Sie sind auf Seite 1von 612

ERX Edge Routers Command Reference Guide

Release 4.1.0

Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net
Part No. 162-00488-00

Juniper Networks is registered in the U.S. Patent and Trademark Office and in other countries as a trademark of Juniper Networks, Inc. Broadband Cable Processor, ERX, ESP, G1, G10, G-series, Internet Processor, JUNOS, JUNOScript, M5, M10, M20, M40, M40e, M160, M-series, NMC-RX, SDX, ServiceGuard, T320, T640, T-series, UMC, and Unison are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. All specifications are subject to change without notice. Products made or sold by Juniper Networks (including the M5, M10, M20, M40, M40e, M160, and T320 routers, T640 routing node, and the JUNOS software) or components thereof might be covered by one or more of the following patents that are owned by or licensed to Juniper Networks: U.S. Patent Nos. 5,473,599, 5,905,725, 5,909,440, 6,333,650, 6,359,479, and 6,406,312. ERX Edge Routers Command Reference Guide, Release 4.1.0 Copyright 2002, Juniper Networks, Inc. All rights reserved. Printed in USA. Writers: Richard Cochran, Justine Kangas, Helen Shaw, Brian Wesley Simmons, Michael Taillon Editor: Fran Mues Revision History November 2002 Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.

SOFTWARE LICENSE AGREEMENT1


JUNIPER NETWORKS, INC. IS WILLING TO LICENSE THE ENCLOSED SOFTWARE AND ACCOMPANYING USER DOCUMENTATION (COLLECTIVELY, THE PROGRAM) TO YOU ONLY UPON THE CONDITION THAT YOU ACCEPT ALL OF THE TERMS AND CONDITIONS OF THIS LICENSE AGREEMENT. PLEASE READ THESE TERMS AND CONDITIONS CAREFULLY BEFORE COPYING OR USING THE ACCOMPANYING SOFTWARE OR INSTALLING THE HARDWARE UNIT WITH PRE-ENABLED SOFTWARE OR USING THE ACCOMPANYING USER DOCUMENTATION. BY USING THE ACCOMPANYING SOFTWARE OR INSTALLING THE HARDWARE UNIT WITH PRE-ENABLED SOFTWARE, YOU AGREE TO BE BOUND BY THE TERMS AND CONDITIONS OF THIS LICENSE AGREEMENT. IF YOU DO NOT AGREE TO BE BOUND BY THE TERMS OF THIS LICENSE AGREEMENT, JUNIPER NETWORKS IS UNWILLING TO LICENSE THE PROGRAM TO YOU, IN WHICH EVENT YOU SHOULD PROMPTLY WITHIN TEN (10) DAYS FROM SHIPMENT RETURN THE UNUSED SOFTWARE, USER DOCUMENTATION, AND RELATED EQUIPMENT AND HARDWARE TO THE PLACE OF PURCHASE AND YOU WILL RECEIVE A FULL REFUND OF YOUR LICENSE FEE. THIS LICENSE AGREEMENT REPRESENTS THE ENTIRE AGREEMENT CONCERNING THE PROGRAM BETWEEN YOU AND JUNIPER NETWORKS, AND IT SUPERSEDES ANY PRIOR PROPOSAL, REPRESENTATION OR UNDERSTANDING BETWEEN THE PARTIES. 1. License Grant. Juniper Networks, Inc. (Juniper Networks) and its suppliers and licensors hereby grant to you and you hereby accept a nonexclusive, personal and nontransferable license to use the computer software and/or hardware unit with pre-enabled software, including all patches, error corrections, updates, and revisions thereto in machine-readable, object code form only (the Software), and the accompanying User Documentation on the Juniper Networks product owned by you and only as authorized in this License Agreement. You may make one (1) archival copy of the Software for backup purposes provided you affix to such copy all copyright, confidentiality, and proprietary notices that appear on the original. Except as authorized under this paragraph, no copies of the Program or any portions thereof may be made, in whole or in part, by you or any person under your authority or control. The Software and User Documentation are protected under copyright laws. The title to Software and User Documentation shall remain solely with Juniper Networks and its suppliers. Except as authorized above, you shall not: copy, in whole or in part, the Software or the related User Documentation; modify, reverse assemble, reverse compile, or otherwise translate, dissemble, or obtain source code for the Software or User Documentation, in whole or in part, or permit a third party to do so; rent, lease, distribute, sell, or create derivative works of the Software; pledge, lease, rent, sublicense or share its rights under this License Agreement; or, without Juniper Networks prior written consent, assign or transfer its rights hereunder. 2. Juniper Networks's Rights. You agree that the Software, including the User Documentation, embodies Juniper Networks's and its suppliers' and licensors' confidential and proprietary intellectual property protected under U.S. copyright law and you will use your best efforts to maintain their confidentiality. You further acknowledge and agree that Juniper Networks or its suppliers and licensors own all right, title, and interest in and to the Software, including all intellectual property rights therein. You shall take no action inconsistent with Juniper Networks's or its suppliers' ownership of such Software. You shall not sublicense, assign, or otherwise disclose to any third party the Software or any information about the operation, design, performance, or implementation of the Software and User Documentation without prior written consent of Juniper Networks. You agree to implement reasonable security measures to protect such confidential and proprietary information and copyrighted material. This License Agreement does not convey to you an interest in or to the Program, but only the limited right of use revocable in accordance with the terms of this License Agreement. 3. License Fees. The license fees paid by you are paid in consideration of the license granted under this License Agreement. 4. Term. This license is effective upon opening of the package(s) or use of the hardware containing the Software, and shall continue until terminated. You may terminate this License at any time by returning the Software, including any User Documentation, and all copies or portions thereof to Juniper Networks. This License will terminate immediately without notice from Juniper Networks if you breach any term or provision of this License. Upon such termination by Juniper Networks, you

1. If you and Juniper Networks, Inc., have executed another license agreement for the Program which is now in effect, then such agreement (Negotiated Agreement) shall supersede this Software License Agreement and shall exclusively govern the use and license terms of the Program.

must return the Software, including any User Documentation, and all copies or portions thereof to Juniper Networks. Termination of this License Agreement shall not prejudice Juniper Networks' rights to damages or other available remedy. 5. Limited Software Warranty: Juniper Networks warrants, for your benefit alone, that for a period of ninety (90) days from the date of shipment from Juniper Networks that the Software substantially conforms to its published specifications. The limited warranty extends only to you as the original licensee. Your exclusive remedy and the entire liability of Juniper Networks and its suppliers under this limited warranty will be, at Juniper Networks' option, repair or replacement of the Software, or refund of the amounts paid by you under this License Agreement. You agree that this is your sole and exclusive remedy for breach by Juniper Networks, its suppliers or its licensors of any warranties made under this License Agreement. In no event does Juniper Networks warrant that the Software is error free or that you will be able to operate the Software without problems or interruptions. Juniper Networks does not warrant: 1) that the functions contained in the software will meet your requirements; 2) that the Software will operate in the hardware or software combination that you may select; 3) that the operation of the Software will be uninterrupted or error free; or 4) that all defects in the operation of the Software will be corrected. This warranty does not apply if the product: 1) has been altered, except by Juniper Networks; 2) has not been installed, operated, repaired, or maintained in accordance with instruction supplied by Juniper Networks; or 3) has been subjected to or damaged by improper environment, abuse, misuse, accident, or negligence. EXCEPT FOR THE WARRANTIES SET FORTH ABOVE, THE SOFTWARE IS LICENSED AS IS, AND JUNIPER NETWORKS DISCLAIMS ANY AND ALL OTHER REPRESENTATIONS, CONDITIONS, AND WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING, WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE OR ANY WARRANTIES FOR NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE. ANY AND ALL SUCH WARRANTIES ARE HEREBY EXCLUDED TO THE EXTENT ALLOWED BY APPLICABLE LAW. JUNIPER NETWORKS' SUPPLIERS AND LICENSORS DO NOT MAKE OR PASS ON TO YOU OR ANY THIRD PARTY ANY EXPRESS, IMPLIED, OR STATUTORY WARRANTY OR REPRESENTATION, INCLUDING, BUT NOT LIMITED TO, IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE OR ANY WARRANTIES FOR NONINFRINGEMENT. 6. Proprietary Rights Indemnification. Juniper Networks shall at its expense defend you against and, subject to the limitations set forth elsewhere herein, pay all costs and damages made in settlement or awarded against you resulting from a claim that the Program as supplied by Juniper Networks infringes a United States copyright or a United States patent, or misappropriates a United States trade secret, provided that you: (a) provide prompt written notice of any such claim, (b) allow Juniper Networks to direct the defense and settlement of the claim, and (c) provide Juniper Networks with the authority, information, and assistance that Juniper Networks reasonably deems necessary for the defense and settlement of the claim. You shall not consent to any judgment or decree or do any other act in compromise of any such claim without first obtaining Juniper Networks written consent. In any action based on such a claim, Juniper Networks may, at its sole option, either: (1) obtain for you the right to continue using the Program, (2) replace or modify the Program to avoid the claim, or (3) if neither (1) nor (2) can reasonably be effected by Juniper Networks, terminate the license granted hereunder and give you a pro rata refund of the license fee paid for such Program, calculated on the basis of straight-line depreciation over a five-year useful life. Notwithstanding the preceding sentence, Juniper Networks will have no liability for any infringement or misappropriation claim of any kind if such claim is based on: (i) the use of other than the current unaltered release of the Program and Juniper Networks has provided or offers to provide such release to you for its then current license fee, or (ii) use or combination of the Program with programs or data not supplied or approved by Juniper Networks if such use or combination caused the claim. 7. Limitation of Liability. IN NO EVENT WILL JUNIPER NETWORKS OR ITS SUPPLIERS OR LICENSORS BE LIABLE FOR ANY COST FOR SUBSTITUTE PROCUREMENT; SPECIAL, INDIRECT, INCIDENTAL, PUNITIVE, EXEMPLARY, OR CONSEQUENTIAL DAMAGES; OR ANY DAMAGES RESULTING FROM INACCURATE OR LOST DATA OR LOSS OF USE OR PROFITS ARISING OUT OF OR IN CONNECTION WITH THE PERFORMANCE OF THE SOFTWARE, EVEN IF JUNIPER NETWORKS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Juniper Networks' cumulative liability to you or any other party for any loss or damages resulting from any claims, demands, or actions arising out of or relating to this License Agreement shall not exceed the total fees paid to Juniper Networks for the Software. 8. Export Control. Software, including technical data, is subject to U.S. export control laws, including the U.S. Export Administration Act and its associated regulations, and may be subject to

export or import regulations in other countries. You agree to comply strictly with all such regulations and acknowledge that you have the responsibility to obtain licenses to export, re-export, or import Software. 9. Government Licensees: If any Software or associated documentation is acquired by or on behalf of a unit or agency of the United States government, the government agrees that such Software or documentation is a commercial item as that term is defined in 48 C.F.R. 2.101, consisting of commercial computer software or commercial computer software documentation as such terms are used in 48 C.F.R. 12.212 of the Federal Acquisition Regulations and its successors and 48 C.F.R. 227.7202-1 through 227.7202-4 of the DoD FAR Supplement and its successors. The use, duplication, or disclosure by the United States government of technical, data, computer software and documentation is subject to the restrictions set forth in FAR section 12.212(a), FAR section 52.227-14(g)(2), FAR section 52.227-19, DFARS section 252.227-7015(b), DFARS section 227.7202-1(a), and DFARS section 227.7202-3(a), as applicable. All United States government end users acquire the Software with only the rights set forth in this License Agreement. 10. General: This License shall be governed by and construed in accordance with the laws of the Commonwealth of Massachusetts, United States of America, as if performed wholly within the state and without giving effect to the principles of conflict of law. Any dispute arising out of this Agreement shall be referred to an arbitration proceeding in Boston, Massachusetts, in accordance with the commercial arbitration rules of the American Arbitration Association (the AAA). If the parties cannot agree upon an arbitrator, arbitration shall be conducted by a neutral arbitrator selected by the AAA who is knowledgeable in electronics equipment manufacturing and software licensing. The parties shall share the procedural costs of arbitration equally, and each party shall pay its own attorneys' fees and other costs and expenses associated with the arbitration, unless the arbitrator decides otherwise. The arbitrator's award shall be in writing and shall include a statement of reasons, but the arbitrator shall not be permitted to award punitive or indirect damages. The arbitrator's decision and award shall be final and binding and may be entered in any court having jurisdiction. The terms of this section shall not prevent any party from seeking injunctive relief in any court of competent jurisdiction in order to protect its proprietary and confidential information. If any term or provision hereof is found to be void or unenforceable by a court of competent jurisdiction, the remaining provisions of this License Agreement shall remain in full force and effect. This License Agreement constitutes the entire agreement between the parties with respect to the use of the Software and User Documentation and supersedes any and all prior oral or written agreements, discussions, negotiations, commitments, or understandings. No amendment, modification, or waiver of any provision of this License Agreement will be valid unless in writing and signed by the authorized representative of the party against which such amendment, modification, or waiver is sought to be enforced. The waiver by either party of any default or breach of this License Agreement shall not constitute a waiver of any other or subsequent default or breach. This License Agreement shall be binding upon the parties and their respective successors and permitted assigns. Should you have any questions about this agreement, please contact: Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 Attn: Contracts Administrator

About This Guide

This Command Reference Guide provides all the commands available to configure your system. Refer to the Configuration Guides for detailed information on configuring your ERX system.
Note: If the information in the latest Release Notes differs from the information in this guide, follow the Release Notes.

Your ERX system is shipped with the latest system software installed. If you need to install a future release or reinstall the system software, refer to the procedures in ERX Installation and User Guide, Appendix E, Installing ERX System Software.

ERX Edge Routers


Four models of ERX edge router are available: ERX-1440 system ERX-1400 system ERX-705 system ERX-700 system All models use the same software. For information about the differences between the models, see ERX Installation and User Guide, Chapter 1, ERX System Overview. In the ERX documentation, the term ERX-1400 series refers to both the ERX-1440 system and the ERX-1400 system. Similarly, the term ERX-700 series refers to both the ERX-705 system and the ERX-700 system. The terms ERX-1440 system, ERX-1400 system, ERX-705 system, and ERX-700 system refer to the specific models.

viii About This Guide

Audience
This guide is intended for experienced system and network specialists who will configure a Juniper Networks ERX system in an Internet access environment.

Conventions
Table 1, Table 2, and Table 3 list all the conventions used in the ERX documentation. Table 1 defines notice icons. Table 2 shows text conventions used throughout the book, except for command syntax. Table 3 provides command syntax conventions used primarily in the ERX Command Reference Guide. For more information about command syntax, see ERX System Basics Configuration Guide, Chapter 1, Planning Your Network.
Table 1 Notice icons Icon Meaning Informational note Caution Description Indicates important features or instructions. Indicates that you may risk losing data or damaging your hardware.

Warning

Alerts you to the risk of personal injury.

Table 2 Text conventions (except for command syntax) Convention Bold typeface Description Represents commands and keywords in text. Examples Bold Courier typeface Key name in angle brackets Key names linked with a plus sign (+) in angle brackets. Plain Courier typeface Represents text that the user must type. Indicates the name of a key on the keyboard. Indicates that you must press two or more keys simultaneously. Represents information as displayed on your terminals screen. Command example: Issue the clock source command. Keyword example: Specify the keyword exp-msg.

user input Press <Enter>. Press <Ctrl+B>. host1#show ip ospf 2 Routing Process OSPF 2 with Router ID 5.5.0.250 Router is an Area Border Router (ABR)

Conventions ERX Edge Routers

ix

Table 2 Text conventions (except for command syntax) (continued) Convention Italics Description Emphasize words. Identify variables. Identify chapter, appendix, and book names. Examples There are two levels of access, user and privileged. clusterId, ipAddress. Appendix A, System Specifications.

Table 3 Syntax conventions in command reference guide Convention Words in plain text Words in italics Words separated by the | symbol Description Represent keywords. Represent variables. Represent a choice to select one keyword or variable to the left or right of this symbol. (The keyword or variable may be either optional or required.) Represent optional keywords or variables. Represent optional keywords or variables that can be entered more than once. Represent required keywords or variables. Examples terminal length mask, accessListName diagnostic | line

Words enclosed in [ brackets ] Words enclosed in [ brackets ]*

[ internal | external ] [ level1 | level2 | l1 ]*

Words enclosed in { braces }

{ permit | deny } { in | out } { clusterId | ipAddress }

Using the no vs. the default Version of Commands

Most system configuration commands have a no version, which you can use to negate a command (or a portion of it specified by an optional keyword) or restore its default setting. When you use a command without the keyword no, you can reenable a disabled feature or override a default setting. You have the option of using the default keyword whenever the no keyword is also a choice; simply enter the keyword default instead of no. In most cases, when you execute the default version of a command, it produces the exact results as the no version. There are some commands for which the default version yields a different result than the no version. Commands for which the default behavior differs from the no behavior are clearly identified in this guide. Unless otherwise specified, therefore, the default command is identical to the no command and will neither be documented nor discussed. The syntax for each no command is described in this guide. Some commands do not have a no version; this is indicated in the individual

x About This Guide

command descriptions except for the show commands, none of which has a no version. The CLI can act on no versions of commands when you have entered sufficient information to distinguish the command syntactically, and ignores all subsequent input on that line. To be compatible with some non-ERX implementations, the no versions of commands will accept the same options as the affirmative version of the commands. The CLI ignores the optional input if it has no effect on the command behavior. If using the option changes the behavior of the no version, the individual command entry in this guide describes the difference in behavior.
Filtering show Commands

You have access to a variety of show commands that display system and protocol information. You can filter the output of a show command by specifying | (the UNIX pipe symbol), one of the following keywords, and either a case-sensitive text string or a regular expression. begin displays output beginning with the first line that contains the text string or regular expression include displays output lines that contain the text string or regular expression and excludes lines that do not contain the text string or regular expression exclude displays output lines that do not contain the text string or regular expression and excludes lines that do contain the text string or regular expression For a list of regular expressions, see ERX Routing Protocols Configuration Guide, Vol. 1, Chapter 1, Configuring Routing Policy. You can press <Ctrl+C> to interrupt the show command output.
Note: The system does not recognize beginning spaces of the text string. For example, if you enter the include option with IP as the text string on which to filter, the system ignores the space and displays lines that include words such as RIP.

Example

In the following example, the output display consists only of lines that contain the string ip. The system omits all other lines of the output from the display because none of them contain the string ip.
host1#show config include-defaults | include ip ! Configuration script generated on FRI NOV 12 1999 16:56:41 UTC ip address 192.168.1.229 255.255.255.0

Conventions ERX Edge Routers

xi

ip rip receive version 2 1 ip rip send version 1 ip rip authentication mode md5 17 ip rip authentication key ip route 10.6.0.0 255.255.0.0 192.168.1.1 ip route 10.10.0.0 255.255.0.0 192.168.1.1 ip route 10.10.0.166 255.255.255.255 192.168.1.1 ip debounce-time 0 router rip

Interface Types and Specifiers

Many commands take the variables interfaceType and interfaceSpecifier. Some commands support all types of interfaces, whereas other commands support only certain types of interfaces. The interface specifier depends on the type of interface. Table 4 shows the interface specifiers for each type of interface.
Table 4 Interface types and specifiers Interface Type atm Description ATM interface Interface Specifier slot/port [.subinterface] slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module subinterface number of the subinterface in the range 14294967293 slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module subinterface1 number of the FE subinterface in the range 14294967293; not more than 2 subinterfaces per FE interface.a subinterface2 number of the higher-level subinterface in the range 14294967293; not more than 4094 higher-level subinterfaces per FE subinterfacea Example atm 3/2.6

fastEthernet

IEEE 802.3 Fast Ethernet (FE) interface

slot/port [.subinterface1[.subinterface2]] fastEthernet 3/2.6.20

xii About This Guide

Table 4 Interface types and specifiers (continued) Interface Type gigabitEthernet Description IEEE 802.3 Gigabit Ethernet (GE) interface Interface Specifier slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module subinterface1 number of the GE subinterface in the range 14294967293; not more than 2 subinterfaces per GE interface.a subinterface2 number of the higher-level subinterface in the range 14294967293; not more than 4094 higher-level subinterfaces per GE subinterface.a hssi 3/0 slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module loopback 20 integer integer in the range 14294967293 mlframe-relay boston.1 bundle-name name of the bundle subinterface number of the MFR subinterface in the range 14294967293 mlppp chicago null 0 bundle-name name of the bundle Example

slot/port [.subinterface1[.subinterface2]] gigabitEthernet 3/2.6.20

hssi

High-speed serial interface

slot/port

loopback Loopback interface

integer

mlframe-relay

Multilink frame relay interface

bundle-name [.subinterface ]

mlppp null

Multilink PPP interface Null interface, which cannot forward or receive traffic Packet over SONET (POS) interface

bundle-name 0

pos

slot/port slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module

pos 3/2

Conventions ERX Edge Routers

xiii

Table 4 Interface types and specifiers (continued) Interface Type serial Description CE1, CT1, CT3, E3-FRAME, T3-FRAME, cOCx/STMx interface, or X.21/V.35 interface Interface Specifier Example

Refer to the individual formats listed below.

CE1/CT1

slot/port:channel-group slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module channel-group number of the channel group associated with a range of DS0 timeslots on a CE1 or CT1 module; in the range 131 for a CE1 module, and 124 for a CT1 module

serial 3/2:20

CT3

slot/port:channel/subchannel slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module channel - number of a T1 channel on a CT3 module; in the range 128 subchannel number of the channel group associated with a range of DS0 timeslots on a CT3 module; in the range 128

serial 3/2:20/15

E3/T3 FRAME

slot/port slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module

serial 3/2

xiv About This Guide

Table 4 Interface types and specifiers (continued) Interface Type Description Interface Specifier slot/port:path-channel/path-payload/ tributary-group/tributary-number/ channelNumber slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module path-channel number of the STS-1or STM-0 line in the range 12147483648 path-payload number of the payload within the path tributary-group number of the tributary group within the path tributary-number number of the tributary within the group channelNumber 1 (the system assigns the number one to an unframed E1 channel) serial 3/0:10/1/2/2/1 Example serial 3/0:10/1/2/2/1

cOCx/STMx:
unframed E1

cOCx/STMx:
fractional E1/T1

slot/port:path-channel/path-payload/ tributary-group/tributary-number/ channel-group slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module path-channel number of the STS-1or STM-0 line in the range 12147483648 path-payload number of the payload within the path tributary-group number of the tributary group within the path tributary-number number of the tributary within the group channel-group number of a fractional T1 or E1 line

Conventions ERX Edge Routers

xv

Table 4 Interface types and specifiers (continued) Interface Type Description Interface Specifier slot/port:path-channel/ ds3-channel-number slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module path-channel number of the STS-1or STM-0 line in the range 12147483648 ds3-channel-number number of a T3 channel serial 3/0:1/1/10/15 Example serial 3/0:1/1

cOCx/STMx:
unchannelized DS3

cOCx/STMx:
DS3 channelized to DS0

slot/port:path-channel/ ds3-channel-number/ ds1-channel-number /subchannel-number slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module path-channel number of the STS-1or STM-0 line in the range 12147483648 ds3-channel-number number of a T3 channel ds1-channel-number number of a T1 channel subchannel-number number of a fractional T1 channel slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module

X.21/V.35

slot/port

sonet line layer Line layer of a SONET/SDH interface

slot/port slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module

sonet 3/0

xvi About This Guide

Table 4 Interface types and specifiers (continued) Interface Type sonet path layer Description Path layer of a SONET/SDH interface Interface Specifier slot/port:path-channel slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module path-channel number of the STS-1or STM-0 line in the range 12147483648 sonet 3/0 slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module tunnel gre:boston tunnel-type type of the tunnel: dvmrp, gre, ipsec, l2tp, or mpls tunnel-name name of the tunnel Example sonet 3/0:2

sonet section layer

Section layer of a SONET/SDH interface

slot/port

tunnel Tunnel interface

tunnel-type:tunnel-name

a.See the interface fastEthernet command and the interface gigabitEthernet command for details on specifying subinterfaces with and without VLANs on Ethernet interfaces.

Documentation
The ERX Installation Quick Start poster is shipped in the box with all new systems. This poster provides the basic procedures to help you get the system up and running quickly. The document set contains the following books and online resources: ERX Installation and User Guide Provides the necessary procedures for getting your system operational, including information on installing, cabling, powering up, configuring your system for management access, and general troubleshooting. ERX System Basics Configuration Guide Describes planning and configuring your network, managing the system, passwords, and security, and configuring the system clock and virtual routers. ERX Physical and Link Layers Configuration Guide Describes configuring physical and link layer interfaces. ERX Routing Protocols Configuration Guide, Vol. 1 Provides information about configuring routing policy and configuring IP, IP routing, and IP security.

