radius override [ filter ]



show radius rollover-on-reject500

show radius rollover-on-reject

Description: Displays the configuration of the rollover on reject feature.

Syntax: show radius rollover-on-reject [ filter ]



show radius tunnel-accounting

Description: Displays information on RADIUS accounting for L2TP tunnels.

Syntax: show radius tunnel-accounting [ filter ]



show radius udp-checksum

Description: Displays information on UDP checksums.

Syntax: show radius udp-checksum [ filter ]



show radius update-source-addr

Description: Displays the IP source address of the RADIUS client.

Syntax: show radius update-source-addr [ filter ]



show rate-limit-profile

Description: Displays information on rate-limit-profiles.

Syntax: show rate-limit-profile [ rateLimitProfileName ] [ filter ]

� rateLimitProfileName � name of a rate limit profile



show reboot-historyERX Edge Routers

501

show reboot-history

Description: Displays information about the reboot history of the system.

Syntax: show reboot-history [ fileName.hty ] [ filter ]

� fileName � name of a history file to display; if not specified, displays the current reboot.hty file



show redundancy

Description: Displays the way you configured the system for line module redundancy.

Syntax: show redundancy [ filter ]



show reload

Description: Displays the reload status on the router.

Syntax: show reload [ filter ]



show route-map

Description: Displays all the route maps or the route map you specify. The default is all route maps.

Syntax: show route-map [ listName ] [ filter ]

� listName � specifies the route map name



show rtr application502

show rtr application

Description: Displays RTR application information.

Syntax: show rtr application [ filter ]



show rtr collection-statistics

Description: Displays RTR collection information.

Syntax: show rtr collection-statistics [ rtrIndex ] [ filter ]

� rtrIndex � number of the operation



show rtr configuration

Description: Displays the configuration for all RTR entries or for a specified entry.

Syntax: show rtr configuration [ rtrIndex ] [ filter ]




show rtr history

Description: Displays the history collected for all RTR entries or for a specified entry.

Syntax: show rtr history [ rtrIndex ] [ filter ]




show rtr hopsERX Edge Routers

503

show rtr hops

Description: Displays information discovered on each of the hops.

Syntax: show rtr hops [ rtrIndex ] [ filter ]




show rtr operational-state

Description: Displays the operational state for all RTR entries or for a specified entry.

Syntax: show rtr operational-state [ rtrIndex ] [ filter ]




show running-configuration

Description: Displays the configuration currently running on the system. Available only if the system is in Manual Commit mode.

Syntax: show running-configuration [ filter ]



show scheduler-profile

Description: Displays information on scheduler profile(s) configured on the ERX system.

Syntax: show scheduler-profile [ schedulerProfileName ] [ brief | references ] [ filter ]


� brief � displays information in a condensed format

� references � displays QoS profiles that reference this profile



show secrets504

show secrets

Description: Displays passwords and secrets.

Syntax: show secrets [ filter ]



show smds interface

Description: Displays the status and statistical information of SMDS interfaces.

Syntax: show smds interface [ dataRestriction ] [ delta ] [ interfaceType interfaceSpecifier ] [ filter ]

� dataRestriction � specify one of the following keywords:

� full � displays full status information and statistics

� statistics � displays statistics information


� interfaceType � displays statistics for SMDS interface configured on the interface type, hssi or tunnel

� interfaceSpecifier � location of the interface in the appropriate format; see Interface Types and Specifiers in About This Guide



show snmp

Description: Displays information on the status of communications between the SNMP agent and the SNMP manager.

Syntax: show snmp [ delta ] [ filter ]




show snmp accessERX Edge Routers

505

show snmp access

Description: Displays information about the groups you configured.

Syntax: show snmp access [ filter ]



show snmp community

Description: Displays information on configured communities.

Syntax: show snmp community [ filter ]



show snmp interfaces

Description: Displays the configuration of your SNMP interface tables.

Syntax: show snmp interfaces [ filter ]



show snmp trap

Description: Displays information on configured traps and trap destinations.

Syntax: show snmp trap [ filter ]



show snmp user

Description: Displays information about users.

Syntax: show snmp user [ filter ]



show snmp view506

show snmp view

Description: Displays information about the views you created.

Syntax: show snmp view [ filter ]



show sscc info

Description: Displays information about SDX (formerly SSC) servers and SDX client (formerly SSCC) statistics.

Syntax: show sscc info [ brief ] [ filter ]

� brief � abbreviated display of SDX client and server information



show sscc version

Description: Displays the SDX client (formerly SSCC) version number.

Syntax: show sscc version [ filter ]



show statistics tacacs

Description: Displays TACACS+ server or TACACS+ statistics information.

Syntax: show statistics tacacs [ filter ]



show subscribersERX Edge Routers

507

show subscribers

Description: Displays the authenticated PPP users. Use the summary keyword to display all PPP subscribers for each virtual router, port, or domain.

Syntax: show subscribers [ username userName | domain domainName | virtual-router vrName | port interfaceLocation ] [ filter ]

show subscribers summary [ domain | port | virtual-router ] [ filter ]

� summary � active PPP subscribers per virtual router

� userName � active PPP subscriber whose names match the username; 64 character string maximum

� domainName � active PPP subscribers whose usernames have that domain name; 64 character string maximum

� vrName � active PPP subscribers whose interfaces are bound to a specific virtual router; 513 character string maximum

� port � displays active PPP subscribers for the port

� interfaceLocation � location of the port in slot/port format; format varies according to interface type; see Interface Types and Specifiers in About This Guide



show subsystems

Description: Displays the names of subsystem files in the current software release or in a specified release file.

Syntax: show subsystems [ file fileName.rel ] [ filter ]

� fileName � name of the software release file; you can specify a file on a remote server by including the path as part of the filename; absence of a path indicates a local file



show tacacs508

show tacacs

Description: Displays general or detailed TACACS+ information.

Syntax: show tacacs [ statistics | delta ] [ filter ]

� statistics � specifies TACACS+ server statistics




show telnet

Description: Displays telnet daemons.

Syntax: show telnet


show terminal

Description: Displays information about terminal configuration settings for the current terminal line.

Syntax: show terminal [ filter ]



show timing

Description: Displays system timing settings and operational status.

Syntax: show timing [ filter ]



show traffic-classERX Edge Routers

509

show traffic-class

Description: Displays information on traffic class(es) configured on the ERX system.

Syntax: show traffic-class [ trafficClassName ] [ brief | references ] [ filter ]


� brief � displays information in a condensed format

� references � displays QoS profiles that reference this profile



show traffic-class-group

Description: Displays information on a traffic class group configured on the ERX system.

Syntax: show traffic-class-group [ trafficClassGroupName ] [ filter ]

� trafficClassGroupName � name of the traffic class group



show tunnel-server

Description: Displays information about the tunnels that a specific Tunnel Service module or all Tunnel Service modules support.

Syntax: show traffic-server slot/port [ filter ]

� slot � slot in which the Tunnel Service module resides

� port � internal port on the module to which the tunnels are assigned



show users

Description: Displays information about users of the vty lines.

Syntax: show users [ detail ] [ all ] [ filter ]


� all � displays information about all lines



show utilization510

show utilization

Description: Displays information about the resources that the installed modules consume and forces the system to release available memory on the SRP module.

Note: When you issue this command, the system releases available memory on the SRP module immediately; however, the display appears a few seconds later.

Syntax: show utilization [ filter ]



show version

Description: Displays armed and running releases for every slot in the system and also displays each module�s operational status.

Syntax: show version [ filter ]



show virtual-router

Description: Displays virtual routers configured on your system.

Syntax: show virtual-router [ routerName ] [ detail ] [ filter ]

� routerName � name of the virtual router


� detail � displays detailed information about the virtual router


show vlan subinterfacesERX Edge Routers

511

show vlan subinterfaces

Description: Displays status of VLAN subinterfaces on FE and GE modules.

Syntax: show vlan subinterface [ { fastEthernet | gigabitEthernet } interfaceSpecifier ] [ filter ]






shutdown

Description: In Controller Configuration Mode, disables CE1, CT1, CT3, E3, SONET, and T3 controllers. These controllers are disabled by default. In Interface Configuration mode, disables Ethernet interfaces, HSSI interfaces, X.21/V.35 interfaces, the HDLC layer of serial interfaces, and the SONET layer of ATM or POS interfaces. These interfaces are enabled by default. In Subinterface Configuration mode, disables ATM 1483, Ethernet, Frame Relay, PPPoE, and VLAN subinterfaces. These subinterfaces are enabled by default. The no version restarts disabled controllers, interfaces, and subinterfaces.

Syntax: [ no ] shutdown

Mode(s): Controller Configuration, Interface Configuration, Subinterface Configuration

sleep

Description: Causes the CLI to pause for a specified period of time. There is no no version.

Syntax: sleep sleepFor

� sleepFor � number of seconds in the range 0�4294967295

Mode(s): All modes

slot accept512

slot accept

Description: Erases from NVS the type and configuration of the previous line module in the specified slot, allows you to configure a new module. Issue this command after you have installed a different type of line module in a slot. There is no no version.

Syntax: slot accept slotNum

� slotNum � for an ERX-700 series system, a number in the range 0�6; for an ERX-1400 series system, a number in the range 0�13


slot disable

Description: Disables the module installed in the specified slot. There is no no version.

Syntax: slot disable slotNum

� slotNum � for an ERX-700 series system, a number in the range 2�6; for an ERX-1400 series system, a number in the range 0�5 or 8�13


slot enable

Description: Enables the module installed in the specified slot. There is no no version.

Syntax: slot enable slotNum

� slotNum � for an ERX-700 series system, a number in the range 2�6; for an ERX-1400 series system, a number in the range 0�5 or 8�13


slot erase

Description: Erases from NVS the type and configuration of the previous line module in the specified slot, allows you to configure a new module. Issue this command before you install a different type of line module in a slot. There is no no version.

Syntax: slot erase slotNum

� slotNum � for an ERX-700 series system, a number in the range 0�6; for an ERX-1400 series system, a number in the range 0�13


snmp trap ip link-statusERX Edge Routers

513

snmp trap ip link-status

Description: Enables link status traps on an IP interface. The no version disables link status traps on an IP interface.

Syntax: snmp trap ip link-status

no snmp trap ip


snmp trap link-status

Description: Enables processing of SNMP link status information on an interface. The no version disables the processing of SNMP link status information.

Syntax: [ no ] snmp trap link-status

Mode(s): Controller Configuration, Interface Configuration

snmp-server

Description: Enables the SNMP agent operation. The no version disables this operation.

Syntax: [ no ] snmp-server


snmp-server community514

snmp-server community

Description: Configures an authorized SNMP community and associates SNMPv1/v2c communities with SNMPv3 views. The no version removes an authorized community from the list of communities.

Syntax: snmp-server community commString [ view viewName ] [ priv ] [ accessListName ]

no snmp-server community commString

� commString � name of the SNMPv1/v2c community

� viewName � name of the SNMPv3 view

� priv � Privileged Exec level � ro (read-only); rw (read-write); admin (administrator)

� accessListName � IP access list name to filter SNMP clients


snmp-server contact

Description: Sets the system�s contact information. The no version clears the system�s contact information.

Syntax: snmp-server contact text

no snmp-server contact

� text � string of text that describes the system�s contact person


snmp-server enable traps

Description: Enables and configures global SNMP trap generation. The no version disables SNMP trap generation.

Syntax: [ no ] snmp-server enable traps [ trapCategory | snmp authentication ] [ trapfilters trapFilter ]

� trapCategory � the SNMP trap category

� addrPool � local address pool traps

� atmPing � ERX system proprietary ATM ping traps

� bgp � BGP state change traps

� bulkstats � bulkstats file full and nearly full traps

� cliSecurityAlert � security alerts traps

� dvmrp � DVMRP traps

snmp-server enable trapsERX Edge Routers

515

� dvmrpUni � ERX system proprietary DVMRP traps

� environment � power/temperature/fan traps

� fileXfer � file transfer status change traps

� inventory � system inventory/status traps

� link � SNMP linkUp/linkDown traps

� log � system log capacity traps

� ntp � ERX system proprietary traps

� ospf � OSPF traps

� ping � ping operation traps (in disman remops MIB)

� snmp � SNMP coldstart, warmstart, link, authenticationFailure traps

� traceroute � traceroute operation traps (in disman remops MIB)

� snmp � specifies the SNMP coldStart, warmStart, and authenticationFailure traps

� authentication � specifies the SNMP authenticationFailure trap

� trapfilters � filters traps according to severity level

� trapFilter � minimum severity level of traps generated

� alert � severity level 1

� critical � severity level 2

� debug � severity level 7

� emergency � severity level 0

� error � severity level 3

� informational � severity level 6

� notice � severity level 5

� warning � severity level 4


snmp-server host516

snmp-server host

Description: Configures the host(s) that should receive an SNMP trap. The no version removes the specified host from the list of recipients.

Syntax: snmp-server host ipAddress [ version ver ] securityString [ udp-port port ][ trapCategory ]* [ trapFilters trapFilter ]

no snmp-server host ipAddress

� ipAddress � IP address of the SNMP trap recipient

� ver � SNMP protocol version for traps sent to host: v1, v2c, or v3

� securityString � SNMP community string

� port � UDP port number of SNMP trap recipient

� trapCategory � SNMP trap category

� addrPool � local address pool traps

� atmPing � ERX system proprietary ATM ping traps

� bgp � BGP state change traps

� bulkstats � bulkstats file full and nearly full traps

� cliSecurityAlert � security alerts traps

� dvmrp � DVMRP traps

� dvmrpUni � ERX system proprietary DVMRP traps

� environment � power/temperature/fan traps

� fileXfer � file transfer status change traps

� inventory � system inventory/status traps

� link � SNMP linkUp/linkDown traps

� log � system log capacity traps

� ospf � OSPF traps

� ping � ping operation traps (in disman remops MIB)

� radius � RADIUS traps

� snmp � SNMP coldstart, warmstart, link, authenticationFailure traps

� traceroute � traceroute operation traps (in disman remops MIB)

� trapfilters � filters traps according to severity level

� trapFilter � minimum severity level of traps sent to this host

� alert � severity level 1

� critical � severity level 2

� debug � severity level 7

� emergency � severity level 0

snmp-server interfaces compressERX Edge Routers

517

� error � severity level 3

� informational � severity level 6

� notice � severity level 5

� warning � severity level 4



snmp-server interfaces compress

Description: Removes a set of sublayers from the ifTable and the ifStackTable. You can enter this command multiple times to remove multiple interfaces. The no version negates the compression.

