Beruflich Dokumente
Kultur Dokumente
Release 4.1.0
Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net
Part No. 162-00488-00
Juniper Networks is registered in the U.S. Patent and Trademark Office and in other countries as a trademark of Juniper Networks, Inc. Broadband Cable Processor, ERX, ESP, G1, G10, G-series, Internet Processor, JUNOS, JUNOScript, M5, M10, M20, M40, M40e, M160, M-series, NMC-RX, SDX, ServiceGuard, T320, T640, T-series, UMC, and Unison are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. All specifications are subject to change without notice. Products made or sold by Juniper Networks (including the M5, M10, M20, M40, M40e, M160, and T320 routers, T640 routing node, and the JUNOS software) or components thereof might be covered by one or more of the following patents that are owned by or licensed to Juniper Networks: U.S. Patent Nos. 5,473,599, 5,905,725, 5,909,440, 6,333,650, 6,359,479, and 6,406,312. ERX Edge Routers Command Reference Guide, Release 4.1.0 Copyright 2002, Juniper Networks, Inc. All rights reserved. Printed in USA. Writers: Richard Cochran, Justine Kangas, Helen Shaw, Brian Wesley Simmons, Michael Taillon Editor: Fran Mues Revision History November 2002 Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.
1. If you and Juniper Networks, Inc., have executed another license agreement for the Program which is now in effect, then such agreement (Negotiated Agreement) shall supersede this Software License Agreement and shall exclusively govern the use and license terms of the Program.
must return the Software, including any User Documentation, and all copies or portions thereof to Juniper Networks. Termination of this License Agreement shall not prejudice Juniper Networks' rights to damages or other available remedy. 5. Limited Software Warranty: Juniper Networks warrants, for your benefit alone, that for a period of ninety (90) days from the date of shipment from Juniper Networks that the Software substantially conforms to its published specifications. The limited warranty extends only to you as the original licensee. Your exclusive remedy and the entire liability of Juniper Networks and its suppliers under this limited warranty will be, at Juniper Networks' option, repair or replacement of the Software, or refund of the amounts paid by you under this License Agreement. You agree that this is your sole and exclusive remedy for breach by Juniper Networks, its suppliers or its licensors of any warranties made under this License Agreement. In no event does Juniper Networks warrant that the Software is error free or that you will be able to operate the Software without problems or interruptions. Juniper Networks does not warrant: 1) that the functions contained in the software will meet your requirements; 2) that the Software will operate in the hardware or software combination that you may select; 3) that the operation of the Software will be uninterrupted or error free; or 4) that all defects in the operation of the Software will be corrected. This warranty does not apply if the product: 1) has been altered, except by Juniper Networks; 2) has not been installed, operated, repaired, or maintained in accordance with instruction supplied by Juniper Networks; or 3) has been subjected to or damaged by improper environment, abuse, misuse, accident, or negligence. EXCEPT FOR THE WARRANTIES SET FORTH ABOVE, THE SOFTWARE IS LICENSED AS IS, AND JUNIPER NETWORKS DISCLAIMS ANY AND ALL OTHER REPRESENTATIONS, CONDITIONS, AND WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING, WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE OR ANY WARRANTIES FOR NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE. ANY AND ALL SUCH WARRANTIES ARE HEREBY EXCLUDED TO THE EXTENT ALLOWED BY APPLICABLE LAW. JUNIPER NETWORKS' SUPPLIERS AND LICENSORS DO NOT MAKE OR PASS ON TO YOU OR ANY THIRD PARTY ANY EXPRESS, IMPLIED, OR STATUTORY WARRANTY OR REPRESENTATION, INCLUDING, BUT NOT LIMITED TO, IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE OR ANY WARRANTIES FOR NONINFRINGEMENT. 6. Proprietary Rights Indemnification. Juniper Networks shall at its expense defend you against and, subject to the limitations set forth elsewhere herein, pay all costs and damages made in settlement or awarded against you resulting from a claim that the Program as supplied by Juniper Networks infringes a United States copyright or a United States patent, or misappropriates a United States trade secret, provided that you: (a) provide prompt written notice of any such claim, (b) allow Juniper Networks to direct the defense and settlement of the claim, and (c) provide Juniper Networks with the authority, information, and assistance that Juniper Networks reasonably deems necessary for the defense and settlement of the claim. You shall not consent to any judgment or decree or do any other act in compromise of any such claim without first obtaining Juniper Networks written consent. In any action based on such a claim, Juniper Networks may, at its sole option, either: (1) obtain for you the right to continue using the Program, (2) replace or modify the Program to avoid the claim, or (3) if neither (1) nor (2) can reasonably be effected by Juniper Networks, terminate the license granted hereunder and give you a pro rata refund of the license fee paid for such Program, calculated on the basis of straight-line depreciation over a five-year useful life. Notwithstanding the preceding sentence, Juniper Networks will have no liability for any infringement or misappropriation claim of any kind if such claim is based on: (i) the use of other than the current unaltered release of the Program and Juniper Networks has provided or offers to provide such release to you for its then current license fee, or (ii) use or combination of the Program with programs or data not supplied or approved by Juniper Networks if such use or combination caused the claim. 7. Limitation of Liability. IN NO EVENT WILL JUNIPER NETWORKS OR ITS SUPPLIERS OR LICENSORS BE LIABLE FOR ANY COST FOR SUBSTITUTE PROCUREMENT; SPECIAL, INDIRECT, INCIDENTAL, PUNITIVE, EXEMPLARY, OR CONSEQUENTIAL DAMAGES; OR ANY DAMAGES RESULTING FROM INACCURATE OR LOST DATA OR LOSS OF USE OR PROFITS ARISING OUT OF OR IN CONNECTION WITH THE PERFORMANCE OF THE SOFTWARE, EVEN IF JUNIPER NETWORKS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Juniper Networks' cumulative liability to you or any other party for any loss or damages resulting from any claims, demands, or actions arising out of or relating to this License Agreement shall not exceed the total fees paid to Juniper Networks for the Software. 8. Export Control. Software, including technical data, is subject to U.S. export control laws, including the U.S. Export Administration Act and its associated regulations, and may be subject to
export or import regulations in other countries. You agree to comply strictly with all such regulations and acknowledge that you have the responsibility to obtain licenses to export, re-export, or import Software. 9. Government Licensees: If any Software or associated documentation is acquired by or on behalf of a unit or agency of the United States government, the government agrees that such Software or documentation is a commercial item as that term is defined in 48 C.F.R. 2.101, consisting of commercial computer software or commercial computer software documentation as such terms are used in 48 C.F.R. 12.212 of the Federal Acquisition Regulations and its successors and 48 C.F.R. 227.7202-1 through 227.7202-4 of the DoD FAR Supplement and its successors. The use, duplication, or disclosure by the United States government of technical, data, computer software and documentation is subject to the restrictions set forth in FAR section 12.212(a), FAR section 52.227-14(g)(2), FAR section 52.227-19, DFARS section 252.227-7015(b), DFARS section 227.7202-1(a), and DFARS section 227.7202-3(a), as applicable. All United States government end users acquire the Software with only the rights set forth in this License Agreement. 10. General: This License shall be governed by and construed in accordance with the laws of the Commonwealth of Massachusetts, United States of America, as if performed wholly within the state and without giving effect to the principles of conflict of law. Any dispute arising out of this Agreement shall be referred to an arbitration proceeding in Boston, Massachusetts, in accordance with the commercial arbitration rules of the American Arbitration Association (the AAA). If the parties cannot agree upon an arbitrator, arbitration shall be conducted by a neutral arbitrator selected by the AAA who is knowledgeable in electronics equipment manufacturing and software licensing. The parties shall share the procedural costs of arbitration equally, and each party shall pay its own attorneys' fees and other costs and expenses associated with the arbitration, unless the arbitrator decides otherwise. The arbitrator's award shall be in writing and shall include a statement of reasons, but the arbitrator shall not be permitted to award punitive or indirect damages. The arbitrator's decision and award shall be final and binding and may be entered in any court having jurisdiction. The terms of this section shall not prevent any party from seeking injunctive relief in any court of competent jurisdiction in order to protect its proprietary and confidential information. If any term or provision hereof is found to be void or unenforceable by a court of competent jurisdiction, the remaining provisions of this License Agreement shall remain in full force and effect. This License Agreement constitutes the entire agreement between the parties with respect to the use of the Software and User Documentation and supersedes any and all prior oral or written agreements, discussions, negotiations, commitments, or understandings. No amendment, modification, or waiver of any provision of this License Agreement will be valid unless in writing and signed by the authorized representative of the party against which such amendment, modification, or waiver is sought to be enforced. The waiver by either party of any default or breach of this License Agreement shall not constitute a waiver of any other or subsequent default or breach. This License Agreement shall be binding upon the parties and their respective successors and permitted assigns. Should you have any questions about this agreement, please contact: Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 Attn: Contracts Administrator
This Command Reference Guide provides all the commands available to configure your system. Refer to the Configuration Guides for detailed information on configuring your ERX system.
Note: If the information in the latest Release Notes differs from the information in this guide, follow the Release Notes.
Your ERX system is shipped with the latest system software installed. If you need to install a future release or reinstall the system software, refer to the procedures in ERX Installation and User Guide, Appendix E, Installing ERX System Software.
Audience
This guide is intended for experienced system and network specialists who will configure a Juniper Networks ERX system in an Internet access environment.
Conventions
Table 1, Table 2, and Table 3 list all the conventions used in the ERX documentation. Table 1 defines notice icons. Table 2 shows text conventions used throughout the book, except for command syntax. Table 3 provides command syntax conventions used primarily in the ERX Command Reference Guide. For more information about command syntax, see ERX System Basics Configuration Guide, Chapter 1, Planning Your Network.
Table 1 Notice icons Icon Meaning Informational note Caution Description Indicates important features or instructions. Indicates that you may risk losing data or damaging your hardware.
Warning
Table 2 Text conventions (except for command syntax) Convention Bold typeface Description Represents commands and keywords in text. Examples Bold Courier typeface Key name in angle brackets Key names linked with a plus sign (+) in angle brackets. Plain Courier typeface Represents text that the user must type. Indicates the name of a key on the keyboard. Indicates that you must press two or more keys simultaneously. Represents information as displayed on your terminals screen. Command example: Issue the clock source command. Keyword example: Specify the keyword exp-msg.
user input Press <Enter>. Press <Ctrl+B>. host1#show ip ospf 2 Routing Process OSPF 2 with Router ID 5.5.0.250 Router is an Area Border Router (ABR)
ix
Table 2 Text conventions (except for command syntax) (continued) Convention Italics Description Emphasize words. Identify variables. Identify chapter, appendix, and book names. Examples There are two levels of access, user and privileged. clusterId, ipAddress. Appendix A, System Specifications.
Table 3 Syntax conventions in command reference guide Convention Words in plain text Words in italics Words separated by the | symbol Description Represent keywords. Represent variables. Represent a choice to select one keyword or variable to the left or right of this symbol. (The keyword or variable may be either optional or required.) Represent optional keywords or variables. Represent optional keywords or variables that can be entered more than once. Represent required keywords or variables. Examples terminal length mask, accessListName diagnostic | line
Most system configuration commands have a no version, which you can use to negate a command (or a portion of it specified by an optional keyword) or restore its default setting. When you use a command without the keyword no, you can reenable a disabled feature or override a default setting. You have the option of using the default keyword whenever the no keyword is also a choice; simply enter the keyword default instead of no. In most cases, when you execute the default version of a command, it produces the exact results as the no version. There are some commands for which the default version yields a different result than the no version. Commands for which the default behavior differs from the no behavior are clearly identified in this guide. Unless otherwise specified, therefore, the default command is identical to the no command and will neither be documented nor discussed. The syntax for each no command is described in this guide. Some commands do not have a no version; this is indicated in the individual
command descriptions except for the show commands, none of which has a no version. The CLI can act on no versions of commands when you have entered sufficient information to distinguish the command syntactically, and ignores all subsequent input on that line. To be compatible with some non-ERX implementations, the no versions of commands will accept the same options as the affirmative version of the commands. The CLI ignores the optional input if it has no effect on the command behavior. If using the option changes the behavior of the no version, the individual command entry in this guide describes the difference in behavior.
Filtering show Commands
You have access to a variety of show commands that display system and protocol information. You can filter the output of a show command by specifying | (the UNIX pipe symbol), one of the following keywords, and either a case-sensitive text string or a regular expression. begin displays output beginning with the first line that contains the text string or regular expression include displays output lines that contain the text string or regular expression and excludes lines that do not contain the text string or regular expression exclude displays output lines that do not contain the text string or regular expression and excludes lines that do contain the text string or regular expression For a list of regular expressions, see ERX Routing Protocols Configuration Guide, Vol. 1, Chapter 1, Configuring Routing Policy. You can press <Ctrl+C> to interrupt the show command output.
Note: The system does not recognize beginning spaces of the text string. For example, if you enter the include option with IP as the text string on which to filter, the system ignores the space and displays lines that include words such as RIP.
Example
In the following example, the output display consists only of lines that contain the string ip. The system omits all other lines of the output from the display because none of them contain the string ip.
host1#show config include-defaults | include ip ! Configuration script generated on FRI NOV 12 1999 16:56:41 UTC ip address 192.168.1.229 255.255.255.0
xi
ip rip receive version 2 1 ip rip send version 1 ip rip authentication mode md5 17 ip rip authentication key ip route 10.6.0.0 255.255.0.0 192.168.1.1 ip route 10.10.0.0 255.255.0.0 192.168.1.1 ip route 10.10.0.166 255.255.255.255 192.168.1.1 ip debounce-time 0 router rip
Many commands take the variables interfaceType and interfaceSpecifier. Some commands support all types of interfaces, whereas other commands support only certain types of interfaces. The interface specifier depends on the type of interface. Table 4 shows the interface specifiers for each type of interface.
Table 4 Interface types and specifiers Interface Type atm Description ATM interface Interface Specifier slot/port [.subinterface] slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module subinterface number of the subinterface in the range 14294967293 slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module subinterface1 number of the FE subinterface in the range 14294967293; not more than 2 subinterfaces per FE interface.a subinterface2 number of the higher-level subinterface in the range 14294967293; not more than 4094 higher-level subinterfaces per FE subinterfacea Example atm 3/2.6
fastEthernet
Table 4 Interface types and specifiers (continued) Interface Type gigabitEthernet Description IEEE 802.3 Gigabit Ethernet (GE) interface Interface Specifier slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module subinterface1 number of the GE subinterface in the range 14294967293; not more than 2 subinterfaces per GE interface.a subinterface2 number of the higher-level subinterface in the range 14294967293; not more than 4094 higher-level subinterfaces per GE subinterface.a hssi 3/0 slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module loopback 20 integer integer in the range 14294967293 mlframe-relay boston.1 bundle-name name of the bundle subinterface number of the MFR subinterface in the range 14294967293 mlppp chicago null 0 bundle-name name of the bundle Example
hssi
slot/port
integer
mlframe-relay
bundle-name [.subinterface ]
mlppp null
Multilink PPP interface Null interface, which cannot forward or receive traffic Packet over SONET (POS) interface
bundle-name 0
pos
slot/port slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module
pos 3/2
xiii
Table 4 Interface types and specifiers (continued) Interface Type serial Description CE1, CT1, CT3, E3-FRAME, T3-FRAME, cOCx/STMx interface, or X.21/V.35 interface Interface Specifier Example
CE1/CT1
slot/port:channel-group slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module channel-group number of the channel group associated with a range of DS0 timeslots on a CE1 or CT1 module; in the range 131 for a CE1 module, and 124 for a CT1 module
serial 3/2:20
CT3
slot/port:channel/subchannel slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module channel - number of a T1 channel on a CT3 module; in the range 128 subchannel number of the channel group associated with a range of DS0 timeslots on a CT3 module; in the range 128
serial 3/2:20/15
E3/T3 FRAME
slot/port slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module
serial 3/2
Table 4 Interface types and specifiers (continued) Interface Type Description Interface Specifier slot/port:path-channel/path-payload/ tributary-group/tributary-number/ channelNumber slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module path-channel number of the STS-1or STM-0 line in the range 12147483648 path-payload number of the payload within the path tributary-group number of the tributary group within the path tributary-number number of the tributary within the group channelNumber 1 (the system assigns the number one to an unframed E1 channel) serial 3/0:10/1/2/2/1 Example serial 3/0:10/1/2/2/1
cOCx/STMx:
unframed E1
cOCx/STMx:
fractional E1/T1
slot/port:path-channel/path-payload/ tributary-group/tributary-number/ channel-group slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module path-channel number of the STS-1or STM-0 line in the range 12147483648 path-payload number of the payload within the path tributary-group number of the tributary group within the path tributary-number number of the tributary within the group channel-group number of a fractional T1 or E1 line
xv
Table 4 Interface types and specifiers (continued) Interface Type Description Interface Specifier slot/port:path-channel/ ds3-channel-number slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module path-channel number of the STS-1or STM-0 line in the range 12147483648 ds3-channel-number number of a T3 channel serial 3/0:1/1/10/15 Example serial 3/0:1/1
cOCx/STMx:
unchannelized DS3
cOCx/STMx:
DS3 channelized to DS0
slot/port:path-channel/ ds3-channel-number/ ds1-channel-number /subchannel-number slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module path-channel number of the STS-1or STM-0 line in the range 12147483648 ds3-channel-number number of a T3 channel ds1-channel-number number of a T1 channel subchannel-number number of a fractional T1 channel slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module
X.21/V.35
slot/port
slot/port slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module
sonet 3/0
Table 4 Interface types and specifiers (continued) Interface Type sonet path layer Description Path layer of a SONET/SDH interface Interface Specifier slot/port:path-channel slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module path-channel number of the STS-1or STM-0 line in the range 12147483648 sonet 3/0 slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module tunnel gre:boston tunnel-type type of the tunnel: dvmrp, gre, ipsec, l2tp, or mpls tunnel-name name of the tunnel Example sonet 3/0:2
slot/port
tunnel-type:tunnel-name
a.See the interface fastEthernet command and the interface gigabitEthernet command for details on specifying subinterfaces with and without VLANs on Ethernet interfaces.
Documentation
The ERX Installation Quick Start poster is shipped in the box with all new systems. This poster provides the basic procedures to help you get the system up and running quickly. The document set contains the following books and online resources: ERX Installation and User Guide Provides the necessary procedures for getting your system operational, including information on installing, cabling, powering up, configuring your system for management access, and general troubleshooting. ERX System Basics Configuration Guide Describes planning and configuring your network, managing the system, passwords, and security, and configuring the system clock and virtual routers. ERX Physical and Link Layers Configuration Guide Describes configuring physical and link layer interfaces. ERX Routing Protocols Configuration Guide, Vol. 1 Provides information about configuring routing policy and configuring IP, IP routing, and IP security.
xvii
ERX Routing Protocols Configuration Guide, Vol. 2 Describes BGP routing, MPLS, BGP-MPLS VPNs, and encapsulation of layer 2 services. ERX Policy and QoS Configuration Guide - Provides information about configuring policy management and quality of service (QoS). ERX Broadband Access Configuration Guide Provides information about configuring remote access. ERX Command Reference Guide Contains important information about all system commands implemented in the system software. Use to look up command descriptions, command syntax, a commands related mode, or a description of a commands parameters. It is intended to be used in conjunction with the ERX Configuration Guides. ERX Product Overview Guide Gives a thorough overview of the system from a software and hardware perspective. It provides illustrations and configuration examples that present the big picture. ERX Release Notes Contains information about features, changes, known problems, and limitations. Provides final information that did not make it into the documentation. ERX Online Documentation CD Provides an online version of this guide and the documents listed above. The online documents contain numerous links between guides, giving easy access to a vast amount of technical information.
Abbreviations
A complete list of abbreviations used in this document set, along with their spelled-out terms, is provided in the ERX System Basics Configuration Guide, Appendix A, Abbreviations and Acronyms.
Place the Online Documentation CD in your CD-ROM drive. Follow the instructions located on the inside cover of your CD jewel case to install Acrobat Reader. From the Documentation folder on the CD, open the CDtips.pdf file for information on using Adobe Acrobat Reader.
From the Documentation folder on the CD, open the Welcome.pdf file for access to the documentation set.
List of Commands
Syntax:
Global Configuration
Global Configuration
radius uses RADIUS for the accounting method none disables accounting
Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line
Global Configuration
Syntax:
radius use RADIUS authentication line use the line password tacacs+ use TACACS+ authentication none use no authentication enable use the enable password * indicates that one or more parameters can be repeated multiple
times in a list in the command line Mode(s): Global Configuration
line use the line password for authentication none use no authentication radius use RADIUS authentication tacacs+ use TACACS+ authentication
Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line
Global Configuration
radius uses RADIUS for authentication none means authentication is off, allowing all users access
Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line
Global Configuration
aaa delimiter
Description: Specifies delimiters for the domain and realm names. You can specify up to eight delimiters each for domain and realm names. The no version restores the default value. aaa delimiter { domainName | realmName } delimiters no aaa delimiter { domainName | realmName } domainName allows you to set delimiters for the domain name realmName allows you to set delimiters for the realm name delimiters either the domain or realm delimiter(s). You can specify up to eight characters.
Syntax:
The default domain name delimiter is @. The default realm name delimiter is NULL (no character). In this case,
realm parsing is disabled (having no delimiter disables realm parsing). Mode(s): Global Configuration
aaa dns
Description: Syntax: Specifies the IP address of the primary DNS name server. The no version sets the corresponding address to 0. aaa dns { primary | secondary } ipAddress no aaa dns { primary | secondary } Mode(s): primary specifies the primary DNS name server secondary specifies the secondary DNS name server ipAddress IP address of the name server
Global Configuration
aaa domain-map
Description: Maps a user domain name to a virtual router. When you specify only the domain name, the command sets the mode to Domain Map Configuration. The no version deletes the map entry. aaa domain-map domainName [ routerName [ loopback interfaceNumber ] ] no aaa domain-map domainName Mode(s): domainName a user domain name; specify the domain name none to assign users without domains to a specific virtual router. routerName a router name associated with the domain name loopback specifies the loopback interface interfaceNumber interface number in the range 032000
Syntax:
Global Configuration
aaa duplicate-address-check
Description: Syntax: Allows you to enable or disable routing table address lookup or duplicate address check. There is no no version. aaa duplicate-address-check { enable | disable } Note: To use this command, you must have a B-RAS license. Run the license b-ras command and enter your password. Mode(s): Global Configuration
aaa new-model
aaa new-model
Description: Syntax: Mode(s): Specifies AAA authentication for Telnet sessions. The no version restores simple authentication (login and password). [ no ] aaa new-model Global Configuration
aaa parse-order
Description: Specifies the order in which the system searches for a domain name. It either searches for realm and then domain, or it searches for domain and then realm. The no version returns the parse order to the default of searching for realm first. aaa parse-order { domain-first | realm-first } no aaa parse-order domain-first causes the system to search for a domain name starting with the right-most character. When the system reaches a delimiter, it uses anything to the right of the delimiter as the domain name. realm-first causes the system to search for a domain name starting with the left-most character. When the system reaches a delimiter, it uses anything to the left of the delimiter as the domain name.
Syntax:
Mode(s):
Global Configuration
aaa profile
Description: Syntax: Creates a new AAA profile to allow mapping to AAA services. aaa profile profileName Mode(s): profileName profile name of up to 32 characters
Global Configuration
Global Configuration
aaa timeout
Description: Syntax: Sets either the default idle or session timeout for B-RAS PPP users. The no version deletes either the idle or session timeout. aaa timeout { idle idleTimeout | session sessionTimeout } no aaa timeout { idle | session } Mode(s): idleTimeout in seconds: 300, 7200 sessionTimeout in seconds: 602678400 (that is, a minimum of 1 minute to a maximum of 31 days)
Global Configuration
Global Configuration
Syntax:
Global Configuration
Syntax:
Global Configuration
Syntax:
Global Configuration
aaa wins
Description: Syntax: Specifies the IP address of the WINS name server. The no version sets the corresponding address to 0. aaa wins { primary | secondary } ipAddress no aaa wins { primary | secondary } Mode(s): primary specifies the primary WINS name server secondary specifies the secondary WINS name server ipAddress IP address of the name server
Global Configuration
access-class in
Description: Syntax: Restricts incoming connections between a particular virtual terminal line and the addresses in an access list. The no version removes access restrictions. access-class listName in no access-class [ listName ] in Mode(s): listName name of the access list
Line Configuration
10
access-list
access-list
Description: Defines a standard or extended IP access list. The extended access list enables you to specify a destination address or host, precedence, and type of service. Imposes an implicit last rule of deny ip any any to deny all routes that do not match previous rules in the access list. The no version removes the IP access list, the specified entry in an access list, or the log for a specified entry. Standard IP access list: access-list accessListName { permit | deny } { srcIP srcWildIp | [ host ] srcIPHost | any } [ log ] no access-list accessListName [ { permit | deny } { srcIP srcWildIp | [ host ] srcIPHost | any } [ log ] ] Extended IP access list: access-list accessListName { permit | deny } ip { srcIP srcWildIp | host srcIPHost | any } { dstIP dstWildIp | host dstIPHost | any } [ precedence preced ] [ tos typeOServ ] [ log ] no access-list accessListName [ { permit | deny } ip { srcIP srcWildIp | host srcIPHost | any } { dstIP dstWildIp | host dstIPHost | any } [ log ] ] Mode(s): accessListName string of up to 32 alphanumeric characters permit permits access if the conditions are matched deny denies access if the conditions are matched srcIP source IP address from which the packet is being sent srcWildIp wildcard mask IP address srcIPHost source host IP address; assumes a wildcard mask of 0 any creates an address of 0.0.0.0 with a wildcard mask of 255.255.255.255 dstIP destination IP address dstWildIp wildcard mask IP address for destination dstIPHost destination host IP address to which the packet is being sent preced number from 1 to the access list maximum that indicates the precedence level to which packets are filtered typeOServ number from 1 to the access list maximum that indicates the type of service to which packets are filtered log logs an Info event into the ipAccessList log whenever the access-list rule is matched
Syntax:
Global Configuration
11
address
Description: From Domain Map Tunnel Configuration mode, sets the tunnel endpoint address of an L2TP or L2F tunnel. The no version removes the address of the tunnel. From Interface Configuration or Subinterface Configuration mode, configures RIP to run on the interface specified by the IP address or on an unnumbered interface. Uses the default values: send version is RIP version 1, receive version is RIP version 1 and version 2, authentication is not enabled. The no version deletes the RIP interface. Use the address commands to configure RIP attributes on the network. To set the tunnel endpoint address: address serverAddress no address serverAddress the IP address of the LNS or home gateway endpoint
Syntax:
To configure RIP: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } ipAddress address of IP interface where RIP will be run unnumbered specifies that RIP will be run on an unnumbered interface
12
address area
address area
Description: Creates an interface on which OSPF runs in the specified area, on top of the IP interface at the specified IP address. Uses the default values. The no version deletes OSPF interfaces. If the OSPF network was previously specified with the network area command, the OSPF interface already exists, and you do not need to use this command, unless you want to change the area of the OSPF interface to an area different from the one specified by the network area command. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } area { areaId | areaIdInt } ipAddress IP address of the interface on which OSPF will be run unnumbered configures OSPF on an unnumbered interface interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 14294967295
Syntax:
Note: Before you issue this command, you must first configure an interface with the IP address specified by ipAddress or an interface configured as unnumbered. Note: You must issue this command before issuing any other OSPF address command. Mode(s): Router Configuration
13
Syntax:
Mode(s):
14
address authentication-key
address authentication-key
Description: Syntax: Assigns a password used by neighboring routers that are using OSPF simple password authentication. The no version deletes the password. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication-key [ 0 | 8 ] authKey ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide 0 indicates the authKey is entered in unencrypted form (plaintext); this is the default option 8 indicates the authKey is entered in encrypted form (ciphertext) authKey password, a continuous string of characters up to 8 characters in length
Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration
15
Syntax:
Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration
16
Syntax:
17
address authentication-none
Description: Syntax: Specifies that no authentication is to be used for the OSPF interface. The no version has no effect. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication-none ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration
address cost
Description: Syntax: Specifies a cost metric for an OSPF interface. Used in the calculation of the SPF routing table. The no version resets the path cost to the default. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } cost intfCost ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide intfCost link state metric cost; a number in the range 065535; default value is 10
Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration
18
address dead-interval
address dead-interval
Description: Sets the time period that the systems neighbors should wait without seeing hello packets from the system before they declare the router to be down. The no version resets the dead interval to its default. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } dead-interval deadInterval ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide deadInterval number in the range 165535 seconds; default value is 40 seconds
Syntax:
Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration
19
address-family
Description: For BGP, configures the router or a specific VRF to exchange IPv4 addresses in unicast, multicast, or VPN mode by creating the specified address family. The no version removes the address family. For RIP, configures RIP in a specific VRF to exchange IPv4 addresses. The no version removes the address family. For BGP: [ no ] address-family { ipv4 [ multicast | unicast | unicast vrf vrfName | vrf vrfName ] | vpnv4 [ unicast ] } For RIP: [ no ] address-family ipv4 [ unicast ] vrf vrfName Mode(s): ipv4 sessions that carry standard IPv4 address prefixes (default) multicast specifies multicast prefixes unicast specifies unicast prefixes (default) vrfName name of the VRF; string of 132 alphanumeric characters vpnv4 sessions that carry customer VPN-IPv4 prefixes, each of which has been made globally unique by adding an 8-byte route distinguisher
Syntax:
Router Configuration
address hello-interval
Description: Syntax: Specifies the interval between hello packets that the router sends on the interface. The no version resets the hello interval to its default. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } hello-interval helloInterval ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide helloInterval number in the range 165535 seconds; default value is 10 seconds
Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration
20
Note: If all the MD5 keys have been deleted, the authentication type is still MD5, but you need to configure MD5 keys. Note: To disable MD5 authentication for the interface, use the address authentication-none command. Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration
21
address network
Description: Configures the OSPF network type for the specified interface to something other than the default for the network medium. The no version restores the default value for the medium. address { ipAddress | unnumbered interfaceType interfaceSpecifier } network { broadcast | non-broadcast | point-to-point } no address { ipAddress | unnumbered interfaceType interfaceSpecifier } network ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide broadcast sets network type to broadcast non-broadcast sets network type to NBMA point-to-point sets network type to point-to-point
Syntax:
Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration
22
address passive-interface
address passive-interface
Description: Disables the transmission of routing updates on an interface. OSPF routing information is neither sent nor received through the specified router interface. The specified interface address appears as a stub network in the OSPF domain. The no version reenables the transmission of routing updates. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } passive-interface ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration
address-pool-name
Description: Syntax: Specifies an address pool name to associate with the domain name being configured. The no version removes the pool name. address-pool-name poolName no address-pool-name Mode(s): poolName name of the pool to associate with the domain name
23
address priority
Description: Sets the router priority. Used in determining the designated router for the particular network. This designation only applies to multi-access networks. Every broadcast and nonbroadcast multiaccess network has a designated router. The no version restores the default value. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } priority intfPriority ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide intfPriority priority value, an 8-bit number in the range 1255; default value is 1
Syntax:
Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration
24
Syntax:
25
address retransmit-interval
Description: Specifies the time between LSA retransmissions for the interface when an acknowledgment for the LSA is not received. The no version restores the default value. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } retransmit-interval retransInterval ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide retransInterval number in the range 03600 seconds; default value is 5 seconds
Syntax:
Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration
26
Syntax:
27
address transmit-delay
Description: Syntax: Sets the estimated time it takes to transmit a link state update packet on the interface. The no version restores the default value. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } transmit-delay transmDelay ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide transmDelay link state transmit delay, a number in the range 03600 seconds; default value is 1 second
Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration
28
aggregate-address
aggregate-address
Description: Syntax: Creates an aggregate entry in a BGP routing table. The no version removes the aggregate. [ no ] aggregate-address address mask [ as-set | summary-only | attribute-map attributeMapTag | advertise-map advertiseMapTag | suppress-map suppressMapName ]* address aggregate IP address mask aggregate IP mask as-set if the as-set option is not specified, the path attributes of the aggregate route are set in the same way as locally originated routes, except that the atomic_aggregate and aggregator attributes are added. If the as-set option is used, the path attributes of the aggregate route are determined by combining the path attributes of the aggregated routes as described in RFC 1771. If the as-set option is used, the path attributes of the aggregate route may change whenever one of the aggregated routes changes, causing the aggregate route to be readvertised. summary-only filters all more specific routes from updates. summary-only not only creates the aggregate route but also suppresses advertisements of more-specific routes to all neighbors. If you only want to suppress advertisements to certain neighbors, you may use the neighbor distribute-list command, with caution. If a more-specific route leaks out, all BGP speakers will prefer that route over the less-specific aggregate you are generating (using longest-match routing). Alternatively, you can use the suppress-map keyword to suppress specific routes attributeMapTag string of up to 32 characters that identifies the route map used to set the attributes of the aggregate route advertiseMapTag string of up to 32 characters that identifies the route map used to set the routes to create AS-SET origin communities in the range suppressMapName string of up to 32 characters that identifies a route map that filters routes to be suppressed * indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s):
aggressive-mode
Description: Syntax: Mode(s): Allows aggressive mode negotiation for the tunnel. The no version restores the default, main mode. [ no ] aggressive-mode ISAKMP Policy Configuration
29
allow
Description: Syntax: Specifies the domain names that are to be allowed access to AAA authentication. The no version negates the command. [ no ] allow domainName Mode(s): domainName name of the domain; maximum of 64 characters
append-after
Description: Add a next hop after a particular index in the MPLS explicit path. The sequence numbers for existing hops after the index adjust automatically. There is no no version. append-after indexNumber next-address ipAddress [ mask ipMask ] [ loose ] index number of a node in an ordered set of abstract nodes ipAddress address of the next hop ipMask [ not currently used] mask for the next adjacent address loose indicates the node is not necessarily directly connected (adjacent) to the previous node in the path. If loose is not configured, the configuration defaults to strict. Strict indicates that the node is directly connected to the previous node.
Syntax:
Mode(s):
aps force
Description: Forces the specified interface to be replaced by the inactive interface in an APS/MSP group. The no version allows the specified interface to resume operation. aps force channelNumber no aps force [ channelNumber ] channelNumber number that identifies the working or protect interface.The number of the working interface is the same as the number of the corresponding active port on the I/O module. If there are n active ports on the I/O module, working interfaces are identified by the numbers 0 to n-1. Protect interfaces are identified by the numbers of the corresponding working interfaces plus n. For example, if the working interface has the number 0, and there is one active port on the I/O module, the corresponding protect interface has the number 1. Mode(s): Controller Configuration
Syntax:
30
aps group
aps group
Description: Syntax: Assigns an interface to an APS/MSP group. aps group groupName no aps group Mode(s): groupName name of the APS/MSP group to which the active and standby interfaces belong; up to 32 characters in length
Controller Configuration
aps lockout
Description: Prevents the working interface from switching to the protect interface. The no version restores the default situation, in which the working interface can switch to the protect interface. aps lockout [ channelNumber ] no aps lockout channelNumber number that identifies the working interface. The number of the working interface is the same as the number of the corresponding active port on the I/O module. Mode(s): Controller Configuration
Syntax:
aps manual
Description: Forces the working interface to switch to the protect interface, unless a request of equal or higher priority exists. The no version allows the specified working interface to resume the active role. aps manual channelNumber no aps manual [ channelNumber ] channelNumber number that identifies the working or protect interface.The number of the working interface is the same as the number of the corresponding active port on the I/O module. If there are n active ports on the I/O module, working interfaces are identified by the numbers 0 to n-1. Protect interfaces are identified by the numbers of the corresponding working interfaces plus n. For example, if the working interface has the number 0, and there is one active port on the I/O module, the corresponding protect interface has the number 1. Syntax: Controller Configuration
Syntax:
31
aps protect
Description: Syntax: Configures an interface as a protect interface. The no version removes the relationship between the protect interface and the active interface. aps protect [ channelNumber ] no aps protect channelNumber number that identifies the working interface. The number of the working interface is the same as the number of the corresponding active port on the I/O module. Mode(s): Controller Configuration
aps revert
Description: Syntax: Configures the APS/MSP group to operate in revertive mode. The no version restores the default setting, non-revertive mode. aps revert minutes no aps revert Mode(s): minutes number of minutes in the range 512 at which the interface resumes the active role after that interface becomes available
Controller Configuration
aps unidirectional
Description: Configures the APS/MSP group to operate in unidirectional mode, the default setting. The no version configures the APS/MSP group to operate in bidirectional mode. aps unidirectional no aps unidirectional Mode(s): Controller Configuration
Syntax:
32
aps working
aps working
Description: Syntax: Configures an interface as a working interface. The no version removes the configuration. aps working [ channelNumber ] no aps working channelNumber number that identifies the working interface. The number of the working interface is the same as the number of the corresponding active port on the I/O module. Mode(s): Controller Configuration
area
Description: This command has only a no version. See the no area command for a complete description and syntax.
area-authentication-key
Description: Syntax: Assigns a password used by neighboring routers for authentication of IS-IS level 1 LSPs, CSNPs, and PSNPs. The no version deletes the password. [ no ] area-authentication-key [ 0 | 8 ] authKey no area-authentication-key Mode(s): 0 indicates the authKey is entered in unencrypted form (plaintext); this is the default option 8 indicates the authKey is entered in encrypted form (ciphertext) authKey password, a continuous string of characters up to 8 characters in length
Router Configuration
33
area default-cost
Description: Specifies a cost for the default summary route sent into a stub area. A stub area is an OSPF area that carries a default route, intra-area routes, and interarea routes, but does not carry external routes. You cannot configure virtual links across a stub area. Stub areas cannot contain an ASBR. The no version removes the configured default route cost. area { areaId | areaIdInt } default-cost defaultCost no area { areaId | areaIdInt } default-cost Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value 04294967295 defaultCost stub areas advertised external route cost (cost metric); an integer in the range 016777215
Syntax:
Router Configuration
34
area-message-digest-key
area-message-digest-key
Description: Specifies an HMAC MD5 key that the system uses to create a secure, encrypted message digest of each IS-IS level 1 packet (LSPs, CSNPs, and PSNPs). The digest is inserted into the packet from which it is created. Using this algorithm for area routers protects against unauthorized routers injecting false routing information into your network. You can specify when the system will start (default is the current time) and stop (default is never) accepting packets that include a digest made with this key. You can specify when the system will start (default is the current time plus 2 minutes) and stop (default is never) generating packets that include a digest made with this key. The no version deletes the key specified by the key-id. area-message-digest-key keyId hmac-md5 [ 0 | 8 ] key [ start-accept startAcceptTime [ { startAcceptMonth startAcceptDay | startAcceptDay startAcceptMonth } startAcceptYear ] ] [ start-generate startGenTime [ { startGenMonth startGenDay | startGenDay startGenMonth } startGenYear ] ] [ stop-accept { never | stopAcceptTime [ { stopAcceptMonth stopAcceptDay | stopAcceptDay stopAcceptMonth } stopAcceptYear ] } ] [ stop-generate { never | stopGenTime [ { stopGenMonth stopGenDay | stopGenDay stopGenMonth } stopGenYear ] } ] no area-message-digest-key keyId keyId integer from 1 to 255 that is a unique identifier for the secret key, sent with the message digest in the packet. 0 indicates key is entered in unencrypted form (plaintext); default option 8 indicates the key is entered in encrypted form (ciphertext) key string of up to 20 alphanumeric characters; secret key used by the HMAC MD5 algorithm to generate the message digest startAcceptTime, startAcceptMonth, startAcceptDay, startAcceptYear time, month, day, year that the system will start accepting packets created with this password. Use military time format HH:MM[:SS ]. startGenTime, startGenMonth, startGenDay, startGenYear time, month, day, year that the system will start inserting this password into packets. Use military time format HH:MM[:SS ]. never indicates the system never stops accepting or generating packets; overrides previously specified stop times and keeps using the authentication key in sending and receiving PDUs with the corresponding authentication indefinitely
Syntax:
35
stopAcceptTime, stopAcceptMonth, stopAcceptDay, stopAcceptYear time, month, day, year that the system will stop accepting packets created with this password. Use military time format HH:MM[:SS ]. stopGenTime, stopGenMonth, stopGenDay, stopGenYear time, month, day, year that the system will stop inserting this password into packets. Use military time format HH:MM[:SS ].
Mode(s):
Router Configuration
area nssa
Description: Configures an area as an NSSA and controls generation of type 7 default LSAs. NSSAs are similar to stub areas but have the additional capability of importing AS external routes in a limited fashion. The no version removes the specified option for default-information-originate, removes default-information-originate, or removes the NSSA designation from the area. [ no ] area { areaId | areaIdInt } nssa [ default-information-originate [ always | metric absoluteValue | metric-type 1 | metric-type 2 | route-map mapTag ]* ] Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 default-information-originate causes the generation of a type 7 default LSA if a default route exists in the routing table. always creates the default route if it doesnt exist absoluteValue metric applied to the generated type 7 default LSAs; ranges from 0429496729 metric-type 1 cost of the external routes is equal to the sum of all internal costs and the external cost metric-type 2 cost of the external routes is equal to the external cost alone; this is the OSPF default mapTag string of up to 32 alphanumeric characters that specifies a route map applied to the generated type 7 default LSAs * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
Router Configuration
36
area range
area range
Description: Aggregates the routes at an area boundary. By default, the range of configured networks is advertised in type 3 (summary) LSAs. The no version disables this function. [ no ] area { areaId | areaIdInt } range ipAddress mask [ do-not-advertise ] Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address to match mask IP address mask do-not-advertise specifies that the range of configured networks is not advertised
Syntax:
Router Configuration
area stub
Description: Defines an area as a stub area. A stub area is an OSPF area that carries a default route, intra-area routes, and interarea routes, but does not carry AS external routes. This reduces the size of the area's OSPF database and decreases memory usage for external routers in the stub area. The no version disables this function. [ no ] area { areaId | areaIdInt } stub Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295
Syntax:
Router Configuration
area virtual-link
Description: Syntax: Defines an OSPF virtual link. The no version removes the virtual link. [ no ] area { areaId | areaIdInt } virtual-link ipAddress Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address associated with the virtual link neighbor
Router Configuration
37
Mode(s):
Router Configuration
Syntax:
Router Configuration
Router Configuration
38
Router Configuration
Syntax:
Router Configuration
39
Note: If you delete all the MD5 keys, the authentication type for the virtual link is still MD5, but you need to configure MD5 keys. Note: To disable MD5 authentication for the virtual link, use the area
Syntax:
Router Configuration
40
Syntax:
Router Configuration
arp
Description: Adds a permanent entry in the ARP cache. The no version removes an entry from the ARP cache. This command applies only on an Ethernet or bridged Ethernet interface. [ no ] arp [ vrf vrfName ] ipAddress { interfaceType interfaceSpecifier [ macAddress [ validate ] ] | macAddress } Mode(s): vrfName name of the VRF to which the command applies; string of 132 alphanumeric characters ipAddress IP address in 32-bit dotted-decimal format corresponding to the local data link address interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide macAddress MAC address of the interface validate allows the inclusion of MAC validation entries
Syntax:
Global Configuration
41
arp timeout
Description: Specifies how long an entry remains in the ARP cache. You can set the ARP timeout only on bridged Ethernet and Fast Ethernet interfaces on the FE-2 module. You cannot set the timeout on the SRP module. The default value is 21600 seconds (6 hours). Use the show config command to display the current value. The no version restores the default value. arp timeout timeoutVal no arp timeout Mode(s): timeoutVal time in seconds that an entry remains in the ARP cache
Syntax:
Interface Configuration
atm
Description: The system supports the configuration of traffic-shaping parameters for PPPoA via domain-based parameters and RADIUS. The no version removes the ATM traffic-shaping configuration. atm { ubr | ubrpcr pcr | nrtvbr pcr scr mbs | cbr pcr } no atm Mode(s): ubr sets the traffic category to unspecified bit rate ubrpcr sets the traffic category to unspecified bit rate with peak cell rate pcr peak cell rate nrtvbr sets the traffic category to nonreal time variable bit rate scr sustained cell rate mbs maximum burst size cbr sets the traffic category to constant bit rate
Syntax:
Syntax:
Interface Configuration
42
Syntax:
Subinterface Configuration
Subinterface Configuration
43
atm auto-configuration
Description: Enables auto configuration of ILMI. Auto configuration is enabled by default. The no version disables auto configuration and sets the ILMI parameters to the UNI version configured using the atm uni-version command, which has a default value of UNI 4.0. Entering the atm auto-configuration command overrides any previous configuration of the atm uni-version command. [ no ] atm auto-configuration Interface Configuration
Syntax: Mode(s):
atm cac
Description: Enables CAC on the ATM interface. If the subscription limit or UBR weight parameters are set to zero, the system uses the effective port bandwidth as the subscription bandwidth. The effective bandwidth varies according to line module. The no version disables CAC on the interface. [ no ] atm cac [ subscriptionBandwidth ] [ ubr ubrWeight ] subscriptionBandwidth maximum allowable bandwidth on this port in the range 02147482647 kbps; the default value is 0 ubrWeight bandwidth associated with UBR and UBR-PCR connections in the range is 02147482647 kbps; the default value is 0
Syntax:
Note: If you modify one of these parameters after CAC is enabled, you must modify both parameters. Otherwise, the parameter not specified reverts to its default value. Mode(s): Interface Configuration
44
Syntax:
module specify that the internal clock is from the line module chassis specify that the internal clock is from the configured system
clock Mode(s): Interface Configuration
atm description
Description: Assigns a text description or alias to the interface. The no version removes the text description or alias. The show atm interface command displays the text description.The description is pushed out to RADIUS during authentication/accounting. atm description name no atm description Mode(s): name alias for the atm interface; up to 32 characters
Syntax:
Interface Configuration
atm esi-address
Description: Syntax: Specifies an ATM ESI address for the subinterface. The no version removes the ESI address. atm esi-address esiAddress no atm esi-address Mode(s): esiAddress end system ID portion of the ATM NSAP address in the format xxxxxxxxxxxx.xx
Subinterface Configuration
45
atm framing
Description: Configures T3 or E3 framing on an ATM interface. The no version returns framing to the default. For a T3 interface, the default is cbitplcp. For an E3 interface, the default is g751plcp. atm framing framingType no atm framing framingType one of the following:
Syntax:
cbitadm c-bit with ATM direct mapping for a DS3 (T3) interface cbitplcp c-bit with PLCP framing for a DS3 (T3) interface (default for
T3)
g832adm G.832 ATM direct mapping for an E3 interface g751adm G.751 ATM direct mapping for an E3 interface g751plcp G.751 PLCP mapping for an E3 interface (default for E3) m23adm M23 ATM direct mapping for a DS3 (T3) interface m23plcp M23 with PLCP framing for a DS3 (T3)
Mode(s): Interface Configuration
atm ilmi-enable
Description: Syntax: Mode(s): Enables ILMI on the interface. The no version removes the ILMI PVC. [ no ] atm ilmi-enable Interface Configuration
atm ilmi-keepalive
Description: Enables generation of ILMI keepalive messages on the system. The no version disables the generation of keepalive messages. Enabling generation of keepalive messages has an effect on the operational state of the ATM interface. [ no ] atm ilmi-keepalive [ seconds ] Mode(s): seconds number in the range 04294967295; the interval in seconds between two consecutive ILMI keepalive requests
Syntax:
Interface Configuration
46
atm lbo
atm lbo
Description: Specifies the cable length (line build-out) for the ATM T3 or E3 interface. The length of cable determines power requirements. The no version restores the default value. atm lbo { long | short } no atm lbo Mode(s): short a cable length in the range 0225 feet (the default) long a cable length in the range 255450 feet
Syntax:
Interface Configuration
atm oam
Description: Syntax: Configures F4 OAM on an interface or circuit. The no version deletes F4 OAM circuits. atm oam [ vpi ] [ [ seg-loopback | end-loopback [ loopback-timer time ] ] [ cc { source | sink | both } ] ] no atm oam [ vpi ] [ [ seg-loopback | end-loopback [ loopback-timer time ] ] ] Note: If you do not specify any options, both end-to-end and segment loopback are enabled on all VPIs on the interface. vpi VPI on which you want to enable F4 OAM. If you do not specify a VPI, F4 OAM flow is enabled on all VPIs on the interface. seg-loopback enables F4 segment OAM end-loopback enables F4 end-to-end OAM loopback-timer to generate F4 loopback cells on the VPI, you must configure the loopback timer; you can set the loopback timer only for end-to-end loopback time time interval in the range 0600 seconds between transmissions of F4 loopback cells. This value is a multiple of 20 and is based on the number of circuits with VC integrity enabled. The values are 20 seconds for 11999 circuits, 40 seconds for 20003999 circuits, 60 seconds for 40005999 circuits, and so on. These values are used regardless of the setting of this parameter. cc enables CC cells on the PVC; you can enable CC cells only on data circuits, not on control circuits, such as ILMI or signaling circuits sink enables this VC as a sink point (cell receiver) source enables this VC as the source point (cell generator) both enables this VC as both a sink point and a source point
Mode(s):
47
Syntax:
Interface Configuration
48
atm pvc
atm pvc
Description: Syntax: Creates a PVC on an ATM interface. The no version removes the specified PVC. atm pvc vcd vpi vci { encapsulation } [ { cbr cbr } | { peak [ average burst [ rt ] ] } ] [ oam [ seconds | cc [ segment | end-to-end ] { source | sink | both } ] ] [ inArp [ minutes ] ] no atm pvc vcd vcd virtual circuit descriptor that is an identifier for the VC in other commands; the range is 12147483647 vpi virtual path identifier of this PVC. The allowable numeric range depends on the line module capabilities and current configuration. The VPI and VCI cannot both be set to 0; if one is 0, the other cannot be 0. vci virtual circuit identifier of this PVC. The allowable numeric range depends on the line module capabilities and current configuration. The VPI and VCI cannot both be set to 0; if one is 0, the other cannot be 0. encapsulation one of the following:
aal5mux ip VC-based multiplexed circuit used for IP only aal5autoconfig enables autodetection of the 1483 encapsulation
(LLC/SNAP or VC multiplexed)
49
enabled. The values are: 20 seconds for 11999 circuits, 40 seconds for 20003999 circuits, 60 seconds for 40005999 circuits, and so on. These values are used regardless of the setting of this parameter. inarp enables Inverse ARP minutes InARP refresh rate in minutes; 15 minutes is the default
Note: The optional peak, average, and burst parameters configure traffic-shaping parameters for the circuit. The allowable traffic-shaping features and range specifications depend on the line module capabilities. Mode(s): cc enables CC cells on the PVC; you can enable CC cells only on data circuits, not on control circuits, such as ILMI or signaling circuits segment opens an OAM CC segment cell flow end-to-end opens an OAM CC end-to-end cell flow sink enables this VC as a sink point (cell receiver) source enables this VC as the source point (cell generator) both enables this VC as both a sink point and a source point
atm shutdown
Description: Syntax: Mode(s): Administratively disables an ATM interface. The no version enables a disabled interface. [ no ] atm shutdown Interface Configuration
50
atm svc
atm svc
Description: Defines an SVC on an ATM subinterface. The system will attempt to set up an SVC to the destination address with the requested traffic parameters and encapsulation. The no version removes the specified SVC definition. atm svc nsap nsapAddress [ { encapsulation } [ { cbr cbr } | peak [ average burst [ rt ] ] ] ] no [ atm ] svc [ nsap nsapAddress ] nsapAddress destination address in the format 12 { { 2 xx xxxxxxxxxxxxxxxxxxxxxxx 2 24 xxxxxxxxxxxx xx
Syntax:
Subinterface Configuration
atm uni-version
Description: Syntax: Specifies the UNI version the interface should use. There is no no version. atm uni-version versionNumber Mode(s): versionNumber UNI version number: 3.0, 3.1, or 4.0
Interface Configuration
51
atm vc-per-vp
Description: Configures the number of virtual circuits per virtual path. This command controls the VPI and VCI range on the ATM interface. The allowable configuration range depends on the line module. The system will not execute the command if any virtual circuits are open on the interface. The no version restores the default. Note: The minimum number of VCs per VP is 4096 for 0C3-4 modules and 1024 for UT3a modules. If you enter a value that is below the minimum, the system uses the minimum value. Syntax: atm vc-per-vp [ vcCount ] no atm vc-per-vp Mode(s): vcCount number of virtual circuits per virtual path
Interface Configuration
atm vp-tunnel
Description: Syntax: Defines a virtual path tunnel and configures the rate of traffic flow within the tunnel. The no version removes the restriction. atm vp-tunnel vpi [ cbr ] kbps no atm vp-tunnel vpi vpi number in the range 0255; virtual path identifier of this PVC cbr specifies the service class as constant bit rate kbps tunnel rate for a virtual path. The aggregate to this traffic from all circuits configured in the tunnel is held to the specified rate. Certain line modules may have minimum rates for VP tunnels.
Mode(s):
Interface Configuration
authentication
Description: Syntax: Specifies the authentication method to use in the IKE policy. The no version restores the default, preshared keys. authentication { pre-share } no authentication Mode(s): pre-share specifies preshared keys as the authentication method
52
authentication key
authentication key
Description: Specifies the password for text authentication and the key for MD5 authentication for RIP remote-neighbor interface. The no version clears the key for the interface. Supported only in RIP version 2. Authentication is disabled by default. authentication key [ 0 | 8 ] authkey no authentication key 0 the authKey is entered in unencrypted form (plaintext); this is the default option 8 the authKey is entered in encrypted form (ciphertext) authkey specifies the password sent with RIP messages or the key used to encrypt/decrypt RIP messages, depending on the authentication mode set for this remote-neighbor interface.
Syntax:
Mode(s):
authentication-key
Description: Syntax: Enables simple password authentication and assigns a password used by OSPF remote neighbors. The no version deletes the password. authentication-key [ 0 | 8 ] authKey no authentication-key Mode(s): 0 the authKey is entered in unencrypted form (plaintext); this is the default option 8 the authKey is entered in encrypted form (ciphertext) authKey a password, a continuous string of characters up to 8 characters in length
authentication message-digest
Description: Syntax: Mode(s): Specifies that MD5 authentication is used for the OSPF remote-neighbor interface. There is no no version. authentication message-digest Remote Neighbor Configuration
53
authentication mode
Description: Specifies the type of authentication used on the RIP remote-neighbor interface. The no version removes authentication from the interface. Supported only in RIP version 2. Authentication is disabled by default. authentication mode { text | md5 keyID } no authentication mode text a simple text password is sent with each RIP message. If the password is not possessed by remote neighbors, the message is rejected. md5 MD5 message-digest algorithms are used to encrypt and compress the RIP message. keyID number identifying the MD5 key in the range 1255. Remote neighbors must share the MD5 key to decrypt the message and encrypt the response.
Syntax:
Mode(s):
authentication-none
Description: Syntax: Mode(s): Specifies that no authentication is to be used for the OSPF remote-neighbor interface. There is no no version. authentication-none Remote Neighbor Configuration
auto-configure
Description: Specifies the type(s) of dynamic encapsulations that will be accepted or detected by the static ATM 1483 interface.The command may be entered repeatedly in ATM subinterface mode. [ no ] auto-configure upperInterfaceType Mode(s): upperInterfaceType dynamic encapsulation type: bridgedEthernet, ip, ppp, pppoe
Syntax:
automatic-virtual-link
Description: Syntax: Mode(s): Enables or disables automatic virtual link configuration. The no version disables an automatic virtual link. [ no ] automatic-virtual-link Router Configuration
54
auto-summary
auto-summary
Description: Reenables the automatic summarization of routes redistributed into BGP to their natural network masks. Automatic summarization is enabled by default. The no version disables automatic summarization. [ no ] auto-summary Address Family Configuration, Router Configuration
Syntax: Mode(s):
55
bandwidth
Description: Specifies the total bandwidth available on the interface. The no version removes the admission control configuration from the interface. For total reservable bandwidth, see the mpls bandwidth command. bandwidth bandwidth no bandwidth Mode(s): bandwidth available bandwidth in kilobits per second, a value from 110,000,000
Syntax:
bandwidth oversubscription
Description: Syntax: Mode(s): Allows the line modules to operate below line rate performance. The no version forces the line modules to operate at line rate performance. [ no ] bandwidth oversubscription Privileged Exec
banner
Description: Configures message-of-the-day, login, or exec banners to be displayed by the CLI. If you do not specify an option, the behavior is the same as if you specified the motd option. The no version deletes the banner. banner [ motd | login | exec ] bannerText no banner [ motd | login | exec ] motd displays the banner when a console or vty connection is initiated login displays the banner before any user authentication (line or RADIUS authentication); the banner is also displayed if user authentication is not configured exec displays the banner after user authentication (if any) and before the first prompt of a CLI session bannerText alphanumeric string truncated at 1024 characters; delimited by the first character of the string, which must be repeated at the end of the string and must not occur anywhere else in the string
Syntax:
Mode(s):
Global Configuration
56
baseline aaa
baseline aaa
Description: Sets a statistics baseline for authentication and authorization statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline aaa Privileged Exec
Syntax: Mode(s):
Syntax:
Privileged Exec
baseline clns
Description: Sets a statistics baseline for CLNS. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline clns [ interfaceType interfaceSpecifier ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
Privileged Exec
57
baseline dhcp
Description: Sets a statistics baseline for DHCP relay statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline dhcp { server | relay } Mode(s): server sets baseline for DHCP proxy server statistics relay sets baseline for DHCP relay statistics
Syntax:
Privileged Exec
Syntax:
hssi limits baseline for HSSI interface mlframe-relay limits baseline for an MFR bundle or subinterface pos limits baseline for POS interface serial limits baseline for serial interface tunnel limits baseline for GRE tunnel interface
Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide dlci DLCI number to be used on the specified subinterface to identify a virtual circuit in the range 161007
Privileged Exec
58
Syntax:
serial limits baseline for serial interface pos limits baseline for POS interface
Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Privileged Exec
Syntax:
serial limits baseline to serial interface hssi limits baseline to HSSI interface
Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Privileged Exec
59
baseline interface
Description: Sets a statistics baseline for an interface or a specific ATM virtual circuit. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline interface interfaceType interfaceSpecifier [ vcd ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vcd virtual circuit descriptor; number in the range 14294967295; an identifier for the VC in other commands (ATM interfaces only)
Syntax:
Privileged Exec
baseline ip
Description: Syntax: Sets the baseline on general IP traffic statistics as the current value. baseline ip [ vrf vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters
Privileged Exec
baseline ip bgp
Description: Syntax: Mode(s): Sets the baseline on all BGP statistics as the current value. baseline ip bgp Privileged Exec
baseline ip dhcp-local
Description: Sets a baseline for DHCP local server statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline ip dhcp-local Privileged Exec
Syntax: Mode(s):
60
baseline ip dvmrp
baseline ip dvmrp
Description: Sets a baseline for DVMRP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline ip dvmrp Privileged Exec
Syntax: Mode(s):
baseline ip http
Description: Sets a baseline for HTTP server statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline ip http Privileged Exec
Syntax: Mode(s):
baseline ip igmp
Description: Sets a baseline for IGMP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline ip igmp Privileged Exec
Syntax: Mode(s):
Syntax: Mode(s):
61
baseline ip interface
Description: Syntax: Sets a baseline for IP interface statistics. baseline ip interface [ vrf vrfName ] interfaceType interfaceSpecifier Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Privileged Exec
baseline ip ospf
Description: Syntax: Mode(s): Sets a baseline for OSPF statistics and counters. baseline ip ospf Privileged Exec
baseline ip rip
Description: Sets a statistics baseline for RIP interfaces. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline ip rip Privileged Exec
Syntax: Mode(s):
62
baseline ip tcp
baseline ip tcp
Description: Sets a statistics baseline for TCP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline ip tcp [ vrf vrfName ] [ localAddress localPort remoteAddress remotePort ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters localAddress local IP address on the system localPort local TCP port number on the system remoteAddress IP address of remote system remotePort TCP port number on remote system
Syntax:
Privileged Exec
baseline ip udp
Description: Sets a statistics baseline for UDP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline ip udp [ vrf vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters
Syntax:
Privileged Exec
baseline ip vrrp
Description: Sets a statistics baseline for VRRP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline ip vrrp Privileged Exec
Syntax: Mode(s):
63
Syntax:
Privileged Exec
Syntax: Mode(s):
baseline log
Description: Sets a baseline for logging events. Only log messages timestamped after the baseline will appear when you enter the show log data delta command. To use the current system time, do not enter any options. baseline log [ last-reset | time [ utc ] month day year ] last-reset causes the system to display log messages generated since the last time the system was reset time causes the system to display messages that are timestamped after the time and date that you set. To set the time, use the following syntax:
Hour:Minute[:Second] current time in 24-hour format; seconds are optional
Syntax:
utc indicates that the time entered is UTC (GMT) time; if you do not include this keyword, the system considers the time entered to be local time month name of the month in English day number of the day in the range 131 year four-digit number of the year
Mode(s):
Privileged Exec
64
Syntax:
Privileged Exec
Syntax:
Privileged Exec
65
Syntax:
Privileged Exec
baseline radius
Description: Sets a statistics baseline for RADIUS statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline radius Privileged Exec
Syntax: Mode(s):
Syntax:
Privileged Exec
66
baseline show-delta-counts
baseline show-delta-counts
Description: Syntax: Mode(s): Configures the system to always display the statistics relative to the most recent appropriate baseline. [ no ] baseline show-delta-counts Global Configuration
Syntax:
Privileged Exec
baseline snmp
Description: Sets a baseline for SNMP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline snmp Privileged Exec
Syntax: Mode(s):
baseline tacacs
Description: Sets a baseline for TACACS+ statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrived. baseline tacacs Privileged Exec
Syntax: Mode(s):
67
bert
Description: Enables bit error rate tests using the specified pattern on an E1 line on a CE1 line module and on a T1 line on a CT1 line module. The no version stops the test that is running. bert pattern pattern interval time [ unframed ] no bert pattern one of the following test patterns
Syntax:
0s repetitive test pattern of all zeros, 00000... 1s repetitive test pattern of all ones, 11111... 2^11 pseudorandom test pattern, 2,048 bits in length 2^15 pseudorandom 0.151 test pattern, 32,768 bits in length 2^20-O153 pseudorandom 0.153 test pattern, 1,048,575 bits in length 2^20-QRSS pseudorandom QRSS 0.151 test pattern, 1,048,575 bits
in length
2^23- pseudorandom 0.151 test pattern, 8,388,607 bits in length alt-0-1 repetitive alternating test pattern of zeros and ones,
01010101... time interval between test patterns, ranging from 114400 minutes unframed the test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern occupies only the payload bits.