Using the Online Documentation CD ERX Edge Routers

xvii

ERX Routing Protocols Configuration Guide, Vol. 2 Describes BGP routing, MPLS, BGP-MPLS VPNs, and encapsulation of layer 2 services. ERX Policy and QoS Configuration Guide - Provides information about configuring policy management and quality of service (QoS). ERX Broadband Access Configuration Guide Provides information about configuring remote access. ERX Command Reference Guide Contains important information about all system commands implemented in the system software. Use to look up command descriptions, command syntax, a commands related mode, or a description of a commands parameters. It is intended to be used in conjunction with the ERX Configuration Guides. ERX Product Overview Guide Gives a thorough overview of the system from a software and hardware perspective. It provides illustrations and configuration examples that present the big picture. ERX Release Notes Contains information about features, changes, known problems, and limitations. Provides final information that did not make it into the documentation. ERX Online Documentation CD Provides an online version of this guide and the documents listed above. The online documents contain numerous links between guides, giving easy access to a vast amount of technical information.
Abbreviations

A complete list of abbreviations used in this document set, along with their spelled-out terms, is provided in the ERX System Basics Configuration Guide, Appendix A, Abbreviations and Acronyms.

Using the Online Documentation CD


To use the Online Documentation CD:
1 2 3

Place the Online Documentation CD in your CD-ROM drive. Follow the instructions located on the inside cover of your CD jewel case to install Acrobat Reader. From the Documentation folder on the CD, open the CDtips.pdf file for information on using Adobe Acrobat Reader.

xviii About This Guide

From the Documentation folder on the CD, open the Welcome.pdf file for access to the documentation set.

Comments About the Documentation


We encourage you to provide feedback, comments, and suggestions so that we can improve the documentation to better meet your needs. Please e-mail your comments to: techpubs-comments@juniper.net Along with your comments, be sure to indicate: Document name Document part number Page number

Contacting Customer Support


For technical support, contact Juniper Networks at support@juniper.net, or at 1-888-314-JTAC (within the United States) or 408-745-2121 (from outside the United States).

List of Commands

aaa accounting acct-stop on-aaa-failure


Description: Configures AAA to send an Acct-Stop message if a user fails AAA, but RADIUS grants access. The no version returns the parameter to the default of enable. aaa accounting acct-stop on-aaa-failure { enable | disable } no aaa accounting acct-stop on-aaa-failure Mode(s): Global Configuration

Syntax:

aaa accounting acct-stop on-access-deny


Description: Syntax: Issues an Acct-Stop message if RADIUS denies access. The no version returns the parameter to the default of disable. aaa accounting acct-stop on-access-deny { enable | disable } no aaa accounting acct-stop on-access-deny Mode(s): Global Configuration

aaa accounting duplication


Description: Syntax: Sends duplicate accounting records to the accounting server of a different virtual router. The no version disables the feature. aaa accounting duplication routerName no aaa accounting duplication Mode(s): routerName virtual router name

Global Configuration

aaa accounting interval

aaa accounting interval


Description: Syntax: Specifies the accounting interval. The no version sets the value to 0, which turns off interim accounting. aaa accounting interval period no aaa accounting interval Mode(s): period accounting interval in minutes in the range 101080, which sets the time period between accounting updates

Global Configuration

aaa accounting ppp default


Description: Syntax: Specifies the default accounting protocol for PPP. The no version produces the same result as specifying the radius value. aaa accounting ppp default accountor [ accountors ]* no aaa accounting ppp default accountor specifies the accounting method:

radius uses RADIUS for the accounting method none disables accounting
Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line

Global Configuration

aaa authentication enable default ERX Edge Routers

aaa authentication enable default


Description: Allows privilege determination to be authenticated through the authenticator(s) you specify. This authentication is applied to vty users. The no version removes the authentication settings. aaa authentication enable default [ authenticator ] [ authenticators ] * no aaa authentication enable default authenticator specifies the authentication method authenticators

Syntax:

radius use RADIUS authentication line use the line password tacacs+ use TACACS+ authentication none use no authentication enable use the enable password * indicates that one or more parameters can be repeated multiple
times in a list in the command line Mode(s): Global Configuration

aaa authentication login


Description: Syntax: Creates an authentication list and the criteria for login. This authentication is applied to vty users. aaa authentication login authListName authenticator [ authenticators ]* no aaa authentication login authListName authListName specifies an existing authentication list name (created using the login authentication command); a string of 132 characters authenticator specifies the authentication method authenticators

line use the line password for authentication none use no authentication radius use RADIUS authentication tacacs+ use TACACS+ authentication
Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line

Global Configuration

aaa authentication ppp default

aaa authentication ppp default


Description: Syntax: Specifies the default authentication protocol for PPP and DHCP clients. The no version produces the same result as specifying the radius value. aaa authentication ppp default authenticator [ authenticators ]* no aaa authentication ppp default authenticator authentication method:

radius uses RADIUS for authentication none means authentication is off, allowing all users access
Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line

Global Configuration

aaa delimiter
Description: Specifies delimiters for the domain and realm names. You can specify up to eight delimiters each for domain and realm names. The no version restores the default value. aaa delimiter { domainName | realmName } delimiters no aaa delimiter { domainName | realmName } domainName allows you to set delimiters for the domain name realmName allows you to set delimiters for the realm name delimiters either the domain or realm delimiter(s). You can specify up to eight characters.

Syntax:

The default domain name delimiter is @. The default realm name delimiter is NULL (no character). In this case,
realm parsing is disabled (having no delimiter disables realm parsing). Mode(s): Global Configuration

aaa dns ERX Edge Routers

aaa dns
Description: Syntax: Specifies the IP address of the primary DNS name server. The no version sets the corresponding address to 0. aaa dns { primary | secondary } ipAddress no aaa dns { primary | secondary } Mode(s): primary specifies the primary DNS name server secondary specifies the secondary DNS name server ipAddress IP address of the name server

Global Configuration

aaa domain-map
Description: Maps a user domain name to a virtual router. When you specify only the domain name, the command sets the mode to Domain Map Configuration. The no version deletes the map entry. aaa domain-map domainName [ routerName [ loopback interfaceNumber ] ] no aaa domain-map domainName Mode(s): domainName a user domain name; specify the domain name none to assign users without domains to a specific virtual router. routerName a router name associated with the domain name loopback specifies the loopback interface interfaceNumber interface number in the range 032000

Syntax:

Global Configuration

aaa duplicate-address-check
Description: Syntax: Allows you to enable or disable routing table address lookup or duplicate address check. There is no no version. aaa duplicate-address-check { enable | disable } Note: To use this command, you must have a B-RAS license. Run the license b-ras command and enter your password. Mode(s): Global Configuration

aaa new-model

aaa new-model
Description: Syntax: Mode(s): Specifies AAA authentication for Telnet sessions. The no version restores simple authentication (login and password). [ no ] aaa new-model Global Configuration

aaa parse-order
Description: Specifies the order in which the system searches for a domain name. It either searches for realm and then domain, or it searches for domain and then realm. The no version returns the parse order to the default of searching for realm first. aaa parse-order { domain-first | realm-first } no aaa parse-order domain-first causes the system to search for a domain name starting with the right-most character. When the system reaches a delimiter, it uses anything to the right of the delimiter as the domain name. realm-first causes the system to search for a domain name starting with the left-most character. When the system reaches a delimiter, it uses anything to the left of the delimiter as the domain name.

Syntax:

Mode(s):

Global Configuration

aaa profile
Description: Syntax: Creates a new AAA profile to allow mapping to AAA services. aaa profile profileName Mode(s): profileName profile name of up to 32 characters

AAA Profile Configuration

aaa subscriber limit per-port ERX Edge Routers

aaa subscriber limit per-port


Description: Syntax: Sets the maximum number of active subscribers permitted on the specified port. The no version returns the limit to the default, 0 (zero). aaa subscriber limit per-port interfaceValue limitValue no aaa subscriber limit per-port interfaceValue Mode(s): interfaceValue location of the interface in the slot/port format limitValue maximum number of subscribers. The default is 0 (zero), which means there is no limit on the number of subscribers.

Global Configuration

aaa subscriber limit per-vr


Description: Syntax: Sets the maximum number of active subscribers permitted on the virtual router. The no version returns the limit to the default, 0 (zero). aaa subscriber limit per-vr limitValue no aaa subscriber limit per-vr Mode(s): limitValue maximum number of subscribers. The default is 0 (zero), which means there is no limit on the number of subscribers.

Global Configuration

aaa timeout
Description: Syntax: Sets either the default idle or session timeout for B-RAS PPP users. The no version deletes either the idle or session timeout. aaa timeout { idle idleTimeout | session sessionTimeout } no aaa timeout { idle | session } Mode(s): idleTimeout in seconds: 300, 7200 sessionTimeout in seconds: 602678400 (that is, a minimum of 1 minute to a maximum of 31 days)

Global Configuration

aaa tunnel assignment-id-format

aaa tunnel assignment-id-format


Description: Syntax: Sets the format for the tunnel assignment ID. aaa tunnel assignment-id-format { assignmentId | client-server-id } Mode(s): assignmentId configures the format to be assignmentId only client-server-id configures the format to be a combination of clientAuthId + serverAuthId + assignmentId

Global Configuration

aaa tunnel client-name


Description: Specifies the default tunnel client name. If the tunnel client name is not included in the tunnel attributes that are returned from the domain map or authentication server, the system uses the default name. The no version deletes the client name. aaa tunnel client-name name no aaa tunnel client-name Mode(s): name default tunnel client name; a string of up to 32 characters

Syntax:

Global Configuration

aaa tunnel ignore


Description: Specifies whether or not the tunnel peers NAS-Port [5] and NAS-Port-Type [61] attributes should be used. The no version negates the command or restores the default of enable. aaa tunnel ignore { nas-port | nas-port-type } { enable | disable } no aaa tunnel ignore { nas-port | nas-port-type } Mode(s): nas-port configures the tunnel peers supplied nas-port value nas-port-type configures the tunnel peers supplied nas-port-type value

Syntax:

Global Configuration

aaa tunnel password ERX Edge Routers

aaa tunnel password


Description: Specifies the default tunnel password. If the tunnel password is not included in the tunnel attributes that are returned from the domain map or authentication server, the system uses the default password. The no version deletes the password. aaa tunnel password name no aaa tunnel password Mode(s): name default tunnel password; a string of up to 32 characters

Syntax:

Global Configuration

aaa wins
Description: Syntax: Specifies the IP address of the WINS name server. The no version sets the corresponding address to 0. aaa wins { primary | secondary } ipAddress no aaa wins { primary | secondary } Mode(s): primary specifies the primary WINS name server secondary specifies the secondary WINS name server ipAddress IP address of the name server

Global Configuration

access-class in
Description: Syntax: Restricts incoming connections between a particular virtual terminal line and the addresses in an access list. The no version removes access restrictions. access-class listName in no access-class [ listName ] in Mode(s): listName name of the access list

Line Configuration

10

access-list

access-list
Description: Defines a standard or extended IP access list. The extended access list enables you to specify a destination address or host, precedence, and type of service. Imposes an implicit last rule of deny ip any any to deny all routes that do not match previous rules in the access list. The no version removes the IP access list, the specified entry in an access list, or the log for a specified entry. Standard IP access list: access-list accessListName { permit | deny } { srcIP srcWildIp | [ host ] srcIPHost | any } [ log ] no access-list accessListName [ { permit | deny } { srcIP srcWildIp | [ host ] srcIPHost | any } [ log ] ] Extended IP access list: access-list accessListName { permit | deny } ip { srcIP srcWildIp | host srcIPHost | any } { dstIP dstWildIp | host dstIPHost | any } [ precedence preced ] [ tos typeOServ ] [ log ] no access-list accessListName [ { permit | deny } ip { srcIP srcWildIp | host srcIPHost | any } { dstIP dstWildIp | host dstIPHost | any } [ log ] ] Mode(s): accessListName string of up to 32 alphanumeric characters permit permits access if the conditions are matched deny denies access if the conditions are matched srcIP source IP address from which the packet is being sent srcWildIp wildcard mask IP address srcIPHost source host IP address; assumes a wildcard mask of 0 any creates an address of 0.0.0.0 with a wildcard mask of 255.255.255.255 dstIP destination IP address dstWildIp wildcard mask IP address for destination dstIPHost destination host IP address to which the packet is being sent preced number from 1 to the access list maximum that indicates the precedence level to which packets are filtered typeOServ number from 1 to the access list maximum that indicates the type of service to which packets are filtered log logs an Info event into the ipAccessList log whenever the access-list rule is matched

Syntax:

Global Configuration

address ERX Edge Routers

11

address
Description: From Domain Map Tunnel Configuration mode, sets the tunnel endpoint address of an L2TP or L2F tunnel. The no version removes the address of the tunnel. From Interface Configuration or Subinterface Configuration mode, configures RIP to run on the interface specified by the IP address or on an unnumbered interface. Uses the default values: send version is RIP version 1, receive version is RIP version 1 and version 2, authentication is not enabled. The no version deletes the RIP interface. Use the address commands to configure RIP attributes on the network. To set the tunnel endpoint address: address serverAddress no address serverAddress the IP address of the LNS or home gateway endpoint

Syntax:

To configure RIP: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } ipAddress address of IP interface where RIP will be run unnumbered specifies that RIP will be run on an unnumbered interface

interfaceType interface type; see Interface Types and Specifiers in


About This Guide

interfaceSpecifier particular interface; format varies according to


interface type; see Interface Types and Specifiers in About This Guide Mode(s): Interface Configuration (RIP), Subinterface Configuration (RIP), Domain Map Tunnel Configuration

12

address area

address area
Description: Creates an interface on which OSPF runs in the specified area, on top of the IP interface at the specified IP address. Uses the default values. The no version deletes OSPF interfaces. If the OSPF network was previously specified with the network area command, the OSPF interface already exists, and you do not need to use this command, unless you want to change the area of the OSPF interface to an area different from the one specified by the network area command. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } area { areaId | areaIdInt } ipAddress IP address of the interface on which OSPF will be run unnumbered configures OSPF on an unnumbered interface interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 14294967295

Syntax:

Note: Before you issue this command, you must first configure an interface with the IP address specified by ipAddress or an interface configured as unnumbered. Note: You must issue this command before issuing any other OSPF address command. Mode(s): Router Configuration

address authentication key ERX Edge Routers

13

address authentication key


Description: Specifies the password for text authentication and the key for MD5 authentication. The no version clears the key for the interface. Supported only in RIP version 2. Authentication is disabled by default. address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication key [ 0 | 8 ] authkey no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] authentication key ipAddress address of IP interface where RIP will be run unnumbered specifies that RIP will be run on an unnumbered interface interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide 0 indicates the authKey is entered in unencrypted form (plaintext); this is the default option 8 indicates the authKey is entered in encrypted form (ciphertext) authkey password sent with RIP messages or the key used to encrypt/decrypt RIP messages, depending on the authentication mode set for this interface.

Syntax:

Mode(s):

Interface Configuration, Subinterface Configuration

14

address authentication-key

address authentication-key
Description: Syntax: Assigns a password used by neighboring routers that are using OSPF simple password authentication. The no version deletes the password. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication-key [ 0 | 8 ] authKey ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide 0 indicates the authKey is entered in unencrypted form (plaintext); this is the default option 8 indicates the authKey is entered in encrypted form (ciphertext) authKey password, a continuous string of characters up to 8 characters in length

Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration

address authentication message-digest ERX Edge Routers

15

address authentication message-digest


Description: Specifies that MD5 authentication is used for the OSPF interface. The no version sets authentication for the interface to none, but leaves any configured MD5 key intact. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication message-digest ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Syntax:

Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration

16

address authentication mode

address authentication mode


Description: Specifies the type of authentication used on this interface. The no version removes authentication from the interface. Supported only in RIP version 2. Authentication is disabled by default. address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication mode { text | md5 keyID } no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] authentication mode Mode(s): ipAddress address of IP interface where RIP will be run unnumbered specifies RIP will be run on an unnumbered interface interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide text simple text password is sent with each RIP message. If the password is not possessed by neighbors, the message is rejected. md5 MD5 message-digest algorithms are used to encrypt and compress the RIP message. keyID number identifying the MD5 key. Neighbors must share the MD5 key to decrypt the message and encrypt the response.

Syntax:

Interface Configuration, Subinterface Configuration

address authentication-none ERX Edge Routers

17

address authentication-none
Description: Syntax: Specifies that no authentication is to be used for the OSPF interface. The no version has no effect. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication-none ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration

address cost
Description: Syntax: Specifies a cost metric for an OSPF interface. Used in the calculation of the SPF routing table. The no version resets the path cost to the default. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } cost intfCost ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide intfCost link state metric cost; a number in the range 065535; default value is 10

Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration

18

address dead-interval

address dead-interval
Description: Sets the time period that the systems neighbors should wait without seeing hello packets from the system before they declare the router to be down. The no version resets the dead interval to its default. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } dead-interval deadInterval ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide deadInterval number in the range 165535 seconds; default value is 40 seconds

Syntax:

Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration

address-family ERX Edge Routers

19

address-family
Description: For BGP, configures the router or a specific VRF to exchange IPv4 addresses in unicast, multicast, or VPN mode by creating the specified address family. The no version removes the address family. For RIP, configures RIP in a specific VRF to exchange IPv4 addresses. The no version removes the address family. For BGP: [ no ] address-family { ipv4 [ multicast | unicast | unicast vrf vrfName | vrf vrfName ] | vpnv4 [ unicast ] } For RIP: [ no ] address-family ipv4 [ unicast ] vrf vrfName Mode(s): ipv4 sessions that carry standard IPv4 address prefixes (default) multicast specifies multicast prefixes unicast specifies unicast prefixes (default) vrfName name of the VRF; string of 132 alphanumeric characters vpnv4 sessions that carry customer VPN-IPv4 prefixes, each of which has been made globally unique by adding an 8-byte route distinguisher

Syntax:

Router Configuration

address hello-interval
Description: Syntax: Specifies the interval between hello packets that the router sends on the interface. The no version resets the hello interval to its default. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } hello-interval helloInterval ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide helloInterval number in the range 165535 seconds; default value is 10 seconds

Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration

20

address message-digest-key md5

address message-digest-key md5


Description: Syntax: Enables OSPF MD5 authentication and configures the MD5 key. The no version deletes an MD5 key. address { ipAddress | unnumbered interfaceType interfaceSpecifier } message-digest-key keyID md5 [ 0 | 8 ] msgDigestKey no address { ipAddress | unnumbered interfaceType interfaceSpecifier } message-digest-key keyID ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide keyID key identifier in the range 1255 md5 specifies use of the MD5 algorithm 0 indicates that the msgDigestKey is entered in unencrypted form (plaintext); this is the default option 8 indicates that the msgDigestKey is entered in encrypted form (ciphertext) msgDigestKey OSPF password; a continuous string of up to 16 alphanumeric characters.

Note: If all the MD5 keys have been deleted, the authentication type is still MD5, but you need to configure MD5 keys. Note: To disable MD5 authentication for the interface, use the address authentication-none command. Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration

address network ERX Edge Routers

21

address network
Description: Configures the OSPF network type for the specified interface to something other than the default for the network medium. The no version restores the default value for the medium. address { ipAddress | unnumbered interfaceType interfaceSpecifier } network { broadcast | non-broadcast | point-to-point } no address { ipAddress | unnumbered interfaceType interfaceSpecifier } network ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide broadcast sets network type to broadcast non-broadcast sets network type to NBMA point-to-point sets network type to point-to-point

Syntax:

Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration

22

address passive-interface

address passive-interface
Description: Disables the transmission of routing updates on an interface. OSPF routing information is neither sent nor received through the specified router interface. The specified interface address appears as a stub network in the OSPF domain. The no version reenables the transmission of routing updates. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } passive-interface ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Syntax:

Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration

address-pool-name
Description: Syntax: Specifies an address pool name to associate with the domain name being configured. The no version removes the pool name. address-pool-name poolName no address-pool-name Mode(s): poolName name of the pool to associate with the domain name

Domain Map Configuration

address priority ERX Edge Routers

23

address priority
Description: Sets the router priority. Used in determining the designated router for the particular network. This designation only applies to multi-access networks. Every broadcast and nonbroadcast multiaccess network has a designated router. The no version restores the default value. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } priority intfPriority ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide intfPriority priority value, an 8-bit number in the range 1255; default value is 1

Syntax:

Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration

24

address receive version

address receive version


Description: Restricts the RIP version that the system can receive on an interface. The no version sets the interface back to the default value, receiving both RIP version 1 and version 2. address { ipAddress | unnumbered interfaceType interfaceSpecifier } receive version { 1 | 2 | 1 2 | 2 1 | off } no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] receive version Mode(s): ipAddress address of IP interface where RIP will be run unnumbered specifies that RIP will be run on an unnumbered interface interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide 1 specifies RIP version 1 only 2 specifies RIP version 2 only 1 2 specifies RIP version 1 and version 2; the default value 2 1 specifies RIP version 2 and version 1 off turns reception off

Syntax:

Interface Configuration, Subinterface Configuration

address retransmit-interval ERX Edge Routers

25

address retransmit-interval
Description: Specifies the time between LSA retransmissions for the interface when an acknowledgment for the LSA is not received. The no version restores the default value. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } retransmit-interval retransInterval ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide retransInterval number in the range 03600 seconds; default value is 5 seconds

Syntax:

Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration

26

address send version

address send version


Description: Restricts the RIP version that the system can send on an interface. The no version sets the interface back to the default value, sending only RIP version 1. address { ipAddress | unnumbered interfaceType interfaceSpecifier } send version {1 | 2 | 1 2 | 2 1 | off } no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] send version Mode(s): ipAddress address of IP interface where RIP will be run unnumbered specifies that RIP will be run on an unnumbered interface interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide 1 specifies RIP version 1 only 2 specifies RIP version 2 only 1 2 specifies RIP version 1 and version 2 2 1 specifies RIP version 2 and version 1 off turns reception off

Syntax:

Interface Configuration, Subinterface Configuration

address transmit-delay ERX Edge Routers

27

address transmit-delay
Description: Syntax: Sets the estimated time it takes to transmit a link state update packet on the interface. The no version restores the default value. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } transmit-delay transmDelay ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide transmDelay link state transmit delay, a number in the range 03600 seconds; default value is 1 second

Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration

28

aggregate-address

aggregate-address
Description: Syntax: Creates an aggregate entry in a BGP routing table. The no version removes the aggregate. [ no ] aggregate-address address mask [ as-set | summary-only | attribute-map attributeMapTag | advertise-map advertiseMapTag | suppress-map suppressMapName ]* address aggregate IP address mask aggregate IP mask as-set if the as-set option is not specified, the path attributes of the aggregate route are set in the same way as locally originated routes, except that the atomic_aggregate and aggregator attributes are added. If the as-set option is used, the path attributes of the aggregate route are determined by combining the path attributes of the aggregated routes as described in RFC 1771. If the as-set option is used, the path attributes of the aggregate route may change whenever one of the aggregated routes changes, causing the aggregate route to be readvertised. summary-only filters all more specific routes from updates. summary-only not only creates the aggregate route but also suppresses advertisements of more-specific routes to all neighbors. If you only want to suppress advertisements to certain neighbors, you may use the neighbor distribute-list command, with caution. If a more-specific route leaks out, all BGP speakers will prefer that route over the less-specific aggregate you are generating (using longest-match routing). Alternatively, you can use the suppress-map keyword to suppress specific routes attributeMapTag string of up to 32 characters that identifies the route map used to set the attributes of the aggregate route advertiseMapTag string of up to 32 characters that identifies the route map used to set the routes to create AS-SET origin communities in the range suppressMapName string of up to 32 characters that identifies a route map that filters routes to be suppressed * indicates that one or more parameters can be repeated multiple times in a list in the command line

Mode(s):

Address Family Configuration, Router Configuration

aggressive-mode
Description: Syntax: Mode(s): Allows aggressive mode negotiation for the tunnel. The no version restores the default, main mode. [ no ] aggressive-mode ISAKMP Policy Configuration

allow ERX Edge Routers

29

allow
Description: Syntax: Specifies the domain names that are to be allowed access to AAA authentication. The no version negates the command. [ no ] allow domainName Mode(s): domainName name of the domain; maximum of 64 characters

AAA Profile Configuration

append-after
Description: Add a next hop after a particular index in the MPLS explicit path. The sequence numbers for existing hops after the index adjust automatically. There is no no version. append-after indexNumber next-address ipAddress [ mask ipMask ] [ loose ] index number of a node in an ordered set of abstract nodes ipAddress address of the next hop ipMask [ not currently used] mask for the next adjacent address loose indicates the node is not necessarily directly connected (adjacent) to the previous node in the path. If loose is not configured, the configuration defaults to strict. Strict indicates that the node is directly connected to the previous node.