Syntax: [ no ] snmp-server interfaces compress [ interfaceLayer ]*

� interfaceLayer � specifies the interface layer you want to remove from the ifTable and the ifStackTable. If you do not specify an interface layer, the following interface layers are removed:

� ip

� ppp

� ethernetSubinterface

� hdlc

� pppoeInterface

� ipLoopback

� ipVirtual

� pppLinkInterface

� slepInterface/ciscoHdlc



snmp-server interfaces compress-restriction

Description: Excludes interfaces from the ifTable and the ifStackTable if the ifAdminStatus of the interfaces is down. The no version negates the restriction.

Syntax: [ no ] snmp-server interfaces compress-restriction ifAdminStatusDown


snmp-server interfaces description-format common518

snmp-server interfaces description-format common

Description: Enables the conventional industry method of encoding the SNMP ifDescr and ifName objects. The no version returns the encoding method to a proprietary encoding scheme.

Syntax: [ no ] snmp interfaces description-format common


snmp-server interfaces rfc1213

Description: Specifies that the system bases numbering in the IfTable on RFC 1213. The no version restores the default value, which is to use RFC 1573 style numbering in interface tables.

Caution: Reducing the value of the maxIfIndex, the maxIfNumber, or both, causes the system to automatically reboot to factory default settings.

The system does not reboot to factory defaults if you:

� Increase the values of maxIfIndex and/or maxIfNumber.

� Issue a no version of the snmp-server interfaces rfc1213 command when the system is already set up for RFC 1573 style numbering.

� Enter the snmp-server interfaces rfc1213 command with the same options multiple times.

Syntax: snmp interfaces rfc1213 [ maxIfIndex ] [ maxIfNumber ]

[ no ] snmp interfaces rfc1213

� maxIfIndex � maximum value of index numbers in the interface tables; range is 100�524800; default is 65535

� maxIfNumber � maximum number of interfaces in each interface table; range is 100�524800; default is 65535


snmp-server location

Description: Sets information on the system�s location. The no version clears this information.

Syntax: snmp-server location text

no snmp-server location

� text � string of text that describes the system�s location


snmp-server packetsizeERX Edge Routers

519

snmp-server packetsize

Description: Specifies the maximum SNMP packet size in bytes. The no version restores the default value.

Syntax: snmp-server packetsize byteCount

no snmp-server packetsize

� byteCount � size of an SNMP packet (in bytes)


snmp-server trap-proxy

Description: Use to enable or disable the SNMP trap proxy.

Syntax: [ no ] snmp-server trap-proxy state

� trap-proxy � specifies this agent as the SNMP trap proxy

� state � enable or disable


snmp-server trap-source

Description: Specifies the interface whose IP address is the source address for SNMP traps. The no version disables this feature.

Syntax: snmp-server trap-source interfaceType interfaceSpecifier

no snmp-server trap-source




snmp-server user520

snmp-server user

Description: Use to create and modify SNMPv3 users. The no version removes the user.

Syntax: snmp-server user userName group groupName [ authentication authType authKey ] [ privacy privType privKey ]

no snmp-server user userName

� userName � name of the SNMPv3 user

� groupName � name of the group to which the user belongs

� one of the three predefined groups (admin, public, or private) or a custom group created via SNMPv3 commands

� authType � authorization protocol required for this user

� md5 � HMAC-MD5-96 authorization protocol

� sha � HMAC-SHA-96 authorization protocol

� authKey � SNMP user authentication key

� authPassword � password for the authentication procedure; use a 16-character password for HMAC-MD5-96 and a 20-character password for HMAC-SHA-96

� privType � privacy protocol required for this user

� des � CBC-DES encryption algorithm for privacy

� privKey � user�s privacy key

� privPassword � password for the privacy verification; use a16-character password for CBC-DES


source-address

Description: For L2TP, specifies a source IP address for the LAC tunnel endpoint. For L2F, specifies a source IP address for the home gateway tunnel endpoint. The no version removes the source address.

Syntax: source-address sourceAddress

no source-address

� sourceAddress � address of the local tunnel endpoint (the LAC)


speedERX Edge Routers

521

speed

Description: When used from Line Configuration mode, sets the speed for the current and all new console sessions immediately. The no version reverts to the default value of 9600 bps.

When used from Interface Configuration mode, specifies the line speed for an Ethernet interface. The no version specifies the default, automatically negotiate. This command works in conjunction with the duplex command; if you set or accept the automatically negotiate setting for either duplex mode or speed, the system negotiates both parameters with the remote device. This command is not available for the Ethernet interface on the SRP module.

Syntax: For console sessions:

speed baudRate

no speed

� baudRate � terminal speed for the current console session.

Possible values are: 2400, 4800, 9600, 14400, 19200, 28800, 38400, 57600, 115200

For Ethernet interfaces on line modules:

speed speedValue

no speed

� speedValue � value of the line speed

� automatically negotiate � specifies that the system negotiates the line speed with the remote device

� 10 � specifies that the system uses a line speed of 10 Mbps on a Fast Ethernet interface (not valid for GE interfaces)

� 100 � specifies that the system uses a line speed of 100 Mbps on a Fast Ethernet interface (not valid for GE interfaces)

� 1000 � specifies that the system uses a line speed of 1000 Mbps on a Gigabit Ethernet interface (not valid for FE interfaces)

Mode(s): Line Configuration, Interface Configuration

spf-interval522

spf-interval

Description: Controls the minimum interval between the shortest path first calculation for IS-IS. The no version restores the default interval of 5 seconds. If you do not specify a level, the interval applies to both level 1 and level 2.

Syntax: spf-interval [ level-1 | level-2 ] seconds

no spf-interval [ level-1 | level-2 ]

� seconds � number in the range 0�120; the minimum time between SPF calculations in seconds; the default value is 5

� level1 � level 1 SPF

� level2 � level 2 SPF


split-horizon

Description: Controls the split horizon and poison reverse features for RIP remote neighbors. Split horizon is enabled by default; poison reverse routing updates are disabled by default. The no version disables the split horizon and enables poison reverse routing updates which set the metric for routes originating on the interface to infinity to explicitly advertise that the network is unreachable, reducing the possibility of routing loops.

Syntax: [ no ] split-horizon


srp switch

Description: Switches from the primary SRP module to the standby. This command is equivalent to the redundancy force-failover command with the srp option. There is no no version.

Syntax: srp switch [ [ force ] [ reason ] ]

� force � prompts the user to confirm that the system should switch from the primary SRP module to the standby if the SRP modules are in certain states, such as writing configuration data to NVS, that could lead to loss of configuration data or corruption of NVS.

� reason � reason for the change


sscc addressERX Edge Routers

523

sscc address

Description: Configures the SDX client (formerly SSCC) with the IP addresses of the SDX servers and the ports on which the servers listen for activity. The no version removes the specified server (primary, secondary, or tertiary) from the list of SDX servers.

Syntax: [ no ] sscc { primary | secondary | tertiary } address ipAddress port portNumber

� primary � primary SDX server

� secondary � secondary SDX server

� tertiary � tertiary SDX server

� ipAddress � IP address of an SDX server

� portNumber � SDX server port number on which the server listens for activity


sscc enable

Description: Enables the SDX (formerly SSC). The no version disables the feature.

Syntax: [ no ] sscc enable


sscc retryTimer

Description: Configures the delay period during which the SDX client (formerly SSCC) waits for a response from an SDX (formerly SSC) server. When the timer expires, the client submits the request to the next server and waits again for the timer to expire. The request is sent to each timer in rotation until there is a response. The no version restores the default delay period of 90 seconds.

Syntax: [ no ] sscc retryTimer timer

� timer � time in seconds from 5 to 300


sscc sourceAddress

Description: Specifies a fixed source address for the TCP/COPS connection.

Syntax: [ no ] sscc sourceAddress ipAddress

� ipAddress � the source (or local) IP address of the TCP/COPS connection


sscc transportRouter524

sscc transportRouter

Description: Configures the router on which the TCP/COPS connection is to be established.

Syntax: [ no ] sscc transportRouter name

� name � the transport router�s name


strict-priority

Description: Sets strict-priority scheduling for the scheduler node. The no version deletes the strict priority setting.

Syntax: [ no ] strict-priority


strip-domain

Description: Use to strip the domain name from the username before sending an access-request message to the RADIUS server. The domain name is the text after the last @ character. For example, xyz.com is the domain name of the following: [email protected]@xyz.com. To stop stripping the domain name, use the disable keyword. The no version resets the default, disable.

Syntax: strip-domain { enable | disable }

no strip domain


subscriberERX Edge Routers

525

subscriber

Description: Configures a local subscriber (when one cannot be obtained externally, as in PPP) on the ERX to support authentication and configuration from the RADIUS server. The no version negates the command.

Syntax: subscriber upperInterfaceType userNameUsage userName domain domainName [ passwordUsage password ]

no subscriber upperInterfaceType

� upperInterfaceType � upper interface type, bridged Ethernet or IP

� userNameUsage � specifies how the supplied username is used for authentication purposes: as specified or postpended with the interface physical location

� userName � RADIUS username

� domainName � domain name

� passwordUsage � specifies how the supplied password is used for authentication purposes: as specified or postpended with the interface physical location; password usage is optional

� password � RADIUS password; password usage is optional


summary-address526

summary-address

Description: Creates aggregate addresses for IS-IS or aggregates external routes at the border of the OSPF domain. The no version restores the default.

Syntax: ISIS:

summary-address address mask [ level-1 | level-1-2 | level-2 ] [ metric ]

no summary-address address mask [ level-1 | level-1-2 | level-2 ]

� address � summary IP address designated for a range of addresses

� mask � IP subnet mask used for the summary route

� level-1 � redistributed routes into level 1 are summarized; when distributing routes domain wide, routes leaked from level 2 into level 1 are summarized

� level 1-2 � summary route is applied both when redistributing routes into level 1 and level 2 IS-IS, and when routes are leaked between levels

� level-2 � routes learned by level 1 routing are summarized into the level 2 backbone with the configured address/mask value; redistributed routes into level 2 IS-IS are also summarized

� metric � number in the range 1�16777215; the default metric value; the summary uses this value when advertising the summary address. When no metric is supplied, uses the value of the lowest-cost route that this is summarizing (default)

OSPF:

[ no ] summary-address address mask

� address � summary address designated for a range of addresses

� mask � IP subnet mask used for the summary route


suppress-default

Description: Suppresses an IS-IS level 1-2 router from indicating that it can reach destinations outside the area, thus preventing level 1 routers from installing a default route to the level 1-2 router. The no version disables suppression of default routes.

Syntax: [ no ] suppress-default


svlan idERX Edge Routers

527

svlan id

Description: Specifies an S-VLAN. There is no no version.

Syntax: svlan id S-VlanIdValue VlanIdValue

� S-VlanIdValue � S-VLAN ID number in the range of 0�4095, which is unique within the Ethernet interface

� VlanIdValue � VLAN ID number in the range of 0�4095, which is unique within the Ethernet interface


svlan ethertype

Description: Specifies the Ethertype of an S-VLAN. The no version removes the Ethertype.

Syntax: [ no ] svlan ethertype { 9100 | 9200 }

� 9100 � specifies Ethertype value 0x9100

� 9200 � specifies Ethertype value 0x9200


synchronization

Description: Enables synchronization between BGP and your IGP. The no version advertises a network route without waiting for the IGP.

Syntax: [ no ] synchronization


synchronize

Description: Forces the NVS file system of the redundant SRP module to synchronize with the NVS file system of the primary SRP module. There is no no version.

Syntax: synchronize


t1 bert528

t1 bert

Description: Enables bit error rate tests using the specified pattern on a T1 line on a CT3 module. The no version stops the test that is running.

Syntax: t1 channel bert pattern pattern interval time [ unframed ]

no t1 channel bert

� channel � T1 channel number in the range 1�28

� pattern � one of the following test patterns

� 0s � repetitive test pattern of all zeros, 00000...

� 1s � repetitive test pattern of all ones, 11111...

� 2^11 � pseudorandom test pattern, 2048 bits in length

� 2^15 � pseudorandom 0.151 test pattern, 32768 bits in length

� 2^20-O153 � pseudorandom 0.153 test pattern, 1048575 bits in length

� 2^20-QRSS � pseudorandom QRSS 0.151 test pattern, 1048575 bits in length

� 2^23- � pseudorandom 0.151 test pattern, 8388607 bits in length

� alt-0-1 � repetitive alternating test pattern of zeros and ones, 01010101...

� time � interval between test patterns, ranging from 1�14,400 minutes

� unframed � the test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern only occupies T1 payload bits.


t1 clock sourceERX Edge Routers

529

t1 clock source

Description: Determines which end of the T1 interface provides clocking. The no version uses the default value, line.

Syntax: t1 channel clock source { line | internal { module | chassis } }

no t1 channel clock source







t1 fdl

Description: Specifies the FDL standard used by a specific T1 channel on the CT3 interface. The no version restores the default, none.

Syntax: t1 channel fdl { ansi | att | all | none }

no t1 channel fdl [ ansi | att | all ]







t1 fdl carrier530

t1 fdl carrier

Description: Specifies that an interface is used in the carrier environment of a T1 channel on a CT3 interface. The no version restores the default situation, in which an interface does not operate in the carrier environment.

Syntax: [ no ] t1 channel fdl carrier



t1 fdl string

Description: Defines an FDL message on a T1 channel on a CT3 interface as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages.

Syntax: t1 channel fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue | generator generatorValue }

no t1 channel fdl string { eic | fic | lic | unit | pfi | port | generator }






� pfiValue � facility identification code to send in the FDL path message; 1�38 characters; default is the null value.

� portValue � equipment port number to send in the FDL idle signal message; 1�38 characters; default is the null value.

� generatorValue � generator number to send in the FDL test signal message; 1�38 characters; default is the null value.


t1 fdl transmitERX Edge Routers

531

t1 fdl transmit

Description: Configures the system to send the specified FDL message on a T1 channel on a CT3 interface. The no version stops the system from sending the specified FDL message or all FDL messages.

Syntax: [ no ] t1 channel fdl transmit { path-id | idle-sIgnal | test-signal }

no t1 channel fdl transmit






t1 framing

Description: Specifies the type of framing used by a specific T1 channel on the CT3 interface. The no version uses the default value, esf.

Syntax: t1 channel framing { esf | sf }

no t1 channel framing


� esf � specifies extended superframe

� sf � specifies superframe


t1 lineCoding

Description: Specifies the type of line coding used by a specific T1 channel on the CT3. The no version uses the default value, b8zs.