Mode(s):
Controller Configuration
bgp advertise-inactive
Description: Enables the advertisement of inactive BGP received routesroutes that are considered by BGP to be best routes and therefore are present in the IP forwarding table, but that are not being used for forwarding. The no version restores the default state of normal route advertisement, whereby BGP advertises received routes only if they are in the IP forwarding table and are being used to forward traffic, or if synchronization is enabled. [ no ] bgp advertise-inactive Router Configuration
Syntax: Mode(s):
68
bgp always-compare-med
bgp always-compare-med
Description: Syntax: Mode(s): Enables the comparison of the MED for paths from neighbors in different ASs. The no version disables the feature. [ no ] bgp always-compare-med Router Configuration
Syntax: Mode(s):
Syntax: Mode(s):
Syntax: Mode(s):
69
bgp cluster-id
Description: Syntax: Configures a cluster ID if the BGP cluster has more than one route reflector. The no version causes BGP to use the router ID as the cluster ID. bgp cluster-id { clusterId | ipAddress } no bgp cluster-id [ clusterId | ipAddress ] Mode(s): clusterId a number in the range 04294967295; the cluster ID of this router acting as a route reflector ipAddress the cluster ID of this router acting as a route reflector specified as an IP address
Router Configuration
Router Configuration
Syntax:
Router Configuration
70
bgp dampening
bgp dampening
Description: Enables BGP route dampening. The system assesses a penalty of 1000 each time a route flaps and adds this to any previously accumulated penalty value. Penalties are cumulative. The no version disables route flap dampening. [ no ] bgp dampening [ halfLife [ reuse suppress maxSuppressTime [ halfLifeUnreachable ] ] ] [ route-map mapTag ] halfLife half-life period in minutes in the range 145. The default is 15. When a BGP route has been assigned a penalty, the penalty is decreased by half after the half-life period. reuse reuse limit in the range 120000. The default is 750. As the penalty for a flapping route decreases and falls below this reuse limit, the route is unsuppressed. That is, the route is added back to the BGP table and used for forwarding. suppress suppress limit in the range 120000. A route is suppressed when its penalty exceeds this limit. The default value is 2000. maxSuppressTime maximum suppression time in minutes in the range 1255. This value is the maximum amount of time a route can be suppressed. The default value is four times the half-life value. halfLifeUnreachable alternate half-life period in minutes for unreachable routes; a number in the range 145. If this value is not specified, the same half-life period is used for both reachable and unreachable routes. route-map specifies that dampening can be applied to routes according to the route map behavior. If the route map permits a route, the route is subject to dampening. If the route map denies a route, the route is not subject to dampening. The route map can contain a no dampening clause that determines dampening characteristics.
Syntax:
Syntax: Mode(s):
71
Syntax:
Router Configuration
Syntax: Mode(s):
bgp enforce-first-as
Description: Forces BGP to compare the configured remote AS number of an external peer with the first AS in the AS path of routes received from the peer. If the AS numbers do not match, BGP sends the peer an error message. The no version restores the default condition, which does not perform the AS comparison. [ no ] bgp enforce-first-as Router Configuration
Syntax: Mode(s):
bgp fast-external-fallover
Description: Automatically brings down a BGP session to any adjacent external peer immediately after the link fails (as opposed to waiting for the TCP connection to fail or the hold timer to expire). The no version disables automatic session termination. [ no ] bgp fast-external-fallover Router Configuration
Syntax: Mode(s):
72
bgp log-neighbor-changes
bgp log-neighbor-changes
Description: Causes BGP to log a message of severity notice to the bgpNeighborChanges log whenever a peer enters or leaves the Established state for any reason. No other messages are logged to the bgpNeighborChanges log.The no version disables this log. [ no ] bgp log-neighbor-changes Router Configuration
Syntax: Mode(s):
bgp maxas-limit
Description: Causes BGP to check the length of AS paths received in update messages and to not forward routes whose AS paths are greater than the specified length. The no version halts checking of the AS path length. bgp maxas-limit limit no bgp maxas-limit [ limit ] Mode(s): limit maximum acceptable length of a received AS path; number in the range 11000
Syntax:
Router Configuration
bgp redistribute-internal
Description: Authorizes redistribution of internal BGP routes (in addition to external BGP routes) into protocols that have BGP route redistribution enabled. This command is not required for IBGP routes within a VRF, for which redistribution is always enabled. The no version restores the default, redistributing only external BGP routes. [ no ] bgp redistribute-internal Router Configuration
Syntax: Mode(s):
bgp router-id
Description: Syntax: Sets the BGP identifier. The no version restores the system router ID as the identifier. bgp router-id ipAddress no bgp router-id [ ipAddress ] Mode(s): ipAddress IP address to be used as the BGP identifier; ignored if present in the no version
Router Configuration
73
bgp shutdown
Description: Syntax: Mode(s): Administratively disables BGP. The no version reenables BGP. [ no ] bgp shutdown Router Configuration
boot backup
Description: Sets the release and the configuration to be used the next (and every subsequent) time the boot logic chooses backup mode. The no version removes the setting. boot backup relFilename { cnfFilename | scrFilename | factory-defaults } no boot backup Mode(s): relFilename system software file cnfFilename name of an existing configuration file (.cnf) scrFilename name of an existing script file (.scr) factory-defaults the system reverts to factory default configuration when rebooted
Syntax:
Global Configuration
74
boot config
boot config
Description: Specifies how the system obtains its startup configuration. The no version clears a previous request to reboot in a specified manner; the next reboot uses the configuration saved in nonvolatile storage. boot config { cnfFilename [ once ] | scrFilename | running-configuration | startup-configuration | factory-defaults } no boot config cnfFilename name of an existing startup configuration file (.cnf) to be used on all subsequent reboots once restores a configuration from the specified configuration file only on the next reboot. Subsequent reboots revert to the running-configuration settings. scrFilename name of an existing script file (.scr) running-configuration specifies that the running configuration is to be used for reboot; only available if the system is in Automatic Commit mode startup-configuration specifies that the running configuration is to be used for reboot; only available if the system is in Manual Commit mode factory-defaults specifies that the factory default configuration is to be used for the next reboot. Subsequent reboots revert to the running-configuration settings.
Syntax:
Caution: All boot config commands except for boot config running-configuration and boot config startup-configuration erase the existing running configuration when you reboot the system. Before executing this command, you might want to save the current configuration to a .cnf file using the copy running-configuration command. Mode(s): Global Configuration
boot force-backup
Description: Forces the system to use the backup software release file or system configuration file on the next boot. The no version sets the system to use the default release or configuration file on the next boot. [ no ] boot force-backup Note: Once the system has used the backup settings, the no boot force-backup command is the only way to get the system to use the default settings again. Mode(s): Global Configuration
Syntax:
75
boot revert-tolerance
Description: Sets the reversion tolerances that the boot logic uses to determine whether the system should use the normal or backup settings. The no version restores the default reversion tolerance settings. The default settings are 3 crashes in 30 minutes. boot revert-tolerance count time no boot revert-tolerance Mode(s): count number of times the operational SRP software crashes; the range is 04294967295; the default setting is 3 time time (in seconds) in which the set number (count) of crashes occurs; the range is 04294967295; the default setting is 1800
Syntax:
Global Configuration
boot slot
Description: Configures the module in the selected slot to use the specified software release the next time the module is booted. The no version clears the override for the slot if a slot number is provided; if no slot number is provided, all slot overrides are cleared. The backup option enables you to specify a backup release for the module in the specified slot in case the module reboots more times than allowed within the period specified by the boot revert-tolerance command. boot [ backup ] slot slotNum relFileName no boot [ backup ] slot [ slotNum ] Mode(s): backup configures a backup setting slotNum number of the selected slot in the system chassis relFileName release (.rel) filename
Syntax:
Global Configuration
76
boot subsystem
boot subsystem
Description: Configures the selected subsystem to use the specified release the next time the subsystem is booted. The no version disables the subsystem. The backup option enables you to specify a backup release for the module in the specified slot in case the module reboots more times than allowed within the period specified by the boot revert-tolerance command. boot [ backup ] subsystem subsysName relFileName no boot [ backup ] subsystem [ subsysName ] Mode(s): backup configure a backup setting subsysName name of the subsystem to be configured relFileName name of system software file to use
Syntax:
Global Configuration
boot system
Description: Syntax: Specifies the software release (.rel) file to use on reboot. There is no no version. boot system relFileName Mode(s): relFileName name of the software release file (.rel) that contains the software release
Global Configuration
buffer-weight
Description: Syntax: Sets the buffer weight of the queue. The no version returns the queue to its default buffer weight. buffer-weight bufferWeight no buffer-weight Mode(s): bufferWeight range 163; default is 8
77
bulkstats collector
Description: Creates and configures a collector of bulk statistical data to collect MIB-2 ifTable MIB objects. You can configure up to six collectors. The no version restores the default value for specified options; if no options are specified the no version deletes the collector. bulkstats collector collectorIndex [ collect-mode { auto-xfer | on-file-full | manual-xfer } | description descrip | interval intrvl | max-size maxSize | primary-receiver primRecvIndex | secondary-receiver secRecvIndex | single-interval ] no bulkstats collector collectorIndex [ collect-mode | description | interval | max-size | primary-receiver | secondary-receiver | single-interval ]* collectorIndex a number in the range 165535 that identifies the particular data collector collect-mode specifies one of the following collection modes:
Syntax:
auto-xfer agent automatically transfers file when interval expires on-file-full agent automatically transfers file when it is full manual-xfer system- or user-initiated transfers; default collection mode
descrip descriptive information to insert into the bulkstats file intrvl time period in the range 300 86400 seconds for which the collector transfers data from the system to the receivers; default interval is 360 seconds maxSize maximum size of the file in the range 1024020971520 bytes; default file size is 2,621,440 bytes primRecvIndex number in the range 165535 that identifies the primary receiver to which the system transfers the data; by default the primary receiver is cleared secRecvIndex number in the range 165535 that identifies the secondary (backup) receiver to which the system transfers the data; by default the secondary receiver is cleared single-interval specifies that the collector retrieves the bulk statistics data only once; by default, the collector receives the data periodically * indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s):
Global Configuration
78
Removes the carriage return (CR) and leaves only a line feed (LF) at the end of each line in the bulkstats file. The no version returns the end of line format to the default, CR and LF.
[no] bulkstats file-format endOfLine-LF Global Configuration
Syntax: Mode(s):
Syntax: Mode(s):
bulkstats interface-type
Description: Syntax: Configures the interface type on which you want to collect statistics. The no version deletes the interface type from bulkstats collection. bulkstats interface-type interfaceType [ collector collectorIndex ] no bulkstats interface-type interfaceType [ collector collectorIndex ] interfaceType type of interface to collect statistics on: ATM, ATM 1483, Ethernet, Frame Relay, Frame Relay subinterface, Cisco HDLC, IP, PPP collectorIndex number in the range 165535 that identifies the particular data collector. Always specify this option if you defined more than one collector.
Mode(s):
Global Configuration
79
sysName inserts the system name into the stored remote filename sysUpTime inserts the system up time into the stored remote filename collectorSequence inserts a sequence number into the stored remote
filename Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line
Global Configuration
bulkstats schema
Description: Syntax: Configures the schema for collecting bulk statistics. The no version removes the schema. bulkstats schema schemaIndex [ collector collectorIndex ] no bulkstats schema schemaIndex Mode(s): schemaIndex identifier for the schema in the range 165535 collectorIndex identifier for the collector in the range 165535
Global Configuration
80
Mode(s):
Global Configuration
Syntax:
input collect data on input policies localInput collect data on local input policies output collect data on output policies
Mode(s): policyList retrieves statistics based on color-coded tags applied by a policy
Global Configuration
81
bulkstats traps
Description: Syntax: Configures the bulkstats traps. The no version disables the trap. bulkstats traps { nearly-full [ threshold ] | full } no bulkstats traps { nearly-full | full } Mode(s): nearly-full a percentage less than 100% threshold a percentage less than 100%; if not specified, defaults to 99% full 100%
Global Configuration
82
cablelength
cablelength
Description: Syntax: Specifies the length of the cable, which determines power requirements. The no version uses the default value, 0 feet. cablelength length no cablelength Mode(s): length a cable length in the range 0450
Controller Configuration
cablelength short
Description: Specifies the cable length (line build-out) for a CT1 interface. The length of cable determines power requirements. The no version restores the default value, 0. cablelength short length no cablelength short Mode(s): length a cable length in the range 0660 feet
Syntax:
Controller Configuration
cbf
Description: Syntax: Mode(s): Creates a connection-based forwarding interface over the interface you are configuring. The no version removes the CBF interface. [ no ] cbf Interface Configuration
83
cbf connection
Description: Creates a CBF connection between two CBF interfaces. The CBF connection is a bidirectional connection consisting of a symmetrical pair of unidirectional connections, one from interface1 to interface2 and a second from interface2 to interface1. The no version removes an existing connection. [ no ] cbf connection interface1Type interface1Specifier interface2Type interface2Specifier Mode(s): interface1Type interface type; see Interface Types and Specifiers in About This Guide interface1Specifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide interface2Type interface type; see Interface Types and Specifiers in About This Guide interface2Specifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
Global Configuration
cbf shutdown
Description: Syntax: Mode(s): Administratively disables a CBF interface. The no version enables a CBF interface. (Newly created CBF interfaces are enabled by default.) [ no ] cbf shutdown Interface Configuration
channel-group shutdown
Description: Disables a CT1 channel group on a CT1 module or an E1 fractional interface on a CE1 module. The no version restarts a disabled channel group or fractional interface. [ no ] channel-group subchan shutdown Mode(s): subchan fractional T1 interface in the range 124 or fractional E1 interface in the range 131
Syntax:
Controller Configuration
84
Syntax:
Controller Configuration
channel-group timeslots
Description: Syntax: Configures the timeslots and data rate used on each CE1 channel on the CE1 module or on each CT1 channel on the CT1 module. channel-group subchan timeslots range [ speed { 56 | 64 } ] no channel-group subchan subchan fractional E1 interface in the range 131 or fractional T1 interface in the range 124 range timeslots assigned to the CE1 channel in the range 131 or to the CT1 channel in the range 124. A dash represents a range of timeslots, and a comma separates timeslots. For example, 1-10, 15-18 assigns timeslots 110 and 1518. speed specifies the data rate for the CE1 or CT1 channel as one of the following values:
channelized
Description: Configures a port on the CT3/T3-F0 line module and associated I/O module to support channelized T3 operation. The no version configures the port for unchannelized operation. [ no ] channelized Controller Configuration
Syntax: Mode(s):
85
check-disk
Description: Syntax: Mode(s): Finds and repairs structural inconsistencies and damage in the DOS file system in NVS on the primary SRP module. There is no no version. check-disk [ repair ] Boot To access the BOOT mode from the local console:
1 2 At the Privileged Exec prompt, type the reload command. Information on the reloading process appears. When the countdown begins, press the <M+B> key combination.
This puts the CLI in Boot mode (:boot## prompt). If you do not press the <M+B> key combination, the reloading process continues and returns the CLI to the normal User Exec mode.
86
classifier-list
classifier-list
Description: Creates or modifies a classifier control list. Use the not variables to deny traffic for a specific protocol, source address, or destination address. The no version removes the classifier control list. [ ip ] classifier-list classifierName [ traffic-class trafficClassName ] [ color { green | yellow | red } ] [ user-packet-class ] [ notProtocol ] { protocolNumber | protocolName } [ notSrcIpAddr ] { srcIp srcWildIp | hostSrcIpAddr srcIpHost | anySrcIpAddr } [ sourceQualifier ] [ notDestIpAddr ] { anyDestIpAddr | destIp destWildIp | hostDestIpAddr dstIpHost } [ destinationQualifier ] [ tcpQualifier ] [ ip-flags ipFlags ] [ ip-frag-offset { eq fragEqValue | gt 1 } ] [ precedence precNum | dsField dsFieldNum | tos tosNum ] no classifier-list classifierName [ classifierNumber ] classifierName name of the classifier control list entry trafficClassName name of the traffic class to match color match the color notProtocol variable matches any but the immediately following protocol argument protocolNumber protocol number matched by this classifier control list in the range 0255 protocolName protocol name matched by this classifier control list notSrcIPAddr variable matches any but the immediately following source address argument srcIp source address to match srcWildIp wild-card mask to apply to the source address hostSrcIpAddr source address as a host srcIPHost source host address to match anySrcIpAddr matches any source address sourceQualifier one of the following protocol-specific classifier parameters for source ports for UDP or TCP protocols only. See ERX Policy and QoS Configuration Guide, Chapter 1, Configuring Policy Management, for details.
Syntax:
87
toPort end of a range of port numbers (TCP and UDP only) icmpType ICMP message type (ICMP only) icmpCode ICMP message code (ICMP only) igmpType IGMP message type (IGMP only)
tcpQualifier TCP flags classification parameters tcpFlag for TCP only; a logic equation that specifies flag bit values; ! means logical NOT and & means logical AND; use any of the following flag names:
ack 0x10 fin 0x01 push 0x08 rst 0x04 syn 0x02 urgent 0x20
ipFlags a logic equation that specifies flag bit values; ! means logical NOT and & means logical AND; use any of the following flag names:
88
cleanup-timeout-factor
ipFragOffset matches the specified IP fragmentation offset; use any of the following:
Global Configuration
cleanup-timeout-factor
Description: Syntax: Specifies the number of refresh messages that can be lost before the PATH or RESV state is ended. The no version restores the default value of 3. cleanup-timeout-factor lostRefreshes no cleanup-timeout-factor Mode(s): lostRefreshes number of lost refresh messages
clear access-list
Description: Syntax: Clears counters for entries in IP access lists. There is no no version. clear access-list [ accessListName ] Mode(s): accessListName name of the access list; a string of up to 32 characters
Privileged Exec
89
clear arp
Description: Syntax: Clears entries from the ARP cache. There is no no version. clear [ ip ] arp [ vrf vrfName ] { ipAddress interfaceType interfaceSpecifier | * } Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters ipAddress IP address in 32-bit dotted-decimal format of the entry to be cleared interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide * clears all dynamic ARP entries
Privileged Exec
Privileged Exec
clear egress-queue
Description: Syntax: Clears egress queue statistics for the specified interface and traffic class. There is no no version. clear egress-queue interfaceType interfaceSpecifier [ stacked ] [ traffic-class trafficClassName ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier see Interface Types and Specifiers in About This Guide. stacked clears queue statistics for all interfaces stacked above the specified interface
Privileged Exec
90
clear fabric-queue
clear fabric-queue
Description: Clears fabric queue statistics for the specified traffic-class and egress-slot. The default is that statistics for all traffic classes and all slots are cleared. There is no no version. clear fabric-queue [ traffic-class trafficClassName ] [ egress-slot egressSlot ] [ filter ] Mode(s): traffic-class clear fabric-queue statistics for a traffic class egress-slot clear fabric-queue statistics for an egress-slot
Syntax:
Privileged Exec
clear ip bgp
Description: If the soft option is not used, brings down the underlying TCP connection and then brings it back up again, causing both peers to resend their complete BGP routing table. If the soft out option is used, the BGP speaker reapplies outbound policy and resends all routes to the specified peer(s). If the soft in option is used, the BGP speaker reapplies inbound policy to the routes received from the specified peer(s). This is possible only if soft reconfiguration inbound has been enabled for the peer or the peer supports the route-refresh capability. There is no no version. clear ip bgp [ { ipAddress | peer-group peerGroupName | * } ] [ vrf vrfName ] [ ipv4 { unicast | multicast } | vpnv4 unicast ] [ soft [ in [ prefix-filter ] | out ] ] ipAddress IP address of identified BGP neighbor to clear peerGroupName name of a BGP peer group to clear * clears all connections vrfName name of a virtual routing and forwarding instance to clear ipv4 unicast clears the IPv4 unicast routing table; the default option ipv4 multicast clears the IPv4 multicast routing table vpnv4 unicast clears the VPNv4 unicast routing and forwarding table soft soft reconfiguration
Syntax:
in triggers inbound soft reconfiguration prefix-filter pushes out prefix list and Cisco-proprietary prefix list
outbound route filters and triggers inbound soft reconfiguration
91
Syntax:
Privileged Exec
Privileged Exec
92
clear ip interface
clear ip interface
Description: Syntax: Clears the counters on the specified IP interface. The default is all interface types and all interfaces. There is no no version. clear ip interface [ vrf vrfName ] interfaceType interfaceSpecifier Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Privileged Exec
Syntax: Mode(s):
clear ip mroute
Description: Syntax: Clears all or the specified multicast forwarding entries. There is no no version. clear ip mroute { * | grpAddress [ sourceAddress ] } Mode(s): * clear all IP multicast forwarding entries grpAddress address of the multicast group for which forwarding entries should be cleared sourceAddress address of the multicast source for which forwarding entries should be cleared
93
clear ip prefix-list
Description: Syntax: Clears all hit counts in the prefix lists, the specified prefix list, or the specified entry from the specified prefix list. There is no no version. clear ip prefix-list [ listName [ network/length] ] Mode(s): listName name of the prefix list; a character string up to 32 characters in length network base address of the network route to be filtered; for example, 192.168.32.0 or 10.10.0.0 length length of the network prefix; number of bits masking base address to produce address to be matched
94
clear ip prefix-tree
clear ip prefix-tree
Description: Syntax: Clears all prefix trees, the specified prefix tree, or the specified entry from the specified prefix tree. There is no no version. clear ip prefix-tree [ treeName [ network/length ] ] Mode(s): treeName name of the prefix list; a character string up to 32 characters in length network base address of the network route to be filtered; for example, 192.168.32.0 or 10.10.0.0 length length of the network prefix; number of bits masking base address to produce address to be matched
clear ip routes
Description: Syntax: Clears a specified route or all dynamic routes from the routing table of a specified VRF or all VRFs. There is no no version. clear ip routes [ vrf vrfName ] { * | ipAddress [ ipMask ] } Mode(s): vrfName name of the VRF context from which routes are to be cleared * clears all dynamic routes ipAddress IP address prefix for routes that are cleared; in 32-bit dotted-decimal format ipMask mask of the IP address prefix for routes that are cleared; in 32-bit dotted-decimal format
Privileged Exec
95
Privileged Exec
Privileged Exec
clear line
Description: Syntax: Removes any services on a vty line and closes any files opened as a result of services on that line. There is no no version. clear line lineNumber Mode(s): lineNumber number of the vty line
User Exec
Syntax: Mode(s):
96
client-name
client-name
Description: Sets a hostname for a tunnel. For L2TP, specifies the hostname used by the LAC when communicating with the LNS about the tunnel. For L2F, specifies the hostname used by the NAS when communicating with the home gateway. The no version removes the hostname from the tunnel. Note: This command has replaced the hostname command for Domain Map Tunnel Configuration mode only. Syntax: client-name clientname no client-name Mode(s): clientname string of up to 64 characters (no spaces)
clns configuration-time
Description: Syntax: Specifies the rate at which ES hellos and IS hellos are sent. The no version restores the default value of 10 seconds. clns configuration-time configTime no clns configuration-time Mode(s): configTime number in the range 165535; rate in seconds at which ES and IS hello packets are sent; the default is 10 seconds
Global Configuration
clns holding-time
Description: Allows the sender of an ES hello or IS hello to specify the length of time you consider the information in the hello packets to be valid. The no version restores the default value, 30 seconds. clns holding-time holdTime no clns holding-time Mode(s): holdTime number in the range 165535; length of time in seconds during which the information in the hello packets is considered valid
Syntax:
Global Configuration
97
clns host
Description: Use to define a name-to-NSAP mapping that can then be used with commands requiring NSAPs. The no version restores the default of no mapping defined. Enables dynamic resolution of hostnames to system IDs (within the NSAP address). The hostname mapping is sent in the LSPs within the dynamic hostname TLV tuple. Display the TLV by issuing the show isis database detail command. Use the show hosts command to display the mapping. clns host name nsap no clns host name Mode(s): name name for the NSAP; first character can be either a letter or a number. If a number is used, the operations you can perform are limited. nsap the NSAP to which that name maps
Syntax:
Global Configuration
clock rate
Description: Sets the rate of the internal clock in MHz for HSSI and X.21/V.35 interfaces. The no version restores the default value; for HSSI the default is 44.736 MHz, for X.21/V.35, the default is 2048000 Hz. The syntax depends on the type of interface. HSSI Interfaces: clock rate { 34 | 44 } no clock rate 34 specifies a rate of 34.368 MHz 44 specifies a rate of 44.736 MHz
Syntax:
X.21/V.35 Interfaces: [ no ] clock rate rate no clock rate rate speed of the clock in Hz; one of the following values: 1200 | 2400 | 4800 | 9600 | 19200 | 38400 | 50000 | 64000 | 128000 | 1024000 | 2048000 | 3072000 | 4096000 | 4915200 | 6144000 | 6192000
Mode(s):
Interface Configuration
98
clock set
clock set
Description: Syntax: Allows you to manually set the system clock. There is no no version. clock set time { month day | day month } year Mode(s): time current time (in 24-hour format HH:MM:SS) month name of the month (January, February, ) day day of the month (131) year year (2000, 2001, )
Privileged Exec
clock source
Description: Syntax: Determines how an interfaces obtains clocking signals. The no version restores the default value, line. clock source { line | internal { module | chassis } } no clock source line interface clocks data from a clock recovered from the lines receive data stream; the default. internal internal clock source transmits data from its internal clock. You must specify one of the following for internal clocking:
module internal clock is from the line module itself chassis internal clock is from the configured system clock
Mode(s): Controller Configuration, Interface Configuration (POS only)
99
Syntax:
Mode(s):
Global Configuration
100
Syntax:
Mode(s):
Global Configuration
clock timezone
Description: Syntax: Sets the time zone for display. The no version sets the time zone to UTC. clock timezone name hours [ minutes ] no clock timezone Mode(s): name name of the time zone to be displayed when Standard time is in effect, such as EST or PST. hours hours offset from UTC (-23, -22 23) minutes minutes offset from UTC (059)
Global Configuration
101
color
Description: Defines a policy rule that assigns a color to packets in the specified classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with the policy list for this rule. Use the suspend keyword to temporarily suspend color assignment. The no version removes the rule from the policy list; the suspend version temporarily suspends the policy rule; the no suspend version resumes application of a suspended rule. [ no ] [ suspend ] color { green | yellow | red } [ classifier-group claclName ] [ precedence precValue ] color one of the following colors assigned to packets:
Syntax:
Policy Configuration
committed-action
Description: Sets the action for packets conforming to the committed rate and committed burst size and conforming to the exceed rate and exceed burst size for a rate limit profile. The no version restores the value to the default value, drop. [ no ] committed-action { drop | transmit | mark markVal } Mode(s): drop drop the packet transmit transmit the packet mark mark the packet markVal mark value in the range 0255
Syntax:
committed-burst
Description: Syntax: Sets the committed burst for a rate limit profile. The no version restores the default value, 8192. [ no ] committed-burst size Mode(s): size size in bytes in the range 81924294967295
102
committed-length
committed-length
Description: Syntax: Sets minimum and maximum constraints for the queues committed lengths. The no version removes constraints on the queues committed length. committed-length minimumCommittedLength [ maximumCommittedLength ] no committed-length Mode(s): minimumCommittedLength range 01073741824 maximumCommittedLength range 01073741824
committed-rate
Description: Syntax: Sets the committed rate for a rate limit profile. The no version restores the default value, 0. [ no ] committed-rate rate Mode(s): rate rate in bits per second in the range 04294967295
configure
Description: Syntax: Enters the Global Configuration mode. To enter Global Configuration commands, you must be in the Privileged Exec mode. There is no no version. configure [ terminal | file [ fileName ] [ verbose | show-progress [ dotPeriod ] ] ] Mode(s): terminal configure from a terminal file configure from a script file fileName script file to execute verbose echo each command as the script is executed show-progress display a . during script execution dotPeriod displays a . after this number of commands; default is 100
Privileged Exec
103
confirmations explicit
Description: Requires the user to enter y, ye, or yes to confirm a prompt, and to enter n or no to deny a prompt. The no version restores the default state, which permits pressing <Enter> or <y> to confirm a prompt and entering any other characters to deny a prompt. [ no ] confirmations explicit Global Configuration
Syntax: Mode(s):
conformed-action
Description: Sets the action for packets not conforming to the committed rate and committed burst size, but conforming to the peak rate and peak burst size for a rate limit profile. The no version restores the value to the default value, drop. [ no ] conformed-action { drop | transmit | mark markVal } Mode(s): drop drop the packet transmit transmit the packet mark mark the packet markVal mark value in the range 0255
Syntax:
conformed-fraction
Description: Sets the percentage of the total queue that can be occupied before dropping conformed packets. The no version returns the conformed fraction to its default setting. conformed-fraction conformedFraction no conformed-fraction Mode(s): conformedFraction percentage range 0100; default is 50%
Syntax:
104
conformed-length
conformed-length
Description: Syntax: Sets minimum and maximum constraints for the queues conformed lengths. The no version removes constraints on the queues conformed length. conformed-length minimumConformedLength [ maximumConformedLength ] no conformed-length Mode(s): minimumConformedLength range 01073741824 maximumConformedLength range 01073741824
controller e1
Description: Syntax: Accesses Controller Configuration mode so that you can configure a CE1 controller. There is no no version. controller e1 interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Global Configuration
controller e3
Description: Syntax: Accesses Controller Configuration mode so that you can configure an E3 controller. There is no no version. controller e3 interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Global Configuration
controller sonet
Description: Syntax: Selects an interface on which you want to configure SONET or SDH. There is no no version. controller sonet interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Global Configuration
105
controller t1
Description: Syntax: Accesses Controller Configuration mode so that you can configure a CT1 controller. There is no no version. controller t1 interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Global Configuration
controller t3
Description: Syntax: Accesses Controller Configuration mode so that you can configure a T3 controller. There is no no version. controller t3 interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Global Configuration
106
copy
copy
Description: Copies a local or network file. There is no no version. Note: You cannot change the extension of a file, for example, .scr.
Note: You can only copy software release (.rel) files to the system (download); you cannot copy them from the system (upload). Syntax: copy sourcePath:sourceFilename destinationPath:destinationFilename [force] sourcePath path to the source in the format: networkPath | /incoming/subdirectory | /outgoing/subdirectory
networkPath path to the network host incoming specifies the ERX systems incoming FTP directory subdirectory name of a subdirectory on the ERX systems FTP server.
If the subdirectory does not exist, the system creates it.
networkPath path to the network host incoming specifies the incoming ERX systems FTP directory subdirectory name of a subdirectory on the ERX systems FTP server.
If the subdirectory does not exist, the system creates it.
Privileged Exec
copy running-configuration
Description: Saves the configuration currently running on the system to a local or remote (network) system configuration file (.cnf). Available only if the system is in Automatic Commit mode. There is no no version. copy running-configuration destination [ force ] Mode(s): destination destination filename (*.cnf) force creates a copy even if the destination file already exists
Syntax:
Privileged Exec
107
Syntax: Mode(s):
copy startup-configuration
Description: Copies the previously saved startup configuration to a local or remote (network) system configuration (*.cnf) file. Available only if the system is in Manual Commit mode. If you have made but not saved any configuration changes, those changes are not in the startup configuration. There is no no version. copy startup-configuration destination [ force ] Mode(s): destination destination filename (*.cnf) force creates a copy even if the destination file already exists
Syntax:
Privileged Exec
cost
Description: Syntax: Specifies a cost metric for an OSPF remote-neighbor interface. Used in the calculation of the SPF routing table. The no version restores the default value. cost intfCost no cost intfCost link state metric cost; a number in the range 165535; default value is 10 if there is no route to the remote neighbor; otherwise, the default is calculated based on the bandwidth of the physical interface used to reach the remote neighbor and the OSPF auto-cost reference bandwidth
Mode(s):
108
crc
crc
Description: Sets the size of the cyclic redundancy check. CRC is an error-checking technique that uses a calculated numeric value to detect errors in transmitted data. 16 and 32 indicate the number of check digits per frame that are used to calculate the FCS. Both the sender and receiver must use the same setting. The default is 16. The no version restores the value to the default. crc { 16 | 32 | none } no crc Mode(s): 16 specifies CRC-16, which transmits streams of 8-bit characters and generates 16-bit check bits per frame 32 specifies CRC-32, which transmits longer streams at faster rates and therefore provides better ongoing error detection none disables CRC checking
Syntax:
Interface Configuration
cr-ldp
Description: Specifies that the traffic-engineering extensions to LDP are in effect on this interface. CR-LDP is enabled by default. The no version disables CR-LDP in the profile. [ no ] cr-ldp LDP Profile Configuration
Syntax: Mode(s):
Syntax:
Mode(s):
Global Configuration
109
data-character-bits
Description: Syntax: Sets the number of data bits available for characters for all sessions on the specified vty lines. There is no no version. data-character bits { 7 | 8 } Mode(s): 7 7 data bits per character; this setting supports only characters in the standard ASCII set 8 8 data bits per character; default setting, supports the full set of 8-bit international characters
Line Configuration
dead-interval
Description: Sets the time period that the OSPF router waits without seeing hello packets from a remote neighbor before declaring the neighbor to be down. The no version restores the default value. dead-interval deadInterval no dead-interval Mode(s): deadInterval number in the range 165535 seconds; default value is 40 seconds
Syntax:
deadtime
Description: Use to configure the amount of time (in minutes) that a server is marked as unavailable if a request times out for the configured retry count. If a server fails to answer a request, it is marked unavailable by the system. The system does not send requests to the server for the configured time. The no version restores the default value, 0, turning off the deadtime mechanism. deadtime recovery no deadtime Mode(s): recovery amount of time that a server is marked as unavailable in the range 030 (minutes). The default is 0.
Syntax:
Radius Configuration
110
debounce-time
debounce-time
Description: Syntax: Sets the interval to wait before bringing up a RIP interface that was brought down. The no version restores the default value, 10. debounce-time interval no debounce-time Mode(s): interval seconds in the range 060
Router Configuration
debug ip bgp
Description: Syntax: Shows information on the selected variable. The no version disables the display. debug ip bgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] [ secondary ] no debug ip bgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] in displays information for inbound events out displays information for outbound events peerAddress IP address of BGP peer for which information is displayed peerAddressMask network mask of BGP peer for which information is displayed bgpLog BGP log of interest; one of the following options:
events BGP finite state machine events and transitions keepalives BGP keepalive message events updates BGP routing table update events vpnv4 BGP VPNv4 NLRI events
import displays BGP import processing events; appears only if you specify the vpnv4 keyword
111
routerName name of the virtual router that owns the BGP router for which information is being displayed filteringRouterName name of the virtual router that owns the access class and route map parameters accessClassName name of an access list to filter output mapName name of a route map to filter output severity specifies the minimum severity of the log messages displayed for the selected category; described either by a descriptive termseverityValueor by a corresponding numberseverityNumberin the range 07; the lower the number, the higher the priority:
emergency or 0 system unusable alert or 1 immediate action needed critical or 2 critical condition exists error or 3 error condition warning or 4 warning condition notice or 5 normal but significant condition info or 6 informational message debug or 7 debug message
verbosityLevel verbosity of the log categorys messages; can be any of the following:
Mode(s):
Privileged Exec
112
debug ip mbgp
debug ip mbgp
Description: Syntax: Shows information on the selected variable. The no version disables the display. debug ip mbgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] [ secondary ] no debug ip mbgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] in displays information for inbound events out displays information for outbound events peerAddress IP address of BGP peer for which information is displayed peerAddressMask network mask of BGP peer for which information is displayed bgpLog BGP log of interest; one of the following options:
events BGP finite state machine events and transitions keepalives BGP keepalive message events updates BGP routing table update events vpnv4 BGP VPNv4 NLRI events
import displays BGP import processing events; appears only if you specify the vpnv4 keyword routerName name of the virtual router that owns the BGP router for which information is being displayed filteringRouterName name of the virtual router that owns the access class and route map parameters accessClassName name of an access list to filter output mapName name of a route map to filter output severity specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command.
113
verbosityLevel verbosity of the log categorys messages. See the debug ip bgp command. secondary indicates that the specified filter conditions for the log are imposed in addition to any that were previously specified; if omitted, the specified filter conditions replace any that were previously specified
Mode(s):
Privileged Exec
debug ip ospf
Description: Syntax: Shows information on the selected variable. The no version disables the display. debug ip ospf ospfLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] no debug ip ospf ospfLog ospfLog OSPF log of interest; one of the following options:
adj OSPF adjacency events elect-dr OSPF designated router election events OSPF general events lsa OSPF link state advertisements events neighbor OSPF neighbor state machine packets-rcvd OSPF packets received packets-sent OSPF packets sent route OSPF route events spf all OSPF shortest path first calculation events spf-ext OSPF shortest path first external route calculation events spf-inter OSPF shortest path first interarea route calculation events spf-intra OSPF shortest path first intra-area route calculation events
Mode(s): severity specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command. verbosityLevel verbosity of the log categorys messages. See the debug ip bgp command.
Privileged Exec
114
debug ip pim
debug ip pim
Description: Syntax: Shows information on the selected variable. The no version disables the display. The syntax differs for PIM Dense Mode and PIm Sparse Mode. PIM Dense Mode: debug ip pim { pimLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] | switchState groupAddress sourceAddress | dense-mode { on | off } } PIM Sparse Mode: debug ip pim { pimLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] | switchState groupAddress sourceAddress | sparse-mode { on | off | sg-state [ group groupAddress [ source sourceAddress ] | rp rpAddress ] [ count ] } } no debug ip pim pimLog pimLog PIM log of interest; one of the following options:
autoRp-rcvd autoRP packets received autoRP-sent autoRP packets sent engineering PIM engineering hellos-rcvd PIM hello messages received hellos-sent PIM hello messages sent packets PIM packets received and sent packets-rcvd PIM packets received packets-sent PIM packets sent
severity specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command. verbosityLevel verbosity of the log categorys messages. See the debug ip bgp command. switchState switches from one type of tree to another
rpt-switch switch from a shortest path tree to a shared path tree spt-switch switch from a shared path tree to a shortest path tree
groupAddress IP address of the multicast group sourceAddress IP address of the multicast source on turns on the specified PIM mode on all virtual routers
115
off turns off the specified PIM mode on all virtual routers sg-state displays information about the relationship between a source, multicast group, and RP router rp displays information about the relationships between sources, groups, and the specified RP router rpAddress address of the RP router count displays one of the following
(with the source and group keywords) number of source-group pairs for
PIM SM
debug ip rip
Description: Syntax: Shows information on the selected variable. The no version disables the display. debug ip rip ripLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] no debug ip rip ripLog ripLog RIP log of interest; one of the following options:
Privileged Exec
116
debug isis
debug isis
Description: Displays debug-related information about selected IS-IS log parameters. This command manipulates the same log as the Global Configuration log commands. The no version disables debugging display. debug isis isisLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] no debug isis isisLog isisLog IS-IS log of interest; one of the following options:
Syntax:
mpls traffic-eng agents MPLS traffic-engineering agents snp-packets IS-IS CSNPs/PSNPs spf-events shortest path first events spf-statistics SPF timing and statistic data spf-triggers SPF triggering events update-packets update-related packets
Mode(s): severity specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command. verbosityLevel verbosity of the log categorys messages. See the debug ip bgp command.
Privileged Exec
117
default-fields peer
Description: Syntax: Specifies the fields that will appear by default in the output of a subsequently issued show ip bgp summary command. [ no ] default-fields peer fieldOptions fieldOptions field(s) to be displayed, in the format all | [ intro | last-reset-reason | messages-received | messages-sent | peer-type | prefixes-received | remote-as | state | times-up | up-down-time | updates-received | updates-sent ]*
last-reset-reason reason for most recent reset messages-received total number of messages received from the peer messages-sent total number of messages sent to the peer peer-type type of BGP peer: internal, external, or confederation prefixes-received number of unique prefixes received from the peer remote-as the remote AS number of the peer state state of the BGP session times-up number of times the session has been established up-down-time how long the session has been up or down updates-received number of update messages received from the peer updates-sent number of update messages sent to the peer * indicates that one or more parameters can be repeated multiple
times in a list in the command line Mode(s): Router Configuration
118
default-fields route
default-fields route
Description: Specifies the fields that will appear by default in the output of any subsequently issued show ip bgp command that displays routes (except for the show ip bgp summary command). [ no ] default-fields route fieldOptions fieldOptions field(s) to be displayed, in the format all | [ afi | aggregator | as-path | atomic-aggregate | best | clusters | communities | extended-communities | imported | intro | in-label | loc-pref | med | next-hop | next-hop-cost | origin | originator-id | out-label | peer | peer-type | rd | safi | unknown-types | weight ]*
Syntax:
afi address family identifier aggregator AS number and IP address of aggregator as-path AS path through which this route bas been advertised atomic-aggregate whether the atomic aggregate attribute is present best whether this is the best route for the prefix clusters list of cluster IDs through which the route has been advertised communities community number associated with the route extended-communities extended community imported whether the route was imported intro introductory information about the state of various BGP attributes;
this information is displayed only if you specify this keyword
in-label MPLS label for the route; the label received with incoming
MPLS frames
loc-pref local preference for the route med multiexit discriminator for the route next-hop IP address of the next router that is used when forwarding a
packet to the destination network
out-label MPLS label for the route; the label with outgoing MPLS
frames
peer IP address of BGP peer from which route was learned peer-type type of BGP peer: internal, external, or confederation origin origin of the route
119
rd route distinguisher safi subsequent address family identifier unknown-types attribute codes for unknown path attributes weight weight of the route * indicates that one or more parameters can be repeated multiple
times in a list in the command line Mode(s): Router Configuration
120
default-information originate
default-information originate
Description: Enables BGP to advertise a default route (0.0.0.0/0) if the default route exists in the IP routing table. If the default route does not exist, you must configure it using the ip route command. For IS-IS, OSPF, and RIP, configures a default route for the distribution of default information into the respective routing domain. IS-IS creates the default route (0.0.0.0/0) if it does not exist in the IP routing table. OSPF and RIP do not create the default route unless you use the always option. For all protocols, the no version disables advertisement of the default route. The syntax varies with the protocol. For BGP: [ no ] default-information originate For IS-IS: [ no ] default-information originate [ route-map mapTag ] For RIP: [ no ] default-information originate [ always | route-map mapTag ] For OSPF: [ no ] default-information originate [ always | metric metricValue | metric-type 1 | metric-type 2 | route-map mapTag ]* Mode(s): mapTag name of route map used to import the default route; string of up to 32 characters always creates the default route, so that it is always advertised metricValue sets the metric for the default route; a value ranging from 04294967295 metric-type 1 sets the default routes metric type to OSPF external type 1 metric-type 2 sets the default routes metric type to OSPF external type 2 * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
121
default-metric
Description: Syntax: Configures RIP to use this metric when advertising routes on all subsequently created interfaces. The no version restores the default value, 0. [ no ] default-metric metricValue [ interfaceType interfaceSpecifier ] Mode(s): metricValue metric to apply to routes, a value ranging from 116 interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Router Configuration
default-router
Description: Specifies the IP address of the router that the subscribers computer will use for traffic destined for locations beyond the local subnet. The no version removes the association between the address pool and the router. default-router ipAddressPrimary [ ipAddressSecondary ] no default-router Mode(s): ipAddressPrimary IP address of preferred router ipAddressSecondary IP address of secondary router
Syntax:
Pool Configuration
delete
Description: Syntax: Deletes a directory or file in nonvolatile storage. There is no no version. delete filename | directory directoryName [ force ] Mode(s): filename name of the local file you are deleting (for example, system1.cnf) directoryName path of a directory force forces deletion of directory even if it is not empty
122
deny
deny
Description: Syntax: Specifies the domain name(s) that are to be denied access to AAA authentication. The no version negates the command. [ no ] deny domainName Mode(s): domainName name of the domain; maximum of 64 characters
description
Description: In Interface Configuration mode, adds a text description to an IP interface. In VRF Configuration mode, adds a text description to the VRF. The no version removes the description from the interface or VRF. description name no description Mode(s): name string of up to 256 characters in Interface Configuration mode; string of up to 80 characters in VRF Configuration mode
Syntax:
dir
Description: Syntax: Displays information about the files in nonvolatile storage, including name, size, date created, and whether they are in use. There is no no version. dir [ path ] [ short ] Mode(s): path path to a specific directory short limits display to file name and creation date
123
disable
Description: When used from Privileged Exec mode, exits Privileged Exec mode and returns to User Exec mode. When used from Router Configuration or Interface Configuration mode in the context of a DVMRP configuration, disables DVMRP on the virtual router or interface. The no version reenables DVMRP on the virtual router or interface. When used from Router Configuration mode in the context of a RIP configuration, disables RIP on the virtual router. The no version enables RIP processing on the virtual router. To return to User Exec mode: disable [ level ] level one of the following privilege levels; the default is 10
Syntax:
0 allows the user to execute the help, enable, disable, and exit
commands
5 allows the user to execute Privileged Exec show commands plus the
commands at levels 1 and 0
disable-autosync
Description: Halts automatic synchronization between the primary and standby SRP modules. The no version restores the default situation, in which automatic synchronization runs as a background process every 5 minutes. [ no ] disable-autosync Global Configuration
Syntax: Mode(s):
124
disable-dynamic-redistribute
disable-dynamic-redistribute
Description: Halts the dynamic redistribution of routes that are initiated by changes to a route map. Supported by DVMRP, BGP, IS-IS, OSPF, and RIP. The no version reenables dynamic redistribution of routes. [ no ] disable-dynamic-redistribute Address Family Configuration, Router Configuration
Syntax: Mode(s):
disable-switch-on-error
Description: Prevents the redundant SRP module from taking over if the primary SRP module experiences a software failure or if you push the reset button on the primary SRP module. Issue the sync command immediately before you issue this command. The no version restores the default situation, in which the redundant SRP module takes over if the primary SRP module experiences a failure. [ no ] disable-switch-on-error Global Configuration
Syntax: Mode(s):
disconnect ssh
Description: Terminates an active SSH session. Use the show ip ssh command to determine the session identifier for the session to terminate. There is no no version. disconnect ssh { vty vtyId | sessionId } Mode(s): vtyId virtual terminal identifier for VTY where the SSH session resides; use the show users command to determine the identifier sessionId identifier for the session to be terminated
Syntax:
Privileged Exec
125
distance
Description: Defines an administrative distance for RIP or OSPF routes. A distance of 255 prevents the route from being installed in the routing table. The no version either negates a command or restores the commands defaults. The options available vary depending on your routing protocol context; that is, on whether you are configuring OSPF or RIP. OSPF: [ no ] distance { weight | ospf { external distExt | inter-area disInter | intra-area disIntra } [ external distExt | inter-area distInter | intra-area distIntra ]* } distance weight applied to OSPF routes weight value assigned to OSPF routes that are added to the IP routing table; a number in the range 1255 ospf OSPF routes distExt distance for external type 5 and type 7 routes; a number in the range 1255 disInter distance for interarea routes; a number in the range 1255 disIntra distance for intra-area routes; a number in the range 1255 * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
RIP: [ no ] distance weight Mode(s): weight administrative distance assigned to RIP routes added to the IP routing table in the range 0255; the default is 120
Router Configuration
126
distance bgp
distance bgp
Description: Sets the administrative distances for BGP routes. A distance of 255 prevents the route from being installed in the routing table. The no version restores the default values. distance bgp externalDistance internalDistance localDistance no distance bgp [ externalDistance [ internalDistance [ localDistance ] ] ] Mode(s): externalDistance administrative distance for routes external to the AS in the range 1255; the default is 20 internalDistance administrative distance for routes internal to the AS in the range 1255; the default is 200 localDistance administrative distance for local (redistributed) routes in the range 1255; the default is 200
Syntax:
distance ip
Description: Sets the administrative distance for IS-IS routes that are inserted into the IP routing table. A distance of 255 prevents the route from being installed in the routing table. The no version restores the default value of 115. [ no ] distance weight ip Mode(s): weight administrative distance assigned to IS-IS routes added to the IP routing table in the range 1255
Syntax:
Router Configuration
distribute-domain-wide
Description: Increases the granularity of routing information within an IS-IS domain by allowing routes to be distributed from level 2 to level 1. This results in more accurate routing between level 1 areas. The no version disables command. [ no ] distribute-domain-wide Router Configuration
Syntax: Mode(s):
127
distribute-list
Description: Specifies the distribute list, an access list applied to incoming or outgoing RIP route updates. In Remote Neighbor Configuration mode, applies only to a RIP remote-neighbor interface. The no version removes the distribute list. An IP access list acts as a filter; refer to the access-list command for details. In Router Configuration mode: [ no ] distribute-list accessListNumber { in | out } [ interfaceType interfaceSpecifier ] In Remote Neighbor Configuration mode: [ no ] distribute-list accessListName { in | out } Mode(s): accessListName name of the access list in applies the access list to incoming route updates out applies the access list to outgoing route updates interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
dns-server
Description: Syntax: Assigns a DNS server to an address pool. The no version removes the association between the address pool and the DNS server. dns-server ipAddressPrimary [ ipAddressSecondary ] no dns-server Mode(s): ipAddressPrimary IP address of preferred DNS server ipAddressSecondary IP address of secondary DNS server
Pool Configuration
128
domain-authentication-key
domain-authentication-key
Description: Syntax: Assigns a password for authentication of IS-IS level 2 LSPs, CSNPs, and PSNPs. The no version deletes the password. domain-authentication-key [ 0 | 8 ] authKey no domain-authentication-key Mode(s): 0 the authKey is entered in unencrypted form (plaintext); this is the default option 8 the authKey is entered in encrypted form (ciphertext) authKey a password, a continuous string of characters up to 8 characters in length
Router Configuration
domain-id
Description: Syntax: Sets the OSPF domain ID for an OSPF VRF on a PE. The no version restores the default value. domain-id domainIdAddress | domainId no domain-id Mode(s): domainIdAddress OSPF domain ID in IP address format; default is the IP address of the OSPF router configured in the VRF domainId OSPF domain ID as an integer value in the range 04294967295; default is 0
Router Configuration
domain-message-digest-key
Description: Specifies an HMAC MD5 key that the system uses to create a secure, encrypted message digest of each IS-IS level 2 packet (LSPs, CSNPs, and PSNPs). The digest is inserted into the packet from which it is created. Using this algorithm for domain routers protects against unauthorized routers injecting false routing information into your network. You can specify when the system will start (default is the current time) and stop (default is never) accepting packets that include a digest made with this key. You can specify when the system will start (default is the current time plus 2 minutes) and stop (default is never) generating packets that include a digest made with this key. The no version deletes the key specified by the key-id. domain-message-digest-key keyId hmac-md5 [ 0 | 8 ] key [ start-accept startAcceptTime [ { startAcceptMonth startAcceptDay | startAcceptDay startAcceptMonth } startAcceptYear ] ] [ start-generate startGenTime [ { startGenMonth startGenDay | startGenDay startGenMonth } startGenYear ] ]
Syntax:
129
[ stop-accept { never | stopAcceptTime [ { stopAcceptMonth stopAcceptDay | stopAcceptDay stopAcceptMonth } stopAcceptYear ] } ] [ stop-generate { never | stopGenTime [ { stopGenMonth stopGenDay | stopGenDay stopGenMonth } stopGenYear ] } ] no domain-message-digest-key keyId keyId integer from 1 to 255 that is a unique identifier for the secret key, sent with the message digest in the packet. 0 the key is entered in unencrypted form (plaintext); this is the default option 8 the key is entered in encrypted form (ciphertext) key string of up to 20 alphanumeric characters; secret key used by the HMAC MD5 algorithm to generate the message digest. startAcceptTime, startAcceptMonth, startAcceptDay, startAcceptYear time, month, day, year that the system will start accepting packets created with this password. Use military time format HH:MM[ :SS ]. startGenTime, startGenMonth, startGenDay, startGenYear time, month, day, year that the system will start inserting this password into packets. Use military time format HH:MM[ :SS ]. never the system never stops accepting or generating packets; overrides previously specified stop times. stopAcceptTime, stopAcceptMonth, stopAcceptDay, stopAcceptYear time, month, day, year that the system will stop accepting packets created with this password. Use military time format HH:MM[ :SS ]. stopGenTime, stopGenMonth, stopGenDay, stopGenYear time, month, day, year that the system will stop inserting this password into packets. Use military time format HH:MM[ :SS ].
Mode(s):
Router Configuration
domain-name
Description: Specifies a domain name that can be returned to the subscriber of an address pool if requested. The no version removes the association between the address pool and the domain name. domain-name domainName no domain-name Mode(s): domainName name of the domain
Syntax:
Pool Configuration
130
domain-tag
domain-tag
Description: Syntax: Sets the VPN route tag for an OSPF VRF on a PE to prevent routing loops back into the VPN. The no version restores the default value. domain-tag routeTag no domain-tag Mode(s): routeTag number identifying the VPN route tag in the range 04294967295
Router Configuration
ds3-scramble
Description: Enables scrambling of the ATM cell payload on a T3 interface. DS3 scrambling assists clock recovery on the receiving end of the interface.The no version disables cell scrambling. [ no ] ds3-scramble Controller Configuration
Syntax: Mode(s):
dsr-detect
Description: Requires that a DSR signal be detected on the line for a user to log into the console. DSR is carried on pin 6 of the SRP modules RS-232 (DB-9) connector. The DSR input must be connected to the DSR output of a modem or the DTR output of another DTE device, such as a terminal server, that supports this signal. If a session is in progress and the DSR signal is lost, the user is logged out automatically. The no version restores the default of no DSR required. [ no ] dsr-detect Privileged Exec
Syntax: Mode(s):
131
dsu bandwidth
Description: Sets the speed for the fractional T3 lines. The no version clears the bandwidth. If you issue this command, be sure to issue the dsu mode and scramble commands. Similarly, if you issue the no version, be sure to issue the no dsu mode and no scramble commands; otherwise, the interface may drop packets unexpectedly. dsu bandwidth bandwidthValue no dsu bandwidth bandwidth sets a fractional bandwidth bandwidthValue value of the fractional bandwidth in the range 2244210 Kbps. The system offers a set of speeds in increments that depend on the DSU mode you specify. The actual speed of the fractional T3 lines will be the value closest to the fractional bandwidth you specify.