Syntax:

Mode(s):

Explicit Path Configuration

aps force
Description: Forces the specified interface to be replaced by the inactive interface in an APS/MSP group. The no version allows the specified interface to resume operation. aps force channelNumber no aps force [ channelNumber ] channelNumber number that identifies the working or protect interface.The number of the working interface is the same as the number of the corresponding active port on the I/O module. If there are n active ports on the I/O module, working interfaces are identified by the numbers 0 to n-1. Protect interfaces are identified by the numbers of the corresponding working interfaces plus n. For example, if the working interface has the number 0, and there is one active port on the I/O module, the corresponding protect interface has the number 1. Mode(s): Controller Configuration

Syntax:

30

aps group

aps group
Description: Syntax: Assigns an interface to an APS/MSP group. aps group groupName no aps group Mode(s): groupName name of the APS/MSP group to which the active and standby interfaces belong; up to 32 characters in length

Controller Configuration

aps lockout
Description: Prevents the working interface from switching to the protect interface. The no version restores the default situation, in which the working interface can switch to the protect interface. aps lockout [ channelNumber ] no aps lockout channelNumber number that identifies the working interface. The number of the working interface is the same as the number of the corresponding active port on the I/O module. Mode(s): Controller Configuration

Syntax:

aps manual
Description: Forces the working interface to switch to the protect interface, unless a request of equal or higher priority exists. The no version allows the specified working interface to resume the active role. aps manual channelNumber no aps manual [ channelNumber ] channelNumber number that identifies the working or protect interface.The number of the working interface is the same as the number of the corresponding active port on the I/O module. If there are n active ports on the I/O module, working interfaces are identified by the numbers 0 to n-1. Protect interfaces are identified by the numbers of the corresponding working interfaces plus n. For example, if the working interface has the number 0, and there is one active port on the I/O module, the corresponding protect interface has the number 1. Syntax: Controller Configuration

Syntax:

aps protect ERX Edge Routers

31

aps protect
Description: Syntax: Configures an interface as a protect interface. The no version removes the relationship between the protect interface and the active interface. aps protect [ channelNumber ] no aps protect channelNumber number that identifies the working interface. The number of the working interface is the same as the number of the corresponding active port on the I/O module. Mode(s): Controller Configuration

aps revert
Description: Syntax: Configures the APS/MSP group to operate in revertive mode. The no version restores the default setting, non-revertive mode. aps revert minutes no aps revert Mode(s): minutes number of minutes in the range 512 at which the interface resumes the active role after that interface becomes available

Controller Configuration

aps unidirectional
Description: Configures the APS/MSP group to operate in unidirectional mode, the default setting. The no version configures the APS/MSP group to operate in bidirectional mode. aps unidirectional no aps unidirectional Mode(s): Controller Configuration

Syntax:

32

aps working

aps working
Description: Syntax: Configures an interface as a working interface. The no version removes the configuration. aps working [ channelNumber ] no aps working channelNumber number that identifies the working interface. The number of the working interface is the same as the number of the corresponding active port on the I/O module. Mode(s): Controller Configuration

area
Description: This command has only a no version. See the no area command for a complete description and syntax.

area-authentication-key
Description: Syntax: Assigns a password used by neighboring routers for authentication of IS-IS level 1 LSPs, CSNPs, and PSNPs. The no version deletes the password. [ no ] area-authentication-key [ 0 | 8 ] authKey no area-authentication-key Mode(s): 0 indicates the authKey is entered in unencrypted form (plaintext); this is the default option 8 indicates the authKey is entered in encrypted form (ciphertext) authKey password, a continuous string of characters up to 8 characters in length

Router Configuration

area default-cost ERX Edge Routers

33

area default-cost
Description: Specifies a cost for the default summary route sent into a stub area. A stub area is an OSPF area that carries a default route, intra-area routes, and interarea routes, but does not carry external routes. You cannot configure virtual links across a stub area. Stub areas cannot contain an ASBR. The no version removes the configured default route cost. area { areaId | areaIdInt } default-cost defaultCost no area { areaId | areaIdInt } default-cost Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value 04294967295 defaultCost stub areas advertised external route cost (cost metric); an integer in the range 016777215

Syntax:

Router Configuration

34

area-message-digest-key

area-message-digest-key
Description: Specifies an HMAC MD5 key that the system uses to create a secure, encrypted message digest of each IS-IS level 1 packet (LSPs, CSNPs, and PSNPs). The digest is inserted into the packet from which it is created. Using this algorithm for area routers protects against unauthorized routers injecting false routing information into your network. You can specify when the system will start (default is the current time) and stop (default is never) accepting packets that include a digest made with this key. You can specify when the system will start (default is the current time plus 2 minutes) and stop (default is never) generating packets that include a digest made with this key. The no version deletes the key specified by the key-id. area-message-digest-key keyId hmac-md5 [ 0 | 8 ] key [ start-accept startAcceptTime [ { startAcceptMonth startAcceptDay | startAcceptDay startAcceptMonth } startAcceptYear ] ] [ start-generate startGenTime [ { startGenMonth startGenDay | startGenDay startGenMonth } startGenYear ] ] [ stop-accept { never | stopAcceptTime [ { stopAcceptMonth stopAcceptDay | stopAcceptDay stopAcceptMonth } stopAcceptYear ] } ] [ stop-generate { never | stopGenTime [ { stopGenMonth stopGenDay | stopGenDay stopGenMonth } stopGenYear ] } ] no area-message-digest-key keyId keyId integer from 1 to 255 that is a unique identifier for the secret key, sent with the message digest in the packet. 0 indicates key is entered in unencrypted form (plaintext); default option 8 indicates the key is entered in encrypted form (ciphertext) key string of up to 20 alphanumeric characters; secret key used by the HMAC MD5 algorithm to generate the message digest startAcceptTime, startAcceptMonth, startAcceptDay, startAcceptYear time, month, day, year that the system will start accepting packets created with this password. Use military time format HH:MM[:SS ]. startGenTime, startGenMonth, startGenDay, startGenYear time, month, day, year that the system will start inserting this password into packets. Use military time format HH:MM[:SS ]. never indicates the system never stops accepting or generating packets; overrides previously specified stop times and keeps using the authentication key in sending and receiving PDUs with the corresponding authentication indefinitely

Syntax:

area nssa ERX Edge Routers

35

stopAcceptTime, stopAcceptMonth, stopAcceptDay, stopAcceptYear time, month, day, year that the system will stop accepting packets created with this password. Use military time format HH:MM[:SS ]. stopGenTime, stopGenMonth, stopGenDay, stopGenYear time, month, day, year that the system will stop inserting this password into packets. Use military time format HH:MM[:SS ].

Mode(s):

Router Configuration

area nssa
Description: Configures an area as an NSSA and controls generation of type 7 default LSAs. NSSAs are similar to stub areas but have the additional capability of importing AS external routes in a limited fashion. The no version removes the specified option for default-information-originate, removes default-information-originate, or removes the NSSA designation from the area. [ no ] area { areaId | areaIdInt } nssa [ default-information-originate [ always | metric absoluteValue | metric-type 1 | metric-type 2 | route-map mapTag ]* ] Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 default-information-originate causes the generation of a type 7 default LSA if a default route exists in the routing table. always creates the default route if it doesnt exist absoluteValue metric applied to the generated type 7 default LSAs; ranges from 0429496729 metric-type 1 cost of the external routes is equal to the sum of all internal costs and the external cost metric-type 2 cost of the external routes is equal to the external cost alone; this is the OSPF default mapTag string of up to 32 alphanumeric characters that specifies a route map applied to the generated type 7 default LSAs * indicates that one or more parameters can be repeated multiple times in a list in the command line

Syntax:

Router Configuration

36

area range

area range
Description: Aggregates the routes at an area boundary. By default, the range of configured networks is advertised in type 3 (summary) LSAs. The no version disables this function. [ no ] area { areaId | areaIdInt } range ipAddress mask [ do-not-advertise ] Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address to match mask IP address mask do-not-advertise specifies that the range of configured networks is not advertised

Syntax:

Router Configuration

area stub
Description: Defines an area as a stub area. A stub area is an OSPF area that carries a default route, intra-area routes, and interarea routes, but does not carry AS external routes. This reduces the size of the area's OSPF database and decreases memory usage for external routers in the stub area. The no version disables this function. [ no ] area { areaId | areaIdInt } stub Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295

Syntax:

Router Configuration

area virtual-link
Description: Syntax: Defines an OSPF virtual link. The no version removes the virtual link. [ no ] area { areaId | areaIdInt } virtual-link ipAddress Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address associated with the virtual link neighbor

Router Configuration

area virtual-link authentication-key ERX Edge Routers

37

area virtual-link authentication-key


Description: Syntax: Configures simple password (type 1) authentication for OSPF virtual links. The no version removes the password. [ no ] area { areaID | areaIdInt } virtual-link ipAddress authentication-key [ 0 | 8 ] line areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address of the virtual link neighbor 0 indicates that the line is entered in unencrypted form (plaintext); this is the default option 8 indicates that the line is entered in encrypted form (ciphertext) line password to be used by neighbors. All neighboring routers on the same network must have the same password. The password can be a continuous string of up to 16 alphanumeric characters.

Mode(s):

Router Configuration

area virtual-link authentication message-digest


Description: Specifies that MD5 authentication is used for the virtual link. The no version sets the authentication for the virtual link to none, but leaves any configured MD5 key intact. [ no ] area { areaID | areaIdInt } virtual-link ipAddress authentication message-digest Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address of the virtual link neighbor

Syntax:

Router Configuration

area virtual-link authentication-none


Description: Syntax: Specifies that no authentication is to be used for the virtual link. The no version has no effect. [ no ] area { areaId | areaIdInt } virtual-link ipAddress authentication-none Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address of the virtual link neighbor

Router Configuration

38

area virtual-link dead-interval

area virtual-link dead-interval


Description: Syntax: Defines an OSPF virtual link and the time interval allowed for detecting a dead router. The no version removes the virtual links dead interval. [ no ] area { areaID | areaIdInt } virtual link ipAddress dead-interval deadInterval Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address of the virtual link neighbor deadInterval integer in the range 18192 seconds

Router Configuration

area virtual-link hello-interval


Description: Defines an OSPF virtual link and the time between the hello packets. The hello interval value must be the same for both ends of the virtual link. The no version removes the virtual links hello interval. [ no ] area { areaId | areaIdInt } virtual-link ipAddress hello-interval helloInterval Mode(s): areaId OSPF area ID in IP address format. areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address associated with the virtual link neighbor helloInterval integer in the range 18192 seconds

Syntax:

Router Configuration

area virtual-link message-digest-key md5 ERX Edge Routers

39

area virtual-link message-digest-key md5


Description: Syntax: Enables MD5 authentication and configures MD5 keys for virtual links. The no version deletes MD5 keys. area { areaId | areaIdInt } virtual-link ipAddress message-digest-key md5KeyId md5 [ 0 | 8 ] msgDigestKey no area { areaId | areaIdInt } virtual-link ipAddress message-digest-key md5KeyId areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address of the virtual link neighbor md5KeyId key identifier in the range 1255 0 indicates that the msgDigestKey is entered in unencrypted form (plaintext); this is the default option 8 indicates that the msgDigestKey is entered in encrypted form (ciphertext) msgDigestKey password to be used by neighbors. All neighboring routers on the same network must have the same password. The password can be a continuous string of up to 16 alphanumeric characters.

Note: If you delete all the MD5 keys, the authentication type for the virtual link is still MD5, but you need to configure MD5 keys. Note: To disable MD5 authentication for the virtual link, use the area

virtual-link authentication-none command. Mode(s): Router Configuration

area virtual-link retransmit-interval


Description: Defines an OSPF virtual link and the time between link state advertisement retransmissions for the adjacency belonging to the virtual link. The no version removes the virtual links retransmit interval. [ no ] area { areaId | areaIdInt } virtual-link ipAddress retransmit-interval retransmInterval Mode(s): areaId OSPF area ID in IP address format. areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address of the virtual link neighbor retransmInterval LSA retransmit interval; an integer in the range 18192 seconds

Syntax:

Router Configuration

40

area virtual-link transmit-delay

area virtual-link transmit-delay


Description: Defines an OSPF virtual link and the estimated time it takes to transmit a link state update packet on the virtual link. The no version removes the virtual links transmit delay. [ no ] area { areaId | areaIdInt } virtual-link ipAddress transmit-delay transmDelay Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address associated with the virtual link neighbor transmDelay LSA transmit delay; an integer in the range 18192 seconds

Syntax:

Router Configuration

arp
Description: Adds a permanent entry in the ARP cache. The no version removes an entry from the ARP cache. This command applies only on an Ethernet or bridged Ethernet interface. [ no ] arp [ vrf vrfName ] ipAddress { interfaceType interfaceSpecifier [ macAddress [ validate ] ] | macAddress } Mode(s): vrfName name of the VRF to which the command applies; string of 132 alphanumeric characters ipAddress IP address in 32-bit dotted-decimal format corresponding to the local data link address interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide macAddress MAC address of the interface validate allows the inclusion of MAC validation entries

Syntax:

Global Configuration

arp timeout ERX Edge Routers

41

arp timeout
Description: Specifies how long an entry remains in the ARP cache. You can set the ARP timeout only on bridged Ethernet and Fast Ethernet interfaces on the FE-2 module. You cannot set the timeout on the SRP module. The default value is 21600 seconds (6 hours). Use the show config command to display the current value. The no version restores the default value. arp timeout timeoutVal no arp timeout Mode(s): timeoutVal time in seconds that an entry remains in the ARP cache

Syntax:

Interface Configuration

atm
Description: The system supports the configuration of traffic-shaping parameters for PPPoA via domain-based parameters and RADIUS. The no version removes the ATM traffic-shaping configuration. atm { ubr | ubrpcr pcr | nrtvbr pcr scr mbs | cbr pcr } no atm Mode(s): ubr sets the traffic category to unspecified bit rate ubrpcr sets the traffic category to unspecified bit rate with peak cell rate pcr peak cell rate nrtvbr sets the traffic category to nonreal time variable bit rate scr sustained cell rate mbs maximum burst size cbr sets the traffic category to constant bit rate

Syntax:

Domain Map Configuration

atm aal5 description


Description: Assigns a text description or alias to an ATM AAL5 interface. The no version removes the text description or alias. Use the show atm subinterface command to display the text description.The atm description is pushed out to RADIUS during authentication/accounting. atm aal5 description name no atm aal5 description Mode(s): name alias for the AAL5 interface; up to 32 characters

Syntax:

Interface Configuration

42

atm aal5 shutdown

atm aal5 shutdown


Description: Syntax: Mode(s): Sets the administrative state of an ATM AAL5 interface to disabled. The no version enables a disabled interface. [ no ] atm aal5 shutdown Interface Configuration

atm aal5 snmp trap link-status


Description: Syntax: Mode(s): Enables SNMP link status traps on the AAL5 layer on a per-interface basis. The no version disables the traps. [ no ] atm aal5 snmp trap link-status Interface Configuration

atm atm1483 description


Description: Assigns a text description or alias to an ATM 1483 interface. The no version removes the text description or alias. Use the show atm aal5 interface to display the text description. The atm description is pushed out to RADIUS during authentication/accounting. atm atm1483 description name no atm atm1483 description Mode(s): name alias for the atm atm1483 interface; up to 15 characters

Syntax:

Subinterface Configuration

atm atm1483 mtu


Description: Syntax: Sets the MTU size for an ATM 1483 subinterface. The no version restores the default MTU size of 9180. atm atm1483 mtu size no atm atm1483 mtu Mode(s): size maximum number of packet transmissions permitted on an ATM 1483 subinterface; the valid range is 2569180. The default is 9180.

Subinterface Configuration

atm atm1483 shutdown ERX Edge Routers

43

atm atm1483 shutdown


Description: Syntax: Mode(s): Sets the administrative state of an ATM 1483 subinterface to disabled. The no version enables a disabled subinterface. [ no ] atm atm1483 shutdown Subinterface Configuration

atm atm1483 snmp trap link-status


Description: Syntax: Mode(s): Enables SNMP link status traps on the ATM1483 layer. The no version disables the traps. [ no ] atm atm1483 snmp trap link-status Subinterface Configuration

atm auto-configuration
Description: Enables auto configuration of ILMI. Auto configuration is enabled by default. The no version disables auto configuration and sets the ILMI parameters to the UNI version configured using the atm uni-version command, which has a default value of UNI 4.0. Entering the atm auto-configuration command overrides any previous configuration of the atm uni-version command. [ no ] atm auto-configuration Interface Configuration

Syntax: Mode(s):

atm cac
Description: Enables CAC on the ATM interface. If the subscription limit or UBR weight parameters are set to zero, the system uses the effective port bandwidth as the subscription bandwidth. The effective bandwidth varies according to line module. The no version disables CAC on the interface. [ no ] atm cac [ subscriptionBandwidth ] [ ubr ubrWeight ] subscriptionBandwidth maximum allowable bandwidth on this port in the range 02147482647 kbps; the default value is 0 ubrWeight bandwidth associated with UBR and UBR-PCR connections in the range is 02147482647 kbps; the default value is 0

Syntax:

Note: If you modify one of these parameters after CAC is enabled, you must modify both parameters. Otherwise, the parameter not specified reverts to its default value. Mode(s): Interface Configuration

44

atm clock internal

atm clock internal


Description: Causes the ATM interface to generate the transmit clock internally. The no version causes ATM interfaces to recover the clock from the received signal. If the internal clock is chosen and no internal source is specified, then the internal clock source is taken from the line module. [ no ] atm clock internal [ internalSource ] internalSource one of the following:

Syntax:

module specify that the internal clock is from the line module chassis specify that the internal clock is from the configured system
clock Mode(s): Interface Configuration

atm description
Description: Assigns a text description or alias to the interface. The no version removes the text description or alias. The show atm interface command displays the text description.The description is pushed out to RADIUS during authentication/accounting. atm description name no atm description Mode(s): name alias for the atm interface; up to 32 characters

Syntax:

Interface Configuration

atm esi-address
Description: Syntax: Specifies an ATM ESI address for the subinterface. The no version removes the ESI address. atm esi-address esiAddress no atm esi-address Mode(s): esiAddress end system ID portion of the ATM NSAP address in the format xxxxxxxxxxxx.xx

Subinterface Configuration

atm framing ERX Edge Routers

45

atm framing
Description: Configures T3 or E3 framing on an ATM interface. The no version returns framing to the default. For a T3 interface, the default is cbitplcp. For an E3 interface, the default is g751plcp. atm framing framingType no atm framing framingType one of the following:

Syntax:

cbitadm c-bit with ATM direct mapping for a DS3 (T3) interface cbitplcp c-bit with PLCP framing for a DS3 (T3) interface (default for
T3)

g832adm G.832 ATM direct mapping for an E3 interface g751adm G.751 ATM direct mapping for an E3 interface g751plcp G.751 PLCP mapping for an E3 interface (default for E3) m23adm M23 ATM direct mapping for a DS3 (T3) interface m23plcp M23 with PLCP framing for a DS3 (T3)
Mode(s): Interface Configuration

atm ilmi-enable
Description: Syntax: Mode(s): Enables ILMI on the interface. The no version removes the ILMI PVC. [ no ] atm ilmi-enable Interface Configuration

atm ilmi-keepalive
Description: Enables generation of ILMI keepalive messages on the system. The no version disables the generation of keepalive messages. Enabling generation of keepalive messages has an effect on the operational state of the ATM interface. [ no ] atm ilmi-keepalive [ seconds ] Mode(s): seconds number in the range 04294967295; the interval in seconds between two consecutive ILMI keepalive requests

Syntax:

Interface Configuration

46

atm lbo

atm lbo
Description: Specifies the cable length (line build-out) for the ATM T3 or E3 interface. The length of cable determines power requirements. The no version restores the default value. atm lbo { long | short } no atm lbo Mode(s): short a cable length in the range 0225 feet (the default) long a cable length in the range 255450 feet

Syntax:

Interface Configuration

atm oam
Description: Syntax: Configures F4 OAM on an interface or circuit. The no version deletes F4 OAM circuits. atm oam [ vpi ] [ [ seg-loopback | end-loopback [ loopback-timer time ] ] [ cc { source | sink | both } ] ] no atm oam [ vpi ] [ [ seg-loopback | end-loopback [ loopback-timer time ] ] ] Note: If you do not specify any options, both end-to-end and segment loopback are enabled on all VPIs on the interface. vpi VPI on which you want to enable F4 OAM. If you do not specify a VPI, F4 OAM flow is enabled on all VPIs on the interface. seg-loopback enables F4 segment OAM end-loopback enables F4 end-to-end OAM loopback-timer to generate F4 loopback cells on the VPI, you must configure the loopback timer; you can set the loopback timer only for end-to-end loopback time time interval in the range 0600 seconds between transmissions of F4 loopback cells. This value is a multiple of 20 and is based on the number of circuits with VC integrity enabled. The values are 20 seconds for 11999 circuits, 40 seconds for 20003999 circuits, 60 seconds for 40005999 circuits, and so on. These values are used regardless of the setting of this parameter. cc enables CC cells on the PVC; you can enable CC cells only on data circuits, not on control circuits, such as ILMI or signaling circuits sink enables this VC as a sink point (cell receiver) source enables this VC as the source point (cell generator) both enables this VC as both a sink point and a source point

Mode(s):

Interface Configuration, Subinterface Configuration

atm oam flush ERX Edge Routers

47

atm oam flush


Description: Indicates that all OAM cells received on an interface should be ignored. OAM performs fault management and performance management functions on an ATM interface. The no version disables the feature. [ no ] atm oam flush [ alarm-cells ] Mode(s): alarm-cells causes the system to ignore only AIS and RDI cells and to accept all other OAM cells

Syntax:

Interface Configuration

atm oam loopback-location


Description: Syntax: Sets the location ID of the ATM interface. The no version returns the loopback location to the default setting of all 1s (ones). atm oam loopback-location locationID [ no ] atm oam loopback-location Mode(s): locationID value of the four-octet long location ID of the ATM interface

Interface Configuration, Subinterface Configuration

48

atm pvc

atm pvc
Description: Syntax: Creates a PVC on an ATM interface. The no version removes the specified PVC. atm pvc vcd vpi vci { encapsulation } [ { cbr cbr } | { peak [ average burst [ rt ] ] } ] [ oam [ seconds | cc [ segment | end-to-end ] { source | sink | both } ] ] [ inArp [ minutes ] ] no atm pvc vcd vcd virtual circuit descriptor that is an identifier for the VC in other commands; the range is 12147483647 vpi virtual path identifier of this PVC. The allowable numeric range depends on the line module capabilities and current configuration. The VPI and VCI cannot both be set to 0; if one is 0, the other cannot be 0. vci virtual circuit identifier of this PVC. The allowable numeric range depends on the line module capabilities and current configuration. The VPI and VCI cannot both be set to 0; if one is 0, the other cannot be 0. encapsulation one of the following:

aal5snap LLC encapsulated circuit; LLC/SNAP precedes the protocol


datagram

aal5mux ip VC-based multiplexed circuit used for IP only aal5autoconfig enables autodetection of the 1483 encapsulation
(LLC/SNAP or VC multiplexed)

ilmi integrated local management interface encapsulation qsaal Q.2931 signalling


peak PCR in Kbps average average rate in Kbps; also referred to as SCR burst length in cells of the burst.; also referred to as MBS rt selects VBR-RT as the service type; the default type is VBR-NRT. You can select rt only if you set the peak, average, and burst parameters. cbr constant bit rate in Kbps oam enable generation of OAM F5 loopback cells on this circuit. This option enables VC integrity features that have an effect on the operational state of the ATM PVC. seconds - time interval in seconds between transmissions of OAM F5 end-to-end loopback cells for VC connectivity verification. This value is a multiple of 20 and is based on the number of circuits with VC integrity

atm shutdown ERX Edge Routers

49

enabled. The values are: 20 seconds for 11999 circuits, 40 seconds for 20003999 circuits, 60 seconds for 40005999 circuits, and so on. These values are used regardless of the setting of this parameter. inarp enables Inverse ARP minutes InARP refresh rate in minutes; 15 minutes is the default

Note: The optional peak, average, and burst parameters configure traffic-shaping parameters for the circuit. The allowable traffic-shaping features and range specifications depend on the line module capabilities. Mode(s): cc enables CC cells on the PVC; you can enable CC cells only on data circuits, not on control circuits, such as ILMI or signaling circuits segment opens an OAM CC segment cell flow end-to-end opens an OAM CC end-to-end cell flow sink enables this VC as a sink point (cell receiver) source enables this VC as the source point (cell generator) both enables this VC as both a sink point and a source point

Interface Configuration, Subinterface Configuration

atm shutdown
Description: Syntax: Mode(s): Administratively disables an ATM interface. The no version enables a disabled interface. [ no ] atm shutdown Interface Configuration

atm snmp trap link-status


Description: Syntax: Mode(s): Enables SNMP link status traps on the ATM layer on a per-interface basis. The no version disables the traps. [ no ] atm snmp trap link-status Interface Configuration

atm sonet stm-1


Description: Syntax: Mode(s): Sets the mode of operation on the physical interface to SDH STM-1. The no version restores the default value, SONET STS-3c operation. [ no ] atm sonet stm-1 Interface Configuration

50

atm svc

atm svc
Description: Defines an SVC on an ATM subinterface. The system will attempt to set up an SVC to the destination address with the requested traffic parameters and encapsulation. The no version removes the specified SVC definition. atm svc nsap nsapAddress [ { encapsulation } [ { cbr cbr } | peak [ average burst [ rt ] ] ] ] no [ atm ] svc [ nsap nsapAddress ] nsapAddress destination address in the format 12 { { 2 xx xxxxxxxxxxxxxxxxxxxxxxx 2 24 xxxxxxxxxxxx xx

Syntax:

encapsulation one of the following:

aal5snap LLC encapsulated circuit; LLC/SNAP precedes the protocol


datagram

aal5mux ip VC-based multiplexed circuit used for IP only


Mode(s): cbr constant bit rate in Kbps peak PCR in Kbps average average rate in Kbps; also referred to as SCR burst length in cells of the burst.; also referred to as MBS rt selects VBR-RT as the service type

Subinterface Configuration

atm uni-version
Description: Syntax: Specifies the UNI version the interface should use. There is no no version. atm uni-version versionNumber Mode(s): versionNumber UNI version number: 3.0, 3.1, or 4.0

Interface Configuration

atm vc-per-vp ERX Edge Routers

51

atm vc-per-vp
Description: Configures the number of virtual circuits per virtual path. This command controls the VPI and VCI range on the ATM interface. The allowable configuration range depends on the line module. The system will not execute the command if any virtual circuits are open on the interface. The no version restores the default. Note: The minimum number of VCs per VP is 4096 for 0C3-4 modules and 1024 for UT3a modules. If you enter a value that is below the minimum, the system uses the minimum value. Syntax: atm vc-per-vp [ vcCount ] no atm vc-per-vp Mode(s): vcCount number of virtual circuits per virtual path

Interface Configuration

atm vp-tunnel
Description: Syntax: Defines a virtual path tunnel and configures the rate of traffic flow within the tunnel. The no version removes the restriction. atm vp-tunnel vpi [ cbr ] kbps no atm vp-tunnel vpi vpi number in the range 0255; virtual path identifier of this PVC cbr specifies the service class as constant bit rate kbps tunnel rate for a virtual path. The aggregate to this traffic from all circuits configured in the tunnel is held to the specified rate. Certain line modules may have minimum rates for VP tunnels.