Syntax: t1 channel lineCoding { ami | b8zs }

no t1 channel lineCoding


� ami � specifies alternate mark inversion

� b8zs � specifies bipolar with eight-zero substitution


t1 loopback532

t1 loopback

Description: Configures a loopback test for a T1 line on a CT3 module. The no version deactivates the loopback test; if you specify the remote keyword, the no version sends the 16-bit ESF data link code word or inband pattern to deactivate the loopback at the remote end based on the last activate request sent to the remote end. If you do not specify the remote keyword, the no version clears the local loopback configuration.

Syntax: t1 channel loopback [ local | network { line | payload } | remote { line { fdl { ansi | bellcore } | inband } payload [ fdl ] [ansi ] } ]

no t1 channel loopback [ remote ]


� local � loops the router output data back toward the router at the T1 framer and sends an alarm indication signal out toward the network. This is the default setting if you specify no optional keywords.

� network { line | payload } � Specify the line keyword to loop the data back toward the network before the T1 framer and automatically set a local loopback at the HDLC controllers. Specify the payload keyword to loop the payload data back toward the network at the T1 framer and automatically set a local loopback at the HDLC controllers.

� remote line fdl ansi � sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 channel, according to the ANSI T1.403 specification.

� remote line fdl bellcore � sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 channel, according to the Bellcore TR-TSY-000312 specification.

� remote line inband �sends a repeating 5-bit inband pattern (00001) to the remote end requesting that it enter into a network line loopback

� remote payload [ fdl ] [ ansi ] � sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 channel. You can optionally specify fdl and ansi, but it is not necessary.


t1 remote-loopbackERX Edge Routers

533

t1 remote-loopback

Description: Enables the acceptance of remote loopback requests. The no version restores the default value, which is to reject remote loopback requests.

Syntax: [ no ] t1 channel remote-loopback



t1 shutdown

Description: Disables a T1 or fractional T1 channel on the CT3. The no version restarts a disabled interface.

Syntax: [ no ] t1 channel | channel/subchan shutdown


� subchan � FT1 subchannel on a T1 interface in the range 1�24


t1 snmp trap link-status

Description: Enables processing of SNMP link status information on a T1 or fractional T1 channel on the CT3. The no version disables the processing of SNMP link status information.

Syntax: [ no ] t1 channel | channel/subchan snmp trap link-status


� subchan � specifies the FT1 subchannel on a T1 interface in the range 1�24


t1 timeslots534

t1 timeslots

Description: Configures the timeslots and data rate used on each T1 channel on the CT3 interface. The no version deletes the fractional T1 circuit.

Syntax: t1 channel/subchan timeslots range [ speed { 56 | 64 } ]

no t1 subchan


� subchan � subchannel specifies the logical subchannel on a T1 in the range 1�24

� range � specifies the timeslot assigned to the T1 channel in the range 1�24. A dash represents a range of timeslots, and a comma separates timeslots. For example, 1-10, 15-18 assigns timeslots 1 through 10 and 15 through 18.

� speed � specifies the data rate for the T1 channel. Values are 56 Kbps or 64 Kbps. The default is 64 Kbps.


t1 yellow

Description: Generates or detects a yellow alarm for a T1 channel on the CT3 interface. The no version restores the default value, to not generate or to not detect a yellow alarm.

Syntax: [ no ] t1 channel yellow { generate | detect }



table-mapERX Edge Routers

535

table-map

Description: Applies the specified route map to all BGP, OSPF, or RIP routes about to be added to the IP routing table. The no version halts application of the route map.

Syntax: table-map mapTag

no table-map [ mapTag ]

� mapTag � name of the route map; a string of up to 32 alphanumeric characters; for each protocol, the route map can set only the values as specified below:

BGP: distance, IP next hop, level, metric, metric type, route type, and tag values

OSPF: distance, metric, metric type, route type, and tag values

RIP: distance, metric, and tag values

Mode(s): Address Family Configuration (BGP), Router Configuration (BGP, OSPF, RIP)

tacacs-server host

Description: Adds or deletes a host to or from the list of TACACS+ servers. If host is not assigned as primary host, the system assigns an existing host as the primary. The no version deletes the host from the list of TACACS+ servers.

Syntax: tacacs-server host ipAddress [ port portNumber ] [ timeout timeoutValue ] [ key keyValueString ] [ primary ]

no tacacs-server host ipAddress

� ipAddress � IP address of the TACACS+ server

� portNumber � TACACS+ server�s TCP port number in the range 1�655535

� timeoutValue � specifies response timeout interval for the TACACS+ client to server exchange; number in the range 1 to 255; default is 5

� keyValueString � specifies the secret used in TACACS+ client to server exchange; value string can be up to 100 characters

� primary � assigns the host as the primary host


tacacs-server key536

tacacs-server key

Description: Sets or resets the authentication and encryption key value shared by all TACACS+ servers that do not have a server-specific key set up by the tacacs-server host command. The no version removes the key value shared by all TACACS+ servers.

Syntax: tacacs-server key keyValueString

no tacacs-server key


tacacs-server source-address

Description: Sets or resets an alternative source address to be used for TACACS+ server communications. The no version removes the address.

Syntax: tacacs-server source-address ipAddress

no tacacs-server source-address

� ipAddress � IP address used as source by the TACACS+ server


tacacs-server timeout

Description: Sets the interval in seconds that the server waits for the TACACS+ server host to reply. This value is shared by those TACACS+ servers that do not have a timeout interval set by the tacacs-server host command. The no version resets the timeout interval shared by all TACACS+ servers.

Syntax: tacacs-server timeout timeoutValue

no tacacs-server timeout

� timeoutValue � specifies response timeout interval for the TACACS+ client to server exchange; number in the range 1 to 255; default is 5


tagERX Edge Routers

537

tag

Description: Specifies a user-defined tag. The no version removes the tag from the operation. You can configure a tag for both echo and echoPath types.

Syntax: tag tagValue

no tag

� tagValue � name of a group that the operation belongs to: 0�255 ASCII characters; the default is to have no tag


telnet538

telnet

Description: Enables connections to remote systems via the embedded Telnet client. There is no no version.

Syntax: telnet IpAddress | hostname [ vrf vrfName ] [ ipPortNumber | ipPortType ] [ source-interface interfaceType interfaceSpecifier | noecho | line | debug | verbose ]*

� ipAddress � IP address of the remote system

� hostname � name of the remote system

� vrfName � name of the VRF to which the command applies; string of 1�32 alphanumeric characters

� ipPortNumber � number in the range 0�65535 of the port for the connection to the remote system. The default is port number 23, the Telnet port. For more information on port numbers and associated processes, see www.iana.org.

� ipPortType � name of a well-known port, as follows:

� bgp � Border Gateway Protocol (port 179)

� chargen � character generator (port 19)

� cmd � remote commands (port 514)

� daytime � daytime (port 13)

� discard � discard (port 9)

� domain � Domain Name Service (port 53)

� echo � echo (port 7)

� exec � exec (port 512)

� finger � finger (port 79)

� ftp � File Transfer Protocol (port 21)

� ftp-data � FTP data connections (port 20)

� gopher � gopher (port 70)

� hostname � NIC hostname server (port 101)

� ident � Ident Protocol (port 113)

� irc � Internet Relay Chat (port 194)

� klogin � Kerberos login (port 543)

� kshell � Kerberos shell (port 544)

http://www.iana.org

http://www.iana.org

telnetERX Edge Routers

539

� login � Login (port 513)

� lpd � printer service (port 515)

� nntp � Network News Transport Protocol (port 119)

� pim-auto-rp � Protocol Independent Multicast Auto RP (port 496)

� pop2 � Post Office Protocol version 2 (port 109)

� pop3 � Post Office Protocol version 2 (port 110)

� smtp � Simple Mail Transport Protocol (port 25)

� sunrpc � Sun Remote Procedure Call (port 111)

� syslog � Syslog (port 514)

� tacacs � Terminal Access Concentrator Access Control System (port 49)

� talk � Talk (port 517)

� telnet � Telnet (port 23)

� time � Time (port 37)

� uucp � Unix-to-Unix Copy Program (port 540)

� whois � nickname (port 43)

� www � World Wide Web (port 80)

� source-interface � forces Telnet to use the IP address of the specified interface as the source address for the Telnet connection

� interfaceType � type of interface to use to obtain the source address for the Telnet connection; see Interface Types and Specifiers in About This Guide

� interfaceSpecifier � number of interface to use to obtain the source address for the Telnet connection; format varies according to interface type; see Interface Types and Specifiers in About This Guide

� noecho � disables local echo of user input

� line � enables line mode

� debug � enables debugging

� verbose � enables verbose mode



telnet listen540

telnet listen

Description: Sets the Telnet daemon to listen in a virtual router other than the default. The no version deletes the Telnet daemon.

Syntax: telnet listen [ port portValue ]

no telnet listen

� portValue � TCP port on which the Telnet daemon listens; if not specified, the default port 23 is used


terminal data-character-bits

Description: Sets the number of data bits available for characters for the current session on the terminal screen. There is no no version.

Syntax: terminal data-character-bits { 7 | 8 }

� 7 � 7 data bits per character; this setting supports only characters in the standard ASCII set

� 8 � 8 data bits per character; default setting, supports the full set of 8-bit international characters


terminal length

Description: Sets the number of lines on the current terminal screen for the current session. There is no no version.

Syntax: terminal length value

� value � number for the screen length in the range 0�512. If 0, the router does not pause between screens of output. If not 0, the router pauses between screens.


terminal speed

Description: Sets the speed for the current console session. There is no no version.

Syntax: terminal speed baudRate

� baudRate � terminal speed for the current console session; possible values are: 2400, 4800, 9600, 14400, 19200, 28800, 38400, 57600, 115200


terminal widthERX Edge Routers

541

terminal width

Description: Sets the number of character columns on the current terminal screen for the current line for a session. There is no no version.

Syntax: terminal width value

� value � number of characters in the range 30�512


test aaa

Description: Verifies RADIUS authentication and accounting and IP address assignment setup. The test uses a username and password and attempts to authenticate a user, get an address assignment, and issue a start accounting request. The test immediately terminates the session by issuing a stop accounting request and an address release. Optionally, a virtual router context may be specified.

Syntax: test aaa { ppp | mlppp } userName [ password ] [ virtual-router vrContext ][ aaa-profile profileName ] [ zero-stats ]

� ppp � indicates a PPP user

� mlppp � simulates Multilink PPP

� userName � username to test

� password � password to associate with username; password is optional�when omitted, the RADIUS access request has no User-Password attribute

� vrContext � virtual router context in which to authenticate the user

� aaa-profile � specifies the AAA profile for the user

� profileName � specifies the AAA profile name

� zero-stats � specifies that accounting statistics should be set to zero for this test


test ip bgp neighbor542

test ip bgp neighbor

Description: Tests BGP policy for routes advertised to or received from peers without implementing the policy. There is no no version.

Syntax: test ip bgp [ addressFamilyIdentifier ] neighbor { ipAddress | peerGroupName } {advertised-routes | routes } [ routeAddr [ routeMask [ route-rd distinguisher ] ] ][ distribute-list accessListName | filter-list asPathAccessListName [ weight weightValue ] | route-map mapTag | prefix-list prefixListName | prefix-tree prefixTreeName ][ fields { fieldOptions } ] [ filter ]

� addressFamilyIdentifier � type of address family, which determines the routing table for which information is displayed, in the format[ ipv4 { unicast | multicast } | vpnv4 { all | vrf vrfName } ]

� ipv4 unicast � the IPv4 unicast routing table; the default option

� ipv4 multicast � the IPv4 multicast routing table

� vpnv4 all � all IPv4 VPN routing and forwarding instances

� vpn4 vrf vrfname � the IPv4 VPN routing and forwarding instance with the name vrfname


� peerGroupName � name of BGP peer group. If you specify a BGP peer group by using the peer-group-name argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.

� advertised-routes � tests only outgoing advertisements to the specified neighbor

� routes � tests only the incoming advertisements from the specified neighbor

� routeAddr � prefix advertised by BGP

� routeMask �subnet mask associated with prefix; if not specified, a best match on routeAddr is performed

� distinguisher � unique two-part identifier of the format number1:number2 where:

� number1 � AS number or an IP address

� number2 � unique integer; 32 bits if number1 is an AS number; 16 bits if number1 is an IP address

If not specified, considers all destinations with the same routeAddress and routeMask.

� accessListName � name of an access list used as a distribute list to filter routes by prefix; string of up to 32 alphanumeric characters

threshold544









threshold

Description: Sets the threshold values for bit error rates used in APS/MSP alarms. The no version restores the default value, 6, for the specified alarm.

Syntax: threshold { sd-ber | sf-ber } rate

no threshold { sd-ber | sf-ber }

sd-ber � bit error rate that specifies signal degradation

sf-ber � bit error rate that specifies signal failure

rate � integer in the range 3�9; a value of n corresponds to a rate of 10-n (10e-n) errors per second


timeoutERX Edge Routers

545

timeout

Description: When used from RADIUS Configuration mode, specifies the interval, in seconds, before the system retransmits a RADIUS packet to an authentication or accounting server. The no version uses the default.

When used from RTR Configuration mode, specifies the timeout for a Response Time Reporter operation. The no version returns the operation to the default value. You can apply this parameter only to echo entries.

Syntax: RADIUS:

timeout waitTime

no timeout

� waitTime � specifies the number of seconds in the range 3�10. The default is 3.

RTR:

timeout timeoutValue

no timeout

� timeoutValue � number in milliseconds that the operation waits for a response; if the value is set to 0 or is larger than frequency, it will be ignored; the default is 5000 milliseconds

Mode(s): Radius Configuration, RTR Configuration

timeout login response

Description: Sets a time limit during which users must provide a password when they log into the console or a vty line. Specifying a value of 0 indicates that there is no time limit during which users must enter a password. The no version restores the default value, 30 seconds.

Syntax: timeout login response seconds

no timeout login response

� seconds � length of the timeout in the range 0�300 seconds


timers546

timers

Description: Configures RIP timers. The no version restores the default values.

Syntax: timers update invalid holddown flush

no timers

� update � interval in seconds at which routing updates are sent. The default is 30.

� invalid � interval in seconds after which a route is declared invalid (null). The default is 180.

� holddown � interval in seconds during which routing information regarding better paths is disregarded by the system. The default is 120.

� flush � interval in seconds that must pass before a route is removed from the routing table. Set this value greater than the invalid value. The default is 300.


timers bgp

Description: Sets keepalive and hold-time timers for all neighbors. The no version restores the default values.