Syntax:
Mode(s):
Controller Configuration
dsu mode
Description: Sets the DSU mode for the lines. The no version clears the dsu mode. If you issue this command, be sure to issue the dsu bandwidth and scramble commands. Similarly, if you issue the no version, be sure to issue the no dsu bandwidth and no scramble commands; otherwise, the interface may drop packets unexpectedly. dsu mode 0 | 2 no dsu mode Mode(s): 0 Digital Link mode 2 Larscom mode
Syntax:
Controller Configuration
132
duplex
duplex
Description: Specifies the duplex mode for an Ethernet interface. The no version specifies the default value, automatically negotiate. This command works in conjunction with the speed command; if you set or accept the automatically negotiate setting for either duplex mode or speed, the system negotiates both parameters with the remote device. This command is not available for the Ethernet interface on the SRP module. duplex duplexMode no duplex duplexMode one of the following the duplex options
Syntax:
full specifies that the system uses full duplex on an FE or GE interface half specifies that the system uses half duplex on an FE interface; this
value is not valid for GE interfaces Mode(s): Interface Configuration
133
e3-scramble
Description: Enables scrambling of the ATM cell payload on an E3 interface. E3 scrambling assists clock recovery on the receiving end of the interface.The no version disables scrambling. [ no ] e3-scramble Controller Configuration
Syntax: Mode(s):
enable
Description: Syntax: Enters Privileged Exec mode at the specified privilege level. There is no no version. enable [ level ] level one of the following privilege levels; the default is 10
0 allows the user to execute the help, enable, disable, and exit
commands
5 allows the user to execute Privileged Exec show commands plus the
commands at levels 1 and 0
134
enable password
enable password
Description: Syntax: Sets a password to control access to certain types of commands. The no version removes the password requirement. enable password [ level securityLevel ] [ passwordType ] passwordText no enable password [ level securityLevel ] securityLevel the security level for which you want to set the password; the default is 5
0 allows the user to execute the help, enable, disable, and exit
commands
0 specifies that an unencrypted password follows; this is the default 7 specifies that an encrypted password follows
passwordText password, either encrypted or unencrypted, depending on the password type
Note: On your system, all passwords are stored as encrypted passwords. Mode(s): Global Configuration
135
enable secret
Description: Syntax: Sets a secret to control access to certain types of commands. The no version removes the secret requirement. enable secret [ level securityLevel ] [ secretType ] secretText no enable secret [ securityLevel ] securityLevel the security level for which you want to set the secret; the default is 5
0 allows the user to execute the help, enable, disable, and exit
commands
0 specifies that an unencrypted secret follows; this is the default 7 specifies that an encrypted secret follows
secretText secret, either encrypted or unencrypted, depending on the secret type
Note: On your system, all secrets are stored as encrypted secrets. Mode(s): Global Configuration
encapsulation bridge1483
Description: Configures bridged Ethernet as the encapsulation method on an interface. The no version removes bridged Ethernet as the encapsulation method on the interface. [ no ] encapsulation bridge1483 Interface Configuration, Subinterface Configuration
Syntax: Mode(s):
136
encapsulation hdlc
encapsulation hdlc
Description: Syntax: Mode(s): Enables Cisco HDLC encapsulation. The no version disables Cisco HDLC on an interface. [ no ] encapsulation hdlc Interface Configuration, Subinterface Configuration
encapsulation ietf
Description: Enables Frame Relay or Multilink Frame Relay encapsulation. The no version removes Frame Relay or Multilink Frame Relay configuration from an interface. encapsulation { frame-relay | mlframe-relay } ietf no encapsulation { frame-relay | mlframe-relay } Mode(s): Interface Configuration
Syntax:
encapsulation mlppp
Description: Configures MLPPP as the encapsulation method on an individual interface. Creates an MLPPP link interface, also known as an MLPPP bundle member. The no version disables MLPPP on an interface. [ no ] encapsulation mlppp Interface Configuration, Subinterface Configuration
Syntax: Mode(s):
encapsulation ppp
Description: Syntax: Mode(s): Configures PPP as the encapsulation method for the interface. The no version disables PPP on an interface. [ no ] encapsulation ppp Interface Configuration, Subinterface Configuration
encapsulation pppoe
Description: Syntax: Configures PPPoE as the encapsulation method for the interface. The no version disables PPPoE on an interface. [ no ] encapsulation pppoe Mode(s): encapsulation configure pppoe encapsulation
137
encapsulation smds-trunk
Description: Configures SMDS trunk as the encapsulation method for the interface. SMDS trunk encapsulation allows SMDS traffic to be sent over a GRE tunnel or a HSSI interface. The no version disables SMDS trunk encapsulation on an interface. [ no ] encapsulation smds-trunk Interface Configuration
Syntax: Mode(s):
encapsulation vlan
Description: Syntax: Mode(s): Configures VLAN as the encapsulation method for the interface. The no version disables VLAN on an interface. [ no ] encapsulation vlan Interface Configuration, Subinterface Configuration
encryption
Description: Syntax: Sets the encryption algorithm to use in the IKE policy. The no version restores the default, 3DES. encryption des | 3des no encryption Mode(s): des specifies 56-bit DES-CBC as the encryption algorithm 3des specifies 168-bit 3DES-CBC as the encryption algorithm
end
Description: Syntax: Mode(s): Exits Global Configuration mode or any of the Configuration submodes and returns to the User Exec mode. There is no no version. end Global Configuration
138
erase secrets
erase secrets
Description: Removes all CLI passwords or secrets. Execute before pressing the NMI button on the SRP module. There is no no version. Note: If you enter the service unattended password-recovery command, the behavior of the erase secrets command changes. The erase secrets command will not take any parameters and will not be available through a vty session until you enter no service unattended password-recovery. Syntax: erase secrets seconds Mode(s): seconds number of seconds in the range 160 to allow for the operation
User Exec
ethernet description
Description: Syntax: Adds a text description to a non-SRP Fast Ethernet or Gigabit Ethernet interface. The no version removes the description from the interface. ethernet description name no ethernet description Mode(s): name string of up to 15 characters
Interface Configuration
exceeded-action
Description: Sets the action for packets not conforming to the committed rate and committed burst size, and not conforming to the peak rate and peak burst size. The no version restores the default value, drop. [ no ] exceeded-action { drop | transmit | mark markVal } Mode(s): drop drop the packet transmit transmit the packet markVal mark value for the packet in the range 0255
Syntax:
139
exceeded-fraction
Description: Sets the percentage of the total queue length that can be occupied before dropping exceeded packets. The no version returns the exceeded fraction to its default setting. exceeded-fraction exceededFraction no exceeded-fraction Mode(s): exceededFraction percentage range 0100; default is 25
Syntax:
exceeded-length
Description: Syntax: Sets minimum and maximum constraints for the queues exceeded lengths. The no version removes constraints on the queues exceeded length. exceeded-length minimumExceededLength [ maximumExceededLength ] no exceeded-length Mode(s): minimumExceededLength range 01073741824 maximumExceededLength range 01073741824
exception dump
Description: Syntax: Specifies the location from and to which the system should transfer a core dump file. The no version disables the command. exception dump { except-srp | srp-only } { local | ipAddress [ directoryName ] } no exception dump Mode(s): except-srp generates core dump for all non-SRP modules srp-only generates core dump for only the SRP modules local nonvolatile storage memory ipAddress IP address of the server to which the system will transfer the core dump file directoryName name of the directory on the server to which the system will transfer the core dump file
Global Configuration
140
exception gateway
exception gateway
Description: Syntax: Specifies the gateway through which the system sends the core dump file to the remote FTP server. There is no no version. exception gateway ipAddress Mode(s): ipAddress IP address of the gateway
Global Configuration
Global Configuration
exception source
Description: Specifies the IP address and mask of the system interface over which you want to send the core dump file to the remote FTP server. There is no no version. exception source ipAddress ipAddressMask Mode(s): ipAddress IP address of the interface ipAddressMask optionally add the IP address mask of the interface
Syntax:
Global Configuration
141
excess-burst
Description: Syntax: Sets amount of bandwidth allocated to accommodate a packet in progress when the rate is in excess of the burst. [ no ] excess-burst [ size ] Mode(s): size the amount of bandwidth allocated; in the range 04294967295
exclude-subsystem
Description: Excludes subsystem files from being copied when you copy a software release to the system. The no version removes the exclusion for a specified subsystem file or all subsystem files. exclude-subsystem subsystemName no exclude-subsystem [ subsystemName ] Mode(s): subsystemName name of the subsystem file to be excluded
Syntax:
Global Configuration
exec-banner
Description: Controls display of an exec banner (configured with the banner command) on a particular line after user authentication (if any) and before the first prompt of a CLI session. The no version disables the banner. [ no ] exec-banner Line Configuration
Syntax: Mode(s):
exec-timeout
Description: Syntax: Sets the time interval that the console or vty line waits for expected user input. The no version restores the default value, which is no time limit. exec-timeout minutes [ seconds ] no exec-timeout Mode(s): minutes number of minutes for the time limit seconds number of seconds in addition to the minutes for the time limit
Line Configuration
142
exit
exit
Description: Syntax: Mode(s): Exits the current command mode. There is no no version. exit All modes
exit-address-family
Description: Syntax: Mode(s): Exits from Address Family Configuration mode and returns to Router Configuration mode. There is no no version. exit-address-family Address Family Configuration
exit-remote-neighbor
Description: Syntax: Mode(s): Exits from Remote Neighbor Configuration mode and returns to Router Configuration mode. There is no no version. exit-remote-neighbor Remote Neighbor Configuration
export map
Description: Syntax: Associates a route map with a VRF to filter routes exported by the VRF. The no version disables the application of the route map to exported routes. [ no ] export map routeMap Mode(s): routeMap name of a route map
VRF Configuration
fabric-strict-priority
Description: Syntax: Mode(s): Specifies strict priority scheduling for queues in the traffic class in the fabric. The no version deletes the strict priority setting. [ no ] fabric-strict-priority Traffic Class Configuration
143
fabric-weight
Description: Syntax: Specifies the relative weight for queues in the traffic class in the fabric. The no version sets the fabric weight to the default value. fabric-weight weight no fabric-weight Mode(s): weight range 163; default is 8
fdl
Description: Syntax: Specifies the facility data link standard used by a CT1 interface. The no version restores the default, none. fdl { ansi | att | all | none } no fdl [ ansi | att | all ] Mode(s): ansi specifies ANSI T1.403 Standard for extended superframe FDL exchange support att specifies AT&T Technical Reference 54016 for extended superframe FDL exchange support all specifies both the AT&T and ANSI mode for extended superframe FDL exchange support none removes the current FDL mode settings
Controller Configuration
fdl carrier
Description: Specifies that an CT1 interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment. [ no ] fdl carrier Controller Configuration
Syntax: Mode(s):
144
fdl string
fdl string
Description: Defines an FDL message on a T1 interface as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages. fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue | generator generatorValue } no fdl string { eic | fic | lic | unit | pfi | port | generator } Mode(s): eicValue equipment identification code; 110 characters; default is the null value licValue line identification code; 110 characters; default is the null value ficValue frame identification code; 110 characters; default is the null value unitValue unit identification code; 16 characters; default is the null value. pfiValue facility identification code to send in the FDL path message; 138 characters; default is the null value. portValue equipment port number to send in the FDL idle signal message; 138 characters; default is the null value. generatorValue generator number to send in the FDL test signal message; 138 characters; default is the null value.
Syntax:
Controller Configuration
fdl transmit
Description: Configures the system to send the specified type of FDL message on the T1 interface. The no version stops the system from sending the specified type of FDL message or all FDL messages. [ no ] fdl transmit { path-id | idle-sIgnal | test-signal } no fdl transmit Mode(s): path-id transmits a path identification message every second idle-sIgnal transmits an idle signal every 10 seconds test-signal transmits a test signal every 10 seconds
Syntax:
Controller Configuration
145
filter
Description: Defines a policy rule that drops all packets conforming to the specified classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with this policy list for this rule. Use the suspend keyword to suspend a filter rule temporarily. The no version removes the rule from the policy list. [ no ] [ suspend ] filter [ classifier-group claclName ] [ precedence precValue ] Mode(s): suspend suspend the policy rule claclName classifier control list used to classify packets for this filter policy precValue precedence of this rule in relation to other rules within this set
Syntax:
Policy Configuration
flash-disk duplicate
Description: Syntax: Mode(s): Copies the contents of NVS on the primary SRP module to another NVS card. There is no no version. flash-disk duplicate Boot To access the Boot mode from the local console:
1 2 At the Privileged Exec prompt, type the reload command. Information on the reloading process appears. When the countdown begins, press the <M+B> key combination.
This puts the CLI in Boot mode (:boot## prompt). If you do not press the <M+B> key combination, the reloading process continues and returns the CLI to the normal User Exec mode.
flash-disk initialize
Description: Syntax: Performs a low-level format of NVS. There is no no version. flash-disk initialize [ no-format ] Mode(s): no-format erases all files but does not format NVS
This puts the CLI in Boot mode (:boot## prompt). If you do not press the <M+B> key combination, the reloading process continues and returns the CLI to the normal User Exec mode.
146
flash-disk scan
flash-disk scan
Description: Scans NVS on the primary SRP module to detect corrupt sectors, deletes files and directories that contain corrupt sectors, fixes errors associated with unused sectors. There is no no version. flash-disk scan [ repair ] Boot To access the Boot mode from the local console:
1 2 At the Privileged Exec prompt, type the reload command. Information on the reloading process appears. When the countdown begins, press the <M+B> key combination.
Syntax: Mode(s):
This puts the CLI in Boot mode (:boot## prompt). If you do not press the <M+B> key combination, the reloading process continues and returns the CLI to the normal User Exec mode.
forward
Description: Defines a rule that forwards all packets conforming to the specified classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with this policy list for this rule. Use the suspend keyword to suspend a forward rule temporarily. The no version removes the rule from the policy list. [ no ] [ suspend ] forward [ classifier-group claclName ] [ precedence precValue ] Mode(s): suspend suspend a policy rule claclName classifier control list used to classify packets for this filter policy precValue precedence of this rule in relation to other rules within this set
Syntax:
Policy Configuration
frame-relay class
Description: Syntax: Associates a map class with a subinterface. The no version removes the association between the map class and the subinterface. [ no ] frame-relay class mapName Mode(s): mapName name of the map class; use up to 64 characters
Subinterface Configuration
147
frame-relay description
Description: Syntax: Assigns a text description or alias to a Frame Relay major interface or subinterface. The no version removes the description or alias. frame-relay description name no frame-relay description Mode(s): name text description or alias for the Frame Relay interface or subinterface; up to 64 characters
frame-relay fragment
Description: Configures fragmentation and reassembly for the map class created with the map-class frame-relay command. The no version stops fragmentation and/or reassembly on the subinterface. frame-relay fragment [ [ fragmentSize ] [ fragmentation-only ] | reassembly-only ] no frame-relay fragment Mode(s): fragmentSize maximum payload size of a fragment in bytes; a number in the range 168188; default value is 52 fragmentation-only specifies fragmentation only reassembly-only specifies reassembly only
Syntax:
Syntax:
Subinterface Configuration
148
frame-relay intf-type
frame-relay intf-type
Description: Syntax: Configures a Frame Relay interface type. The no version restores the default value, DTE. frame-relay intf-type type no frame-relay intf-type type one of the following interface types:
dce router is connected to user DTE equipment dte router is connected to a Frame Relay network; the default nni router connects two Frame Relay networks
Mode(s): Interface Configuration
frame-relay keepalive
Description: Enables the LMI mechanism for serial lines using Frame Relay encapsulation. The no version disables this capability. The keepalive command is similar to the frame-relay lmi-t391dte command. frame-relay keepalive [ seconds ] no frame-relay keepalive seconds number in the range 530; default is 10 seconds; defines the keepalive interval; the interval must be set, and the value on the DTE should be less than the value set on the DCE
Syntax:
Mode(s):
Interface Configuration
frame-relay lmi-n391dte
Description: Syntax: Sets the full-status polling counter (N391) on a DTE interface. The no version restores the default value, assuming an LMI has been configured. frame-relay lmi-n391dte keepExchanges no frame-relay lmi-n391dte keepExchanges number in the range 1 255; default is 6; number of keep exchanges to be done before requesting a full-status message. If you specify a value of 1, you receive full-status messages only.
Mode(s):
Interface Configuration
149
frame-relay lmi-n392dce
Description: Syntax: Sets the error threshold counter (N392) on a DCE interface. The no version removes current setting and sets the default. frame-relay lmi-n392dce threshold no frame-relay lmi-n392dce Mode(s): threshold positive number in the range 1 10; number of errors that will place the interface in an operationally down state; the default is 2 errors
Interface Configuration
frame-relay lmi-n392dte
Description: Syntax: Sets the error threshold counter (N392) on a DTE interface. The no version removes current setting and sets the default. frame-relay lmi-n392dte threshold no frame-relay lmi-n392dte Mode(s): threshold positive number in the range 110; number of errors that will place the interface in an operationally down state; the default is 3 errors
Interface Configuration
frame-relay lmi-n393dce
Description: Syntax: Sets the monitored events count (N393) on a DCE interface. The no version removes current setting and sets the default. frame-relay lmi-n393dce events no frame-relay lmi-n393dce events number in the range 110 events; specifies the diagnostic window used to verify link integrity; the default is 2 events (The detection of N392 errors within the window of N393 samples places the interface in an operationally down state.)
Mode(s):
Interface Configuration
150
frame-relay lmi-n393dte
frame-relay lmi-n393dte
Description: Syntax: Sets the monitored event count (N393) on a DTE interface. The no version removes current setting and sets the default. frame-relay lmi-n393dte events no frame-relay lmi-n393dte events number in the range 110 events; the default is 4 events; specifies the diagnostic window used to verify link integrity (The detection of N392 errors within the window of N393 samples places the interface in an operationally down state)
Mode(s):
Interface Configuration
frame-relay lmi-t391dte
Description: Syntax: Sets the link integrity verification polling timer (T391) on a DTE interface. The no version removes the current setting and sets the default. frame-relay lmi-t391dte seconds no frame-relay lmi-t391dte seconds number in the range 530 seconds; specifies the interval in seconds between status inquiries issued by the DTE; the default is 10 seconds
Mode(s):
Interface Configuration
frame-relay lmi-t392dce
Description: Syntax: Sets the polling verification timer (T392) on a DCE interface. The no version removes current setting and sets the default. frame-relay lmi-t392dce seconds no frame-relay lmi-t392dce seconds number in the range 530 seconds; specifies the expected interval in seconds between status inquiries issued by the DTE equipment; the default is 15 seconds
Mode(s):
Interface Configuration
151
frame-relay lmi-type
Description: Syntax: Selects the LMI type. The no version restores the default value. frame-relay lmi-type type no frame-relay lmi-type type one of the following types:
ansi ANSI T1.617 Annex D cisco original Group of Four specification developed by DEC, Northern
Telecom, Stratacom, and Cisco
152
framing
framing
Description: Specifies the framing mode used by a CE1, CT1, E3, or T3 interfaces. Available modes vary by the type of interface. The no version restores the default for that interface. framing framingType no framing framingType one of the following framing types: CE1 module
Syntax:
esf default; extended superframe; sets the HDLC idle code to 0x7E sf superframe; sets the HDLC idle code to 0xFF
E3-FRAME module
g751adm G.751 ATM direct mapping g751plcp default; G.751 PLCP mapping g832adm G.832 ATM direct mapping
T3 module
c-bit default; specifies c-bit parity framing m23 specifies M23 multiplexer framing
Mode(s): Controller Configuration
frequency
Description: Syntax: Sets the time interval between RTR operations. The no version restores the default value. frequency frequencyValue no frequency Mode(s): frequencyValue number of seconds between RTR operations; for both types (echo and pathEcho), the default is 60 seconds
RTR Configuration
153
ftp-server enable
Description: Enables the FTP server and monitors the FTP port for attempts to connect to the FTP server. The no version terminates the current FTP sessions and disables the FTP server. [ no ] ftp-server enable Global Configuration
Syntax: Mode(s):
group
Description: From QoS Profile Configuration mode, specifies that a group scheduler node be configured for each interface of the given interface type. The no version removes this rule from the QoS profile. From ISAKMP Policy Configuration mode, assigns a Diffie-Hellman group to the IKE policy. The no version restores the default, 1024-bit Diffie-Hellman group. To specify a group scheduler node for QoS: [ no ] interfaceType group groupName scheduler-profile schedulerProfileName interfaceType one of the following interface types for which groups should be configured: atm, ethernet, serial, server-port groupName name of the traffic class group schedulerProfileName name of the scheduler profile
Syntax:
To Specify a Diffie-Hellman group: group { 1 | 2 | 5 } no group Mode(s): 1 specifies the 768-bit group 2 specifies the 1024-bit group 5 specifies the 1536-bit group
154
halt
halt
Description: Stops operation on both SRP modules or on the specified SRP module. There is no no version.
Caution: To prevent corruption of NVS, issue this command before you remove or power down an SRP module. Syntax: The syntax of the command depends on whether you enter it in Boot mode or Privileged Exec mode. Boot Mode: halt Privileged Exec Mode: halt [ force | primary [ force ] | standby [ force ] ] force prompts the user to confirm that the system should stop operation if the SRP modules are in certain states, such as writing configuration data to NVS, that could lead to loss of configuration data or corruption of NVS. primary stop operation on primary SRP module only standby stop operation on standby SRP module only
Mode(s):
Boot, Privileged Exec To access the Boot mode from the local console:
1 2 At the Privileged Exec prompt, type the reload command. Information on the reloading process appears. When the countdown begins, press the <M+B> key combination.
This puts the CLI in Boot mode (:boot## prompt). If you do not press the <M+B> key combination, the reloading process continues and returns the CLI to the normal User Exec mode.
hash
Description: Syntax: Sets the hash algorithm in an IKE policy. The no version restores the default, SHA-1. hash sha | md5 no hash Mode(s): sha specifies SHA-1 (HMAC variant) as the hash algorithm md5 specifies MD5 (HMAC variant) as the hash algorithm
155
hdlc down-when-looped
Description: Syntax: Mode(s): Enables loopback detection on a Cisco HDLC interface. Loopback detection is disabled by default. The no version disables loopback detection. [ no ] hdlc down-when-looped Interface Configuration, Subinterface Configuration
hdlc keepalive
Description: Syntax: Specifies a keepalive value. The keepalive mechanism tracks the health of the connection. The no version turns off the keepalive feature. hdlc keepalive [ seconds ] no hdlc keepalive Mode(s): seconds keepalive timeout period in the range 06553 seconds. The default is 10. A value of zero (0) turns off the keepalive feature.
hdlc shutdown
Description: Syntax: Mode(s): Stops or restarts a Cisco HDLC session. The no version restarts a Cisco HDLC session. [ no ] hdlc shutdown Interface Configuration, Subinterface Configuration
hello hold-time
Description: Configures the MPLS hold time, the period that a sending LSR maintains a record of hello messages from the receiving LSR without receipt of another hello from that LSR. The no version restores the default value of 0. hello hold-time holdTime no hello hold-time holdTime a number in the range 065535; a value of 0 indicates 15 seconds for link hellos and 45 seconds for targeted hellos; a value of 65535 indicates an infinite hold time
Syntax:
Mode(s):
156
hello-interval
hello-interval
Description: Syntax: Specifies the interval between hello packets that the router sends on the OSPF remote-neighbor interface. The no version restores the default value. hello-interval helloInterval no hello-interval Mode(s): helloInterval a number in the range 165535 seconds; default value is 10 seconds
help
Description: Syntax: Mode(s): Displays basic information on the Help system. There is no no version. help All modes
hops-of-statistics-kept
Description: Syntax: Sets the number of hops to keep statistics for an entry. The no version restores the default value. hops-of-statistics-kept [ hopsKeptValue ] no hops-of-statistics-kept hopsKeptValue number of hops for which statistics are collected for a particular pathEcho type; the default is 16 for a pathEcho entry and 1 for an echo entry; if you omit this option, all hops found are recorded
Note: The only types your system supports are the pathEcho and the echo. Mode(s): RTR Configuration
157
host
Description: Syntax: Adds or modifies an entry to the host table. The no version removes the specified host. host hostname ipAddress [ ftp [ [ algorithmType ] userName [ [ algorithmType ] password ] ] ] no host hostname hostname hostname to add or modify; up to 20 characters ipAddress IP address of the host ftp specifies that the host is an FTP server algorithmType type of username or password
Global Configuration
hostname
Description: Sets the name for the system in Global Configuration mode; this hostname subsequently appears in the system CLI prompt. The no version removes the hostname from the system. Note: In Domain Map Tunnel Configuration mode, this command has been deprecated in favor of the client-name command. See the client-name command. Syntax: hostname hostname no hostname Mode(s): hostname string of up to 64 characters (no spaces)
158
hssi force-dte-acknowledge
hssi force-dte-acknowledge
Description: Provides compatibility with DCE devices that wait for the DTE side to set the acknowledge bit first. Issue this command if the HSSI interface is configured as DTE, both sides of the connection are correctly configured, and the link does not come up. The no version prevents the HSSI interface from sending acknowledgment signals when in DTE mode. [ no ] hssi force-dte-acknowledge Interface Configuration
Syntax: Mode(s):
hssi internal-clock
Description: Syntax: Mode(s): Enable the internal clock for DCE mode on a HSSI interface. The no version disables the internal clock for DCE mode on a HSSI interface. [ no ] hssi internal-clock Interface Configuration
159
identification
Description: Specifies the assignment ID of an L2TP or L2F tunnel in Domain Map Tunnel Configuration mode. The no version removes the assignment ID from the tunnel. identification serverId no identification Mode(s): serverId L2TP or L2F tunnel assignment ID up to 32 characters
Syntax:
igmp disable
Description: Syntax: Mode(s): Disables IGMP on a virtual router.The no version reenables IGMP on a virtual router. [ no ] igmp disable Router Configuration
igmp promiscuous
Description: Allows all IGMP interfaces on the router to accept IGMP reports from hosts on any subnet. The no version allows IGMP interfaces on the router to accept IGMP reports only from hosts on their associated subnets. [ no ] igmp promiscuous Router Configuration
Syntax: Mode(s):
ignore dcd
Description: Prevents the system from using the DTD signal when determining whether the interface is working, if an interface is configured as a V.35 DTE. The no version allows the system to use the DTD signal when determining whether the interface is working. [ no ] ignore dcd Interface Configuration
Syntax: Mode(s):
160
ignore link-state-signals
ignore link-state-signals
Description: Prevents the system from using any link state signal when determining whether a V.35/X.21 interface is working. The no version allows the system to use the link state signals when determining whether the interface is working. [ no ] ignore link-state-signals Interface Configuration
Syntax: Mode(s):
ignore-lsp-errors
Description: Allows the router to ignore IS-IS link state packets that are received with internal checksum errors rather than purging the link state packets. The no version disables this function. [ no ] ignore-lsp-errors Router Configuration
Syntax: Mode(s):
import map
Description: Syntax: Associates a route map with a VRF to filter routes received by the VRF. The no version disables the application of the route map to imported routes. [ no ] import map routeMap Mode(s): routeMap name of a route map
VRF Configuration
index
Description: Syntax: Sets a next hop at a particular index in the MPLS explicit path. The no version removes the next hop from the index. index indexNumber next-address ipAddress [ mask ipMask ] [ loose ] no index indexNumber index number of a node in an ordered set of abstract nodes, a value ranging from 1255 ipAddress address of the next hop ipMask [ not currently used] mask for the next adjacent address loose node is not necessarily directly connected (adjacent) to the previous node in the path. If loose is not configured, the configuration defaults to strict. Strict indicates that the node is directly connected to the previous node.
Mode(s):
161
interface
Description: Syntax: Configures an interface. The no version removes the subinterface or the logical interface. [ no ] interface interfaceType interfaceSpecifier [ extension ] interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. extension option that depend on the type of interface
Note: See the following entries for the syntax of each type of interface. Mode(s): Global Configuration
interface atm
Description: Syntax: Configures an ATM interface or subinterface type. The no version removes the interface or subinterface. [ no ] interface atm interfaceSpecifier [ multipoint | point-to-point ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. multipoint use to specify an NBMA subinterface point-to-point default; use to specify an ATM interface or subinterface
interface-event-disable
Description: Specifies that RIP does not purge the routing table on a RIP interface that has been brought down. The no version restores the default condition, wherein RIP does purge the routing table on an interface after a down event. [ no ] interface-event-disable Router Configuration
Syntax: Mode(s):
162
interface fastEthernet
interface fastEthernet
Description: Specifies a Fast Ethernet interface or subinterface or creates a subinterface over a Fast Ethernet interface. The no version removes the interface or subinterface. [ no ] interface fastEthernet interfaceSpecifier interfaceSpecifier location of the interface in the format slot/port [ .subinterface1 [ .subinterface2 ] ]
Syntax:
slot number of the chassis slot in the range 013 (ERX-1400 series)
and 06 (ERX-700 series)
163
interfaces without VLANs and you are running a software release earlier than 3.0.0 or if you are using scripts or macros created with such a release, you must use the alternative configuration method. Mode(s): Global Configuration
interface gigabitEthernet
Description: Specifies or creates a Gigabit Ethernet interface or a subinterface over a Gigabit Ethernet interface. The no version removes the interface or subinterface. [ no ] interface gigabitEthernet interfaceSpecifier interfaceSpecifier the location of the interface in the format slot/port [ .subinterface1 [ .subinterface2 ] ] For a list of interface types and their corresponding specifiers, see Interface Types and Specifiers in About This Guide. The meaning of the subinterface variables depends on the configuration context. You can configure Gigabit Ethernet interfaces with or without VLANS. VLANs
Syntax:
164
interface hssi
interface hssi
Description: Syntax: Selects a HSSI interface. The no version clears the configuration on the HSSI interface. [ no ] interface hssi interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Global Configuration
interface ip
Description: Syntax: Defines a shared IP interface. The no version removes the IP interface. [ no ] interface ip interfaceName Mode(s): interfaceName string of up to 15 characters
Global Configuration
interface loopback
Description: Syntax: Defines a loopback interface. The no version removes the loopback interface. [ no ] interface loopback interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Global Configuration
interface mlframe-relay
Description: Syntax: Defines an MFR bundle or a subinterface in a bundle. The no version removes the bundle or subinterface. [ no ] interface mlframe-relay interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Global Configuration
165
interface mlppp
Description: Syntax: Creates an MLPPP network interface, also known as the MLPPP bundle. The no version deletes the MLPPP bundle. [ no ] interface mlppp interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
interface null
Description: Syntax: Mode(s): Defines a null interface, which does not forward traffic. The no version removes the null interface. [ no ] interface null 0 Global Configuration
interface pos
Description: Syntax: Configures a Packet over SONET interface. The no version removes the interface. [ no ] interface pos interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Global Configuration
interface serial
Description: Syntax: Specifies the location of the serial interface on CE1/CT1, CT3, E3/T3 FRAME, cOCx/STMx, and X.21/V.35 modules. The no version disables the interface. [ no ] interface serial interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Global Configuration
166
interface tunnel
interface tunnel
Description: Creates a tunnel interface for use by DVMRP, GRE, MPLS, or IPSec. You can specify that the tunnel be established in the routing space of a virtual router other than the current VR. If you specify another VR, all tunnel commands apply to the tunnel in that VR. If you do not specify another VR, tunnel commands apply to the current VR. The no version removes the tunnel interface. [ no ] interface tunnel interfaceSpecifier [ transport-virtual-router vrName ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. vrName name of virtual router in which the tunnel will be established
Syntax:
Global Configuration
invert data
Description: Enables data stream inversion. Data stream inversion must be turned on by network personnel at the other end of the line. The no version disables data stream inversion. [ no ] invert data Interface Configuration
Syntax: Mode(s):
invert txclock
Description: Enables inversion of the transmit clock signal, to compensate for differences between the clock and data rate when data is travelling at fast speeds over long cables. Data stream inversion must be turned on by network personnel at the other end of the line. The no version disables inversion of the transmit clock signal. [ no ] invert txclock Interface Configuration
Syntax: Mode(s):
ip access-routes
Description: Enables the ability to create host access routes on a PPP interface, which is useful for the B-RAS application. It also enables an access route in a profile. The no version disables the feature. [ no ] ip access-routes Interface Configuration, Subinterface Configuration, Profile Configuration
Syntax: Mode(s):
167
ip address
Description: Sets a primary or secondary IP address for an interface or subinterface. The no version removes an IP address or disables IP processing. You must specify the layer 2 encapsulation before you can set the IP address. ip address ipAddress ipMask [ secondary ] no ip address [ ipAddress ipMask [ secondary ] ] Mode(s): ipAddress IP address in 32-bit dotted decimal format (for example, 192.56.32.2) ipMask mask for associated IP subnet secondary specifies that the configured address is a secondary IP address; if omitted, the configured address is the primary IP address
Syntax:
ip address-pool
Description: Syntax: Specifies to the system where to get an IP address for the remote user. The no version uses the default value, local. ip address pool { dhcp | local | none } no ip address pool Mode(s): dhcp enable the use of a DHCP server for address allocations local enable the use of local address pool for address allocations none do not enable an IP address pool
Global Configuration
ip alwaysup
Description: Forces the interface to appear as if it is up, regardless of the state of the lower layers. Use this command to reduce route topology changes when the network attached to this link is single-homed. The no version makes the interface appear in its current state. [ no ] ip alwaysup Interface Configuration, Subinterface Configuration
Syntax: Mode(s):
168
ip as-path access-list
ip as-path access-list
Description: Defines a BGP-related access list. You can specify an access list filter on both inbound and outbound BGP routes. Each filter is an access list based on regular expressions. If the regular expression matches the representation of the AS path of the route as an ASCII string, then the permit or deny condition applies. The AS path does not contain the local AS number. The no version removes a single access list entry if permit or deny and a pathExpression are specified. Otherwise, the entire access list is removed. ip as-path access-list accessListName { permit | deny } pathExpression no ip as-path access-list accessListName accessListName name of the access list; a string of up to 32 characters permit permits access for matching conditions deny denies access to matching conditions pathExpression the regular expression describing the AS paths to be matched Use a sequence of one or more elements, each of which is either an AS number or one of the following punctuation characters: ^ $ { } ( ) start of the path end of the path start of an AS_SET end of an AS_SET start of an AS_CONFED_SET or AS_CONFED_SEQ end of an AS_CONFED_SET or AS_CONFED_SEQ
Syntax:
Use the following regular expression metacharacters to match individual elements: . * + [] ^ _ matches any single element matches zero or more occurrences of any element matches one or more occurrences of any element matches any elements enclosed between brackets ([ ]) hyphen; used within brackets to specify a range of AS numbers matches any AS number except the ones specified when used as a first item within brackets underscore; used in non-ERX implementations on either side of a path to specify a literal and disallow substring matching. Allowed but not required in our CLI.
Mode(s):
Global Configuration
169
ip atm-vc
Description: Syntax: Associates a protocol and address to a specific virtual circuit. ip ipAddress atm-vc vcd broadcast no ip ipAddress atm-vc vcd Mode(s): ipAddress ip address to be associated with the virtual circuit vcd number in the range 14294967295; virtual circuit descriptor; an identifier for the VC in other commands broadcast specifies that the circuit should participate in broadcast operations
ip bgp-community new-format
Description: Specifies that communities must be displayed in AA:NN format, where AA is a number that identifies the autonomous system and NN is a number that identifies the community within the autonomous system. The no version restores the default display. [ no ] ip bgp-community new-format Global Configuration
Syntax: Mode(s):
ip bgp-confed-as-set new-format
Description: Specifies that AS-confed-sets must be displayed within square brackets, [ ], with the ASs delimited by commas. The no version restores the default, displaying AS-confed-sets within parentheses, ( ), with the ASs delimited by spaces. [ no ] ip bgp-confed-as-set new-format Global Configuration
Syntax: Mode(s):
ip broadcast-address
Description: Syntax: Defines a broadcast address for an interface. The no version restores the default IP broadcast address. [ no ] ip broadcast-address [ ipAddress ] Mode(s): ipAddress broadcast IP address
170
ip community-list
ip community-list
Description: Syntax: Creates a community list for BGP and controls access to it. The no version removes the community list, including all list entries. ip community-list communityLisName { permit | deny } { communityNumber | asCommunityNumber | no-export | no-advertise | local-as | internet } [ communityNumber | asCommunityNumber | no-export | no-advertise | local-as | internet ]* ip community-list communityLisName { permit | deny } communityExpression no ip community-list communityLisName communityLisName name of a community list; a string of up to 32 characters; identifies one or more permit or deny groups of communities; used for standard community lists permit permits access for a matching condition deny denies access for a matching condition communityNumber community number in the range 14294967295 asCommunityNumber community number in the format AA:NN, where AA is a number that identifies the autonomous system and NN is a number that identifies the community within the autonomous system. no-export specifies that BGP does not advertise this route outside a BGP confederation boundary no-advertise specifies that BGP does not advertise this route to any peer (internal or external) local-as specifies that BGP does not advertise this route to external peers; sometimes known as the no-export-subconfed community internet specifies the Internet community * indicates that one or more parameters can be repeated multiple times in a list in the command line communityExpression a regular expression that matches the community
Mode(s):
Global Configuration
171
ip debounce-time
Description: Defines the minimum time an IP interface must be in a given statefor example, up or downbefore being reported. The no version removes the debounce time. ip debounce-time [ vrf vrfName ] period no ip debounce-time [ vrf vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters period interval in the range 060000 seconds
Syntax:
Global Configuration
ip demux-type da-prefix
Description: Specifies that a subscriber interface will demultiplex traffic using destination addresses. The no version restores the default situation, in which the subscriber interface demultiplexes traffic using source addresses. [ no ] ip demux-type da-prefix Interface Configuration
Syntax: Mode(s):
ip destination-prefix
Description: Configures a subscriber interface to demultiplex traffic with the specified destination address. The no version removes the association between the subscriber interface and the specified destination address. [ no ] ip destination-prefix ipAddress ipAddressMask Mode(s): ipAddress destination IP address that the system uses to identify packets for this subscriber interface ipAddressMask network mask for associated IP subnet
Syntax:
Interface Configuration
ip dhcp-local cable-modem
Description: Specifies the IP address of the external DHCP server to which the DHCP local server will relay DHCP messages from cable modems. The no version removes the cable modem configuration. [no] ip dhcp-local cable-modem dhcp-server ipAddress Mode(s): ipAddress IP address of the cable modem DHCP server
Syntax:
Global Configuration
172
ip dhcp-local excluded-address
ip dhcp-local excluded-address
Description: Specifies IP addresses that the DHCP local server should not supply from the default address pool because those addresses are already used by devices on the subnet. The no version allows the DHCP local server to supply the specified IP address. [ no ] ip dhcp-local excluded-address ipAddressStart ipAddressStop Mode(s): ipAddressStart single IP address or start of the range of IP addresses that the DHCP local server should not supply ipAddressStop end of the range of IP addresses that the DHCP local server should not supply
Syntax:
Global Configuration
ip dhcp-local limit
Description: Specifies the maximum number of IP addresses that the DHCP local server can supply to each VPI, VCI, VLAN, or Ethernet subnet. The no version restores the default situation, in which there is no limit on the number of token IP addresses that the DHCP local server can supply to each VPI, VCI, VLAN, or Ethernet subnet. ip dhcp-local limit { atm | ethernet | vlan | } leaseNumber no ip dhcp-local limit [ atm | ethernet | vlan ] Mode(s): atm specifies the limit for VPIs and VCIs ethernet specifies the limit for Ethernet subnets vlan specifies the limit for VLANs leaseNumber maximum number of leases in the range 032767
Syntax:
Global Configuration
ip dhcp-local pool
Description: Syntax: Accesses Pool Configuration mode. The no version prevents the DHCP local server from supplying IP addresses from the specified pool. [ no ] ip dhcp-local pool { poolName | default } Mode(s): poolName name of the address pool default specifies the default address pool
Global Configuration
173
ip dhcp-server
Description: Adds the IP address of a single DHCP server to the list of DHCP servers from which the system can request addresses to allocate to remote users. A maximum of five DHCP servers can be specified. The no version removes the specified DHCP server or removes all DHCP servers from the list. ip dhcp-server dhcpServerAddress [ adminStatus ] no ip dhcp-server [ dhcpServerAddress [ adminStatus ] ] Ipaddress IP address of the DHCP server that will allocate addresses for remote users adminStatus one of the following options:
Syntax:
disable disable the DHCP server drain drain the DHCP server
Mode(s): Global Configuration
ip directed-broadcast
Description: Syntax: Mode(s): Enables translation of directed broadcast to physical broadcasts. The no version disables the function. [ no ] ip directed-broadcast Interface Configuration, Subinterface Configuration, Profile Configuration
ip disable-forwarding
Description: Disables forwarding of packets on the SRP Ethernet interface to maintain system performance. The no version enables forwarding of packets on the SRP Ethernet interface. You see an error message if you try to set this command for interfaces other than the SRP Ethernet interface. [ no ] ip disable-forwarding Interface Configuration, Subinterface Configuration
Syntax: Mode(s):
174
ip domain-lookup
ip domain-lookup
Description: Without the transit-virtual-router option, enables the system to query the configured DNS name servers when it needs an IP hostnametoIP address translation. With the transit-virtual-router option, configures a virtual router to use the name servers you configured for another virtual router. The no version without the transit-virtual-router option restores the default situation, in which the system does not query the DNS server. The no version with the transit-virtual-router option stops a virtual router from using the same name servers you configured for another virtual router. [ no ] ip domain-lookup [ transit-virtual-router vrName ] vrName name of the virtual router that has the DNS configuration you want to use for a second virtual router Mode(s): Global Configuration
Syntax:
ip domain-name
Description: Defines a default domain name for the clients that a name resolver serves. The no version deletes the domain name; that is, the domain name will no longer be appended to hostnames in the static host table. [ no ] ip domain-name domainName Mode(s): domainName default domain name for your hosts
Syntax:
Global Configuration
ip dvmrp
Description: Syntax: Mode(s): Activates DVMRP on an interface.The no version removes DVMRP from an interface. [ no ] ip dvmrp Interface Configuration
175
ip dvmrp accept-filter
Description: Syntax: Filters incoming DVMRP reports in accordance with a standard IP access list. The no version disables the filter. [ no ] ip dvmrp accept-filter listName1 [ distance ] neighbor-list listName2 listName1 name of the IP access list. If the name is 0, the interface accepts all destinations. You can specify a simple or extended access list; with an extended access list you can specify an address and a subnet mask. distance distance associated with the DVMRP route when the router determines the RPF interface for the source of a multicast packet. The default is 0; the range is 0 to 255. listName2 name of an access list containing the neighbors from which the system will accept reports. If the name is 0, the interface accepts destinations from all its neighbors.
Mode(s):
Interface Configuration
ip dvmrp announce-filter
Description: Specifies a list of DVMRP routes that the system will advertise on an interface. The no version restores the default situation, in which the system advertises all known routes on the interface. ip dvmrp announce-filter listName no ip dvmrp announce-filter listName name of the IP access list that specifies the DVMRP routes that the system will advertise on the interface. You can specify a simple or extended access list; with an extended access list you can specify an address and a subnet mask.
Syntax:
Mode(s):
Interface Configuration
ip dvmrp auto-summary
Description: Syntax: Mode(s): Summarizes routes automatically on an interface. By default, automatic summarization is enabled. The no version disables automatic summarization. [ no ] ip dvmrp auto-summary Interface Configuration
176
ip dvmrp disable
ip dvmrp disable
Description: Syntax: Mode(s): Disables DVMRP on an interface without removing the DVMRP configuration. The no version reenables the DVMRP configuration on a disabled interface. [ no ] ip dvmrp disable Interface Configuration
ip dvmrp metric-offset
Description: Adjusts the number of hops associated with routes passing through an interface. This action indicates that the route is more efficient or less efficient than an alternative route. The no version restores the default values. [ no ] ip dvmrp metric-offset { in | out } [ increment ] in increments the number of hops for a DVMRP route advertised in incoming DVMRP reports. If you do not specify a key word, this option is the default. out increments the number of hops for a DVMRP route advertised in outgoing DVMRP reports increment number of hops associated with this interface. The default is 1 for incoming reports and 0 for outgoing reports.
Syntax:
Mode(s):
Interface Configuration
ip dvmrp route-hog-notification
Description: Sets the number of DVMRP routes that the system can record before it generates a syslog warning message.The no version restores the default setting, 10,000 routes. [ no ] ip dvmrp route-hog-notification [ limit ] Global Configuration
Syntax: Mode(s):
ip dvmrp route-limit
Description: Limits the number of routes that the system can advertise on each interface. The default value is 7000. The no version removes the limit for the number of routes that the system can advertise on each interface. [ no ] ip dvmrp route-limit [ limit ] Mode(s): limit number of routes that the system can advertise
Syntax:
Global Configuration
177
ip dvmrp summary-address
Description: Syntax: Advertises a DVMRP summary address on the interface. The no version stops the advertising of a summary address on an interface. [ no ] ip dvmrp summary-address ipAddress mask [ metric cost ] Mode(s): ipAddress summary address mask subnet mask cost cost associated with this summary address
Interface Configuration
ip dvmrp unicast-routing
Description: Enables the exchange of DVMRP unicast routes on an interface not owned by DVMRP. The no version disables the exchange of DVMRP unicast routes on an interface not owned by DVMRP. [ no ] ip dvmrp unicast-routing Interface Configuration
Syntax: Mode(s):
ip dynamic-interface-prefix
Description: Syntax: Specifies the prefix for the names of dynamic shared IP interfaces created for overlapping BGP/MPLS VPNs.The no version restores the default prefix, dyn. ip dynamic-interface-prefix [ vrfName ] prefix no ip dynamic-interface-prefix [ vrfName ] Mode(s): vrfName name of the VRF in which the shared interface is created; a string of 132 alphanumeric characters prefix string of 110 alphanumeric characters
Global Configuration
178
ip explicit-path
ip explicit-path
Description: Defines an explicit path by name and also enables or disables explicit path routing in a non-ERX implementation. See the mpls explicit-path command for a complete description and syntax.
ip extcommunity-list
Description: Syntax: Defines an extended-community (extcommunity) list to be referenced in a route map. The no version deletes the extcommunity. ip extcommunity-list listName { permit | deny } extendedCommunity [ extendedCommunity ]* no ip extcommunity-list listName listName name of the extended-community list permit permits membership in the extended community for matching conditions deny denies membership in the extended community for matching conditions extendedCommunity extended community specified in the format: {rt | soo } { ASN:nn | ipAddress:nn }
Global Configuration
ip filter-options all
Description:
Enables filtering of packets with IP options on an interface. IP options filtering is disabled by default. The no version disables filtering of packets with IP options.
[ no ] ip filter-options all Interface Configuration
Syntax: Mode(s):
179
ip ftp source-address
Description: Specifies an operational interface by IP address as the source interface in FTP packets sent via the systems FTP client. The no version restores the source address in the FTP packets to that on which the FTP connection is made. ip ftp source-address sourceAddress no ip ftp source-address [ sourceAddress ] Mode(s): sourceAddress source IP address
Syntax:
Global Configuration
ip ftp source-interface
Description: Identifies an interface by type and location as the source interface in FTP packets sent via the systems FTP client. The no version restores the source address in the FTP packets to that on which the FTP connection is made. ip ftp source-interface interfaceType interfaceSpecifier no ip ftp source-interface [ interfaceType interfaceSpecifier ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
Global Configuration
ip-hint
Description: When enabled, the ERX will preallocate an IP address for the remote (B-RAS) user before calling authentication.The address is then passed as a hint in the authentication request to the RADIUS server. The no version disables the feature. ip-hint { enable | disable } no ip-hint Mode(s): Domain Map Configuration
Syntax:
180
ip http access-class
ip http access-class
Description: Allows only subscribers on a standard IP access list to connect to the HTTP local server. The no version removes the association between the access list and the HTTP local server. ip http access-class listName no ip http access-class Mode(s): listName name of the access list
Syntax:
Global Configuration
ip http max-connection-time
Description: Syntax: Specifies the maximum time that the HTTP local server maintains an inactive connection. The no version restores the default time, 30 seconds. ip http max-connection-time seconds no ip http max-connection-time Mode(s): seconds time that the HTTP local server maintains a connection; either 0 (forever) or in the range 37200 seconds
Global Configuration
ip http not-found-url
Description: Specifies the Web page or message that appears if the subscriber requests a URL that is not available. The no version displays the standard HTTP message 404 not found. ip http not-found-url { url | root-url } no ip http not-found-url Mode(s): url URL of the Web page that appears on the subscribers computer if the DHCP local server is not configured or enabled root-url displays the root Web page
Syntax:
Global Configuration
181
ip http port
Description: Syntax: Specifies the port on which the HTTP local server receives connection attempts. The no version restores the default port number, 80. ip http port portNumber no ip http port Mode(s): portNumber number of the port on which connection attempts are received, in the range 065535
Global Configuration
ip http realm
Description: Specifies the name the Web browser displays to subscribers when the HTTP client requests the user information. The no version restores the default value, the name of the virtual router. ip http realm connectionName no ip http realm Mode(s): connectionName connection name that subscribers see when the HTTP client requests user information
Syntax:
Global Configuration
ip http root-refresh
Description: Syntax: Specifies how often the browser updates the default internal starting (root) Web page. The no version restores the default time interval, 0 seconds. ip http root-refresh seconds no ip http root-refresh Mode(s): seconds time interval, in the range 065535 seconds, at which the default internal starting Web page is refreshed
Global Configuration
182
ip http root-url
ip http root-url
Description: Specifies a URL external to the system for the starting (root) Web page that appears on the subscribers computer when the subscriber logs in. The no version restores the default internal URL as the starting Web page. ip http root-url url no ip http root-url Mode(s): url external URL of the Web page that appears on the subscribers computer when the connection to the HTTP local server is established
Syntax:
Global Configuration
ip http same-host-limit
Description: Specifies the maximum number of connections that can exist between one IP address and the HTTP local server. The no version restores the default number of allowed connections, 3. ip http same-host-limit maxConnections no ip http same-host-limit Mode(s): maxConnections maximum number of connections allowed between one IP address and the HTTP local server, in the range 01000
Syntax:
Global Configuration
ip http server
Description: Syntax: Creates or enables the HTTP local server. The no version deletes or disables the HTTP local server. [ no ] ip http [ server ] server enables or disables the HTTP local server. If you do not specify the keyword server, the command creates the HTTP local server and the no version removes the server.
Mode(s):
Global Configuration
ip igmp
Description: Syntax: Mode(s): Enables IGMPv2 on an interface. The no version disables IGMPv2 on an interface. [ no ] ip igmp Interface Configuration, Profile Configuration
183
ip igmp access-group
Description: Restricts hosts on this subnet to joining multicast groups on the specified IP access list. The no version removes the association with the specified access list and allows hosts on the subnet to join any multicast group. ip igmp access-group accessListName no ip igmp access-group Mode(s): accessListName name of the access list; a string of up to 32 characters
Syntax:
Syntax:
ip igmp immediate-leave
Description: Removes an interface immediately when the router receives an leave group membership message from the host associated with this interface. The no version restores the default situation, in which the router issues query messages to multicast groups and removes an interface if the associated host does not return a group membership report within a certain length of time. Caution: Issue this command only on IGMPv2 interfaces to which one IGMP client is connected. Do not issue this command to interfaces to which more than one IGMP client is connected. Syntax: Mode(s): [ no ] ip igmp immediate-leave Interface Configuration, Profile Configuration
184
Syntax:
Mode(s):
ip igmp promiscuous
Description: Enables the specified interface to accept IGMP reports from hosts on any subnet. The no version specifies that an IGMP interface should use the Router Configuration mode setting (see the igmp promiscuous command) to determine from which subnets it can accept IGMP reports. ip igmp promiscuous { on | off } no ip igmp promiscuous Mode(s): on enables the interface to accept IGMP reports from hosts on any subnet off allows the interface to accept IGMP reports only from hosts on subnets associated with this interface
Syntax:
ip igmp-proxy
Description: Syntax: Mode(s): Enables IGMP proxy on an interface. The no version disables IGMP proxy for an interface. [ no ] ip igmp-proxy Interface Configuration
185
ip igmp-proxy unsolicited-report-interval
Description: Specifies how often the upstream interface should transmit unsolicited reports. This command has no effect on interfaces other than the upstream value. The no version transmits unsolicited reports using the default value, 400 seconds. Note: Issue this command only on the upstream interface. Otherwise, this command will have no effect. Syntax: ip igmp-proxy unsolicited-report-interval seconds no ip igmp-proxy unsolicited-report-interval Mode(s): seconds time interval at which the interface transmits unsolicited reports
Interface Configuration
ip igmp-proxy V1-router-present-time
Description: Specifies how long the system assumes that there is an IGMPv1 querier router on the subnet after the system receives an IGMP V1 query on this interface. The no version restores the default value, 10 seconds. ip igmp-proxy V1-router-present-time seconds no ip igmp-proxy V1-router-present-time seconds time for which the system assumes that there is an IGMPv1 querier router on the subnet after the system receives an IGMP V1 query on this interface
Syntax:
Mode(s):
Interface Configuration
ip igmp querier
Description: Specifies that the interface will act as a querier when you configure IGMPv1 on an interface. The no version specifies that this interface will not issue query packets. Note: This command is invalid for interfaces on which you configured IGMPv2. Syntax: Mode(s): [ no ] ip igmp querier Interface Configuration, Profile Configuration
186
ip igmp querier-timeout
ip igmp querier-timeout
Description: Syntax: Sets the time that the interface waits before declaring itself as the querier. The no version restores the default value, twice the query interval. ip igmp querier-timeout seconds no ip igmp querier-timeout Mode(s): seconds time interval between the last query from the previous router and the first query from this interface
ip igmp query-interval
Description: Syntax: Sets how often the system sends IGMP host-query packets from this interface. The no version restores the default value, 125 seconds. ip igmp query-interval seconds no ip igmp query-interval Mode(s): seconds polling interval in the range 065535 seconds
ip igmp query-max-response-time
Description: Specifies the period in tenths of a second during which the host is expected to respond to an IGMP query. IGMP version 2 includes this value in IGMP query messages sent out on the interface. You cannot set this value on interfaces running IGMP version 1. The no version restores the default value of 10 tenths of a second (1 second). ip igmp query-max-response-time tenthsOfaSecond no ip igmp query-max-response-time Mode(s): tenthsOfaSecond time interval between receipt of an IGMP query and the response; the range is 1254 tenths of a second.
Syntax:
187
ip igmp robustness
Description: Specifies the number of times that the system sends IGMP group-specific queries before declaring a group to no longer have any members on an interface. The no version restores the default value, 3. ip igmp robustness numberOfMessages no ip igmp robustness Mode(s): numberOfMessages number of times that the system sends IGMP group-specific queries in the range 14
Syntax:
ip igmp static-group
Description: Assigns an interface to handle all multicast traffic for a group. The interface sets no timers for this group. The no version removes the group from the interface. [ no ] ip igmp static-group groupAddress Mode(s): groupAddress address of the group
Syntax:
ip igmp version
Description: Syntax: Sets the IGMP version for the interface. The no version restores the default value, IGMPv2. ip igmp version { 2 | 1 } no ip igmp version 2 IGMP version 2 1 IGMP version 1 Mode(s): Interface Configuration, Profile Configuration
ip ignore-df-bit
Description: Specifies that the system ignores the dont-fragment bit if present in the IP header of packets crossing the configured interface; the system then fragments packets even if the bit is present. The no version restores the default behavior, which is to consider the DF bit before fragmenting. [ no ] ip ignore-df-bit Interface Configuration
Syntax: Mode(s):
188
ip interface
ip interface
Description: This command has only a no version. See the no ip interfacecommand for a complete description and syntax.
ip irdp
Description: Syntax: Mode(s): Enables ICMP Router Discovery Protocol processing on an interface. The no version disables IRDP routing. [ no ] ip irdp Interface Configuration, Subinterface Configuration
ip local pool
Description: Specifies the pool name, the starting address, the ending address, group name, the utilization threshold, and the SNMP trap flag. The no version deletes a local pool. [ no ] ip local pool name [ startIpAddress [ endIpAddress ] [ warning highUtilization abatedUtilization ] [ snmpTrap ] ] name text string in the range 116 characters that defines the name of the local address pool startIpAddress starting IP address in the local address pool endIpAddress ending IP address in the local address pool warning specifies one of the following utilization warnings:
Syntax:
Global Configuration
Global Configuration
189
Global Configuration
ip mac-validate
Description: Syntax: Enables MAC address validation on a per interface basis. The no version disables the feature. ip mac-validate [ strict | loose ] no ip mac-validate strict prevents transmission of IP packets that do not reside in the validation table loose allows IP packets to pass through even though the packets do not have entries in the validation table; only packets that have matching IPMAC pair entries in the table are validated
Mode(s):
Interface Configuration
ip mask-reply
Description: Syntax: Mode(s): Enables ICMP netmask reply. The no version disables the feature. [ no ] ip mask-reply Interface Configuration, Subinterface Configuration
190
ip mtu
Description: Syntax: Sets the maximum transmission unit size of IP packets sent on an interface. The no version restores the default value. [ no ] ip mtu [ mtuSize ] mtuSize maximum number of packet transmissions permitted on an interface. The range is 12810240. The default is 0, which means that the system takes the value from a lower protocol layer.
Mode(s):
ip multicast-routing
Description: Syntax: Mode(s): Enables IP multicast routing on the system. The no version disables IP multicast routing on the system. [ no ] ip multicast-routing Global Configuration
191
ip multipath round-robin
Description: Syntax: Mode(s): Specifies round-robin as the mode for ECMP load sharing on an interface. The no version restores the default value, hashed. [ no ] ip multipath round-robin Subinterface Configuration
ip name-server
Description: Syntax: Specifies a DNS name server that the system can query for hostnametoIP address resolution. The no version deletes the name server. [ no ] ip name-server serverIpAddress [ serverIpAddress ]* Mode(s): serverIpAddress IP address of a DNS name server * indicates that one or more parameters can be repeated multiple times in a list in the command line
Global Configuration
ip nfs
Description: Specifies the ERX interface that the current virtual router uses to exchange NFS communications with an NFS server. The no version prevents this interface from sending or receiving NFS communications for the current virtual router. ip nfs { source-address ipAddress | source-interface interfaceType interfaceSpecifier } no ip nfs { source-address | source-interface } Mode(s): ipAddress IP address of an ERX interface that sends and receives NFS communications interfaceType ERX interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular ERX interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Syntax:
Global Configuration
192
ip nfs host
ip nfs host
Description: Syntax: Configures a remote host as an NFS server for the current virtual router. The no version disassociates the NFS server from the virtual router. ip nfs host hostName [ user userID [ group groupID ] ] no ip nfs host hostName Mode(s): hostName name of the remote host userID user identity in the range 04294967295 that a user must enter to connect to the remote host; default is 2001 groupID group identity in the range 04294967295 that the user must enter to connect to the remote host; default is 100
Global Configuration
ip ospf authentication-key
Description: Syntax: Assigns a password used by neighboring routers that are using OSPF simple password authentication. The no version deletes the password. ip ospf authentication-key authKey no ip ospf authentication-key Mode(s): authKey password; continuous string of characters up to 8 characters in length
Syntax: Mode(s):
ip ospf authentication-none
Description: Syntax: Mode(s): Specifies that no authentication is to be used for the interface. The no version has no effect. ip ospf authentication-none Interface Configuration, Subinterface Configuration
193
ip ospf cost
Description: Syntax: Specifies a cost metric for an interface. Used in the calculation of the SPF routing table. The no version resets the path cost to the default. [ no ] ip ospf cost intfCost Mode(s): intfCost link state metric cost; number in the range 065535; default value is 10
ip ospf dead-interval
Description: Sets the time period during which the routers neighbors do not see hello packets before they declare the router to be down. The no version resets the dead interval to its default. [ no ] ip ospf dead-interval deadInterval Mode(s): deadInterval number in the range 165535 seconds; default value is 40 seconds
Syntax:
ip ospf hello-interval
Description: Syntax: Specifies the interval between hello packets that the router sends on the interface. The no version resets the hello interval to its default. [ no ] ip ospf hello-interval helloInterval Mode(s): helloInterval number in the range 165535 seconds; default value is 10 seconds
194
Note: If all the MD5 keys have been deleted, the authentication type is still MD5, but you must configure MD5 keys. Note: To disable MD5 authentication for the interface, use the ip ospf authentication-none command. Note: To display the password only in encrypted text, use the service password-encryption command. Mode(s): Interface Configuration, Subinterface Configuration
ip ospf network
Description: Syntax: Configures the OSPF network type to something other than the default for the network medium. The no version restores the default value for the medium. ip ospf network { broadcast | non-broadcast | point-to-point } no ip ospf network Mode(s): broadcast sets the network type to broadcast non-broadcast sets the network type to NBMA point-to-point sets the network type to point-to-point
195
ip ospf priority
Description: Sets the router priority. Used in determining the designated router for the particular network. This designation applies only to multiaccess networks. Every broadcast and nonbroadcast multiaccess network has a designated router. The no version restores the default value. [ no ] ip ospf priority intfPriority Mode(s): intfPriority priority value, an 8-bit number in the range 1255; default value is 1
Syntax:
ip ospf retransmit-interval
Description: Specifies the time between LSA retransmissions for the interface when an acknowledgment for the LSA is not received. The no version restores the default value. [ no ] ip ospf retransmit-interval retransInterval Mode(s): retransInterval number in the range 165535 seconds; default value is 5 seconds
Syntax:
ip ospf shutdown
Description: Syntax: Mode(s): Disables OSPF on an interface. The no version enables OSPF on the interface. [ no ] ip ospf shutdown Interface Configuration, Subinterface Configuration
ip ospf transmit-delay
Description: Syntax: Sets the estimated time it takes to transmit a link state update packet on the interface. The no version restores the default value. [ no ] ip ospf transmit-delay transmDelay Mode(s): transmDelay link state transmit delay, a number in the range 165535 seconds; default value is 1 second
196
ip pim
ip pim
Description: Syntax: Enables PIM on an interface. The no version disables PIM on an interface. [ no ] ip pim [ dense-mode | sparse-mode | sparse-dense-mode ] Mode(s): dense-mode enables PIM in dense mode sparse-mode enables PIM in sparse mode sparse-dense-mode enables PIM in sparse-dense mode
Interface Configuration
ip pim query-interval
Description: Syntax: Specifies how often the system sends PIM router query messages from this interface. The no version specifies the default time interval, 30 seconds. ip pim query-interval queryTime no ip pim query-interval Mode(s): queryTime interval in the range 0210 seconds at which the system sends PIM router query messages from this interface
Interface Configuration
ip pim rp-address
Description: Syntax: Specifies a static PIM grouptoRP mapping. The no version clears the mapping from this interface. [ no ] ip pim rp-address ipAddress [ ipAccessList ] [ override ] Mode(s): ipAddress IP address of the system you want to designate as an RP router ipAccessList name of the IP access list that specifies which multicast groups use this RP override specifies that this static RP mapping has priority over group-to-RP mappings learned by auto-RP
Configuration Mode
197
ip pim send-rp-announce
Description: Syntax: Sends autoRP announcement messages from a system you configured as an RP. The no version clears the filter from this interface. ip pim send-rp-announce interfaceType interfaceSpecifier scope ttl [ group-list ipAccessList] [ interval seconds ] no ip pim send-rp-announce interfaceType interfaceSpecifier [ group-list ipAccessList ] interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. The autoRP announcement messages will contain the IP address for this interface. ttl time-to-live value; the number of hops for which the announcement is valid ipAccessList name of the IP access list that specifies which multicast groups use this RP seconds time interval at which the system sends the announcements; default interval is 60 seconds
Mode(s):
Configuration Mode
Syntax:
Mode(s):
Configuration Mode
198
ip pim spt-threshold
ip pim spt-threshold
Description: Syntax: Specifies the network configuration that PIM SM uses when a source starts sending multicast messages. The no version restores the default value, 0. [ no ] ip pim spt-threshold { 0 | nonzero_integer | infinity } [ group-list ipAccessList ] Mode(s): 0 configures PIM SM to switch to an SPT when a source begins to send multicast messages nonzero_integer integer in the range 14294967294; prevents PIM SM from switching from a shared tree to an SPT infinity prevents PIM SM from switching from a shared tree to an SPT ipAccessList name of the IP access list that specifies the groups to which the threshold applies
Global Configuration
ip policy
Description: Assign a policy list to the ingress or egress of an interface. If you execute a policy command and the policy list does not exist, the system creates a policy list with no rules, the default. When no rules are found in a policy list, the system performs a routing table lookup and forwards packets on the interface based on the routing table information. You must specify the input or output keyword to assign the policy list to the ingress or egress of the interface. The no version removes the association between a policy list and an interface. [ no ] ip policy { input | local-input | output} policyName [ statistics { enabled [ baseline { enabled | disabled } ] | disabled } ] input apply policy to data arriving at this interface local-input apply policy to data that arrives at this interface but is addressed to a local interface output apply policy to data leaving this interface policyName name of the policy; a maximum of 16 characters statistics enable or disable collection of policy routing statistics
Syntax:
enabled enable collection of policy routing statistics baseline enabled enables baselining of policy routing statistics baseline disabled disables baselining of policy routing statistics disabled disable collection of policy routing statistics
Mode(s): Interface Configuration
199
ip prefix-list
Description: Creates a prefix list for route filtering; specifies a list entrya permit or deny clause for a network address. The no version removes the specified prefix list or the specified list entry. ip prefix-list listName { description desc | [ seq sequence ] { permit | deny } ipPrefix [ ge geNumber ] [ le leNumber ] } no ip prefix-list listName [ description | [ seq sequence ] [ { permit | deny } ipPrefix [ ge geNumber ] [ le leNumber ] ] ] listName name of the prefix list; a string of up to 32 characters desc description of the prefix list sequence number in the range 065535 that indicates the position the prefix list entry is to have in the list of entries already configured for the prefix list. If given with the no version of this command, it specifies the position of the list entry to be deleted. If sequence is not specified, the value of the last sequence number + 5 is used. permit if the prefix of the route being filtered matches the specified prefix and permit is specified, the route is redistributed as controlled by the set actions deny if the prefix of the route being filtered matches the specified prefix and deny is specified, the route is not redistributed ipPrefix network route to be filtered, in the format network/length, where
Syntax:
Mode(s):
Global Configuration
200
ip prefix-tree
ip prefix-tree
Description: Creates a prefix tree for best-match route filtering; specifies a tree entrya deny or permit clause for a network address. The no version removes the specified prefix tree or the specified tree entry. ip prefix-tree treeName { description desc | { permit | deny } ipPrefix } no ip prefix-tree treeName [ description | { permit | deny } ipPrefix ] treeName name of the prefix list; a string of up to 32 characters desc description of the prefix list deny if the prefix of the route being filtered matches the specified prefix and deny is specified, the route is not redistributed permit if the prefix of the route being filtered matches the specified prefix and permit is specified, the route is redistributed as controlled by the set actions ipPrefix network route to be filtered, in the format network/length, where
Syntax:
ip proxy-arp
Description: Enables proxy ARP on an Ethernet or bridge1483 interface. Proxy ARP is enabled by default. The no version disables proxy ARP on an Ethernet or bridge1483 interface. ip proxy-arp [ restricted | unrestricted ] no ip proxy-arp Mode(s): restricted restricts proxy-arp to hosts on the local interface unrestricted enables proxy-arp for all reachable hosts
Syntax:
ip redirects
Description: Enables the sending of redirect messages if the software is forced to resend a packet through the same interface on which it was received. The no version disables the sending of redirect messages. [ no ] ip redirects Interface Configuration, Subinterface Configuration, Profile Configuration
Syntax: Mode(s):
201
ip refresh-route
Description: Syntax: Reinstalls routes removed from the IP routing table by the clear ip route command. There is no no version. ip refresh-route [ vrf vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters
Privileged Exec
ip rip
Description: Configures RIP to run on the network specified by the network command. Uses the default values: send version is RIP version 1, receive version is RIP version 1 and version 2, authentication is not enabled. The no version deletes the RIP interface. [ no ] ip rip Interface Configuration, Subinterface Configuration
Syntax: Mode(s):
Syntax:
Mode(s):
202
Syntax:
Syntax:
203
Syntax:
ip route
Description: Syntax: Establishes static routes. The no version removes static routes. ip route [ vrf vrfName ] ipAddress ipMask { ipNextHop [ InterfaceType interfaceSpecifier ] | interfaceType interfaceSpecifier } [ distance ] [ tag tagVal ] [ permanent ] no ip route [ vrf vrfName ] ipAddress ipMask [ ipNextHop | interfaceType interfaceSpecifier ] [ distance ] Mode(s): vrfName name of the VRF if the static route is being established within a VRF context ipAddress destination IP address ipMask IP mask for the destination ipNextHop IP address of the next hop that can be used to reach the destination network interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. distance administrative distance metric for this route in the range 0254 tagVal number in the range 0255 that identifies the tag for this route permanent specifies that the route will not be removed, even if the interface shuts down
Global Configuration
204
ip router-id
ip router-id
Description: Syntax: Establishes the IP address of a router. The no version removes the IP address assignment. [ no ] ip router-id [ vrfName ] ipAddress Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters ipAddress IP address of the router
Global Configuration
ip router isis
Description: Syntax: Configures an IS-IS routing process for IP on an interface. The no version disables IS-IS for IP on the interface. [ no ] ip router isis [ tag ] tag meaningful name for a routing process. If not specified, a null tag is assumed. The name must be unique among all IP router processes for a given router. Use the same text for the argument tag as specified in the router isis command.