Mode(s):

Interface Configuration

authentication
Description: Syntax: Specifies the authentication method to use in the IKE policy. The no version restores the default, preshared keys. authentication { pre-share } no authentication Mode(s): pre-share specifies preshared keys as the authentication method

ISAKMP Policy Configuration

52

authentication key

authentication key
Description: Specifies the password for text authentication and the key for MD5 authentication for RIP remote-neighbor interface. The no version clears the key for the interface. Supported only in RIP version 2. Authentication is disabled by default. authentication key [ 0 | 8 ] authkey no authentication key 0 the authKey is entered in unencrypted form (plaintext); this is the default option 8 the authKey is entered in encrypted form (ciphertext) authkey specifies the password sent with RIP messages or the key used to encrypt/decrypt RIP messages, depending on the authentication mode set for this remote-neighbor interface.

Syntax:

Mode(s):

Remote Neighbor Configuration

authentication-key
Description: Syntax: Enables simple password authentication and assigns a password used by OSPF remote neighbors. The no version deletes the password. authentication-key [ 0 | 8 ] authKey no authentication-key Mode(s): 0 the authKey is entered in unencrypted form (plaintext); this is the default option 8 the authKey is entered in encrypted form (ciphertext) authKey a password, a continuous string of characters up to 8 characters in length

Remote Neighbor Configuration

authentication message-digest
Description: Syntax: Mode(s): Specifies that MD5 authentication is used for the OSPF remote-neighbor interface. There is no no version. authentication message-digest Remote Neighbor Configuration

authentication mode ERX Edge Routers

53

authentication mode
Description: Specifies the type of authentication used on the RIP remote-neighbor interface. The no version removes authentication from the interface. Supported only in RIP version 2. Authentication is disabled by default. authentication mode { text | md5 keyID } no authentication mode text a simple text password is sent with each RIP message. If the password is not possessed by remote neighbors, the message is rejected. md5 MD5 message-digest algorithms are used to encrypt and compress the RIP message. keyID number identifying the MD5 key in the range 1255. Remote neighbors must share the MD5 key to decrypt the message and encrypt the response.

Syntax:

Mode(s):

Remote Neighbor Configuration

authentication-none
Description: Syntax: Mode(s): Specifies that no authentication is to be used for the OSPF remote-neighbor interface. There is no no version. authentication-none Remote Neighbor Configuration

auto-configure
Description: Specifies the type(s) of dynamic encapsulations that will be accepted or detected by the static ATM 1483 interface.The command may be entered repeatedly in ATM subinterface mode. [ no ] auto-configure upperInterfaceType Mode(s): upperInterfaceType dynamic encapsulation type: bridgedEthernet, ip, ppp, pppoe

Syntax:

Interface Configuration, Subinterface Configuration

automatic-virtual-link
Description: Syntax: Mode(s): Enables or disables automatic virtual link configuration. The no version disables an automatic virtual link. [ no ] automatic-virtual-link Router Configuration

54

auto-summary

auto-summary
Description: Reenables the automatic summarization of routes redistributed into BGP to their natural network masks. Automatic summarization is enabled by default. The no version disables automatic summarization. [ no ] auto-summary Address Family Configuration, Router Configuration

Syntax: Mode(s):

bandwidth ERX Edge Routers

55

bandwidth
Description: Specifies the total bandwidth available on the interface. The no version removes the admission control configuration from the interface. For total reservable bandwidth, see the mpls bandwidth command. bandwidth bandwidth no bandwidth Mode(s): bandwidth available bandwidth in kilobits per second, a value from 110,000,000

Syntax:

Interface Configuration, Subinterface Configuration

bandwidth oversubscription
Description: Syntax: Mode(s): Allows the line modules to operate below line rate performance. The no version forces the line modules to operate at line rate performance. [ no ] bandwidth oversubscription Privileged Exec

banner
Description: Configures message-of-the-day, login, or exec banners to be displayed by the CLI. If you do not specify an option, the behavior is the same as if you specified the motd option. The no version deletes the banner. banner [ motd | login | exec ] bannerText no banner [ motd | login | exec ] motd displays the banner when a console or vty connection is initiated login displays the banner before any user authentication (line or RADIUS authentication); the banner is also displayed if user authentication is not configured exec displays the banner after user authentication (if any) and before the first prompt of a CLI session bannerText alphanumeric string truncated at 1024 characters; delimited by the first character of the string, which must be repeated at the end of the string and must not occur anywhere else in the string

Syntax:

Mode(s):

Global Configuration

56

baseline aaa

baseline aaa
Description: Sets a statistics baseline for authentication and authorization statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline aaa Privileged Exec

Syntax: Mode(s):

baseline cbf interface


Description: Sets a statistics baseline for CBF interfaces. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline cbf interface interfaceType interfaceSpecifier Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier see Interface Types and Specifiers in About This Guide.

Syntax:

Privileged Exec

baseline clns
Description: Sets a statistics baseline for CLNS. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline clns [ interfaceType interfaceSpecifier ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Syntax:

Privileged Exec

baseline dhcp ERX Edge Routers

57

baseline dhcp
Description: Sets a statistics baseline for DHCP relay statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline dhcp { server | relay } Mode(s): server sets baseline for DHCP proxy server statistics relay sets baseline for DHCP relay statistics

Syntax:

Privileged Exec

baseline frame-relay interface


Description: Sets a statistics baseline for Frame Relay and MFR interfaces, subinterfaces, and circuits. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline frame-relay interface interfaceType interfaceSpecifier [ dlci ] interfaceType one of the following interface types:

Syntax:

hssi limits baseline for HSSI interface mlframe-relay limits baseline for an MFR bundle or subinterface pos limits baseline for POS interface serial limits baseline for serial interface tunnel limits baseline for GRE tunnel interface
Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide dlci DLCI number to be used on the specified subinterface to identify a virtual circuit in the range 161007

Privileged Exec

58

baseline frame-relay multilinkinterface

baseline frame-relay multilinkinterface


Description: Sets a statistics baseline for MFR links. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline frame-relay multilinkinterface interfaceType interfaceSpecifier interfaceType one of the following interface types:

Syntax:

serial limits baseline for serial interface pos limits baseline for POS interface
Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Privileged Exec

baseline hdlc interface


Description: Sets a statistics baseline for Cisco HDLC interfaces. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline hdlc interface type interfaceSpecifier type one of the following interface types:

Syntax:

serial limits baseline to serial interface hssi limits baseline to HSSI interface
Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Privileged Exec

baseline interface ERX Edge Routers

59

baseline interface
Description: Sets a statistics baseline for an interface or a specific ATM virtual circuit. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline interface interfaceType interfaceSpecifier [ vcd ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vcd virtual circuit descriptor; number in the range 14294967295; an identifier for the VC in other commands (ATM interfaces only)

Syntax:

Privileged Exec

baseline ip
Description: Syntax: Sets the baseline on general IP traffic statistics as the current value. baseline ip [ vrf vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters

Privileged Exec

baseline ip bgp
Description: Syntax: Mode(s): Sets the baseline on all BGP statistics as the current value. baseline ip bgp Privileged Exec

baseline ip dhcp-local
Description: Sets a baseline for DHCP local server statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline ip dhcp-local Privileged Exec

Syntax: Mode(s):

60

baseline ip dvmrp

baseline ip dvmrp
Description: Sets a baseline for DVMRP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline ip dvmrp Privileged Exec

Syntax: Mode(s):

baseline ip http
Description: Sets a baseline for HTTP server statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline ip http Privileged Exec

Syntax: Mode(s):

baseline ip igmp
Description: Sets a baseline for IGMP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline ip igmp Privileged Exec

Syntax: Mode(s):

baseline ip igmp-proxy interface


Description: Sets the baseline on all IGMP statistics by setting the counters for the numbers of queries received and reports sent on the upstream interface to zero. There is no no version. baseline ip igmp-proxy interface Privileged Exec

Syntax: Mode(s):

baseline ip interface ERX Edge Routers

61

baseline ip interface
Description: Syntax: Sets a baseline for IP interface statistics. baseline ip interface [ vrf vrfName ] interfaceType interfaceSpecifier Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Privileged Exec

baseline ip ospf
Description: Syntax: Mode(s): Sets a baseline for OSPF statistics and counters. baseline ip ospf Privileged Exec

baseline ip rip
Description: Sets a statistics baseline for RIP interfaces. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline ip rip Privileged Exec

Syntax: Mode(s):

62

baseline ip tcp

baseline ip tcp
Description: Sets a statistics baseline for TCP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline ip tcp [ vrf vrfName ] [ localAddress localPort remoteAddress remotePort ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters localAddress local IP address on the system localPort local TCP port number on the system remoteAddress IP address of remote system remotePort TCP port number on remote system

Syntax:

Privileged Exec

baseline ip udp
Description: Sets a statistics baseline for UDP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline ip udp [ vrf vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters

Syntax:

Privileged Exec

baseline ip vrrp
Description: Sets a statistics baseline for VRRP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline ip vrrp Privileged Exec

Syntax: Mode(s):

baseline line interface sonet ERX Edge Routers

63

baseline line interface sonet


Description: Sets a statistics baseline for SONET/SDH statistics at the line layer. The system implements the baseline by reading and storing the MIB statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline line interface sonet interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Syntax:

Privileged Exec

baseline local pool


Description: Sets a statistics baseline for the system local address pool statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline local pool Privileged Exec

Syntax: Mode(s):

baseline log
Description: Sets a baseline for logging events. Only log messages timestamped after the baseline will appear when you enter the show log data delta command. To use the current system time, do not enter any options. baseline log [ last-reset | time [ utc ] month day year ] last-reset causes the system to display log messages generated since the last time the system was reset time causes the system to display messages that are timestamped after the time and date that you set. To set the time, use the following syntax:
Hour:Minute[:Second] current time in 24-hour format; seconds are optional

Syntax:

utc indicates that the time entered is UTC (GMT) time; if you do not include this keyword, the system considers the time entered to be local time month name of the month in English day number of the day in the range 131 year four-digit number of the year

Mode(s):

Privileged Exec

64

baseline path interface sonet

baseline path interface sonet


Description: Sets a statistics baseline for SONET/SDH statistics at the path layer. The system implements the baseline by reading and storing the MIB statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline path interface sonet interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Syntax:

Privileged Exec

baseline ppp interface


Description: Sets a statistics baseline for PPP interfaces. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline ppp interface { atm | mlppp | pos | serial | hssi } interfaceSpecifier Mode(s): atm specifies an ATM interface mlppp specifies an MLPPP interface pos specifies a POS interface serial specifies a serial interface hssi specifies a HSSI interface interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Syntax:

Privileged Exec

baseline pppoe interface ERX Edge Routers

65

baseline pppoe interface


Description: Sets a statistics baseline for PPPoE interfaces, subinterfaces, and/or circuits. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline pppoe interface { serial | atm | fastEthernet | gigabitEthernet } interfaceSpecifier Mode(s): serial specifies a serial interface; however, PPPoE is not currently supported on serial interfaces atm specifies an ATM interface fastEthernet specifies a Fast Ethernet interface gigabitEthernet specifies a Gigabit Ethernet interface interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Syntax:

Privileged Exec

baseline radius
Description: Sets a statistics baseline for RADIUS statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline radius Privileged Exec

Syntax: Mode(s):

baseline section interface sonet


Description: Sets a statistics baseline for SONET/SDH statistics at the section layer. The system implements the baseline by reading and storing the MIB statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline section interface sonet interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Syntax:

Privileged Exec

66

baseline show-delta-counts

baseline show-delta-counts
Description: Syntax: Mode(s): Configures the system to always display the statistics relative to the most recent appropriate baseline. [ no ] baseline show-delta-counts Global Configuration

baseline smds interface


Description: Sets a baseline for SMDS statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline smds interface interfaceType interfaceSpecifier Mode(s): interfaceType hssi, tunnel interfaceSpecifier see Interface Types and Specifiers in About This Guide.

Syntax:

Privileged Exec

baseline snmp
Description: Sets a baseline for SNMP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline snmp Privileged Exec

Syntax: Mode(s):

baseline tacacs
Description: Sets a baseline for TACACS+ statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrived. baseline tacacs Privileged Exec

Syntax: Mode(s):

bert ERX Edge Routers

67

bert
Description: Enables bit error rate tests using the specified pattern on an E1 line on a CE1 line module and on a T1 line on a CT1 line module. The no version stops the test that is running. bert pattern pattern interval time [ unframed ] no bert pattern one of the following test patterns

Syntax:

0s repetitive test pattern of all zeros, 00000... 1s repetitive test pattern of all ones, 11111... 2^11 pseudorandom test pattern, 2,048 bits in length 2^15 pseudorandom 0.151 test pattern, 32,768 bits in length 2^20-O153 pseudorandom 0.153 test pattern, 1,048,575 bits in length 2^20-QRSS pseudorandom QRSS 0.151 test pattern, 1,048,575 bits
in length

2^23- pseudorandom 0.151 test pattern, 8,388,607 bits in length alt-0-1 repetitive alternating test pattern of zeros and ones,
01010101... time interval between test patterns, ranging from 114400 minutes unframed the test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern occupies only the payload bits.

Mode(s):

Controller Configuration

bgp advertise-inactive
Description: Enables the advertisement of inactive BGP received routesroutes that are considered by BGP to be best routes and therefore are present in the IP forwarding table, but that are not being used for forwarding. The no version restores the default state of normal route advertisement, whereby BGP advertises received routes only if they are in the IP forwarding table and are being used to forward traffic, or if synchronization is enabled. [ no ] bgp advertise-inactive Router Configuration

Syntax: Mode(s):

68

bgp always-compare-med

bgp always-compare-med
Description: Syntax: Mode(s): Enables the comparison of the MED for paths from neighbors in different ASs. The no version disables the feature. [ no ] bgp always-compare-med Router Configuration

bgp bestpath med confed


Description: Specifies that BGP considers the MED when comparing routes originated from different sub-ASs within the confederation to which this BGP speaker belongs. The no version restores the default state, where the MED attribute is not considered. [ no ] bgp bestpath med confed Router Configuration

Syntax: Mode(s):

bgp bestpath missing-as-worst


Description: Specifies that a route with a MED is always considered to be better than a route without a MED by causing the missing MED attribute to have a value of infinity. The no version restores the default state, where the missing MED attribute is considered to have a value of zero. [ no ] bgp bestpath missing-as-worst Router Configuration

Syntax: Mode(s):

bgp client-to-client reflection


Description: Restores route reflection from a BGP route reflector to clients. The no version disables client-to-client reflection. By default, BGP reflects routes received from any route reflector client to all other route reflector clients. This command can be used to disable or restore this behavior. [ no ] bgp client-to-client reflection Router Configuration

Syntax: Mode(s):

bgp cluster-id ERX Edge Routers

69

bgp cluster-id
Description: Syntax: Configures a cluster ID if the BGP cluster has more than one route reflector. The no version causes BGP to use the router ID as the cluster ID. bgp cluster-id { clusterId | ipAddress } no bgp cluster-id [ clusterId | ipAddress ] Mode(s): clusterId a number in the range 04294967295; the cluster ID of this router acting as a route reflector ipAddress the cluster ID of this router acting as a route reflector specified as an IP address

Router Configuration

bgp confederation identifier


Description: Syntax: Configures a BGP confederation identifier. The no version removes a BGP confederation identifier. bgp confederation identifier autonomousSystem no bgp confederation identifier [ autonomousSystem ] Mode(s): autonomousSystem number in the range 14294967295; the confederation identifier

Router Configuration

bgp confederation peers


Description: Specifies the sub-ASs that belong to a confederation by listing individual AS numbers or by reference to an AS-path access list (the filter list). If the remote AS of a peer appears in the list of sub-AS numbers or in the filter list, then the peer is considered to be in the same confederation. The no version removes individually specified sub-ASs, all sub-ASs specified by the filter list, or all sub-ASs from the confederation. bgp confederation peers { autonomousSystem [ autonomousSystem ]* | filter-list filterListName } no bgp confederation peers [ autonomousSystem [ autonomousSystem ]* | filter-list filterListName ] Mode(s): autonomousSystem AS number in the range 1 4294967295 * indicates that one or more parameters can be repeated multiple times in a list in the command line filterListName name of an AS-path access list; a string of up to 32 characters

Syntax:

Router Configuration

70

bgp dampening

bgp dampening
Description: Enables BGP route dampening. The system assesses a penalty of 1000 each time a route flaps and adds this to any previously accumulated penalty value. Penalties are cumulative. The no version disables route flap dampening. [ no ] bgp dampening [ halfLife [ reuse suppress maxSuppressTime [ halfLifeUnreachable ] ] ] [ route-map mapTag ] halfLife half-life period in minutes in the range 145. The default is 15. When a BGP route has been assigned a penalty, the penalty is decreased by half after the half-life period. reuse reuse limit in the range 120000. The default is 750. As the penalty for a flapping route decreases and falls below this reuse limit, the route is unsuppressed. That is, the route is added back to the BGP table and used for forwarding. suppress suppress limit in the range 120000. A route is suppressed when its penalty exceeds this limit. The default value is 2000. maxSuppressTime maximum suppression time in minutes in the range 1255. This value is the maximum amount of time a route can be suppressed. The default value is four times the half-life value. halfLifeUnreachable alternate half-life period in minutes for unreachable routes; a number in the range 145. If this value is not specified, the same half-life period is used for both reachable and unreachable routes. route-map specifies that dampening can be applied to routes according to the route map behavior. If the route map permits a route, the route is subject to dampening. If the route map denies a route, the route is not subject to dampening. The route map can contain a no dampening clause that determines dampening characteristics.

Syntax:

mapTag name of the route map; a string of up to 32 alphanumeric


characters. Mode(s): Address Family Configuration, Router Configuration

bgp default ipv4-unicast


Description: Causes all neighbors subsequently created with the neighbor remote-as or neighbor peer-group commands to be automatically activated in the IPv4 unicast address family. The no version disables the IPv4 unicast address family on all neighbors. [ no ] bgp default ipv4-unicast Address Family Configuration, Router Configuration

Syntax: Mode(s):

bgp default local-preference ERX Edge Routers

71

bgp default local-preference


Description: Changes the default local preference value. Generally, the default value of 100 allows you to easily define a particular path as less preferable than paths with no local preference attribute. The preference is sent to all routers in the local AS. The preferred path is the one with the highest preference value.The no version restores the default setting. bgp default local-preference value no bgp default local-preference [ value ] Mode(s): value the local preference number in the range 04294967295

Syntax:

Router Configuration

bgp default route-target filter


Description: Controls whether incoming BGP routes are filtered according to membership in route-target communities. Automatic filtering is enabled by default. The no version disables automatic filtering. [ no ] bgp default route-target filter Router Configuration

Syntax: Mode(s):

bgp enforce-first-as
Description: Forces BGP to compare the configured remote AS number of an external peer with the first AS in the AS path of routes received from the peer. If the AS numbers do not match, BGP sends the peer an error message. The no version restores the default condition, which does not perform the AS comparison. [ no ] bgp enforce-first-as Router Configuration

Syntax: Mode(s):

bgp fast-external-fallover
Description: Automatically brings down a BGP session to any adjacent external peer immediately after the link fails (as opposed to waiting for the TCP connection to fail or the hold timer to expire). The no version disables automatic session termination. [ no ] bgp fast-external-fallover Router Configuration

Syntax: Mode(s):

72

bgp log-neighbor-changes

bgp log-neighbor-changes
Description: Causes BGP to log a message of severity notice to the bgpNeighborChanges log whenever a peer enters or leaves the Established state for any reason. No other messages are logged to the bgpNeighborChanges log.The no version disables this log. [ no ] bgp log-neighbor-changes Router Configuration

Syntax: Mode(s):

bgp maxas-limit
Description: Causes BGP to check the length of AS paths received in update messages and to not forward routes whose AS paths are greater than the specified length. The no version halts checking of the AS path length. bgp maxas-limit limit no bgp maxas-limit [ limit ] Mode(s): limit maximum acceptable length of a received AS path; number in the range 11000

Syntax:

Router Configuration

bgp redistribute-internal
Description: Authorizes redistribution of internal BGP routes (in addition to external BGP routes) into protocols that have BGP route redistribution enabled. This command is not required for IBGP routes within a VRF, for which redistribution is always enabled. The no version restores the default, redistributing only external BGP routes. [ no ] bgp redistribute-internal Router Configuration

Syntax: Mode(s):

bgp router-id
Description: Syntax: Sets the BGP identifier. The no version restores the system router ID as the identifier. bgp router-id ipAddress no bgp router-id [ ipAddress ] Mode(s): ipAddress IP address to be used as the BGP identifier; ignored if present in the no version

Router Configuration

bgp shutdown ERX Edge Routers

73

bgp shutdown
Description: Syntax: Mode(s): Administratively disables BGP. The no version reenables BGP. [ no ] bgp shutdown Router Configuration

boot backup
Description: Sets the release and the configuration to be used the next (and every subsequent) time the boot logic chooses backup mode. The no version removes the setting. boot backup relFilename { cnfFilename | scrFilename | factory-defaults } no boot backup Mode(s): relFilename system software file cnfFilename name of an existing configuration file (.cnf) scrFilename name of an existing script file (.scr) factory-defaults the system reverts to factory default configuration when rebooted

Syntax:

Global Configuration

74

boot config

boot config
Description: Specifies how the system obtains its startup configuration. The no version clears a previous request to reboot in a specified manner; the next reboot uses the configuration saved in nonvolatile storage. boot config { cnfFilename [ once ] | scrFilename | running-configuration | startup-configuration | factory-defaults } no boot config cnfFilename name of an existing startup configuration file (.cnf) to be used on all subsequent reboots once restores a configuration from the specified configuration file only on the next reboot. Subsequent reboots revert to the running-configuration settings. scrFilename name of an existing script file (.scr) running-configuration specifies that the running configuration is to be used for reboot; only available if the system is in Automatic Commit mode startup-configuration specifies that the running configuration is to be used for reboot; only available if the system is in Manual Commit mode factory-defaults specifies that the factory default configuration is to be used for the next reboot. Subsequent reboots revert to the running-configuration settings.