Syntax: timers bgp keepaliveTime holdTime

no timers bgp [ keepaliveTime [ holdTime ] ]

� keepaliveTime � interval in seconds between keepalive messages; range is 0�65535 seconds; default is 30 seconds; a value of zero prevents BGP from sending keepalive messages

� holdTime � period in seconds that BGP waits for keepalive messages before declaring the neighbor to be unavailable; range is 0�65535 seconds; default is 90 seconds; a value of zero informs BGP not to expect any hold-time messages


timers spf

Description: Configures the delay time between when OSPF receives a topology change and when it starts an SPF calculation and the hold time between two consecutive SPF calculations. The no version restores the default value.

Syntax: [ no ] timers spf holdTime

� holdTime � number in the range 1�5 seconds; default is 3seconds; the hold time between consecutive SPF calculations


time-to-liveERX Edge Routers

547

time-to-live

Description: Specifies a hop count by setting the value of the time-to-live field used by packets sent to a RIP remote neighbor. The no version restores the default value.

Syntax: time-to-live ttlValue

no time-to-live

� ttlValue � number in the range 1�16; the default value is 16


timing disable-auto-upgrade

Description: Disables the auto-upgrade feature of the system timing. The no version enables the auto-upgrade feature.

Syntax: [ no ] timing disable-auto-upgrade


timing select

Description: Configures the preferred timing selector. There is no no version.

Syntax: timing select selector

� selector � timing selector

� primary � highest-priority preferred selection

� secondary � middle-priority preferred selection

� tertiary � lowest-priority preferred selection


timing source548

timing source

Description: Configures the system�s timing sources. Only one of these timing sources can be an external source received via an interface on an I/O module other than the SRP I/O module; the other two must be either internal sources or external sources received via the SRP I/O modules. There is no no version.

Syntax: timing source selector { internal | line lineType |{ sonet | ds3 | ds1 | e1 | e3 } interfaceValue }

� selector � priority of the timing source; in descending order primary, secondary, or tertiary

� internal � internal SC oscillator

� line � external timing input on SRP module

� lineType � one of the following timing sources:

� e1:a � E1 clock, port A on SRP module

� e1:b � E1 clock, port B on SRP module

� t1:a � T1 clock, port A on SRP module

� t1:b � T1 clock, port B on SRP module

� sonet � specifies a SONET interface

� ds3 � specifies a DS3 interface

� ds1 � specifies a DS1 interface

� e1 � specifies an E1 interface

� e3 � specifies an E3 interface

� interfaceValue � interface specifier, in the form slot/port[:subPort]


tos

Description: Defines a type of service byte in the RTR operation�s IP header. The no version returns the operation to the default value.

Syntax: tos tosValue

no tos

� tosValue � ToS byte in the IP header: 0�255; the default is 0 for both RTR types.


tracerouteERX Edge Routers

549

traceroute

Description: Discovers the paths that router packets follow when travelling to their destinations. There is no no version.

Syntax: traceroute [ vrf vrfName ] destination [ ttl maxTTLCount ] [ timeout timeOutVal ] [ data-size sizeValue ] [ source { interface interfaceType interfaceSpecifier | address sourceAddress } ] [ extended [ tos tosVal ] [ set-dont-fragment-bit ] [ interface iType iNumber ]

� vrfName � name of the VRF context

� destination � IP address or domain name of the trace

� maxTTLCount � maximum number of hops of the trace in the range 1�255; default is 32

� timeOutVal � time in seconds to wait for trace responses in the range 1�20; default is 2

� sizeValue � number of bytes comprising the IP packet and reflected in the IP header in the range 0�64000

� source interface � specifies an interface as the source for the transmitted packets



� source address � specifies an IP address as the source for the transmitted packets

� sourceAddress � IP address or domain name used as the source address

� extended � specifies extended IP header attributes

� tosVal � value of the ToS byte

� set-dont-fragment-bit � specifies the don�t-fragment bit

� iType � interface type

� iNumber � interface location


traffic-class550

traffic-class

Description: In Policy Configuration mode, specifies a traffic class in a policy list for policy management. The no version removes a traffic class from a policy list. The suspend version temporarily suspends the policy rule.

In Global Configuration mode, configures a traffic class in the ERX system. In Traffic Class Group Configuration mode, specifies a traffic class that belongs to the traffic class group. The no version deletes the traffic class.

Syntax: In Policy Configuration mode:

[ no ] [ suspend ] traffic-class trafficClassName [ classifier-group claclName ] [ precedence precValue ]


� claclName � name of the classifier group

� precValue � precedence value in the range 0�32768

In Global Configuration and Traffic Class Group Configuration modes:

[ no ] traffic-class trafficClassName


Mode(s): Global Configuration, Policy Configuration, Traffic Class Group Configuration

traffic-class-group

Description: Configures a traffic class group. The no version deletes the selected traffic-class group.

Syntax: [ no ] traffic-class-group trafficClassGroupName

� trafficClassGroupName � name of the traffic class group


translate

Description: Maps the original domain name to the mapped domain name for domain map lookup. The no version negates the command.

Syntax: translate domainName mappedDomainName

no translate domainName


� mappedDomainName � name of the mapped domain name; maximum of 64 characters


transmit-delayERX Edge Routers

551

transmit-delay

Description: Sets the estimated time it takes to transmit a link state update packet on the OSPF remote-neighbor interface. The no version restores the default value.

Syntax: transmit-delay transmDelay

no transmit-delay

� transmDelay � the link state transmit delay, a number in the range 0�3600 seconds; default value is 1 second


triggered-update-disable

Description: Specifies that RIP does not send triggered routing updates. The no version restores the default condition, wherein RIP does send triggered updates.

Syntax: [ no ] triggered-update-disable


ttl

Description: Specifies a hop count by setting the value of the time-to-live field used by packets sent to an OSPF remote neighbor. The no version restores the default value.

Syntax: ttl ttlValue

no ttl

� ttlValue � number in the range 1�255; the default value is 1


tunnel

Description: Specifies an L2TP or L2F tunnel and changes the mode to Domain Map Tunnel Configuration. In Domain Map Tunnel Configuration mode, you can set the attributes of the tunnel. The no version deletes the L2TP or L2F tunnel configuration from the system.

Syntax: [ no ] tunnel tag

� tag � tunnel tag value in the range 1�31


tunnel checksum552

tunnel checksum

Description: Enables end-to-end checksum computation for GRE tunnels. The no version disables the checksum option.

Syntax: [ no ] tunnel checksum


tunnel destination

Description: For DVMRP or GRE, configures the tunnel endpoint for static tunnels.The no version deletes the endpoint.

For IPSec, configures the remote tunnel endpoint.

For MPLS in Interface Configuration mode, configures the tunnel endpoint for static MPLS tunnels.The no version deletes the endpoint.

For MPLS in Tunnel Profile Configuration mode, configures the source of tunnel endpoints (destinations) within a tunnel profile. You can specify that the endpoints are to be learned from BGP, IS-IS, or OSPF, or you can provide one or more IP addresses as the endpoint(s). If you specify the destination address, it must be the address of the MPLS interface or the router ID of the destination router. The no version deletes the endpoints.

Syntax: For DVMRP and GRE:

tunnel destination ipAddress | hostname

no tunnel destination

� ipAddress � IP address of the interface on the remote system

� hostname � name of the host that will serve as the tunnel endpoint

For IPSec:

tunnel destination ipAddress


� ipAddress � IP address of the interface on the remote system or the router ID of the destination router that serves as the tunnel endpoint

tunnel ip profileERX Edge Routers

553

For MPLS in Interface Configuration mode:

tunnel destination ipAddress


For MPLS in Tunnel Profile Configuration mode:

[ no ] tunnel destination{ ipAddress | ipAddress [ ipAddress ]* | { isis-level-2 | ospf-bdr } [ { access-list | prefix-list } listName ] }

� isis-level-2 � specifies IS-IS level-2 routers as acceptable destinations

� ospf-bdr � specifies OSPF border routers as acceptable destinations

� listName � name of access list or prefix list that contains the IP addresses that are acceptable as tunnel endpoints

� ipAddress � IP address of the interface on the remote system or the router ID of the destination router that serves as the tunnel endpoint; for a tunnel profile, you can list multiple addresses


Mode(s): Interface Configuration, Tunnel Profile Configuration

tunnel ip profile

Description: Assigns an IP profile to the MPLS tunnel. The no mpls tunnels profile version removes the IP profile from the tunnel.

Syntax: tunnel ip profile ipProfileId

no tunnel ip profile

� ipProfileId � name of an IP profile

Mode(s): Tunnel Profile Configuration

tunnel lifetime554

tunnel lifetime

Description: Sets the lifetime of IPSec SAs running on this tunnel. You can specify the lifetime in seconds and/or volume of traffic. Before either limit is reached, the SA is renegotiated, ensuring that the tunnel does not go down before the renegotiation is finished. The no version sets the lifetime to the default lifetime defined by the ipsec lifetime command.

Syntax: tunnel lifetime { seconds seconds kilobytes kilobytes | seconds seconds | kilobytes kilobytes }

no tunnel lifetime { seconds | kilobytes }

� seconds � number of seconds security SAs on this tunnel live before expiring; the range is 7200�4284967295

� kilobytes � volume of traffic in kilobytes that can pass between the tunnel endpoints using a given SA before the SA expires; the range is 102400�4294967295


tunnel local-identity

Description: Specifies the local identity of the IPSec tunnel. The no version removes the local endpoint and sets the default identity, which is subnet 0.0.0.0 0.0.0.0.

Syntax: tunnel local-identity { address ipAddress | subnet ipAddress subnetMask | range ipAddressLow ipAddressHigh }

no tunnel local-identity

� address � specifies an IP address as the local identity

� subnet � specifies a subnet as the local identity

� range � specifies a range of IP addresses as the local identity


tunnel mpls affinityERX Edge Routers

555

tunnel mpls affinity

Description: Assigns an affinity to the tunnel. The no version removes the affinity from the tunnel.

Syntax: tunnel mpls [ traffic-eng ] affinity affinity [ mask mask ]

no tunnel mpls [ traffic-eng ] affinity


� affinity � attributes that must be configured on the interface in order to be considered by the tunnel; ranges from 0x0 to 0xFFFFFFFF; the default is 0x0

� mask � mask to identify attributes to be checked; a 1 signifies that the attribute value must match, a 0 signifies that the attribute value does not matter; ranges from 0x0 to 0xFFFFFFFF; the default is 0x0000FFFF


tunnel mpls autoroute announce

Description: Configures the LSP tunnel to register its endpoint (the egress router) with the configured routing protocol. If you do not specify a routing protocol, the default is IS-IS and OSPF. The no version disables endpoint announcements.

Syntax: [ no ] tunnel mpls [ traffic-eng ] autoroute announce [ ospf | isis | bgp ]


� ospf � endpoint is announced to OSPF

� isis � endpoint is announced to IS-IS

� bgp � endpoint is announced to BGP


tunnel mpls autoroute metric556

tunnel mpls autoroute metric

Description: Specifies the tunnel metric. The value determines tunnel preference when there is more than one tunnel or native IP path to a tunnel endpoint. A lower value is preferred to a higher value. When you set up multiple tunnels, if the primary tunnel goes down, the existing tunnel with the lowest metric is used immediately. If you specify an absolute value from 1�65535, this value overrides the metric for the path provided by the IGP. If you specify a relative value from -10 to +10, this value is subtracted from (-) or added to (+) the metric for the path provided by the IGP. The no version restores the default value of relative 0, meaning that the tunnel metric is the IGP value.

Syntax: tunnel mpls [ traffic-eng ] autoroute metric {absolute | relative} metricValue

no tunnel mpls [ traffic-eng ] autoroute metric


� absolute � metric is an absolute value

� relative � metric is a signed relative value

� metricValue � preference value for a path


tunnel mpls bandwidth

Description: Specifies the bandwidth required for the tunnel. The no version removes the bandwidth constraint from the tunnel.

Syntax: tunnel mpls [ traffic-eng ] bandwidth bandwidth

no tunnel mpls [ traffic-eng ] bandwidth


� bandwidth � amount of bandwidth required for the tunnel in kilobits per second, a value ranging from 0�4294967295; the default value is 0


tunnel mpls base-tunnel

Description: Stacks the tunnel on the specified MPLS base tunnel. The no version removes the tunnel from on top of the base tunnel.

Syntax: tunnel mpls base-tunnel baseName

no tunnel mpls base-tunnel

� baseName � name of the tunnel; up to 20 alphanumeric characters


tunnel mpls descriptionERX Edge Routers

557

tunnel mpls description

Description: Associates a description with the MPLS tunnel. The no version deletes the description.

Syntax: tunnel mpls description textString

no tunnel mpls description

� textString � description or name of the tunnel; up to 40 alphanumeric characters


tunnel mpls dynamic target

Description: Specifies that the tunnel is a targeted tunnel for MPLS to stack above a base LSP that is dynamically created by topology-driven LDP. The no version stops the tunnel from being dynamically stacked over a base LSP.

Syntax: [ no ] tunnel mpls dynamic target


tunnel mpls ip propagate-ttl

Description: Controls the value for the TTL field in the MPLS header when a label is assigned to an IP packet. Enabled by default, this command sets the TTL to the TTL value from the IP packet header. Optionally controls how network structure is hidden from the traceroute command; by default the structure is revealed to forwarded and local packets. The no version sets the value to 255. The default version reverts to the settings configured at the global level; if none, reverts to the global default (causing the TTL field to be copied from the IP packet header, enabling the traceroute command to show all the hops in the network, and propagating the label TTL into the IP header at the tunnel egress).

Syntax: tunnel mpls ip propagate-ttl [ forwarded | local ]

{ no | default } tunnel mpls ip propagate-ttl [ forwarded | local ]

� forwarded � controls whether the network structure is revealed to or hidden from traceroute for forwarded packets

� local � controls whether the network structure is revealed to or hidden from traceroute for local packets


tunnel mpls label-dist558

tunnel mpls label-dist

Description: Specifies the label distribution protocol. The no version removes the label distribution protocol.

Syntax: tunnel mpls [ traffic-eng ] label-dist { cr-ldp | rsvp-te }

no tunnel mpls [ traffic-eng ] label-dist


� cr-ldp � sets the label distribution protocol to CR-LDP

� rsvp-te � sets the label distribution protocol to RSVP-TE


tunnel mpls no-route retries

Description: Specifies for a particular tunnel the number of attempts that will be made to set up an LSP for CR-LDP and RSVP-TE after a failure due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful.

Syntax: tunnel mpls lsp no-route retries retryNum

no tunnel mpls lsp no-route retries

� retryNum � number of retry attempts from 0�65535


tunnel mpls no-route retry-time

Description: Specifies for a particular tunnel the interval in seconds between attempts to set up an LSP for CR-LDP and RSVP-TE after a failure due to no available route. The no version restores the default value of 5 seconds.