Mode(s):
ip route-type
Description: Specifies whether BGP, IS-IS, OSPF, or RIP routes are available only for unicast forwarding, only for multicast reverse path forwarding checks, or for both. The no version restores the default value, unicast for BGP or both for IS-IS, OSPF, and RIP. For BGP: ip route-type [ unicast | | both ] no ip route-type For IS-IS, OSPF, and RIP: ip route-type [ unicast | multicast | both ] no ip route-type Mode(s): unicast specifies that routes for the protocol are available only for unicast forwarding multicast specifies that routes for the protocol are available only for multicast route path forwarding checks; this option is not available for BGP both specifies that routes for the protocol are available for both unicast forwarding and multicast route path forwarding checks
Syntax:
Router Configuration
205
ip rpf-route
Description: Syntax: Customizes static routes that the system can use to verify source addresses in multicast packets. The no version removes the static route. ip rpf-route ipAddress addressMask { nextHopIpAddress | nextHopInterfaceType nextHopInterfaceSpecifier } [ distanceValue ] [ tag tagValue ] [ no ] rpf-route ipAddress address-mask Mode(s): ipAddress IP address of the destination network addressMask subnet mask for the destination network nextHopIpAddress IP address of the next hop nextHopInterfaceType interface type; see Interface Types and Specifiers in About This Guide nextHopInterfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide distanceValue number in the range 0255 that indicates the preference for this route tagValue number in the range 04294967295 that identifies the route in the routing table
Global Configuration
ip rsvp bandwidth
Description: Specifies the total bandwidth reservable on the interface in a non-ERX implementation. See the mpls bandwidth command for a complete description and syntax.
ip sa-validate
Description: Enables source address validation on an interface. This feature verifies that a packet has been sent from a valid source address. When a packet arrives on an interface, the system performs a route-table lookup using the source address. The result from the route-table lookup is an interface to which packets destined for that address are routed. This interface must match the interface that the packet arrived on. If it does not match, the system drops the packet.The no version disables source address validation. [ no ] ip sa-validate Interface Configuration
Syntax: Mode(s):
206
ip share-interface
ip share-interface
Description: Specifies the layer 2 interface used by a shared IP interface in the current virtual router. The no version removes the association between the layer 2 interface and the shared IP interface. ip share-interface interfaceType interfaceSpecifier no ip share-interface Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Syntax:
Interface Configuration
ip share-nexthop
Description: Syntax: Specifies that the shared IP interface dynamically tracks a next hop for the specified destination. The no version halts tracking of the next hop. ip share-nexthop ipAddress [ virtual-router vrName ] no ip share-nexthop Mode(s): ipAddress IP address of the destination for which the next hop is tracked vrName name of the virtual router for the next hop
Interface Configuration
ip shutdown
Description: Syntax: Mode(s): Shuts down an IP interface. The no version restarts the interface. [ no ] ip shutdown Interface Configuration, Subinterface Configuration
ip source-prefix
Description: Configures a subscriber interface to demultiplex traffic with the specified IP address and mask. The no version removes the association between the subscriber interface and the specified IP address and mask. [ no ] ip source-prefix ipAddress ipAddressMask Mode(s): ipAddress IP address of the physical interface that receives messages for this subscriber ipAddressMask network mask for associated IP subnet
Syntax:
Interface Configuration
207
ip source-route
Description: Syntax: Enables the forwarding of source-routed packets. The no version disables forwarding. Forwarding is enabled by default. [ no ] ip source-route [ vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters
Interface Configuration
ip speed
Description: Syntax: Sets the speed of an IP interface in bits per second. The no version restores the default value, 0 bps. [ no ] ip speed adminSpeed Mode(s): adminSpeed speed of the interface in bps in the range 14294967295
ip split-horizon
Description: Enables split horizon, preventing the RIP router from advertising routes from the interface originating the route, reducing the possibility of routing loops; this is the default condition. The no version disables split horizon. [ no ] ip split-horizon Interface Configuration, Subinterface Configuration
Syntax: Mode(s):
ip ssh authentication-retries
Description: Sets the number of times that a user can retry a failed authentication (such as trying to correct a wrong password) before the server terminates the connection. The no version restores the default value of 20 retries. ip ssh authentication-retries retryLimit no ip ssh authentication-retries Mode(s): retryLimit number of times authentication can be retried after the initial failure within a given connection attempt
Syntax:
Global Configuration
208
ip ssh crypto
ip ssh crypto
Description: Adds an encryption algorithm to the specified list of supported algorithms. The no version removes or excludes an algorithm from the specified list. The default version restores the default algorithms for the specified list. ip ssh crypto [ client-to-server | server-to-client ] [ no | default ] cipherAlgorithm Mode(s): client-to-server adds the specified algorithm to the SSH servers list of supported inbound algorithms server-to-client adds the specified algorithm to the SSH servers list of supported outbound algorithms no removes or excludes the specified algorithm from the list default restores the specified list to the factory defaults, which includes 3des-cbc, twofish-cbc, and blowfish-cbc cipherAlgorithm algorithm to add to the list
Syntax:
Global Configuration
ip ssh disable-user-authentication
Description: Syntax: Mode(s): Disables RADIUS password authentication, resulting in the acceptance of all SSH clients that pass protocol negotiation. [ no ] ip ssh disable-user-authentication Global Configuration
ip ssh mac
Description: Adds a MAC algorithm to the specified list of supported algorithms. The no version removes or excludes an algorithm from the specified list. The default version restores the default algorithms for the specified list. ip ssh mac [ client-to-server | server-to-client ] [ no | default ] macAlgorithm Mode(s): client-to-server adds the specified algorithm to the SSH servers list of supported inbound algorithms server-to-client adds the specified algorithm to the SSH servers list of supported outbound algorithms no removes or excludes the specified algorithm from the list default restores the specified list to the factory defaults, which includes hmac-md5, hmac-sha1, and hmac-sha1-96 macAlgorithm algorithm to add to the list
Syntax:
Global Configuration
209
ip ssh sleep
Description: Sets a sleep period in seconds for users that have exceeded the authentication retry limit. Connection attempts from the user at the same host are denied until this period expires. The no version restores the default value of 600 seconds. ip ssh sleep sleepPeriod no ip ssh sleep Mode(s): sleepPeriod period in seconds
Syntax:
Global Configuration
ip ssh timeout
Description: Sets a timeout period in seconds. The SSH server terminates the connection if protocol negotiationincluding user authenticationis not complete within this timeout. The no version restores the default value of 600 seconds. ip ssh timeout timeout no ip ssh timeout Mode(s): timeout period in the range 10600 seconds
Syntax:
Global Configuration
ip summary-address
Description: Syntax: Summarizes specified addresses for RIP. The no version removes the summarization. ip summary-address [ rip ] ipAddress ipAddressMask [ metric ] no ip summary-address [ rip ] ipAddress ipAddressMask Mode(s): rip optional keyword for compatibility with non-ERX implementations ipAddress IP address identifying the route to be summarized ipAddressMask network mask identifying the route to be summarized metric specifies a metric for the summary address; the default is 1
Router Configuration
210
ip ttl
ip ttl
Description: Sets the hop count specified by the TTL field in the IP header used by IP for all operations unless overridden by another command. The no version restores the default value, 127. ip ttl [ vrfName ] ttlValue no ip ttl [ vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters ttlValue number in the range 1255
Syntax:
Global Configuration
ip tunnel reassembly
Description: Syntax: Mode(s): Enables the reassembly of fragmented IP tunnel packets that are received on the current virtual router. The no version restores the default of disabled. [ no ] ip tunnel reassembly Global Configuration
ip unnumbered
Description: Syntax: Enables IP processing on an interface without assigning an explicit IP address to the interface. The no version disables IP processing on the interface. [ no ] ip unnumbered interfaceType interfaceSpecifier Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
ip unreachables
Description: Enables the generation of an ICMP unreachable message when a packet is received that cannot be delivered by the router. The no version disables this function. [ no ] ip unreachables Interface Configuration, Subinterface Configuration
Syntax: Mode(s):
211
ip virtual-router
Description: Specifies a virtual router in an IP profile. Dynamic interfaces created with the profile are assigned to this VR. The no version removes the VR from the profile; if a VR is not specified via RADIUS, then any subsequent creation process for dynamic interfaces using the profile fails. [ no ] ip virtual-router vrName Mode(s): vrName name of the virtual router; a string of 115 alphanumeric characters
Syntax:
Profile Configuration
ip vpn-id
Description: Syntax: Associates a VPN ID with the virtual router. The no version removes the VPN ID from the virtual router. ip vpn-id [ vrfName ] oui ouiNumber index ipAddress no ip vpn-id [ vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters ouiNumber identifies the OUI portion of the VPN ID, ranges from 016777215 ipAddress IP address that identifies the index portion of the VPN ID
Global Configuration
ip vrf
Description: Creates a VRF or accesses VRF Configuration mode to configure a VRF. The no version deletes the VRF. Note: After creating the VRF, you must configure a route distinguisher for it via the rd command; otherwise, the VRF will not operate. Syntax: [ no ] ip vrf vrfName Mode(s): vrfName name of the VRF; a string of 132 alphanumeric characters
Global Configuration
212
ip vrf forwarding
ip vrf forwarding
Description: Syntax: Assigns a VRF to an interface or subinterface. The no version removes the assignment. [ no ] ip vrf forwarding vrfName Mode(s): vrfName name of the VRF; a string of 132 alphanumeric characters
Global Configuration
ip vrrp
Description: Syntax: Creates a VRRP instance ID. The no version removes a VRID. The default is disabled. [ no ] ip vrrp vrid Mode(s): vrid VRID identifier; a number in the range 1255
Interface Configuration
ip vrrp advertise-interval
Description: Configures the VRRP advertisement interval time. You must use seconds to comply with RFC 2338. Use milliseconds only if all VRRP instances peering for the given VRID are composed of ERX systems. The no version restores the default value of 1 second. ip vrrp vrid advertise-interval advertiseInterval [ seconds | milliseconds ] no ip vrrp vrid advertise-interval Mode(s): vrid VRID identifier; a number in the range 1255 advertiseInterval the advertisement period in seconds or milliseconds; 1255 seconds; 100255000 milliseconds seconds specify interval in seconds milliseconds specify interval in milliseconds
Syntax:
Interface Configuration
213
ip vrrp authentication-key
Description: Specify the authentication key. This command is only valid if the text keyword was selected in the ip vrrp authentication-type command. The no version negates the command or restores the default. ip vrrp vrid authentication-key key no ip vrrp vrid authentication-key Mode(s): vrid VRID identifier; a number in the range 1255 key string of 18 characters
Syntax:
Interface Configuration
ip vrrp authentication-type
Description: Syntax: Specifies the VRRP authentication type. The no version restores the default value, none. ip vrrp vrid authentication-type { none | text } no ip vrrp vrid authentication-type Mode(s): vrid VRID identifier; a number in the range 1255 none authentication disabled text simple text password
Interface Configuration
ip vrrp enable
Description: Syntax: Enables a VRID. The no version disables a VRID. The default is disabled. [ no ] ip vrrp vrid [ enable ] Mode(s): vrid VRID identifier; a number in the range 1255
Interface Configuration
ip vrrp preempt
Description: Syntax: Enables VRRP preemption. The no version disables VRRP preemption. The default is enabled. [ no ] ip vrrp vrid preempt Mode(s): vrid VRID identifier; a number in the range 1255
Interface Configuration
214
ip vrrp priority
ip vrrp priority
Description: Syntax: Configures the priority of VRRP routers. The no version restores the default value, 100. ip vrrp vrid priority priorityValue no ip vrrp vrid priority Mode(s): vrid VRID identifier; a number in the range 1255 priorityValue priority value of the VRRP router; a number in the range 1255; default is 100
Interface Configuration
ip vrrp virtual-address
Description: Associates an IP address to a VRID. The no version removes a list of IP addresses associated with a VRID. The no version clears the auto flag, if auto addresses are being used. There is no default. ip vrrp vrid virtual-address { auto | ipAddress ipAddress [ ipAddress ipAddress ]* } no ip vrrp vrid virtual-address [ ipAddress ipAddress ]* Mode(s): vrid VRID identifier; a number in the range 1255 ipAddress the IP address that associates to the VRID
Syntax:
Interface Configuration
ipsec clear sa
Description: Syntax: Refreshes ISAKMP/IKE or IPSec SAs. There is no no version. ipsec clear sa { all [ state tunnelState ] | tunnel tunnelName } [ phase {1 | 2 } ] all reinitializes all SAs state reinitializes SAs on tunnels that are in a specific state tunnelState state of tunnel, up, down, not-present tunnel specifies that an SA on a specific tunnel is to be reinitialized tunnelName name of tunnel phase specifies one of the following types of tunnel to be reinitialized:
215
ipsec isakmp-policy-rule
Description: Defines and prioritizes an ISAKMP/IKE policy. ISAKMP/IKE policies define parameters to be used during ISAKMP/IKE negotiation. You can have up to 10 ISAKMP/IKE policies per system. The no version removes a policy. If you do not include a priority number with the no version, the software removes all ISAKMP/IKE policies. ipsec isakmp-policy-rule priority no ipsec isakmp-policy-rule [ priority ] Mode(s): priority identifies and prioritizes the ISAKMP/IKE policy; the range is 110000, with 1 having the highest priority
Syntax:
Global Configuration
Global Configuration
ipsec lifetime
Description: Specifies the default lifetime in volume of traffic and/or seconds. The default lifetime applies to secure tunnels that do not have a tunnel lifetime defined. When either the volume of traffic or number of seconds limit is reached, IPSec renegotiates the SA. The no version restores the default values. [ no ] ipsec lifetime { kilobytes kilobytes | seconds seconds } kilobytes volume of traffic in kilobytes that can pass between IPSec peers before the SA expires; the range is 1024004294967295; the default is 4294967295 kilobytes; a setting of zero turns off the kilobyte lifetime seconds number of seconds an SA lives before expiring; the range is 72004294967295; the default is 28800 seconds (8 hours)
Syntax:
Mode(s):
Global Configuration
216
ipsec local-endpoint
ipsec local-endpoint
Description: Defines a default local endpoint used for ISAKMP/IKE negotiations and all IPSec tunnels for a transport virtual router. The no version restores the default settings of the local endpoint. [ no ] ipsec local-endpoint ipAddress transport-virtual-router transportVRName Mode(s): ipAddress IP address to use as the local endpoint transportVRName name of transport virtual router in which the IP address is defined
Syntax:
Global Configuration
ipsec transform-set
Description: Creates a transform set. Transform sets used for manually configured tunnels can have only one transform. Transform sets used for signaled tunnels can have up to six transforms. Transforms are numbered in a priority sequence in the order in which you enter them. The no version deletes the transform set. Each transform provides a different combination of data authentication and confidentiality. Use the online Help to view available transforms. Syntax: ipsec transform-set transformSetName transform0 [ transform1 [ transform2 [ transform3 [ transform4 [ transform5 ] ] ] ] ] no ipsec transform-set transformSetName Mode(s): transformSetName name of the transform set transform0 through transform5 AH or ESP transform
Global Configuration
isis authentication-key
Description: Assigns a password for IS-IS level 1 and level 2 hellos used by neighboring routers that are using IS-IS password authentication. The no version deletes the password. isis authentication-key [ level-1 | level-2 ] authKey no isis authentication-key [ level-1 | level-2 ] Mode(s): level-1 inserts the password into level 1 hello packets level-2 inserts the password into level 2 hello packets authKey a password, a continuous string of characters up to 8 characters in length
Syntax:
217
isis circuit-type
Description: Syntax: Use to configure the type of adjacency desired for the specified interface. The no version resets the circuit type to level 1 and level 2. isis circuit-type [ level-1 | level-1-2 | level-2-only ] no isis circuit-type level-1 establishes a level 1 adjacency if there is at least one area address in common between this system and its neighbors level-1-2 (default) establishes a level 1 and 2 adjacency if the neighbor is also configured as a level 1-2 router and there is at least one area in common. If there is no area in common, a level 2 adjacency is established. level-2-only establishes a level 2 adjacency on the circuit. If the neighboring router is a level 1 only router, no adjacency will be established.
Mode(s):
isis csnp-interval
Description: Syntax: Configures the IS-IS CSNP interval for the specified interface. The no version restores the default value. isis csnp-interval seconds [ level-1 | level-2 ] no isis csnp-interval [ seconds ] [ level-1 | level-2 ] seconds number in the range 065535; the interval of time in seconds between the transmission of CSNPs on multiaccess networks for the designated router; default is 10 seconds, except for WAN interfaces, where the default is 0 level-1 sets the interval of time between transmission of CSNPs for level 1 independently level-2 sets the interval of time between transmission of CSNPs for level 2 independently
Mode(s):
218
isis hello-interval
isis hello-interval
Description: Syntax: Specifies the length of time in seconds between hello packets that the router sends on the specified interface. The no version restores the default value. isis hello-interval seconds [ level-1 | level-2 ] no isis hello-interval [ seconds ] [ level-1 | level-2 ] seconds number in the range 065535; a value equal to the hello multiplier times the hello interval seconds is advertised as the holdtime in the hello packets transmitted; the default is 10 seconds. The value must be the same for all routers attached to a common network. With smaller hello intervals, topological changes are detected faster, but there is more routing traffic. level-1 sets the hello-interval for level 1 independently level-2 sets the hello-interval for level 2 independently
Mode(s):
isis hello-multiplier
Description: Specifies the number of IS-IS hello packets a neighbor must miss before the router should declare the adjacency to be down. The no version restores the multiplier default value of 3. isis hello-multiplier multiplier [ level-1 | level-2 ] no isis hello-multiplier [ multiplier | level-1 | level-2 ] multiplier number in the range 31000; the default is 3. The advertised hold time in IS-IS hellos will be set to the hello-multiplier times the hello-interval. Neighbors will declare an adjacency to this router to be down after not having received any IS-IS hellos during the advertised hold time. The hold time (and thus the hello-multiplier and the hello-interval) can be set on a per interface basis, and can be different between different routers in one area. Using a smaller hello-multiplier will give fast convergence, but can result in more routing instability. Increment the hello-multiplier to a larger value to help network stability when needed. Never configure a hello-multiplier lower than the default. level-1 sets the hello-multiplier independently for level 1 adjacencies level-2 sets the hello-multiplier independently for level 2 adjacencies
Syntax:
Mode(s):
219
isis lsp-interval
Description: Syntax: Configures the time delay between successive IS-IS link state packet transmissions. The no version restores the default value of 33 milliseconds. isis lsp-interval milliseconds no isis lsp-interval Mode(s): milliseconds number of milliseconds in the range 14294967295; an interval between successive link state packets
isis mesh-group
Description: Syntax: Configures an interface in the same mesh group to act as a virtual multiaccess network. The no version disables the feature. isis mesh-group { blocked | number } no isis mesh-group Mode(s): blocked blocks reserved LSPs from being flooded out on this defined configured interface number mesh group number in the range 14294967295
220
isis message-digest-key
isis message-digest-key
Description: Specifies an HMAC MD5 key that the system uses to create a secure, encrypted message digest of IS-IS level 1 or level 2 hello packets on the interface. Level 1 packets are the default. The digest is inserted into the packet from which it is created. Using this algorithm protects against intrusion by preventing unauthorized routers from forming adjacencies with your system. You can specify when the system will start (default is the current time) and stop (default is never) accepting packets that include a digest made with this key. You can specify when the system will start (default is the current time plus 2 minutes) and stop (default is never) generating packets that include a digest made with this key. The no version deletes the key specified by the key-id. isis message-digest-key keyId hmac-md5 key [ start-accept startAcceptTime [ { startAcceptMonth startAcceptDay | startAcceptDay startAcceptMonth } startAcceptYear ] ] [ start-generate startGenTime [ { startGenMonth startGenDay | startGenDay startGenMonth } startGenYear ] ] [stop-accept { never | stopAcceptTime [ { stopAcceptMonth stopAcceptDay | stopAcceptDay stopAcceptMonth } stopAcceptYear ] } ] [ stop-generate { never | stopGenTime [ { stopGenMonth stopGenDay | stopGenDay stopGenMonth } stopGenYear ] } ] [ level-1 | level-2 ] no isis message-digest-key keyId [ level 1 | level 2 ] keyId integer from 1 to 255 that is a unique identifier for the secret key, sent with the message digest in the packet. key string of up to 20 alphanumeric characters; secret key used by the HMAC MD5 algorithm to generate the message digest. startAcceptTime, startAcceptMonth, startAcceptDay, startAcceptYear time, month, day, year that the system will start accepting packets created with this password. Use military time format HH:MM[ :SS ]. startGenTime, startGenMonth, startGenDay, startGenYear time, month, day, year that the system will start inserting this password into packets. Use military time format HH:MM[ :SS ]. never the system never stops accepting or generating packets; overrides previously specified stop times. stopAcceptTime, stopAcceptMonth, stopAcceptDay, stopAcceptYear time, month, day, year that the system will stop accepting packets created with this password. Use military time format HH:MM[ :SS ]. stopGenTime, stopGenMonth, stopGenDay, stopGenYear time, month, day, year that the system will stop inserting this password into packets. Use military time format HH:MM[ :SS ]. level1 Inserts the password into level 1 hello packets level2 Inserts the password into level 2 hello packets
Syntax:
Mode(s):
221
isis metric
Description: Syntax: Configures the metric (cost) for the specified interface. The no version restores the default metric value. isis metric defaultMetric [ level-1 | level-2 ] no isis metric [ defaultMetric | level-1 | level-2 ] defaultMetric metric used for the redistributed route; a number in the range 063 if the system is configured with the metric-style narrow command; a number in the range 016777215 if the system is configured with the metric-style transition or metric-style wide command; the default value is 10 level-1 apply metric to level 1 links level-2 apply metric to level 2 links
Mode(s):
isis priority
Description: Syntax: Configures the priority of this system for designated router election. The no version resets priority to the default value, 64. isis priority value [ level-1 | level-2 ] no isis priority [ value | level-1 | level-2 ] Mode(s): value number in the range 0127; the priority of a router; the default value is 64 level-1 sets the priority of a router for level 1 independently level-2 sets priority of a router for level 2 independently
isis retransmit-interval
Description: Syntax: Configures the number of seconds between retransmission of LSPs with the same lsp-id for point-to-point links. The no version restores the default value. isis retransmit-interval seconds no isis retransmit-interval seconds number of seconds in the range 165535; the default value is 5. The number should be greater than the expected round-trip delay between any two routers on the attached network. The setting of this parameter should be conservative, or needless retransmission will result. The value should be larger for serial lines.
Mode(s):
222
isis retransmit-throttle-interval
isis retransmit-throttle-interval
Description: Configures the amount of time between retransmissions of any IS-IS LSPs on a point-to-point interface. The no version restores the default value, 33 milliseconds. isis retransmit-throttle-interval milliseconds no isis retransmit-throttle-interval Mode(s): milliseconds the number of milliseconds in the range 065535; the minimum delay between LSP retransmissions on the interface
Syntax:
is-type
Description: Syntax: Configures the IS-IS level at which the router is to operate. The no version resets the parameter to the default level-1-2. is-type { level-1 | level-1-2 | level-2-only } no is-type Mode(s): level-1 causes the router to act as a station router level-1-2 causes the router to act as both a station router and an area router; the default setting level-2-only causes the router to act as an area router
Router Configuration
223
j1
Description: Syntax: Mode(s): Enables the J1 variant (Japan) of the T1 framing. The no version disables the feature (default). [ no ] j1 Controller Configuration
key
Description: From Radius Configuration mode, specifies the authentication or accounting server secret. The no version removes the secret. From Manual Key Configuration mode, configures a manual ISAKMP/IKE preshared key. There is no no version. To delete a key, use the no version of the ipsec key manual command. To assign a RADIUS key: key secret no key secret authentication or accounting server secret text string used by RADIUS to encrypt the client and server authenticator field during exchanges between the system and a RADIUS server. The system encrypts PPP PAP passwords using this text string.
Syntax:
To assign an ISAKMP/IKE key: key keyString Mode(s): keyString key value in ASCII format; up to 200 characters
l2f checksum
Description: Enables the generation of checksums for L2F data packets running over IP/UDP. The no version disables the generation of checksums for data packets running over IP/UDP. The default setting is disabled. [ no ] l2f checksum Global Configuration
Syntax: Mode(s):
224
l2f destruct-timeout
l2f destruct-timeout
Description: Specifies the maximum time for which the system maintains dynamic destinations, tunnels, and sessions that have terminated. If resources are low, the system will replace the terminated objects with new requests. The no version restores the default value, 600 seconds. l2f destruct-timeout seconds no l2f destruct-timeout Mode(s): seconds a time in the range 103600 seconds (1 hour)
Syntax:
Global Configuration
l2f drain
Description: Prevents the creation of new destinations, tunnels, and sessions for the system. This command works with the l2f shutdown command. Both commands affect the administrative state of L2F on the system. The l2f drain command sets the administrative state to drain, and the l2f shutdown command sets the administrative state to disabled. The no version allows the creation of new destinations, tunnels, and sessions for the system. [ no ] l2f drain Global Configuration
Syntax: Mode(s):
Syntax:
Global Configuration
225
Syntax:
Global Configuration
l2f ignore-receive-data-sequencing
Description: Suppresses sequence number checking for data packets received on all L2F tunnels in the system. This setting affects only packets received on a tunnel, not packets sent on a tunnel. The L2F NAS still inserts sequence numbers into data packets if the NAS receives packets from the home gateway that contain sequence numbers. The no version, which is the default, causes the system to check sequence numbers in data packets that it receives on L2F tunnels. Note: If you are using IP reassembly, we recommend that you set up the system to ignore sequence numbers in received data packets. Because IP reassembly may reorder L2F packets, out-of-order packets may be dropped if sequence numbers are being used on L2F data packets. Syntax: Mode(s): [ no ] l2f ignore-receive-data-sequencing Global Configuration
226
l2f shutdown
l2f shutdown
Description: Closes all destinations, tunnels, and sessions and prevents the creation of new destinations, tunnels, and sessions for the system. This command works with the l2f drain command. Both commands affect the administrative state of L2F on the system. The l2f shutdown command sets the administrative state to disabled, and the l2f drain command sets the administrative state to drain. The no version allows the creation of new destinations, tunnels, and sessions for the system. [ no ] l2f shutdown Global Configuration
Syntax: Mode(s):
Syntax:
Global Configuration
Syntax:
Global Configuration
227
Syntax:
Global Configuration
l2tp checksum
Description: Enables the generation of checksums for data packets running over IP/UDP. The no version disables the generation of checksums for data packets running over IP/UDP. The default setting is disabled. [ no ] l2tp checksum Global Configuration
Syntax: Mode(s):
228
Syntax:
Note: To manage an existing destination profile, use this version of the command: l2tp destination profile profileName. This version assumes that the L2TP destination profile already exists. Mode(s): Global Configuration
l2tp destruct-timeout
Description: Specifies the maximum time for which the system maintains dynamic destinations, tunnels, and sessions that have terminated. If resources are low, the system will replace the terminated objects with new requests. The no version restores the default value, 600 seconds. l2tp destruct-timeout seconds no l2tp destruct-timeout Mode(s): seconds time in the range 103600 seconds (1 hour)
Syntax:
Global Configuration
l2tp drain
Description: Prevents the creation of new destinations, tunnels, and sessions for the system. This command works in conjunction with the l2tp shutdown command. Both commands affect the status of the administrative state of L2TP on the system; the l2tp drain command sets the administrative state to drain. The no version allows the creation of new destinations, tunnels, and sessions for the system. [ no ] l2tp drain Global Configuration
Syntax: Mode(s):
229
Syntax:
Global Configuration
Syntax:
Global Configuration
l2tp fail-over-within-preference
Description: Enables tunnel selection within a preference level. The no version restores the default behavior. The default fail-over scheme is to drop down a preference level when a connection attempt has failed. Syntax: Mode(s): [ no ] l2tp fail-over-within-preference Global Configuration
230
l2tp ignore-receive-data-sequencing
l2tp ignore-receive-data-sequencing
Description: Suppresses sequence number checking for data packets received on all L2TP tunnels in the system. This setting affects only packets received on a tunnel, not packets sent on a tunnel. The L2TP LAC still inserts sequence numbers into data packets if the LAC receives packets from the LNS that contain sequence numbers. The no version, which is the default, causes the system to check the sequence numbers in data packets that it receives on L2TP tunnels. Note: If you are using IP reassembly, we recommend that you set up the system to ignore sequence numbers in received data packets. Because IP reassembly may reorder L2TP packets, out-of-order packets may be dropped if sequence numbers are being used on L2TP data packets. Syntax: Mode(s): [ no ] l2tp ignore-receive-data-sequencing Global Configuration
l2tp retransmission
Description: Syntax: Sets the number of retransmission retries. The no version resets the number of retransmissions to the default value, 5. l2tp retransmission retries no l2tp retransmission Mode(s): retries in the range 27
Global Configuration
l2tp shutdown
Description: Closes all destinations, tunnels, and sessions and prevents the creation of new destinations, tunnels, and sessions for the system. This command works in conjunction with the l2tp drain command. Both commands affect the status of the administrative state of L2TP on the system; the l2tp shutdown command sets the administrative state to disabled. The no version allows the creation of new destinations, tunnels, and sessions for the system. [ no ] l2tp shutdown Global Configuration
Syntax: Mode(s):
231
Syntax:
Global Configuration
Syntax:
Global Configuration
232
Syntax:
Global Configuration
Global Configuration
l2tp tunnel-switching
Description: Syntax: Mode(s): Enables tunnel switching chassis-wide. The no version disables tunnel switching. Disabled is the default. [ no ] l2tp tunnel-switching Global Configuration
233
Privileged Exec
l2tp weighted-load-balancing
Description: Allows you to use a weighted load balancing scheme for session distribution. The no version restores the default behavior, wherein the session load of a chassis is distributed evenly across all tunnels defined to be at the same preference level. [ no ] l2tp weighted-load-balancing Global Configuration
Syntax: Mode(s):
lease
Description: Syntax: Specifies the time period for which the supplied IP address is valid. The no version restores the default lease time, one day. lease { days [ hours [ minutes [ seconds ] ] ] | infinite } no lease Mode(s): days number of days for which the IP address is valid in the range 032768 hours number of hours for which the IP address is valid in the range 024 minutes number of minutes for which the IP address is valid in the range 060 seconds number of seconds for which the IP address is valid in the range 060 infinite assigns a lease that does not expire
Pool Configuration
234
license b-ras
license b-ras
Description: Specifies the B-RAS license provided by your sales representative or Juniper Networks Customer Service. Depending on the license purchased, the system supports up to 2,000, 4,000, 8,000, 16,000, or 20,000 authenticated PPP or SDX (formerly SSC) sessions. The no version disables the license. license b-ras licenseKey no license b-ras Mode(s): licenseKey unique string of alphanumeric characters up to 15 characters long that we provide to you
Syntax:
Global Configuration
license ipsec-tunnels
Description: Specifies the IPSec license key provided by your sales representative or Juniper Networks Customer Service. Depending on the license purchased, the system supports up to 5,000, 7,500, or 10,000 tunnels per chassis. The no version disables the license. license ipsec-tunnels licenseKey no license ipsec-tunnels Mode(s): licenseKey unique string of alphanumeric characters that we provide to you
Syntax:
Global Configuration
lifetime
Description: Syntax: Associates a lifetime with IKE SAs established using this IKE policy. The no version restores the lifetime to its default, 28800 seconds (8 hours). lifetime seconds no lifetime Mode(s): seconds number of seconds an SA lives before expiring; range is 7200 to 864000 (10 days)
235
limits
Description: Sets memory limits for BGP internal tables maintained by BGP software. If you set a particular memory limit to a value lower than the current value and the system uses the memory up to the previous limit, then memory allocations will start to fail when the new value takes effect. The no version restores the default values; entering an optional value in the no version has the same effect as entering no optional values. limits { { nlre | received-route } receivedRouteLimit | { nlri | destination } destinationLimit | path-attribute pathAttributeLimit | vrf vrfLimit | address-family addressFamilyLimit | peer peerLimit | peer-address-family peerAddressFamilyLimit | peer-group peer-groupLimit | peer-group-address-family peer-groupAddressFamilyLimit | dampening dampeningLimit | network-route networkRouteLimit | aggregated-route aggregatedRouteLimit | redistributed-route redistributedRouteLimit | auto-summary-route autoSummaryRouteLimit | next-hop nextHopLimit | route-flap-history routeFlapHistoryLimit | rib-out ribOutLimit | group-rib-out groupRibOutLimit | send-queue-entry sendQueueEntryLimit | route-target-entry routeTargetEntryLimit } no limits { { nlre | received-route } [ receivedRouteLimit ] | { nlri | destination } [ destinationLimit ] | path-attribute [ pathAttributeLimit ] | vrf [ vrfLimit ] | address-family [ address-family-Limit ] | peer [ peerLimit ] | peer-address-family [ peerAddressFamilyLimit ] | peer-group [ peer-groupLimit ] | peer-group-address-family [ peer-groupAddressFamilyLimit ] | dampening [ dampeningLimit ] | network-route [ networkRouteLimit ] | aggregated-route [ aggregatedRouteLimit ] | redistributed-route [ redistributedRouteLimit ] | auto-summary-route [ autoSummaryRouteLimit ] | next-hop [ nextHopLimit ] | route-flap-history [ routeFlapHistoryLimit ] | rib-out [ ribOutLimit ] | group-rib-out [ groupRibOutLimit ] | send-queue-entry [ sendQueueEntryLimit ] | route-target-entry [ routeTargetEntryLimit ] } Note: The nlre and received-route keywords have the same purpose in this command, to set a limit on the received routes table. Similarly, the nlri and destination keywords have the same purpose, to set a limit on the BGP destination table. The nlre and nlri keywords are maintained for compatibility with previous software releases. receivedRouteLimit maximum number of received routes stored by BGP in the range 02147483648; the default is 5,000,000 destinationLimit maximum number of BGP destinations stored by BGP in the range 02147483648; the default is 5,000,000 pathAttributeLimit maximum number of path attributes stored by BGP in the range 02147483648; the default is 5,000,000
Syntax:
236
limits
vrfLimit maximum number of VRFs stored by BGP in the range 02147483648; the default is 5,000,000 addressFamilyLimit maximum number of address families stored by BGP in the range 02147483648; the default is 5,000,000 peerLimit maximum number of peers stored by BGP in the range 02147483648; the default is 5,000,000 peerAddressFamilyLimit maximum number of peers per address family stored by BGP in the range 02147483648; the default is 5,000,000 peer-groupLimit maximum number of peer groups stored by BGP in the range 02147483648; the default is 5,000,000 peer-groupAddressFamilyLimit maximum number of peer-groups per address family stored by BGP in the range 02147483648; the default is 5,000,000 dampeningLimit maximum number of dampening parameter blocks stored by BGP in the range 02147483648; the default is 5,000,000. BGP creates a dampening parameter block for each unique set of dampening parameterssuch as suppress threshold, reuse threshold, and so onused by BGP. For example, if you have a route map that sets the dampening parameters to one set of values for some routes and to another set of values for the remaining routes, BGP uses and stores two dampening parameter blocks, one for each set. networkRouteLimit maximum number of network routes stored by BGP in the range 02147483648; the default is 5,000,000 aggregatedRouteLimit maximum number of aggregated routes stored by BGP in the range 02147483648; the default is 5,000,000 redistributedRouteLimit maximum number of redistributed routes stored by BGP in the range 02147483648; the default is 5,000,000 autoSummaryRouteLimit maximum number of automatically summarized routes stored by BGP in the range 02147483648; the default is 5,000,000 nextHopLimit maximum number of next hops stored by BGP in the range 02147483648; the default is 5,000,000 routeFlapHistoryLimit maximum number of route-flap histories stored by BGP in the range 02147483648; the default is 5,000,000 ribOutLimit maximum number of RIB-Out routes stored by BGP for individual peers in the range 02147483648; the default is 1,000,000 groupRibOutLimit maximum number of RIB-Out routes stored by BGP for peer groups in the range 02147483648; the default is 1,000,000 sendQueueEntryLimit maximum number of send queue entries stored by BGP in the range 02147483648; the default is 5,000,000 routeTargetEntryLimit maximum number of combined import and export route-target entries in the range 02147483648; the default is 5,000,000
Mode(s):
Router Configuration
237
line
Description: Opens virtual terminal lines or the console line and allows you to configure the lines. By default five vty lines (04) are open. The no version removes a vty line or a range of lines from your configuration; users will not be able to run Telnet, SSH, or FTP to lines that you remove. When you remove a vty line, the system removes all lines above that line. For example, no line vty 6 causes the system to remove lines 6 through 19. You cannot remove lines 0 through 4. Note: Once lines are open, login is enabled by default. Before users can access the lines, you must configure a password, disable login using the no login command, or configure AAA authentication on the line. Syntax: line { console lineNumber | vty lineRangeStart [ lineRangeEnd ] } no line vty lineNumber Mode(s): console specifies the console line vty specifies vty lines lineNumber number of a single line; 0 for the console line lineRangeStart start of the vty line range; a number from 019; lineRangeEnd end of the vty line range; a number from 019
Global Configuration
lineCoding
Description: Specifies the type of line coding used by a CE1 or CT1 interface. The no version restores the defaulthdb3 for CE1 interfaces and b8zs for CT1 interfaces. lineCoding linecodingType no lineCoding linecodingType one of the following:
Syntax:
ami alternate mark inversion b8zs bipolar with eight-zero substitution; CT1 default hdb3 high-density bipolar 3; CE1 default
Mode(s): Controller Configuration
238
link
link
Description: Syntax: Links the pool currently being configured to another DHCP local address pool. The linked pool acts as a backup pool. The no version removes the link. link poolName no link Mode(s): poolName name of pool to which you want to link the pool currently being configured
Pool Configuration
list
Description: Syntax: Lists the currently configured MPLS explicit path (optionally starting at a particular index). There is no no version. list [ index ] Mode(s): index number of a node in an ordered set of abstract nodes, a value ranging from 1255; set with the index command
load-interval
Description: Sets the time interval at which the system calculates bit rates and packet rates for an interface. The no version restores the default time interval, which is 300 seconds. This command is not available for the Ethernet interface on the SRP module. load-interval timeInterval no load-interval Mode(s): timeInterval a multiple of 30 seconds in the range 30300
Syntax:
Interface Configuration
local host
Description: Syntax: Configures an L2TP local hostname to be used with a remote host. The no version removes the local hostname from use with a remote host. local host hostname no local host Mode(s): hostname an L2TP local hostname; can be up to 64 characters in length (no spaces)
239
local ip address
Description: Syntax: Configures a local IP address for use with a remote host. The no version removes the local IP address from use with a remote host. local ip address ipAddress no local ip address Mode(s): ipAddress an IP address
log
Description: Syntax: Configures logging settings. The no version negates the command. The suspend version suspends the policy rule. [ no ] [ suspend ] log [ classifier-group claclName ] [ precedence precValue ] Mode(s): claclName classifier control list to be logged precValue precedence of rule in relation to be logged
Policy Configuration
240
log-adjacency-changes
log-adjacency-changes
Description: Generates a log message when a NLSP adjacency changes state (up or down). The no version disables this function. This command manipulates the same log as the Global Configuration log commands. log-adjacency-changes [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] no log-adjacency-changes severity minimum severity of the log messages for this category; described either by a descriptive termseverityValueor by a corresponding numberseverityNumberin the range 07. The lower the number, the higher the priority:
Syntax:
emergency or 0 system unusable alert or 1 immediate action needed critical or 2 critical condition exists error or 3 error condition warning or 4 warning condition notice or 5 normal but significant condition info or 6 informational message debug or 7 debug message
verbosity specifies the verbosity of this log categorys messages verbosityLevel specifies the verbosity of the log categorys messages; can be any of the following:
241
log destination
Description: Configures the logging of system messages. You can direct messages to a destination, limit the messages logged based on severity level, or limit the event categories for which messages are logged. The no versions restore default settings or reverse the effect of previous commands that limited event categories. Note: You can display traffic logssuch as ipTraffic, icmpTraffic, tcpTraffic, and udpTrafficonly via the show log data command or from the SRP module console. You cannot redirect traffic logs elsewhere, such as to a syslog or nonvolatile storage file, or to a Telnet session. Syntax: To specify the destination and severity of messages logged: log destination { console | nv-file | syslog ipAddress [ facility facilityId ] } { severity { severityValue | severityNumber } | off } no log destination [ syslog [ ipAddress ] ] To specify which event categories are logged to syslog: log destination syslog ipAddress { include | exclude } category [ category ]* no log destination syslog ipAddress { include | exclude } [ category ]* console configure or modify logging to the local console nv-file configure or modify logging to the nonvolatile log file; the nv-file can accept only events at a severity level of critical or higher in importance syslog configure or modify logging to a syslog server ipAddress IP address of the syslog application on a remote host facility specifies the syslog facility on the host facilityId number in the range 07 that identifies the corresponding logging facility, local0local7 severity minimum severity of the log messages displayed; described either by a descriptive termseverityValueor by a corresponding numberseverityNumberin the range 07. The lower the number, the higher the priority:
emergency or 0 system unusable alert or 1 immediate action needed critical or 2 critical condition exists error or 3 error condition warning or 4 warning condition notice or 5 normal but significant condition info or 6 informational message
242
Global Configuration
Syntax:
Global Configuration
log engineering
Description: Syntax: Mode(s): Enables engineering logs. The no version disables engineering logs. [ no ] log engineering Global Configuration
243
log fields
Description: Syntax: Selects optional fields to be added to all logs. The no version disables the optional log fields. log fields { timestamp | no-timestamp } { instance | no-instance } { calling-task | no-calling-task } no log fields Mode(s): timestamp include the timestamp in log messages no-timestamp do not include the timestamp in log messages instance include the event ID in log messages no-instance do not include the event ID in log messages calling-task include the logging task name in log messages no-calling-task do not include the logging task name in log messages
Global Configuration
log filters
Description: This command has only a no version. See the no log filterscommand for a complete description and syntax.
log here
Description: Syntax: Mode(s): Enables the current terminal as a log console. The no version disables logs destined for a console from being displayed on the current terminal. [ no ] log here User Exec, Privileged Exec, Global Configuration
244
log severity
log severity
Description: Sets the severity value for the selected category. The no version removes an override severity setting and returns a log to its default value or the system-wide setting. log severity { severityValue | off | severityNumber } [ eventCategory [ instanceTree ] | eventCategory instanceTree | eventCategory ] no log severity [ severityValue | off | severityNumber ] [ eventCategory [ filters | instanceTree ] | eventCategory { filters | instanceTree } | eventCategory | * ] severityValue and severityNumber minimum severity of the log messages displayed for the selected category; described either by a descriptive termseverityValueor by a corresponding numberseverityNumberin the range 07. The lower the number, the higher the priority:
Syntax:
emergency or 0 system unusable alert or 1 immediate action needed critical or 2 critical condition exists error or 3 error condition warning or 4 warning condition notice or 5 normal but significant condition info or 6 informational message debug or 7 debug message
Mode(s): off disables log messages for all event categories or for a specified event category eventCategory log category; refer to the CLI online Help for available options filters removes all log filters for the event category instanceTree log-specific filter parameters; refer to the CLI online Help for available options * resets all log severities, system wide and individual, to default settings
Global Configuration
245
log unlimit
Description: Syntax: Removes the limit on the number of outstanding buffers for an event category. The no version returns the number of buffers to the default value. [ no ] log unlimit [ eventCategory ] Mode(s): eventCategory log category; refer to the CLI online Help for available options
log verbosity
Description: Syntax: Sets the verbosity level for a selected category. The no version returns the log verbosity to its default value, low. log verbosity verbosityLevel [ eventCategory ] no log verbosity [ verbosityLevel ] [ eventCategory ] verbosityLevel specifies the verbosity for the log category:
Global Configuration
login
Description: Syntax: Mode(s): Requires you to log in with a password. The no version removes the password requirement and allows connections without a password. [ no ] login Line Configuration Note: If this command has been configured and no password has been configured, access to Telnet is refused.
246
login authentication
login authentication
Description: Applies an AAA authentication list to the vty sessions that you specified for AAA authentication.The no version removes all authentication methods, which means the system accepts Telnet sessions without challenge. login authentication authListName no login authentication Mode(s): authListName specifies an authentication list name of up to 32 characters
Syntax:
Line Configuration
logout subscribers
Description: Syntax: Logs out the authenticated PPP users. If you do not specify a license, B-RAS configuration commands are disabled. There is no no version. logout subscribers { all | username userName | domain domainName | virtual-router vrName | port interfaceLocation } all all PPP sessions userName active PPP session whose names match the username domainName active PPP session whose usernames have that domain name vrName active PPP session whose interfaces are bound to a specific virtual router port active PPP subscribers for the port interfaceLocation location of the port in slot/port format; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s):
Privileged Exec
247
loopback
Description: Specifies the loopback mode for a module controller or interface, or maps a loopback interface to a user domain name in Domain Map Configuration mode. The no version clears all loopback on the module or interface (the default), or deletes the mapping to the user domain name. Module controllers The options available vary depending on the module being configured. CE1 module: loopback { local | network { payload | line } } no loopback CT1 module: loopback { local | network { payload | line } | remote { line { fdl { ansi | bellcore } | inband } payload [ fdl ] [ ansi ] } } no loopback [ remote ] CT3, E3, or T3 module: loopback { local | network | payload } no loopback cOCx/STMx SONET controller (SONET/SDH section layer), OCx/STMx line modules: loopback { local | network } no loopback X.21/V.35 module: [ no ] loopback local loops the data back toward the router and sends an AIS out toward the network. network payload loops the data toward the network after the framer has processed the data. network line loops the data toward the network before the data reaches the framer. remote line fdl ansi sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 line, according to the ANSI T1.403 specification.
Syntax:
248
loopback
remote line fdl bellcore sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 line, according to the Bellcore TR-TSY-000312 specification. remote line inband sends a repeating 5-bit inband pattern (00001) to the remote end requesting that it enter into a network line loopback. remote payload [ fdl ] [ ansi ] sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 line. You can specify fdl and ansi, but it is not necessary. remote based on the last activate request sent to the remote end, sends the 16-bit ESF data link code word or inband pattern to deactivate the loopback at the remote end. network loops the data toward the network before the data reaches the framer. payload loops the data toward the network after the framer has processed the data.
Interfaces The options available vary depending on the interface being configured. ATM interface This command cannot be used on a subinterface: loopback { diagnostic | line } no loopback POS interface: [ no ] loopback internal | line diagnostic places the interface into internal loopback line ATM interface: places the interface into external loopback; POS interface: connects the received network signal directly to the transmit network signal. When configured in line loopback mode, the system never receives data from the network. internal connects the local transmitted signal to the local received signal
User Domain Name loopback interface-number no loopback Mode(s): interface-number interface number in the range 132000
249
lsp-gen-interval
Description: Syntax: Sets the minimum interval at which originated IS-IS link state packets are generated on a per LSP basis. The no version restores the default interval. lsp-gen-interval [ level-1 | level-2 ] seconds no lsp-gen-interval [ level-1 | level-2 ] Mode(s): level-1 sets interval for level 1 only level-2 sets interval for level 2 only seconds number in the range 0120; the minimum interval in seconds; the default value is 5 seconds
Router Configuration
lsp-mtu
Description: Syntax: Sets the maximum size of an IS-IS link state packet generated by the software. The no version restores the default MTU size of 1497 bytes. lsp-mtu bytes no lsp-mtu Mode(s): bytes number in the range 1289180; the MTU size in bytes; the default value is 1497
Router Configuration
lsp-refresh-interval
Description: Sets the link state packet rate at which locally generated IS-IS link state packets are periodically transmitted.The no version restores the default refresh interval. lsp-refresh-interval seconds no lsp-refresh-interval Mode(s): seconds number in the range 165535; the refresh interval in seconds; the default value is 900
Syntax:
Router Configuration
250
macro
macro
Description: Executes a macro file, which can consist of one or more macros. If you do not use the macroName option to specify a macro, the command searches in the specified macro file for a macro named start, and returns an error if the start macro is not found. If you do not specify fileName.mac, you must specify name macroName; the command then searches only in local memory for a file called macroName.mac that contains the macroName macro. There is no no version. macro [ test | verbose ] { fileName.mac [ macroName [ arg ]* ] | name macroName [ arg ]* } test displays the output of the macro without issuing the commands to the system, and displays comments verbose echoes each command as the macro executes and displays comments fileName name of the file containing the macro; requires the .mac extension macroName name of a macro within the macro file arg zero or more arguments passed to the macro; if the argument contains a space or other special character, the argument must be enclosed within double quotation marks * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
Mode(s): All
map-class frame-relay
Description: Creates a map class. Command is used when configuring Frame Relay end-to-end fragmentation and reassembly. The no version removes the map-class. [ no ] map-class frame-relay mapName Mode(s): mapName name of the map class; use up to 64 characters
Syntax:
Global Configuration
251
map-group
Description: Associates a map list to an NBMA interface when configuring static mapping. The no version removes the association. Use in conjunction with the map-list command. [ no ] map-group name Mode(s): name name of the map group
Syntax:
Interface Configuration
map-list
Description: Creates a map list for an NBMA interface when configuring static mapping. The no version removes the map list. Use in conjunction with the map-group command. [ no ] map-list name Mode(s): name name of the map list
Syntax:
252
mark
mark
Description: Sets the precedence field of the ToS byte in the IP header to a specified value. Unlike the committed-mark-value, conformed-mark-value, and the exceeded-mark-value commands, the mark command is not tied to a rate limit profile, but marks packets based on a classifier control list. Use the suspend keyword to suspend a mark rule temporaily.The no version removes the mark rule from a policy list. [ no ] [ suspend ] mark { tosByteValue mask maskValue | tos-precedence tosPrecNum | dsfield dsFieldNum | tos tosNum } [ classifier-group claclName ] [ precedence precValue ] Mode(s): suspend suspend a policy rule tosByteValue ToS byte value to be assigned to packets; in the range 0255 maskValue mask to be used when applying ToS Byte values to packets; in the range 1255 tosPrecNum ToS precedence value to be assigned to packets; in the range 07 dsFieldNum DS field value to be assigned to packets; in the range 063 tosNum ToS value to be assigned to packets; in the range 0255 claclName classifier control list used to classify packets for this IP precedence policy precValue precedence of this rule in relation to other rules within this set in the range 032768
Syntax:
Policy Configuration
mask-val
Description: Sets the mask value. Use the mask-val command in conjunction with the committed-mark-value, conformed-mark-value, and exceeded-mark-value commands. The no version restores the default value, 255. [ no ] mask-val value value mask value in the range 0255. Use the following mask values to set the appropriate bits in the ToS field of the IP packet header:
Syntax:
IP Precedence 0xED (three most significant bits) DS Field 0xFC (six significant bits)
Mode(s): Rate Limit Profile Configuration
253
match as-path
Description: Matches a BGP AS path access list. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match as-path listName [ listName ]* no match as-path [ listName ] * Mode(s): listName name of an AS path access list; string of up to 32 characters * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
match community
Description: Matches a BGP community list. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match community listName [ listName ]* [ exact-match ] no match community [ listName ]* [ exact-match ] listName a string of up to 32 characters that designates a community list; you can optionally use a regular expression to specify the listName exact-match limits the match to a route that contains only the communities contained in the specified list; cannot be used with a community list specified by a regular expression * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
Mode(s):
254
match distance
match distance
Description: Use to match any routes that have the specified administrative distance. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. Note: Matching a distance is useful only when applied to a route being redistributed out of a routing table. Distance is used to determine the relative preference between routes to the same prefix in order to pick the best route to that prefix in the routing table. Distance has no meaning in any other circumstance and any attempt to match distance will fail. Syntax: match distance distance [ distance ]* no match distance [ distance ] Mode(s): distance administrative distance in the range 0255 * indicates that one or more parameters can be repeated multiple times in a list in the command line
match extcommunity
Description: Matches a BGP extcommunity list. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match extcommunity listName [ listName ]* [ exact-match ] no match extcommunity [ listName ]* listName name of the extended-community list * indicates that one or more parameters can be repeated multiple times in a list in the command line exact-match limits the match to a route that contains only the extended communities contained in the specified list; cannot be used with an extended community list specified by a regular expression
Syntax:
Mode(s):
255
match ip address
Description: Matches any routes that have a destination network number address that is permitted by a standard or extended access list, a prefix list, or a prefix tree, or performs policy routing on packets. You cannot mix references in the same match command; you can only specify either access list(s), prefix list(s), or prefix tree(s). The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match ip address { accessListName [ accessListName ]* | prefix-list listName [ listName ]* | prefix-tree treeName [ treeName ]* } no match ip address [ accessListName ]* | prefix-list [ listName ]* | prefix-tree [ treeName ]* Mode(s): accessListName string of up to 32 alphanumeric characters listName name of a single prefix list; string of up to 32 characters treeName name of a single prefix tree; string of up to 32 characters * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
match ip next-hop
Description: Matches any routes that have a next-hop router address passed by the specified access list, prefix list, or prefix tree. You cannot mix references in the same match command; you can only specify either access list(s), prefix list(s), or prefix tree(s). The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match ip next-hop { accessListName [ accessListName ]* | prefix-list listName [ listName ]* | prefix-tree treeName [ treeName ]* } no match ip next-hop [ accessListNumber ]* | prefix-list [ listName ]* | prefix-tree [ treeName ]* Mode(s): accessListName name of a single standard access list; string of up to 32 characters listName name of a single prefix list; string of up to 32 characters treeName name of a single prefix tree; string of up to 32 characters * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
256
match level
match level
Description: Matches import routes for the specified type. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match level { backbone | level-1 | level-1-2 | level-2 | stub-area } * no match level [ backbone | level-1 | level-1-2 | level-2 | stub-area ] Mode(s): backbone an OSPF backbone area level-1 a level 1 area level-1-2 a level 1 and a level 2 area level 2 a level 2 subdomain stub-area an OSPF NSSA area * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
match metric
Description: Matches a route for the specified metric value. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match metric metricValue [ metricValue ]* no match metric [ metricValue ] Mode(s): metricValue number in the range 04294967295, which indicates the preference value for a specific route in a route map * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
match metric-type
Description: Syntax: Matches routes having the specified metric type. The no version removes the match clause from a route map. match metric-type { external | internal } no match metric-type [ external | internal ] Mode(s): external IS-IS external metric type internal IS-IS internal metric type
257
match route-type
Description: Matches routes of the specified type. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match route-type internal [ intra | inter ] [ level-1 | level-2 ] [ external [ type-1 | type-2 ] ] [ level-1 | level-2 ]* match route-type external [ type-1 | type-2 ] [ level-1 | level-2 ] [ internal [ intra | inter ] ] [ level-1 | level-2 ]* match route-type { level-1 | level-2 } [ internal [ intra | inter ] ] [level-1 | level-2 ] [ external [ type-1 | type-2 ] ] [ level-1 | level-2 ]* match route-type { level-1 | level-2 } [ external [ type-1 | type-2 ] ] [ level-1 | level-2 ] [ internal [ intra | inter ] ] [ level-1 | level-2 ]* no match route-type [ internal [ intra | inter ] | external [ type-1 | type-2 ] | level-1 | level-2 ] internal internal routes
Syntax:
type-1 OSPF type 1 external routes type-2 OSPF type 2 external routes
Mode(s): level-1 IS-IS level 1 routes level-2 IS-IS level 2 routes * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
258
match tag
match tag
Description: Matches the tag value of the destination routing protocol. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match tag tagValue [ tagValue ]* no match tag [ tagValue ]* Mode(s): tagValue number in the range 04294967295 * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
maximum-paths
Description: Controls the maximum number of equal-cost paths to the same destination that BGP, IS-IS, OSPF, or RIP can install in the routing table to support ECMP. For BGP, issue the command from Router Configuration mode to apply to routes in the global RIB. In Address Family Configuration mode, issue the command only in the context of IPv4 unicast address families to apply the value only to routes in the global RIB or the specific VRF for the IPv4 unicast address family; VPNv4 address families are not supported. For IS-IS, OSPF, or RIP, issue from Router Configuration mode. The no version restores the default value, 1 path for BGP or 4 paths for IS-IS, OSPF, and RIP. Syntax: For BGP: maximum-paths [ ibgp ] maxPaths no maximum-paths [ ibgp ] [ maxPaths ] ibgp specifies that the maxPaths value applies only to routes received from internal (IBGP) peers; if this keyword is not specified, the maxPaths value applies only to routes received from external (EBGP) peers maxPaths maximum number of parallel paths (routes) in the range 16
For IS-IS and RIP: maximum-paths maxPaths no maximum-paths maxPaths maximum number of parallel paths (routes) in the range 116
For OSPF: [ no ] maximum-paths maxPaths Mode(s): maxPaths maximum number of parallel paths (routes) in the range 116
259
maximum routes
Description: Sets a warning threshold and maximum limit for routes imported by a PE router into a VRF from associated CE routers. The no version removes the limit and warning threshold. maximum routes limit { warningThreshold | warning-only } no maximum routes limit number in the range 14294967295 that when exceeded prevents routes from being imported into the routing table; when first exceeded generates a limit-exceeded log entry; if the route count fluctuates below and up to this value, an interval of five minutes must pass before another limit-exceeded log entry can be generated warningThreshold percentage in the range 1100 that when first exceeded generates a warning-threshold-exceeded log entry; if the route count fluctuates around this value, an interval of five minutes must pass before another warning-threshold-exceeded log entry can be generated warning-only causes the limit to function as a warningThreshold; specifies that exceeding the limit generates a warning-threshold-exceeded log entry instead of a limit-exceeded log entry and permits routes exceeding the limit to be added to the routing table; if the route count fluctuates around the limit, an interval of five minutes must pass before another warning-threshold-exceeded log entry can be generated
Syntax:
Mode(s):
VRF Configuration
max-lsp-lifetime
Description: Syntax: Sets the maximum time that IS-IS link state packets persist without being refreshed. The no version restores the default time. max-lsp-lifetime seconds no max-lsp-lifetime Mode(s): seconds number in the range 165535; the lifetime of LSP in seconds; the default value is 1200 seconds
Router Configuration
260
max-response-failure
max-response-failure
Description: Terminates a test when the maxFailureValue is reached. That is, when there is no response to a designated number of operation requests, the test is terminated. This feature applies only to pathEcho entries. The no version restores the default value, five consecutive failures. max-response-failure maxFailureValue no max-response-failure Mode(s): maxFailureValue number of operation requests not responded to; 0 turns this feature off; the default is 5
Syntax:
RTR Configuration
max-sessions
Description: For RADIUS, specifies the number of outstanding requests to a server. The no version reverts to the default value. For tunnelss, sets the maximum sessions per tunnel. The no version disables the feature. The default version sets the value to zero. Syntax: For RADIUS: max-sessions sessionLimit no max-sessions sessionLimit maximum number of outstanding requests to a specific server in the range 104000; the default is 255
For tunnels: max-sessions maxSessionsPerTunnel default max-sessions no max-sessions Mode(s): maxSessionsPerTunnel maximum number of sessions that can be configure on a tunnel in the range 04294967295; the default is zero
mdl carrier
Description: Specifies that a T3 interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment. [ no ] mdl carrier Controller Configuration
Syntax: Mode(s):
261
mdl string
Description: Allows you to specify an MDL message on a T3 interface as defined in the ANSI T1.107a-1990 specification. The no version restores the default value to the specified MDL message or to all MDL messages. mdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiCode | port portValue | generator genValue } no mdl string { eic | fic | lic | unit | pfi | port | generator } Mode(s): eicValue equipment identification code; 110 characters; default is the null value. ficValue frame identification code; 110 characters; default is the null value. licValue line identification code; 111 characters; default is the null value. unitValue unit identification code; 16 characters; default is the null value. pfiCode facility identification code to send in the MDL path message; 138 characters; default is the null value. portValue equipment port number to send in the MDL idle signal message; 138 characters; default is the null value. genValue generator number to send in the MDL test signal message; 138 characters; default is the null value.