Syntax:

Caution: All boot config commands except for boot config running-configuration and boot config startup-configuration erase the existing running configuration when you reboot the system. Before executing this command, you might want to save the current configuration to a .cnf file using the copy running-configuration command. Mode(s): Global Configuration

boot force-backup
Description: Forces the system to use the backup software release file or system configuration file on the next boot. The no version sets the system to use the default release or configuration file on the next boot. [ no ] boot force-backup Note: Once the system has used the backup settings, the no boot force-backup command is the only way to get the system to use the default settings again. Mode(s): Global Configuration

Syntax:

boot revert-tolerance ERX Edge Routers

75

boot revert-tolerance
Description: Sets the reversion tolerances that the boot logic uses to determine whether the system should use the normal or backup settings. The no version restores the default reversion tolerance settings. The default settings are 3 crashes in 30 minutes. boot revert-tolerance count time no boot revert-tolerance Mode(s): count number of times the operational SRP software crashes; the range is 04294967295; the default setting is 3 time time (in seconds) in which the set number (count) of crashes occurs; the range is 04294967295; the default setting is 1800

Syntax:

Global Configuration

boot revert-tolerance never


Description: Syntax: Mode(s): Sets the boot logic to never revert to the backup release or configuration. There is no no version. boot revert-tolerance never Global Configuration

boot slot
Description: Configures the module in the selected slot to use the specified software release the next time the module is booted. The no version clears the override for the slot if a slot number is provided; if no slot number is provided, all slot overrides are cleared. The backup option enables you to specify a backup release for the module in the specified slot in case the module reboots more times than allowed within the period specified by the boot revert-tolerance command. boot [ backup ] slot slotNum relFileName no boot [ backup ] slot [ slotNum ] Mode(s): backup configures a backup setting slotNum number of the selected slot in the system chassis relFileName release (.rel) filename

Syntax:

Global Configuration

76

boot subsystem

boot subsystem
Description: Configures the selected subsystem to use the specified release the next time the subsystem is booted. The no version disables the subsystem. The backup option enables you to specify a backup release for the module in the specified slot in case the module reboots more times than allowed within the period specified by the boot revert-tolerance command. boot [ backup ] subsystem subsysName relFileName no boot [ backup ] subsystem [ subsysName ] Mode(s): backup configure a backup setting subsysName name of the subsystem to be configured relFileName name of system software file to use

Syntax:

Global Configuration

boot system
Description: Syntax: Specifies the software release (.rel) file to use on reboot. There is no no version. boot system relFileName Mode(s): relFileName name of the software release file (.rel) that contains the software release

Global Configuration

buffer-weight
Description: Syntax: Sets the buffer weight of the queue. The no version returns the queue to its default buffer weight. buffer-weight bufferWeight no buffer-weight Mode(s): bufferWeight range 163; default is 8

Queue Profile Configuration

bulkstats collector ERX Edge Routers

77

bulkstats collector
Description: Creates and configures a collector of bulk statistical data to collect MIB-2 ifTable MIB objects. You can configure up to six collectors. The no version restores the default value for specified options; if no options are specified the no version deletes the collector. bulkstats collector collectorIndex [ collect-mode { auto-xfer | on-file-full | manual-xfer } | description descrip | interval intrvl | max-size maxSize | primary-receiver primRecvIndex | secondary-receiver secRecvIndex | single-interval ] no bulkstats collector collectorIndex [ collect-mode | description | interval | max-size | primary-receiver | secondary-receiver | single-interval ]* collectorIndex a number in the range 165535 that identifies the particular data collector collect-mode specifies one of the following collection modes:

Syntax:

auto-xfer agent automatically transfers file when interval expires on-file-full agent automatically transfers file when it is full manual-xfer system- or user-initiated transfers; default collection mode
descrip descriptive information to insert into the bulkstats file intrvl time period in the range 300 86400 seconds for which the collector transfers data from the system to the receivers; default interval is 360 seconds maxSize maximum size of the file in the range 1024020971520 bytes; default file size is 2,621,440 bytes primRecvIndex number in the range 165535 that identifies the primary receiver to which the system transfers the data; by default the primary receiver is cleared secRecvIndex number in the range 165535 that identifies the secondary (backup) receiver to which the system transfers the data; by default the secondary receiver is cleared single-interval specifies that the collector retrieves the bulk statistics data only once; by default, the collector receives the data periodically * indicates that one or more parameters can be repeated multiple times in a list in the command line

Mode(s):

Global Configuration

78

bulkstats file-format endOfLine-Lf

bulkstats file-format endOfLine-Lf


Description:

Removes the carriage return (CR) and leaves only a line feed (LF) at the end of each line in the bulkstats file. The no version returns the end of line format to the default, CR and LF.
[no] bulkstats file-format endOfLine-LF Global Configuration

Syntax: Mode(s):

bulkstats interfaces description-format common


Description: Enables the conventional industry method of encoding the SNMP ifDescr object that the bulkstats application reports. The no version returns the encoding method to a proprietary encoding scheme. [ no ] bulkstats interfaces description-format common Global Configuration

Syntax: Mode(s):

bulkstats interfaces rfc1213


Description: Syntax: Mode(s): Enables RFC 1213 interface numbering mode on bulkstats. The no version disables RFC 1213 interface numbering mode on bulkstats. [ no ] bulkstats interfaces rfc1213 Global Configuration

bulkstats interface-type
Description: Syntax: Configures the interface type on which you want to collect statistics. The no version deletes the interface type from bulkstats collection. bulkstats interface-type interfaceType [ collector collectorIndex ] no bulkstats interface-type interfaceType [ collector collectorIndex ] interfaceType type of interface to collect statistics on: ATM, ATM 1483, Ethernet, Frame Relay, Frame Relay subinterface, Cisco HDLC, IP, PPP collectorIndex number in the range 165535 that identifies the particular data collector. Always specify this option if you defined more than one collector.

Mode(s):

Global Configuration

bulkstats receiver remote-name ERX Edge Routers

79

bulkstats receiver remote-name


Description: Syntax: Configures the bulk statistics receiver parameters. The no version deletes the receiver. bulkstats receiver receiver-index remote-name remote-name.sts [ receiverAttrib [ receiverAttrib ]* ] no bulkstats receiver receiverIndex [ remote-name remoteName ] receiverIndex number in the range 165535 that identifies the receiver of the data remoteName composed of the remote host, path, filename, and formatters; include a .sts filename extension receiverAttrib one of the following dynamic attributes

sysName inserts the system name into the stored remote filename sysUpTime inserts the system up time into the stored remote filename collectorSequence inserts a sequence number into the stored remote
filename Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line

Global Configuration

bulkstats schema
Description: Syntax: Configures the schema for collecting bulk statistics. The no version removes the schema. bulkstats schema schemaIndex [ collector collectorIndex ] no bulkstats schema schemaIndex Mode(s): schemaIndex identifier for the schema in the range 165535 collectorIndex identifier for the collector in the range 165535

Global Configuration

80

bulkstats schema subtree

bulkstats schema subtree


Description: Syntax: Configures the schema for collecting if-stack, if-stats, or system data. The no version removes the schema. bulkstats schema schemaIndex subtree { if-stack | if-stats [ subtreelist ifstatsList [ ifstatsList ]* ] | system } no bulkstats schema schemaIndex schemaIndex identifier for the schema in the range 165535 if-stack retrieves ifStackTable if-stats retrieves ifTable/ifXTable counters ifstatsList type of statistics and time-offset keyword, which includes the offset from the master interval at which the record was collected in each bulkstats interface record system retrieves sysUpTime and nvsUtilPct global statistics; retrieves slotDescr, the cpuUtilPct, and memUtilPct per-slot statistics * indicates that one or more parameters can be repeated multiple times in a list in the command line

Mode(s):

Global Configuration

bulkstats schema subtree policy


Description: Configures the schema to collect statistics on a specific policy, a type of policy, or based on color-coded tags applied by a policy. The no version removes the schema. bulkstats schema schemaIndex subtree policy [ policy-name policyName ] [ policy-type policyType ] [ policy-subtreelist policylist [ policylist ]* ] no bulkstats schema schemaIndex schemaIndex identifier for the schema in the range 165535 policyName name of policy for which you want to collect statistics policyType select one of the following types:

Syntax:

input collect data on input policies localInput collect data on local input policies output collect data on output policies
Mode(s): policyList retrieves statistics based on color-coded tags applied by a policy

Global Configuration

bulkstats traps ERX Edge Routers

81

bulkstats traps
Description: Syntax: Configures the bulkstats traps. The no version disables the trap. bulkstats traps { nearly-full [ threshold ] | full } no bulkstats traps { nearly-full | full } Mode(s): nearly-full a percentage less than 100% threshold a percentage less than 100%; if not specified, defaults to 99% full 100%

Global Configuration

82

cablelength

cablelength
Description: Syntax: Specifies the length of the cable, which determines power requirements. The no version uses the default value, 0 feet. cablelength length no cablelength Mode(s): length a cable length in the range 0450

Controller Configuration

cablelength short
Description: Specifies the cable length (line build-out) for a CT1 interface. The length of cable determines power requirements. The no version restores the default value, 0. cablelength short length no cablelength short Mode(s): length a cable length in the range 0660 feet

Syntax:

Controller Configuration

cbf
Description: Syntax: Mode(s): Creates a connection-based forwarding interface over the interface you are configuring. The no version removes the CBF interface. [ no ] cbf Interface Configuration

cbf connection ERX Edge Routers

83

cbf connection
Description: Creates a CBF connection between two CBF interfaces. The CBF connection is a bidirectional connection consisting of a symmetrical pair of unidirectional connections, one from interface1 to interface2 and a second from interface2 to interface1. The no version removes an existing connection. [ no ] cbf connection interface1Type interface1Specifier interface2Type interface2Specifier Mode(s): interface1Type interface type; see Interface Types and Specifiers in About This Guide interface1Specifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide interface2Type interface type; see Interface Types and Specifiers in About This Guide interface2Specifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Syntax:

Global Configuration

cbf shutdown
Description: Syntax: Mode(s): Administratively disables a CBF interface. The no version enables a CBF interface. (Newly created CBF interfaces are enabled by default.) [ no ] cbf shutdown Interface Configuration

channel-group shutdown
Description: Disables a CT1 channel group on a CT1 module or an E1 fractional interface on a CE1 module. The no version restarts a disabled channel group or fractional interface. [ no ] channel-group subchan shutdown Mode(s): subchan fractional T1 interface in the range 124 or fractional E1 interface in the range 131

Syntax:

Controller Configuration

84

channel-group snmp trap link-status

channel-group snmp trap link-status


Description: Enables processing of SNMP link status information on a CT1 channel group on a CT1 module or on an E1 fractional interface on an CE1 module. The no version disables the processing of SNMP link status information. [ no ] channel-group subchan snmp trap link-status Mode(s): subchan fractional T1 interface in the range 124 or fractional E1 interface in the range 131

Syntax:

Controller Configuration

channel-group timeslots
Description: Syntax: Configures the timeslots and data rate used on each CE1 channel on the CE1 module or on each CT1 channel on the CT1 module. channel-group subchan timeslots range [ speed { 56 | 64 } ] no channel-group subchan subchan fractional E1 interface in the range 131 or fractional T1 interface in the range 124 range timeslots assigned to the CE1 channel in the range 131 or to the CT1 channel in the range 124. A dash represents a range of timeslots, and a comma separates timeslots. For example, 1-10, 15-18 assigns timeslots 110 and 1518. speed specifies the data rate for the CE1 or CT1 channel as one of the following values:

56 Kbps 64 Kbps (default)


Mode(s): Controller Configuration

channelized
Description: Configures a port on the CT3/T3-F0 line module and associated I/O module to support channelized T3 operation. The no version configures the port for unchannelized operation. [ no ] channelized Controller Configuration

Syntax: Mode(s):

check-disk ERX Edge Routers

85

check-disk
Description: Syntax: Mode(s): Finds and repairs structural inconsistencies and damage in the DOS file system in NVS on the primary SRP module. There is no no version. check-disk [ repair ] Boot To access the BOOT mode from the local console:
1 2 At the Privileged Exec prompt, type the reload command. Information on the reloading process appears. When the countdown begins, press the <M+B> key combination.

This puts the CLI in Boot mode (:boot## prompt). If you do not press the <M+B> key combination, the reloading process continues and returns the CLI to the normal User Exec mode.

86

classifier-list

classifier-list
Description: Creates or modifies a classifier control list. Use the not variables to deny traffic for a specific protocol, source address, or destination address. The no version removes the classifier control list. [ ip ] classifier-list classifierName [ traffic-class trafficClassName ] [ color { green | yellow | red } ] [ user-packet-class ] [ notProtocol ] { protocolNumber | protocolName } [ notSrcIpAddr ] { srcIp srcWildIp | hostSrcIpAddr srcIpHost | anySrcIpAddr } [ sourceQualifier ] [ notDestIpAddr ] { anyDestIpAddr | destIp destWildIp | hostDestIpAddr dstIpHost } [ destinationQualifier ] [ tcpQualifier ] [ ip-flags ipFlags ] [ ip-frag-offset { eq fragEqValue | gt 1 } ] [ precedence precNum | dsField dsFieldNum | tos tosNum ] no classifier-list classifierName [ classifierNumber ] classifierName name of the classifier control list entry trafficClassName name of the traffic class to match color match the color notProtocol variable matches any but the immediately following protocol argument protocolNumber protocol number matched by this classifier control list in the range 0255 protocolName protocol name matched by this classifier control list notSrcIPAddr variable matches any but the immediately following source address argument srcIp source address to match srcWildIp wild-card mask to apply to the source address hostSrcIpAddr source address as a host srcIPHost source host address to match anySrcIpAddr matches any source address sourceQualifier one of the following protocol-specific classifier parameters for source ports for UDP or TCP protocols only. See ERX Policy and QoS Configuration Guide, Chapter 1, Configuring Policy Management, for details.

Syntax:

portOperator one of the following boolean operator keywords: lt (less


than), gt (greater than), eq (equal to), or ne (not equal), or range (range of port numbers)

fromPort single port number or the beginning of a range of port


numbers

classifier-list ERX Edge Routers

87

toPort end of a range of port numbers


notDestIpAddr variable matches any but the immediately following destination address argument anyDestIpAddr matches any destination address destIp destination address to match destWildIp wild-card mask to apply to the destination address hostDestIpAddr destination host address to match destIpHost destination host address to match destinationQualifier one of the following protocol-specific classifier parameters for destination TCP or UDP ports, ICMP code and type, or IGMP type. The portOperator, fromPort, and toPort arguments are used with TCP and UDP. The icmpType, icmpCode, and igmpType arguments are used with ICMP and IGMP.

portOperator one of the following boolean operator keywords: lt (less


than), gt (greater than), eq (equal to), or ne (not equal), or range (range of port numbers) (TCP and UDP only)

fromPort single port number or the beginning of a range of port


numbers (TCP and UDP only)

toPort end of a range of port numbers (TCP and UDP only) icmpType ICMP message type (ICMP only) icmpCode ICMP message code (ICMP only) igmpType IGMP message type (IGMP only)
tcpQualifier TCP flags classification parameters tcpFlag for TCP only; a logic equation that specifies flag bit values; ! means logical NOT and & means logical AND; use any of the following flag names:

ack 0x10 fin 0x01 push 0x08 rst 0x04 syn 0x02 urgent 0x20
ipFlags a logic equation that specifies flag bit values; ! means logical NOT and & means logical AND; use any of the following flag names:

dont-fragment 0x02 more-fragments 0x01 reserved 0x04

88

cleanup-timeout-factor

ipFragOffset matches the specified IP fragmentation offset; use any of the following:

eq 0 equals 0 eq 1 equals 1 gt 1 greater than 1


Mode(s): precNum upper three bits of the ToS byte; range is 07 dsfieldNum upper six bits of the ToS byte; range is 063 tosNum whole eight bits of the ToS byte; range is 0255

Global Configuration

cleanup-timeout-factor
Description: Syntax: Specifies the number of refresh messages that can be lost before the PATH or RESV state is ended. The no version restores the default value of 3. cleanup-timeout-factor lostRefreshes no cleanup-timeout-factor Mode(s): lostRefreshes number of lost refresh messages

RSVP Profile Configuration

clear access-list
Description: Syntax: Clears counters for entries in IP access lists. There is no no version. clear access-list [ accessListName ] Mode(s): accessListName name of the access list; a string of up to 32 characters

Privileged Exec

clear arp ERX Edge Routers

89

clear arp
Description: Syntax: Clears entries from the ARP cache. There is no no version. clear [ ip ] arp [ vrf vrfName ] { ipAddress interfaceType interfaceSpecifier | * } Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters ipAddress IP address in 32-bit dotted-decimal format of the entry to be cleared interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide * clears all dynamic ARP entries

Privileged Exec

clear cbf interface


Description: Syntax: Clears statistics on CBF interfaces. There is no no version. clear cbf interface interfaceType interfaceSpecifier Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier see Interface Types and Specifiers in About This Guide.

Privileged Exec

clear egress-queue
Description: Syntax: Clears egress queue statistics for the specified interface and traffic class. There is no no version. clear egress-queue interfaceType interfaceSpecifier [ stacked ] [ traffic-class trafficClassName ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier see Interface Types and Specifiers in About This Guide. stacked clears queue statistics for all interfaces stacked above the specified interface

Privileged Exec

90

clear fabric-queue

clear fabric-queue
Description: Clears fabric queue statistics for the specified traffic-class and egress-slot. The default is that statistics for all traffic classes and all slots are cleared. There is no no version. clear fabric-queue [ traffic-class trafficClassName ] [ egress-slot egressSlot ] [ filter ] Mode(s): traffic-class clear fabric-queue statistics for a traffic class egress-slot clear fabric-queue statistics for an egress-slot

Syntax:

Privileged Exec

clear ip bgp
Description: If the soft option is not used, brings down the underlying TCP connection and then brings it back up again, causing both peers to resend their complete BGP routing table. If the soft out option is used, the BGP speaker reapplies outbound policy and resends all routes to the specified peer(s). If the soft in option is used, the BGP speaker reapplies inbound policy to the routes received from the specified peer(s). This is possible only if soft reconfiguration inbound has been enabled for the peer or the peer supports the route-refresh capability. There is no no version. clear ip bgp [ { ipAddress | peer-group peerGroupName | * } ] [ vrf vrfName ] [ ipv4 { unicast | multicast } | vpnv4 unicast ] [ soft [ in [ prefix-filter ] | out ] ] ipAddress IP address of identified BGP neighbor to clear peerGroupName name of a BGP peer group to clear * clears all connections vrfName name of a virtual routing and forwarding instance to clear ipv4 unicast clears the IPv4 unicast routing table; the default option ipv4 multicast clears the IPv4 multicast routing table vpnv4 unicast clears the VPNv4 unicast routing and forwarding table soft soft reconfiguration

Syntax:

in triggers inbound soft reconfiguration prefix-filter pushes out prefix list and Cisco-proprietary prefix list
outbound route filters and triggers inbound soft reconfiguration

out triggers outbound soft reconfiguration


Mode(s): Privileged Exec

clear ip bgp dampening ERX Edge Routers

91

clear ip bgp dampening


Description: Clears route flap dampening information and reinstates the suppressed routes. The dampening keyword and the flap-statistics keyword both have the same effect. There is no no version. clear ip bgp [ vrf vrfName ] [ ipv4 { unicast | multicast } | vpnv4 unicast ] { dampening | flap-statistics } [ ipAddress [ addressMask ] ] Mode(s): vrfName name of a virtual routing and forwarding instance to clear ipv4 unicast clears the IPv4 unicast routing table; the default option ipv4 multicast clears the IPv4 multicast routing table vpnv4 unicast clears the VPNv4 unicast routing and forwarding table ipAddress IP address of the BGP neighbor to clear ipMask address mask to be applied to the network IP address

Syntax:

Privileged Exec

clear ip bgp redistribution


Description: Syntax: Mode(s): Reapplies policy to routes that have been redistributed into BGP. There is no no version. clear ip bgp redistribution User Exec, Privileged Exec

clear ip dvmrp routes


Description: Syntax: Clears DVMRP routes from the routing table. There is no no version. clear ip dvmrp routes [ ipAddress [ addressMask ] ] Mode(s): ipAddress clears the longest match to this IP address addressMask clears route that matches exactly to this subnet mask

Privileged Exec

92

clear ip interface

clear ip interface
Description: Syntax: Clears the counters on the specified IP interface. The default is all interface types and all interfaces. There is no no version. clear ip interface [ vrf vrfName ] interfaceType interfaceSpecifier Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Privileged Exec

clear ip isis redistribution


Description: Clears all the routes that have previously been redistributed into IS-IS and redistributes them using the current policy configuration. There is no no version. clear ip isis redistribution Privileged Exec

Syntax: Mode(s):

clear ip mroute
Description: Syntax: Clears all or the specified multicast forwarding entries. There is no no version. clear ip mroute { * | grpAddress [ sourceAddress ] } Mode(s): * clear all IP multicast forwarding entries grpAddress address of the multicast group for which forwarding entries should be cleared sourceAddress address of the multicast source for which forwarding entries should be cleared

User Exec, Privileged Exec

clear ip ospf redistribution


Description: Syntax: Mode(s): Clears all the routes that have previously been redistributed into OSPF. There is no no version. clear ip ospf redistribution Privileged Exec

clear ip pim auto-rp ERX Edge Routers

93

clear ip pim auto-rp


Description: Syntax: Clears the group-to-RP router mappings the system learned via autoRP. There is no no version. clear ip pim auto-rp [ ipAddress ] Mode(s): ipAddress IP address of the system designated as an RP router

User Exec, Privileged Exec

clear ip pim interface count


Description: Syntax: Clears the counters for multicast packet statistics on all interfaces or the specified interface. There is no no version. clear ip pim interface [ interfaceType interfaceSpecifier ] count Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

User Exec, Privileged Exec

clear ip pim remote-neighbor count


Description: Syntax: Clears the counters for multicast packet statistics on all interfaces or the specified interface. There is no no version. clear ip pim remote-neighbor [ ipAddress ] count Mode(s): ipAddress IP address of the interface

User Exec, Privileged Exec

clear ip prefix-list
Description: Syntax: Clears all hit counts in the prefix lists, the specified prefix list, or the specified entry from the specified prefix list. There is no no version. clear ip prefix-list [ listName [ network/length] ] Mode(s): listName name of the prefix list; a character string up to 32 characters in length network base address of the network route to be filtered; for example, 192.168.32.0 or 10.10.0.0 length length of the network prefix; number of bits masking base address to produce address to be matched

User Exec, Privileged Exec

94

clear ip prefix-tree

clear ip prefix-tree
Description: Syntax: Clears all prefix trees, the specified prefix tree, or the specified entry from the specified prefix tree. There is no no version. clear ip prefix-tree [ treeName [ network/length ] ] Mode(s): treeName name of the prefix list; a character string up to 32 characters in length network base address of the network route to be filtered; for example, 192.168.32.0 or 10.10.0.0 length length of the network prefix; number of bits masking base address to produce address to be matched

User Exec, Privileged Exec

clear ip rip redistribution


Description: Syntax: Mode(s): Clears all the routes that have previously been redistributed into RIP. There is no no version. clear ip rip redistribution User Exec, Privileged Exec

clear ip routes
Description: Syntax: Clears a specified route or all dynamic routes from the routing table of a specified VRF or all VRFs. There is no no version. clear ip routes [ vrf vrfName ] { * | ipAddress [ ipMask ] } Mode(s): vrfName name of the VRF context from which routes are to be cleared * clears all dynamic routes ipAddress IP address prefix for routes that are cleared; in 32-bit dotted-decimal format ipMask mask of the IP address prefix for routes that are cleared; in 32-bit dotted-decimal format

Privileged Exec

clear isis adjacency ERX Edge Routers

95

clear isis adjacency


Description: Syntax: Clears all entries from the adjacency database, or clears only adjacencies with a specified neighbor. There is no no version. clear isis adjacency [ systemId | hostname ] Mode(s): systemID system ID of an IS-IS neighbor hostname hostname of an IS-IS neighbor

Privileged Exec

clear isis database


Description: Syntax: Clears all entries from the IS-IS link state database, or clears only entries associated with a specified neighbor. There is no no version. clear isis database [ systemId | hostname ] Mode(s): systemID system ID of an IS-IS neighbor hostname hostname of an IS-IS neighbor

Privileged Exec

clear line
Description: Syntax: Removes any services on a vty line and closes any files opened as a result of services on that line. There is no no version. clear line lineNumber Mode(s): lineNumber number of the vty line

User Exec

clear mpls ldp


Description: Removes and reestablishes all existing LDP LSPs, thereby forcing the reapplication of all policies on every configured topology-driven LDP LSP. There is no no version. clear mpls ldp Privileged Exec

Syntax: Mode(s):

96

client-name

client-name
Description: Sets a hostname for a tunnel. For L2TP, specifies the hostname used by the LAC when communicating with the LNS about the tunnel. For L2F, specifies the hostname used by the NAS when communicating with the home gateway. The no version removes the hostname from the tunnel. Note: This command has replaced the hostname command for Domain Map Tunnel Configuration mode only. Syntax: client-name clientname no client-name Mode(s): clientname string of up to 64 characters (no spaces)