Syntax: tunnel mpls lsp no-route retry-time retryTime

no tunnel mpls lsp no-route retry-time

� retryTime � interval from 1�60


tunnel mpls path-optionERX Edge Routers

559

tunnel mpls path-option

Description: Specifies the path options for a tunnel. You can configure one or more path options�each identified by a unique number�for a given tunnel. The path option number expresses the preference for that option; lower numbers have a higher preference, with 1 having the highest preference. The no version deletes the path options.

Syntax: tunnel mpls [ traffic-eng ] path-option number { dynamic | explicit { name pathName | identifier idNumber } } [ hop-by-hop | ospf | isis ] [ lockdown ]

no tunnel mpls [ traffic-eng ] path-option number


� number � identifier for a set of path options

� dynamic � the path is dynamically calculated

� explicit � an explicit path is used

� pathName � name of the explicit path, a string of up to 20 characters

� idNumber � number identifying the explicit path, ranging from 1�65535

� hop-by-hop � specifies that hop-by-hop routing is used for this path option

� ospf � specifies that OSPF routing is used for this path option

� isis � specifies that IS-IS routing is used for this path option

� lockdown � specifies that optimization is not done for this path option


tunnel mpls priority560

tunnel mpls priority

Description: Assigns a setup priority and optionally a hold priority to the tunnel. The priority can range from 0 (the highest) to 7 (the lowest). The hold priority, if set, must be equal to or better (lower numerically) than the setup priority. In the event of insufficient resources when a tunnel is being established, its setup priority is evaluated against the hold priorities of existing tunnels. Tunnels with lower hold priorities (higher values) are preempted and torn down to free their resources for the new tunnel. The no version removes the priority from the tunnel.

Syntax: tunnel mpls [ traffic-eng ] priority setupPriority [ holdPriority ]

no tunnel mpls [ traffic-eng ] priority


� setupPriority � priority for the tunnel as it is being established; the default value is 4

� holdPriority � priority for the tunnel after it has been established; the default value is equal to the configured value of the setup priority


tunnel mpls lsp retries

Description: Specifies for a particular tunnel the number of attempts that will be made to set up an LSP for CR-LDP and RSVP-TE after a failure other than one due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful.

Syntax: tunnel mpls retries retryNum

no tunnel mpls retries

� retryNum � number of retry attempts from 0�65535


tunnel mpls lsp retry-time

Description: Specifies for a particular tunnel the interval in seconds between attempts to set up an LSP for CR-LDP and RSVP-TE after a failure other than one due to no available route. The no version restores the default value of 5 seconds.

Syntax: tunnel mpls [ no-route ] retry-time retryTime

no tunnel mpls retry-time

� retryTime � interval from 1�60


tunnel mpls vpn-idERX Edge Routers

561

tunnel mpls vpn-id

Description: Associates a tunnel with a VPN. Specify the same values for the VPN ID that you specified when you associated a VR with the VPN ID. The no version removes the VPN ID from the virtual router.

Syntax: [ no ] tunnel mpls vpn-id oui ouiNumber index ipAddress

� ouiNumber � identifies the OUI portion of the VPN ID, ranges from 0�16777215

� ipAddress � IP address that identifies the index portion of the VPN ID


tunnel mtu

Description: Configures the maximum transmission unit size for the particular tunnel. The no version restores the default value: 1024 for DVMRP and GRE tunnels and 1440 for IPSec tunnels.

Syntax: tunnel mtu mtuSize

no tunnel mtu

� mtuSize � packet size allowed for transmission through the tunnel in the range: 1024�0240 bytes for DVMRP and GRE tunnels and 160�10240 for IPSec tunnels


tunnel password

Description: Configures a password for the L2TP tunnel. The no version removes the password.

Syntax: tunnel password tunnelPassword

no tunnel password

� tunnelPassword � password used for challenge response to the tunnel peer. In the domain map, it is used only by the LAC.


tunnel peer-identity562

tunnel peer-identity

Description: Specifies the peer identity of the IPSec tunnel. The no version removes the peer endpoint.

Syntax: tunnel peer-identity { address ipAddress | subnet ipAddress subnetMask | range ipAddressLow ipAddressHigh }

no tunnel peer-identity

� address � specifies an IP address as the peer identity

� subnet � specifies a subnet as the peer identity

� range � specifies a range of IP addresses as the peer identity


tunnel pfs group

Description: Configures perfect forward secrecy for the IPSec tunnel by assigning a Diffie-Hellman prime modulus group. The no version removes PFS from this tunnel.

Syntax: tunnel pfs group { 1 | 2 | 5 }

no tunnel pfs group

� 1 � 768-bit Diffie-Hellman prime modulus group




tunnel sequence-datagrams

Description: Enables the use of GRE sequence numbers. The no version disables the use of GRE sequence numbers.

Syntax: [ no ] tunnel sequence-datagrams


tunnel session-key-inboundERX Edge Routers

563

tunnel session-key-inbound

Description: Specifies the encryption and authentication algorithm set and session keys for manual inbound SAs. The no version removes the keys.

Syntax: tunnel session-key-inbound inSaAlgorithms { encryptKey authKey | authKey }

no tunnel session-key-inbound

� inSAalgorithms � algorithms to use for manual inbound SAs; use the online Help to see a list of available algorithms

� encryptKey � encryption key; up to 48 characters

� authKey � authentication key; up to 48 characters


tunnel session-key-outbound

Description: Specifies the encryption and authentication algorithm set, SPI, and session keys for manual outbound SAs. The no version removes the keys.

Syntax: tunnel session-key-outbound outSAalgorithms spi { encryptKey authKey | encryptKey | authKey }

no tunnel session-key-outbound

� outSAalgorithms � algorithms to use for manual outbound SAs; use the online Help to see a list of available algorithms

� spi � number that uniquely identifies an SA; the range is 256 to 4294967295 (0xFFFFFFFF)

� encryptKey � encryption key; up to 48 characters

� authKey � authentication key; up to 48 characters


tunnel signaling

Description: Sets the signaling protocol used to negotiate security parameters and keys. The no version restores the default, isakmp.

Syntax: tunnel signaling { isakmp | manual }

no tunnel signaling

� isakmp � uses ISAKMP/IKE to negotiate parameters

� manual � specifies that security parameters are configured manually


tunnel source564

tunnel source

Description: Configures the source for a DVMRP, GRE, or IPSec tunnel. The no version deletes the tunnel source.

Syntax: For DVMRP and GRE tunnels:

tunnel source { ipAddress | interfaceType interfaceSpecifier }

no tunnel source

For IPSec tunnels:

tunnel source ipAddress

no tunnel source

� ipAddress � IP address of an existing interface that will serve as the tunnel�s source




tunnel transform-set

Description: Specifies a transform set that ISAKMP uses during SA negotiations on this tunnel. Transform sets used for manually configured tunnels can have only one transform. The no version removes the transform set from a tunnel.

Syntax: [ no ] tunnel transform-set transformSetName

� transformSetName � name of the transform set


typeERX Edge Routers

565

type

Description: For RTR Configuration, configures an RTR operation. The no version removes the configured type from the operation and resets all configuration for an RTR index.

Note: You must configure the operation�s type before you can configure any other characteristics of the operation.

For Domain Map Tunnel Configuration, specifies the type of tunnel as either L2TP or L2F. The no version restores the default value, L2TP.

Syntax: To configure an RTR operation:

[ no ] type rtrType protocol ipIcmpEcho destination [ source-ipaddr srcAddr | source ifType ifValue ]

� rtrType � one of the following types of operation:

� echo � performs end-to-end operation only

� pathEcho � discovers a path to the destination and echoes each device on the path

� destination � IP address or an IP hostname or domain name

� srcAddr � source IP address

� ifType � source�s type of interface (for example, FastEthernet)

� ifValue � interface identifier; for example, FastEthernet 0/0

To specify the type of tunnel:

Syntax: type { l2tp | l2f }

no type

Mode(s): RTR Configuration, Domain Map Tunnel Configuration

udp-port

Description: Specifies the UDP port on the system where the RADIUS authentication or accounting servers reside. The system uses this port to communicate with the RADIUS servers. The no version restores the default value.

Syntax: udp-port port

no udp-port

� port � one of the following port numbers:

� 1812 (default for RADIUS authentication servers)

� 1813 (default for RADIUS accounting servers)


undebug ip bgp566

undebug ip bgp

Description: Turns off the display of information previously enabled with the debug ip bgp command. There is no no version.

Syntax: undebug ip bgp [ in | out ] [ peerAddress [ peerAddressMask ] ][ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ]

















undebug ip mbgpERX Edge Routers

567

undebug ip mbgp

Description: Turns off the display of information previously enabled with the debug ip mbgp command. There is no no version.

Syntax: undebug ip mbgp [ in | out ] [ peerAddress [ peerAddressMask ] ][ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ]

















undebug ip pim

Description: Turns off the display of information previously enabled with the debug ip pim command. There is no no version.

Syntax: undebug ip pim pimLog

� pimLog � PIM log of interest


undebug ip ospf568

undebug ip ospf

Description: Turns off the display of information for the selected variable. See debug ip ospf command for a complete list of the ospfLog variables. There is no no version.

Syntax: undebug ip ospf ospfLog

� ospfLog � OSPF log of interest; one of the following options:

� adj � OSPF adjacency events

� elect-dr � OSPF designated router election

� events � OSPF general events

� lsa � OSPF link state advertisements events

� neighbor � OSPF neighbor state machine

� packets-rcvd � OSPF packets received

� packets-sent � OSPF packets sent

� route � OSPF route events

� spf � all OSPF shortest path first calculation events

� spf-ext � OSPF shortest path first external route calculation events

� spf-inter � OSPF shortest path first interarea route calculation events

� spf-intra � OSPF shortest path first intra-area route calculation events


undebug ip rip

Description: Turns off the display of information previously enabled with the debug ip rip command. There is no no version.

Syntax: undebug ip rip ripLog

� ripLog � RIP log of interest; one of the following options:

� events � general RIP events, such as removing RIP from an interface or creating the RIP process

� route � events associated with two RIP routers exchanging routes


undebug isisERX Edge Routers

569

undebug isis

Description: Turns off the display of information for the selected variable. See the debug isis command for a complete list of the IS-IS log variables. There is no no version.

Syntax: undebug isis isisLog

� isisLog � IS-IS log of interest; one of the following options:

� adj-packets � IS-IS adjacency-related packets, such as hello packets sent and IS-IS received adjacencies going up and down

� mpls traffic-eng advertisements � MPLS traffic-engineering agent advertisements

� mpls traffic-eng agents � MPLS traffic-engineering agents

� snp-packets � IS-IS CSNPs/PSNPs

� spf-events � shortest path first events

� spf-statistics � SPF timing and statistic data

� spf-triggers � SPF triggering events

� update-packets � update-related packets


unframed

Description: Configures an unchannelized line for a CE1 interface.The no version switches the interface to the default crc4 framing mode and deletes channel group 1.

Syntax: [ no ] unframed


update-source570

update-source

Description: Specifies the loopback interface whose local address is used as the source address for the OSPF, PIM, or RIP connection to a remote neighbor. The no version deletes the source address from the connection.

Syntax: For OSPF:

[ no ] update-source loopback interfaceSpecifier

� interfaceSpecifier � integer in the range 1�4294967293 identifying the loopback interface

For PIM

[ no ] update-source interfaceType interfaceSpecifier



For RIP:

[ no ] update-source interfaceType interfaceSpecifier




version

Description: Specifies the global RIP version. The no version reverts to the default value, RIP version 1. Use the ip rip receive and ip rip send version commands to specify the RIP version for a specific interface.

Syntax: version versionNumber

no version

� versionNumber � RIP version number


virtual-routerERX Edge Routers

571

virtual-router

Description: When used from Domain Map Configuration mode, maps a virtual router to a user domain name. The no version deletes the virtual-router parameter, and the system defaults to the default virtual router.

When used from Privileged Exec or Global Configuration mode, creates a virtual router or accesses the context of a previously created virtual router or a VRF. The no version deletes the virtual router, and the system defaults to the default virtual router. Issuing a no version that specifies an existing VRF only displays the error message: �Cannot delete a VRF with this command�; you must use the no ip vrf command to remove a VRF.

Syntax: Mapping to a user domain name:

virtual-router vrName

no virtual-router [ vrName ]

Creating a virtual router or accessing a virtual router or VRF:

virtual-router vrName | :vrfName | vrName:vrfName

no virtual-router vrName

� vrName � name of the virtual router; a string of 1�15 alphanumeric characters

� :vrfName � specifies a VRF in the current VR context; a string of 1�32 alphanumeric characters

� vrName:vrfName � specifies a VRF in the context of a VR other than the current VR

Mode(s): Domain Map Configuration, Privileged Exec, Global Configuration

vlan description

Description: Assigns an alias or description to a VLAN subinterface.

Syntax: vlan description aliasName

no vlan description

� aliasName � the alias or description; up to 64 characters


vlan id572

vlan id

Description: Specifies a VLAN ID. There is no no version.

Syntax: vlan id IdValue [ untagged ]

� idValue � number in the range of 0�4095, which is unique within the Ethernet interface

� untagged � specifies that frames be sent untagged; only valid for VLAN ID 0


weight

Description: Sets the weighted round-robin weight of the scheduler node or queue. The no version sets the weight to the default value.

Syntax: weight weightValue

no weight

� weightValue � number in the range 1�63; default is 8


write memory

Description: Saves all outstanding (unsaved) configuration changes to nonvolatile storage; an exact alias of the copy running-configuration startup-configuration command. Available if the system is in either Automatic Commit mode or Manual Commit mode. If issued while in Automatic Commit mode, the CLI notifies you that the command is not necessary, but allows you to proceed. There is no no version.

Syntax: write memory


yellow

Description: Generates or detects a yellow alarm for a T1 controller. The no version restores the default value, to not generate or to not detect a yellow alarm.