Syntax:
Controller Configuration
mdl transmit
Description: Syntax: Transmits an MDL message from a T3 interface. The no version disables transmission of the specified MDL message or all MDL messages. [ no ] mdl transmit { path-id | idle-signal | test signal } no mdl transmit Mode(s): path-id MDL path message; default is disabled idle-signal MDL idle signal message; default is disabled test-signal MDL test signal message; default is disabled
Controller Configuration
262
medium ipv4
medium ipv4
Description: Syntax: Specifies the medium type of an L2TP or L2F tunnel to IPv4 (the only medium type currently supported). The no version restores the default value, ipv4. medium ipv4 no medium Mode(s): Domain Map Tunnel Configuration
member-interface
Description: Adds an MLPPP link interfacealso known as an MLPPP bundle memberto an MLPPP bundle or adds an MFR link interfacealso known as an MFR bundle member to an MFR bundle. The no version deletes the specified interface from the MLPPP or MFR bundle. [ no ] member-interface interfaceType interfaceSpecifier Mode(s): interfaceType interface type: serial or pos interfaceSpecifier particular interface; see Interface Types and Specifiers in About This Guide
Syntax:
memory
Description: Configures memory warning parameters. When the system reaches the high memory utilization value, it sends warning messages. When memory usage falls to the abated memory utilization value, the system stops sending warning messages. The no version returns the memory warning parameters to the default values. [ no ] memory warning highUtilization abatedUtilization Mode(s): highUtilization high memory utilization value; the range is 199, and the default is 85 abatedUtilization abated memory utilization value; the range is 199, and the default is 75
Syntax:
Global Configuration
263
message-digest-key md5
Description: Syntax: Enables OSPF MD5 authentication for the remote-neighbor interface and configures the MD5 key. The no version deletes an MD5 key. message-digest-key keyID md5 [ 0 | 8 ] msgDigestKey no message-digest-key keyID keyID key identifier in the range 1255 md5 specifies use of the MD5 algorithm 0 indicates that the msgDigestKey is entered in unencrypted form (plaintext); this is the default option 8 indicates that the msgDigestKey is entered in encrypted form (ciphertext) msgDigestKey the OSPF password. The password can be a continuous string of up to 16 alphanumeric characters.
Note: If all the MD5 keys have been deleted, the authentication type is still MD5, but you need to configure MD5 keys. Note: To disable MD5 authentication for the remote-neighbor interface, use the authentication-none command. Mode(s): Remote Neighbor Configuration
metric-style narrow
Description: Configures the system to generate and accept only old-style IS-IS TLVs with narrow (six-bit) metric fields. If you issue this command, the value configured with the isis metric command can range only from 063. The no version restores the default value, which is to generate and accept only old-style TLVs with narrow (six-bit) metric fields. [ no ] metric-style narrow [ transition ] [ level-1 | level-2 | level-1-2 ] Mode(s): transition configures the system to additionally accept new-style TLVs with wider metric fields level-1 configuration applies only to level 1 routing level-2 configuration applies only to level 2 routing level-1-2 configuration applies to both level 1 and level 2 routing
Syntax:
Router Configuration
264
metric-style transition
metric-style transition
Description: Configures the system to generate and accept both old-style IS-IS TLVs with narrow (six-bit) metric fields and new-style IS-IS TLVs with wider metric fields. If you issue this command, the value configured with the isis metric command can range from 016777215. The no version restores the default value, which is to generate and accept only old-style TLVs with narrow (six-bit) metric fields. [ no ] metric-style transition [ level-1 | level-2 | level-1-2 ] Mode(s): level-1 configuration applies only to level 1 routing level-2 configuration applies only to level 2 routing level-1-2 configuration applies to both level 1 and level 2 routing
Syntax:
Router Configuration
metric-style wide
Description: Configures the system to generate and accept only new-style IS-IS TLVs with wider metric fields. If you issue this command, the value configured with the isis metric command can range from 016777215. The no version restores the default value, which is to generate and accept only old-style TLVs with narrow (six-bit) metric fields. [ no ] metric-style wide [ transition ] [ level-1 | level-2 | level-1-2 ] Mode(s): transition configures the system to additionally accept old-style TLVs with narrow (six-bit) metric fields level-1 configuration applies only to level 1 routing level-2 configuration applies only to level 2 routing level-1-2 configuration applies to both level 1 and level 2 routing
Syntax:
Router Configuration
motd-banner
Description: Controls display of a message-of-the-day banner (configured with the banner command) on a particular line when a connection is initiated. The no version disables the banner. [ no ] motd-banner Line Configuration
Syntax: Mode(s):
265
mpls
Description: Enables, disables, or deletes MPLS on either a virtual router or on an interface. MPLS does not exist by default and must be created explicitly or implicitly. If it is created implicitly, MPLS remains disabled until explicitly enabled. The no mpls version halts MPLS on the virtual router or interface and deletes the MPLS configuration. The no mpls disable version enables MPLS that was previously disabled or implicitly created on the virtual router or interface. [ no ] mpls [ traffic-eng tunnels ] [ disable ] Mode(s): traffic-eng tunnels optional keyword for compatibility with non-ERX implementations disable stops MPLS on the virtual router, but leaves the MPLS global configuration intact
Syntax:
Syntax:
Interface Configuration
266
Syntax:
Interface Configuration
mpls bandwidth
Description: Syntax: Specifies the total bandwidth reservable for MPLS on the interface. The no version restores the default value of 0. { ip rsvp | mpls} bandwidth bandwidth no { ip rsvp | mpls} bandwidth Mode(s): ip rsvp keyword for compatibility with non-ERX implementations of MPLS mpls specify this keyword for our MPLS implementation bandwidth reservable bandwidth in kilobits per second, a value in the range 110000000
Interface Configuration
mpls disable
Description: Disables the specified label distribution protocol on the interface. The no version reenables the label distribution protocol when it was previously disabled on the interface. [ no ] mpls { ldp | rsvp } disable Interface Configuration
Syntax: Mode(s):
267
mpls explicit-path
Description: Syntax: Defines an explicit path by name or ID number and also enables or disables the explicit path. The no version deletes the explicit path. { ip | mpls } explicit-path { name name | identifier number } [ enable | disable ] no { ip | mpls } explicit-path { name name | identifier number } ip keyword for compatibility with non-ERX implementations mpls specify this keyword for our MPLS implementation name name for the explicit path; string of up to 20 characters number number identifying the explicit path in the range 165535 enable reenables the explicit path that was previously disabled on the virtual router; to prevent a partially configured explicit path from being used, do not enable it until you have finished configuring or modifying the path disable disables the explicit path that was previously enabled on the virtual router
Mode(s):
Global Configuration
mpls ip propagate-ttl
Description: Controls the value for the TTL field in the MPLS header when a label is assigned to an IP packet. Enabled by default, this command sets the TTL to the TTL value from the IP packet header. The no version sets the value to 255 and controls how the network structure is hidden from the traceroute command. The default version reverts to the global default, causing the TTL field to be copied from the IP packet header and enabling the traceroute command to show all the hops in the network., and propagating the label TTL into the IP header at the tunnel egress. mpls ip propagate-ttl [ forwarded | local ] { no | default } mpls ip propagate-ttl [ forwarded | local ] Mode(s): forwarded hides the network structure from traceroute only for forwarded packets local hides the network structure from traceroute only for local packets
Syntax:
Global Configuration
268
mpls label-range
mpls label-range
Description: Syntax: Specifies the range for the platform label space; all configured virtual routers can share this range. The no version restores the default values, 161048575. mpls label-range minLabel maxLabel no mpls label-range Mode(s): minLabel lowest number acceptable for a label, a value in the range 161048575 maxLabel highest number acceptable for a label, a value in the range 161048575
Global Configuration
Global Configuration
Interface Configuration
269
Syntax:
Global Configuration
Syntax:
Global Configuration
Syntax:
Global Configuration
270
Syntax:
Global Configuration
Syntax:
Global Configuration
Global Configuration
271
Global Configuration
Global Configuration
Syntax:
Global Configuration
272
Syntax:
Global Configuration
Syntax:
Global Configuration
Syntax:
Global Configuration
273
Syntax:
Global Configuration
Syntax:
Global Configuration
274
mpls profile
mpls profile
Description: In Global Configuration mode, creates or modifies a configuration profile for the specified label distribution protocoleither LDP or RSVP-TE. Places the CLI in either LDP Configuration mode or RSVP Configuration mode. You can specify the name of a previously created profile to modify its parameters. If you specify a profile that was not previously configured, the command creates the new profile with the factory default settings. If you do not specify a profile name, the factory default profile is assumed. The no version deletes the specified profile. In Interface Configuration mode, enables either LDP or RSVP-TE on the interface. You can specify the name of a profile configured in Global Configuration mode to set the parameters for the protocol. If you specify a profile that was not previously configured, the command creates the new profile with the factory default settings. If you do not specify a profile name, the factory default profile values are applied. The no mpls version deletes the protocol on the interface. The no mpls profile version reverts to the default profile on the interface. In Global Configuration mode: mpls { ldp | rsvp } [ interface ] profile [ profileName ] no mpls { ldp | rsvp } interface profile profileName In Interface Configuration mode: mpls { ldp | rsvp } [ profile profileName ] no mpls { ldp | rsvp } [ profile ] ldp specifies LDP as the label distribution protocol rsvp specifies RSVP-TE as the label distribution protocol interface keyword for compatibility with non-ERX implementations profileName name of a profile to be created or modified (Global Configuration mode), applied to an interface (Interface Configuration mode), or deleted (both modes); the profile sets the values for the protocol parameters; until you modify the profile settings, the values match those of the implicit default profile
Syntax:
Mode(s):
275
mpls-relay
Description: Syntax: Route traffic on the specified interface over an MPLS LSP. { mpls-relay remoteAddress | route interface interfaceType interfaceSpecifier } [ vc-id ] vcidValue [ group ID groupIdValue ] no { mpls-relay | route } [ group ID groupIdValue ] Mode(s): mpls-relay routes the traffic on this interface over an MPLS LSP remoteAddress destination ip address route interface routes the traffic on this interface over another one interfaceType interface type: serial or pos interfaceSpecifier particular interface; see Interface Types and Specifiers in About This Guide vcidValue virtual connection ID; can be any 32-bit value. The two ends across the MPLS core must match inside each VC type. groupIdValue group of virtual connections ID; can be any 32-bit value
Interface Configuration
mpls reoptimize
Description: Syntax: Performs an immediate check for better paths for all existing LSPs. There is no no version. mpls [ traffic-eng ] reoptimize Mode(s): traffic-eng optional keyword for compatibility with non-ERX implementations
Global Configuration
276
Syntax: Mode(s):
Syntax: Mode(s):
mpls spf-use-any-best-path
Description: Enables the SPF calculations to consider both the best IGP (IS-IS) paths and the MPLS tunnel to reach the tunnel endpoint. The no version restores the default value, which is to always use the MPLS tunnel to reach the tunnel endpointthe IGP best paths are not considered. [ no ] mpls spf-use-any-best-path Router Configuration
Syntax: Mode(s):
mpls topology-driven-lsp
Description: Enables topology-driven LSP creation on the virtual router or in an IP profile. The no version disables topology-driven LSPs on the virtual router or in IP profiles. mpls topology-driven-lsp [ ip-profile ipProfileName ] no mpls topology-driven-lsp [ ip-profile ] Mode(s): ipProfileName name of an IP profile used for creating IP interfaces over topology-driven LSPs
Syntax:
Global Configuration
277
Global Configuration
mpls traffic-eng
Description: Syntax: Enables flooding of MPLS traffic-engineering link information into the specified IS-IS level. Flooding is disabled by default. The no version disables flooding. mpls traffic-eng { level-1 | level-2 } no mpls traffic-eng { level-1 | level-2 | router-id } Mode(s): level-1 floods IS-IS level 1 level-2 floods IS-IS level 2
Router Configuration
278
Router Configuration
Syntax:
279
mpls traffic-eng flood thresholds { up | down } percentage [ percentage ]* no mpls traffic-eng flood thresholds { up | down } up specifies that an increase in bandwidth past the threshold triggers flooding down specifies that a decrease in bandwidth past the threshold triggers flooding percentage percentage of reservable bandwidth, a value from 1 to 100 percent for increasing bandwidth and from 0 to 99 percent for decreasing bandwidth * indicates that the percentage can be repeated multiple times in a list in the command line
Mode(s):
Syntax:
Global Configuration
280
Syntax:
Router Configuration
Syntax:
Global Configuration
mru
Description: Sets the maximum allowable size in bytes of the maximum receive unit for CE1, cOCx/STMx, CT1, CT3, E3-FRAME, HSSI, POS, T3-FRAME, or X.21/V.35 interfaces. The no version restores the default value, which varies according to interface type. mru mruSize no mru mruSize maximum allowable size of the MRU CE1, CT1, cOCx/STMx, CT3, E3-FRAME, T3-FRAME, and X.21/V.35 interfaces default is 1600; range is 432765 HSSI interfaces default is 4770; range is 432768 POS interfaces default is 4470; range is 165529 Mode(s): Interface Configuration
Syntax:
281
mtrace
Description: Syntax: Discovers the routes that multicast packets follow when travelling to their destinations. There is no no version. mtrace sourceAddress [ destinationAddress [ groupAddress [ responseAddress ] ] ] [ maxHops ] [ detailed ] sourceAddress DNS name or unicast IP address of the multicast-capable device at the beginning of the path. destinationAddress DNS name or unicast address of the device at the end of the path. The default destination is the system from which you type the command. groupAddress DNS name or multicast address of the group for which you want to trace routes. The default address is 224.2.0.1 (the group used for MBONE Audio). responseAddress IP address that receives the results of the trace maxHops maximum number of hops allowed for the trace. The default is 64. detailed provides a detailed description of the trace, rather than a summary
Mode(s):
mtu
Description: Sets the maximum allowable size in bytes of the maximum transmission unit for CE1, cOCx/STMx, CT1, CT3, E3-FRAME, Ethernet, HSSI, POS, T3-FRAME, or X.21/V.35 interfaces. The no version restores the default value, which varies according to interface type. This command is not available for the Ethernet interface on the SRP module. mtu mtuSize no mtu mtuSize maximum allowable size of the MTU CE1, CT1, cOCx/STMx, CT3, E3-FRAME, T3-FRAME, and X.21/V.35 interfaces default is 1600; range is 432765 HSSI interfaces default is 4770; range is 432768 Ethernet interfaces default is 1518; range is 649188, except on the FE-2 and FE-8 I.O modules, where the range is 649042; you cannot configure MTU on Ethernet interfaces on the SRP module POS interfaces default is 4470; range is 165529 Mode(s): Interface Configuration
Syntax:
282
Syntax:
Global Configuration
283
neighbor
Description: For OSPF, configures OSPF neighbors on an NBMA network. For RIP, specifies a RIP neighbor to which the router sends unicast messages. The no version removes the neighbor (OSPF and RIP) or restores the default values (OSPF). For OSPF: neighbor ipAddress [ pollinterval seconds | priority number ] no neighbor ipAddress [ pollinterval | priority ] ipAddress IP address of the neighbors interface; this interface must itself be configured for the NBMA network type number router priority value of the neighbor in the range 14294967295; the default is 0 seconds interval in seconds at which the neighbor is polled; should be much larger than the hello interval (per RFC 1247); ranges from 0255, the default is 120 seconds
Syntax:
For RIP: [ no ] neighbor ipAddress Mode(s): ipAddress IP address of the neighbors interface; this interface must be defined as a passive interface with the passive-interface command
Router Configuration
neighbor activate
Description: Specifies a peer or peer group with which routes of the current address family are exchanged. A peer or peer group can be activated in more than one address family. By default, a peer or peer group is activated only for the IPv4 unicast address family. The address families that are actively exchanged over a BGP session are negotiated when the session is established. The no version indicates that routes of the current address family should not be exchanged with the peer or peer group. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } activate ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
Syntax:
Mode(s):
284
neighbor advertisement-interval
neighbor advertisement-interval
Description: Syntax: Sets the minimum interval between the sending of BGP updates for a given prefix. The no version restores the default interval. neighbor { ipAddress | peerGroupName } advertisement-interval seconds no neighbor { ipAddress | peerGroupName } advertisement-interval [ seconds ] ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. seconds interval in seconds between update messages; range is from 0600; default is 30 seconds for external peers and 5 seconds for internal peers
Mode(s):
neighbor allowas-in
Description: Specifies the number of times that the AS path of a received route may contain the recipient BGP speakers AS number and still be accepted. The no version restores the default state, which is to reject as a loop any route whose path contains the speakers AS number. [ no ] neighbor { ipAddress | peerGroupName } allowas-in number ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. number number in the range 110
Syntax:
Mode(s):
Router Configuration
285
neighbor as-override
Description: Prevents routing loops between routers within a VPN by substituting the current routers AS number in routing tables for that of the neighboring router. The no version halts this substitution. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } as-override ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.
Syntax:
Mode(s):
Router Configuration
286
neighbor capability
neighbor capability
Description: Controls advertisement of BGP capabilities to peers. Capability negotiation and advertisement of all capabilities, except the ORF capability, is enabled by default. The no version disables capability negotiation or prevents advertisement of the specified capability. The default version restores the default condition, advertising the capability. For all capabilities except ORF: [ no | default ] neighbor { ipAddress | peerGroupName } capability { negotiation | dynamic-capability-renegotiation | four-octet-as-numbers | route-refresh | route-refresh-cisco } For the ORF capability: neighbor { ipAddress | peerGroupName } capability orf { prefix-list | prefix-list-cisco } { send | receive | both } { no | default } neighbor { ipAddress | peerGroupName } orf { prefix-list | prefix-list-cisco } [ send | receive | both ] ipAddress neighbors IP address peerGroupName name of BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. negotiation determines whether the capabilities option is sent in the open message while establishing a session; if it is not sent, no capability negotiation is conducted with that peer dynamic-capability-renegotiation indicates support of renegotiation of capabilities (sending new capabilities or removing previously negotiated capabilities) without performing a hard clear of the BGP session four-octet-as-numbers indicates support of AS numbers and sub-AS numbers that are four octets in length, a range from 04294967295 route-refresh indicates support of route-refresh messages that request the peer to resend its routes to the system, enabling the BGP speaker to apply modified or new policies to the routes when it receives them again route-refresh-cisco indicates support of Cisco-proprietary (pre-standard) route-refresh messages for interoperability with older Cisco devices orf indicates support of cooperative route filtering to install a BGP speakers inbound route filter as an outbound route filter on the peer prefix-list installs the filterany inbound prefix list or distribute listas an outbound prefix list prefix-list-cisco installs the filterany inbound prefix list or distribute listas an outbound Cisco proprietary prefix list send sends inbound route filter to peer to install as outbound route filter
Syntax:
287
receive accepts inbound route filter from peer and installs it as outbound route filter; cannot be configured for a peer group or a peer that is a member of a peer groups both sends and accepts inbound route filters with peer for installation as outbound route filter
Mode(s):
neighbor default-originate
Description: Allows a BGP speaker (the local router) to send the default route 0.0.0.0/0 to a neighbor for use as a default route. The no version halts sending a default route to the neighbor. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } default-originate ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.
Syntax:
Mode(s):
neighbor description
Description: Syntax: Associates a textual description with a BGP neighbor. The no version removes the description. neighbor { ipAddress | peerGroupName } description text no neighbor { ipAddress | peerGroupName } description ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. text up to 80 characters of text that describes the neighbor
Mode(s):
288
neighbor distribute-list
neighbor distribute-list
Description: Distributes BGP neighbor information as specified in an access list. The no version removes an entry. Using distribute lists is one of several ways to filter BGP advertisements. You can also use route maps or use AS-path filters, as with the ip as-path access-list Global Configuration command and the neighbor filter-list command. neighbor { ipAddress | peerGroupName } distribute-list accessListName { in | out } no neighbor { ipAddress | peerGroupName } distribute-list [ accessListName ] { in | out } ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. accessListName string of up to 32 alphanumeric characters identifying an access list in applies list to incoming routes (inbound policy) out applies list to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy
Syntax:
Mode(s):
neighbor ebgp-multihop
Description: Allows BGP to accept route updates from external peers residing on networks that are not directly connected. The no version halts accepting such routers. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } ebgp-multihop [ ttl ] ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. ttl maximum number of hops to the peer; the value ranges from 1 to 255, with a default of 255
Syntax:
Mode(s):
289
neighbor filter-list
Description: Applies an AS path access list to advertisements inbound from or outbound to the specified neighbor, or assigns a weight to incoming routes that match the AS path access list. The no version stops the application of the list or assignment of the weight. To apply an access list: neighbor { ipAddress | peerGroupName } filter-list accessListName { in | out } no neighbor { ipAddress | peerGroupName } filter-list [ accessListName ] { in | out } To assign a weight: neighbor { ipAddress | peerGroupName } filter-list accessListName weight value no neighbor { ipAddress | peerGroupName } filter-list [ accessListName ] weight [ value ] ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. accessListName name of a single AS path access list; string of up to 32 characters in applies access list to incoming routes (inbound policy) out applies access list to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy value number in the range 065535; assigns relative importance to incoming routes matching AS paths
Syntax:
Mode(s):
290
neighbor local-as
neighbor local-as
Description: Assigns a local AS number for the specified BGP peer or peer group. The no version restores the default value set globally for the BGP instance with the router bgp command. neighbor { ipAddress | peerGroupName } local-as number no neighbor { ipAddress | peerGroupName } local-as [ number ] ipAddress neighbor IP address peerGroupName name of the BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. number number in the range 14294967295; the local AS to assign to the peer
Syntax:
Mode(s):
neighbor maximum-orf-entries
Description: Sets the maximum number of ORF entries of a particular type that are accepted from the specified neighbor. The no version restores the default value of no limits. neighbor ipAddress maximum-orf-entries maximum no neighbor ipAddress maximum-orf-entries [ maximum ] Mode(s): ipAddress neighbor IP address maximum maximum number of ORF entries in the range 04294967295; the default is no limit
Syntax:
291
neighbor maximum-prefix
Description: Syntax: Sets the number of prefixes that can be received from a neighbor. The no version removes the maximum prefix limitation. neighbor { ipAddress | peerGroupName } maximum-prefix maximum [ threshold ] [ strict ] [ warning-only ] no neighbor { ipAddress | peerGroupName } maximum-prefix [ maximum ] [ threshold ] [ strict ] [ warning-only ] ipAddress neighbor IP address peerGroupName name of the BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. maximum maximum number of prefixes; the default is no limit threshold percent of maximum at which to log a warning in the range 0100; the default is 75 strict checks the maximum prefix limit against all received routes rather than the default behavior of checking it only against accepted routes warning-only causes BGP software to log a warning, rather than reset the connection if the maximum or threshold value is exceeded
Mode(s):
neighbor maximum-update-size
Description: Syntax: Sets the maximum size of update messages transmitted to a BGP peer. The no version removes the maximum update size limitation. neighbor { ipAddress | peerGroupName } maximum-update-size value no neighbor { ipAddress | peerGroupName } maximum-update-size [ value ] ipAddress neighbor IP address peerGroupName name of the BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. value maximum update size in octets in the range 2564096; he default is 1024
Mode(s):
292
neighbor next-hop-self
neighbor next-hop-self
Description: Forces the BGP speaker to report itself as the next hop for an advertised route it advertised to a neighbor. Typically you use this command to prevent third-party next hops from being used on NBMA media such as Frame Relay. The no version disables the feature. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } next-hop-self ipAddress IP address of BGP-speaking neighbor peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.
Syntax:
Mode(s):
neighbor password
Description: Syntax: Enables MD5 authentication on a TCP connection between two BGP peers. The no version disables MD5 authentication. neighbor { ipAddress | peerGroupName } password [ 0 | 8 ] string no neighbor { ipAddress | peerGroupName } password ipAddress IP address of the BGP neighbor that belongs to the peer group specified by the name peerGroupName name of the BGP peer group to which this neighbor belongs. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. 0 indicates the MD5 password is entered in unencrypted form (plaintext) 8 indicates the MD5 password is entered in encrypted form (ciphertext) string MD5 password, an alphanumeric text string of up to 80 characters
Mode(s):
293
neighbor peer-group
Description: When used from Router Configuration mode without specifying an IP address, creates a BGP peer group. The no version removes a peer group. When used from Router Configuration mode with an IP address or from Address Family Configuration mode, configures a BGP neighbor to be a member of a peer group. The no version removes a neighbor from a peer group. Creating a peer group: neighbor peerGroupName peer-group no neighbor peerGroupName [ peer-group ] peerGroupName name of BGP peer group
Syntax:
Assigning members to a peer group: neighbor ipAddress peer-group peerGroupName no neighbor ipAddress peer-group [ peerGroupName ] Mode(s): ipAddress IP address of the BGP neighbor that belongs to the peer group specified by the name peerGroupName name of the BGP peer group to which this neighbor belongs
neighbor prefix-list
Description: Syntax: Assigns an inbound or outbound prefix list. The no version removes the prefix list. neighbor { ipAddress | peerGroupName } prefix-list prefix-list-name { in | out } no neighbor { ipAddress | peerGroupName } prefix-list [ prefixListName ] { in | out } ipAddress IP address of BGP-speaking neighbor peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. prefixListName name of a BGP prefix list in assigns prefix list to incoming routes (inbound policy) out assigns prefix list to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy
Mode(s):
294
neighbor prefix-tree
neighbor prefix-tree
Description: Syntax: Assigns an inbound or outbound prefix tree. The no version removes the prefix tree. neighbor { ipAddress | peerGroupName } prefix-tree prefixTreeName { in | out } no neighbor { ipAddress | peerGroupName } prefix-tree [ prefixTreeName ] { in | out } ipAddress IP address of BGP-speaking neighbor peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. prefixTreeName name of a BGP prefix tree in assigns prefix tree to incoming routes (inbound policy) out assigns prefix tree to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy
Mode(s):
neighbor remote-as
Description: Adds an entry to the BGP neighbor table. The no version removes an entry from the table. Specifying a neighbor with an AS number that matches the AS number specified in the router bgp Global Configuration command identifies the neighbor as internal to the local AS. Otherwise, the neighbor is considered external. neighbor { ipAddress | peerGroupName } remote-as number no neighbor { ipAddress | peerGroupName } [ remote-as [ number ] ] ipAddress IP address peerGroupName the name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. number number in the range 14294967295; the AS to which the neighbor belongs
Syntax:
Mode(s):
295
neighbor remove-private-as
Description: Removes private AS numbers in updates sent to external peers. The no version halts removing private AS numbers. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } remove-private-as ipAddress neighbor's IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.
Syntax:
Mode(s):
Syntax:
Note: If you enable or disable rib-out for a peer or peer group and this action changes the current configuration, the peer session or all peer group sessions are automatically bounced. Mode(s): Address Family Configuration, Router Configuration
296
neighbor route-map
neighbor route-map
Description: Applies a route map to incoming or outgoing routes. If an outbound route map is specified, BGP advertises only routes that match at least one section of the route map. The no version removes a route map. neighbor { ipAddress | peerGroupName } route-map mapTag { in | out } no neighbor { ipAddress | peerGroupName } route-map [ mapTag ] { in | out } ipAddress neighbors IP address peerGroupName name of BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. mapTag name of the route map; a string of up to 32 alphanumeric characters in apply to incoming routes out apply to outgoing routes; you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy
Syntax:
Mode(s):
neighbor route-reflector-client
Description: Configures a system as a BGP route reflector and configures the specified neighbor as its client. The no version indicates that the neighbor is not a client. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } route-reflector-client ipAddress IP address of BGP neighbor being identified as a client peerGroupName name of BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.
Syntax:
Mode(s):
297
neighbor send-community
Description: Enables a BGP speaker to send a community attribute to the peer. The no version causes the speaker to send only standard communities to the peer. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } send-community [ standard | extended | both ] ipAddress neighbor's IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group. standard sends only standard communities extended sends only extended communities both sends both standard and extended communities
Syntax:
Mode(s):
neighbor shutdown
Description: Shuts down the specified neighbor or peer group without removing the neighbor or peer group configuration. The no version reenables a neighbor or peer group that was previously shut down. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } shutdown ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
Syntax:
Mode(s):
298
Syntax:
Mode(s):
neighbor timers
Description: Sets keepalive and hold-time timers for the specified neighbor or peer group. Overrides values set for the router via the timers bgp command. The no version restores the default values. neighbor { ipAddress | peerGroupName } timers keepaliveTime holdTime no neighbor { ipAddress | peerGroupName } timers [ keepaliveTime ] [ holdTime ] ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. keepaliveTime interval in seconds between keepalive messages; range is from 065535 seconds, default is 30 seconds; a value of zero prevents BGP from sending keepalive messages holdTime period in seconds that BGP waits for keepalive messages before declaring the neighbor to be unavailable; range is from 065535 seconds; default is 90 seconds; a value of zero informs BGP not to expect any keepalive messages
Syntax:
Mode(s):
299
neighbor unsuppress-map
Description: Syntax: Restores the advertisement of routes suppressed by policy-based route flap dampening. The no version restores the default values. neighbor { ipAddress | peerGroupName } unsuppress-map mapTag no neighbor { ipAddress | peerGroupName } unsuppress-map [ mapTag ] ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group. mapTag name of the route map; a string of up to 32 alphanumeric characters
Mode(s):
neighbor update-source
Description: Allows a BGP session to use the IP address of any operational interface as the source address of TCP connections used by BGP. The no version restores the interface assignment to the closest interface. neighbor { ipAddress | peerGroupName } update-source { interfaceType interfaceSpecifier | updateSourceAddress } no neighbor { ipAddress | peerGroupName } update-source [ interfaceType interfaceSpecifier | updateSourceAddress ] ipAddress IP address of BGP-speaking neighbor peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide updateSourceAddress the source IP address
Syntax:
Mode(s):
300
neighbor weight
neighbor weight
Description: Assigns a weight to a neighbor connection. The no version removes a weight assignment. All routes learned from this neighbor will have the assigned weight initially. The route with the highest weight will be chosen as the preferred route when multiple routes are available to a particular network. The weights assigned with the match as-path and set weight route-map commands override the weights assigned using the neighbor weight and neighbor filter-list commands. neighbor { ipAddress | peerGroupName } weight value no neighbor { ipAddress | peerGroupName } weight [ value ] ipAddress neighbor's IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. value number in the range 065535; the weight to assign
Syntax:
Mode(s):
net
Description: Configures an IS-IS network entity title for the specified routing process. The no version removes a specific NET. You must specify a NET. You can add multiple manual area IDs by adding multiple NETs with the same system ID. The last NET cannot be removed. [ no ] net networkEntityTitle networkEntityTitle NET that specifies the area ID and the system ID for an IS-IS routing process; can be either an address or a name; in the form of: areaID.systemID.nSelector For example: 47.0010.0000.0000.0001.0001.1111.1111.1111.00 area ID system ID N selector
Syntax:
areaID all bytes in front of the system ID; the number of bytes can vary
from 113 bytes
systemID always 6 bytes and cannot vary nSelector the last byte; always 0
Mode(s): Router Configuration
301
netbios-name-server
Description: Syntax: Assigns a Net-Bios server to subscribers of an address pool. The no version removes the association between the address pool and the Net-Bios server. netbios-name-server ipAddressPrimary [ ipAddressSecondary ] no netbios-name-server Mode(s): ipAddressPrimary IP address of preferred Netbios server ipAddressSecondary IP address of secondary DNS server
Pool Configuration
netbios-node-type
Description: Syntax: Specifies a Net-Bios node type. The no version restores the default situation, in which the node type is unspecified. netbios-node-type nodeType no netbios-node-type nodeType one of the following types of Net-Bios servers:
b-node Net-Bios Broadcast node p-node Net-Bios Peer-to-Peer node m-node Net-Bios mixed node h-node Net-Bios hybrid node
Mode(s): Pool Configuration
302
network
network
Description: For BGP, configures a BGP speaker with a prefix originating within its AS that it advertises to its peers if a non-BGP route to the prefix exists in the IP forwarding table. The no version removes the prefix. For RIP, enables RIP on a specific network (not on a range of networks). If you do not associate a network with RIP, the system cannot advertise the network in any RIP update. The no version disables RIP on a specific network. If you do not specify a network mask, the system applies the natural mask. Use the ip rip commands to configure RIP attributes on the network. For DHCP local server, specifies the IP addresses that the DHCP local server can provide from an address pool. The no version removes the network address and mask. For BGP: [ no ] network networkNumber [ mask networkMask ] [ route-map mapTag ] [ weight weight ] [ backdoor ] networkNumber prefix that BGP will advertise networkMask subnet mask mapTag name of the route map; a string of up to 32 alphanumeric characters weight number in the range 065535; default is 32768; assigns an absolute weight to the network route that overrides a weight assigned by the redistribute command backdoor lowers the preference of an EBGP route to the specified prefix by setting the administrative distance to the value of an internal BGP route. Use this option to favor an IGP backdoor route over an EBGP route to a specific network. BGP does not advertise the prefix specified with this option.
Syntax:
For RIP: [ no ] network networkAddress [ networkMask ] networkAddress IP address of the network networkMask subnet mask; the command accepts either the standard mask (network 10.2.1.0 255.255.255.0) or the inverse mask (network 10.2.1.0 0.0.0.255)
303
For DHCP local server: network networkAddress { networkMask | prefix } no network [ force ] Mode(s): ipAddress IP address of the network networkMask subnet mask for the network prefix network prefix force deletes address pool even if the pool is in use
Address Family Configuration or Router Configuration for BGP; Router Configuration for RIP; Pool Configuration for DHCP local server
network area
Description: Syntax: Defines the interfaces on which OSPF runs and the area ID for those interfaces. The no version deletes OSPF interfaces, ranges, and areas. [ no ] network ipNet maskWildCard area { areaId | areaIdInt } ipNet network number maskWildCard wild-card mask for the network number areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value, in the range 04294967295
Note: Before you issue this command, you must first configure one or more interface with an IP address that is within the range specified by ipNet. Mode(s): Router Configuration
next-address
Description: Syntax: Configures an IPv4 hop at the end of the MPLS explicit path. There is no no version. next-address ipAddress [ mask ipMask ] [ loose ] ipAddress address of the node ipMask [not currently used] mask for the next adjacent address loose indicates the node is not necessarily directly connected (adjacent) to the previous node in the path. If loose is not configured, the configuration defaults to strict. Strict indicates that the node is directly connected to the previous node.
Mode(s):
304
next-hop
next-hop
Description: Defines the IP address of the next hop for a policy list. The classifier-group keyword and claclName argument specify the classifier control list. If you do not specify a classifier group, the system selects all packets from the interface associated with this policy list for this rule. Use the suspend keyword to suspend a filter rule temporarily. The no version removes a next hop rule from a policy list. Note: The SRP module does not support the next-hop command. Syntax: [ no ] [ suspend ] next-hop address [ classifier-group claclName ] [ precedence precValue ] Mode(s): suspend suspend a policy rule address IP address for the next hop claclName classifier control list used to classify packets for this next-hop policy precValue precedence of this rule in relation to other rules within this set
Policy Configuration
next-interface
Description: Defines an output interface for a policy list. Use the classifier-group option to specify the classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with this policy list for this rule. Specify a next-hop command when the interfaceType is a broadcast medium. The no version removes a next-interface rule from a policy list. The suspend version suspends a filter rule temporarily. Note: The SRP module does not support the next-interface command. Syntax: [ no ] [ suspend ] next-interface interfaceType interfaceNumber [ next-hop nextHop ] [ classifier-group claclName ] [ precedence precValue ] Mode(s): suspend suspend a policy rule interfaceType type of interface to route packets to interfaceNumber number of the interface to route packets to nextHop next-hop IP address claclName classifier control list used to classify packets for this next-interface policy precValue precedence of this rule in relation to other rules within this set
Policy Configuration
305
no area
Description: Syntax: Removes the specified OSPF area if there are no OSPF interfaces configured in the area. no area { areaId | areaIdInt } Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value 04294967295
Router Configuration
no ip interface
Description: Syntax: Mode(s): Removes the IP configuration from the interface or subinterface and disables IP processing on the interface. no ip interface Interface Configuration, Subinterface Configuration
no log filters
Description: Syntax: Mode(s): Turns off all log filters. To turn off a specific filter, use the no version of the log severity command that you used to add the filter. no log filters Global Configuration
no radius client
Description: Syntax: Mode(s): Use to unconfigure all RADIUS servers for the virtual router context and to delete the RADIUS client for the virtual router context. no radius client Global Configuration
306
node
node
Description: Syntax: Specifies that a scheduler node be configured for each interface of the given interface type. The no version removes this rule from the QoS profile. [ no ] interfaceType node [ scheduler-profile schedulerProfileName ] [ group groupName ] interfaceType one of the following interface types for which scheduler nodes should be configured: atm-vc, cbf, fr-vc, ip, ip-tunnel, l2tp-tunnel, vlan schedulerProfileName name of the scheduler profile groupName name of the traffic class group
Mode(s):
nrzi-encoding
Description: Syntax: Mode(s): Use to enable NRZI encoding. [ no ] nrzi-encoding Interface Configuration
ntp access-group
Description: Specifies the type of broadcasts that the system will accept and respond to, and specifies the servers from which the system will accept broadcasts. The no version enables the system to receive all NTP broadcasts on interfaces configured to receive broadcasts. ntp access-group { peer | serve-only | serve | query-only } accessListName no ntp access-group { peer | serve-only | serve | query-only } Note: The system can accept, but does not use, NTP control queries. peer enables the system to receive time requests, receive NTP control queries, and synchronize itself to the servers specified on the access-list serve-only enables the system to receive time requests and NTP control queries from servers specified on the access-list, but not to synchronize itself to the specified servers serve enables the system only to receive time requests from the servers specified on the access-list query-only enables the system only to receive NTP control queries from the servers specified on the access-list accessListName name of the access list
Syntax:
Mode(s):
Global Configuration
307
ntp broadcast-client
Description: Syntax: Mode(s): Enables an interface to receive NTP broadcasts.The no version prevents an interface from receiving NTP broadcasts. [ no ] ntp broadcast-client Interface Configuration
ntp broadcast-delay
Description: Sets the estimated round-trip delay between the broadcast NTP server and the system. The no version restores the round-trip delay to the default value, 3000 microseconds. ntp broadcast-delay delayTime no ntp broadcast-delay Mode(s): delayTime a value in the range 0999999 microseconds
Syntax:
Global Configuration
ntp disable
Description: Syntax: Mode(s): Disables NTP on an interface. The no version enables NTP on an interface. The default setting is enable. [ no ] ntp disable Interface Configuration
ntp enable
Description: Enables NTP services on the system and attaches the NTP client to the current virtual router. The no version disables reception of NTP packets on the system and removes the association between NTP and the virtual router. The default setting is disable. [ no ] ntp enable Global Configuration
Syntax: Mode(s):
308
ntp master
ntp master
Description: Specifies the stratum number of a virtual router you configured as an NTP server. By default, if the system is configured as an NTP server, the stratum number is set to the stratum number of the master plus one. The no version restores the default stratum number. [ no ] ntp master [ stratumNumber ] Note: Although you can specify a stratum number of 1, the system does not support stratum 1 service. The system can synchronize only with an NTP server, and not directly with an atomic clock or radio clock. stratumNumber number in the range 115 that indicates how many hops the NTP server is from an accurate time source, such as a radio clock or atomic clock. Stratum n servers are n hops from an accurate time source. The default is 8.
Syntax:
Mode(s):
Global Configuration
ntp server
Description: Specifies an NTP server for time synchronization. The source option for this command overrides the ntp source command.The no version terminates NTP communications between this server and the interface. ntp server ipAddress [ version number ] [ prefer ] [ source interfaceType interfaceSpecifier ] no ntp server ipAddress Mode(s): ipAddress IP address of the NTP server number value from 1 to 4; indicates the version of the NTP software on the server prefer indicates that this server is the first choice for time synchronization source directs responses from the NTP server to a specific interface on the system; overrides the ntp source command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
Global Configuration
309
ntp source
Description: Directs responses from all NTP servers to a specific interface. Using the source option with the ntp server command overrides the ntp source command. The no version restores the default situation in which servers reply to the interface from which the NTP request was sent. ntp source interfaceType interfaceSpecifier no ntp source Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
Global Configuration
310
operations-per-hop
operations-per-hop
Description: Configures the number of operations sent to a designated hop before the TTL value is increased. This option applies only to the pathEcho type. The no version restores the default value, 3. operations-per-hop operationsHopValue no operations-per-hop Mode(s): operationsHopValue number of operations per hop; the default is 3
Syntax:
RTR Configuration
Router Configuration
ospf enable
Description: Syntax: Mode(s): Enables OSPF on the router. The no version disables OSPF on the router. [ no ] ospf enable Router Configuration
311
ospf log-adjacency-changes
Description: Syntax: Configures the router to send a syslog message when the state of an OSPF neighbor changes. The no version turns off this feature. [ no ] ospf log-adjacency-changes [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] severity minimum severity of the log messages displayed for the selected category; described either by a descriptive termseverityValueor by a corresponding numberseverityNumberin the range 07; the lower the number, the higher the priority:
emergency or 0 system unusable alert or 1 immediate action needed critical or 2 critical condition exists error or 3 error condition warning or 4 warning condition notice or 5 normal but significant condition info or 6 informational message debug or 7 debug message
verbosityLevel specifies the verbosity of the log categorys messages; can be any of the following:
ospf shutdown
Description: Syntax: Mode(s): Administratively disables OSPF on the router. The no version reenables OSPF on the router. [ no ] ospf shutdown Router Configuration
overload shutdown
Description: Syntax: Mode(s): Causes BGP to shut down when it runs out of resources. The no version restores the default behavior, which is to continue running. [ no ] overload shutdown Router Configuration
312
override-user
override-user
Description: Syntax: Specifies a single username and single password for all users from a domain. The no version removes the username and reverts to the original username. override-user [ name newName ] password newPassword no override-user Mode(s): newName identifier that replaces the username newPassword password that replaces the users password
owner
Description: Syntax: Configures the owner of the RTR operation. The no version restores the default value. owner ownerValue no owner Mode(s): ownerValue specifies the owners identifier: 0255 ASCII characters; by default, no owner is configured
RTR Configuration
padn
Description: Syntax: Configures PADN parameters for a domain name. The no version deletes the PADN parameters from the domain name. padn ipAddress ipmask distance no padn ipAddress ipmask Mode(s): ipAddress destination IP address ipmask IP mask for the destination distance administrative distance metric for this route in the range 0255
313
passive-interface
Description: Modifies the transmission of routing updates for IS-IS, OSPF, and RIP. For IS-IS, configures an IS-IS interface to only advertise its IP address in the link state PDUs; the interface does not send or receive IS-IS packets. Issue the complementary interface command to enable the interface to send and receive IS-IS packets. The no version disables the advertising of the IP address. For OSPF, halts the transmission of routing updates on an OSPF interface. OSPF neither sends nor receives routing information through the specified interface, which appears as a stub network in the OSPF network. The no version reenables the transmission of routing updates. For RIP, halts the transmission of multicast RIP messages. RIP messages are unicast to the interface (if it is the best path to a configured neighbor). The no version reenables the transmission of multicast messages on the interface. [ no ] passive-interface interfaceType interfaceSpecifier Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
Router Configuration
314
password
password
Description: Configures a password to be used at login on the console, a line or a range of lines; or specifies the password for an L2TP of L2F tunnel. The no version removes the password. Login Password: password [ encryptionType ] passwordValue no password encryptionType one of the following types:
Syntax:
L2TP or L2F Tunnel Password: password tunnelPassword no password Mode(s): tunnelPassword up to 32-character password
Line Configuration for a login password; Domain Map Tunnel Configuration for a tunnel password
315
path
Description: Syntax: Configures paths over channelized SONET and SDH interfaces. The no version deletes a path. path pathChannel [ pathSpeed [ pathHierarchy ] ] no path pathChannel pathChannel number in the range 12147483648 that identifies the STS-1 or STM-0 line pathSpeed speed of the path
oc1, oc3, or oc12 for SONET only oc1 or oc3 is available for
cOC3/STM1 interfaces
stm0, stm1, or stm4 for SDH only stm0 or stm1 is available for
cOC3/STM1 interfaces Note: Although the path speed appears to be optional in the software, you must specify a value. pathHierarchy identifier that defines the structure of the path
If you specify a path speed that matches the speed of the module (for
example, a path speed of oc3 for a cOC3/STM1 interface), do not specify an identifier.
316
path ds1|e1
path ds1|e1
Description: Syntax: Creates and configures SONET and SDH tributaries. The no version deletes a tributary. path pathChannel { ds1 | e1 } tributaryIdentifier [ tributary-type ] [ no ] pathChannel { ds1 | e1 } path tributaryIdentifier pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier specifier for the tributary in the format pathChannel { ds1 | e1 } pathPayload/tributaryGroup/tributaryNumber
pathPayload payload number for the path; value is 1 for SONET and in
the range 13 for SDH
vt15 default for SONET DS1 tributaries tu11 default for SDH DS1 tributaries tu12 default for SDH E1 tributaries
Mode(s): Controller Configuration
317
Syntax:
2^11 pseudorandom test pattern, 2048 bits in length 2^15 pseudorandom 0.151 test pattern, 32768 bits in length 2^20-O153 pseudorandom 0.153 test pattern, 1048575 bits in length
time interval between test patterns, ranging from 114400 minutes unframed test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern occupies only T1/E1 payload bits.
Mode(s):
Controller Configuration
Syntax:
Controller Configuration
318
Syntax:
Controller Configuration
Syntax:
Mode(s):
Controller Configuration
319
module internal clock is from the line module itself chassis internal clock is from the configured system clock
Mode(s): Controller Configuration
crc4 cyclic redundancy check (default for E1); not available for T1 no-crc4 no cyclic redundancy check; not available for T1 esf extended superframe (T1 default); not available for E1 sf superframe; not available for E1
Mode(s): Controller Configuration
320
Syntax:
Note: You cannot send an inband pattern to the remote end requesting that it enter into a network line loopback. Mode(s): Controller Configuration
321
Syntax:
Controller Configuration
Controller Configuration
Controller Configuration
322
Syntax:
Controller Configuration
Syntax:
Controller Configuration
323
Syntax:
Controller Configuration
Syntax:
Controller Configuration
path ds3
Description: Creates and configures a T3 over channelized SONET interface. If you do not specify whether or not the path should be channelized, the system creates a channelized path by default. The no version deletes a path. path pathChannel ds3 ds3Channel { [ channelized ] | unchannelized } no path pathChannel ds3 ds3Channel Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path
Syntax:
Controller Configuration
324
module internal clock is from the line module itself chassis internal clock is from the configured system clock
Mode(s): Controller Configuration
c-bit default; specifies c-bit parity framing m23 specifies M23 multiplexer framing
Mode(s): Controller Configuration
325
Controller Configuration
Syntax:
Controller Configuration
326
Syntax:
Controller Configuration
327
Syntax:
Controller Configuration
Controller Configuration
Syntax:
Controller Configuration
328
path ds3 t1
path ds3 t1
Description: Syntax: Creates and configures a T1 channel on a T3 over channelized SONET interface. The no version deletes a path. [ no ] path pathChannel ds3 ds3Channel t1 t1Channel Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel
Controller Configuration
Syntax:
2^11 pseudorandom test pattern, 2,048 bits in length 2^15 pseudorandom 0.151 test pattern, 32,768 bits in length 2^20-O153 pseudorandom 0.153 test pattern, 1,048,575 bits in length
time interval between test patterns, ranging from 114400 minutes unframed test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern occupies only T1/E1payload bits.
Mode(s):
Controller Configuration
329
module internal clock is from the line module itself chassis internal clock is from the configured system clock
Mode(s): Controller Configuration
330
Controller Configuration
Syntax:
Controller Configuration
331
Syntax:
Controller Configuration
332
Syntax:
Controller Configuration
333
Mode(s):
Controller Configuration
334
Syntax:
Controller Configuration
Syntax:
Controller Configuration
Syntax:
Controller Configuration
335
Syntax:
Mode(s):
Controller Configuration
path e1 unframed
Description: Syntax: Configures unframed E1 for channelized SONET and SDH interfaces. The no version deletes an unframed E1 interface from the path. [ no ] path pathChannel e1 tributaryIdentifier unframed Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command.
Controller Configuration
336
path overhead j1
path overhead j1
Description: Specifies trace messages to check for connectivity between the system and the SONET/SDH device at the other end of the line. The no version restores the default situation, in which all characters of the trace message are zeros. [ no ] path pathChannel overhead j1 { msg | exp-msg } [ message ] pathChannel identifier for the path
Syntax:
For OC3 (dual port) or OCx/STMx interfaces, there is no identifier For cOCx/STMx interfaces, a number in the range 12147483648 that
identifies the path Mode(s): msg send the specified transmit message exp-msg expect the specified trace message message text of the message. The maximum is 15 characters for SDH mode and 62 characters for SONET mode.
Controller Configuration
Controller Configuration
peak-burst
Description: Syntax: Sets the peak burst for a rate limit profile. The no version restores the default value, 8192. [ no ] peak-burst size Mode(s): size size in bytes in the range 81924294967295
337
peak-rate
Description: Syntax: Sets the peak rate for a rate limit profile. The no version restores the default value, 0. [ no ] peak-rate rate Mode(s): rate rate in bits per second in the range 04294967295
pim disable
Description: Syntax: Mode(s): Disables PIM on a virtual router. The no version reenables PIM on a virtual router. [ no ] pim disable Router Configuration
338
ping
ping
Description: Syntax: Sends an ICMP echo request packet to the IP address that you specify. There is no no version. ping [ vrf vrfName ] [ ip ] destination [ packetCount ] [ timeout timeOutVal ] [ transmit-delay delayVal ] [ ttl ttlValue ] [ data-size dataSize ] [ data-pattern { ones | zeros | random | hex-data hexData } ] [ source { interface interfaceType interfaceSpecifier | address sourceAddr } ] [ sweep-sizes sweepMin sweepMax [ sweep-interval sweepInt ] ] [ extended [ tos tosVal ] [ set-dont-fragment-bit ] [ set-router-alert ] [ { loose-source-route | strict-source-route } [ srtAddrs ]* ] [ record-route numRoutes ] [ timestamp numTstamps ] [ interface interfaceType InterfaceSpecifier ] ] vrfName name of the VRF context ip optional keyword for compatibility with non-ERX implementations destination IP address or domain name of the host to ping packetCount number of packets to send to the destination IP address in the range 04294967295; the default is 5; 0 means ping forever timeOutVal number of seconds in the range 120 to wait for an ICMP echo reply packet before the connection attempt times out delayVal number of milliseconds in the range 150 between transmission of each ICMP request; default is 10 ms ttlValue specifies a hop count by setting the time-to-live field in the IP header in the range 1255; default is 32 dataSize number of bytes comprising the IP packet and reflected in the IP header in the range 064000; the default is 100 bytes data-pattern type of bits contained in the packet. You can set the bits to all ones, all zeros, a random mixture of ones and zeros, or a specific hexadecimal data pattern that can range from 0x0 0xFFFFFFFF. The default data pattern is all zeros. source interface specifies an interface as the source of the packets
339
destination address. This reduces packet fragmentation which contributes to performance problems. The default is not to sweep (all packets are the same size).
sweepMin minimum payload size in the range 064000 sweepMax maximum payload size in the range 064000 sweepInt number of bytes to add to the size of the packet; the change
in the size of subsequent ping packets while sweeping across a range of sizes. For example, you can configure the sweep interval to sweep across the range of packets from 100 bytes to 1000 bytes in increments of sweepInt. By default, send 100, 101, 102, 103...1000. If sweepInt is 5, send 100, 105, 110, 115...1000). When sweeping, the default interval is 1. extended enables you to configure extended header attributes
tosVal specifies the value set in the ToS byte in the range 0255 to
support QoS offerings
340
To send F4 segment loopback cells, set the VCI to 3. To send F5 end-to-end loopback cells, set the VCI to 4.
end-loopback sends the ping to the connection endpoint seg-loopback sends the ping to the first segment endpoint destination value of the location ID included the loopback cell. The location ID is a 16-octet field, and the destination portion is 4 octets. You can set the destination to a specific location ID or to 0s (zeros) or 1s (ones). If the destination is set to:
Mode(s):
Privileged Exec
341
policy-list
Description: Creates or modifies a policy list. If you execute a policy-list command and type exit, the system creates a policy list with no rules, the default. When no rules are found in a policy list, the system automatically inserts a default filter rule. Attaching this policy list to an interface will filter all packets on that interface. The no version removes a policy list. [ no ] policy-list policyName Mode(s): policyName name associated with the policy list
Syntax:
Global Configuration
pos framing
Description: Syntax: Sets the type of framing for a POS interface. There is no no version. pos framing { sdh | sonet } Mode(s): sdh uses SDH framing format sonet uses SONET framing format (the default)
Interface Configuration
pos scramble-atm
Description: Enables payload scrambling on a POS interface. When enabled, both sides of the connection must be using the scrambling algorithm. The system uses a 43rd-order synchronous scrambler to scramble the output data. The no version disables scrambling on the POS interface. [ no ] pos scramble-atm Interface Configuration
Syntax: Mode(s):
342
ppp authentication
ppp authentication
Description: Syntax: Requests authentication from a PPP peer system. The no version removes the authentication requirement. ppp authentication [ virtual-router vrName ] chap [ pap ] | pap [ chap ] no ppp authentication vrName name of a virtual router to be used as the authentication virtual router chap specifies CHAP authentication protocol. If the peer system refuses to use CHAP and you additionally specified PAP on the command line, the system requests the PAP protocol. If the peer system refuses to negotiate authentication, the system terminates the session. pap specifies PAP authentication protocol. If the peer system refuses to use PAP and you additionally specified CHAP on the command line, the system requests the PAP protocol.
Mode(s):
ppp aaa-profile
Description: Maps an AAA profile to static and dynamic, multilink and nonmultilink PPP interfaces. The no version removes the AAA profile assignment to the PPP interface. ppp aaa-profile profileName no ppp aaa-profile Mode(s): profileName name of the AAA profile; 32 characters maximum
Syntax:
343
ppp chap-challenge-length
Description: Modifies the length of the CHAP challenge by specifying the minimum and maximum allowable length. The no version restores the defaults. Caution: We recommend that you do NOT use the ppp chap-challenge-length command; increasing the minimum length (from the default 16 bytes) or decreasing the maximum length (from the default 32 bytes) reduces the security of your system. Syntax: ppp chap-challenge-length minLength maxLength no ppp chap-challenge-length minLength minimum length of the CHAP challenge in bytes in the range 863; default value is 16 bytes maxLength maximum length of the CHAP challenge in bytes in the range 863; value must be equal to or greater than the minimum length; default value is 32 bytes
Mode(s):
ppp description
Description: Syntax: Assigns a text description or alias to a static PPP interface. The no version removes the text description or alias. ppp description name no ppp description Mode(s): name text description or alias for the ppp interface; up to 64 characters
Syntax: Mode(s):
344
ppp keepalive
ppp keepalive
Description: Specifies a keepalive value. The keepalive mechanism tracks the status of the connection. The no version disables keepalive. High-density mode is automatically selected when PPP is layered over ATM, Tunnel, or PPPoE. Low-density mode is selected when PPP is layered over HDLC. ppp keepalive [ seconds ] no ppp keepalive seconds keepalive timeout period in the range 30300 seconds for high-density mode or 10300 seconds for low-density mode. The default is 30.
Syntax:
Mode(s):
ppp log
Description: Syntax: Enables PPP packet or state machine logging on any dynamic interface that uses the profile being configured. The no version disables the logging. [ no ] ppp log logCategory logCategory one of the following categories
pppPacket enables PPP packet logging pppStateMachine enables PPP state machine logging
Mode(s): Profile Configuration
Syntax: Mode(s):
345
ppp max-bad-auth
Description: Specifies the maximum number of authentication retries the system accepts before terminating a PPP session. The no version returns the value to the default. ppp max-bad-auth maxBadAuth no ppp max-bad-auth maxBadAuth number of authentication retries after which the interface resets itself in the range: 07. The default is 0, which indicates that no retries are allowed.