Domain Map Tunnel Configuration

clns configuration-time
Description: Syntax: Specifies the rate at which ES hellos and IS hellos are sent. The no version restores the default value of 10 seconds. clns configuration-time configTime no clns configuration-time Mode(s): configTime number in the range 165535; rate in seconds at which ES and IS hello packets are sent; the default is 10 seconds

Global Configuration

clns holding-time
Description: Allows the sender of an ES hello or IS hello to specify the length of time you consider the information in the hello packets to be valid. The no version restores the default value, 30 seconds. clns holding-time holdTime no clns holding-time Mode(s): holdTime number in the range 165535; length of time in seconds during which the information in the hello packets is considered valid

Syntax:

Global Configuration

clns host ERX Edge Routers

97

clns host
Description: Use to define a name-to-NSAP mapping that can then be used with commands requiring NSAPs. The no version restores the default of no mapping defined. Enables dynamic resolution of hostnames to system IDs (within the NSAP address). The hostname mapping is sent in the LSPs within the dynamic hostname TLV tuple. Display the TLV by issuing the show isis database detail command. Use the show hosts command to display the mapping. clns host name nsap no clns host name Mode(s): name name for the NSAP; first character can be either a letter or a number. If a number is used, the operations you can perform are limited. nsap the NSAP to which that name maps

Syntax:

Global Configuration

clock rate
Description: Sets the rate of the internal clock in MHz for HSSI and X.21/V.35 interfaces. The no version restores the default value; for HSSI the default is 44.736 MHz, for X.21/V.35, the default is 2048000 Hz. The syntax depends on the type of interface. HSSI Interfaces: clock rate { 34 | 44 } no clock rate 34 specifies a rate of 34.368 MHz 44 specifies a rate of 44.736 MHz

Syntax:

X.21/V.35 Interfaces: [ no ] clock rate rate no clock rate rate speed of the clock in Hz; one of the following values: 1200 | 2400 | 4800 | 9600 | 19200 | 38400 | 50000 | 64000 | 128000 | 1024000 | 2048000 | 3072000 | 4096000 | 4915200 | 6144000 | 6192000

Mode(s):

Interface Configuration

98

clock set

clock set
Description: Syntax: Allows you to manually set the system clock. There is no no version. clock set time { month day | day month } year Mode(s): time current time (in 24-hour format HH:MM:SS) month name of the month (January, February, ) day day of the month (131) year year (2000, 2001, )

Privileged Exec

clock source
Description: Syntax: Determines how an interfaces obtains clocking signals. The no version restores the default value, line. clock source { line | internal { module | chassis } } no clock source line interface clocks data from a clock recovered from the lines receive data stream; the default. internal internal clock source transmits data from its internal clock. You must specify one of the following for internal clocking:

module internal clock is from the line module itself chassis internal clock is from the configured system clock
Mode(s): Controller Configuration, Interface Configuration (POS only)

clock summer-time date ERX Edge Routers

99

clock summer-time date


Description: Sets the system to automatically switch to summer time (Daylight Saving Time DST). It should start on the first specific date listed in the command and end on the second specific date in the command. The no version configures the software so that it does not automatically switch to summer time. clock summer-time name date { startDay startMonth | startMonth startDay } startYear startTime { stopDay stopMonth | stopMonth stopDay } stopYear stopTime [ dstOffset ] no clock summer-time name name of the time zone (for example, PDT) to be displayed when daylight saving (summer) time is in effect date indicates that summer time should start on the first specific date listed in the command and end on the second specific date in the command startDay DST start day (131) startMonth DST start month (January, February, ) startYear DST start year (2000, 2001, ) startTime DST start time (24-hour format) in hours and minutes (hh:mm) stopDay DST stop day stopMonth DST stop month stopYear DST stop year stopTime DST stop time (24-hour format) dstOffset number of minutes to add during summer time in the range 11440; default = 60

Syntax:

Mode(s):

Global Configuration

100

clock summer-time recurring

clock summer-time recurring


Description: Sets the system to automatically switch to summer time (Daylight Saving Time) on the specified dates every year. The no version configures the software not to automatically switch to summer time. clock summer-time name recurring [ { startWeekNumber | startWeekEnum } startDay startMonth startTime { stopWeekNumber | stopWeekEnum } stopDay stopMonth stopTime [ dstOffset ] ] no clock summer-time name name of the time zone (for example, EDT for Eastern Daylight Savings Time) to be displayed when daylight saving (summer) time is in effect recurring indicates that summer time should start and end on the specified days every year startWeekNumber DST start week of the month (15) startWeekEnum first week in month (first); or last week in month (last) startDay DST start day of the week (Sunday, Monday, ) startMonth DST start month (January, February, ) startTime DST start time (24-hour format) in hours and minutes (hh:mm) stopWeekNumber DST stop week of the month (15) stopWeekEnum first week in month (first); or last week in month (last) stopDay DST stop day of the week stopMonth DST stop month stopTime DST stop time in hours and minutes (hh:mm) dstOffset number of minutes to add during summer time in the range 11440; default = 60

Syntax:

Mode(s):

Global Configuration

clock timezone
Description: Syntax: Sets the time zone for display. The no version sets the time zone to UTC. clock timezone name hours [ minutes ] no clock timezone Mode(s): name name of the time zone to be displayed when Standard time is in effect, such as EST or PST. hours hours offset from UTC (-23, -22 23) minutes minutes offset from UTC (059)

Global Configuration

color ERX Edge Routers

101

color
Description: Defines a policy rule that assigns a color to packets in the specified classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with the policy list for this rule. Use the suspend keyword to temporarily suspend color assignment. The no version removes the rule from the policy list; the suspend version temporarily suspends the policy rule; the no suspend version resumes application of a suspended rule. [ no ] [ suspend ] color { green | yellow | red } [ classifier-group claclName ] [ precedence precValue ] color one of the following colors assigned to packets:

Syntax:

green highest precedence yellow intermediate precedence red lowest precedence


Mode(s): claclName classifier control list used to classify packets for this coloring service precValue precedence value in the range 032768

Policy Configuration

committed-action
Description: Sets the action for packets conforming to the committed rate and committed burst size and conforming to the exceed rate and exceed burst size for a rate limit profile. The no version restores the value to the default value, drop. [ no ] committed-action { drop | transmit | mark markVal } Mode(s): drop drop the packet transmit transmit the packet mark mark the packet markVal mark value in the range 0255

Syntax:

Rate Limit Profile Configuration

committed-burst
Description: Syntax: Sets the committed burst for a rate limit profile. The no version restores the default value, 8192. [ no ] committed-burst size Mode(s): size size in bytes in the range 81924294967295

Rate Limit Profile Configuration

102

committed-length

committed-length
Description: Syntax: Sets minimum and maximum constraints for the queues committed lengths. The no version removes constraints on the queues committed length. committed-length minimumCommittedLength [ maximumCommittedLength ] no committed-length Mode(s): minimumCommittedLength range 01073741824 maximumCommittedLength range 01073741824

Queue Profile Configuration

committed-rate
Description: Syntax: Sets the committed rate for a rate limit profile. The no version restores the default value, 0. [ no ] committed-rate rate Mode(s): rate rate in bits per second in the range 04294967295

Rate Limit Profile Configuration

configure
Description: Syntax: Enters the Global Configuration mode. To enter Global Configuration commands, you must be in the Privileged Exec mode. There is no no version. configure [ terminal | file [ fileName ] [ verbose | show-progress [ dotPeriod ] ] ] Mode(s): terminal configure from a terminal file configure from a script file fileName script file to execute verbose echo each command as the script is executed show-progress display a . during script execution dotPeriod displays a . after this number of commands; default is 100

Privileged Exec

confirmations explicit ERX Edge Routers

103

confirmations explicit
Description: Requires the user to enter y, ye, or yes to confirm a prompt, and to enter n or no to deny a prompt. The no version restores the default state, which permits pressing <Enter> or <y> to confirm a prompt and entering any other characters to deny a prompt. [ no ] confirmations explicit Global Configuration

Syntax: Mode(s):

conformed-action
Description: Sets the action for packets not conforming to the committed rate and committed burst size, but conforming to the peak rate and peak burst size for a rate limit profile. The no version restores the value to the default value, drop. [ no ] conformed-action { drop | transmit | mark markVal } Mode(s): drop drop the packet transmit transmit the packet mark mark the packet markVal mark value in the range 0255

Syntax:

Rate Limit Profile Configuration

conformed-fraction
Description: Sets the percentage of the total queue that can be occupied before dropping conformed packets. The no version returns the conformed fraction to its default setting. conformed-fraction conformedFraction no conformed-fraction Mode(s): conformedFraction percentage range 0100; default is 50%

Syntax:

Queue Profile Configuration

104

conformed-length

conformed-length
Description: Syntax: Sets minimum and maximum constraints for the queues conformed lengths. The no version removes constraints on the queues conformed length. conformed-length minimumConformedLength [ maximumConformedLength ] no conformed-length Mode(s): minimumConformedLength range 01073741824 maximumConformedLength range 01073741824

Queue Profile Configuration

controller e1
Description: Syntax: Accesses Controller Configuration mode so that you can configure a CE1 controller. There is no no version. controller e1 interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.

Global Configuration

controller e3
Description: Syntax: Accesses Controller Configuration mode so that you can configure an E3 controller. There is no no version. controller e3 interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.

Global Configuration

controller sonet
Description: Syntax: Selects an interface on which you want to configure SONET or SDH. There is no no version. controller sonet interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.

Global Configuration

controller t1 ERX Edge Routers

105

controller t1
Description: Syntax: Accesses Controller Configuration mode so that you can configure a CT1 controller. There is no no version. controller t1 interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.

Global Configuration

controller t3
Description: Syntax: Accesses Controller Configuration mode so that you can configure a T3 controller. There is no no version. controller t3 interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.

Global Configuration

106

copy

copy
Description: Copies a local or network file. There is no no version. Note: You cannot change the extension of a file, for example, .scr.

Note: You can only copy software release (.rel) files to the system (download); you cannot copy them from the system (upload). Syntax: copy sourcePath:sourceFilename destinationPath:destinationFilename [force] sourcePath path to the source in the format: networkPath | /incoming/subdirectory | /outgoing/subdirectory

networkPath path to the network host incoming specifies the ERX systems incoming FTP directory subdirectory name of a subdirectory on the ERX systems FTP server.
If the subdirectory does not exist, the system creates it.

outgoing specifies the ERX systems outgoing FTP directory


source_filename name of source file destinationPath path to the destination in the format: networkPath | /incoming/subdirectory | /outgoing/subdirectory

networkPath path to the network host incoming specifies the incoming ERX systems FTP directory subdirectory name of a subdirectory on the ERX systems FTP server.
If the subdirectory does not exist, the system creates it.

outgoing specifies the ERX systems outgoing FTP directory


Mode(s): destinationFilename name of destination file force forces a copy, even if the destination file already exists

Privileged Exec

copy running-configuration
Description: Saves the configuration currently running on the system to a local or remote (network) system configuration file (.cnf). Available only if the system is in Automatic Commit mode. There is no no version. copy running-configuration destination [ force ] Mode(s): destination destination filename (*.cnf) force creates a copy even if the destination file already exists

Syntax:

Privileged Exec

copy running-configuration startup-configuration ERX Edge Routers

107

copy running-configuration startup-configuration


Description: Saves all outstanding (unsaved) configuration changes to nonvolatile storage; an exact alias of the write memory command. Available if the system is in either Automatic Commit mode or Manual Commit mode. If issued while in Automatic Commit mode, the CLI notifies you that the command is not necessary, but allows you to proceed. There is no no version. copy running-configuration startup-configuration Privileged Exec

Syntax: Mode(s):

copy startup-configuration
Description: Copies the previously saved startup configuration to a local or remote (network) system configuration (*.cnf) file. Available only if the system is in Manual Commit mode. If you have made but not saved any configuration changes, those changes are not in the startup configuration. There is no no version. copy startup-configuration destination [ force ] Mode(s): destination destination filename (*.cnf) force creates a copy even if the destination file already exists

Syntax:

Privileged Exec

cost
Description: Syntax: Specifies a cost metric for an OSPF remote-neighbor interface. Used in the calculation of the SPF routing table. The no version restores the default value. cost intfCost no cost intfCost link state metric cost; a number in the range 165535; default value is 10 if there is no route to the remote neighbor; otherwise, the default is calculated based on the bandwidth of the physical interface used to reach the remote neighbor and the OSPF auto-cost reference bandwidth

Mode(s):

Remote Neighbor Configuration

108

crc

crc
Description: Sets the size of the cyclic redundancy check. CRC is an error-checking technique that uses a calculated numeric value to detect errors in transmitted data. 16 and 32 indicate the number of check digits per frame that are used to calculate the FCS. Both the sender and receiver must use the same setting. The default is 16. The no version restores the value to the default. crc { 16 | 32 | none } no crc Mode(s): 16 specifies CRC-16, which transmits streams of 8-bit characters and generates 16-bit check bits per frame 32 specifies CRC-32, which transmits longer streams at faster rates and therefore provides better ongoing error detection none disables CRC checking

Syntax:

Interface Configuration

cr-ldp
Description: Specifies that the traffic-engineering extensions to LDP are in effect on this interface. CR-LDP is enabled by default. The no version disables CR-LDP in the profile. [ no ] cr-ldp LDP Profile Configuration

Syntax: Mode(s):

crypto key dss


Description: Controls SSH server daemon and creation/deletion of SSH server host key. This command is not displayed by the show config command. There is no no version. crypto key { generate | zeroize } dss generate creates the SSH server host key and enables the daemon zeroize deletes the SSH server host key and stops the SSH daemon if it is running. Issuing this command terminates any active client sessions. The next time the system boots after this command is issued, the SSH server daemon is not started.

Syntax:

Mode(s):

Global Configuration

data-character-bits ERX Edge Routers

109

data-character-bits
Description: Syntax: Sets the number of data bits available for characters for all sessions on the specified vty lines. There is no no version. data-character bits { 7 | 8 } Mode(s): 7 7 data bits per character; this setting supports only characters in the standard ASCII set 8 8 data bits per character; default setting, supports the full set of 8-bit international characters

Line Configuration

dead-interval
Description: Sets the time period that the OSPF router waits without seeing hello packets from a remote neighbor before declaring the neighbor to be down. The no version restores the default value. dead-interval deadInterval no dead-interval Mode(s): deadInterval number in the range 165535 seconds; default value is 40 seconds

Syntax:

Remote Neighbor Configuration

deadtime
Description: Use to configure the amount of time (in minutes) that a server is marked as unavailable if a request times out for the configured retry count. If a server fails to answer a request, it is marked unavailable by the system. The system does not send requests to the server for the configured time. The no version restores the default value, 0, turning off the deadtime mechanism. deadtime recovery no deadtime Mode(s): recovery amount of time that a server is marked as unavailable in the range 030 (minutes). The default is 0.

Syntax:

Radius Configuration

110

debounce-time

debounce-time
Description: Syntax: Sets the interval to wait before bringing up a RIP interface that was brought down. The no version restores the default value, 10. debounce-time interval no debounce-time Mode(s): interval seconds in the range 060

Router Configuration

debug ip bgp
Description: Syntax: Shows information on the selected variable. The no version disables the display. debug ip bgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] [ secondary ] no debug ip bgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] in displays information for inbound events out displays information for outbound events peerAddress IP address of BGP peer for which information is displayed peerAddressMask network mask of BGP peer for which information is displayed bgpLog BGP log of interest; one of the following options:

dampening BGP dampening event; route is suppressed or no longer


suppressed by route-flap dampening

events BGP finite state machine events and transitions keepalives BGP keepalive message events updates BGP routing table update events vpnv4 BGP VPNv4 NLRI events
import displays BGP import processing events; appears only if you specify the vpnv4 keyword

debug ip bgp ERX Edge Routers

111

routerName name of the virtual router that owns the BGP router for which information is being displayed filteringRouterName name of the virtual router that owns the access class and route map parameters accessClassName name of an access list to filter output mapName name of a route map to filter output severity specifies the minimum severity of the log messages displayed for the selected category; described either by a descriptive termseverityValueor by a corresponding numberseverityNumberin the range 07; the lower the number, the higher the priority:

emergency or 0 system unusable alert or 1 immediate action needed critical or 2 critical condition exists error or 3 error condition warning or 4 warning condition notice or 5 normal but significant condition info or 6 informational message debug or 7 debug message
verbosityLevel verbosity of the log categorys messages; can be any of the following:

low terse medium moderate detail high verbose


secondary indicates that the specified filter conditions for the log are imposed in addition to any that were previously specified; if omitted, the specified filter conditions replace any that were previously specified

Mode(s):

Privileged Exec

112

debug ip mbgp

debug ip mbgp
Description: Syntax: Shows information on the selected variable. The no version disables the display. debug ip mbgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] [ secondary ] no debug ip mbgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] in displays information for inbound events out displays information for outbound events peerAddress IP address of BGP peer for which information is displayed peerAddressMask network mask of BGP peer for which information is displayed bgpLog BGP log of interest; one of the following options:

dampening BGP dampening event; route is suppressed or no longer


suppressed by route-flap dampening

events BGP finite state machine events and transitions keepalives BGP keepalive message events updates BGP routing table update events vpnv4 BGP VPNv4 NLRI events
import displays BGP import processing events; appears only if you specify the vpnv4 keyword routerName name of the virtual router that owns the BGP router for which information is being displayed filteringRouterName name of the virtual router that owns the access class and route map parameters accessClassName name of an access list to filter output mapName name of a route map to filter output severity specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command.

debug ip ospf ERX Edge Routers

113

verbosityLevel verbosity of the log categorys messages. See the debug ip bgp command. secondary indicates that the specified filter conditions for the log are imposed in addition to any that were previously specified; if omitted, the specified filter conditions replace any that were previously specified

Mode(s):

Privileged Exec

debug ip ospf
Description: Syntax: Shows information on the selected variable. The no version disables the display. debug ip ospf ospfLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] no debug ip ospf ospfLog ospfLog OSPF log of interest; one of the following options:

adj OSPF adjacency events elect-dr OSPF designated router election events OSPF general events lsa OSPF link state advertisements events neighbor OSPF neighbor state machine packets-rcvd OSPF packets received packets-sent OSPF packets sent route OSPF route events spf all OSPF shortest path first calculation events spf-ext OSPF shortest path first external route calculation events spf-inter OSPF shortest path first interarea route calculation events spf-intra OSPF shortest path first intra-area route calculation events
Mode(s): severity specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command. verbosityLevel verbosity of the log categorys messages. See the debug ip bgp command.

Privileged Exec

114

debug ip pim

debug ip pim
Description: Syntax: Shows information on the selected variable. The no version disables the display. The syntax differs for PIM Dense Mode and PIm Sparse Mode. PIM Dense Mode: debug ip pim { pimLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] | switchState groupAddress sourceAddress | dense-mode { on | off } } PIM Sparse Mode: debug ip pim { pimLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] | switchState groupAddress sourceAddress | sparse-mode { on | off | sg-state [ group groupAddress [ source sourceAddress ] | rp rpAddress ] [ count ] } } no debug ip pim pimLog pimLog PIM log of interest; one of the following options:

autoRp-rcvd autoRP packets received autoRP-sent autoRP packets sent engineering PIM engineering hellos-rcvd PIM hello messages received hellos-sent PIM hello messages sent packets PIM packets received and sent packets-rcvd PIM packets received packets-sent PIM packets sent
severity specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command. verbosityLevel verbosity of the log categorys messages. See the debug ip bgp command. switchState switches from one type of tree to another

rpt-switch switch from a shortest path tree to a shared path tree spt-switch switch from a shared path tree to a shortest path tree
groupAddress IP address of the multicast group sourceAddress IP address of the multicast source on turns on the specified PIM mode on all virtual routers

debug ip rip ERX Edge Routers

115

off turns off the specified PIM mode on all virtual routers sg-state displays information about the relationship between a source, multicast group, and RP router rp displays information about the relationships between sources, groups, and the specified RP router rpAddress address of the RP router count displays one of the following

(with no optional keywords) number of relationships between a source,


multicast group, and RP router

(with the group keyword) number of sources associated with the


multicast group for PIM SM

(with the source and group keywords) number of source-group pairs for
PIM SM

(with the rp keyword) number of source-group pairs associated with the


RP router for PIM SM Mode(s): Privileged Exec

debug ip rip
Description: Syntax: Shows information on the selected variable. The no version disables the display. debug ip rip ripLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] no debug ip rip ripLog ripLog RIP log of interest; one of the following options:

events general RIP events, such as removing RIP from an interface or


creating the RIP process

route events associated with two RIP routers exchanging routes


Mode(s): severity specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command. verbosityLevel verbosity of the log categorys messages. See the debug ip bgp command.

Privileged Exec

116

debug isis

debug isis
Description: Displays debug-related information about selected IS-IS log parameters. This command manipulates the same log as the Global Configuration log commands. The no version disables debugging display. debug isis isisLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] no debug isis isisLog isisLog IS-IS log of interest; one of the following options:

Syntax:

adj-packets IS-IS adjacency-related packets, such as hello packets


sent and IS-IS received adjacencies going up and down

mpls traffic-eng advertisements MPLS traffic-engineering agent


advertisements

mpls traffic-eng agents MPLS traffic-engineering agents snp-packets IS-IS CSNPs/PSNPs spf-events shortest path first events spf-statistics SPF timing and statistic data spf-triggers SPF triggering events update-packets update-related packets
Mode(s): severity specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command. verbosityLevel verbosity of the log categorys messages. See the debug ip bgp command.