Syntax: [ no ] yellow { generate | detect }


Index

AAAA commands

aaa accounting acct-stop on-aaa-failure 1aaa accounting acct-stop on-access-deny 1aaa accounting duplication 1aaa accounting interval 2aaa accounting ppp default 2aaa authentication enable default 3aaa authentication login 3aaa authentication ppp default 4aaa delimiter 4aaa dns 5aaa domain-map 5aaa duplicate-address-check 5aaa new-model 6aaa parse-order 6aaa subscriber limit per-port 7aaa subscriber limit per-vr 7aaa timeout 7aaa tunnel assignment-id-format 8aaa tunnel client-name 8aaa tunnel ignore 8aaa tunnel password 9aaa wins 9baseline aaa 56login authentication 246show aaa 392show aaa accounting 392show aaa accounting interval 393show aaa delimiters 393show aaa domain-map 393show aaa duplicate-address-check 393show aaa model 393show aaa name-servers 394show aaa statistics 394show aaa subscriber per-port-limit 394show aaa subscriber per-vr-limit 394show aaa timeout 395show aaa tunnel-parameters 395test aaa 541

AAA profile commandsaaa profile 6allow 29deny 122

ppp aaa-profile 342show aaa profile 394translate 550

APS/MSP commandsaps force 29aps group 30aps lockout 30aps manual 30aps protect 31aps revert 31aps unidirectional 31aps working 32show aps 395threshold 544

ARP commandsarp 40arp timeout 41clear arp 89ip proxy-arp 200show arp 396

ATM commandsatm 41atm aal5 description 41atm aal5 shutdown 42atm aal5 snmp trap link-status 42atm atm1483 description 42atm atm1483 mtu 42atm atm1483 shutdown 43atm atm1483 snmp trap link-status 43atm auto-configuration 43atm cac 43atm clock internal 44atm description 44atm esi-address 44atm framing 45atm ilmi-enable 45atm ilmi-keepalive 45atm lbo 46atm oam 46atm oam flush 47atm oam loopback-location 47atm pvc 48atm shutdown 49atm snmp trap link-status 49

Index2

atm sonet stm-1 49atm svc 50atm uni-version 50atm vc-per-vp 51atm vp-tunnel 51auto-configure 53baseline interface atm 59ds3-scramble 130e3-scramble 133interface atm 161ip atm-vc 169load-interval 238loopback 247map-group 251map-list 251ping atm interface atm 340show atm aal5 interface 396show atm interface 397show atm map 397show atm oam 397show atm ping 398show atm subinterface 398show atm vc 399show atm vc atm 399show atm vp-tunnel 400show interfaces 424show nbma arp 489shutdown 511

BBGP commands

address-family 19aggregate-address 28auto-summary 54baseline ip bgp 59bgp advertise-inactive 67bgp always-compare-med 68bgp bestpath med confed 68bgp bestpath missing-as-worst 68bgp client-to-client reflection 68bgp cluster-id 69bgp confederation identifier 69bgp confederation peers 69bgp dampening 70bgp default ipv4-unicast 70bgp default local-preference 71bgp enforce-first-as 71bgp fast-external-fallover 71bgp log-neighbor-changes 72bgp maxas-limit 72

bgp redistribute-internal 72bgp router-id 72bgp shutdown 73clear access-list 88clear ip bgp 90clear ip bgp dampening 91clear ip bgp redistribution 91debug ip bgp 110debug ip mbgp 112default-fields peer 117default-fields route 118disable-dynamic-redistribute 124distance bgp 126exit-address-family 142ip as-path access-list 168ip bgp-community new-format 169ip bgp-confed-as-set new-format 169ip community-list 170ip extcommunity-list 178limits 235match as-path 253match community 253match distance 254match extcommunity 254match ip address 255match ip next-hop 255match level 256match metric 256match metric-type 256match route-type 257match tag 258maximum-paths 258neighbor activate 283neighbor advertisement-interval 284neighbor allowas-in 284neighbor as-override 285neighbor capability 286neighbor default-originate 287neighbor description 287neighbor distribute-list 288neighbor ebgp-multihop 288neighbor filter-list 289neighbor local-as 290neighbor maximum-prefix 290, 291neighbor maximum-update-size 291neighbor next-hop-self 292neighbor password 292neighbor peer-group 293neighbor prefix-list 293neighbor prefix-tree 294

ERX Edge Routers3

neighbor remote-as 294neighbor remove-private-as 295neighbor rib-out disable 295neighbor route-map 296neighbor route-reflector-client 296neighbor send-community 297neighbor shutdown 297neighbor soft-reconfiguration inbound 298neighbor timers 298neighbor unsuppress-map 299neighbor update-source 299neighbor weight 300network 302overload shutdown 311redistribute 363rib-out disable 371router bgp 372set as-path prepend 383set comm-list delete 383set community 384set dampening 385set extcommunity 387set ip next-hop 388set local-preference 389set metric 389set metric-type 390set origin 390set tag 391set weight 392show ip as-path access-list 425show ip bgp 426show ip bgp advertised-routes 428show ip bgp aggregate-address 428show ip bgp cidr-only 429show ip bgp community 429show ip bgp community-list 430show ip bgp dampened-paths 430show ip bgp filter-list 430show ip bgp flap-statistics 431show ip bgp inconsistent-as 431show ip bgp neighbors 431show ip bgp neighbors dampened-routes 432show ip bgp neighbors paths 432show ip bgp neighbors received

prefix-filter 432show ip bgp neighbors received-routes 433show ip bgp neighbors routes 433show ip bgp network 434show ip bgp next-hops 434show ip bgp paths 434

show ip bgp peer-group 435show ip bgp quote-regexp 436show ip bgp regexp 438show ip bgp summary 440show ip community-list 441show ip extcommunity-list 446synchronization 527table-map 535test ip bgp neighbor 542timers bgp 546undebug ip bgp 566undebug ip mbgp 567

BGP/MPLS VPN commandsaddress-family 19bgp default route-target filter 71clear ip routes vrf 94domain-id 128domain-tag 130exit-address-family 142export-map 142import-map 160ip dynamic-interface-prefix 177ip mpls forwarding-mode label-switched 190ip mpls vpn-interface per-label 190ip share-interface 206ip share-nexthop 206ip vrf 211ip vrf forwarding 212maximum routes 259rd 362route-target 374show ip protocols 460show ip vrf 467

booting commandsboot backup 73boot config 74boot force-backup 74boot revert-tolerance 75boot revert-tolerance never 75boot slot 75boot subsystem 76boot system 76check-disk 85delete 121flash-disk duplicate 145flash-disk initialize 145flash-disk scan 146reload 368reload slot 368show boot 400

Index4

show last-reset 478show reload 501

B-RAS commandsaaa accounting acct-stop on-aaa-failure 1aaa accounting acct-stop on-access-deny 1aaa accounting duplication 1aaa accounting interval 2aaa accounting ppp default 2aaa authentication ppp default 4aaa delimiter 4aaa dns 5aaa domain-map 5aaa duplicate-address-check 5aaa parse-order 6aaa profile 6aaa subscriber limit per-port 7aaa subscriber limit per-vr 7aaa timeout 7aaa tunnel assignment-id-format 8aaa tunnel client-name 8aaa tunnel ignore 8aaa tunnel password 9aaa wins 9address 11address-pool-name 22allow 29baseline aaa 56baseline dhcp 57baseline local pool 63baseline radius 65baseline tacacs 66deadtime 109deny 122identification 159ip address-pool 167ip dhcp-server 173ip-hint 179ip local pool 188ip local pool snmpTrap 188ip local pool warning 189key 223license b-ras 234logout subscribers 246loopback 247max-sessions 260medium ipv4 262override-user 312password 314ppp aaa-profile 342preference 349

profile 350radius acct-session-id-format 352radius algorithm 353radius calling-station-delimiter 353radius calling-station-format 354radius dsl-port-type 355radius ethernet-port-type 355radius ignore framed-ip-netmask 355radius include 356radius nas-identifier 358radius nas-port-format 358radius override nas-ip-addr

tunnel-client-endpoint 358radius rollover-on-reject 359radius server 359radius trap acct-server-not-responding 359radius trap auth-server-not-responding 359radius trap no-acct-server-responding 360radius trap no-auth-server-responding 360radius tunnel-accounting 360radius udp-checksum 360radius update-source-addr 361retransmit 370set dhcp relay 386show aaa 392show aaa accounting 392show aaa accounting interval 393show aaa delimiters 393show aaa domain-map 393show aaa duplicate-address-check 393show aaa model 393show aaa name-servers 394show aaa profile 394show aaa statistics 394show aaa subscriber per-port-limit 394show aaa subscriber per-vr-limit 394show aaa timeout 395show aaa tunnel-parameters 395show cops info 412show dhcp 413show ip local pool 451show license b-ras 479show radius 497show radius acct-session-id-format 497show radius algorithm 497show radius attributes-ignored 498show radius attributes-included 498show radius calling-station-delimiter 498show radius calling-station-format 498show radius dsl-port-type 499

ERX Edge Routers5

show radius ethernet-port-type 499show radius nas-identifier 499show radius nas-port-format 499show radius override 499show radius rollover-on-reject 500show radius tunnel-accounting 500show radius udp-checksum 500show radius update-source-addr 500show sscc info 506show sscc version 506show statistics tacacs 506show subscribers 507show tacacs 508sscc address 523sscc enable 523sscc retryTimer 523sscc sourceAddress 523sscc transportRouter 524strip-domain 524subscriber 525tacacs-server host 535tacacs-server key 536tacacs-server source-address 536tacacs-server timeout 536test aaa 541timeout 545translate 550tunnel 551type 565udp-port 565virtual-router 571

Bridged Ethernet commandsip mac-validate 189show ip mac-validate 451

bridged IP commandsencapsulation bridge1483 135set dhcp relay 386show dhcp relay 413

CCBF commands

baseline CBF interface 56cbf 82cbf connection 83cbf shutdown 83clear CBF interface 89show cbf connection 403show cbf interface 403

CE1 commandsbert 67

channel-group timeslots 84controller e1 104interface serial 165lineCoding 237load-interval 238loopback 247mru 280mtu 281show controllers e1 411show interfaces serial 424shutdown 511unframed 569

Cisco HDLC commandsbaseline hdlc interface 58encapsulation hdlc 136hdlc down-when-looped 155hdlc keepalive 155hdlc shutdown 155show hdlc interface 422show interfaces serial 424

CLI commands. See user interface commandsCLNS commands

clns configuration-time 96clns holding-time 96clns host 97show clns 404show clns interface 405show clns neighbors 405show clns protocol 405show clns traffic 406

cOCx/STMx commandsbaseline line interface sonet 63baseline path interface sonet 64baseline section interface sonet 65controller sonet 104interface serial 165loopback 247mru 280mtu 281path 315path ds1|e1 316path ds1|e1 bert 317path ds1|e1 channel-group shutdown 317path ds1|e1 channel-group snmp trap

link-status 318path ds1|e1 channel-group timeslots 318path ds1|e1 clock source 319path ds1|e1 framing 319path ds1|e1 loopback 320path ds1|e1 shutdown 321

Index6

path ds1|e1 snmp trap link-status 321path ds1 fdl 321path ds1 fdl carrier 322path ds1 fdl string 322path ds1 fdl transmit 323path ds1 remote-loopback 323path ds3 323path ds3 clock source 324path ds3 framing 324path ds3 loopback 325path ds3 mdl carrier 325path ds3 mdl string 326path ds3 mdl transmit 327path ds3 shutdown 327path ds3 snmp trap link-status 327path ds3 t1 328path ds3 t1 bert 328path ds3 t1 clock source 329path ds3 t1 fdl 330path ds3 t1 fdl carrier 330path ds3 t1 fdl string 331path ds3 t1 fdl transmit 332path ds3 t1 framing 329path ds3 t1 loopback 333path ds3 t1 remote-loopback 334path ds3 t1 shutdown 334path ds3 t1 snmp trap link-status 334path ds3 t1 timeslots 335path e1 unframed 335path overhead j1 336path snmp trap link-status 336sdh 379show controllers sonet 408show controllers sonet remote 410show interfaces 424shutdown 511

CT1 commandsbert 67cablelength short 82channel-group shutdown 83channel-group snmp trap link-status 84controller t1 105fdl 143fdl carrier 143fdl string 144fdl transmit 144interface serial 165invert data 166j1 223lineCoding 237

load-interval 238loopback 247mru 280mtu 281remote-loopback 369show controllers t1 411show controllers t1 remote 411show interfaces serial 424shutdown 511yellow 572

CT3 commandsloopback 247mdl carrier 260mdl string 261mdl transmit 261mru 280mtu 281show controllers t3 412show controllers t3 remote 412show interfaces serial 424shutdown 511snmp trap link-status 513t1 bert 528t1 clock source 529t1 fdl 529t1 fdl carrier 530t1 fdl string 530t1 fdl transmit 531t1 framing 531t1 lineCoding 531t1 loopback 532t1 remote-loopback 533t1 shutdown 533t1 snmp trap link-status 533t1 timeslots 534t1 yellow 534

customer support xviii

DDHCP local server commands

ip dhcp-local cable-modem 171link 238network 302reserve 370server-address 381show ip dhcp-local cable-modem 441show ip dhcp-local excluded 442show ip dhcp-local pool 442show ip dhcp-local reserved 442

ERX Edge Routers7

DNS commandsip domain-lookup 174ip domain-name 174ip name-server 191show ip domain-lookup 443

DVMRP commandsbaseline ip dvmrp 60clear ip dvmrp routes 91disable 123disable-dynamic-redistribute 124ip dvmrp 174ip dvmrp accept-filter 175ip dvmrp announce-filter 175ip dvmrp auto-summary 175ip dvmrp disable 176ip dvmrp metric-offset 176ip dvmrp routehog-notification 176ip dvmrp route-limit 176ip dvmrp summary-address 177ip dvmrp unicast-routing 177redistribute 363router dvmrp 373show dvmrp tunnel 413show dvmrp tunnel summary 414show ip dvmrp 443show ip dvmrp interface 444show ip dvmrp mroute 444show ip dvmrp neighbor 445show ip dvmrp route 445show ip dvmrp routeNextHop 446tunnel destination 552

EE3 commands

atm framing 45clock source 98controller e3 104framing 152load-interval 238loopback 247mru 280mtu 281show controllers e3 407shutdown 511

E3-Frame command, interface serial 165Ethernet commands

baseline interface fastEthernet 59baseline interface gigabitEthernet 59duplex 132ethernet description 138

interface fastEthernet 162interface gigabitEthernet 163ip mac-validate 189mtu 281show interfaces 424show ip mac-validate 451shutdown 511speed 521svlan ethertype 527svlan id 527

FFast Ethernet command, load-interval 238file management commands

copy 106copy running-configuration 106copy running-configuration

startup-configuration 107copy startup-configuration 107host 157rename 370write memory 572