Syntax:
Mode(s):
ppp mru
Description: Sets the maximum allowable size in bytes of the maximum receive unit for PPP or MLPPP serial interfaces. If the command is executed from an encapsulated PPP or MLPPP serial interface, it affects only that interface. If executed from an MLPPP bundle, it affects all serial member links within that bundle. The no version restores the default value, which varies according to module type. ppp mru mruSize no ppp mru Mode(s): mruSize the maximum allowable size of the MRU; the range is from 6465535
Syntax:
Syntax: Mode(s):
346
ppp passive-mode
ppp passive-mode
Description: Forces dynamic and static PPP interfaces into passive mode before LCP negotiation begins for a period of one second, enabling slow clients time to start up and to initiate LCP negotiation. The no version disables passive mode. [ no ] ppp passive-mode Interface Configuration, Subinterface Configuration, Profile Configuration
Syntax: Mode(s):
ppp peer
Description: Resolves conflicts when the system and the PPP peer system have the primary and secondary DNS and WINS name server addresses configured with different values. If the PPP peer system has the address and the system does not, the peer always supplies the address regardless of how you have configured the PPP peer. The no version configures the system to take precedence during setup negotiations between the system and the remote personal computer client. [ no ] ppp peer { dns | wins } Mode(s): dns sets the peer to take precedence over the system for resolving conflicts in the DNS primary and secondary addresses wins sets the peer to take precedence over the system for resolving conflicts in the WINS primary and secondary addresses
Syntax:
ppp shutdown
Description: Stops a PPP session. For MLPPP, issue only in the context of a network interface; the command disables the service for the MLPPP network interface (MLPPP bundle). The no version restarts a PPP session. [ no ] ppp shutdown [ ip | mpls | osi ] Mode(s): ip disables the IPCP service mpls disables MPLS service osi disables the OSINLCP service
Syntax:
347
pppoe
Description: Syntax: Mode(s): Creates a PPPoE major interface. The no version removes the interface. [ no ] pppoe Interface Configuration, Subinterface Configuration
pppoe acName
Description: Allows you to configure an access concentrator name for a PPPoE interface or profile. If no AC name is configured, the system name is used. The no version removes the access concentrator name. pppoe acName string no pppoe acName Mode(s): string AC name; 64 characters maximum
Syntax:
pppoe auto-configure
Description: Syntax: Mode(s): Sets up the system to dynamically create PPPoE subinterfaces on the PPPoE major interfaces. The no version removes this configuration. [ no ] pppoe auto-configure Subinterface Configuration
pppoe always-offer
Description: Sets up the system to offer to set up a session, even if the system has insufficient resources to establish a session. The no version disables this feature, and is the default setting. [ no ] pppoe always-offer Subinterface Configuration, Profile Configuration
Syntax: Mode(s):
pppoe duplicate-protection
Description: Sets up the system to prevent a client from establishing more than one session using the same MAC address. The no version disables this feature, and is the default setting. [ no ] pppoe duplicate-protection Subinterface Configuration, Profile Configuration
Syntax: Mode(s):
348
Syntax: Mode(s):
pppoe motm
Description: Causes the PPPoE application to send a PADM message of the minute message. The no version disables the message. The recipient of the message is determined by the mode from which the command is issued. From Privileged Exec mode the message is sent to all PPPoE clients connected to the system; from Interface Configuration mode the PADM message is sent to the client as it is configured (if connected); and from Profile Configuration mode the message is sent to the new client created when the profile is dynamically attached to an IP interface. The MOTM string is passed with no changes. pppoe motm string no pppoe motm Mode(s): string message sent
Syntax:
pppoe sessions
Description: Specifies the number of subinterfaces permitted on a PPPoE interface. The command affects only subinterfaces that are created after the command is entered. Previously created interfaces remain, even if their number exceeds the new value of the sessions parameter. The no version restores the default value, 4094. pppoe sessions sessions no pppoe sessions Mode(s): sessions number of subinterfaces permitted on the interface in the range 14094; the default is 4094
Syntax:
349
pppoe subinterface
Description: Syntax: Creates a PPPoE subinterface on an FE, GE, or ATM interface. [ no ] pppoe subinterface interfaceType interfaceSpecifier Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Global Configuration
pppoe url
Description: Causes the PPPoE application to send string to the new client. The no version disables the message. The recipient of the message is determined by the mode from which the command is issued. From Interface Configuration mode the PADM message is sent to the client as it is configured (if connected). From Profile Configuration mode the message is sent to the new client created when the profile is dynamically attached to an IP interface. pppoe url url no pppoe url Mode(s): url URL string sent
Syntax:
preference
Description: Syntax: Specifies the preference value for an L2TP or L2F tunnel in Domain Map Configuration mode. The no version restores the default value, 0. preference tunnelPreference no preference Mode(s): tunnelPreference tunnel preference in the range 02000; 0 is the highest preference
350
profile
profile
Description: When used from Global Configuration mode, the command creates a profile. Use profiles to configure interfaces dynamically, allowing you to manage a large number of interfaces effectively. The no version removes the profile. When used from Subinterface Configuration mode, the command assigns a profile to an interface. Use profiles to configure interfaces dynamically, allowing you to manage a large number of interfaces effectively. The no version removes the profile assigned to the interface. When used from L2TP Destination Profile Host Configuration mode, sets an attribute of the current remote host. The no version removes the attribute from the remote host. To assign a profile name for a remote host: [ no ] profile profileName To create a profile or assign a profile to a subinterface: profile [ bridgedEthernet | ip | ppp | pppoe | any ] profileName no profile [ bridgedEthernet | ip | ppp | pppoe | any ] Mode(s): bridgedEthernet specifies a bridged Ethernet encapsulation type to which the profile applies ip specifies an IP encapsulation type to which the profile applies ppp specifies a PPP encapsulation type to which the profile applies pppoe specifies a PPPoE encapsulation type to which the profile applies any specifies any auto-configured encapsulation that does not have a specific profile assignment profileName profile name of up to 80 characters
Syntax:
qos-mode-port
Description: Syntax: Mode(s): Configures an ATM port for per-port queuing. The no version removes per-port queuing on the ATM port. [ no ] qos-mode-port Interface Configuration
351
qos-port-type-profile
Description: Syntax: Associates a QoS profile with all the ports of a given interface type. There is no no version for this command. [ no ] qos-port-type-profile interfaceType qos-profile qosProfileName Mode(s): interfaceType one of the following interface types to be associated with the QoS port-type profile: atm, ethernet, serial, server-port qosProfileName name of the QoS profile
Global Configuration
qos-profile
Description: In Global Configuration mode, creates a QoS profile on your system. The no version deletes the QoS profile in Global Configuration mode. In Interface Configuration mode, attaches a QoS profile to a given interface. The no version detaches the QoS profile from the interface in Interface Configuration mode. [ no ] qos-profile qosProfileName Mode(s): qosProfileName name of the QoS profile
Syntax:
query-interval
Description: Syntax: Specifies how often the system sends PIM router query messages to remote neighbors. The no version specifies the default time interval, 30 seconds. query-interval queryTime no query-interval Mode(s): queryTime interval in the range 0210 seconds at which the system sends PIM router query messages from this interface
Interface Configuration
352
queue
queue
Description: Syntax: Specifies that a queue traffic class be configured for the selected interface type. The no version removes this rule from the QoS profile. [ no ] interfaceType queue traffic-class trafficClassName [ queue-profile queueProfileName ] [ scheduler-profile schedProfileName ] | [ scheduler-profile schedProfileName ] [ queue-profile queueProfileName ] ] interfaceType one of the following interface types for which queue traffic classes should be configured: atm, atm-vc, cbf, ethernet, fr-vc, ip, ip-tunnel, l2tp-tunnel, serial, server-port, vlan trafficClassName name of the traffic class queueProfileName name of the queue profile schedProfileName name of the scheduler profile
Mode(s):
queue-profile
Description: Syntax: Configures a queue profile. The no version removes the named queue profile. [ no ] queue-profile queueProfileName Mode(s): queueProfileName name of the queue profile
Global Configuration
radius acct-session-id-format
Description: Syntax: Configures the RADIUS clients use of a specific format for RADIUS attribute 44, Acct-Session-Id. The no version negates the Acct-Session-Id format. radius acct-session-id-format { decimal | description } no radius acct-session-id-format Mode(s): Global Configuration
353
radius algorithm
Description: Syntax: Specifies the algorithm that the RADIUS client uses to contact the RADIUS server. The no version restores the default value, direct. radius algorithm direct | round-robin no radius algorithm Mode(s): direct contacts the first AAA server on the list for each user, and the second if the first one fails, and so on. round-robin contacts the first AAA server for the first user, and the second for the second user, and so on.
Global Configuration
radius calling-station-delimiter
Description: Syntax: Specifies the delimiter for DSL PPP users for RADIUS attribute, Calling-Station-Id. The no version removes the delimiter. radius calling-station-delimiter delimiter no radius calling-station-delimiter Mode(s): delimiter special character to set off items in the Calling-Station-Ids definition (for example, # or %)
Global Configuration
354
radius calling-station-format
radius calling-station-format
Description: On a virtual router, specifies the format of RADIUS attribute 31, Calling-Station-Id, when the PPP user is terminated at the non-LNS ERX system. The no version returns the Calling-Station-Id format to delimited. radius calling-station-format delimited | fixed-format no radius calling-station-format delimited specifies that the RADIUS client uses the delimited format: delimiter systemName delimiter interfaceDescription delimiter vpi delimiter vci In the case of Ethernet vpi delimiter vci is replaced with vlan. fixed-format specifies that the RADIUS client uses the fixed format: systemName (up to four bytes) slot (two bytes) port (one byte) VPI (three bytes) VCI (five bytes)
Syntax:
All fields are in ASCII, making the format up to 15 characters in length. In the case of Ethernet, the VPI and VCI bytes are replaced by an 8-byte
VLAN.
radius client
Description: This command has only a no version. See the no radius clientcommand for a complete description and syntax.
355
radius dsl-port-type
Description: Sets RADIUS attribute 61, NAS-Port-Type, in RADIUS access request packets and accounting start and stop packets for ATM interfaces. The no version restores the default setting of xdsl. radius dsl-port-type { sdsl | adsl-cap | adsl-dmt | idsl | xdsl | virtual } no radius dsl-port-type Mode(s): sdsl symmetric DSL adsl-cap asymmetric DSL, carrierless amplitude phase modulation adsl-dmt asymmetric DSL, discrete multitone idsl ISDN DSL xdsl DSL of unspecified type (default) virtual virtual
Syntax:
Global Configuration
radius ethernet-port-type
Description: Syntax: Indicates to RADIUS which Ethernet port type to use in RADIUS attribute 61, NAS-Port-Type, for all Ethernet users on the ERX. radius ethernet-port-type [ virtual | ethernet ] no radius ethernet-port type Mode(s): virtual sets RADIUS NAS-Port-Type to virtual ethernet sets RADIUS NAS-Port-Type to Ethernet
Global Configuration
Syntax:
356
radius include
radius include
Description: Configures the inclusion of RADIUS attributes in RADIUS messages. Not all attributes are available in all message types. All attributes are included by default except for tunnel-server-attributes. The no version restores the default. radius include attributeName { access-request | acct-start | acct-stop } { enable | disable } no radius include attributeName { access-request | acct-start | acct-stop } attributeName one of the following RADIUS attributes; not all attributes are available in all message types: Attributes available for Access-Request, Acct-Start, and Acct-Stop messages:
Syntax:
called-station-id includes RADIUS attribute 30, Called-Station-Id calling-station-id includes RADIUS attribute 31, Calling-Station-Id connect-info includes RADIUS attribute 77, Connect-Info nas-identifier includes RADIUS attribute 32, NAS-Identifier nas-port includes RADIUS attribute 5, NAS-Port, nas-port-id includes RADIUS attribute 87, NAS-Port-Id nas-port-type includes RADIUS attribute 61, NAS-Port-Type pppoe-description includes RADIUS attribute 26-24,
Pppoe-Description
357
acct-link-count includes RADIUS attribute 51, Acct-Link-Count acct-multi-session-id includes RADIUS attribute 50,
Acct-Multi-Session-ID
class includes RADIUS attribute 25, Class egress-policy-name includes RADIUS attribute 26-11,
Egress-Policy-Name
event-timestamp includes RADIUS attribute 55, Event-Timestamp framed-compression includes RADIUS attribute 13,
Framed-Compression
framed-ip-netmask includes RADIUS attribute 9, Framed-IP-Netmask ingress-policy-name includes RADIUS attribute 26-10,
Ingress-Policy-Name
input-gigawords includes RADIUS attribute 52, Acct-Input-Gigawords output-gigapkts includes RADIUS attribute 26-36,
Acct-Output-Gigapackets
Global Configuration
358
radius nas-identifier
radius nas-identifier
Description: Syntax: Configures the RADIUS clients value for RADIUS attribute 32, NAS-Identifier. The no version deletes the NAS-Identifier. radius nas-identifier identifierValue no radius nas-identifier Mode(s): identifierValue value in the range is 1 64 characters; this value is used in the NAS-Identifier attribute for authentication and accounting requests
Global Configuration
radius nas-port-format
Description: Syntax: Configures the RADIUS clients use of a specific format for RADIUS attribute 5, NAS-Port. The no version removes the format. radius nas-port-format { 0ssssppp | ssss0ppp } no radius nas-port-format Mode(s): 0ssssppp sets the RADIUS client to use the 0ssssppp format where s is slot and p is port ssss0ppp sets the RADIUS client to use the ssss0ppp format where s is slot and p is port
Global Configuration
Syntax:
Global Configuration
359
radius rollover-on-reject
Description: On a virtual router, specifies whether the system should roll over to the next RADIUS server when the system receives an access-reject message for the user it is authenticating. The no version restores the default value, disable. radius rollover-on-reject { enable | disable } no radius rollover-on-reject Mode(s): Global Configuration
Syntax:
radius server
Description: Syntax: Specifies the IP address of a RADIUS authentication and accounting servers. The no version deletes the instance of the RADIUS server. radius { authentication | accounting } server ipAddress no radius { authentication | accounting } server ipAddress Mode(s): authentication configure the RADIUS authentication server accounting configure the RADIUS accounting server ipAddress IP address of the server
Global Configuration
Syntax: Mode(s):
Syntax: Mode(s):
360
Syntax: Mode(s):
Syntax: Mode(s):
radius tunnel-accounting
Description: Syntax: Enables or disables tunnel accounting. The no version restores the default value, disable. radius tunnel-accounting { enable | disable } no radius tunnel-accounting Mode(s): Global Configuration
radius udp-checksum
Description: Syntax: Enables or disables UDP checksum for RADIUS packets on virtual routers you configure for B-RAS. The no version restores the default value, enable. radius udp-checksum { enable | disable } no radius udp-checksum Mode(s): Global Configuration
361
radius update-source-addr
Description: Specifies an alternate source IP address for the system to use rather than the default router ID. The no version deletes the alternate address, and the system uses the router ID. radius update-source-addr sourceAddr no radius update-source-addr Mode(s): sourceAddr source address of the RADIUS client
Syntax:
Global Configuration
rate-limit-profile
Description: From Global Configuration mode, creates a rate limit profile and accesses Rate Limit Profile Configuration mode. The no version removes the rate limit profile. From Policy Configuration mode, specifies a rate limit profile as a rule in a policy list. The no version removes a rate limit profile from a policy list. The suspend version suspends the rule temporarily. To create a rate limit profile: [ no ] rate-limit-profile profileName [ rateLimitProfileType profileName name of the rate limit profile rateLimitProfileType one-rate or two-rate
Syntax:
To specify a rate limit profile in a policy: [ no ] [ suspend ] rate-limit-profile profileName [ classifier-group claclName ] [ precedence precValue ] Mode(s): profileName name of the rate limit profile to be created or to be used in a policy claclName classifier control list used to classify packets for this rate limit profile precValue precedence of this rule in relation to other rules within this set
362
rd
rd
Description: Syntax: Specifies the unique two-part route distinguisher for a VRF. There is no no version. rd distinguisher distinguisher unique two-part identifier of the format number1:number2 where:
number1 AS number or an IP address number2 unique integer; 32 bits if number1 is an AS number; 16 bits if
number1 is an IP address Mode(s): VRF Configuration
receive version
Description: Restricts the RIP version that the system can receive on a RIP remote-neighbor interface. The no version sets the remote-neighbor interface back to the default value, receiving both RIP version 1 and version 2. receive version [ 1 ] [ 2 ] [ off ] no address receive version Mode(s): 1 specifies RIP version 1 only 2 specifies RIP version 2 only off turns reception off
Syntax:
363
redistribute
Description: Redistributes routes from one routing domain into another routing domain. For DVMRP, only routes that appear in the RPF table can be redistributed. The no version ends redistribution of information. The options available vary depending on your routing protocol context; that is, on whether you are configuring BGP, DVMRP, IS-IS, OSPF, or RIP. BGP: redistribute { fromProtocol | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ metric absoluteValue | route-map mapTag | weight wtValue ]* no redistribute { fromProtocol | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ metric [ absoluteValue ] | route-map [ mapTag ] | weight [ wtValue ] ]* DVMRP: [ no ] redistribute fromProtocol [ route-map mapTag ]
Syntax:
IS-IS: redistribute { fromProtocol | static [ ip ] | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ level-1 | level-1-2 | level-2 | metric absoluteValue | metric-type { external | internal } | route-map mapTag ]* no redistribute { fromProtocol | static [ ip ] | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ level-1 | level-1-2 | level-2 | metric [ absoluteValue ] | metric-type { external | internal } | route-map [ mapTag ] ]* OSPF: redistribute { fromProtocol | ospf match internal } [ metric-type [ 1 | 2 ] | metric absoluteValue | tag tagValue | route-map mapTag ]* no redistribute { fromProtocol | ospf match internal } [ metric-type [ 1 | 2 ] | metric [ absoluteValue ] | tag [ tagValue ] | route-map [ mapTag ] ]* redistribute { ospf match internal external [ 1 | 2 ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric absoluteValue | route-map mapTag | tag tagValue ]* no redistribute { ospf match internal external [ 1 | 2 ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric [ absoluteValue ] | route-map [ mapTag ] | tag [ tagValue ] ]*
364
redistribute
RIP: redistribute { fromProtocol | ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric absoluteValue | route-map mapTag ]* no redistribute { fromProtocol | ospf match internal } [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric [ absoluteValue ] | route-map [ mapTag ] ]* fromProtocol source protocol from which routes are being redistributed; the default is no source protocol defined
access redistributes access-server routes (BGP) access-internal redistributes internal routes to directly connected
clients (BGP)
bgp routes sourced from BGP protocol connected routes that are established automatically when IP is
enabled on an interface (non-multicast routing protocols). For routing protocols such as OSPF and IS-IS, these routes are redistributed as external to the AS. When redistributing from connected, only those connected networks that are configured on an interface that is not configured to run IS-IS will be redistributed. For DVMRP, this keyword redistributes routes that are established automatically in the RPF table because another multicast routing protocol, such as PIM, is enabled on an interface.
dvmrp routes sourced from DVMRP isis routes sourced from IS-IS ospf routes sourced from OSPF rip routes sourced from RIP static redistributes static routes; for IS-IS, you can specify static or
static ip ospf match determines what type(s) of routes to redistribute from OSPF; all OSPF routes are redistributed if you do not specify a type
internal redistributes OSPF internal routes external 1 redistributes OSPF external routes of metric-type 1 external 2 redistributes OSPF external routes of metric-type 2
absoluteValue a metric that is applied to all routes from the source protocol; ranges from 0429496729; in BGP this value is the MED, which defaults to the IGP metric of the redistributed route mapTag a string of up to 32 alphanumeric characters that specifies a route map applied to all routes from the source protocol; all routes are redistributed if you do not specify a route map wtValue administrative weight (relative importance) for routes redistributed into the protocol; a number in the range 065535
365
level-1 specifies the redistribution of only IS-IS level 1 routes level-1-2 specifies the redistribution of both IS-IS level 1 and level 2 routes level-2 specifies the redistribution of only IS-IS level 2 routes metric-type specifies the OSPF or IS-IS metric type for all routes from the source protocol For routes redistributed into IS-IS:
metric-type external only the metric of the route itself is considered for
comparison
metric-type internal both the metric of the route and the cost to the
router that advertised the route are considered for comparison; this is the IS-IS default For routes redistributed into OSPF:
redistribute isis ip
Description: Syntax: Redistributes routes from one IS-IS routing level into the other. The no version ends the redistribution. [ no ] redistribute isis ip { level-1 into level-2 | level-2 into level-1 } distribute-list accessListName Mode(s): level-1 specifies the redistribution of routes from or into IS-IS level 1 level-2 specifies the redistribution of routes from or into IS-IS level 2 accessListName string of up to 32 alphanumeric characters specifying the IP access list used to filter routes between levels
Router Configuration
366
redundancy force-failover
redundancy force-failover
Description: Forces the system to switch from the primary line module in the specified slot or the primary SRP module to the spare line module or SRP module. This command overrides the redundancy lockout command. With the srp option, the command is equivalent to the srp switch command. There is no no version. redundancy force-failover { slotNumber | srp } Mode(s): slotNumber number of the slot in which the primary line module resides srp indicates that the system should switch from the active to the standby SRP module
Syntax:
Privileged Exec
redundancy lockout
Description: Prevents the system from switching automatically to a spare line module if the primary module fails on a slot. The no version reverts to the default situation, in which the system switches automatically to a spare line module if the primary module fails on a slot. The redundancy force-failover command overrides this command. There is no no version. [ no ] redundancy lockout slotNumber Mode(s): slotNumber number of the slot in which the primary line module resides
Syntax:
Global Configuration
367
redundancy revert
Description: Forces the system to revert to the primary line module in the specified slot. If you specify a time or time and date, reversion occurs when the primary line module becomes available after that time. Otherwise, reversion occurs immediately. Issuing this command causes reversion once; after reboot, the system returns to the settings configured in the software. The no version has no effect. [ no ] redundancy revert slotNumber [ startTime [ [ startMonth startDay | startDay startMonth ] startYear ] ] Mode(s): slotNumber number of the slot in which the primary line module resides startTime time, in 24-hour format (00:00:00), at which the system reverts to this line module startMonth name of the month in which the system reverts to this line module startDay day of the month on which the system reverts to this line module startYear four-digit year in which the system reverts to this line module
Syntax:
Privileged Exec
redundancy revertive
Description: Enables the system to revert from spare line modules to available primary line modules automatically. The no version reverts to the default situation, in which there is no automatic reversion from spare to primary line modules. [ no ] redundancy revertive [ timeOfDay ] Mode(s): timeOfDay time, in 24-hour format (00:00:00), at which the system reverts to the available primary line modules every day
Syntax:
Global Configuration
refresh-period
Description: Specifies the timeout period in milliseconds between generation of RSVP refresh messages. The no version restores the default value of 30000 milliseconds. refresh-period period no refresh-period Mode(s): period interval from 04294967295
Syntax:
368
reload
reload
Description: Syntax: Reloads the operating system in the designated interval or at the designated time. There is no no version. reload [ force [ reason ] | in inTime [ reason ] | at atTime [ month day | day month ] [ reason ] | cancel ] force prompts for confirmation to reboot if the system is in certain states, such as during the synchronization of SRP modules, that could lead to a loss of configuration data or an NVS corruption. reason reason for the reload (1255 characters long) inTime schedules a reload of the software to take place in the specified minutes or hours and minutes ([ hh: ] mm). If the system is in a state that could lead to a loss of configuration data or an NVS corruption, it will delay the reboot for one minute, up to five times. If the system cannot reboot on its sixth attempt, the scheduled reboot fails. atTime schedules a reload of the software to take place at the specified time (hh:mm) (using a 24-hour clock). If you specify the month and day, the reload takes place at the specified time and date. If you do not specify the month and day, the reload takes place at the specified time on the current day (if the specified time is later than the current time) or on the next day (if the specified time is earlier than the current time). Specifying 00:00 schedules the reload for midnight. If the system is in a state that could lead to a loss of configuration data or an NVS corruption, it will delay the reboot for one minute, up to five times. If the system cannot reboot on its sixth attempt, the scheduled reboot fails. month name of the month (any number of characters in a unique string) day number of the day of the month, in the range 131 cancel cancels a scheduled reload
Mode(s):
Privileged Exec
reload slot
Description: Syntax: Reboots the module in the selected slot. There is no no version. reload slot slotNumber [ force ] reason reason for the reload (1255 characters long) slotNumber number of a selected slot in the router force prompts for confirmation to reboot if the system is in certain states, such as during the synchronization of SRP modules, that could lead to a loss of configuration data or an NVS corruption.
Mode(s):
Privileged Exec
369
remote host
Description: Syntax: Defines an L2TP host profile. Accesses the L2TP Destination Profile Host Configuration mode. The no version removes an L2TP host profile. remote host { hostname | default } no remote host { hostname | default } Mode(s): hostname name the LAC must supply in the hostname AVP of the receive SCCRQ; can be up to 64 characters in length (no spaces) default allows the LAC to use any hostname in the hostname AVP
remote-loopback
Description: Enables the acceptance of remote loopback requests on a T1 line on a CT1 line module. The no version restores the default value, which is to reject remote loopback requests. [ no ] remote-loopback Controller Configuration
Syntax: Mode(s):
remote-neighbor
Description: Syntax: Configures an OSPF, PIM, or RIP remote neighbor. The no version removes the remote neighbor and any attributes configured for the neighbor. For OSPF: [ no ] remote-neighbor ipAddress area { areaId | areaIdInt } For PIM [ no ] remote-neighbor ipAddress sparse-mode For RIP: [ no ] remote-neighbor ipAddress Mode(s): ipAddress IP address identifying the remote neighbor areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value 04294967295
Router Configuration
370
rename
rename
Description: Renames a local file. There is no no version. Note: You cannot change the extension of a file, for example, .scr. Syntax: rename oldFileName newFileName Mode(s): oldFileName file to rename newFileName new filename
Privileged Exec
request-data-size
Description: Syntax: Sets the request payload data size. The no version restores the default value. request-data-size requestSizeValue no request-data-size Mode(s): requestSizeValue size of the data in bytes in the request packets payload; the default is 1 byte
RTR Configuration
reserve
Description: Syntax: For DHCP local server clients, reserves an IP address for a specific MAC address. The no version removes the reservation. reserve ipAddress macAddress no reserve ipAddress ipAddress IP address to reserve macAddress MAC address for which the IP address is reserved. Mode(s): Pool Configuration
retransmit
Description: Specifies maximum number of times the system retransmits a RADIUS packet to an authentication or accounting server. The no version restores the default value. retransmit retries no retransmit Mode(s): retries number of retries in the range 010. The default is 3.
Syntax:
Radius Configuration
371
retransmit-interval
Description: Specifies the time between LSA retransmissions for the OSPF remote-neighbor interface when an acknowledgment for the LSA is not received. The no version restores the default value. retransmit-interval retransInterval no retransmit-interval Mode(s): retransInterval a number in the range 03600 seconds; default value is 5 seconds
Syntax:
rib-out disable
Description: Disables storage of routes to the Adj-RIBs-Out tables (disables rib-out) for all BGP peers. Storage is disabled by default. The no version enables the route storage. The default version removes the explicit global configuration for all peers and reestablishes inheritance of the feature configuration. Note: If you enable or disable rib-out globally and this action changes the current configuration, all sessions are automatically bounced. Syntax: Mode(s): [ no | default ] rib-out disable Router Configuration
372
route-map
route-map
Description: Specifies a route map for DVMRP or RIP, or defines the conditions for applying routing policies to filter or modify routes redistributed into or propagated by a routing protocol. The no version deletes the route map. Specifying for DVMRP or RIP: [ no ] route-map mapTag [ interfaceType interfaceSpecifier ] mapTag a string of up to 32 alphanumeric characters. interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
Defining a route map: [ no ] route-map mapTag [ permit | deny ] [ sequence ] mapTag string of up to 32 alphanumeric characters. The redistribute Router Configuration command uses this string to reference this route map. Multiple route maps may share the same map tag. permit if the match criteria are met for this route map and permit is specified, the route is redistributed as controlled by the set actions. deny if the match criteria are met for the route map and deny is specified, the route is not redistributed, and no further route maps sharing the same map tag are examined. sequence number in the range 065535 that indicates the position a new route map is to have in the list of route maps already configured with the same map tag. If given with the no version of this command, it specifies the position of the route map that should be deleted.
Mode(s):
Global Configuration
router bgp
Description: Configures the BGP routing process. Allows you to set up a distributed routing core that automatically guarantees the loop-free exchange of routing information between ASs. The no version removes a routing process. [ no ] router bgp autonomousSystem Mode(s): autonomousSystem number in the range 14294967295; the AS number that identifies the router to other BGP routers
Syntax:
Global Configuration
373
router dvmrp
Description: Syntax: Mode(s): Creates and enables DVMRP on a virtual router; accesses DVMRP router configuration mode. The no version deletes DVMRP from a virtual router. [ no ] router dvmrp Global Configuration
router igmp
Description: Syntax: Description: Creates and enables IGMP on a virtual router; accesses IGMP router configuration mode. The no version disables IGMP on a virtual router. [ no ] router igmp Global Configuration
router isis
Description: Syntax: Enables the IS-IS routing protocol and specifies an IS-IS process for IP. The no version disables IS-IS routing. [ no ] router isis [ tag ] tag meaningful name for a routing process; name must be unique among all IP router processes for a given router; if not specified, a null tag is assumed, and the process is referenced with a null tag
Mode(s):
Global Configuration
router ospf
Description: Syntax: Configures an OSPF routing process. The no version disables an OSPF routing process. [ no ] router ospf processId [ vrf vrfName ] Mode(s): processId number in the range 165535 that identifies the OSPF process vrfName name of the VRF; string of 132 alphanumeric characters; available only in virtual router context, not VRF context
Global Configuration
374
router pim
router pim
Description: Syntax: Mode(s): Creates and enables PIM on a virtual router; accesses PIM router configuration mode. The no version deletes PIM from a virtual router. [ no ] router pim Global Configuration
router rip
Description: Syntax: Mode(s): Enables RIP routing protocol configuration. The no version deletes the RIP process and removes the configuration from the system. [ no ] router rip Global Configuration
route-target
Description: Creates or adds to a list of VPN extended communities used to determine which routes are imported by a VRF. If at least one route target in the route-target export list contained in the update message advertising a route matches a route target in the route-target import list associated with a VRF, that route is installed in the VRFs forwarding table. The no version removes a route target from the specified list. [ no ] route-target { import | export | both } extendedCommunity import adds the route target to the current VRFs import list; the VRF accepts only routes that have at least one route target that matches a route target in the import list export adds the route target to the current VRFs export list; all routes advertised from this VRF are associated with the export list; at least one route target in the export list must match a route target in the import list of a VRF receiving the route for the route to be installed in the VRFs forwarding table both adds the route target to both the import list and export list of the current VRF extendedCommunity two-part number of the format number1:number2 that identifies an extended community of VPNs where:
Syntax:
number1 an AS number or an IP address number2 a unique integer; 32 bits if number1 is an AS number; 16 bits
if number1 is an IP address Mode(s): VRF Configuration
375
rtr
Description: Sets the number of the RTR operation to be configured and accesses the RTR Configuration mode. The no version removes all configuration information for a given RTR operation. [ no ] rtr rtrIndex no rtr Mode(s): rtrIndex number of the operation to be configured; there is no default
Syntax:
Global Configuration
rtr reaction-configuration
Description: Syntax: This command has only a no version. The no version clears all traps for all the rtr reaction-configuration command options. no rtr reaction-configuration rtrIndex Mode(s): rtrIndex number of the operation configured
Global Configuration
Syntax:
none no action; selecting this option clears all traps for the given
operation
trapOnly trap only action; this is the default; enabled events trigger the
trap Mode(s): Global Configuration
376
Syntax:
Global Configuration
Syntax:
Global Configuration
Global Configuration
Syntax:
Global Configuration
377
rtr reset
Description: Syntax: Mode(s): Shuts down all RTR operations and clears the RTR configuration for the given virtual router. The no version negates the reset operation. [ no ] rtr reset Global Configuration
rtr schedule
Description: Configures the RTR time parameters for an RTR operation. The no version stops the operation by putting it in the pending state. The no version also resets the restart-time attribute and the life attribute. [ no ] rtr schedule rtrIndex Mode(s): rtrIndex number of the operation to be configured
Syntax:
Global Configuration
If the type is echo, life relates to the number of operations sent until a
test finishes. The default is 90. If you use 60 operations * 60 seconds, the frequency between each operation that a test completes is 3,600 seconds (one hour).
If the type is pathEcho, life relates to the maximum number of hops used
by the traceRoute trap. The default is 30. If you use 30 (as the maximum hops) * 3 (operations per hop) * 60 seconds frequency between each operation, a test is completed within 3,600 seconds. If a destination is reached in fewer than 30 hops, the test is completed earlier. Mode(s): lifeValue number of operations or maximum TTL in the range 12147483647
Global Configuration
378
Global Configuration
Global Configuration
run
Description: Syntax: Allows you to issue a command that operates in User Exec mode from any CLI mode. There is no no version. run userExecCommand userExecCommand a CLI command that you can issue from User Exec mode Mode(s): All modes
379
samples-of-history-kept
Description: Syntax: Sets the number of entries kept in the history table for each RTR operation. The no version restores the default value. samples-of-history-kept samples no samples-of-history-kept Mode(s): samples number of entries for each RTR index in the history table. The default is 16 for a pathEcho type and 1 for an echo type.
RTR Configuration
scheduler-profile
Description: Syntax: Configures a scheduler profile. The no version deletes the scheduler profile. [ no ] scheduler-profile schedulerProfileName Mode(s): schedulerProfileName name for the scheduler profile
Global Configuration
scramble
Description: Enables cell scrambling on a T3 Frame interface. The no version disables cell scrambling on the interface. If you issue this command, be sure to issue the dsu mode and dsu bandwidth commands. Otherwise, the interface may drop packets unexpectedly. [ no ] scramble Controller Configuration
Syntax: Mode(s):
sdh
Description: Syntax: Mode(s): Specifies that the interface supports SDH. The no version restores SONET operation on this interface. [ no ] sdh Controller Configuration
380
send
send
Description: Sends a message to one or more terminals. If you begin the message on the same line as the command, the first character is a delimiter; you must end the message with the same delimiter. If you begin the message on another line, you must enter <Ctrl+Z> to end the message. There is no no version. send { * | absoluteLineNumber | console consoleLineNumber | vty vtyLineNumber } [ message ] Mode(s): * sends the message to all terminals absoluteLineNumber line number of a terminal to which the message is sent consoleLineNumber line number of a console to which the message is sent vtyLineNumber line number of a vty to which the message is sent message text of message to send; a string of up to 1023 alphanumeric characters
Syntax:
Privileged Exec
send-more-specific-routes-disable
Description: Specifies that RIP does not send a more-specific route if it has a less-specific route with any metric. The no version restores the default condition, wherein RIP always sends a more-specific route even if a less-specific route with a metric is available. [ no ] send-more-specific-routes-disable Router Configuration
Syntax: Mode(s):
send version
Description: Restricts the RIP version that the system can send on a remote-neighbor interface. The no version sets the remote-neighbor interface back to the default value, sending only RIP version 1. send version [ 1 | 2 | off ] no send version [ 1 | 2 | off ] Mode(s): 1 specifies RIP version 1 only 2 specifies RIP version 2 only off turns reception off
Syntax:
381
server-address
Description: Syntax: Sets the DHCP server address that is sent to DHCP clients. The no version removes server address. server-address address no server-address [ address ] address DHCP server address Mode(s): Pool Configuration
server-name
Description: Syntax: Specifies the hostname expected from the L2TP LNS or the L2F home gateway when you set up a tunnel. The no version removes the server name. server-name serverName no server-name Mode(s): serverName hostname; can be up to 64 characters in length (no spaces)
service ctrl-x-reboot
Description: Enables the <Ctrl+X> key combination to reboot the system at all times, except that the key combination has no effect if you are accessing the system via a Telnet session. The no version restores the default condition, disabled. [ no ] service ctrl-x-reboot Global Configuration
Syntax: Mode(s):
service dhcp-local
Enables the DHCP local server. The no version disables the DHCP local server, and does not save the previous settings. [ no ] service dhcp-local [ equal-access | standalone ] equal-access enables the DHCP local server to work with the SDX (formerly SSC) or HTTP local server for non-PPP equal access, the default option. standalone configures the system as a DHCP local server
Syntax:
Mode(s):
Global Configuration
382
service manual-commit
service manual-commit
Description: Stops the system from automatically saving configuration changes to nonvolatile storage. Places the system into Manual Commit mode; this mode has no effect on the CLI prompt. Causes an immediate save of configuration data not yet committed to nonvolatile storage. The no version returns the ERX system to Automatic Commit mode (with no effect on the CLI prompt). [ no ] service manual-commit Global Configuration
Syntax: Mode(s):
service password-encryption
Description: Directs the system to encrypt passwords that are saved in the configuration file. The command should be used as a simple cipher to prevent unauthorized users from viewing passwords. [ no ] service password-encryption Global Configuration
Syntax: Mode(s):
service timestamps
Description: Syntax: Formats timestamps associated with log messages. The no version removes timestamps from log messages. service timestamps log datetime [ show-timezone [ localtime ] ] no service timestamps [ log ] Mode(s): log indicates that a timestamp will appear on log messages datetime displays the date and time show-timezone displays the time zone localtime displays the timestamp in local time
Global Configuration
Syntax: Mode(s):
383
Mode(s):
set automatic-tag
Description: Syntax: Mode(s): Automatically computes the tag value. The no version removes the set clause from a route map. [ no ] set automatic-tag Route Map Configuration
Syntax:
384
set community
set community
Description: Sets the BGP community attribute to one or more community numbers or a list of community numbers. The no version removes the set clause from a route map. set community { list communityListName [ additive ] | none } set community { communityNumber | knownCommunity | asCommunityNumber } [ communityNumber | knownCommunity | asCommunityNumber ]* [ additive ] no set community communityListName name of a community; a string of up to 32 characters additive adds the community number to the community list none removes the community attribute communityNumber a number in the range 1 4294967295 that specifies the community number knownCommunity any of the following well-known communities; the internet community is not an option:
Syntax:
local-as prevents advertisement outside of the local AS no-advertise prevents advertisement to any peer no export prevents advertisement beyond the BGP confederation
boundary asCommunityNumber AS community number in the format AA:NN:
AA number in the range 165535 that identifies an AS NN number in the range 165535 that uniquely identifies a community
within an AS Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line
385
set dampening
Description: Enables route flap dampening and optionally specifies dampening parameters for routes passing through the route map. The no version removes the set clause from a route map. set dampening halfLife reuse suppress maxSuppressTime [ halfLifeUnreachable ] no set dampening halfLife half-life period in minutes in the range 145. The default is 10. When a BGP route has been assigned a penalty, the penalty is decreased by half after each half-life period. Each time a route flaps, the router configured for route flap dampening assigns the route a penalty. Penalties are cumulative. BGP stores the penalty for all reachable and unreachable routes that have experienced recent flaps. reuse reuse limit in the range 120000. The default is 750. As the penalty for a flapping route decreases and falls below this reuse limit, the route is unsuppressed. That is, the route is added back to the BGP table and used for forwarding. suppress suppress limit in the range 120000. A route is suppressed when its penalty exceeds this limit. The default value is 2000. maxSuppressTime maximum suppression time in minutes in the range 1255. This value is the maximum amount of time a route can be suppressed. The default value is 60. halfLifeUnreachable the alternate half-life period in minutes for unreachable routes; a number in the range 145. The default value is 20. If you do not specify this value, the system uses the same half-life period for both reachable and unreachable routes.
Syntax:
Mode(s):
386
Syntax:
Global Configuration
set distance
Description: Configures an administrative distance to apply to routes that match the route map. The no version removes the set clause from a route map.
Note: Setting a distance in a route map is useful only when it is set on a route being installed into the routing table. Distance is used to establish preference between routes to the same prefix to identify the best route to that prefix. Setting distance is any other circumstance has no effect.
Syntax:
set distance distance no set distance distance administrative distance, ranging from 0255
Mode(s):
387
set extcommunity
Description: Syntax: Sets the BGP extended communities attribute. The no version removes the set clause from a route map. set extcommunity { rt | soo } extCommValue [ extCommValue ]* [ additive ] no set extcommunity rt specifies a route-target extended community, which consists of one or more routers that can receive a set of routes advertised by BGP that carry the extended-community attribute soo specifies a site-of-origin extended community, which consists of one or more routers that inject into BGP a set of routes that carry the extended-community attribute extCommValue number identifying the extended community in one of the following formats:
AS:nn 16-bit autonomous system number followed by a 32-bit integer AS:nn 32-bit autonomous system number followed by a 16-bit integer ipAddress:nn IP address followed by a 16-bit integer
extCommValue number identifying the extended community; in the format AA:NN, where any of the following is true:
Mode(s):
388
set ip next-hop
set ip next-hop
Description: Syntax: Indicates where to send packets that pass a match clause of a route map for policy routing. The no version removes the set clause from a route map. set ip next-hop { ipAddress | interface interfaceType interfaceSpecifier | peerAddress } no set ip next-hop [ ipAddress | peerAddress] ipAddress IP address of next hop to which packets are sent; does not need to be an adjacent router interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide peerAddress on outbound route maps, disables the next hop calculation by setting the next hop to the IP address of the BGP speaker; on inbound route maps, overrides any third-party next hop configuration by setting the next hop to the IP address of the peer
Mode(s):
set level
Description: Syntax: Specifies where to import routes when all of a route maps match criteria are met. The no version removes the set clause from a route map. set level atLevel no set level atLevel specifies one of the following levels:
level-1 imports routes into a level 1 area level-1-2 imports routes into a level 1 and a level 2 area level-2 imports routes into a level 2 subdomain stub-area imports routes into an OSPF NSSA area backbone imports routes into an OSPF backbone area
Mode(s): Route Map Configuration
389
set local-preference
Description: Syntax: Specifies a preference value for the AS path. The no version removes the set clause from a route map. set local-preference value no set local-preference Mode(s): value preference number in the range 04294967295
set metric
Description: Modifies the metric value (for BGP, the MED) for a route that matches the route map by applying a relative or absolute metric. The no version removes the set clause from a route map. Note: You cannot have an absolute and relative metric within the same route map sequence. Issuing either command overrides any previously configured metric in the route map. Syntax: set metric [ signrelValue absValue ] no set metric sign one of the following values:
+ specifies that the value is added to the metric for routes matching the
route map; immediately precedes the metric value with no intervening space
- specifies that the value is subtracted from the metric for routes
matching the route map; immediately precedes the metric value with no intervening space Mode(s): relValue number of a single standard access list; string up to 32 characters (a number in the range 04294967295) absValue number in the range 0294967295
390
set metric-type
set metric-type
Description: Syntax: Sets the metric type for the destination routing protocol. The no version removes the set clause from a route map. set metric-type atMetric no set metric-type atMetric specifies the metric type from the following choices: For BGP:
external reverts to the normal BGP rules for propagating the MED; this
is the BGP default
external only the metric of the route itself is considered for comparison internal both the metric of the route and the cost to the router that
advertised the route are considered for comparison; this is the IS-IS default For OSPF:
1 cost of the external routes is equal to the sum of all internal costs
and the external cost
2 cost of the external routes is equal to the external cost alone; this is
the OSPF default Mode(s): Route Map Configuration
set origin
Description: Syntax: Sets the BGP origin of an advertised route. The no version removes the set clause from a route map. set origin atOrigin no set origin atOrigin specifies the origin from the following choices:
egp remote exterior gateway protocol igp local interior gateway protocol incomplete origin unknown
Mode(s): Route Map Configuration
391
set-overload-bit
Description: Configures the system in IS-IS to signal other routers not to use it as an intermediate hop in their SPF calculations. The no version removes the designation. By default, the overload bit is not set. set-overload-bit [ on-startup period ] no set-overload-bit on-startup specifies that the overload bit is set for a period of time after system reboot. Use to prevent other routers from routing through the system before it is fully operational. The overload bit is cleared when the period expires. period duration in seconds of period after system reboot that overload bit is set; ranges from 586400 seconds
Syntax:
Mode(s):
Router Configuration
set route-type
Description: Syntax: Sets routes of the specified type. The no version removes the set clause from a route map. set route-type { internal | internal-intra | internal-inter | external } no set route-type Mode(s): internal internal route (including OSPF intra-area and interarea) internal-intra intra-area route internal-inter interarea route external external route (BGP and OSPF type 1/2)
set tag
Description: Syntax: Sets the tag value of the destination routing protocol. The no version removes the set clause from a route map. set tag tagValue no set tag Mode(s): tagValue preference number in the range 04294967295
392
set weight
set weight
Description: Specifies the BGP weight for the routing table. Overrides the weights assigned using the neighbor weight and neighbor filter-list commands. The no version removes the set clause from a route map. [ no ] set weight value no set weight Mode(s): value weight value in the range 04294967295
Syntax:
shaping-rate
Description: Syntax: Sets the shaping rate in bits per second. The no version deletes the shaping rate. shaping-rate shapingRate [ burst burstSize ] no shaping-rate Mode(s): shapingRate range 640001,000,000,000 burstSize range 819232767
show aaa
Description: Syntax: Displays accounting or authentication information regarding PPP. show aaa { accounting | authentication } ppp default [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
Privileged Exec
393
Privileged Exec
Privileged Exec
Privileged Exec
Privileged Exec
Privileged Exec
394
Privileged Exec
Privileged Exec
Privileged Exec
395
Privileged Exec
Privileged Exec
show access-list
Description: Syntax: Displays access list information about the access list specified. show [ ip ] access-list [ accessListName ] [ detail ] [ filter ] Mode(s): accessListName string of up to 32 alphanumeric characters detail displays detailed information about the access list filter see Filtering show Commands in About This Guide
Privileged Exec
show aps
Description: Syntax: Displays information about APS/MSP interfaces or groups. show aps [ group [ groupNumber ] ] groupNumber number of the APS/MSP group Mode(s): Privileged Exec
396
show arp
show arp
Description: Syntax: Displays information about the Address Resolution Protocol cache. show [ ip ] arp [ vrfName ] [ ipAddress ] [ interfaceType interfaceSpecifier ] [ all ] [ filter ] Mode(s): vrfName name of the VRF ipAddress ARP entries matching this IP address are displayed interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide all displays all ARP entries filter see Filtering show Commands in About This Guide
397
Mode(s):
398
Syntax:
399
show atm vc
Description: Syntax: Displays a summary of all configured ATM virtual circuits. show atm vc [ interfaceType interfaceSpecifier ] [ vpi vpi ] [ category categoryType ] [ status statusType ] [ delta ] [ filter ] interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vpi displays VCs on a specific VPI category displays VCs that have a specific service category categoryType one of the following:
400
show boot
Description: Syntax: Displays the configuration and system settings that are used at startup. show boot [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show bulkstats
Description: Syntax: Displays bulkstats statistical information. show bulkstats [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
401
402
show cac
Description: Syntax: Displays global call admission control configuration. show cac [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
403
Privileged Exec
Privileged Exec
404
show classifier-list
show classifier-list
Description: Syntax: Displays information about classifier control lists. show classifier-list [ classifierName [ classifierNumber ] ] [ brief | detailed ] [ filter ] Mode(s): classifierName classifier list name classifierNumber classifier list number brief display information in a condensed format detailed display detailed information filter specify a CLI output filter. See Filtering show Commands in About This Guide.
Privileged Exec
show clns
Description: Syntax: Displays information about the CLNS network show clns [ es-neighbors | is-neighbors ] [ interfaceType interfaceSpecifier ] [ detail ] [ filter ] es-neighbors displays IS-IS related information for IS-IS end-system adjacencies. Neighbor entries are sorted according to the area in which they are located. is-neighbors displays IS-IS related information for IS-IS intermediate-system adjacencies. Neighbor entries are sorted according to the area in which they are located. interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide detail displays area addresses and IP addresses; if not specified, a summary display is provided filter see Filtering show Commands in About This Guide
Mode(s):
405
Mode(s):
406
show clock
Description: Syntax: Displays the systems clock source. show clock [ detail ] [ filter ] Mode(s): detail provides expanded information about the clock settings, rather than a summary filter see Filtering show Commands in About This Guide
show columns
Description: Displays configuration information of bridged Ethernet over ATM, IP over ATM, PPP, or PPPoE static and dynamic interface columns. It is designed to categorize interface subscribers into PPP, PPPoE, bridged, or routed. show columns User Exec, Privileged Exec
Syntax: Mode(s):
407
show configuration
Description: Displays the current (running) configuration of the system, a specified virtual router, or a specified interface within the current VR context. You can create a configuration script from this output by saving it as a file with the .scr extension. This command was formerly documented as show config; that abbreviation is still supported. show configuration [ [ interface interfaceType interfaceSpecifier ] | [ virtual-router routerName ] [ exclude-category interfaceType ]* ] [ include-defaults ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide routerName name of the virtual router exclude-category excludes information associated with a particular type of interface include-defaults includes commands that set default values for various parameters filter see Filtering show Commands in About This Guide
Syntax:
Privileged Exec
show controllers e3
Description: Syntax: Displays information about E3 controller interfaces. show controllers e3 { interfaceSpecifier [ brief | all | summary ] | serial [ interfaceSpecifier ] } [ filter ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief abbreviated display of E3 controller information all detailed display of all available E3 controller information summary displays link status summary serial displays information about serial interfaces filter see Filtering show Commands in About This Guide
408
pathChannel number of the path pathPayload number of the payload within the path. In SONET mode,
pathPayload is always 1. In SDH mode, pathPayload is the number of the TUG-3 group.
channelGroup number of the channel group ds3-channel-number number of the ds3 channel ds1-channel-number number of the ds1 channel in the range 128 subchannelNumber number of the subchannel in the range 124
configuration displays the configuration of each controller at the specified level and above layerType type of SONET/SDH layer
409
tributary SONET or SDH virtual tributary e1 E1 channel over SDH virtual tributary ds1 T1 channel over SONET/SDH virtual tributary ds3 T3 over channelized SONET interface t1 T1 channel on T3 over channelized SONET interface
Mode(s): total displays the MIB statistics for all intervals delta displays baselined statistics for all intervals all shows statistics for all time intervals, rather than statistics for selected time intervals filter see Filtering show Commands in About This Guide
410
Syntax:
pathChannel number of the path pathPayload number of the payload within the path. In SONET mode,
pathPayload is always 1. In SDH mode, pathPayload is the number of the TUG-3 group.
channelGroup number of the channel group ds3-channel-number number of the ds3 channel ds1-channel-number number of the ds1 channel in the range 128 subchannelNumber number of the subchannel in the range 124
Mode(s): all shows statistics for all time intervals, rather than statistics for selected time intervals filter see Filtering show Commands in About This Guide
411
show controllers t1 | e1
Description: Syntax: Displays information about the CT1 or CE1 controller interfaces. show controllers { t1 | e1 } { { fractional | serial } [ interfaceSpecifier ] | interfaceSpecifier [ brief | all | summary ] } [ filter ] Mode(s): fractional displays information about T1 or E1 fractional interfaces serial displays information about T1 or E1 serial interfaces interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief abbreviated display of CT1 or CE1 controller information all shows statistics for all time intervals, rather than statistics for selected time intervals summary displays link status summary filter see Filtering show Commands in About This Guide
412
show controllers t3
show controllers t3
Description: Syntax: Displays information about the T3 controller interfaces. show controllers t3 { interfaceSpecifier [ brief | all | summary ] | { ft1 | serial } [ interfaceSpecifier ] } [ filter ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief abbreviated display of T3 controller information all shows statistics for all time intervals, rather than statistics for selected time intervals summary displays link status summary ft1 displays information about fractional T1 subchannels serial displays information about serial interfaces filter see Filtering show Commands in About This Guide
Privileged Exec
413
show dhcp
Description: Syntax: Displays the IP address(es) and statistics of the configured DHCP server or relay agent. show dhcp { server | relay } [ statistics [ delta ] ] [ filter ] Mode(s): server DHCP Proxy Client configuration relay DHCP Relay configuration statistics displays statistics for the DHCP server or relay agent delta displays baselined statistics filter see Filtering show Commands in About This Guide
Privileged Exec
disabled tunnel is disabled down tunnel is not operational enabled tunnel is enabled lower-down an interface layer below the tunnel is not operational not-present TSM is not in slot up tunnel is operational
Mode(s): tunnelName name of a tunnel for which you want to display information virtual-router displays information about tunnels on the specified virtual router vrName name of a virtual router ip displays information about tunnels associated with the specified IP address ipAddress IP address tunnelName name of a tunnel for which you want to display information filter see Filtering show Commands in About This Guide
Privileged Exec
414
Privileged Exec
show environment
Description: Syntax: Displays information on the systems physical environment, such as power and temperature. show environment [ all ] [ table ] [ filter ] Mode(s): all displays system environment information and temperature status table table displays temperature status table only filter see Filtering show Commands in About This Guide
Privileged Exec
show fabric-queue
Description: Syntax: Displays forwarded and dropped statistics for the queues in the fabric. show fabric-queue [ traffic-class trafficClassName [ detail ] | [ egress-slot egressSlotNumber | detail | traffic-class trafficClassName egress-slot egressSlotNumber ] [ filter ] Mode(s): trafficClassName name of the traffic class detail provides detailed information about the queues in the fabric egressSlotNumber number of the egress slot filter see Filtering show Commands in About This Guide
415
show flash
Description: Syntax: Mode(s): Displays information about the NVS card. show flash Privileged Exec, User Exec
displays the status of all MFR links if you specify the interface type
mlframe-relay without a specifier for an MFR bundle
displays the status of MFR links in an MFR bundle if you specify that
bundle Mode(s): brief displays a summary of interface information delta displays baselined statistics filter see Filtering show Commands in About This Guide
416
serial pos
interfaceSpecifier specifies the location of the interface in the format slot/port:link
slot number of the chassis slot of the line module in the range 013
(ERX-1400 series) and 06 (ERX-700 series)
port port number in the range 02 link number of a link in the range 18
Mode(s): brief summarized format delta displays baselined statistics filter see Filtering show Commands in About This Guide
417
418
serial pos
Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief displays a summary of interface information delta displays baselined statistics filter see Filtering show Commands in About This Guide
419
show ftp-server
Description: Syntax: Mode(s): Use to display information about the FTP server. show ftp-server Privileged Exec
420
disabled tunnel is disabled down tunnel is not operational enabled tunnel is enabled lower-down an interface layer lower below the tunnel is not operational not-present TSM is not in slot up tunnel is operational
Mode(s): tunnelName name of a tunnel for which you want to display information virtual-router displays information about tunnels on the specified virtual router vrName name of a virtual router ip displays information about tunnels associated with the specified IP address ipAddress IP address filter see Filtering show Commands in About This Guide
Privileged Exec
Privileged Exec
421
show hardware
Description: Syntax: Displays information about the modules installed in the system. show hardware [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
422
config displays information on the HLDC interface configuration status displays information on the HLDC interface operational status statistics displays information on the HLDC interface statistics
* indicates that one or more parameters can be repeated multiple times in a list in the command line full displays configuration, status, and statistics information; equivalent to specifying config status statistics delta displays baselined statistics stateRestriction specify only one of the following keywords:
up displays an interface that is up, which means that the LCP has
been negotiated
down displays an interface that is down, which means that the LCP
has not been negotiated, the negotiations have failed, or the connection has been terminated
423
show host
Description: Syntax: Mode(s): Displays the IS-IS name-to-NSAP mappings defined with the clns host command. show host User Exec, Privileged Exec
show hosts
Description: Syntax: Displays a list of configured network servers. show hosts [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show ike sa
Description: Syntax: Mode(s): Displays IKE phase 1 SAs running on the system. show ike sa Privileged Exec
424
show interfaces
show interfaces
Description: Syntax: Displays current state of all interfaces or the interface you specify. show interfaces interfaceType interfaceSpecifier [ delta ] [ brief ] [ filter ] interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide; for ATM, subinterfaces are not supported by the syntax delta displays baselined statistics brief displays a brief summary of the interface filter see Filtering show Commands in About This Guide
Mode(s):
show ip
Description: Syntax: Mode(s): Displays general information for IP. show ip User Exec, Privileged Exec
show ip address
Description: Syntax: Displays interface information for the specified IP address. show ip address [ vrfName ] [ brief | detail ] localAddress Mode(s): vrfName name of the VRF brief displays summary information about the interface detail displays detailed information about the interface localAddress IP address of the specific interface
425
show ip as-path-access-list
Description: Syntax: Displays information about AS-path access lists. show ip as-path-access-list [ accessListName ] [ filter ]
426
show ip bgp
show ip bgp
Description: Displays filtered information about a specified network, or all networks, in the BGP routing table associated with a specified address family. Only those fields that you specify are displayed, except that the Prefix field is always displayed. Default fields can be set with the default-fields route command. show ip bgp [ addressFamilyIdentifier ] [ network [ networkMask [ longer-prefixes ] ] ] [ fields { fieldOptions } ] [ filter ] addressFamilyIdentifier type of address family, which determines the routing table for which information is displayed, in the format [ ipv4 { unicast | multicast } | vpnv4 { all | vrf vrfName } ]
Syntax:
ipv4 unicast the IPv4 unicast routing table; the default option ipv4 multicast the IPv4 multicast routing table vpnv4 all all IPv4 VPN routing and forwarding instances vpn4 vrf vrfname the IPv4 VPN routing and forwarding instance with
the name vrfname network displays the route that best matches this IP address; if no network is specified, displays the fields for all networks networkMask address mask to be applied to the network address longer-prefixes displays all routes with a prefix that is equal to or more specific than the specified prefix fields displays only the specified fields; the display order of the fields is hard-coded and not affected by the order in which you enter them fieldOptions field(s) to be displayed, in the format all | [ afi | aggregator | as-path | atomic-aggregate | best | clusters | communities | extended-communities | imported | intro | in-label | loc-pref | med | next-hop | next-hop-cost | origin | originator-id | out-label | peer | peer-type | rd | safi | unknown-types | weight ]*
afi address family identifier aggregator AS number and IP address of aggregator as-path AS path through which this route bas been advertised atomic-aggregate whether the atomic aggregate attribute is present best whether this is the best route for the prefix clusters list of cluster IDs through which the route has been advertised communities community number associated with the route extended-communities extended community imported whether the route was imported
427
in-label MPLS label for the route; the label received with incoming
MPLS frames; typically, but not always, this is the label advertised to MP-BGP peers
loc-pref local preference for the route med multiexit discriminator for the route next-hop IP address of the next router that is used when forwarding a
packet to the destination network
origin origin of the route originator-id router ID of the router in the local AS that originated the
route
out-label MPLS label for the route; the label sent with outgoing MPLS
frames; also the label received from MP-BGP peer; typically, but not always, this is the label received from MP-BGP peers
peer IP address of BGP peer from which route was learned peer-type type of BGP peer: internal, external, or confederation rd route distinguisher safi subsequent address family identifier unknown-types attribute codes for unknown path attributes weight weight of the route * indicates that one or more parameters can be repeated multiple
times in a list in the command line Mode(s): filter see Filtering show Commands in About This Guide
428
Syntax:
429
Mode(s):
430
431
Mode(s):
432
433
434
Mode(s):
Mode(s):
435
436
Syntax:
[^ ] Matches any AS number except the ones specified within the brackets $ { } ( ) . * + ? Matches the end of the path Matches the beginning of an AS_SET Matches the end of an AS_SET Matches the start of an AS_CONFED_SET or AS_CONFED_SEQ Matches the end of an AS_CONFED_SET or AS_CONFED_SEQ Matches any single character Matches zero or more occurrences of the preceding character Matches one or more occurrences of the preceding character Matches zero or one occurrence of the preceding character. To use the ? metacharacter in a regular expression, you must enter the following key sequence: <Ctrl-v-?>. Otherwise, the CLI considers this to be a request for assistance in completing the command, rather than understanding it as a metacharacter.
437
()
Used with a multiplier metacharacter (*, +, ?) to specify patterns for multiple use. You can specify that a parenthesis be construed as a literal token instead of a metacharacter by immediately preceding it with a backslash: matches the beginning of an AS_CONFED_SET or AS_CONFED_SEQ matches the end of an AS_CONFED_SET or AS_CONFED_SEQ. Matches any enclosed character; specifies a range of single characters Used within brackets to specify a range of AS numbers Matches a ^, a $, a comma, a space, a {, or a }. Placed on either side of a string to specify a literal and disallow substring matching. Numerals enclosed by underscores can be preceded or followed by any of the characters listed above. Matches characters on either side of the metacharacter; logical OR
\( \) [] _
| Mode(s):
fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide
438
Syntax:
[^ ] Matches any AS number except the ones specified within the brackets $ { } ( ) . * + ? Matches the end of the path Matches the beginning of an AS_SET Matches the end of an AS_SET Matches the start of an AS_CONFED_SET or AS_CONFED_SEQ Matches the end of an AS_CONFED_SET or AS_CONFED_SEQ Matches any single character Matches zero or more occurrences of the preceding character Matches one or more occurrences of the preceding character Matches zero or one occurrence of the preceding character. To use the ? metacharacter in a regular expression, you must enter the following key sequence: <Ctrl-v-?>. Otherwise, the CLI considers this to be a request for assistance in completing the command, rather than understanding it as a metacharacter.
439
()
Used with a multiplier metacharacter (*, +, ?) to specify patterns for multiple use. You can specify that a parenthesis be construed as a literal token instead of a metacharacter by immediately preceding it with a backslash: matches the beginning of an AS_CONFED_SET or AS_CONFED_SEQ matches the end of an AS_CONFED_SET or AS_CONFED_SEQ. Matches any enclosed character; specifies a range of single characters Used within brackets to specify a range of AS numbers Matches a ^, a $, a comma, a space, a {, or a }. Placed on either side of a string to specify a literal and disallow substring matching. Numerals enclosed by underscores can be preceded or followed by any of the characters listed above. Matches characters on either side of the metacharacter; logical OR
\( \) [] _
| Mode(s):
fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide
440
Syntax:
last-reset-reason reason for most recent reset messages-received total number of messages received from the peer messages-sent total number of messages sent to the peer peer-type type of BGP peer: internal, external, or confederation prefixes-received number of unique prefixes received from the peer remote-as the remote AS number of the peer state state of the BGP session times-up number of times the session has been established up-down-time how long the session has been up or down updates-received number of update messages received from the peer updates-sent number of update messages sent to the peer
Mode(s): delta displays baselined statistics filter see Filtering show Commands in About This Guide
441
show ip community-list
Description: Syntax: Displays community list information. show ip community list [ listName ] [ filter ] Mode(s): listName name of a community list filter see Filtering show Commands in About This Guide
Privileged Exec
Privileged Exec
Privileged Exec
442
Syntax: Mode(s):
Privileged Exec
Privileged Exec
server supplies in standalone mode. This command does not display address pairs that the DHCP local server supplies in non-PPP equal access mode.