Privileged Exec

default-fields peer ERX Edge Routers

117

default-fields peer
Description: Syntax: Specifies the fields that will appear by default in the output of a subsequently issued show ip bgp summary command. [ no ] default-fields peer fieldOptions fieldOptions field(s) to be displayed, in the format all | [ intro | last-reset-reason | messages-received | messages-sent | peer-type | prefixes-received | remote-as | state | times-up | up-down-time | updates-received | updates-sent ]*

all all available information; not recommended, as this information for


each network does not fit on a single line and is difficult to read

intro introductory information about the state of various BGP attributes;


this information is displayed only if you specify this keyword

last-reset-reason reason for most recent reset messages-received total number of messages received from the peer messages-sent total number of messages sent to the peer peer-type type of BGP peer: internal, external, or confederation prefixes-received number of unique prefixes received from the peer remote-as the remote AS number of the peer state state of the BGP session times-up number of times the session has been established up-down-time how long the session has been up or down updates-received number of update messages received from the peer updates-sent number of update messages sent to the peer * indicates that one or more parameters can be repeated multiple
times in a list in the command line Mode(s): Router Configuration

118

default-fields route

default-fields route
Description: Specifies the fields that will appear by default in the output of any subsequently issued show ip bgp command that displays routes (except for the show ip bgp summary command). [ no ] default-fields route fieldOptions fieldOptions field(s) to be displayed, in the format all | [ afi | aggregator | as-path | atomic-aggregate | best | clusters | communities | extended-communities | imported | intro | in-label | loc-pref | med | next-hop | next-hop-cost | origin | originator-id | out-label | peer | peer-type | rd | safi | unknown-types | weight ]*

Syntax:

all all available information; not recommended, as this information for


each network does not fit on a single line and is difficult to read

afi address family identifier aggregator AS number and IP address of aggregator as-path AS path through which this route bas been advertised atomic-aggregate whether the atomic aggregate attribute is present best whether this is the best route for the prefix clusters list of cluster IDs through which the route has been advertised communities community number associated with the route extended-communities extended community imported whether the route was imported intro introductory information about the state of various BGP attributes;
this information is displayed only if you specify this keyword

in-label MPLS label for the route; the label received with incoming
MPLS frames

loc-pref local preference for the route med multiexit discriminator for the route next-hop IP address of the next router that is used when forwarding a
packet to the destination network

next-hop-cost whether the indirect next hop of the route is


unreachable, if not, displays IGP cost to the indirect next hop

out-label MPLS label for the route; the label with outgoing MPLS
frames

peer IP address of BGP peer from which route was learned peer-type type of BGP peer: internal, external, or confederation origin origin of the route

default-fields route ERX Edge Routers

119

originator-id router ID of the router in the local AS that originated the


route

rd route distinguisher safi subsequent address family identifier unknown-types attribute codes for unknown path attributes weight weight of the route * indicates that one or more parameters can be repeated multiple
times in a list in the command line Mode(s): Router Configuration

120

default-information originate

default-information originate
Description: Enables BGP to advertise a default route (0.0.0.0/0) if the default route exists in the IP routing table. If the default route does not exist, you must configure it using the ip route command. For IS-IS, OSPF, and RIP, configures a default route for the distribution of default information into the respective routing domain. IS-IS creates the default route (0.0.0.0/0) if it does not exist in the IP routing table. OSPF and RIP do not create the default route unless you use the always option. For all protocols, the no version disables advertisement of the default route. The syntax varies with the protocol. For BGP: [ no ] default-information originate For IS-IS: [ no ] default-information originate [ route-map mapTag ] For RIP: [ no ] default-information originate [ always | route-map mapTag ] For OSPF: [ no ] default-information originate [ always | metric metricValue | metric-type 1 | metric-type 2 | route-map mapTag ]* Mode(s): mapTag name of route map used to import the default route; string of up to 32 characters always creates the default route, so that it is always advertised metricValue sets the metric for the default route; a value ranging from 04294967295 metric-type 1 sets the default routes metric type to OSPF external type 1 metric-type 2 sets the default routes metric type to OSPF external type 2 * indicates that one or more parameters can be repeated multiple times in a list in the command line

Syntax:

Address Family Configuration, Router Configuration

default-metric ERX Edge Routers

121

default-metric
Description: Syntax: Configures RIP to use this metric when advertising routes on all subsequently created interfaces. The no version restores the default value, 0. [ no ] default-metric metricValue [ interfaceType interfaceSpecifier ] Mode(s): metricValue metric to apply to routes, a value ranging from 116 interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Router Configuration

default-router
Description: Specifies the IP address of the router that the subscribers computer will use for traffic destined for locations beyond the local subnet. The no version removes the association between the address pool and the router. default-router ipAddressPrimary [ ipAddressSecondary ] no default-router Mode(s): ipAddressPrimary IP address of preferred router ipAddressSecondary IP address of secondary router

Syntax:

Pool Configuration

delete
Description: Syntax: Deletes a directory or file in nonvolatile storage. There is no no version. delete filename | directory directoryName [ force ] Mode(s): filename name of the local file you are deleting (for example, system1.cnf) directoryName path of a directory force forces deletion of directory even if it is not empty

Boot, User Exec, Privileged Exec

122

deny

deny
Description: Syntax: Specifies the domain name(s) that are to be denied access to AAA authentication. The no version negates the command. [ no ] deny domainName Mode(s): domainName name of the domain; maximum of 64 characters

AAA Profile Configuration

description
Description: In Interface Configuration mode, adds a text description to an IP interface. In VRF Configuration mode, adds a text description to the VRF. The no version removes the description from the interface or VRF. description name no description Mode(s): name string of up to 256 characters in Interface Configuration mode; string of up to 80 characters in VRF Configuration mode

Syntax:

Interface Configuration, VRF Configuration

dir
Description: Syntax: Displays information about the files in nonvolatile storage, including name, size, date created, and whether they are in use. There is no no version. dir [ path ] [ short ] Mode(s): path path to a specific directory short limits display to file name and creation date

User Exec, Privileged Exec

disable ERX Edge Routers

123

disable
Description: When used from Privileged Exec mode, exits Privileged Exec mode and returns to User Exec mode. When used from Router Configuration or Interface Configuration mode in the context of a DVMRP configuration, disables DVMRP on the virtual router or interface. The no version reenables DVMRP on the virtual router or interface. When used from Router Configuration mode in the context of a RIP configuration, disables RIP on the virtual router. The no version enables RIP processing on the virtual router. To return to User Exec mode: disable [ level ] level one of the following privilege levels; the default is 10

Syntax:

0 allows the user to execute the help, enable, disable, and exit
commands

1 allows the user to execute commands in User Exec mode plus


commands at level 0

5 allows the user to execute Privileged Exec show commands plus the
commands at levels 1 and 0

10 allows the user to execute all commands except support


commands, which may be provided by Juniper Networks Customer Service

15 allows the user to execute support commands


DVMRP, RIP: [ no ] disable Mode(s): Privileged Exec, Router Configuration (DVMRP or RIP), Interface Configuration (DVMRP only)

disable-autosync
Description: Halts automatic synchronization between the primary and standby SRP modules. The no version restores the default situation, in which automatic synchronization runs as a background process every 5 minutes. [ no ] disable-autosync Global Configuration

Syntax: Mode(s):

124

disable-dynamic-redistribute

disable-dynamic-redistribute
Description: Halts the dynamic redistribution of routes that are initiated by changes to a route map. Supported by DVMRP, BGP, IS-IS, OSPF, and RIP. The no version reenables dynamic redistribution of routes. [ no ] disable-dynamic-redistribute Address Family Configuration, Router Configuration

Syntax: Mode(s):

disable proxy lcp


Description: Syntax: Mode(s): Disables the proxy LCP parameter for the remote host. The no version enables the proxy LCP parameter for the remote host. [ no ] disable proxy lcp L2TP Destination Profile Host Configuration

disable-switch-on-error
Description: Prevents the redundant SRP module from taking over if the primary SRP module experiences a software failure or if you push the reset button on the primary SRP module. Issue the sync command immediately before you issue this command. The no version restores the default situation, in which the redundant SRP module takes over if the primary SRP module experiences a failure. [ no ] disable-switch-on-error Global Configuration

Syntax: Mode(s):

disconnect ssh
Description: Terminates an active SSH session. Use the show ip ssh command to determine the session identifier for the session to terminate. There is no no version. disconnect ssh { vty vtyId | sessionId } Mode(s): vtyId virtual terminal identifier for VTY where the SSH session resides; use the show users command to determine the identifier sessionId identifier for the session to be terminated

Syntax:

Privileged Exec

distance ERX Edge Routers

125

distance
Description: Defines an administrative distance for RIP or OSPF routes. A distance of 255 prevents the route from being installed in the routing table. The no version either negates a command or restores the commands defaults. The options available vary depending on your routing protocol context; that is, on whether you are configuring OSPF or RIP. OSPF: [ no ] distance { weight | ospf { external distExt | inter-area disInter | intra-area disIntra } [ external distExt | inter-area distInter | intra-area distIntra ]* } distance weight applied to OSPF routes weight value assigned to OSPF routes that are added to the IP routing table; a number in the range 1255 ospf OSPF routes distExt distance for external type 5 and type 7 routes; a number in the range 1255 disInter distance for interarea routes; a number in the range 1255 disIntra distance for intra-area routes; a number in the range 1255 * indicates that one or more parameters can be repeated multiple times in a list in the command line

Syntax:

RIP: [ no ] distance weight Mode(s): weight administrative distance assigned to RIP routes added to the IP routing table in the range 0255; the default is 120

Router Configuration

126

distance bgp

distance bgp
Description: Sets the administrative distances for BGP routes. A distance of 255 prevents the route from being installed in the routing table. The no version restores the default values. distance bgp externalDistance internalDistance localDistance no distance bgp [ externalDistance [ internalDistance [ localDistance ] ] ] Mode(s): externalDistance administrative distance for routes external to the AS in the range 1255; the default is 20 internalDistance administrative distance for routes internal to the AS in the range 1255; the default is 200 localDistance administrative distance for local (redistributed) routes in the range 1255; the default is 200

Syntax:

Address Family Configuration, Router Configuration

distance ip
Description: Sets the administrative distance for IS-IS routes that are inserted into the IP routing table. A distance of 255 prevents the route from being installed in the routing table. The no version restores the default value of 115. [ no ] distance weight ip Mode(s): weight administrative distance assigned to IS-IS routes added to the IP routing table in the range 1255

Syntax:

Router Configuration

distribute-domain-wide
Description: Increases the granularity of routing information within an IS-IS domain by allowing routes to be distributed from level 2 to level 1. This results in more accurate routing between level 1 areas. The no version disables command. [ no ] distribute-domain-wide Router Configuration

Syntax: Mode(s):

distribute-list ERX Edge Routers

127

distribute-list
Description: Specifies the distribute list, an access list applied to incoming or outgoing RIP route updates. In Remote Neighbor Configuration mode, applies only to a RIP remote-neighbor interface. The no version removes the distribute list. An IP access list acts as a filter; refer to the access-list command for details. In Router Configuration mode: [ no ] distribute-list accessListNumber { in | out } [ interfaceType interfaceSpecifier ] In Remote Neighbor Configuration mode: [ no ] distribute-list accessListName { in | out } Mode(s): accessListName name of the access list in applies the access list to incoming route updates out applies the access list to outgoing route updates interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Syntax:

Router Configuration, Remote Neighbor Configuration

dns-server
Description: Syntax: Assigns a DNS server to an address pool. The no version removes the association between the address pool and the DNS server. dns-server ipAddressPrimary [ ipAddressSecondary ] no dns-server Mode(s): ipAddressPrimary IP address of preferred DNS server ipAddressSecondary IP address of secondary DNS server

Pool Configuration

128

domain-authentication-key

domain-authentication-key
Description: Syntax: Assigns a password for authentication of IS-IS level 2 LSPs, CSNPs, and PSNPs. The no version deletes the password. domain-authentication-key [ 0 | 8 ] authKey no domain-authentication-key Mode(s): 0 the authKey is entered in unencrypted form (plaintext); this is the default option 8 the authKey is entered in encrypted form (ciphertext) authKey a password, a continuous string of characters up to 8 characters in length

Router Configuration

domain-id
Description: Syntax: Sets the OSPF domain ID for an OSPF VRF on a PE. The no version restores the default value. domain-id domainIdAddress | domainId no domain-id Mode(s): domainIdAddress OSPF domain ID in IP address format; default is the IP address of the OSPF router configured in the VRF domainId OSPF domain ID as an integer value in the range 04294967295; default is 0

Router Configuration

domain-message-digest-key
Description: Specifies an HMAC MD5 key that the system uses to create a secure, encrypted message digest of each IS-IS level 2 packet (LSPs, CSNPs, and PSNPs). The digest is inserted into the packet from which it is created. Using this algorithm for domain routers protects against unauthorized routers injecting false routing information into your network. You can specify when the system will start (default is the current time) and stop (default is never) accepting packets that include a digest made with this key. You can specify when the system will start (default is the current time plus 2 minutes) and stop (default is never) generating packets that include a digest made with this key. The no version deletes the key specified by the key-id. domain-message-digest-key keyId hmac-md5 [ 0 | 8 ] key [ start-accept startAcceptTime [ { startAcceptMonth startAcceptDay | startAcceptDay startAcceptMonth } startAcceptYear ] ] [ start-generate startGenTime [ { startGenMonth startGenDay | startGenDay startGenMonth } startGenYear ] ]

Syntax:

domain-name ERX Edge Routers

129

[ stop-accept { never | stopAcceptTime [ { stopAcceptMonth stopAcceptDay | stopAcceptDay stopAcceptMonth } stopAcceptYear ] } ] [ stop-generate { never | stopGenTime [ { stopGenMonth stopGenDay | stopGenDay stopGenMonth } stopGenYear ] } ] no domain-message-digest-key keyId keyId integer from 1 to 255 that is a unique identifier for the secret key, sent with the message digest in the packet. 0 the key is entered in unencrypted form (plaintext); this is the default option 8 the key is entered in encrypted form (ciphertext) key string of up to 20 alphanumeric characters; secret key used by the HMAC MD5 algorithm to generate the message digest. startAcceptTime, startAcceptMonth, startAcceptDay, startAcceptYear time, month, day, year that the system will start accepting packets created with this password. Use military time format HH:MM[ :SS ]. startGenTime, startGenMonth, startGenDay, startGenYear time, month, day, year that the system will start inserting this password into packets. Use military time format HH:MM[ :SS ]. never the system never stops accepting or generating packets; overrides previously specified stop times. stopAcceptTime, stopAcceptMonth, stopAcceptDay, stopAcceptYear time, month, day, year that the system will stop accepting packets created with this password. Use military time format HH:MM[ :SS ]. stopGenTime, stopGenMonth, stopGenDay, stopGenYear time, month, day, year that the system will stop inserting this password into packets. Use military time format HH:MM[ :SS ].

Mode(s):

Router Configuration

domain-name
Description: Specifies a domain name that can be returned to the subscriber of an address pool if requested. The no version removes the association between the address pool and the domain name. domain-name domainName no domain-name Mode(s): domainName name of the domain

Syntax:

Pool Configuration

130

domain-tag

domain-tag
Description: Syntax: Sets the VPN route tag for an OSPF VRF on a PE to prevent routing loops back into the VPN. The no version restores the default value. domain-tag routeTag no domain-tag Mode(s): routeTag number identifying the VPN route tag in the range 04294967295

Router Configuration

ds3-scramble
Description: Enables scrambling of the ATM cell payload on a T3 interface. DS3 scrambling assists clock recovery on the receiving end of the interface.The no version disables cell scrambling. [ no ] ds3-scramble Controller Configuration

Syntax: Mode(s):

dsr-detect
Description: Requires that a DSR signal be detected on the line for a user to log into the console. DSR is carried on pin 6 of the SRP modules RS-232 (DB-9) connector. The DSR input must be connected to the DSR output of a modem or the DTR output of another DTE device, such as a terminal server, that supports this signal. If a session is in progress and the DSR signal is lost, the user is logged out automatically. The no version restores the default of no DSR required. [ no ] dsr-detect Privileged Exec

Syntax: Mode(s):

dsu bandwidth ERX Edge Routers

131

dsu bandwidth
Description: Sets the speed for the fractional T3 lines. The no version clears the bandwidth. If you issue this command, be sure to issue the dsu mode and scramble commands. Similarly, if you issue the no version, be sure to issue the no dsu mode and no scramble commands; otherwise, the interface may drop packets unexpectedly. dsu bandwidth bandwidthValue no dsu bandwidth bandwidth sets a fractional bandwidth bandwidthValue value of the fractional bandwidth in the range 2244210 Kbps. The system offers a set of speeds in increments that depend on the DSU mode you specify. The actual speed of the fractional T3 lines will be the value closest to the fractional bandwidth you specify.

Syntax:

Mode(s):

Controller Configuration

dsu mode
Description: Sets the DSU mode for the lines. The no version clears the dsu mode. If you issue this command, be sure to issue the dsu bandwidth and scramble commands. Similarly, if you issue the no version, be sure to issue the no dsu bandwidth and no scramble commands; otherwise, the interface may drop packets unexpectedly. dsu mode 0 | 2 no dsu mode Mode(s): 0 Digital Link mode 2 Larscom mode

Syntax:

Controller Configuration

132

duplex

duplex
Description: Specifies the duplex mode for an Ethernet interface. The no version specifies the default value, automatically negotiate. This command works in conjunction with the speed command; if you set or accept the automatically negotiate setting for either duplex mode or speed, the system negotiates both parameters with the remote device. This command is not available for the Ethernet interface on the SRP module. duplex duplexMode no duplex duplexMode one of the following the duplex options

Syntax:

automatically negotiate specifies that the system negotiates duplex


mode with the remote device

full specifies that the system uses full duplex on an FE or GE interface half specifies that the system uses half duplex on an FE interface; this
value is not valid for GE interfaces Mode(s): Interface Configuration

e3-scramble ERX Edge Routers

133

e3-scramble
Description: Enables scrambling of the ATM cell payload on an E3 interface. E3 scrambling assists clock recovery on the receiving end of the interface.The no version disables scrambling. [ no ] e3-scramble Controller Configuration

Syntax: Mode(s):

enable
Description: Syntax: Enters Privileged Exec mode at the specified privilege level. There is no no version. enable [ level ] level one of the following privilege levels; the default is 10

0 allows the user to execute the help, enable, disable, and exit
commands

1 allows the user to execute commands in User Exec mode plus


commands at level 0

5 allows the user to execute Privileged Exec show commands plus the
commands at levels 1 and 0

10 allows the user to execute all commands except support


commands, which may be provided by Juniper Networks Customer Service

15 allows the user to execute support commands


Mode(s): User Exec

134

enable password

enable password
Description: Syntax: Sets a password to control access to certain types of commands. The no version removes the password requirement. enable password [ level securityLevel ] [ passwordType ] passwordText no enable password [ level securityLevel ] securityLevel the security level for which you want to set the password; the default is 5

0 allows the user to execute the help, enable, disable, and exit
commands

1 allows the user to execute commands in User Exec mode plus


commands at level 0

5 allows the user to execute Privileged Exec show commands plus


the commands at levels 1 and 0; this is the default level

10 allows the user to execute all commands except support


commands, which may be provided by Juniper Networks Customer Service

15 allows the user to execute support commands


passwordType:

0 specifies that an unencrypted password follows; this is the default 7 specifies that an encrypted password follows
passwordText password, either encrypted or unencrypted, depending on the password type

Note: On your system, all passwords are stored as encrypted passwords. Mode(s): Global Configuration

enable proxy authenticate


Description: Syntax: Mode(s): Configures proxy authenticate for a remote host. The no version removes proxy authenticate configuration from the remote host. [ no ] enable proxy authenticate L2TP Destination Profile Host Configuration

enable secret ERX Edge Routers

135

enable secret
Description: Syntax: Sets a secret to control access to certain types of commands. The no version removes the secret requirement. enable secret [ level securityLevel ] [ secretType ] secretText no enable secret [ securityLevel ] securityLevel the security level for which you want to set the secret; the default is 5

0 allows the user to execute the help, enable, disable, and exit
commands

1 allows the user to execute commands in User Exec mode plus


commands at level 0

5 allows the user to execute Privileged Exec show commands plus


the commands at levels 1 and 0; this is the default level

10 allows the user to execute all commands except support


commands, which may be provided by Juniper Networks Customer Service

15 allows the user to execute support commands


secretType:

0 specifies that an unencrypted secret follows; this is the default 7 specifies that an encrypted secret follows
secretText secret, either encrypted or unencrypted, depending on the secret type

Note: On your system, all secrets are stored as encrypted secrets. Mode(s): Global Configuration

encapsulation bridge1483
Description: Configures bridged Ethernet as the encapsulation method on an interface. The no version removes bridged Ethernet as the encapsulation method on the interface. [ no ] encapsulation bridge1483 Interface Configuration, Subinterface Configuration

Syntax: Mode(s):

136

encapsulation hdlc

encapsulation hdlc
Description: Syntax: Mode(s): Enables Cisco HDLC encapsulation. The no version disables Cisco HDLC on an interface. [ no ] encapsulation hdlc Interface Configuration, Subinterface Configuration

encapsulation ietf
Description: Enables Frame Relay or Multilink Frame Relay encapsulation. The no version removes Frame Relay or Multilink Frame Relay configuration from an interface. encapsulation { frame-relay | mlframe-relay } ietf no encapsulation { frame-relay | mlframe-relay } Mode(s): Interface Configuration

Syntax:

encapsulation mlppp
Description: Configures MLPPP as the encapsulation method on an individual interface. Creates an MLPPP link interface, also known as an MLPPP bundle member. The no version disables MLPPP on an interface. [ no ] encapsulation mlppp Interface Configuration, Subinterface Configuration

Syntax: Mode(s):

encapsulation ppp
Description: Syntax: Mode(s): Configures PPP as the encapsulation method for the interface. The no version disables PPP on an interface. [ no ] encapsulation ppp Interface Configuration, Subinterface Configuration

encapsulation pppoe
Description: Syntax: Configures PPPoE as the encapsulation method for the interface. The no version disables PPPoE on an interface. [ no ] encapsulation pppoe Mode(s): encapsulation configure pppoe encapsulation

Interface Configuration, Subinterface Configuration

encapsulation smds-trunk ERX Edge Routers

137

encapsulation smds-trunk
Description: Configures SMDS trunk as the encapsulation method for the interface. SMDS trunk encapsulation allows SMDS traffic to be sent over a GRE tunnel or a HSSI interface. The no version disables SMDS trunk encapsulation on an interface. [ no ] encapsulation smds-trunk Interface Configuration

Syntax: Mode(s):

encapsulation vlan
Description: Syntax: Mode(s): Configures VLAN as the encapsulation method for the interface. The no version disables VLAN on an interface. [ no ] encapsulation vlan Interface Configuration, Subinterface Configuration

encryption
Description: Syntax: Sets the encryption algorithm to use in the IKE policy. The no version restores the default, 3DES. encryption des | 3des no encryption Mode(s): des specifies 56-bit DES-CBC as the encryption algorithm 3des specifies 168-bit 3DES-CBC as the encryption algorithm

ISAKMP Policy Configuration

end
Description: Syntax: Mode(s): Exits Global Configuration mode or any of the Configuration submodes and returns to the User Exec mode. There is no no version. end Global Configuration

138

erase secrets

erase secrets
Description: Removes all CLI passwords or secrets. Execute before pressing the NMI button on the SRP module. There is no no version. Note: If you enter the service unattended password-recovery command, the behavior of the erase secrets command changes. The erase secrets command will not take any parameters and will not be available through a vty session until you enter no service unattended password-recovery. Syntax: erase secrets seconds Mode(s): seconds number of seconds in the range 160 to allow for the operation

User Exec

ethernet description
Description: Syntax: Adds a text description to a non-SRP Fast Ethernet or Gigabit Ethernet interface. The no version removes the description from the interface. ethernet description name no ethernet description Mode(s): name string of up to 15 characters

Interface Configuration

exceeded-action
Description: Sets the action for packets not conforming to the committed rate and committed burst size, and not conforming to the peak rate and peak burst size. The no version restores the default value, drop. [ no ] exceeded-action { drop | transmit | mark markVal } Mode(s): drop drop the packet transmit transmit the packet markVal mark value for the packet in the range 0255

Syntax:

Rate Limit Profile Configuration

exceeded-fraction ERX Edge Routers

139

exceeded-fraction
Description: Sets the percentage of the total queue length that can be occupied before dropping exceeded packets. The no version returns the exceeded fraction to its default setting. exceeded-fraction exceededFraction no exceeded-fraction Mode(s): exceededFraction percentage range 0100; default is 25

Syntax:

Queue Profile Configuration

exceeded-length
Description: Syntax: Sets minimum and maximum constraints for the queues exceeded lengths. The no version removes constraints on the queues exceeded length. exceeded-length minimumExceededLength [ maximumExceededLength ] no exceeded-length Mode(s): minimumExceededLength range 01073741824 maximumExceededLength range 01073741824

Queue Profile Configuration

exception dump
Description: Syntax: Specifies the location from and to which the system should transfer a core dump file. The no version disables the command. exception dump { except-srp | srp-only } { local | ipAddress [ directoryName ] } no exception dump Mode(s): except-srp generates core dump for all non-SRP modules srp-only generates core dump for only the SRP modules local nonvolatile storage memory ipAddress IP address of the server to which the system will transfer the core dump file directoryName name of the directory on the server to which the system will transfer the core dump file

Global Configuration

140

exception gateway

exception gateway
Description: Syntax: Specifies the gateway through which the system sends the core dump file to the remote FTP server. There is no no version. exception gateway ipAddress Mode(s): ipAddress IP address of the gateway

Global Configuration

exception protocol ftp


Description: Syntax: Specifies the username and password for FTP access to a host where you transferred a core dump file. The no version restores the defaults. exception protocol ftp [ [ algorithmType ] userName [ [ algorithmType ] password ] ] no exception protocol algorithmType type of user name or password

0 unencrypted password, the default. 8 encrypted password


Mode(s): userName username required to access the FTP server; the default username is anonymous password password required to access the FTP server; the default is no password

Global Configuration

exception source
Description: Specifies the IP address and mask of the system interface over which you want to send the core dump file to the remote FTP server. There is no no version. exception source ipAddress ipAddressMask Mode(s): ipAddress IP address of the interface ipAddressMask optionally add the IP address mask of the interface

Syntax:

Global Configuration

excess-burst ERX Edge Routers

141

excess-burst
Description: Syntax: Sets amount of bandwidth allocated to accommodate a packet in progress when the rate is in excess of the burst. [ no ] excess-burst [ size ] Mode(s): size the amount of bandwidth allocated; in the range 04294967295

Rate Limit Profile Configuration

exclude-subsystem
Description: Excludes subsystem files from being copied when you copy a software release to the system. The no version removes the exclusion for a specified subsystem file or all subsystem files. exclude-subsystem subsystemName no exclude-subsystem [ subsystemName ] Mode(s): subsystemName name of the subsystem file to be excluded

Syntax:

Global Configuration

exec-banner
Description: Controls display of an exec banner (configured with the banner command) on a particular line after user authentication (if any) and before the first prompt of a CLI session. The no version disables the banner. [ no ] exec-banner Line Configuration

Syntax: Mode(s):

exec-timeout
Description: Syntax: Sets the time interval that the console or vty line waits for expected user input. The no version restores the default value, which is no time limit. exec-timeout minutes [ seconds ] no exec-timeout Mode(s): minutes number of minutes for the time limit seconds number of seconds in addition to the minutes for the time limit

Line Configuration

142

exit

exit
Description: Syntax: Mode(s): Exits the current command mode. There is no no version. exit All modes

exit-address-family
Description: Syntax: Mode(s): Exits from Address Family Configuration mode and returns to Router Configuration mode. There is no no version. exit-address-family Address Family Configuration

exit-remote-neighbor
Description: Syntax: Mode(s): Exits from Remote Neighbor Configuration mode and returns to Router Configuration mode. There is no no version. exit-remote-neighbor Remote Neighbor Configuration

export map
Description: Syntax: Associates a route map with a VRF to filter routes exported by the VRF. The no version disables the application of the route map to exported routes. [ no ] export map routeMap Mode(s): routeMap name of a route map

VRF Configuration

fabric-strict-priority
Description: Syntax: Mode(s): Specifies strict priority scheduling for queues in the traffic class in the fabric. The no version deletes the strict priority setting. [ no ] fabric-strict-priority Traffic Class Configuration

fabric-weight ERX Edge Routers

143

fabric-weight
Description: Syntax: Specifies the relative weight for queues in the traffic class in the fabric. The no version sets the fabric weight to the default value. fabric-weight weight no fabric-weight Mode(s): weight range 163; default is 8

Traffic Class Configuration

fdl
Description: Syntax: Specifies the facility data link standard used by a CT1 interface. The no version restores the default, none. fdl { ansi | att | all | none } no fdl [ ansi | att | all ] Mode(s): ansi specifies ANSI T1.403 Standard for extended superframe FDL exchange support att specifies AT&T Technical Reference 54016 for extended superframe FDL exchange support all specifies both the AT&T and ANSI mode for extended superframe FDL exchange support none removes the current FDL mode settings

Controller Configuration

fdl carrier
Description: Specifies that an CT1 interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment. [ no ] fdl carrier Controller Configuration

Syntax: Mode(s):

144

fdl string

fdl string
Description: Defines an FDL message on a T1 interface as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages. fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue | generator generatorValue } no fdl string { eic | fic | lic | unit | pfi | port | generator } Mode(s): eicValue equipment identification code; 110 characters; default is the null value licValue line identification code; 110 characters; default is the null value ficValue frame identification code; 110 characters; default is the null value unitValue unit identification code; 16 characters; default is the null value. pfiValue facility identification code to send in the FDL path message; 138 characters; default is the null value. portValue equipment port number to send in the FDL idle signal message; 138 characters; default is the null value. generatorValue generator number to send in the FDL test signal message; 138 characters; default is the null value.