Frame Relay commandsbaseline frame-relay interface 57encapsulation ietf 136frame-relay class 146frame-relay description 147frame-relay fragment 147frame-relay interface-dlci ietf 147frame-relay intf-type 148frame-relay keepalive 148frame-relay lmi-n391dte 148frame-relay lmi-n392dce 149frame-relay lmi-n392dte 149frame-relay lmi-n393dce 149frame-relay lmi-n393dte 150frame-relay lmi-t391dte 150frame-relay lmi-t392dce 150frame-relay lmi-type 151map-class frame-relay 250show frame-relay interface 415show frame-relay lip 416show frame-relay lmi 417show frame-relay map 417show frame-relay multilinkInterface 418show frame-relay pvc 418show frame-relay subinterface 419show frame-relay summary 419shutdown 511

Index8

FTP client commandsip ftp source-address 179ip ftp source-interface 179

FTP server commandsdelete 121ftp-server enable 153show ftp-server 419show users 509

GGRE commands

show gre tunnel 420show gre tunnel summary 420tunnel destination 552

HHDLC commands, Cisco

baseline hdlc interface 58encapsulation hdlc 136hdlc down-when-looped 155hdlc keepalive 155hdlc shutdown 155show hdlc interface 422show interfaces serial 424

HSSI commandsclock rate 97crc 108hssi force-dte-acknowledge 158hssi internal-clock 158interface hssi 164invert data 166load-interval 238mru 280mtu 281show interfaces 424shutdown 511snmp trap link-status 513

IIGMP commands

baseline ip igmp 60baseline ip igmp-proxy interface 60igmp disable 159igmp promiscuous 159ip igmp 182ip igmp access-group 183ip igmp group limit 183ip igmp immediate-leave 183ip igmp last-member query-interval 184

ip igmp promiscuous 184ip igmp querier 185ip igmp querier-timeout 186ip igmp query-interval 186ip igmp query-max-response-time 186ip igmp robustness 187ip igmp static-group 187ip igmp version 187multicast group port limit 282router igmp 373show ip igmp 447show ip igmp groups 448show ip igmp interface 448show multicast group limit 489See also IGMP Proxy commands

IGMP Proxy commandsip igmp-proxy 184ip igmp-proxy unsolicited-report-interval 185ip igmp-proxy V1-router-present-time 185show ip igmp-proxy 448show ip igmp-proxy groups 449show ip igmp-proxy interface 449

interface commandsbaseline interface serial 59baseline ip interface 61clear ip interface 92interface 161interface ip 164interface loopback 164interface mlframe-relay 164interface mlppp 165interface null 165interface pos 165interface serial 165interface tunnel 166ip address 167ip alwaysup 167ip broadcast-address 169ip debounce-time 171ip dynamic-interface-prefix 177ip redirects 200ip share-interface 206ip share-nexthop 206ip shutdown 206show interfaces 424show ip interface 450show ip interface shares 450show ip interface vrf 451show ip vrf interfaces 467snmp trap ip link-status 513

ERX Edge Routers9

IP commandsarp 40arp timeout 41baseline ip 59baseline ip tcp 62baseline ip udp 62baseline ip vrrp 62baseline show-delta-counts 66clear access-list 88clear arp 89clear ip prefix-list 93clear ip prefix-tree 94clear ip rip redistribution 94clear ip routes 94distance 125ip access-routes 166ip address 167ip address-pool 167ip alwaysup 167ip as-path access-list 168ip broadcast-address 169ip community-list 170ip debounce-time 171ip demux-type da-prefix 171ip destination-prefix 171ip dhcp-server 173ip directed-broadcast 173ip disable-forwarding 173ip explicit-path. See MPLS commands: mpls

explicit-pathip extcommunity-list 178ip ignore-df-bit 187ip interface. See IP commands: no ip interfaceip irdp 188ip local pool 188ip local pool snmpTrap 188ip local pool warning 189ip mac-validate 189ip mask-reply 189ip mtu 190ip multipath round-robin 191ip prefix-list 199ip prefix-tree 200ip proxy-arp 200ip redirects 200ip refresh-route 201ip rip commands. See RIP commandsip route 203ip router-id 204ip rsvp bandwidth. See mpls bandwidth

ip sa-validate 205ip shutdown 206ip source-prefix 206ip source-route 207ip speed 207ip ssh. See SSH commandsip ttl 210ip tunnel reassembly 210ip unnumbered 210ip unreachables 210ip virtual-router 211ip vrrp 212ip vrrp advertise-interval 212ip vrrp authentication-key 213ip vrrp authentication-type 213ip vrrp enable 213ip vrrp preempt 213ip vrrp priority 214ip vrrp virtual-address 214no ip interface 305ping 338profile 350route-map 372router rip 374show access-list 395show arp 396show ip 424show ip address 424show ip as-path-access-list 425show ip demux interface 441show ip domain-lookup 443show ip dynamic-interface-prefix 446show ip explicit-paths. See MPLS commands:

show mpls explicit-pathsshow ip extcommunity-list 446show ip forwarding-table slot 447show ip interface 450show ip interface shares 450show ip mac-validate 451show ip prefix-list 459show ip prefix-list summary | detail 459show ip prefix-tree 459show ip prefix-tree summary | detail 460show ip profile 460show ip protocols 460show ip redistribute 460show ip route 463show ip route slot 464show ip rpf-route 464show ip ssh 465

Index10

show ip static 465show ip tcp statistics 465show ip traffic 466show ip tunnel reassembly statistics 466show ip udp statistics 466show ip vrrp 467show ip vrrp brief 467show ip vrrp neighbor 468show ip vrrp statistics 468show ip vrrp summary 468show profile 495show profile brief 495show route-map 501timers 546traceroute 549ip-hint 179

IP multicast commandsip multicast-routing 190ip rpf-route 205mtrace 281show ip mroute 452show ip multicast protocols 452show ip multicast routing 452

IPSec commandsaggressive-mode 28authentication 51encryption 137group 153hash 154ipsec clear sa 214ipsec isakmp-policy-rule 215ipsec key manual 215ipsec lifetime 215ipsec local-endpoint 216ipsec transform-set 216license ipsec-tunnels 234lifetime 234show ike policy-rule 423show ike sa 423show ipsec lifetime 469show ipsec local-endpoint 469show ipsec transform-set 469show ipsec tunnel 470show ipsec tunnel summary 470show license ipsec-tunnels 479tunnel lifetime 554tunnel local-identity 554tunnel mtu 561tunnel peer-identity 562tunnel pfs group 562

tunnel session-key-inbound 563tunnel session-key-outbound 563tunnel signaling 563tunnel source 564tunnel transform-set 564

IP tunnel commandsshow gre tunnel 420show gre tunnel summary 420tunnel checksum 552tunnel mtu 561tunnel source 564

IS-IS commandsarea-authentication-key 32area-message-digest-key 34baseline clns 56clear ip isis redistribution 92clear isis adjacency 95clear isis database 95clns configuration-time 96clns holding-time 96clns host 97debug isis 116disable-dynamic-redistribute 124distance ip 126distribute-domain-wide 126domain-authentication-key 128domain-message-digest-key 128ignore-lsp-errors 160ip router isis 204ip route-type 204isis authentication-key 216isis circuit-type 217isis csnp-interval 217isis hello-interval 218isis hello-multiplier 218isis lsp-interval 219isis mesh-group 219isis message-digest-key 220isis metric 221isis priority 221isis retransmit-interval 221isis retransmit-throttle-interval 222is-type 222log-adjacency-changes 240lsp-gen-interval 249lsp-mtu 249lsp-refresh-interval 249maximum-paths 258max-lsp-lifetime 259metric-style narrow 263

ERX Edge Routers11

metric-style transition 264metric-style wide 264mpls spf-use-any-best-path 276mpls traffic-eng 277mpls traffic-eng router-id 280net 300passive-interface 313redistribute 363redistribute isis ip 365router isis 373set-overload-bit 391show clns 404show clns interface 405show clns neighbors 405show clns protocol 405, 406show host 423show isis database 471show isis mpls adjacency-log 471show isis mpls advertisements 471show isis mpls tunnel 472show isis spf-log 472show isis summary-addresses 472show isis topology 472spf-interval 522summary-address 526suppress-default 526undebug isis 569

Kkeepalive commands

hdlc keepalive 155ppp keepalive 344

LL2F commands

client-name 96l2f checksum 223l2f destruct-timeout 224l2f drain 224l2f drain destination 224l2f drain tunnel 225l2f ignore-receive-data-sequencing 225l2f shutdown 226l2f shutdown destination 226l2F shutdown session 226l2f shutdown tunnel 227show l2f 473show l2f destination 473show l2f destination summary 473

show l2f session 474show l2f session summary 474show l2f tunnel 475show l2f tunnel summary 475type 565

L2TP commandsaaa tunnel assignment-id-format 8address 11client-name 96disable proxy lcp 124enable proxy authenticate 134l2tp checksum 227l2tp destination profile 228l2tp destruct-timeout 228l2tp drain 228l2tp drain destination 229l2tp drain tunnel 229l2tp ignore-receive-data-sequencing 230l2tp retransmission 230l2tp shutdown 230l2tp shutdown destination 231l2tp shutdown session 231l2tp shutdown tunnel 232l2tp tunnel idle-timeout 232l2tp tunnel-switching 232l2tp tunnel test 233local host 238local ip address 239max-sessions 260remote host 369server name 381show dhcp 413show l2tp 475show l2tp destination 476show l2tp destination profile 476show l2tp destination summary 476show l2tp session 477show l2tp session summary 477show l2tp tunnel 478show l2tp tunnel summary 478source-address 520tunnel 551tunnel password 561type 565

Mmanagement commands, system

bandwidth oversubscription 55copy running-configuration

startup-configuration 106, 107

Index12

copy startup-configuration 107service manual-commit 382write memory 572

MFR commandsbaseline frame-relay interface 57baseline frame-relay multilink interface 58encapsulation ietf 136frame-relay interface-dlci ietf 147frame-relay intf-type 148frame-relay keepalive 148frame-relay lmi-n391dte 148frame-relay lmi-n392dce 149frame-relay lmi-n392dte 149frame-relay lmi-n393dce 149frame-relay lmi-n393dte 150frame-relay lmi-t391dte 150frame-relay lmi-t392dce 150frame-relay lmi-type 151interface mlframe-relay 164member-interface 262show frame-relay interface 415show frame-relay lip 416show frame-relay lmi 417show frame-relay map 417show frame-relay multilinkInterface 418show frame-relay pvc 418show frame-relay subinterface 419show frame-relay summary 419

MLPPP commandsencapsulation mlppp 136interface mlppp 165member-interface 262

MPLS commandsappend-after 29bandwidth 55cleanup-timeout-factor 88clear mpls ldp 95cr-ldp 108hello hold-time 155index 160interface tunnel 166ip explicit-path. See mpls explicit-pathip rsvp bandwidth. See mpls bandwidthip vpn-id 211list 238mpls 265mpls atm vci range 265mpls atm vpi range 266mpls bandwidth 266mpls disable 266

mpls explicit-path 267mpls ip propagate-ttl 267mpls label-range 268mpls ldp advertise-labels 268mpls ldp disable 266mpls ldp discovery transport-address 268mpls ldp no-route retries 269mpls ldp no-route retry-time 269mpls ldp profile 274mpls ldp retries 269mpls ldp retry-time 270mpls ldp session retries 270mpls ldp session retry-time 270mpls ldp targeted-hello receive list 271mpls ldp targeted-hello send list 271mpls lsp no-route retries 271mpls lsp no-route retry-time 272mpls lsp retries 272mpls lsp retry-time 272mpls match exp-bits 273mpls match traffic-class 273mpls profile 274mpls reoptimize 275mpls reoptimize timers frequency 275mpls rsvp disable 266mpls rsvp message-bundling 276mpls rsvp profile 274mpls rsvp refresh-reduction 276mpls topology-driven-lsp 276mpls topology-driven-lsp ip-interfaces 277mpls traffic-eng administrative-weight 277mpls traffic-eng attribute-f lags 278mpls traffic-eng flood thresholds 279mpls traffic-eng link-management timers

periodic-flooding 279mpls tunnels profile 280next-address 303refresh-period 367show cac 402show cac interface 403show ip explicit-paths. See show mpls

explicit-pathsshow mpls 481show mpls binding 482show mpls explicit-paths 483show mpls forwarding 484show mpls ldp profile. See show mpls profileshow mpls ldp targeted session 485show mpls minor-interface 486show mpls profile 487

ERX Edge Routers13

show mpls rsvp 487show mpls rsvp profile. See show mpls profileshow mpls tunnels 488show mpls tunnels profile. See show mpls

profiletunnel destination 552tunnel ip profile 553tunnel mpls affinity 555tunnel mpls autoroute announce 555tunnel mpls autoroute metric 556tunnel mpls bandwidth 556tunnel mpls base-tunnel 556tunnel mpls description 557tunnel mpls dynamic target 557tunnel mpls ip propagate-ttl 557tunnel mpls label-dist 558tunnel mpls lsp no-route retries 558tunnel mpls lsp no-route retry-time 558tunnel mpls path-option 559tunnel mpls priority 560tunnel mpls retries 560tunnel mpls retry-time 560tunnel mpls vpn-id 561

MPLS commands (IS-IS)mpls spf-use-any-best-path 276mpls traffic-eng 277mpls traffic-eng router-id 280

MPLS commands (OSPF)mpls traffic-eng area 278mpls traffic-eng router-id 280

Multilink Frame Relay commands. See MFR commands

NNBMA command, show nbma arp 489NFS commands

host 157ip nfs 191ip nfs host 192show ip nfs 452

non-PPP equal access commandsbaseline ip dhcp-local 59baseline ip http 60default-router 121dns-server 127domain-name 129ip dhcp-local excluded-address 172ip dhcp-local limit 172ip dhcp-local pool 172ip http access-class 180

ip http max-connection-time 180ip http not-found-url 180ip http port 181ip http realm 181ip http root-refresh 181ip http root-url 182ip http same-host-limit 182ip http server 182lease 233netbios-name-server 301netbios-node-type 301service dhcp-local 381show ip dhcp-local binding 441show ip dhcp-local limits 442show ip dhcp-local statistics 443show ip http 447

NTP commandsclock set 98clock summer-time date 99clock summer-time recurring 100clock timezone 100ntp access-group 306ntp broadcast-client 307ntp broadcast-delay 307ntp disable 307ntp enable 307ntp master 308ntp server 308ntp server enable 309ntp source 309show clock 406show ntp associations 489show ntp status 490

NVS commandscheck-disk 85flash-disk duplicate 145flash-disk initialize 145flash-disk scan 146

OOCx/STMx commands

baseline line interface sonet 63baseline path interface sonet 64baseline section interface sonet 65clock source 98controller sonet 104loopback 247path 315path overhead j1 336sdh 379