Syntax: show ip dhcp-local reserved [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
443
Privileged Exec
show ip domain-lookup
Description: Syntax: Displays the name servers that you have specified on the system with the ip name-server command. show ip domain-lookup [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show ip dvmrp
Description: Syntax: Displays DVMRP information for a virtual router. show ip dvmrp [ delta ] [ filter ] Mode(s): delta displays baselined statistics filter see Filtering show Commands in About This Guide
444
445
446
show ip dynamic-interface-prefix
Description: Syntax: Displays the prefix for the names of dynamic IP shared interfaces. show ip dynamic-interface-prefix [ vrfName ] Mode(s): vrfName name of the VRF
show ip explicit-paths
Description: Displays all explicit paths or a particular explicit path in a non-ERX implementation. See the show mpls explicit-paths command for a complete description and syntax.
show ip extcommunity-list
Description: Syntax: Displays all extended-community lists or a specific extended-community list. show ip extcommunity-list [ listName ] [ filter ] Mode(s): listName name of the extended-community list filter see Filtering show Commands in About This Guide
Privileged Exec
447
show ip http
Description: Displays information about HTTP local servers, information about the parameters configured for the HTTP local server, and statistics about the connections to the HTTP local server. show ip http [ scalar | server | statistics [ delta ] ] [ filter ] Mode(s): scalar display only information about the connections to the HTTP local server server display only information about the parameters configured for the HTTP local server statistics display only statistics about the connections to the HTTP local server delta displays baselined statistics filter see Filtering show Commands in About This Guide
Syntax:
Privileged Exec
show ip igmp
Description: Syntax: Displays IGMP information for a virtual router. show ip igmp [ delta ] [ filter ] Mode(s): delta displays baselined statistics filter see Filtering show Commands in About This Guide
448
show ip igmp-proxy
Description: Syntax: Use to display IGMP proxy parameters on a virtual router. show ip igmp-proxy [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
449
450
show ip interface
show ip interface
Description: Syntax: Displays current state of all IP interfaces or the IP interfaces you specify. The default is all interface types and all interfaces. show ip interface [ vrf vrfName ] { { [ brief | detail ] { other | [ interfaceType interfaceSpecifier ] } } | summary } [ delta ] [ filter ] Mode(s): vrfName name of the VRF brief displays a brief summary of IP status and configuration information detail shows a detailed display of IP status and configuration information interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide summary shows a detailed summary of IP status and configuration delta displays baselined statistics filter see Filtering show Commands in About This Guide
451
Privileged Exec
Privilege Exec
452
show ip mroute
show ip mroute
Description: Syntax: Displays information about all or specified multicast routes. show ip mroute [ groupIpAddress [ sourceIpAddress ] ] [ summary | count | statistics ] [ filter ] groupIpAddress IP address of a multicast group sourceIpAddress IP address of a multicast source summary displays brief information about the multicast routes count displays the number of groups and sources statistics displays statistics for packets received through multicast routes that the system has added to the multicast routing table and established on the appropriate line modules filter see Filtering show Commands in About This Guide
Mode(s):
show ip nfs
Description: Syntax: Displays information about the interface that the current virtual router uses to exchange messages with the NFS server. show ip nfs [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
453
show ip ospf
Description: Syntax: Displays general information about OSPF routing processes. show ip ospf [ vrf vrfName ] [ delta ] [ filter ] Mode(s): vrfName name of the VRF delta displays baselined statistics filter see Filtering show Commands in About This Guide
454
455
Syntax:
456
457
Privileged Exec
show ip pim rp
Description: Syntax: Displays information about PIM group-to-RP mappings. show ip pim rp { groupAddress | mapping } [ filter ] Mode(s): groupAddress address of a group for which you want to view group-to-RP mappings mapping displays all RP-to-group mappings that the system has recorded filter see Filtering show Commands in About This Guide
458
459
show ip prefix-list
Description: Syntax: Displays information about prefix lists. show ip prefix-list [ listName [ seq seqNum | ipPrefix [ longer | first-match ] ] ] [ filter ] Mode(s): listName displays information for the prefix list having this name seqNum displays the information for the prefix list entry having this sequence number ipPrefix displays the information for the prefix list entry having this prefix, in the format IPbaseaddress/length; for example, 10.10.10.0/24 longer displays all entries for a prefix that are equal to or more specific than the specified prefix first-match displays only an entry that matches the specified prefix filter see Filtering show Commands in About This Guide
Privileged Exec
Privileged Exec
show ip prefix-tree
Description: Syntax: Displays information about prefix trees. show ip prefix-tree [ treeName [ ipPrefix [ longer ] ] ] [ filter ] Mode(s): treeName name of the prefix tree ipPrefix displays the information for the prefix list entry having this prefix, in the format IPbaseaddress/length; for example, 10.10.10.0/24 longer displays all entries for a prefix that are equal to or more specific than the specified prefix filter see Filtering show Commands in About This Guide
Privileged Exec
460
Privileged Exec
show ip profile
Description: Syntax: Displays information on a specific IP profile. show ip profile profileName [ filter ] Mode(s): profileName name of the profile you want to display filter see Filtering show Commands in About This Guide
show ip protocols
Description: Syntax: Displays detailed information on IP protocols currently configured on the router. show ip protocols [ vrf vrfName ] [ summary ] [ filter ] Mode(s): vrfName displays information on protocols only for the specified VRF summary displays only a list of currently configured protocols filter see Filtering show Commands in About This Guide
show ip redistribute
Description: Syntax: Displays configured route redistribution policy. show ip redistribute [ vrfName ] [ filter ] Mode(s): vrfName name of the VRF filter see Filtering show Commands in About This Guide
461
show ip rip
Description: Syntax: Displays limited RIP general status information. show ip rip [ vrf vrfName ] [ brief ] [ ifconfig ] [ ipAddress ] [ filter ] Mode(s): vrfName name of the VRF brief displays limited information ifconfig displays address and interface configuration information instead of the default operational data ipAddress displays information only for specific RIP network filter see Filtering show Commands in About This Guide
462
463
show ip route
Description: Syntax: Displays current state of the routing table. show ip route [ vrf vrfName ] [ ipAddress [ ipMask ] [ detail ] ] [ all ] [ bgp | isis | local | ospf | other | rip | static ] [ filter ] show ip route summary [ vrf vrfName ] [ filter ] Mode(s): vrfName displays the contents of the IP routing table associated with a VRF name displays the best route to the IP address resolved from this domain name ipAddress specifies the IP address or domain name to show domainName displays information for the IP address resolved from the specified domain name ipMask IP mask of the specific address to show detail displays detailed information about the specific prefix; currently shows the tag added via the ip route command all displays all routes in the routing table inserted from all protocols (not just the best routes that are used for forwarding) bgp displays the best BGP routes in the routing table isis displays the best IS-IS routes in the routing table local displays the best locally connected routes in the routing table ospf displays the best OSPF routes owned by in the routing table other displays the best internal control routes in the routing table rip displays the best RIP routes in the routing table static displays the best static routes added by network management to the routing table summary displays summary counters for all routes in the IP routing table filter see Filtering show Commands in About This Guide
464
show ip rpf-route
Description: Syntax: Displays routes that the system can use to verify source addresses in multicast packets. show ip rpf-route [ ipAddress [ ipMask ] ] [ protocol ] [ filter ] ipAddress specific IP address to show ipMask IP mask of the specific address to show protocol one of the following options
access displays access-server routes (BGP) access-internal displays internal routes to directly connected clients
(BGP)
bgp displays routes owned by BGP isis displays routes owned by IS-IS local displays locally connected routes ospf displays routes owned by OSPF other displays internal control routes rip displays routes owned by RIP static displays static routes added by network management
Mode(s): filter see Filtering show Commands in About This Guide User Exec, Privileged Exec
465
show ip ssh
Description: Syntax: Displays the current state of the SSH server. show ip ssh [ detail ] [ filter ] Mode(s): detail displays detailed information filter see Filtering show Commands in About This Guide
Privileged Exec
show ip static
Description: Syntax: Displays general status information for static routes added by network management to the routing table. show ip static [ vrfName ] [ ipAddress ipMask [ all ] ] [ filter ] Mode(s): vrfName name of the VRF ipAddress an IP address to show ipMask an IP mask of the specific address to show all displays all routes starting at the specified prefix filter see Filtering show Commands in About This Guide
466
show ip traffic
show ip traffic
Description: Syntax: Displays statistics about IP traffic. show ip traffic [ vrfName ] [ delta ] [ filter ] Mode(s): vrfName name of the VRF delta displays baselined statistics filter see Filtering show Commands in About This Guide
467
show ip vrf
Description: Syntax: Displays information for a specified VRF and its associated interfaces or all VRFs and their associated interfaces for the current virtual router context. show ip vrf [ [ detail ] [ vrfName ] [ filter ] | interfaces [ detail ] ] Mode(s): vrfName - name of the VRF for which information is displayed detail - displays detailed information filter see Filtering show Commands in About This Guide interfaces - displays all VRFs in the virtual router and their associated interfaces
show ip vrrp
Description: Displays detailed summary of VRID configured on interface identified. If the VRID is not identified, a detailed summary of all VRIDs configured on interface identified is provided. show ip vrrp [ interface interfaceType interfaceSpecifier [ vrid ] ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vrid virtual router ID; a number in the range 1255 filter see Filtering show Commands in About This Guide
Syntax:
Privileged Exec
Privileged Exec
468
Privileged Exec
Privileged Exec
469
Privileged Exec
Privileged Exec
470
Privileged Exec
Privileged Exec
471
472
473
show l2f
Description: Syntax: Displays global configuration and status information for L2F on the system. show l2f [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
Privileged Exec
Privileged Exec
474
Privileged Exec
Privileged Exec
475
Privileged Exec
Privileged Exec
show l2tp
Description: Syntax: Displays information about the L2TP configuration on the system. show l2tp [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
476
Privileged Exec
Privileged Exec
Privileged Exec
477
Privileged Exec
Privileged Exec
478
Privileged Exec
Privileged Exec
show last-reset
Description: Syntax: Displays information describing the reason for the systems last reload, whether specified by the user or resulting from a system problem. show last-reset [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
479
Privileged Exec
Privileged Exec
Privileged Exec
Privileged Exec
480
emergency or 0 system unusable alert or 1 immediate action needed critical or 2 critical condition exists error or 3 error condition warning or 4 warning condition notice or 5 normal but significant condition info or 6 informational message debug or 7 debug message
Mode(s): delta limits the display to events that occurred after the baseline filter see Filtering show Commands in About This Guide
481
show mpls
Description: Syntax: Displays status and configuration information about MPLS on the router or on specific interfaces. show mpls [ interface [ shim ] [ state not-up ] [ brief | interfaceType interfaceSpecifier ] ] [ filter ] Mode(s): interface displays information only for the MPLS interfaces; if not specified, only global information is displayed shim displays information about shim interfaces state not-up displays information only about interfaces that are not up brief displays limited interface information interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
482
vpi specifies ATM VPI that partially designates a label vci specifies ATM VCI that partially designates a label
implicit-null-label displays binding information for the implicit null label
483
Mode(s):
labelNumber displays information for this label only; a number in the range 161048575 labelRangeEnd when specified, displays information for labels ranging from labelNumber to labelRangeEnd; a number in the range 161048575 brief displays limited information filter see Filtering show Commands in About This Guide
484
vpi specifies ATM VPI that partially designates a label vci specifies ATM VCI that partially designates a label
implicit-null-label displays forwarding information for the implicit null label labelNumber displays information for this label only; a number in the range 161048575 labelRangeEnd displays information for labels ranging from labelNumber to labelRangeEnd; a number in the range 161048575 destAddress destination address of tunnels to be displayed maskLength prefix length for the destination address maskAddress address mask to be applied to the destination address longer-prefixes displays information for prefixes that are equal to or more specific than the specified prefix interface displays information for the specified interface
485
486
all displays all tunnels of which the system is a part head displays tunnels where the system is the ingress router, or tunnel
head end
tail displays tunnels where system is the egress router, or tunnel tail
end (endpoint or destination of the tunnel)
middle displays tunnels where system is a transit router on the tunnel remote displays tunnels where system is a transit router or egress
router (tail end)
487
488
all displays all tunnels of which the system is a part head displays tunnels where the system is the ingress router, or tunnel
head end
tail displays tunnels where system is the egress router, or tunnel tail
end (endpoint or destination of the tunnel)
middle displays tunnels where system is a transit router on the tunnel remote displays tunnels where system is a transit router or egress
router (tail end)
489
490
show nvs
Description: Syntax: Displays information about NVS. show nvs summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show policy-list
Description: Syntax: Displays information on policy lists. show policy-list [ policyName [ precedence precValue [ rule ruleNumber ] ] ] [ brief ] [ filter ] Mode(s): policyName policy name to be displayed precValue policy rule precedence to be displayed ruleNumber policy rule to be displayed brief display information in a condensed format filter see Filtering show Commands in About This Guide
491
interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide full displays configuration, status, and statistics information for the interface, including information specific to LCP, IPCP, OSINLCP, MPLSNLCP, PAP, and CHAP; equivalent to specifying config status statistics dataRestriction one or more of the following keywords; you can repeat a keyword without effect
config displays information on the PPP interface configuration status displays information on the PPP interface operational status statistics displays information on the PPP interface statistics
* indicates that one or more parameters can be repeated multiple times in a list in the command line protocolRestriction one or more of the following keywords
lcp displays LCP-specific information ip displays IPCP-specific information osi displays OSINLCP-specific information mpls displays MPLSNLCP-specific information pap displays PAP-specific information chap displays CHAP-specific information
stateRestriction information is displayed only for interfaces in one of the following specified states:
up interface on which the LCP has been negotiated down interface on which the LCP has not been negotiated, the
negotiations have failed, or the connection has been ended
passive interface with the operational status passive tunneled tunneled PPP interfaces
492
no-ip interface on which IPCP is not configured ip-open interface on which IPCP is administratively enabled, meaning
that the no ppp shutdown ip command is operational
ip-up interface on which the IPCP has been negotiated ip-down interface on which the IPCP has not been negotiated, the
negotiations failed, or the connection has been ended
no-osi interface on which OSINLCP is not configured osi-open interface on which OSINLCP is administratively enabled,
meaning that the no ppp shutdown osi command is operational
osi-up interface on which the OSINLCP has been negotiated osi-down interface on which the OSINLCP has not been negotiated,
the negotiations failed, or the connection has been ended
no-mpls interface on which MPLSNLCP is not configured mpls-open interface on which MPLSNLCP is administratively enabled,
meaning that the no ppp shutdown mpls command is operational
mpls-up interface on which the MPLSNLCP has been negotiated mpls-down interface on which the MPLSNLCP has not been
negotiated, the negotiations failed, or the connection has been ended Mode(s): delta displays baselined statistics filter see Filtering show Commands in About This Guide members lists all MLPPP member links, or only those for a specified MLPPP bundle links lists the MLPPP bundles and the PPP interfaces contained within them.
493
494
Syntax:
show processes
Description: Syntax: Use to show memory or CPU resources used by system processes and to force the system to release available memory on the SRP module. show processes [ cpu | memory ] [ filter ] cpu displays CPU utilization; default display if you omit any keyword memory displays system memory used and forces the system to release available memory Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
495
show profile
Description: Displays information about a specific IP profile, such as the available PPPoE profile information: PPPoE URL string, PPPoE MOTM string, or both. If neither exists, the fields do not appear in the display. show profile profileName [ filter ] Mode(s): profileName name of the profile you want to display filter see Filtering show Commands in About This Guide
Syntax:
show qos-port-type-profile
Description: Syntax: Displays information on the QoS port-type profile for particular interface type. show qos-port-type-profile [ interfaceType ] [ filter ] interfaceType specifies one of the following interface types to be associated with the QoS port-type profile: atm, ethernet, serial, server-port filter see Filtering show Commands in About This Guide
Mode(s):
496
show qos-profile
show qos-profile
Description: Syntax: Displays information on QoS profile(s) configured on the ERX system. show qos-profile [ qosProfileName ] [ brief | references ] [ filter ] Mode(s): qosProfileName name of the QoS profile brief display information in a condensed format references display interface profiles which reference this profile filter see Filtering show Commands in About This Guide
497
show queue-profile
Description: Syntax: Displays information on queue profile(s) configured on the ERX system. show queue-profile [ queueProfileName ] [ brief | references ] [ filter ] Mode(s): queueProfileName name of the queue profile brief display information in a condensed format references display QoS profiles that reference this profile filter see Filtering show Commands in About This Guide
show radius
Description: Syntax: Displays information on RADIUS authentication and accounting servers. show radius [ authentication | accounting ] { servers | statistics [ delta ] } [ filter ] Mode(s): authentication displays authentication information only accounting displays accounting information only servers displays a list of authentication and/or accounting servers statistics displays authentication and/or accounting statistics delta displays baselined statistics filter see Filtering show Commands in About This Guide
Privileged Exec
Privileged Exec
Privileged Exec
498
Syntax:
Privileged Exec
Syntax:
Privileged Exec
Privileged Exec
Privileged Exec
499
Privileged Exec
Privileged Exec
Privileged Exec
Privileged Exec
Syntax:
Privileged Exec
500
Privileged Exec
Privileged Exec
Privileged Exec
Privileged Exec
show rate-limit-profile
Description: Syntax: Displays information on rate-limit-profiles. show rate-limit-profile [ rateLimitProfileName ] [ filter ] Mode(s): rateLimitProfileName name of a rate limit profile filter see Filtering show Commands in About This Guide
501
show reboot-history
Description: Syntax: Displays information about the reboot history of the system. show reboot-history [ fileName.hty ] [ filter ] Mode(s): fileName name of a history file to display; if not specified, displays the current reboot.hty file filter see Filtering show Commands in About This Guide
show redundancy
Description: Syntax: Displays the way you configured the system for line module redundancy. show redundancy [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show reload
Description: Syntax: Displays the reload status on the router. show reload [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show route-map
Description: Syntax: Displays all the route maps or the route map you specify. The default is all route maps. show route-map [ listName ] [ filter ] Mode(s): listName specifies the route map name filter see Filtering show Commands in About This Guide
Privileged Exec
502
503
show running-configuration
Description: Syntax: Displays the configuration currently running on the system. Available only if the system is in Manual Commit mode. show running-configuration [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show scheduler-profile
Description: Syntax: Displays information on scheduler profile(s) configured on the ERX system. show scheduler-profile [ schedulerProfileName ] [ brief | references ] [ filter ] Mode(s): schedulerProfileName name of the scheduler profile brief displays information in a condensed format references displays QoS profiles that reference this profile filter see Filtering show Commands in About This Guide
504
show secrets
show secrets
Description: Syntax: Displays passwords and secrets. show secrets [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
full displays full status information and statistics statistics displays statistics information
Mode(s): delta displays baselined statistics interfaceType displays statistics for SMDS interface configured on the interface type, hssi or tunnel interfaceSpecifier location of the interface in the appropriate format; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
Privileged Exec
show snmp
Description: Syntax: Displays information on the status of communications between the SNMP agent and the SNMP manager. show snmp [ delta ] [ filter ] Mode(s): delta displays baselined statistics filter see Filtering show Commands in About This Guide
505
Privileged Exec
Privileged Exec
Privileged Exec
Privileged Exec
Privileged Exec
506
Privileged Exec
Privileged Exec
507
show subscribers
Description: Syntax: Displays the authenticated PPP users. Use the summary keyword to display all PPP subscribers for each virtual router, port, or domain. show subscribers [ username userName | domain domainName | virtual-router vrName | port interfaceLocation ] [ filter ] show subscribers summary [ domain | port | virtual-router ] [ filter ] summary active PPP subscribers per virtual router userName active PPP subscriber whose names match the username; 64 character string maximum domainName active PPP subscribers whose usernames have that domain name; 64 character string maximum vrName active PPP subscribers whose interfaces are bound to a specific virtual router; 513 character string maximum port displays active PPP subscribers for the port interfaceLocation location of the port in slot/port format; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
Mode(s):
Privileged Exec
show subsystems
Description: Syntax: Displays the names of subsystem files in the current software release or in a specified release file. show subsystems [ file fileName.rel ] [ filter ] fileName name of the software release file; you can specify a file on a remote server by including the path as part of the filename; absence of a path indicates a local file filter see Filtering show Commands in About This Guide
Mode(s):
Privileged Exec
508
show tacacs
show tacacs
Description: Syntax: Displays general or detailed TACACS+ information. show tacacs [ statistics | delta ] [ filter ] Mode(s): statistics specifies TACACS+ server statistics delta displays baselined statistics filter see Filtering show Commands in About This Guide
Privileged Exec
show telnet
Description: Syntax: Mode(s): Displays telnet daemons. show telnet Privileged Exec
show terminal
Description: Syntax: Displays information about terminal configuration settings for the current terminal line. show terminal [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show timing
Description: Syntax: Displays system timing settings and operational status. show timing [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
509
show traffic-class
Description: Syntax: Displays information on traffic class(es) configured on the ERX system. show traffic-class [ trafficClassName ] [ brief | references ] [ filter ] Mode(s): trafficClassName name of the traffic class brief displays information in a condensed format references displays QoS profiles that reference this profile filter see Filtering show Commands in About This Guide
show traffic-class-group
Description: Syntax: Displays information on a traffic class group configured on the ERX system. show traffic-class-group [ trafficClassGroupName ] [ filter ] Mode(s): trafficClassGroupName name of the traffic class group filter see Filtering show Commands in About This Guide
show tunnel-server
Description: Syntax: Displays information about the tunnels that a specific Tunnel Service module or all Tunnel Service modules support. show traffic-server slot/port [ filter ] Mode(s): slot slot in which the Tunnel Service module resides port internal port on the module to which the tunnels are assigned filter see Filtering show Commands in About This Guide
Privileged Exec
show users
Description: Syntax: Displays information about users of the vty lines. show users [ detail ] [ all ] [ filter ] Mode(s): detail displays detailed information all displays information about all lines filter see Filtering show Commands in About This Guide
Privileged Exec
510
show utilization
show utilization
Description: Displays information about the resources that the installed modules consume and forces the system to release available memory on the SRP module. Note: When you issue this command, the system releases available memory on the SRP module immediately; however, the display appears a few seconds later. Syntax: show utilization [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show version
Description: Syntax: Displays armed and running releases for every slot in the system and also displays each modules operational status. show version [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show virtual-router
Description: Syntax: Displays virtual routers configured on your system. show virtual-router [ routerName ] [ detail ] [ filter ] Mode(s): routerName name of the virtual router filter see Filtering show Commands in About This Guide detail displays detailed information about the virtual router
Privileged Exec
511
Privileged Exec
shutdown
Description: In Controller Configuration Mode, disables CE1, CT1, CT3, E3, SONET, and T3 controllers. These controllers are disabled by default. In Interface Configuration mode, disables Ethernet interfaces, HSSI interfaces, X.21/V.35 interfaces, the HDLC layer of serial interfaces, and the SONET layer of ATM or POS interfaces. These interfaces are enabled by default. In Subinterface Configuration mode, disables ATM 1483, Ethernet, Frame Relay, PPPoE, and VLAN subinterfaces. These subinterfaces are enabled by default. The no version restarts disabled controllers, interfaces, and subinterfaces. [ no ] shutdown Controller Configuration, Interface Configuration, Subinterface Configuration
Syntax: Mode(s):
sleep
Description: Syntax: Causes the CLI to pause for a specified period of time. There is no no version. sleep sleepFor Mode(s): sleepFor number of seconds in the range 04294967295
All modes
512
slot accept
slot accept
Description: Erases from NVS the type and configuration of the previous line module in the specified slot, allows you to configure a new module. Issue this command after you have installed a different type of line module in a slot. There is no no version. slot accept slotNum Mode(s): slotNum for an ERX-700 series system, a number in the range 06; for an ERX-1400 series system, a number in the range 013
Syntax:
Global Configuration
slot disable
Description: Syntax: Disables the module installed in the specified slot. There is no no version. slot disable slotNum Mode(s): slotNum for an ERX-700 series system, a number in the range 26; for an ERX-1400 series system, a number in the range 05 or 813
Global Configuration
slot enable
Description: Syntax: Enables the module installed in the specified slot. There is no no version. slot enable slotNum Mode(s): slotNum for an ERX-700 series system, a number in the range 26; for an ERX-1400 series system, a number in the range 05 or 813
Global Configuration
slot erase
Description: Erases from NVS the type and configuration of the previous line module in the specified slot, allows you to configure a new module. Issue this command before you install a different type of line module in a slot. There is no no version. slot erase slotNum Mode(s): slotNum for an ERX-700 series system, a number in the range 06; for an ERX-1400 series system, a number in the range 013
Syntax:
Global Configuration
513
snmp-server
Description: Syntax: Mode(s): Enables the SNMP agent operation. The no version disables this operation. [ no ] snmp-server Global Configuration
514
snmp-server community
snmp-server community
Description: Configures an authorized SNMP community and associates SNMPv1/v2c communities with SNMPv3 views. The no version removes an authorized community from the list of communities. snmp-server community commString [ view viewName ] [ priv ] [ accessListName ] no snmp-server community commString Mode(s): commString name of the SNMPv1/v2c community viewName name of the SNMPv3 view priv Privileged Exec level ro (read-only); rw (read-write); admin (administrator) accessListName IP access list name to filter SNMP clients
Syntax:
Global Configuration
snmp-server contact
Description: Syntax: Sets the systems contact information. The no version clears the systems contact information. snmp-server contact text no snmp-server contact Mode(s): text string of text that describes the systems contact person
Global Configuration
addrPool local address pool traps atmPing ERX system proprietary ATM ping traps bgp BGP state change traps bulkstats bulkstats file full and nearly full traps cliSecurityAlert security alerts traps dvmrp DVMRP traps
515
dvmrpUni ERX system proprietary DVMRP traps environment power/temperature/fan traps fileXfer file transfer status change traps inventory system inventory/status traps link SNMP linkUp/linkDown traps log system log capacity traps ntp ERX system proprietary traps ospf OSPF traps ping ping operation traps (in disman remops MIB) snmp SNMP coldstart, warmstart, link, authenticationFailure traps traceroute traceroute operation traps (in disman remops MIB)
snmp specifies the SNMP coldStart, warmStart, and authenticationFailure traps authentication specifies the SNMP authenticationFailure trap trapfilters filters traps according to severity level trapFilter minimum severity level of traps generated
alert severity level 1 critical severity level 2 debug severity level 7 emergency severity level 0 error severity level 3 informational severity level 6 notice severity level 5 warning severity level 4
Mode(s): Global Configuration
516
snmp-server host
snmp-server host
Description: Syntax: Configures the host(s) that should receive an SNMP trap. The no version removes the specified host from the list of recipients. snmp-server host ipAddress [ version ver ] securityString [ udp-port port ] [ trapCategory ]* [ trapFilters trapFilter ] no snmp-server host ipAddress ipAddress IP address of the SNMP trap recipient ver SNMP protocol version for traps sent to host: v1, v2c, or v3 securityString SNMP community string port UDP port number of SNMP trap recipient trapCategory SNMP trap category
addrPool local address pool traps atmPing ERX system proprietary ATM ping traps bgp BGP state change traps bulkstats bulkstats file full and nearly full traps cliSecurityAlert security alerts traps dvmrp DVMRP traps dvmrpUni ERX system proprietary DVMRP traps environment power/temperature/fan traps fileXfer file transfer status change traps inventory system inventory/status traps link SNMP linkUp/linkDown traps log system log capacity traps ospf OSPF traps ping ping operation traps (in disman remops MIB) radius RADIUS traps snmp SNMP coldstart, warmstart, link, authenticationFailure traps traceroute traceroute operation traps (in disman remops MIB)
trapfilters filters traps according to severity level trapFilter minimum severity level of traps sent to this host
alert severity level 1 critical severity level 2 debug severity level 7 emergency severity level 0
517
error severity level 3 informational severity level 6 notice severity level 5 warning severity level 4
Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line
Global Configuration
Syntax:
Global Configuration
518
Syntax: Mode(s):
snmp interfaces rfc1213 [ maxIfIndex ] [ maxIfNumber ] [ no ] snmp interfaces rfc1213 maxIfIndex maximum value of index numbers in the interface tables; range is 100524800; default is 65535 maxIfNumber maximum number of interfaces in each interface table; range is 100524800; default is 65535
Mode(s):
Global Configuration
snmp-server location
Description: Syntax: Sets information on the systems location. The no version clears this information. snmp-server location text no snmp-server location Mode(s): text string of text that describes the systems location
Global Configuration
519
snmp-server packetsize
Description: Syntax: Specifies the maximum SNMP packet size in bytes. The no version restores the default value. snmp-server packetsize byteCount no snmp-server packetsize Mode(s): byteCount size of an SNMP packet (in bytes)
Global Configuration
snmp-server trap-proxy
Description: Syntax: Use to enable or disable the SNMP trap proxy. [ no ] snmp-server trap-proxy state Mode(s): trap-proxy specifies this agent as the SNMP trap proxy state enable or disable
Global Configuration
snmp-server trap-source
Description: Syntax: Specifies the interface whose IP address is the source address for SNMP traps. The no version disables this feature. snmp-server trap-source interfaceType interfaceSpecifier no snmp-server trap-source Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Global Configuration
520
snmp-server user
snmp-server user
Description: Syntax: Use to create and modify SNMPv3 users. The no version removes the user. snmp-server user userName group groupName [ authentication authType authKey ] [ privacy privType privKey ] no snmp-server user userName userName name of the SNMPv3 user groupName name of the group to which the user belongs
source-address
Description: For L2TP, specifies a source IP address for the LAC tunnel endpoint. For L2F, specifies a source IP address for the home gateway tunnel endpoint. The no version removes the source address. source-address sourceAddress no source-address Mode(s): sourceAddress address of the local tunnel endpoint (the LAC)
Syntax:
521
speed
Description: When used from Line Configuration mode, sets the speed for the current and all new console sessions immediately. The no version reverts to the default value of 9600 bps. When used from Interface Configuration mode, specifies the line speed for an Ethernet interface. The no version specifies the default, automatically negotiate. This command works in conjunction with the duplex command; if you set or accept the automatically negotiate setting for either duplex mode or speed, the system negotiates both parameters with the remote device. This command is not available for the Ethernet interface on the SRP module. For console sessions: speed baudRate no speed baudRate terminal speed for the current console session. Possible values are: 2400, 4800, 9600, 14400, 19200, 28800, 38400, 57600, 115200 For Ethernet interfaces on line modules: speed speedValue no speed speedValue value of the line speed
Syntax:
100 specifies that the system uses a line speed of 100 Mbps on a
Fast Ethernet interface (not valid for GE interfaces)
1000 specifies that the system uses a line speed of 1000 Mbps on a
Gigabit Ethernet interface (not valid for FE interfaces) Mode(s): Line Configuration, Interface Configuration
522
spf-interval
spf-interval
Description: Controls the minimum interval between the shortest path first calculation for IS-IS. The no version restores the default interval of 5 seconds. If you do not specify a level, the interval applies to both level 1 and level 2. spf-interval [ level-1 | level-2 ] seconds no spf-interval [ level-1 | level-2 ] Mode(s): seconds number in the range 0120; the minimum time between SPF calculations in seconds; the default value is 5 level1 level 1 SPF level2 level 2 SPF
Syntax:
Router Configuration
split-horizon
Description: Controls the split horizon and poison reverse features for RIP remote neighbors. Split horizon is enabled by default; poison reverse routing updates are disabled by default. The no version disables the split horizon and enables poison reverse routing updates which set the metric for routes originating on the interface to infinity to explicitly advertise that the network is unreachable, reducing the possibility of routing loops. [ no ] split-horizon Remote Neighbor Configuration
Syntax: Mode(s):
srp switch
Description: Switches from the primary SRP module to the standby. This command is equivalent to the redundancy force-failover command with the srp option. There is no no version. srp switch [ [ force ] [ reason ] ] force prompts the user to confirm that the system should switch from the primary SRP module to the standby if the SRP modules are in certain states, such as writing configuration data to NVS, that could lead to loss of configuration data or corruption of NVS. reason reason for the change
Syntax:
Mode(s):
Privileged Exec
523
sscc address
Description: Configures the SDX client (formerly SSCC) with the IP addresses of the SDX servers and the ports on which the servers listen for activity. The no version removes the specified server (primary, secondary, or tertiary) from the list of SDX servers. [ no ] sscc { primary | secondary | tertiary } address ipAddress port portNumber Mode(s): primary primary SDX server secondary secondary SDX server tertiary tertiary SDX server ipAddress IP address of an SDX server portNumber SDX server port number on which the server listens for activity
Syntax:
Global Configuration
sscc enable
Description: Syntax: Mode(s): Enables the SDX (formerly SSC). The no version disables the feature. [ no ] sscc enable Global Configuration
sscc retryTimer
Description: Configures the delay period during which the SDX client (formerly SSCC) waits for a response from an SDX (formerly SSC) server. When the timer expires, the client submits the request to the next server and waits again for the timer to expire. The request is sent to each timer in rotation until there is a response. The no version restores the default delay period of 90 seconds. [ no ] sscc retryTimer timer Mode(s): timer time in seconds from 5 to 300
Syntax:
Global Configuration
sscc sourceAddress
Description: Syntax: Specifies a fixed source address for the TCP/COPS connection. [ no ] sscc sourceAddress ipAddress Mode(s): ipAddress the source (or local) IP address of the TCP/COPS connection
Global Configuration
524
sscc transportRouter
sscc transportRouter
Description: Syntax: Configures the router on which the TCP/COPS connection is to be established. [ no ] sscc transportRouter name Mode(s): name the transport routers name
Global Configuration
strict-priority
Description: Syntax: Mode(s): Sets strict-priority scheduling for the scheduler node. The no version deletes the strict priority setting. [ no ] strict-priority Scheduler Profile Configuration
strip-domain
Description: Use to strip the domain name from the username before sending an access-request message to the RADIUS server. The domain name is the text after the last @ character. For example, xyz.com is the domain name of the following: fred@abc.com@xyz.com. To stop stripping the domain name, use the disable keyword. The no version resets the default, disable. strip-domain { enable | disable } no strip domain Mode(s): Domain Map Configuration
Syntax:
525
subscriber
Description: Configures a local subscriber (when one cannot be obtained externally, as in PPP) on the ERX to support authentication and configuration from the RADIUS server. The no version negates the command. subscriber upperInterfaceType userNameUsage userName domain domainName [ passwordUsage password ] no subscriber upperInterfaceType upperInterfaceType upper interface type, bridged Ethernet or IP userNameUsage specifies how the supplied username is used for authentication purposes: as specified or postpended with the interface physical location userName RADIUS username domainName domain name passwordUsage specifies how the supplied password is used for authentication purposes: as specified or postpended with the interface physical location; password usage is optional password RADIUS password; password usage is optional
Syntax:
Mode(s):
526
summary-address
summary-address
Description: Syntax: Creates aggregate addresses for IS-IS or aggregates external routes at the border of the OSPF domain. The no version restores the default. ISIS: summary-address address mask [ level-1 | level-1-2 | level-2 ] [ metric ] no summary-address address mask [ level-1 | level-1-2 | level-2 ] address summary IP address designated for a range of addresses mask IP subnet mask used for the summary route level-1 redistributed routes into level 1 are summarized; when distributing routes domain wide, routes leaked from level 2 into level 1 are summarized level 1-2 summary route is applied both when redistributing routes into level 1 and level 2 IS-IS, and when routes are leaked between levels level-2 routes learned by level 1 routing are summarized into the level 2 backbone with the configured address/mask value; redistributed routes into level 2 IS-IS are also summarized metric number in the range 116777215; the default metric value; the summary uses this value when advertising the summary address. When no metric is supplied, uses the value of the lowest-cost route that this is summarizing (default)
OSPF: [ no ] summary-address address mask Mode(s): address summary address designated for a range of addresses mask IP subnet mask used for the summary route
Router Configuration
suppress-default
Description: Suppresses an IS-IS level 1-2 router from indicating that it can reach destinations outside the area, thus preventing level 1 routers from installing a default route to the level 1-2 router. The no version disables suppression of default routes. [ no ] suppress-default Router Configuration
Syntax: Mode(s):
527
svlan id
Description: Syntax: Specifies an S-VLAN. There is no no version. svlan id S-VlanIdValue VlanIdValue Mode(s): S-VlanIdValue S-VLAN ID number in the range of 04095, which is unique within the Ethernet interface VlanIdValue VLAN ID number in the range of 04095, which is unique within the Ethernet interface
Interface Configuration
svlan ethertype
Description: Syntax: Specifies the Ethertype of an S-VLAN. The no version removes the Ethertype. [ no ] svlan ethertype { 9100 | 9200 } Mode(s): 9100 specifies Ethertype value 0x9100 9200 specifies Ethertype value 0x9200
Interface Configuration
synchronization
Description: Syntax: Mode(s): Enables synchronization between BGP and your IGP. The no version advertises a network route without waiting for the IGP. [ no ] synchronization Address Family Configuration, Router Configuration
synchronize
Description: Syntax: Mode(s): Forces the NVS file system of the redundant SRP module to synchronize with the NVS file system of the primary SRP module. There is no no version. synchronize Privileged Exec
528
t1 bert
t1 bert
Description: Syntax: Enables bit error rate tests using the specified pattern on a T1 line on a CT3 module. The no version stops the test that is running. t1 channel bert pattern pattern interval time [ unframed ] no t1 channel bert channel T1 channel number in the range 128 pattern one of the following test patterns
0s repetitive test pattern of all zeros, 00000... 1s repetitive test pattern of all ones, 11111... 2^11 pseudorandom test pattern, 2048 bits in length 2^15 pseudorandom 0.151 test pattern, 32768 bits in length 2^20-O153 pseudorandom 0.153 test pattern, 1048575 bits in length 2^20-QRSS pseudorandom QRSS 0.151 test pattern, 1048575 bits in
length
2^23- pseudorandom 0.151 test pattern, 8388607 bits in length alt-0-1 repetitive alternating test pattern of zeros and ones,
01010101...
Mode(s):
Controller Configuration
529
t1 clock source
Description: Syntax: Determines which end of the T1 interface provides clocking. The no version uses the default value, line. t1 channel clock source { line | internal { module | chassis } } no t1 channel clock source channel T1 channel number in the range 128 line interface transmits data from a clock recovered from the lines receive data stream internal interface transmits data using its internal clock. You must specify one of the following for internal clocking:
module internal clock is from the line module itself chassis internal clock is from the configured system clock
Mode(s): Controller Configuration
t1 fdl
Description: Syntax: Specifies the FDL standard used by a specific T1 channel on the CT3 interface. The no version restores the default, none. t1 channel fdl { ansi | att | all | none } no t1 channel fdl [ ansi | att | all ] Mode(s): channel T1 channel number in the range 128 ansi specifies ANSI T1.403 Standard for extended superframe FDL exchange support att specifies AT&T Technical Reference 54016 for extended superframe FDL exchange support all specifies both the AT&T and ANSI mode for extended superframe FDL exchange support none removes the current FDL mode settings
Controller Configuration
530
t1 fdl carrier
t1 fdl carrier
Description: Specifies that an interface is used in the carrier environment of a T1 channel on a CT3 interface. The no version restores the default situation, in which an interface does not operate in the carrier environment. [ no ] t1 channel fdl carrier Mode(s): channel T1 channel number in the range 128
Syntax:
Controller Configuration
t1 fdl string
Description: Defines an FDL message on a T1 channel on a CT3 interface as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages. t1 channel fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue | generator generatorValue } no t1 channel fdl string { eic | fic | lic | unit | pfi | port | generator } Mode(s): channel T1 channel number in the range 128 eicValue equipment identification code; 110 characters; default is the null value licValue line identification code; 110 characters; default is the null value ficValue frame identification code; 110 characters; default is the null value unitValue unit identification code; 16 characters; default is the null value. pfiValue facility identification code to send in the FDL path message; 138 characters; default is the null value. portValue equipment port number to send in the FDL idle signal message; 138 characters; default is the null value. generatorValue generator number to send in the FDL test signal message; 138 characters; default is the null value.
Syntax:
Controller Configuration
531
t1 fdl transmit
Description: Configures the system to send the specified FDL message on a T1 channel on a CT3 interface. The no version stops the system from sending the specified FDL message or all FDL messages. [ no ] t1 channel fdl transmit { path-id | idle-sIgnal | test-signal } no t1 channel fdl transmit Mode(s): channel T1 channel number in the range 128 path-id transmits a path identification message every second idle-sIgnal transmits an idle signal every 10 seconds test-signal transmits a test signal every 10 seconds
Syntax:
Controller Configuration
t1 framing
Description: Syntax: Specifies the type of framing used by a specific T1 channel on the CT3 interface. The no version uses the default value, esf. t1 channel framing { esf | sf } no t1 channel framing Mode(s): channel T1 channel number in the range 128 esf specifies extended superframe sf specifies superframe
Controller Configuration
t1 lineCoding
Description: Syntax: Specifies the type of line coding used by a specific T1 channel on the CT3. The no version uses the default value, b8zs. t1 channel lineCoding { ami | b8zs } no t1 channel lineCoding Mode(s): channel T1 channel number in the range 128 ami specifies alternate mark inversion b8zs specifies bipolar with eight-zero substitution
Controller Configuration
532
t1 loopback
t1 loopback
Description: Configures a loopback test for a T1 line on a CT3 module. The no version deactivates the loopback test; if you specify the remote keyword, the no version sends the 16-bit ESF data link code word or inband pattern to deactivate the loopback at the remote end based on the last activate request sent to the remote end. If you do not specify the remote keyword, the no version clears the local loopback configuration. t1 channel loopback [ local | network { line | payload } | remote { line { fdl { ansi | bellcore } | inband } payload [ fdl ] [ansi ] } ] no t1 channel loopback [ remote ] channel T1 channel number in the range 128 local loops the router output data back toward the router at the T1 framer and sends an alarm indication signal out toward the network. This is the default setting if you specify no optional keywords. network { line | payload } Specify the line keyword to loop the data back toward the network before the T1 framer and automatically set a local loopback at the HDLC controllers. Specify the payload keyword to loop the payload data back toward the network at the T1 framer and automatically set a local loopback at the HDLC controllers. remote line fdl ansi sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 channel, according to the ANSI T1.403 specification. remote line fdl bellcore sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 channel, according to the Bellcore TR-TSY-000312 specification. remote line inband sends a repeating 5-bit inband pattern (00001) to the remote end requesting that it enter into a network line loopback remote payload [ fdl ] [ ansi ] sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 channel. You can optionally specify fdl and ansi, but it is not necessary.
Syntax:
Mode(s):
Controller Configuration
533
t1 remote-loopback
Description: Syntax: Enables the acceptance of remote loopback requests. The no version restores the default value, which is to reject remote loopback requests. [ no ] t1 channel remote-loopback Mode(s): channel T1 channel number in the range 128
Controller Configuration
t1 shutdown
Description: Syntax: Disables a T1 or fractional T1 channel on the CT3. The no version restarts a disabled interface. [ no ] t1 channel | channel/subchan shutdown Mode(s): channel T1 channel number in the range 128 subchan FT1 subchannel on a T1 interface in the range 124
Controller Configuration
Syntax:
Controller Configuration
534
t1 timeslots
t1 timeslots
Description: Syntax: Configures the timeslots and data rate used on each T1 channel on the CT3 interface. The no version deletes the fractional T1 circuit. t1 channel/subchan timeslots range [ speed { 56 | 64 } ] no t1 subchan channel T1 channel number in the range 128 subchan subchannel specifies the logical subchannel on a T1 in the range 124 range specifies the timeslot assigned to the T1 channel in the range 124. A dash represents a range of timeslots, and a comma separates timeslots. For example, 1-10, 15-18 assigns timeslots 1 through 10 and 15 through 18. speed specifies the data rate for the T1 channel. Values are 56 Kbps or 64 Kbps. The default is 64 Kbps.
Mode(s):
Controller Configuration
t1 yellow
Description: Generates or detects a yellow alarm for a T1 channel on the CT3 interface. The no version restores the default value, to not generate or to not detect a yellow alarm. [ no ] t1 channel yellow { generate | detect } Mode(s): channel T1 channel number in the range 128
Syntax:
Controller Configuration
535
table-map
Description: Applies the specified route map to all BGP, OSPF, or RIP routes about to be added to the IP routing table. The no version halts application of the route map. table-map mapTag no table-map [ mapTag ] mapTag name of the route map; a string of up to 32 alphanumeric characters; for each protocol, the route map can set only the values as specified below: BGP: distance, IP next hop, level, metric, metric type, route type, and tag values OSPF: distance, metric, metric type, route type, and tag values RIP: distance, metric, and tag values Mode(s): Address Family Configuration (BGP), Router Configuration (BGP, OSPF, RIP)
Syntax:
tacacs-server host
Description: Adds or deletes a host to or from the list of TACACS+ servers. If host is not assigned as primary host, the system assigns an existing host as the primary. The no version deletes the host from the list of TACACS+ servers. tacacs-server host ipAddress [ port portNumber ] [ timeout timeoutValue ] [ key keyValueString ] [ primary ] no tacacs-server host ipAddress Mode(s): ipAddress IP address of the TACACS+ server portNumber TACACS+ servers TCP port number in the range 1655535 timeoutValue specifies response timeout interval for the TACACS+ client to server exchange; number in the range 1 to 255; default is 5 keyValueString specifies the secret used in TACACS+ client to server exchange; value string can be up to 100 characters primary assigns the host as the primary host
Syntax:
Global Configuration
536
tacacs-server key
tacacs-server key
Description: Sets or resets the authentication and encryption key value shared by all TACACS+ servers that do not have a server-specific key set up by the tacacs-server host command. The no version removes the key value shared by all TACACS+ servers. tacacs-server key keyValueString no tacacs-server key Mode(s): Global Configuration
Syntax:
tacacs-server source-address
Description: Syntax: Sets or resets an alternative source address to be used for TACACS+ server communications. The no version removes the address. tacacs-server source-address ipAddress no tacacs-server source-address Mode(s): ipAddress IP address used as source by the TACACS+ server
Global Configuration
tacacs-server timeout
Description: Sets the interval in seconds that the server waits for the TACACS+ server host to reply. This value is shared by those TACACS+ servers that do not have a timeout interval set by the tacacs-server host command. The no version resets the timeout interval shared by all TACACS+ servers. tacacs-server timeout timeoutValue no tacacs-server timeout Mode(s): timeoutValue specifies response timeout interval for the TACACS+ client to server exchange; number in the range 1 to 255; default is 5
Syntax:
Global Configuration
537
tag
Description: Syntax: Specifies a user-defined tag. The no version removes the tag from the operation. You can configure a tag for both echo and echoPath types. tag tagValue no tag Mode(s): tagValue name of a group that the operation belongs to: 0255 ASCII characters; the default is to have no tag
RTR Configuration
538
telnet
telnet
Description: Syntax: Enables connections to remote systems via the embedded Telnet client. There is no no version. telnet IpAddress | hostname [ vrf vrfName ] [ ipPortNumber | ipPortType ] [ source-interface interfaceType interfaceSpecifier | noecho | line | debug | verbose ]* ipAddress IP address of the remote system hostname name of the remote system vrfName name of the VRF to which the command applies; string of 132 alphanumeric characters ipPortNumber number in the range 065535 of the port for the connection to the remote system. The default is port number 23, the Telnet port. For more information on port numbers and associated processes, see www.iana.org. ipPortType name of a well-known port, as follows:
bgp Border Gateway Protocol (port 179) chargen character generator (port 19) cmd remote commands (port 514) daytime daytime (port 13) discard discard (port 9) domain Domain Name Service (port 53) echo echo (port 7) exec exec (port 512) finger finger (port 79) ftp File Transfer Protocol (port 21) ftp-data FTP data connections (port 20) gopher gopher (port 70) hostname NIC hostname server (port 101) ident Ident Protocol (port 113) irc Internet Relay Chat (port 194) klogin Kerberos login (port 543) kshell Kerberos shell (port 544)
539
login Login (port 513) lpd printer service (port 515) nntp Network News Transport Protocol (port 119) pim-auto-rp Protocol Independent Multicast Auto RP (port 496) pop2 Post Office Protocol version 2 (port 109) pop3 Post Office Protocol version 2 (port 110) smtp Simple Mail Transport Protocol (port 25) sunrpc Sun Remote Procedure Call (port 111) syslog Syslog (port 514) tacacs Terminal Access Concentrator Access Control System (port 49) talk Talk (port 517) telnet Telnet (port 23) time Time (port 37) uucp Unix-to-Unix Copy Program (port 540) whois nickname (port 43) www World Wide Web (port 80)
source-interface forces Telnet to use the IP address of the specified interface as the source address for the Telnet connection
Privileged Exec
540
telnet listen
telnet listen
Description: Syntax: Sets the Telnet daemon to listen in a virtual router other than the default. The no version deletes the Telnet daemon. telnet listen [ port portValue ] no telnet listen Mode(s): portValue TCP port on which the Telnet daemon listens; if not specified, the default port 23 is used
Global Configuration
terminal data-character-bits
Description: Syntax: Sets the number of data bits available for characters for the current session on the terminal screen. There is no no version. terminal data-character-bits { 7 | 8 } Mode(s): 7 7 data bits per character; this setting supports only characters in the standard ASCII set 8 8 data bits per character; default setting, supports the full set of 8-bit international characters
terminal length
Description: Syntax: Sets the number of lines on the current terminal screen for the current session. There is no no version. terminal length value value number for the screen length in the range 0512. If 0, the router does not pause between screens of output. If not 0, the router pauses between screens.
Mode(s):
terminal speed
Description: Syntax: Sets the speed for the current console session. There is no no version. terminal speed baudRate baudRate terminal speed for the current console session; possible values are: 2400, 4800, 9600, 14400, 19200, 28800, 38400, 57600, 115200
Mode(s):
Privileged Exec
541
terminal width
Description: Syntax: Sets the number of character columns on the current terminal screen for the current line for a session. There is no no version. terminal width value Mode(s): value number of characters in the range 30512
test aaa
Description: Verifies RADIUS authentication and accounting and IP address assignment setup. The test uses a username and password and attempts to authenticate a user, get an address assignment, and issue a start accounting request. The test immediately terminates the session by issuing a stop accounting request and an address release. Optionally, a virtual router context may be specified. test aaa { ppp | mlppp } userName [ password ] [ virtual-router vrContext ] [ aaa-profile profileName ] [ zero-stats ] ppp indicates a PPP user mlppp simulates Multilink PPP userName username to test password password to associate with username; password is optionalwhen omitted, the RADIUS access request has no User-Password attribute vrContext virtual router context in which to authenticate the user aaa-profile specifies the AAA profile for the user profileName specifies the AAA profile name zero-stats specifies that accounting statistics should be set to zero for this test
Syntax:
Mode(s):
Privileged Exec
542
ipv4 unicast the IPv4 unicast routing table; the default option ipv4 multicast the IPv4 multicast routing table vpnv4 all all IPv4 VPN routing and forwarding instances vpn4 vrf vrfname the IPv4 VPN routing and forwarding instance with
the name vrfname ipAddress neighbors IP address peerGroupName name of BGP peer group. If you specify a BGP peer group by using the peer-group-name argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. advertised-routes tests only outgoing advertisements to the specified neighbor routes tests only the incoming advertisements from the specified neighbor routeAddr prefix advertised by BGP routeMask subnet mask associated with prefix; if not specified, a best match on routeAddr is performed distinguisher unique two-part identifier of the format number1:number2 where:
number1 AS number or an IP address number2 unique integer; 32 bits if number1 is an AS number; 16 bits if
number1 is an IP address If not specified, considers all destinations with the same routeAddress and routeMask. accessListName name of an access list used as a distribute list to filter routes by prefix; string of up to 32 alphanumeric characters
543
asPathAccessListName name of a single AS path access list used to filter routes by AS path; string of up to 32 characters weightValue weight to set for the filtered incoming route; an integer in the range 04294967295 mapTag name of a route map; a string of up to 32 alphanumeric characters prefixListName name of a BGP prefix list used to filter routes by prefix prefixTreeName name of a BGP prefix tree used to filter routes by prefix fields displays only the specified fields fieldOptions field(s) to be displayed, in the format all | [ afi | aggregator | as-path | atomic-aggregate | best | clusters | communities | extended-communities | imported | intro | label | loc-pref | med | next-hop | next-hop-cost | origin | originator-id | peer | peer-type | rd | safi | unknown-types | weight ]*
afi address family identifier aggregator AS number and IP address of aggregator as-path AS path through which this route bas been advertised atomic-aggregate whether the atomic aggregate attribute is present best whether this is the best route for the prefix clusters list of cluster IDs through which the route has been advertised communities community number associated with the route extended-communities extended community imported whether the route was imported intro introductory information about the state of various BGP attributes;
this information is displayed only if you specify this keyword
label MPLS label loc-pref local preference for the route med multiexit discriminator for the route next-hop IP address of the next router that is used when forwarding a
packet to the destination network
origin origin of the route originator-id router ID of the router in the local AS that originated the
route
544
threshold
peer-type type of BGP peer: internal, external, or confederation rd route distinguisher safi subsequent address family identifier unknown-types attribute codes for unknown path attributes weight weight of the route * indicates that one or more parameters can be repeated multiple
times in a list in the command line Mode(s): filter see Filtering show Commands in About This Guide
threshold
Description: Syntax: Sets the threshold values for bit error rates used in APS/MSP alarms. The no version restores the default value, 6, for the specified alarm. threshold { sd-ber | sf-ber } rate no threshold { sd-ber | sf-ber } sd-ber bit error rate that specifies signal degradation sf-ber bit error rate that specifies signal failure rate integer in the range 39; a value of n corresponds to a rate of 10-n (10e-n) errors per second Mode(s): Controller Configuration
545
timeout
Description: When used from RADIUS Configuration mode, specifies the interval, in seconds, before the system retransmits a RADIUS packet to an authentication or accounting server. The no version uses the default. When used from RTR Configuration mode, specifies the timeout for a Response Time Reporter operation. The no version returns the operation to the default value. You can apply this parameter only to echo entries. RADIUS: timeout waitTime no timeout waitTime specifies the number of seconds in the range 310. The default is 3.
Syntax:
RTR: timeout timeoutValue no timeout timeoutValue number in milliseconds that the operation waits for a response; if the value is set to 0 or is larger than frequency, it will be ignored; the default is 5000 milliseconds
Mode(s):
Syntax:
Line Configuration
546
timers
timers
Description: Syntax: Configures RIP timers. The no version restores the default values. timers update invalid holddown flush no timers update interval in seconds at which routing updates are sent. The default is 30. invalid interval in seconds after which a route is declared invalid (null). The default is 180. holddown interval in seconds during which routing information regarding better paths is disregarded by the system. The default is 120. flush interval in seconds that must pass before a route is removed from the routing table. Set this value greater than the invalid value. The default is 300.
Mode(s):
Router Configuration
timers bgp
Description: Syntax: Sets keepalive and hold-time timers for all neighbors. The no version restores the default values. timers bgp keepaliveTime holdTime no timers bgp [ keepaliveTime [ holdTime ] ] keepaliveTime interval in seconds between keepalive messages; range is 065535 seconds; default is 30 seconds; a value of zero prevents BGP from sending keepalive messages holdTime period in seconds that BGP waits for keepalive messages before declaring the neighbor to be unavailable; range is 065535 seconds; default is 90 seconds; a value of zero informs BGP not to expect any hold-time messages
Mode(s):
Router Configuration
timers spf
Description: Configures the delay time between when OSPF receives a topology change and when it starts an SPF calculation and the hold time between two consecutive SPF calculations. The no version restores the default value. [ no ] timers spf holdTime Mode(s): holdTime number in the range 15 seconds; default is 3seconds; the hold time between consecutive SPF calculations
Syntax:
Router Configuration
547
time-to-live
Description: Specifies a hop count by setting the value of the time-to-live field used by packets sent to a RIP remote neighbor. The no version restores the default value. time-to-live ttlValue no time-to-live Mode(s): ttlValue number in the range 116; the default value is 16
Syntax:
timing disable-auto-upgrade
Description: Syntax: Mode(s): Disables the auto-upgrade feature of the system timing. The no version enables the auto-upgrade feature. [ no ] timing disable-auto-upgrade Global Configuration
timing select
Description: Syntax: Configures the preferred timing selector. There is no no version. timing select selector selector timing selector
primary highest-priority preferred selection secondary middle-priority preferred selection tertiary lowest-priority preferred selection
Mode(s): Global Configuration
548
timing source
timing source
Description: Configures the systems timing sources. Only one of these timing sources can be an external source received via an interface on an I/O module other than the SRP I/O module; the other two must be either internal sources or external sources received via the SRP I/O modules. There is no no version. timing source selector { internal | line lineType | { sonet | ds3 | ds1 | e1 | e3 } interfaceValue } selector priority of the timing source; in descending order primary, secondary, or tertiary internal internal SC oscillator line external timing input on SRP module lineType one of the following timing sources:
Syntax:
e1:a E1 clock, port A on SRP module e1:b E1 clock, port B on SRP module t1:a T1 clock, port A on SRP module t1:b T1 clock, port B on SRP module
Mode(s): sonet specifies a SONET interface ds3 specifies a DS3 interface ds1 specifies a DS1 interface e1 specifies an E1 interface e3 specifies an E3 interface interfaceValue interface specifier, in the form slot/port[:subPort]
Global Configuration
tos
Description: Syntax: Defines a type of service byte in the RTR operations IP header. The no version returns the operation to the default value. tos tosValue no tos Mode(s): tosValue ToS byte in the IP header: 0255; the default is 0 for both RTR types.
RTR Configuration
549
traceroute
Description: Syntax: Discovers the paths that router packets follow when travelling to their destinations. There is no no version. traceroute [ vrf vrfName ] destination [ ttl maxTTLCount ] [ timeout timeOutVal ] [ data-size sizeValue ] [ source { interface interfaceType interfaceSpecifier | address sourceAddress } ] [ extended [ tos tosVal ] [ set-dont-fragment-bit ] [ interface iType iNumber ] vrfName name of the VRF context destination IP address or domain name of the trace maxTTLCount maximum number of hops of the trace in the range 1255; default is 32 timeOutVal time in seconds to wait for trace responses in the range 120; default is 2 sizeValue number of bytes comprising the IP packet and reflected in the IP header in the range 064000 source interface specifies an interface as the source for the transmitted packets
550
traffic-class
traffic-class
Description: In Policy Configuration mode, specifies a traffic class in a policy list for policy management. The no version removes a traffic class from a policy list. The suspend version temporarily suspends the policy rule. In Global Configuration mode, configures a traffic class in the ERX system. In Traffic Class Group Configuration mode, specifies a traffic class that belongs to the traffic class group. The no version deletes the traffic class. In Policy Configuration mode: [ no ] [ suspend ] traffic-class trafficClassName [ classifier-group claclName ] [ precedence precValue ] trafficClassName name of the traffic class claclName name of the classifier group precValue precedence value in the range 032768
Syntax:
In Global Configuration and Traffic Class Group Configuration modes: [ no ] traffic-class trafficClassName Mode(s): trafficClassName name of the traffic class
traffic-class-group
Description: Syntax: Configures a traffic class group. The no version deletes the selected traffic-class group. [ no ] traffic-class-group trafficClassGroupName Mode(s): trafficClassGroupName name of the traffic class group
Global Configuration
translate
Description: Syntax: Maps the original domain name to the mapped domain name for domain map lookup. The no version negates the command. translate domainName mappedDomainName no translate domainName Mode(s): domainName name of the domain; maximum of 64 characters mappedDomainName name of the mapped domain name; maximum of 64 characters
551
transmit-delay
Description: Syntax: Sets the estimated time it takes to transmit a link state update packet on the OSPF remote-neighbor interface. The no version restores the default value. transmit-delay transmDelay no transmit-delay Mode(s): transmDelay the link state transmit delay, a number in the range 03600 seconds; default value is 1 second
triggered-update-disable
Description: Syntax: Mode(s): Specifies that RIP does not send triggered routing updates. The no version restores the default condition, wherein RIP does send triggered updates. [ no ] triggered-update-disable Router Configuration
ttl
Description: Specifies a hop count by setting the value of the time-to-live field used by packets sent to an OSPF remote neighbor. The no version restores the default value. ttl ttlValue no ttl Mode(s): ttlValue number in the range 1255; the default value is 1
Syntax:
tunnel
Description: Specifies an L2TP or L2F tunnel and changes the mode to Domain Map Tunnel Configuration. In Domain Map Tunnel Configuration mode, you can set the attributes of the tunnel. The no version deletes the L2TP or L2F tunnel configuration from the system. [ no ] tunnel tag Mode(s): tag tunnel tag value in the range 131
Syntax:
552
tunnel checksum
tunnel checksum
Description: Syntax: Mode(s): Enables end-to-end checksum computation for GRE tunnels. The no version disables the checksum option. [ no ] tunnel checksum Interface Configuration
tunnel destination
Description: For DVMRP or GRE, configures the tunnel endpoint for static tunnels.The no version deletes the endpoint. For IPSec, configures the remote tunnel endpoint. For MPLS in Interface Configuration mode, configures the tunnel endpoint for static MPLS tunnels.The no version deletes the endpoint. For MPLS in Tunnel Profile Configuration mode, configures the source of tunnel endpoints (destinations) within a tunnel profile. You can specify that the endpoints are to be learned from BGP, IS-IS, or OSPF, or you can provide one or more IP addresses as the endpoint(s). If you specify the destination address, it must be the address of the MPLS interface or the router ID of the destination router. The no version deletes the endpoints. For DVMRP and GRE: tunnel destination ipAddress | hostname no tunnel destination ipAddress IP address of the interface on the remote system hostname name of the host that will serve as the tunnel endpoint
Syntax:
For IPSec: tunnel destination ipAddress no tunnel destination ipAddress IP address of the interface on the remote system or the router ID of the destination router that serves as the tunnel endpoint
553
For MPLS in Interface Configuration mode: tunnel destination ipAddress no tunnel destination For MPLS in Tunnel Profile Configuration mode: [ no ] tunnel destination { ipAddress | ipAddress [ ipAddress ]* | { isis-level-2 | ospf-bdr } [ { access-list | prefix-list } listName ] } isis-level-2 specifies IS-IS level-2 routers as acceptable destinations ospf-bdr specifies OSPF border routers as acceptable destinations listName name of access list or prefix list that contains the IP addresses that are acceptable as tunnel endpoints ipAddress IP address of the interface on the remote system or the router ID of the destination router that serves as the tunnel endpoint; for a tunnel profile, you can list multiple addresses * indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s):
tunnel ip profile
Description: Syntax: Assigns an IP profile to the MPLS tunnel. The no mpls tunnels profile version removes the IP profile from the tunnel. tunnel ip profile ipProfileId no tunnel ip profile Mode(s): ipProfileId name of an IP profile
554
tunnel lifetime
tunnel lifetime
Description: Sets the lifetime of IPSec SAs running on this tunnel. You can specify the lifetime in seconds and/or volume of traffic. Before either limit is reached, the SA is renegotiated, ensuring that the tunnel does not go down before the renegotiation is finished. The no version sets the lifetime to the default lifetime defined by the ipsec lifetime command. tunnel lifetime { seconds seconds kilobytes kilobytes | seconds seconds | kilobytes kilobytes } no tunnel lifetime { seconds | kilobytes } seconds number of seconds security SAs on this tunnel live before expiring; the range is 72004284967295 kilobytes volume of traffic in kilobytes that can pass between the tunnel endpoints using a given SA before the SA expires; the range is 1024004294967295
Syntax:
Mode(s):
Interface Configuration
tunnel local-identity
Description: Syntax: Specifies the local identity of the IPSec tunnel. The no version removes the local endpoint and sets the default identity, which is subnet 0.0.0.0 0.0.0.0. tunnel local-identity { address ipAddress | subnet ipAddress subnetMask | range ipAddressLow ipAddressHigh } no tunnel local-identity Mode(s): address specifies an IP address as the local identity subnet specifies a subnet as the local identity range specifies a range of IP addresses as the local identity
Interface Configuration
555
Mode(s):
Syntax:
556
Syntax:
557
Syntax: Mode(s):
Syntax:
Interface Configuration
558
Syntax:
Syntax:
559
Syntax:
pathName name of the explicit path, a string of up to 20 characters idNumber number identifying the explicit path, ranging from 165535
Mode(s): hop-by-hop specifies that hop-by-hop routing is used for this path option ospf specifies that OSPF routing is used for this path option isis specifies that IS-IS routing is used for this path option lockdown specifies that optimization is not done for this path option
560
Syntax:
Syntax:
Syntax:
561
Syntax:
tunnel mtu
Description: Configures the maximum transmission unit size for the particular tunnel. The no version restores the default value: 1024 for DVMRP and GRE tunnels and 1440 for IPSec tunnels. tunnel mtu mtuSize no tunnel mtu mtuSize packet size allowed for transmission through the tunnel in the range: 10240240 bytes for DVMRP and GRE tunnels and 16010240 for IPSec tunnels
Syntax:
Mode(s):
Interface Configuration
tunnel password
Description: Syntax: Configures a password for the L2TP tunnel. The no version removes the password. tunnel password tunnelPassword no tunnel password Mode(s): tunnelPassword password used for challenge response to the tunnel peer. In the domain map, it is used only by the LAC.
562
tunnel peer-identity
tunnel peer-identity
Description: Syntax: Specifies the peer identity of the IPSec tunnel. The no version removes the peer endpoint. tunnel peer-identity { address ipAddress | subnet ipAddress subnetMask | range ipAddressLow ipAddressHigh } no tunnel peer-identity Mode(s): address specifies an IP address as the peer identity subnet specifies a subnet as the peer identity range specifies a range of IP addresses as the peer identity
Interface Configuration
Syntax:
Interface Configuration
tunnel sequence-datagrams
Description: Syntax: Mode(s): Enables the use of GRE sequence numbers. The no version disables the use of GRE sequence numbers. [ no ] tunnel sequence-datagrams Global Configuration
563
tunnel session-key-inbound
Description: Syntax: Specifies the encryption and authentication algorithm set and session keys for manual inbound SAs. The no version removes the keys. tunnel session-key-inbound inSaAlgorithms { encryptKey authKey | authKey } no tunnel session-key-inbound Mode(s): inSAalgorithms algorithms to use for manual inbound SAs; use the online Help to see a list of available algorithms encryptKey encryption key; up to 48 characters authKey authentication key; up to 48 characters
Interface Configuration
tunnel session-key-outbound
Description: Syntax: Specifies the encryption and authentication algorithm set, SPI, and session keys for manual outbound SAs. The no version removes the keys. tunnel session-key-outbound outSAalgorithms spi { encryptKey authKey | encryptKey | authKey } no tunnel session-key-outbound Mode(s): outSAalgorithms algorithms to use for manual outbound SAs; use the online Help to see a list of available algorithms spi number that uniquely identifies an SA; the range is 256 to 4294967295 (0xFFFFFFFF) encryptKey encryption key; up to 48 characters authKey authentication key; up to 48 characters
Interface Configuration
tunnel signaling
Description: Syntax: Sets the signaling protocol used to negotiate security parameters and keys. The no version restores the default, isakmp. tunnel signaling { isakmp | manual } no tunnel signaling Mode(s): isakmp uses ISAKMP/IKE to negotiate parameters manual specifies that security parameters are configured manually
Interface Configuration
564
tunnel source
tunnel source
Description: Syntax: Configures the source for a DVMRP, GRE, or IPSec tunnel. The no version deletes the tunnel source. For DVMRP and GRE tunnels: tunnel source { ipAddress | interfaceType interfaceSpecifier } no tunnel source For IPSec tunnels: tunnel source ipAddress no tunnel source Mode(s): ipAddress IP address of an existing interface that will serve as the tunnels source interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Interface Configuration
tunnel transform-set
Description: Specifies a transform set that ISAKMP uses during SA negotiations on this tunnel. Transform sets used for manually configured tunnels can have only one transform. The no version removes the transform set from a tunnel. [ no ] tunnel transform-set transformSetName Mode(s): transformSetName name of the transform set
Syntax:
Interface Configuration
565
type
Description: For RTR Configuration, configures an RTR operation. The no version removes the configured type from the operation and resets all configuration for an RTR index. Note: You must configure the operations type before you can configure any other characteristics of the operation. For Domain Map Tunnel Configuration, specifies the type of tunnel as either L2TP or L2F. The no version restores the default value, L2TP. To configure an RTR operation: [ no ] type rtrType protocol ipIcmpEcho destination [ source-ipaddr srcAddr | source ifType ifValue ] rtrType one of the following types of operation:
Syntax:
echo performs end-to-end operation only pathEcho discovers a path to the destination and echoes each device
on the path destination IP address or an IP hostname or domain name srcAddr source IP address ifType sources type of interface (for example, FastEthernet) ifValue interface identifier; for example, FastEthernet 0/0
To specify the type of tunnel: Syntax: type { l2tp | l2f } no type Mode(s): RTR Configuration, Domain Map Tunnel Configuration
udp-port
Description: Specifies the UDP port on the system where the RADIUS authentication or accounting servers reside. The system uses this port to communicate with the RADIUS servers. The no version restores the default value. udp-port port no udp-port port one of the following port numbers:
Syntax:
1812 (default for RADIUS authentication servers) 1813 (default for RADIUS accounting servers)
Mode(s): Radius Configuration
566
undebug ip bgp
undebug ip bgp
Description: Syntax: Turns off the display of information previously enabled with the debug ip bgp command. There is no no version. undebug ip bgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] in displays information for inbound events out displays information for outbound events peerAddress IP address of BGP peer for which information is displayed peerAddressMask network mask of BGP peer for which information is displayed bgpLog BGP log of interest; one of the following options:
events BGP finite state machine events and transitions keepalives BGP keepalive message events updates BGP routing table update events vpnv4 BGP VPNv4 NLRI events
Mode(s): import displays BGP import processing events; appears only if you specify the vpnv4 keyword routerName name of the virtual router that owns the BGP router for which information is being displayed filteringRouterName name of the virtual router that owns the access class and route map parameters accessClassName name of an access list to filter output mapName name of a route map to filter output
Privileged Exec
567
undebug ip mbgp
Description: Syntax: Turns off the display of information previously enabled with the debug ip mbgp command. There is no no version. undebug ip mbgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] in displays information for inbound events out displays information for outbound events peerAddress IP address of BGP peer for which information is displayed peerAddressMask network mask of BGP peer for which information is displayed bgpLog BGP log of interest; one of the following options:
events BGP finite state machine events and transitions keepalives BGP keepalive message events updates BGP routing table update events vpnv4 BGP VPNv4 NLRI events
Mode(s): import displays BGP import processing events; appears only if you specify the vpnv4 keyword routerName name of the virtual router that owns the BGP router for which information is being displayed filteringRouterName name of the virtual router that owns the access class and route map parameters accessClassName name of an access list to filter output mapName name of a route map to filter output
Privileged Exec
undebug ip pim
Description: Syntax: Turns off the display of information previously enabled with the debug ip pim command. There is no no version. undebug ip pim pimLog Mode(s): pimLog PIM log of interest
Privileged Exec
568
undebug ip ospf
undebug ip ospf
Description: Turns off the display of information for the selected variable. See debug ip ospf command for a complete list of the ospfLog variables. There is no no version. undebug ip ospf ospfLog ospfLog OSPF log of interest; one of the following options:
Syntax:
adj OSPF adjacency events elect-dr OSPF designated router election events OSPF general events lsa OSPF link state advertisements events neighbor OSPF neighbor state machine packets-rcvd OSPF packets received packets-sent OSPF packets sent route OSPF route events spf all OSPF shortest path first calculation events spf-ext OSPF shortest path first external route calculation events spf-inter OSPF shortest path first interarea route calculation events spf-intra OSPF shortest path first intra-area route calculation events
Mode(s): Privileged Exec
undebug ip rip
Description: Syntax: Turns off the display of information previously enabled with the debug ip rip command. There is no no version. undebug ip rip ripLog ripLog RIP log of interest; one of the following options:
569
undebug isis
Description: Turns off the display of information for the selected variable. See the debug isis command for a complete list of the IS-IS log variables. There is no no version. undebug isis isisLog isisLog IS-IS log of interest; one of the following options:
Syntax:
mpls traffic-eng agents MPLS traffic-engineering agents snp-packets IS-IS CSNPs/PSNPs spf-events shortest path first events spf-statistics SPF timing and statistic data spf-triggers SPF triggering events update-packets update-related packets
Mode(s): Privileged Exec
unframed
Description: Syntax: Mode(s): Configures an unchannelized line for a CE1 interface.The no version switches the interface to the default crc4 framing mode and deletes channel group 1. [ no ] unframed Controller Configuration
570
update-source
update-source
Description: Specifies the loopback interface whose local address is used as the source address for the OSPF, PIM, or RIP connection to a remote neighbor. The no version deletes the source address from the connection. For OSPF: [ no ] update-source loopback interfaceSpecifier interfaceSpecifier integer in the range 14294967293 identifying the loopback interface
Syntax:
For PIM [ no ] update-source interfaceType interfaceSpecifier interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
For RIP: [ no ] update-source interfaceType interfaceSpecifier Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
version
Description: Specifies the global RIP version. The no version reverts to the default value, RIP version 1. Use the ip rip receive and ip rip send version commands to specify the RIP version for a specific interface. version versionNumber no version Mode(s): versionNumber RIP version number
Syntax:
Router Configuration
571
virtual-router
Description: When used from Domain Map Configuration mode, maps a virtual router to a user domain name. The no version deletes the virtual-router parameter, and the system defaults to the default virtual router. When used from Privileged Exec or Global Configuration mode, creates a virtual router or accesses the context of a previously created virtual router or a VRF. The no version deletes the virtual router, and the system defaults to the default virtual router. Issuing a no version that specifies an existing VRF only displays the error message: Cannot delete a VRF with this command; you must use the no ip vrf command to remove a VRF. Mapping to a user domain name: virtual-router vrName no virtual-router [ vrName ] Creating a virtual router or accessing a virtual router or VRF: virtual-router vrName | :vrfName | vrName:vrfName no virtual-router vrName Mode(s): vrName name of the virtual router; a string of 115 alphanumeric characters :vrfName specifies a VRF in the current VR context; a string of 132 alphanumeric characters vrName:vrfName specifies a VRF in the context of a VR other than the current VR
Syntax:
vlan description
Description: Syntax: Assigns an alias or description to a VLAN subinterface. vlan description aliasName no vlan description Mode(s): aliasName the alias or description; up to 64 characters
Interface Configuration
572
vlan id
vlan id
Description: Syntax: Specifies a VLAN ID. There is no no version. vlan id IdValue [ untagged ] Mode(s): idValue number in the range of 04095, which is unique within the Ethernet interface untagged specifies that frames be sent untagged; only valid for VLAN ID 0
Interface Configuration
weight
Description: Syntax: Sets the weighted round-robin weight of the scheduler node or queue. The no version sets the weight to the default value. weight weightValue no weight Mode(s): weightValue number in the range 163; default is 8
write memory
Description: Saves all outstanding (unsaved) configuration changes to nonvolatile storage; an exact alias of the copy running-configuration startup-configuration command. Available if the system is in either Automatic Commit mode or Manual Commit mode. If issued while in Automatic Commit mode, the CLI notifies you that the command is not necessary, but allows you to proceed. There is no no version. write memory Privileged Exec
Syntax: Mode(s):
yellow
Description: Syntax: Mode(s): Generates or detects a yellow alarm for a T1 controller. The no version restores the default value, to not generate or to not detect a yellow alarm. [ no ] yellow { generate | detect } Controller Configuration
Index
A
AAA commands aaa accounting acct-stop on-aaa-failure 1 aaa accounting acct-stop on-access-deny 1 aaa accounting duplication 1 aaa accounting interval 2 aaa accounting ppp default 2 aaa authentication enable default 3 aaa authentication login 3 aaa authentication ppp default 4 aaa delimiter 4 aaa dns 5 aaa domain-map 5 aaa duplicate-address-check 5 aaa new-model 6 aaa parse-order 6 aaa subscriber limit per-port 7 aaa subscriber limit per-vr 7 aaa timeout 7 aaa tunnel assignment-id-format 8 aaa tunnel client-name 8 aaa tunnel ignore 8 aaa tunnel password 9 aaa wins 9 baseline aaa 56 login authentication 246 show aaa 392 show aaa accounting 392 show aaa accounting interval 393 show aaa delimiters 393 show aaa domain-map 393 show aaa duplicate-address-check 393 show aaa model 393 show aaa name-servers 394 show aaa statistics 394 show aaa subscriber per-port-limit 394 show aaa subscriber per-vr-limit 394 show aaa timeout 395 show aaa tunnel-parameters 395 test aaa 541 AAA profile commands aaa profile 6 allow 29 deny 122 ppp aaa-profile 342 show aaa profile 394 translate 550 APS/MSP commands aps force 29 aps group 30 aps lockout 30 aps manual 30 aps protect 31 aps revert 31 aps unidirectional 31 aps working 32 show aps 395 threshold 544 ARP commands arp 40 arp timeout 41 clear arp 89 ip proxy-arp 200 show arp 396 ATM commands atm 41 atm aal5 description 41 atm aal5 shutdown 42 atm aal5 snmp trap link-status 42 atm atm1483 description 42 atm atm1483 mtu 42 atm atm1483 shutdown 43 atm atm1483 snmp trap link-status 43 atm auto-configuration 43 atm cac 43 atm clock internal 44 atm description 44 atm esi-address 44 atm framing 45 atm ilmi-enable 45 atm ilmi-keepalive 45 atm lbo 46 atm oam 46 atm oam flush 47 atm oam loopback-location 47 atm pvc 48 atm shutdown 49 atm snmp trap link-status 49
2 Index
atm sonet stm-1 49 atm svc 50 atm uni-version 50 atm vc-per-vp 51 atm vp-tunnel 51 auto-configure 53 baseline interface atm 59 ds3-scramble 130 e3-scramble 133 interface atm 161 ip atm-vc 169 load-interval 238 loopback 247 map-group 251 map-list 251 ping atm interface atm 340 show atm aal5 interface 396 show atm interface 397 show atm map 397 show atm oam 397 show atm ping 398 show atm subinterface 398 show atm vc 399 show atm vc atm 399 show atm vp-tunnel 400 show interfaces 424 show nbma arp 489 shutdown 511
B
BGP commands address-family 19 aggregate-address 28 auto-summary 54 baseline ip bgp 59 bgp advertise-inactive 67 bgp always-compare-med 68 bgp bestpath med confed 68 bgp bestpath missing-as-worst 68 bgp client-to-client reflection 68 bgp cluster-id 69 bgp confederation identifier 69 bgp confederation peers 69 bgp dampening 70 bgp default ipv4-unicast 70 bgp default local-preference 71 bgp enforce-first-as 71 bgp fast-external-fallover 71 bgp log-neighbor-changes 72 bgp maxas-limit 72
bgp redistribute-internal 72 bgp router-id 72 bgp shutdown 73 clear access-list 88 clear ip bgp 90 clear ip bgp dampening 91 clear ip bgp redistribution 91 debug ip bgp 110 debug ip mbgp 112 default-fields peer 117 default-fields route 118 disable-dynamic-redistribute 124 distance bgp 126 exit-address-family 142 ip as-path access-list 168 ip bgp-community new-format 169 ip bgp-confed-as-set new-format 169 ip community-list 170 ip extcommunity-list 178 limits 235 match as-path 253 match community 253 match distance 254 match extcommunity 254 match ip address 255 match ip next-hop 255 match level 256 match metric 256 match metric-type 256 match route-type 257 match tag 258 maximum-paths 258 neighbor activate 283 neighbor advertisement-interval 284 neighbor allowas-in 284 neighbor as-override 285 neighbor capability 286 neighbor default-originate 287 neighbor description 287 neighbor distribute-list 288 neighbor ebgp-multihop 288 neighbor filter-list 289 neighbor local-as 290 neighbor maximum-prefix 290, 291 neighbor maximum-update-size 291 neighbor next-hop-self 292 neighbor password 292 neighbor peer-group 293 neighbor prefix-list 293 neighbor prefix-tree 294
neighbor remote-as 294 neighbor remove-private-as 295 neighbor rib-out disable 295 neighbor route-map 296 neighbor route-reflector-client 296 neighbor send-community 297 neighbor shutdown 297 neighbor soft-reconfiguration inbound 298 neighbor timers 298 neighbor unsuppress-map 299 neighbor update-source 299 neighbor weight 300 network 302 overload shutdown 311 redistribute 363 rib-out disable 371 router bgp 372 set as-path prepend 383 set comm-list delete 383 set community 384 set dampening 385 set extcommunity 387 set ip next-hop 388 set local-preference 389 set metric 389 set metric-type 390 set origin 390 set tag 391 set weight 392 show ip as-path access-list 425 show ip bgp 426 show ip bgp advertised-routes 428 show ip bgp aggregate-address 428 show ip bgp cidr-only 429 show ip bgp community 429 show ip bgp community-list 430 show ip bgp dampened-paths 430 show ip bgp filter-list 430 show ip bgp flap-statistics 431 show ip bgp inconsistent-as 431 show ip bgp neighbors 431 show ip bgp neighbors dampened-routes 432 show ip bgp neighbors paths 432 show ip bgp neighbors received prefix-filter 432 show ip bgp neighbors received-routes 433 show ip bgp neighbors routes 433 show ip bgp network 434 show ip bgp next-hops 434 show ip bgp paths 434
show ip bgp peer-group 435 show ip bgp quote-regexp 436 show ip bgp regexp 438 show ip bgp summary 440 show ip community-list 441 show ip extcommunity-list 446 synchronization 527 table-map 535 test ip bgp neighbor 542 timers bgp 546 undebug ip bgp 566 undebug ip mbgp 567 BGP/MPLS VPN commands address-family 19 bgp default route-target filter 71 clear ip routes vrf 94 domain-id 128 domain-tag 130 exit-address-family 142 export-map 142 import-map 160 ip dynamic-interface-prefix 177 ip mpls forwarding-mode label-switched 190 ip mpls vpn-interface per-label 190 ip share-interface 206 ip share-nexthop 206 ip vrf 211 ip vrf forwarding 212 maximum routes 259 rd 362 route-target 374 show ip protocols 460 show ip vrf 467 booting commands boot backup 73 boot config 74 boot force-backup 74 boot revert-tolerance 75 boot revert-tolerance never 75 boot slot 75 boot subsystem 76 boot system 76 check-disk 85 delete 121 flash-disk duplicate 145 flash-disk initialize 145 flash-disk scan 146 reload 368 reload slot 368 show boot 400
4 Index
show last-reset 478 show reload 501 B-RAS commands aaa accounting acct-stop on-aaa-failure 1 aaa accounting acct-stop on-access-deny 1 aaa accounting duplication 1 aaa accounting interval 2 aaa accounting ppp default 2 aaa authentication ppp default 4 aaa delimiter 4 aaa dns 5 aaa domain-map 5 aaa duplicate-address-check 5 aaa parse-order 6 aaa profile 6 aaa subscriber limit per-port 7 aaa subscriber limit per-vr 7 aaa timeout 7 aaa tunnel assignment-id-format 8 aaa tunnel client-name 8 aaa tunnel ignore 8 aaa tunnel password 9 aaa wins 9 address 11 address-pool-name 22 allow 29 baseline aaa 56 baseline dhcp 57 baseline local pool 63 baseline radius 65 baseline tacacs 66 deadtime 109 deny 122 identification 159 ip address-pool 167 ip dhcp-server 173 ip-hint 179 ip local pool 188 ip local pool snmpTrap 188 ip local pool warning 189 key 223 license b-ras 234 logout subscribers 246 loopback 247 max-sessions 260 medium ipv4 262 override-user 312 password 314 ppp aaa-profile 342 preference 349
profile 350 radius acct-session-id-format 352 radius algorithm 353 radius calling-station-delimiter 353 radius calling-station-format 354 radius dsl-port-type 355 radius ethernet-port-type 355 radius ignore framed-ip-netmask 355 radius include 356 radius nas-identifier 358 radius nas-port-format 358 radius override nas-ip-addr tunnel-client-endpoint 358 radius rollover-on-reject 359 radius server 359 radius trap acct-server-not-responding 359 radius trap auth-server-not-responding 359 radius trap no-acct-server-responding 360 radius trap no-auth-server-responding 360 radius tunnel-accounting 360 radius udp-checksum 360 radius update-source-addr 361 retransmit 370 set dhcp relay 386 show aaa 392 show aaa accounting 392 show aaa accounting interval 393 show aaa delimiters 393 show aaa domain-map 393 show aaa duplicate-address-check 393 show aaa model 393 show aaa name-servers 394 show aaa profile 394 show aaa statistics 394 show aaa subscriber per-port-limit 394 show aaa subscriber per-vr-limit 394 show aaa timeout 395 show aaa tunnel-parameters 395 show cops info 412 show dhcp 413 show ip local pool 451 show license b-ras 479 show radius 497 show radius acct-session-id-format 497 show radius algorithm 497 show radius attributes-ignored 498 show radius attributes-included 498 show radius calling-station-delimiter 498 show radius calling-station-format 498 show radius dsl-port-type 499
show radius ethernet-port-type 499 show radius nas-identifier 499 show radius nas-port-format 499 show radius override 499 show radius rollover-on-reject 500 show radius tunnel-accounting 500 show radius udp-checksum 500 show radius update-source-addr 500 show sscc info 506 show sscc version 506 show statistics tacacs 506 show subscribers 507 show tacacs 508 sscc address 523 sscc enable 523 sscc retryTimer 523 sscc sourceAddress 523 sscc transportRouter 524 strip-domain 524 subscriber 525 tacacs-server host 535 tacacs-server key 536 tacacs-server source-address 536 tacacs-server timeout 536 test aaa 541 timeout 545 translate 550 tunnel 551 type 565 udp-port 565 virtual-router 571 Bridged Ethernet commands ip mac-validate 189 show ip mac-validate 451 bridged IP commands encapsulation bridge1483 135 set dhcp relay 386 show dhcp relay 413
C
CBF commands baseline CBF interface 56 cbf 82 cbf connection 83 cbf shutdown 83 clear CBF interface 89 show cbf connection 403 show cbf interface 403 CE1 commands bert 67
channel-group timeslots 84 controller e1 104 interface serial 165 lineCoding 237 load-interval 238 loopback 247 mru 280 mtu 281 show controllers e1 411 show interfaces serial 424 shutdown 511 unframed 569 Cisco HDLC commands baseline hdlc interface 58 encapsulation hdlc 136 hdlc down-when-looped 155 hdlc keepalive 155 hdlc shutdown 155 show hdlc interface 422 show interfaces serial 424 CLI commands. See user interface commands CLNS commands clns configuration-time 96 clns holding-time 96 clns host 97 show clns 404 show clns interface 405 show clns neighbors 405 show clns protocol 405 show clns traffic 406 cOCx/STMx commands baseline line interface sonet 63 baseline path interface sonet 64 baseline section interface sonet 65 controller sonet 104 interface serial 165 loopback 247 mru 280 mtu 281 path 315 path ds1|e1 316 path ds1|e1 bert 317 path ds1|e1 channel-group shutdown 317 path ds1|e1 channel-group snmp trap link-status 318 path ds1|e1 channel-group timeslots 318 path ds1|e1 clock source 319 path ds1|e1 framing 319 path ds1|e1 loopback 320 path ds1|e1 shutdown 321
6 Index
path ds1|e1 snmp trap link-status 321 path ds1 fdl 321 path ds1 fdl carrier 322 path ds1 fdl string 322 path ds1 fdl transmit 323 path ds1 remote-loopback 323 path ds3 323 path ds3 clock source 324 path ds3 framing 324 path ds3 loopback 325 path ds3 mdl carrier 325 path ds3 mdl string 326 path ds3 mdl transmit 327 path ds3 shutdown 327 path ds3 snmp trap link-status 327 path ds3 t1 328 path ds3 t1 bert 328 path ds3 t1 clock source 329 path ds3 t1 fdl 330 path ds3 t1 fdl carrier 330 path ds3 t1 fdl string 331 path ds3 t1 fdl transmit 332 path ds3 t1 framing 329 path ds3 t1 loopback 333 path ds3 t1 remote-loopback 334 path ds3 t1 shutdown 334 path ds3 t1 snmp trap link-status 334 path ds3 t1 timeslots 335 path e1 unframed 335 path overhead j1 336 path snmp trap link-status 336 sdh 379 show controllers sonet 408 show controllers sonet remote 410 show interfaces 424 shutdown 511 CT1 commands bert 67 cablelength short 82 channel-group shutdown 83 channel-group snmp trap link-status 84 controller t1 105 fdl 143 fdl carrier 143 fdl string 144 fdl transmit 144 interface serial 165 invert data 166 j1 223 lineCoding 237
load-interval 238 loopback 247 mru 280 mtu 281 remote-loopback 369 show controllers t1 411 show controllers t1 remote 411 show interfaces serial 424 shutdown 511 yellow 572 CT3 commands loopback 247 mdl carrier 260 mdl string 261 mdl transmit 261 mru 280 mtu 281 show controllers t3 412 show controllers t3 remote 412 show interfaces serial 424 shutdown 511 snmp trap link-status 513 t1 bert 528 t1 clock source 529 t1 fdl 529 t1 fdl carrier 530 t1 fdl string 530 t1 fdl transmit 531 t1 framing 531 t1 lineCoding 531 t1 loopback 532 t1 remote-loopback 533 t1 shutdown 533 t1 snmp trap link-status 533 t1 timeslots 534 t1 yellow 534 customer support xviii
D
DHCP local server commands ip dhcp-local cable-modem 171 link 238 network 302 reserve 370 server-address 381 show ip dhcp-local cable-modem 441 show ip dhcp-local excluded 442 show ip dhcp-local pool 442 show ip dhcp-local reserved 442
DNS commands ip domain-lookup 174 ip domain-name 174 ip name-server 191 show ip domain-lookup 443 DVMRP commands baseline ip dvmrp 60 clear ip dvmrp routes 91 disable 123 disable-dynamic-redistribute 124 ip dvmrp 174 ip dvmrp accept-filter 175 ip dvmrp announce-filter 175 ip dvmrp auto-summary 175 ip dvmrp disable 176 ip dvmrp metric-offset 176 ip dvmrp routehog-notification 176 ip dvmrp route-limit 176 ip dvmrp summary-address 177 ip dvmrp unicast-routing 177 redistribute 363 router dvmrp 373 show dvmrp tunnel 413 show dvmrp tunnel summary 414 show ip dvmrp 443 show ip dvmrp interface 444 show ip dvmrp mroute 444 show ip dvmrp neighbor 445 show ip dvmrp route 445 show ip dvmrp routeNextHop 446 tunnel destination 552
interface fastEthernet 162 interface gigabitEthernet 163 ip mac-validate 189 mtu 281 show interfaces 424 show ip mac-validate 451 shutdown 511 speed 521 svlan ethertype 527 svlan id 527
F
Fast Ethernet command, load-interval 238 file management commands copy 106 copy running-configuration 106 copy running-configuration startup-configuration 107 copy startup-configuration 107 host 157 rename 370 write memory 572 Frame Relay commands baseline frame-relay interface 57 encapsulation ietf 136 frame-relay class 146 frame-relay description 147 frame-relay fragment 147 frame-relay interface-dlci ietf 147 frame-relay intf-type 148 frame-relay keepalive 148 frame-relay lmi-n391dte 148 frame-relay lmi-n392dce 149 frame-relay lmi-n392dte 149 frame-relay lmi-n393dce 149 frame-relay lmi-n393dte 150 frame-relay lmi-t391dte 150 frame-relay lmi-t392dce 150 frame-relay lmi-type 151 map-class frame-relay 250 show frame-relay interface 415 show frame-relay lip 416 show frame-relay lmi 417 show frame-relay map 417 show frame-relay multilinkInterface 418 show frame-relay pvc 418 show frame-relay subinterface 419 show frame-relay summary 419 shutdown 511
E
E3 commands atm framing 45 clock source 98 controller e3 104 framing 152 load-interval 238 loopback 247 mru 280 mtu 281 show controllers e3 407 shutdown 511 E3-Frame command, interface serial 165 Ethernet commands baseline interface fastEthernet 59 baseline interface gigabitEthernet 59 duplex 132 ethernet description 138
8 Index
FTP client commands ip ftp source-address 179 ip ftp source-interface 179 FTP server commands delete 121 ftp-server enable 153 show ftp-server 419 show users 509
G
GRE commands show gre tunnel 420 show gre tunnel summary 420 tunnel destination 552
H
HDLC commands, Cisco baseline hdlc interface 58 encapsulation hdlc 136 hdlc down-when-looped 155 hdlc keepalive 155 hdlc shutdown 155 show hdlc interface 422 show interfaces serial 424 HSSI commands clock rate 97 crc 108 hssi force-dte-acknowledge 158 hssi internal-clock 158 interface hssi 164 invert data 166 load-interval 238 mru 280 mtu 281 show interfaces 424 shutdown 511 snmp trap link-status 513
I
IGMP commands baseline ip igmp 60 baseline ip igmp-proxy interface 60 igmp disable 159 igmp promiscuous 159 ip igmp 182 ip igmp access-group 183 ip igmp group limit 183 ip igmp immediate-leave 183 ip igmp last-member query-interval 184
ip igmp promiscuous 184 ip igmp querier 185 ip igmp querier-timeout 186 ip igmp query-interval 186 ip igmp query-max-response-time 186 ip igmp robustness 187 ip igmp static-group 187 ip igmp version 187 multicast group port limit 282 router igmp 373 show ip igmp 447 show ip igmp groups 448 show ip igmp interface 448 show multicast group limit 489 See also IGMP Proxy commands IGMP Proxy commands ip igmp-proxy 184 ip igmp-proxy unsolicited-report-interval 185 ip igmp-proxy V1-router-present-time 185 show ip igmp-proxy 448 show ip igmp-proxy groups 449 show ip igmp-proxy interface 449 interface commands baseline interface serial 59 baseline ip interface 61 clear ip interface 92 interface 161 interface ip 164 interface loopback 164 interface mlframe-relay 164 interface mlppp 165 interface null 165 interface pos 165 interface serial 165 interface tunnel 166 ip address 167 ip alwaysup 167 ip broadcast-address 169 ip debounce-time 171 ip dynamic-interface-prefix 177 ip redirects 200 ip share-interface 206 ip share-nexthop 206 ip shutdown 206 show interfaces 424 show ip interface 450 show ip interface shares 450 show ip interface vrf 451 show ip vrf interfaces 467 snmp trap ip link-status 513
IP commands arp 40 arp timeout 41 baseline ip 59 baseline ip tcp 62 baseline ip udp 62 baseline ip vrrp 62 baseline show-delta-counts 66 clear access-list 88 clear arp 89 clear ip prefix-list 93 clear ip prefix-tree 94 clear ip rip redistribution 94 clear ip routes 94 distance 125 ip access-routes 166 ip address 167 ip address-pool 167 ip alwaysup 167 ip as-path access-list 168 ip broadcast-address 169 ip community-list 170 ip debounce-time 171 ip demux-type da-prefix 171 ip destination-prefix 171 ip dhcp-server 173 ip directed-broadcast 173 ip disable-forwarding 173 ip explicit-path. See MPLS commands: mpls explicit-path ip extcommunity-list 178 ip ignore-df-bit 187 ip interface. See IP commands: no ip interface ip irdp 188 ip local pool 188 ip local pool snmpTrap 188 ip local pool warning 189 ip mac-validate 189 ip mask-reply 189 ip mtu 190 ip multipath round-robin 191 ip prefix-list 199 ip prefix-tree 200 ip proxy-arp 200 ip redirects 200 ip refresh-route 201 ip rip commands. See RIP commands ip route 203 ip router-id 204 ip rsvp bandwidth. See mpls bandwidth
ip sa-validate 205 ip shutdown 206 ip source-prefix 206 ip source-route 207 ip speed 207 ip ssh. See SSH commands ip ttl 210 ip tunnel reassembly 210 ip unnumbered 210 ip unreachables 210 ip virtual-router 211 ip vrrp 212 ip vrrp advertise-interval 212 ip vrrp authentication-key 213 ip vrrp authentication-type 213 ip vrrp enable 213 ip vrrp preempt 213 ip vrrp priority 214 ip vrrp virtual-address 214 no ip interface 305 ping 338 profile 350 route-map 372 router rip 374 show access-list 395 show arp 396 show ip 424 show ip address 424 show ip as-path-access-list 425 show ip demux interface 441 show ip domain-lookup 443 show ip dynamic-interface-prefix 446 show ip explicit-paths. See MPLS commands: show mpls explicit-paths show ip extcommunity-list 446 show ip forwarding-table slot 447 show ip interface 450 show ip interface shares 450 show ip mac-validate 451 show ip prefix-list 459 show ip prefix-list summary | detail 459 show ip prefix-tree 459 show ip prefix-tree summary | detail 460 show ip profile 460 show ip protocols 460 show ip redistribute 460 show ip route 463 show ip route slot 464 show ip rpf-route 464 show ip ssh 465
10 Index
show ip static 465 show ip tcp statistics 465 show ip traffic 466 show ip tunnel reassembly statistics 466 show ip udp statistics 466 show ip vrrp 467 show ip vrrp brief 467 show ip vrrp neighbor 468 show ip vrrp statistics 468 show ip vrrp summary 468 show profile 495 show profile brief 495 show route-map 501 timers 546 traceroute 549 ip-hint 179 IP multicast commands ip multicast-routing 190 ip rpf-route 205 mtrace 281 show ip mroute 452 show ip multicast protocols 452 show ip multicast routing 452 IPSec commands aggressive-mode 28 authentication 51 encryption 137 group 153 hash 154 ipsec clear sa 214 ipsec isakmp-policy-rule 215 ipsec key manual 215 ipsec lifetime 215 ipsec local-endpoint 216 ipsec transform-set 216 license ipsec-tunnels 234 lifetime 234 show ike policy-rule 423 show ike sa 423 show ipsec lifetime 469 show ipsec local-endpoint 469 show ipsec transform-set 469 show ipsec tunnel 470 show ipsec tunnel summary 470 show license ipsec-tunnels 479 tunnel lifetime 554 tunnel local-identity 554 tunnel mtu 561 tunnel peer-identity 562 tunnel pfs group 562
tunnel session-key-inbound 563 tunnel session-key-outbound 563 tunnel signaling 563 tunnel source 564 tunnel transform-set 564 IP tunnel commands show gre tunnel 420 show gre tunnel summary 420 tunnel checksum 552 tunnel mtu 561 tunnel source 564 IS-IS commands area-authentication-key 32 area-message-digest-key 34 baseline clns 56 clear ip isis redistribution 92 clear isis adjacency 95 clear isis database 95 clns configuration-time 96 clns holding-time 96 clns host 97 debug isis 116 disable-dynamic-redistribute 124 distance ip 126 distribute-domain-wide 126 domain-authentication-key 128 domain-message-digest-key 128 ignore-lsp-errors 160 ip router isis 204 ip route-type 204 isis authentication-key 216 isis circuit-type 217 isis csnp-interval 217 isis hello-interval 218 isis hello-multiplier 218 isis lsp-interval 219 isis mesh-group 219 isis message-digest-key 220 isis metric 221 isis priority 221 isis retransmit-interval 221 isis retransmit-throttle-interval 222 is-type 222 log-adjacency-changes 240 lsp-gen-interval 249 lsp-mtu 249 lsp-refresh-interval 249 maximum-paths 258 max-lsp-lifetime 259 metric-style narrow 263
metric-style transition 264 metric-style wide 264 mpls spf-use-any-best-path 276 mpls traffic-eng 277 mpls traffic-eng router-id 280 net 300 passive-interface 313 redistribute 363 redistribute isis ip 365 router isis 373 set-overload-bit 391 show clns 404 show clns interface 405 show clns neighbors 405 show clns protocol 405, 406 show host 423 show isis database 471 show isis mpls adjacency-log 471 show isis mpls advertisements 471 show isis mpls tunnel 472 show isis spf-log 472 show isis summary-addresses 472 show isis topology 472 spf-interval 522 summary-address 526 suppress-default 526 undebug isis 569
K
keepalive commands hdlc keepalive 155 ppp keepalive 344
L
L2F commands client-name 96 l2f checksum 223 l2f destruct-timeout 224 l2f drain 224 l2f drain destination 224 l2f drain tunnel 225 l2f ignore-receive-data-sequencing 225 l2f shutdown 226 l2f shutdown destination 226 l2F shutdown session 226 l2f shutdown tunnel 227 show l2f 473 show l2f destination 473 show l2f destination summary 473
show l2f session 474 show l2f session summary 474 show l2f tunnel 475 show l2f tunnel summary 475 type 565 L2TP commands aaa tunnel assignment-id-format 8 address 11 client-name 96 disable proxy lcp 124 enable proxy authenticate 134 l2tp checksum 227 l2tp destination profile 228 l2tp destruct-timeout 228 l2tp drain 228 l2tp drain destination 229 l2tp drain tunnel 229 l2tp ignore-receive-data-sequencing 230 l2tp retransmission 230 l2tp shutdown 230 l2tp shutdown destination 231 l2tp shutdown session 231 l2tp shutdown tunnel 232 l2tp tunnel idle-timeout 232 l2tp tunnel-switching 232 l2tp tunnel test 233 local host 238 local ip address 239 max-sessions 260 remote host 369 server name 381 show dhcp 413 show l2tp 475 show l2tp destination 476 show l2tp destination profile 476 show l2tp destination summary 476 show l2tp session 477 show l2tp session summary 477 show l2tp tunnel 478 show l2tp tunnel summary 478 source-address 520 tunnel 551 tunnel password 561 type 565
M
management commands, system bandwidth oversubscription 55 copy running-configuration startup-configuration 106, 107
12 Index
copy startup-configuration 107 service manual-commit 382 write memory 572 MFR commands baseline frame-relay interface 57 baseline frame-relay multilink interface 58 encapsulation ietf 136 frame-relay interface-dlci ietf 147 frame-relay intf-type 148 frame-relay keepalive 148 frame-relay lmi-n391dte 148 frame-relay lmi-n392dce 149 frame-relay lmi-n392dte 149 frame-relay lmi-n393dce 149 frame-relay lmi-n393dte 150 frame-relay lmi-t391dte 150 frame-relay lmi-t392dce 150 frame-relay lmi-type 151 interface mlframe-relay 164 member-interface 262 show frame-relay interface 415 show frame-relay lip 416 show frame-relay lmi 417 show frame-relay map 417 show frame-relay multilinkInterface 418 show frame-relay pvc 418 show frame-relay subinterface 419 show frame-relay summary 419 MLPPP commands encapsulation mlppp 136 interface mlppp 165 member-interface 262 MPLS commands append-after 29 bandwidth 55 cleanup-timeout-factor 88 clear mpls ldp 95 cr-ldp 108 hello hold-time 155 index 160 interface tunnel 166 ip explicit-path. See mpls explicit-path ip rsvp bandwidth. See mpls bandwidth ip vpn-id 211 list 238 mpls 265 mpls atm vci range 265 mpls atm vpi range 266 mpls bandwidth 266 mpls disable 266
mpls explicit-path 267 mpls ip propagate-ttl 267 mpls label-range 268 mpls ldp advertise-labels 268 mpls ldp disable 266 mpls ldp discovery transport-address 268 mpls ldp no-route retries 269 mpls ldp no-route retry-time 269 mpls ldp profile 274 mpls ldp retries 269 mpls ldp retry-time 270 mpls ldp session retries 270 mpls ldp session retry-time 270 mpls ldp targeted-hello receive list 271 mpls ldp targeted-hello send list 271 mpls lsp no-route retries 271 mpls lsp no-route retry-time 272 mpls lsp retries 272 mpls lsp retry-time 272 mpls match exp-bits 273 mpls match traffic-class 273 mpls profile 274 mpls reoptimize 275 mpls reoptimize timers frequency 275 mpls rsvp disable 266 mpls rsvp message-bundling 276 mpls rsvp profile 274 mpls rsvp refresh-reduction 276 mpls topology-driven-lsp 276 mpls topology-driven-lsp ip-interfaces 277 mpls traffic-eng administrative-weight 277 mpls traffic-eng attribute-flags 278 mpls traffic-eng flood thresholds 279 mpls traffic-eng link-management timers periodic-flooding 279 mpls tunnels profile 280 next-address 303 refresh-period 367 show cac 402 show cac interface 403 show ip explicit-paths. See show mpls explicit-paths show mpls 481 show mpls binding 482 show mpls explicit-paths 483 show mpls forwarding 484 show mpls ldp profile. See show mpls profile show mpls ldp targeted session 485 show mpls minor-interface 486 show mpls profile 487
show mpls rsvp 487 show mpls rsvp profile. See show mpls profile show mpls tunnels 488 show mpls tunnels profile. See show mpls profile tunnel destination 552 tunnel ip profile 553 tunnel mpls affinity 555 tunnel mpls autoroute announce 555 tunnel mpls autoroute metric 556 tunnel mpls bandwidth 556 tunnel mpls base-tunnel 556 tunnel mpls description 557 tunnel mpls dynamic target 557 tunnel mpls ip propagate-ttl 557 tunnel mpls label-dist 558 tunnel mpls lsp no-route retries 558 tunnel mpls lsp no-route retry-time 558 tunnel mpls path-option 559 tunnel mpls priority 560 tunnel mpls retries 560 tunnel mpls retry-time 560 tunnel mpls vpn-id 561 MPLS commands (IS-IS) mpls spf-use-any-best-path 276 mpls traffic-eng 277 mpls traffic-eng router-id 280 MPLS commands (OSPF) mpls traffic-eng area 278 mpls traffic-eng router-id 280 Multilink Frame Relay commands. See MFR commands
N
NBMA command, show nbma arp 489 NFS commands host 157 ip nfs 191 ip nfs host 192 show ip nfs 452 non-PPP equal access commands baseline ip dhcp-local 59 baseline ip http 60 default-router 121 dns-server 127 domain-name 129 ip dhcp-local excluded-address 172 ip dhcp-local limit 172 ip dhcp-local pool 172 ip http access-class 180
ip http max-connection-time 180 ip http not-found-url 180 ip http port 181 ip http realm 181 ip http root-refresh 181 ip http root-url 182 ip http same-host-limit 182 ip http server 182 lease 233 netbios-name-server 301 netbios-node-type 301 service dhcp-local 381 show ip dhcp-local binding 441 show ip dhcp-local limits 442 show ip dhcp-local statistics 443 show ip http 447 NTP commands clock set 98 clock summer-time date 99 clock summer-time recurring 100 clock timezone 100 ntp access-group 306 ntp broadcast-client 307 ntp broadcast-delay 307 ntp disable 307 ntp enable 307 ntp master 308 ntp server 308 ntp server enable 309 ntp source 309 show clock 406 show ntp associations 489 show ntp status 490 NVS commands check-disk 85 flash-disk duplicate 145 flash-disk initialize 145 flash-disk scan 146
O
OCx/STMx commands baseline line interface sonet 63 baseline path interface sonet 64 baseline section interface sonet 65 clock source 98 controller sonet 104 loopback 247 path 315 path overhead j1 336 sdh 379
14 Index
show controllers sonet 408 shutdown 511 OSPF commands address area 12 address authentication-key 14 address authentication message-digest 15 address authentication-none 17 address cost 17 address dead-interval 18 address hello-interval 19 address message-digest-key md5 20 address network 21 address passive-interface 22 address priority 23 address retransmit-interval 25 address transmit-delay 27 area 305 area. See OSPF commands: no area area default-cost 33 area nssa 35 area range 36 area stub 36 area virtual-link 36 area virtual-link authentication-key 37 area virtual-link authentication message-digest 37 area virtual-link authentication-none 37 area virtual-link dead-interval 38 area virtual-link hello-interval 38 area virtual-link message-digest-key md5 39 area virtual-link retransmit-interval 39 area virtual-link transmit-delay 40 authentication-key 52 authentication message-digest 52 authentication-none 53 automatic-virtual-link 53 baseline ip ospf 61 clear ip ospf redistribution 92 cost 107 dead-interval 109 debug ip ospf 113 disable-dynamic-redistribute 124 distance 125 domain-id 128 domain-tag 130 hello-interval 156 ip ospf authentication-key 192 ip ospf authentication message-digest 192 ip ospf authentication-none 192 ip ospf cost 193
ip ospf dead-interval 193 ip ospf hello-interval 193 ip ospf message-digest-key md5 194 ip ospf network 194 ip ospf priority 195 ip ospf retransmit-interval 195 ip ospf shutdown 195 ip ospf transmit-delay 195 ip route-type 204 maximum-paths 258 message-digest-key md5 263 mpls traffic-eng area 278 mpls traffic-eng router-id 280 neighbor 283 network area 303 no area 305 ospf auto-cost reference-bandwidth 310 ospf enable 310 ospf log-adjacency-changes 311 ospf shutdown 311 passive-interface 313 redistribute 363 remote-neighbor 369 retransmit-interval 371 router ospf 373 show ip ospf 453 show ip ospf border-routers 453 show ip ospf database 453 show ip ospf interface 454 show ip ospf internal-statistics 454 show ip ospf neighbors 454 show ip ospf remote-neighbor interface 455 show ip ospf spf-log 455 show ip ospf virtual-links 455 summary-address 526 timers spf 546 transmit-delay 551 ttl 551 undebug ip ospf 568 update-source 570
P
PIM commands clear ip mroute 92 clear ip pim auto-rp 93 clear ip pim interface count 93 clear ip pim remote-neighbor count 93 debug ip pim 114 ip pim 196 ip pim query-interval 196
ip pim rp-address 196 ip pim send rp-announce 197 ip pim send rp-discovery scope 197 ip pim spt-threshold 198 pim disable 337 query-interval 351 remote-neighbor 369 router pim 374 show ip pim auto-rp 455 show ip pim dense-mode sg-state 456 show ip pim interface 456 show ip pim neighbor 456 show ip pim remote-neighbor 457 show ip pim rp 457 show ip pim rp-hash 457 show ip pim sparse-mode sg-state 458 show ip pim sparse-mode unicast-route 458 show ip pim spt-threshold 458 undebug ip pim 567 update-source 570 policy management commands classifier-list 86 color 101 committed-action 101 committed-burst 101 committed-rate 102 conformed-action 103 exceeded-action 138 excess-burst 141 filter 145 forward 146 ip filter-options all 178 ip policy 198 log 239 mark 252 mask-val 252 next-hop 304 next-interface 304 peak-burst 336 peak-rate 337 policy-list 341 rate-limit-profile 361 show classifier-list 404 show policy-list 490 show rate-limit-profile 500 POS commands baseline interface pos 59 crc 108 encapsulation ppp 136 interface pos 165
loopback 247 mru 280 mtu 281 pos framing 341 pos scramble-atm 341 show interfaces 424 shutdown 511 PPP commands baseline ppp interface 64 ppp aaa-profile 342 ppp authentication 342 ppp chap-challenge-length 343 ppp description 343 ppp ipcp netmask 343 ppp keepalive 344 ppp log 344 ppp magic-number disable 344 ppp max-bad-auth 345 ppp mru 345 ppp multilink enable 345 ppp passive-mode 346 ppp peer 346 ppp shutdown 346 show ppp interface 490 show ppp interface summary 493 PPPoE commands baseline pppoe interface 65 encapsulation pppoe 136 pppoe 347 pppoe acName 347 pppoe always-offer 347 pppoe auto-configure 347 pppoe duplicate-protection 347 pppoe log pppoeControlPacket 348 pppoe motm 348 pppoe sessions 348 pppoe subinterface 349 pppoe url 349 show pppoe interface 493 show pppoe subinterface 494 shutdown 511
Q
QoS commands buffer-weight 76 clear egress-queue 89 clear fabric-queue 90 committed-length 102 conformed-fraction 103 conformed-length 104
16 Index
exceeded-fraction 139 exceeded-length 139 fabric-strict-priority 142 fabric-weight 143 group 153 node 306 qos-mode-port 350 qos-port-type-profile 351 qos-profile 351 queue 352 queue-profile 352 scheduler-profile 379 shaping-rate 392 show fabric-queue 414 show qos interface-hierarchy 495 show qos-port-type-profile 495 show qos-profile 496 show qos queue-thresholds 496 show queue-profile 497 show scheduler-profile 503 show traffic-class 509 show traffic-class-group 509 strict-priority 524 traffic-class 550 traffic-class-group 550 weight 572
R
RADIUS commands baseline radius 65 max-sessions 260 no radius client 305 radius acct-session-id-format 352 radius algorithm 353 radius calling-station-delimiter 353 radius calling-station-format 354 radius client. See RADIUS commands: no radius client radius dsl-port-type 355 radius ethernet-port-type 355 radius ignore framed-ip-netmask 355 radius include 356 radius nas-identifier 358 radius nas-port-format 358 radius override nas-ip-addr tunnel-client-endpoint 358 radius rollover-on-reject 359 radius server 359 radius trap acct-server-not-responding 359 radius trap auth-server-not-responding 359
radius trap no-acct-server-responding 360 radius trap no-auth-server-responding 360 radius tunnel-accounting 360 radius udp-checksum 360 radius update-source-addr 361 show radius acct-session-id-format 497 show radius algorithm 497 show radius attributes-ignored 498 show radius attributes-included 498 show radius calling-station-delimiter 498 show radius calling-station-format 498 show radius dsl-port-type 499 show radius ethernet-port-type 499 show radius nas-identifier 499 show radius nas-port-format 499 show radius override 499 show radius rollover-on-reject 500 show radius tunnel-accounting 500 show radius udp-checksum 500 show radius update-source-addr 500 strip-domain 524 subscriber 525 timeout 545 redundancy commands disable-autosync 123 disable-switch-on-error 124 redundancy force-failover 366 redundancy lockout 366 redundancy revert 367 redundancy revertive 367 show redundancy 501 srp switch 522 synchronize 527 Response Time Reporter commands frequency 152 hops-of-statistics-kept 156 max-response-failure 260 operations-per-hop 310 owner 312 request-data-size 370 rtr 375 rtr reaction-configuration 375 rtr reaction-configuration action-type 375 rtr reaction-configuration operation-failure 376 rtr reaction-configuration path-change 376 rtr reaction-configuration test-completion 376 rtr reaction-configuration test-failure 376 rtr reset 377 rtr schedule 377
rtr schedule life 377 rtr schedule restart-time 378 rtr schedule start-time 378 samples-of-history-kept 379 show rtr application 502 show rtr application collection-statistics 502 show rtr application configuration 502 show rtr application history 502 show rtr application hops 503 show rtr application operational-state 503 tag 537 timeout 545 tos 548 type 565 RIP commands address 11 address authentication key 13 address authentication mode 16 address receive version 24 address send version 26 authentication key 52 authentication mode 53 baseline ip rip 61 clear ip rip redistribution 94 debounce-time 110 debug ip rip 115 default-information originate 120 default-metric 121 disable 123 disable-dynamic-redistribute 124 distance 125 distribute-list 127 exit-remote-neighbor 142 interface-event-disable 161, 551 ip rip 201 ip rip authentication key 201 ip rip authentication mode 202 ip rip receive version 202 ip rip send version 203 ip route-type 204 ip split-horizon 207 ip summary-address 209 match-set summary prefix-tree 257 neighbor 283 network 302 receive version 362 redistribute 363 remote neighbor 369 route-map 372 router rip 374
send-more-specific-routes-disable 380 send version 380 show ip rip 461 show ip rip database 461 show ip rip network 461 show ip rip peer 462 show ip rip statistics 462 show ip rip summary-address 462 split-horizon 522 table-map 535 timers 546 time-to-live 547 undebug ip rip 568 update-source 570 version 570 routing policy commands match as-path 253 match community 253 match distance 254 match extcommunity 254 match ip address 255 match ip next-hop 255 match level 256 match metric 256 match metric-type 256 match route-type 257 match-set summary prefix-tree 257 match tag 258 route-map 372 set as-path prepend 383 set automatic-tag 383 set comm-list delete 383 set community 384 set dampening 385 set distance 386 set extcommunity 387 set ip next-hop 388 set level 388 set local-preference 389 set metric 389 set metric-type 390 set origin 390 set route-type 391 set tag 391 set weight 392
18 Index
S
SDH commands. See cOCx/STMx commands and OCx/STMx commands shutdown commands ip shutdown 206 shutdown 511 SMDS commands baseline smds interface 66 encapsulation smds-trunk 137 show smds interface 504 SNMP commands baseline snmp 66 bulkstats collector 77 bulkstats collector collector-mode 77 bulkstats collector description 77 bulkstats collector interval 77 bulkstats collector max-size 77 bulkstats collector primary-receiver 77 bulkstats collector secondary-receiver 77 bulkstats collector single-interval 77 bulkstats file-format endOfLine-Lf 78 bulkstats interfaces description-format common 78 bulkstats interfaces rfc 1213 78 bulkstats interface-type 78 bulkstats receiver remote-name 79 bulkstats schema 79 bulkstats schema subtree 80 bulkstats schema subtree policy 80 bulkstats traps 81 show bulkstats 400 show bulkstats collector description 400 show bulkstats collector interval 401 show bulkstats collector max-size 401 show bulkstats collector transfer-mode 401 show bulkstats interface-type 401 show bulkstats receiver 401 show bulkstats schema 402 show bulkstats statistics 402 show bulkstats traps 402 show snmp 504 show snmp access 505 show snmp community 505 show snmp interfaces 505 show snmp trap 505 show snmp user 505 show snmp view 506 snmp-server 513 snmp-server community 514 snmp-server contact 514
snmp-server enable traps 514 snmp-server host 516 snmp-server interfaces compress 517 snmp-server interfaces compress-restriction 517 snmp-server interfaces description-format common 518 snmp-server interfaces rfc1213 518 snmp-server location 518 snmp-server packetsize 519 snmp-server trap-proxy 519 snmp-server trap-source 519 snmp-server user 520 snmp trap ip link-status 513 snmp trap link-status 513 t1 snmp trap link-status 533 SONET commands. See cOCx/STMx commands and OCx/STMx commands SSH commands crypto key dss 108 disconnect ssh 124 ip ssh authentication-retries 207 ip ssh crypto 208 ip ssh disable-user-authentication 208 ip ssh mac 208 ip ssh sleep 209 ip ssh timeout 209 show ip ssh 465 subscriber interface commands ip demux-type da-prefix 171 ip destination-prefix 171 ip source-prefix 206 show ip demux interface 441 system commands aaa authentication enable default 3 aaa authentication login 3 aaa new-model 6 access-class in 9 access-list 10 banner 55 clear line 95 crypto key dss 108 data-character-bits 109 delete 121 description 122 dir 122 disconnect ssh 124 dsr-detect 130 enable password 134 enable secret 135
erase secrets 138 exception dump 139 exception gateway 140 exception protocol ftp 140 exception source 140 exclude-subsystem 141 exec-banner 141 exec-timeout 141 halt 154 help 156 host 157 hostname 157 ip domain-lookup 174 ip domain-name 174 ip name-server 191 ip nfs 191 ip nfs host 192 ip ssh authentication-retries 207 ip ssh crypto 208 ip ssh disable-user-authentication 208 ip ssh mac 208 ip ssh sleep 209 ip ssh timeout 209 line 237 login 245 login authentication 246 macro 250 memory 262 motd-banner 264 password 314 service ctrl-x-reboot 381 service password-encryption 382 service unattended password-recovery 382 show bandwidth oversubscription 400 show columns 406 show configuration 407 show environment 414 show exception dump 414 show flash 415 show hardware 421 show hosts 423 show ip domain-lookup 443 show ip nfs 452 show ip ssh 465 show line console 0 479 show line vty 479 show nvs 490 show processes 494 show reboot-history 501 show running-configuration 503
show secrets 504 show subsystems 507 show telnet 508 show timing 508 show users 509 show utilization 510 show version 510 slot accept 512 slot disable 512 slot enable 512 slot erase 512 speed 521 telnet 538 timeout login response 545 timing disable-auto-upgrade 547 timing select 547 timing source 548
T
T1 command, interface serial 165 T3 commands atm framing 45 cablelength 82 channelized 84 controller t3 105 dsu bandwidth 131 dsu mode 131 load-interval 238 loopback 247 mru 280 mtu 281 scramble 379 show controllers t3 412 shutdown 511 T3-Frame command, interface serial 165 TACACS+ commands aaa authentication enable default 3 baseline tacacs 66 show statistics tacacs 506 show tacacs 508 tacacs-server host 535 tacacs-server key 536 tacacs-server source-address 536 tacacs-server timeout 536 time commands, system clock set 98 clock summer-time date 99 clock summer-time recurring 100 clock timezone 100 ntp access-group 306
20 Index
ntp broadcast-client 307 ntp broadcast-delay 307 ntp disable 307 ntp enable 307 ntp master 308 ntp server 308 ntp source 309 show clock 406 show ntp associations 489 show ntp status 490 timing commands clock source 98 show timing 508 t1 clock source 529 timing disable-auto-upgrade 547 timing select 547 timing source 548 troubleshooting commands baseline log 63 bgp log-neighbor-changes 72 debug ip bgp 110 debug ip mbgp 112 debug ip ospf 113 debug ip pim 114 debug ip rip 115 debug isis 116 log 239 log destination 241 log destination syslog source 242 log engineering 242 log fields 243 log filters. See troubleshooting commands: no log filters log here 243 log severity 244 log unlimit 245 log verbosity 245 no log filters 305 service timestamps 382 show log configuration 480 show log data 480 undebug ip bgp 566 undebug ip mbgp 567 undebug ip ospf 568 undebug ip pim 567 undebug ip rip 568 undebug isis 569 Tunnel Service command, show tunnel-server 509
U
user interface commands configure 102 confirmations explicit 103 disable 123 enable 133 end 137 exit 142 run 378 send 380 show terminal 508 sleep 511 telnet listen 540 terminal data-character- bits 540 terminal length 540 terminal speed 540 terminal width 541
V
virtual router commands show configuration 407 show virtual-router 510 virtual-router 571 VLAN commands encapsulation vlan 137 show vlan subinterfaces 511 shutdown 511 svlan ethertype 527 svlan id 527 vlan id 572 VPN command, virtual-router 571 VRRP commands baseline ip vrrp 62 ip vrrp 212 ip vrrp advertise-interval 212 ip vrrp authentication-key 213 ip vrrp authentication-type 213 ip vrrp enable 213 ip vrrp preempt 213 ip vrrp priority 214 ip vrrp virtual-address 214 show ip vrrp 467 show ip vrrp brief 467 show ip vrrp neighbor 468 show ip vrrp statistics 468 show ip vrrp summary 468 vty line command, show users 509
X
X.21/V.35 commands clock rate 97 crc 108 ignore dcd 159 ignore link-state-signals 160 interface serial 165 invert data 166 invert txclock 166 load-interval 238 loopback 247 mru 280 mtu 281 nrzi-encoding 306 shutdown 511
22 Index