Index14

show controllers sonet 408shutdown 511

OSPF commandsaddress area 12address authentication-key 14address authentication message-digest 15address authentication-none 17address cost 17address dead-interval 18address hello-interval 19address message-digest-key md5 20address network 21address passive-interface 22address priority 23address retransmit-interval 25address transmit-delay 27area 305area. See OSPF commands: no areaarea default-cost 33area nssa 35area range 36area stub 36area virtual-link 36area virtual-link authentication-key 37area virtual-link authentication

message-digest 37area virtual-link authentication-none 37area virtual-link dead-interval 38area virtual-link hello-interval 38area virtual-link message-digest-key md5 39area virtual-link retransmit-interval 39area virtual-link transmit-delay 40authentication-key 52authentication message-digest 52authentication-none 53automatic-virtual-link 53baseline ip ospf 61clear ip ospf redistribution 92cost 107dead-interval 109debug ip ospf 113disable-dynamic-redistribute 124distance 125domain-id 128domain-tag 130hello-interval 156ip ospf authentication-key 192ip ospf authentication message-digest 192ip ospf authentication-none 192ip ospf cost 193

ip ospf dead-interval 193ip ospf hello-interval 193ip ospf message-digest-key md5 194ip ospf network 194ip ospf priority 195ip ospf retransmit-interval 195ip ospf shutdown 195ip ospf transmit-delay 195ip route-type 204maximum-paths 258message-digest-key md5 263mpls traffic-eng area 278mpls traffic-eng router-id 280neighbor 283network area 303no area 305ospf auto-cost reference-bandwidth 310ospf enable 310ospf log-adjacency-changes 311ospf shutdown 311passive-interface 313redistribute 363remote-neighbor 369retransmit-interval 371router ospf 373show ip ospf 453show ip ospf border-routers 453show ip ospf database 453show ip ospf interface 454show ip ospf internal-statistics 454show ip ospf neighbors 454show ip ospf remote-neighbor interface 455show ip ospf spf-log 455show ip ospf virtual-links 455summary-address 526timers spf 546transmit-delay 551ttl 551undebug ip ospf 568update-source 570

PPIM commands

clear ip mroute 92clear ip pim auto-rp 93clear ip pim interface count 93clear ip pim remote-neighbor count 93debug ip pim 114ip pim 196ip pim query-interval 196

ERX Edge Routers15

ip pim rp-address 196ip pim send rp-announce 197ip pim send rp-discovery scope 197ip pim spt-threshold 198pim disable 337query-interval 351remote-neighbor 369router pim 374show ip pim auto-rp 455show ip pim dense-mode sg-state 456show ip pim interface 456show ip pim neighbor 456show ip pim remote-neighbor 457show ip pim rp 457show ip pim rp-hash 457show ip pim sparse-mode sg-state 458show ip pim sparse-mode unicast-route 458show ip pim spt-threshold 458undebug ip pim 567update-source 570

policy management commandsclassifier-list 86color 101committed-action 101committed-burst 101committed-rate 102conformed-action 103exceeded-action 138excess-burst 141filter 145forward 146ip filter-options all 178ip policy 198log 239mark 252mask-val 252next-hop 304next-interface 304peak-burst 336peak-rate 337policy-list 341rate-limit-profile 361show classifier-list 404show policy-list 490show rate-limit-profile 500

POS commandsbaseline interface pos 59crc 108encapsulation ppp 136interface pos 165

loopback 247mru 280mtu 281pos framing 341pos scramble-atm 341show interfaces 424shutdown 511

PPP commandsbaseline ppp interface 64ppp aaa-profile 342ppp authentication 342ppp chap-challenge-length 343ppp description 343ppp ipcp netmask 343ppp keepalive 344ppp log 344ppp magic-number disable 344ppp max-bad-auth 345ppp mru 345ppp multilink enable 345ppp passive-mode 346ppp peer 346ppp shutdown 346show ppp interface 490show ppp interface summary 493

PPPoE commandsbaseline pppoe interface 65encapsulation pppoe 136pppoe 347pppoe acName 347pppoe always-offer 347pppoe auto-configure 347pppoe duplicate-protection 347pppoe log pppoeControlPacket 348pppoe motm 348pppoe sessions 348pppoe subinterface 349pppoe url 349show pppoe interface 493show pppoe subinterface 494shutdown 511

QQoS commands

buffer-weight 76clear egress-queue 89clear fabric-queue 90committed-length 102conformed-fraction 103conformed-length 104

Index16

exceeded-fraction 139exceeded-length 139fabric-strict-priority 142fabric-weight 143group 153node 306qos-mode-port 350qos-port-type-profile 351qos-profile 351queue 352queue-profile 352scheduler-profile 379shaping-rate 392show fabric-queue 414show qos interface-hierarchy 495show qos-port-type-profile 495show qos-profile 496show qos queue-thresholds 496show queue-profile 497show scheduler-profile 503show traffic-class 509show traffic-class-group 509strict-priority 524traffic-class 550traffic-class-group 550weight 572

RRADIUS commands

baseline radius 65max-sessions 260no radius client 305radius acct-session-id-format 352radius algorithm 353radius calling-station-delimiter 353radius calling-station-format 354radius client. See RADIUS commands: no

radius clientradius dsl-port-type 355radius ethernet-port-type 355radius ignore framed-ip-netmask 355radius include 356radius nas-identifier 358radius nas-port-format 358radius override nas-ip-addr

tunnel-client-endpoint 358radius rollover-on-reject 359radius server 359radius trap acct-server-not-responding 359radius trap auth-server-not-responding 359

radius trap no-acct-server-responding 360radius trap no-auth-server-responding 360radius tunnel-accounting 360radius udp-checksum 360radius update-source-addr 361show radius acct-session-id-format 497show radius algorithm 497show radius attributes-ignored 498show radius attributes-included 498show radius calling-station-delimiter 498show radius calling-station-format 498show radius dsl-port-type 499show radius ethernet-port-type 499show radius nas-identifier 499show radius nas-port-format 499show radius override 499show radius rollover-on-reject 500show radius tunnel-accounting 500show radius udp-checksum 500show radius update-source-addr 500strip-domain 524subscriber 525timeout 545

redundancy commandsdisable-autosync 123disable-switch-on-error 124redundancy force-failover 366redundancy lockout 366redundancy revert 367redundancy revertive 367show redundancy 501srp switch 522synchronize 527

Response Time Reporter commandsfrequency 152hops-of-statistics-kept 156max-response-failure 260operations-per-hop 310owner 312request-data-size 370rtr 375rtr reaction-configuration 375rtr reaction-configuration action-type 375rtr reaction-configuration

operation-failure 376rtr reaction-configuration path-change 376rtr reaction-configuration test-completion 376rtr reaction-configuration test-failure 376rtr reset 377rtr schedule 377

ERX Edge Routers17

rtr schedule life 377rtr schedule restart-time 378rtr schedule start-time 378samples-of-history-kept 379show rtr application 502show rtr application collection-statistics 502show rtr application configuration 502show rtr application history 502show rtr application hops 503show rtr application operational-state 503tag 537timeout 545tos 548type 565

RIP commandsaddress 11address authentication key 13address authentication mode 16address receive version 24address send version 26authentication key 52authentication mode 53baseline ip rip 61clear ip rip redistribution 94debounce-time 110debug ip rip 115default-information originate 120default-metric 121disable 123disable-dynamic-redistribute 124distance 125distribute-list 127exit-remote-neighbor 142interface-event-disable 161, 551ip rip 201ip rip authentication key 201ip rip authentication mode 202ip rip receive version 202ip rip send version 203ip route-type 204ip split-horizon 207ip summary-address 209match-set summary prefix-tree 257neighbor 283network 302receive version 362redistribute 363remote neighbor 369route-map 372router rip 374

send-more-specific-routes-disable 380send version 380show ip rip 461show ip rip database 461show ip rip network 461show ip rip peer 462show ip rip statistics 462show ip rip summary-address 462split-horizon 522table-map 535timers 546time-to-live 547undebug ip rip 568update-source 570version 570

routing policy commandsmatch as-path 253match community 253match distance 254match extcommunity 254match ip address 255match ip next-hop 255match level 256match metric 256match metric-type 256match route-type 257match-set summary prefix-tree 257match tag 258route-map 372set as-path prepend 383set automatic-tag 383set comm-list delete 383set community 384set dampening 385set distance 386set extcommunity 387set ip next-hop 388set level 388set local-preference 389set metric 389set metric-type 390set origin 390set route-type 391set tag 391set weight 392

Index18

SSDH commands. See cOCx/STMx commands

and OCx/STMx commandsshutdown commands

ip shutdown 206shutdown 511

SMDS commandsbaseline smds interface 66encapsulation smds-trunk 137show smds interface 504

SNMP commandsbaseline snmp 66bulkstats collector 77bulkstats collector collector-mode 77bulkstats collector description 77bulkstats collector interval 77bulkstats collector max-size 77bulkstats collector primary-receiver 77bulkstats collector secondary-receiver 77bulkstats collector single-interval 77bulkstats file-format endOfLine-Lf 78bulkstats interfaces description-format

common 78bulkstats interfaces rfc 1213 78bulkstats interface-type 78bulkstats receiver remote-name 79bulkstats schema 79bulkstats schema subtree 80bulkstats schema subtree policy 80bulkstats traps 81show bulkstats 400show bulkstats collector description 400show bulkstats collector interval 401show bulkstats collector max-size 401show bulkstats collector transfer-mode 401show bulkstats interface-type 401show bulkstats receiver 401show bulkstats schema 402show bulkstats statistics 402show bulkstats traps 402show snmp 504show snmp access 505show snmp community 505show snmp interfaces 505show snmp trap 505show snmp user 505show snmp view 506snmp-server 513snmp-server community 514snmp-server contact 514

snmp-server enable traps 514snmp-server host 516snmp-server interfaces compress 517snmp-server interfaces

compress-restriction 517snmp-server interfaces description-format

common 518snmp-server interfaces rfc1213 518snmp-server location 518snmp-server packetsize 519snmp-server trap-proxy 519snmp-server trap-source 519snmp-server user 520snmp trap ip link-status 513snmp trap link-status 513t1 snmp trap link-status 533

SONET commands. See cOCx/STMx commands and OCx/STMx commands

SSH commandscrypto key dss 108disconnect ssh 124ip ssh authentication-retries 207ip ssh crypto 208ip ssh disable-user-authentication 208ip ssh mac 208ip ssh sleep 209ip ssh timeout 209show ip ssh 465

subscriber interface commandsip demux-type da-prefix 171ip destination-prefix 171ip source-prefix 206show ip demux interface 441

system commandsaaa authentication enable default 3aaa authentication login 3aaa new-model 6access-class in 9access-list 10banner 55clear line 95crypto key dss 108data-character-bits 109delete 121description 122dir 122disconnect ssh 124dsr-detect 130enable password 134enable secret 135

ERX Edge Routers19

erase secrets 138exception dump 139exception gateway 140exception protocol ftp 140exception source 140exclude-subsystem 141exec-banner 141exec-timeout 141halt 154help 156host 157hostname 157ip domain-lookup 174ip domain-name 174ip name-server 191ip nfs 191ip nfs host 192ip ssh authentication-retries 207ip ssh crypto 208ip ssh disable-user-authentication 208ip ssh mac 208ip ssh sleep 209ip ssh timeout 209line 237login 245login authentication 246macro 250memory 262motd-banner 264password 314service ctrl-x-reboot 381service password-encryption 382service unattended password-recovery 382show bandwidth oversubscription 400show columns 406show configuration 407show environment 414show exception dump 414show flash 415show hardware 421show hosts 423show ip domain-lookup 443show ip nfs 452show ip ssh 465show line console 0 479show line vty 479show nvs 490show processes 494show reboot-history 501show running-configuration 503

show secrets 504show subsystems 507show telnet 508show timing 508show users 509show utilization 510show version 510slot accept 512slot disable 512slot enable 512slot erase 512speed 521telnet 538timeout login response 545timing disable-auto-upgrade 547timing select 547timing source 548

TT1 command, interface serial 165T3 commands

atm framing 45cablelength 82channelized 84controller t3 105dsu bandwidth 131dsu mode 131load-interval 238loopback 247mru 280mtu 281scramble 379show controllers t3 412shutdown 511

T3-Frame command, interface serial 165TACACS+ commands

aaa authentication enable default 3baseline tacacs 66show statistics tacacs 506show tacacs 508tacacs-server host 535tacacs-server key 536tacacs-server source-address 536tacacs-server timeout 536

time commands, systemclock set 98clock summer-time date 99clock summer-time recurring 100clock timezone 100ntp access-group 306

Index20

ntp broadcast-client 307ntp broadcast-delay 307ntp disable 307ntp enable 307ntp master 308ntp server 308ntp source 309show clock 406show ntp associations 489show ntp status 490

timing commandsclock source 98show timing 508t1 clock source 529timing disable-auto-upgrade 547timing select 547timing source 548

troubleshooting commandsbaseline log 63bgp log-neighbor-changes 72debug ip bgp 110debug ip mbgp 112debug ip ospf 113debug ip pim 114debug ip rip 115debug isis 116log 239log destination 241log destination syslog source 242log engineering 242log fields 243log filters. See troubleshooting commands: no

log filterslog here 243log severity 244log unlimit 245log verbosity 245no log filters 305service timestamps 382show log configuration 480show log data 480undebug ip bgp 566undebug ip mbgp 567undebug ip ospf 568undebug ip pim 567undebug ip rip 568undebug isis 569

Tunnel Service command, show tunnel-server 509

Uuser interface commands

configure 102confirmations explicit 103disable 123enable 133end 137exit 142run 378send 380show terminal 508sleep 511telnet listen 540terminal data-character- bits 540terminal length 540terminal speed 540terminal width 541

Vvirtual router commands

show configuration 407show virtual-router 510virtual-router 571

VLAN commandsencapsulation vlan 137show vlan subinterfaces 511shutdown 511svlan ethertype 527svlan id 527vlan id 572

VPN command, virtual-router 571VRRP commands

baseline ip vrrp 62ip vrrp 212ip vrrp advertise-interval 212ip vrrp authentication-key 213ip vrrp authentication-type 213ip vrrp enable 213ip vrrp preempt 213ip vrrp priority 214ip vrrp virtual-address 214show ip vrrp 467show ip vrrp brief 467show ip vrrp neighbor 468show ip vrrp statistics 468show ip vrrp summary 468

vty line command, show users 509

ERX Edge Routers21

XX.21/V.35 commands

clock rate 97crc 108ignore dcd 159ignore link-state-signals 160interface serial 165invert data 166invert txclock 166load-interval 238loopback 247mru 280mtu 281nrzi-encoding 306shutdown 511

Index22

ERX

Documents

Transcript of ERX