Syntax:

Controller Configuration

fdl transmit
Description: Configures the system to send the specified type of FDL message on the T1 interface. The no version stops the system from sending the specified type of FDL message or all FDL messages. [ no ] fdl transmit { path-id | idle-sIgnal | test-signal } no fdl transmit Mode(s): path-id transmits a path identification message every second idle-sIgnal transmits an idle signal every 10 seconds test-signal transmits a test signal every 10 seconds

Syntax:

Controller Configuration

filter ERX Edge Routers

145

filter
Description: Defines a policy rule that drops all packets conforming to the specified classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with this policy list for this rule. Use the suspend keyword to suspend a filter rule temporarily. The no version removes the rule from the policy list. [ no ] [ suspend ] filter [ classifier-group claclName ] [ precedence precValue ] Mode(s): suspend suspend the policy rule claclName classifier control list used to classify packets for this filter policy precValue precedence of this rule in relation to other rules within this set

Syntax:

Policy Configuration

flash-disk duplicate
Description: Syntax: Mode(s): Copies the contents of NVS on the primary SRP module to another NVS card. There is no no version. flash-disk duplicate Boot To access the Boot mode from the local console:
1 2 At the Privileged Exec prompt, type the reload command. Information on the reloading process appears. When the countdown begins, press the <M+B> key combination.

This puts the CLI in Boot mode (:boot## prompt). If you do not press the <M+B> key combination, the reloading process continues and returns the CLI to the normal User Exec mode.

flash-disk initialize
Description: Syntax: Performs a low-level format of NVS. There is no no version. flash-disk initialize [ no-format ] Mode(s): no-format erases all files but does not format NVS

Boot To access the Boot mode from the local console:


1 2 At the Privileged Exec prompt, type the reload command. Information on the reloading process appears. When the countdown begins, press the <M+B> key combination.

This puts the CLI in Boot mode (:boot## prompt). If you do not press the <M+B> key combination, the reloading process continues and returns the CLI to the normal User Exec mode.

146

flash-disk scan

flash-disk scan
Description: Scans NVS on the primary SRP module to detect corrupt sectors, deletes files and directories that contain corrupt sectors, fixes errors associated with unused sectors. There is no no version. flash-disk scan [ repair ] Boot To access the Boot mode from the local console:
1 2 At the Privileged Exec prompt, type the reload command. Information on the reloading process appears. When the countdown begins, press the <M+B> key combination.

Syntax: Mode(s):

This puts the CLI in Boot mode (:boot## prompt). If you do not press the <M+B> key combination, the reloading process continues and returns the CLI to the normal User Exec mode.

forward
Description: Defines a rule that forwards all packets conforming to the specified classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with this policy list for this rule. Use the suspend keyword to suspend a forward rule temporarily. The no version removes the rule from the policy list. [ no ] [ suspend ] forward [ classifier-group claclName ] [ precedence precValue ] Mode(s): suspend suspend a policy rule claclName classifier control list used to classify packets for this filter policy precValue precedence of this rule in relation to other rules within this set

Syntax:

Policy Configuration

frame-relay class
Description: Syntax: Associates a map class with a subinterface. The no version removes the association between the map class and the subinterface. [ no ] frame-relay class mapName Mode(s): mapName name of the map class; use up to 64 characters

Subinterface Configuration

frame-relay description ERX Edge Routers

147

frame-relay description
Description: Syntax: Assigns a text description or alias to a Frame Relay major interface or subinterface. The no version removes the description or alias. frame-relay description name no frame-relay description Mode(s): name text description or alias for the Frame Relay interface or subinterface; up to 64 characters

Interface Configuration, Subinterface Configuration

frame-relay fragment
Description: Configures fragmentation and reassembly for the map class created with the map-class frame-relay command. The no version stops fragmentation and/or reassembly on the subinterface. frame-relay fragment [ [ fragmentSize ] [ fragmentation-only ] | reassembly-only ] no frame-relay fragment Mode(s): fragmentSize maximum payload size of a fragment in bytes; a number in the range 168188; default value is 52 fragmentation-only specifies fragmentation only reassembly-only specifies reassembly only

Syntax:

Map Class Configuration

frame-relay interface-dlci ietf


Description: Assigns a data-link connection identifier to a specified Frame Relay subinterface on the router or access server. The DLCI number identifies a virtual circuit. The no version removes this assignment. frame-relay interface-dlci dlci ietf no frame-relay interface-dlci dlci Mode(s): dlci DLCI number to be used on the specified subinterface to identify a virtual circuit in the range 161007

Syntax:

Subinterface Configuration

148

frame-relay intf-type

frame-relay intf-type
Description: Syntax: Configures a Frame Relay interface type. The no version restores the default value, DTE. frame-relay intf-type type no frame-relay intf-type type one of the following interface types:

dce router is connected to user DTE equipment dte router is connected to a Frame Relay network; the default nni router connects two Frame Relay networks
Mode(s): Interface Configuration

frame-relay keepalive
Description: Enables the LMI mechanism for serial lines using Frame Relay encapsulation. The no version disables this capability. The keepalive command is similar to the frame-relay lmi-t391dte command. frame-relay keepalive [ seconds ] no frame-relay keepalive seconds number in the range 530; default is 10 seconds; defines the keepalive interval; the interval must be set, and the value on the DTE should be less than the value set on the DCE

Syntax:

Mode(s):

Interface Configuration

frame-relay lmi-n391dte
Description: Syntax: Sets the full-status polling counter (N391) on a DTE interface. The no version restores the default value, assuming an LMI has been configured. frame-relay lmi-n391dte keepExchanges no frame-relay lmi-n391dte keepExchanges number in the range 1 255; default is 6; number of keep exchanges to be done before requesting a full-status message. If you specify a value of 1, you receive full-status messages only.

Mode(s):

Interface Configuration

frame-relay lmi-n392dce ERX Edge Routers

149

frame-relay lmi-n392dce
Description: Syntax: Sets the error threshold counter (N392) on a DCE interface. The no version removes current setting and sets the default. frame-relay lmi-n392dce threshold no frame-relay lmi-n392dce Mode(s): threshold positive number in the range 1 10; number of errors that will place the interface in an operationally down state; the default is 2 errors

Interface Configuration

frame-relay lmi-n392dte
Description: Syntax: Sets the error threshold counter (N392) on a DTE interface. The no version removes current setting and sets the default. frame-relay lmi-n392dte threshold no frame-relay lmi-n392dte Mode(s): threshold positive number in the range 110; number of errors that will place the interface in an operationally down state; the default is 3 errors

Interface Configuration

frame-relay lmi-n393dce
Description: Syntax: Sets the monitored events count (N393) on a DCE interface. The no version removes current setting and sets the default. frame-relay lmi-n393dce events no frame-relay lmi-n393dce events number in the range 110 events; specifies the diagnostic window used to verify link integrity; the default is 2 events (The detection of N392 errors within the window of N393 samples places the interface in an operationally down state.)

Mode(s):

Interface Configuration

150

frame-relay lmi-n393dte

frame-relay lmi-n393dte
Description: Syntax: Sets the monitored event count (N393) on a DTE interface. The no version removes current setting and sets the default. frame-relay lmi-n393dte events no frame-relay lmi-n393dte events number in the range 110 events; the default is 4 events; specifies the diagnostic window used to verify link integrity (The detection of N392 errors within the window of N393 samples places the interface in an operationally down state)

Mode(s):

Interface Configuration

frame-relay lmi-t391dte
Description: Syntax: Sets the link integrity verification polling timer (T391) on a DTE interface. The no version removes the current setting and sets the default. frame-relay lmi-t391dte seconds no frame-relay lmi-t391dte seconds number in the range 530 seconds; specifies the interval in seconds between status inquiries issued by the DTE; the default is 10 seconds

Mode(s):

Interface Configuration

frame-relay lmi-t392dce
Description: Syntax: Sets the polling verification timer (T392) on a DCE interface. The no version removes current setting and sets the default. frame-relay lmi-t392dce seconds no frame-relay lmi-t392dce seconds number in the range 530 seconds; specifies the expected interval in seconds between status inquiries issued by the DTE equipment; the default is 15 seconds

Mode(s):

Interface Configuration

frame-relay lmi-type ERX Edge Routers

151

frame-relay lmi-type
Description: Syntax: Selects the LMI type. The no version restores the default value. frame-relay lmi-type type no frame-relay lmi-type type one of the following types:

ansi ANSI T1.617 Annex D cisco original Group of Four specification developed by DEC, Northern
Telecom, Stratacom, and Cisco

q933a ITU-T Q.933 Annex A none no management interface is used


Mode(s): Interface Configuration

152

framing

framing
Description: Specifies the framing mode used by a CE1, CT1, E3, or T3 interfaces. Available modes vary by the type of interface. The no version restores the default for that interface. framing framingType no framing framingType one of the following framing types: CE1 module

Syntax:

crc4 default; CRC4 frame no-crc4 disables CRC4 framing


CT1 module

esf default; extended superframe; sets the HDLC idle code to 0x7E sf superframe; sets the HDLC idle code to 0xFF
E3-FRAME module

g751 default; G.751 compliant frame g832 G.832 compliant frame


E3-ATM module

g751adm G.751 ATM direct mapping g751plcp default; G.751 PLCP mapping g832adm G.832 ATM direct mapping
T3 module

c-bit default; specifies c-bit parity framing m23 specifies M23 multiplexer framing
Mode(s): Controller Configuration

frequency
Description: Syntax: Sets the time interval between RTR operations. The no version restores the default value. frequency frequencyValue no frequency Mode(s): frequencyValue number of seconds between RTR operations; for both types (echo and pathEcho), the default is 60 seconds

RTR Configuration

ftp-server enable ERX Edge Routers

153

ftp-server enable
Description: Enables the FTP server and monitors the FTP port for attempts to connect to the FTP server. The no version terminates the current FTP sessions and disables the FTP server. [ no ] ftp-server enable Global Configuration

Syntax: Mode(s):

group
Description: From QoS Profile Configuration mode, specifies that a group scheduler node be configured for each interface of the given interface type. The no version removes this rule from the QoS profile. From ISAKMP Policy Configuration mode, assigns a Diffie-Hellman group to the IKE policy. The no version restores the default, 1024-bit Diffie-Hellman group. To specify a group scheduler node for QoS: [ no ] interfaceType group groupName scheduler-profile schedulerProfileName interfaceType one of the following interface types for which groups should be configured: atm, ethernet, serial, server-port groupName name of the traffic class group schedulerProfileName name of the scheduler profile

Syntax:

To Specify a Diffie-Hellman group: group { 1 | 2 | 5 } no group Mode(s): 1 specifies the 768-bit group 2 specifies the 1024-bit group 5 specifies the 1536-bit group

QoS Profile Configuration, ISAKMP Policy Configuration

154

halt

halt
Description: Stops operation on both SRP modules or on the specified SRP module. There is no no version.

Caution: To prevent corruption of NVS, issue this command before you remove or power down an SRP module. Syntax: The syntax of the command depends on whether you enter it in Boot mode or Privileged Exec mode. Boot Mode: halt Privileged Exec Mode: halt [ force | primary [ force ] | standby [ force ] ] force prompts the user to confirm that the system should stop operation if the SRP modules are in certain states, such as writing configuration data to NVS, that could lead to loss of configuration data or corruption of NVS. primary stop operation on primary SRP module only standby stop operation on standby SRP module only

Mode(s):

Boot, Privileged Exec To access the Boot mode from the local console:
1 2 At the Privileged Exec prompt, type the reload command. Information on the reloading process appears. When the countdown begins, press the <M+B> key combination.

This puts the CLI in Boot mode (:boot## prompt). If you do not press the <M+B> key combination, the reloading process continues and returns the CLI to the normal User Exec mode.

hash
Description: Syntax: Sets the hash algorithm in an IKE policy. The no version restores the default, SHA-1. hash sha | md5 no hash Mode(s): sha specifies SHA-1 (HMAC variant) as the hash algorithm md5 specifies MD5 (HMAC variant) as the hash algorithm

ISAKMP Policy Configuration

hdlc down-when-looped ERX Edge Routers

155

hdlc down-when-looped
Description: Syntax: Mode(s): Enables loopback detection on a Cisco HDLC interface. Loopback detection is disabled by default. The no version disables loopback detection. [ no ] hdlc down-when-looped Interface Configuration, Subinterface Configuration

hdlc keepalive
Description: Syntax: Specifies a keepalive value. The keepalive mechanism tracks the health of the connection. The no version turns off the keepalive feature. hdlc keepalive [ seconds ] no hdlc keepalive Mode(s): seconds keepalive timeout period in the range 06553 seconds. The default is 10. A value of zero (0) turns off the keepalive feature.

Interface Configuration, Subinterface Configuration

hdlc shutdown
Description: Syntax: Mode(s): Stops or restarts a Cisco HDLC session. The no version restarts a Cisco HDLC session. [ no ] hdlc shutdown Interface Configuration, Subinterface Configuration

hello hold-time
Description: Configures the MPLS hold time, the period that a sending LSR maintains a record of hello messages from the receiving LSR without receipt of another hello from that LSR. The no version restores the default value of 0. hello hold-time holdTime no hello hold-time holdTime a number in the range 065535; a value of 0 indicates 15 seconds for link hellos and 45 seconds for targeted hellos; a value of 65535 indicates an infinite hold time

Syntax:

Mode(s):

LDP Profile Configuration

156

hello-interval

hello-interval
Description: Syntax: Specifies the interval between hello packets that the router sends on the OSPF remote-neighbor interface. The no version restores the default value. hello-interval helloInterval no hello-interval Mode(s): helloInterval a number in the range 165535 seconds; default value is 10 seconds

Remote Neighbor Configuration

help
Description: Syntax: Mode(s): Displays basic information on the Help system. There is no no version. help All modes

hops-of-statistics-kept
Description: Syntax: Sets the number of hops to keep statistics for an entry. The no version restores the default value. hops-of-statistics-kept [ hopsKeptValue ] no hops-of-statistics-kept hopsKeptValue number of hops for which statistics are collected for a particular pathEcho type; the default is 16 for a pathEcho entry and 1 for an echo entry; if you omit this option, all hops found are recorded

Note: The only types your system supports are the pathEcho and the echo. Mode(s): RTR Configuration

host ERX Edge Routers

157

host
Description: Syntax: Adds or modifies an entry to the host table. The no version removes the specified host. host hostname ipAddress [ ftp [ [ algorithmType ] userName [ [ algorithmType ] password ] ] ] no host hostname hostname hostname to add or modify; up to 20 characters ipAddress IP address of the host ftp specifies that the host is an FTP server algorithmType type of username or password

0 unencrypted password, the default. 8 encrypted password


Mode(s): userName username used to access an FTP server (but not an NFS server); defaults to anonymous password password used to access an FTP server (but not an NFS server); defaults to null

Global Configuration

hostname
Description: Sets the name for the system in Global Configuration mode; this hostname subsequently appears in the system CLI prompt. The no version removes the hostname from the system. Note: In Domain Map Tunnel Configuration mode, this command has been deprecated in favor of the client-name command. See the client-name command. Syntax: hostname hostname no hostname Mode(s): hostname string of up to 64 characters (no spaces)

Global Configuration, Domain Map Tunnel Configuration (deprecated)

158

hssi force-dte-acknowledge

hssi force-dte-acknowledge
Description: Provides compatibility with DCE devices that wait for the DTE side to set the acknowledge bit first. Issue this command if the HSSI interface is configured as DTE, both sides of the connection are correctly configured, and the link does not come up. The no version prevents the HSSI interface from sending acknowledgment signals when in DTE mode. [ no ] hssi force-dte-acknowledge Interface Configuration

Syntax: Mode(s):

hssi internal-clock
Description: Syntax: Mode(s): Enable the internal clock for DCE mode on a HSSI interface. The no version disables the internal clock for DCE mode on a HSSI interface. [ no ] hssi internal-clock Interface Configuration

identification ERX Edge Routers

159

identification
Description: Specifies the assignment ID of an L2TP or L2F tunnel in Domain Map Tunnel Configuration mode. The no version removes the assignment ID from the tunnel. identification serverId no identification Mode(s): serverId L2TP or L2F tunnel assignment ID up to 32 characters

Syntax:

Domain Map Tunnel Configuration

igmp disable
Description: Syntax: Mode(s): Disables IGMP on a virtual router.The no version reenables IGMP on a virtual router. [ no ] igmp disable Router Configuration

igmp promiscuous
Description: Allows all IGMP interfaces on the router to accept IGMP reports from hosts on any subnet. The no version allows IGMP interfaces on the router to accept IGMP reports only from hosts on their associated subnets. [ no ] igmp promiscuous Router Configuration

Syntax: Mode(s):

ignore dcd
Description: Prevents the system from using the DTD signal when determining whether the interface is working, if an interface is configured as a V.35 DTE. The no version allows the system to use the DTD signal when determining whether the interface is working. [ no ] ignore dcd Interface Configuration

Syntax: Mode(s):

160

ignore link-state-signals

ignore link-state-signals
Description: Prevents the system from using any link state signal when determining whether a V.35/X.21 interface is working. The no version allows the system to use the link state signals when determining whether the interface is working. [ no ] ignore link-state-signals Interface Configuration

Syntax: Mode(s):

ignore-lsp-errors
Description: Allows the router to ignore IS-IS link state packets that are received with internal checksum errors rather than purging the link state packets. The no version disables this function. [ no ] ignore-lsp-errors Router Configuration

Syntax: Mode(s):

import map
Description: Syntax: Associates a route map with a VRF to filter routes received by the VRF. The no version disables the application of the route map to imported routes. [ no ] import map routeMap Mode(s): routeMap name of a route map

VRF Configuration

index
Description: Syntax: Sets a next hop at a particular index in the MPLS explicit path. The no version removes the next hop from the index. index indexNumber next-address ipAddress [ mask ipMask ] [ loose ] no index indexNumber index number of a node in an ordered set of abstract nodes, a value ranging from 1255 ipAddress address of the next hop ipMask [ not currently used] mask for the next adjacent address loose node is not necessarily directly connected (adjacent) to the previous node in the path. If loose is not configured, the configuration defaults to strict. Strict indicates that the node is directly connected to the previous node.

Mode(s):

Explicit Path Configuration

interface ERX Edge Routers

161

interface
Description: Syntax: Configures an interface. The no version removes the subinterface or the logical interface. [ no ] interface interfaceType interfaceSpecifier [ extension ] interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. extension option that depend on the type of interface

Note: See the following entries for the syntax of each type of interface. Mode(s): Global Configuration

interface atm
Description: Syntax: Configures an ATM interface or subinterface type. The no version removes the interface or subinterface. [ no ] interface atm interfaceSpecifier [ multipoint | point-to-point ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. multipoint use to specify an NBMA subinterface point-to-point default; use to specify an ATM interface or subinterface

Global Configuration, Interface Configuration

interface-event-disable
Description: Specifies that RIP does not purge the routing table on a RIP interface that has been brought down. The no version restores the default condition, wherein RIP does purge the routing table on an interface after a down event. [ no ] interface-event-disable Router Configuration

Syntax: Mode(s):

162

interface fastEthernet

interface fastEthernet
Description: Specifies a Fast Ethernet interface or subinterface or creates a subinterface over a Fast Ethernet interface. The no version removes the interface or subinterface. [ no ] interface fastEthernet interfaceSpecifier interfaceSpecifier location of the interface in the format slot/port [ .subinterface1 [ .subinterface2 ] ]

Syntax:

slot number of the chassis slot in the range 013 (ERX-1400 series)
and 06 (ERX-700 series)

port number of the port; 0 or 1 for a dual-port Fast Ethernet module,


07 for an eight-port Fast Ethernet module, 0 for the Fast Ethernet port on the SRP module . For a list of interface types and their corresponding specifiers, see Interface Types and Specifiers in About This Guide. The meaning of the subinterface variables depends on the configuration context. You can configure Fast Ethernet interfaces with or without VLANS. If you do not use VLANS, you can use either of two different configuration methods. VLANs

subinterface1 number of the VLAN subinterface in the range


14294967293; no more than 4096 VLAN subinterfaces per Fast Ethernet physical port

subinterface2 when using PPPoE, the number of the PPPoE


subinterface in the range 14294967293; no more than 4094 PPPoE subinterfaces per Fast Ethernet physical port No VLANs New Configuration Method

subinterface1 when using PPPoE, the number of the PPPoE


subinterface in the range 14294967293; no more than 4094 PPPoE subinterfaces per Fast Ethernet physical port

subinterface2 not used


No VLANs Alternative Configuration Method

subinterface1 number of the Fast Ethernet subinterface in the range


14294967293; no more than 2 subinterfaces per Fast Ethernet physical port

subinterface2 when using PPPoE, the number of the PPPoE


subinterface in the range 14294967293; no more than 4094 PPPoE subinterfaces per Fast Ethernet physical port Note: If you are configuring Fast Ethernet interfaces without VLANs and you are running software release 3.0.0 or higher, we highly recommend that you use the current configuration method. If you are configuring Fast Ethernet

interface gigabitEthernet ERX Edge Routers

163

interfaces without VLANs and you are running a software release earlier than 3.0.0 or if you are using scripts or macros created with such a release, you must use the alternative configuration method. Mode(s): Global Configuration

interface gigabitEthernet
Description: Specifies or creates a Gigabit Ethernet interface or a subinterface over a Gigabit Ethernet interface. The no version removes the interface or subinterface. [ no ] interface gigabitEthernet interfaceSpecifier interfaceSpecifier the location of the interface in the format slot/port [ .subinterface1 [ .subinterface2 ] ] For a list of interface types and their corresponding specifiers, see Interface Types and Specifiers in About This Guide. The meaning of the subinterface variables depends on the configuration context. You can configure Gigabit Ethernet interfaces with or without VLANS. VLANs

Syntax:

subinterface1 the number of the VLAN subinterface in the range


14294967293; no more than 4096 VLAN subinterfaces per Gigabit Ethernet physical port

subinterface2 when using PPPoE, the number of the PPPoE


subinterface in the range 14294967293; no more than 4094 PPPoE subinterfaces per Gigabit Ethernet physical port No VLANs

subinterface1 when using PPPoE, the number of the PPPoE


subinterface in the range 14294967293; no more than 4094 PPPoE subinterfaces per Gigabit Ethernet physical port

subinterface2 not used


Note: You can configure only the primary port, 0, on a GE I/O module. The system automatically uses the redundant port if the primary fails. Mode(s): Global Configuration

164

interface hssi

interface hssi
Description: Syntax: Selects a HSSI interface. The no version clears the configuration on the HSSI interface. [ no ] interface hssi interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.

Global Configuration

interface ip
Description: Syntax: Defines a shared IP interface. The no version removes the IP interface. [ no ] interface ip interfaceName Mode(s): interfaceName string of up to 15 characters

Global Configuration

interface loopback
Description: Syntax: Defines a loopback interface. The no version removes the loopback interface. [ no ] interface loopback interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.

Global Configuration

interface mlframe-relay
Description: Syntax: Defines an MFR bundle or a subinterface in a bundle. The no version removes the bundle or subinterface. [ no ] interface mlframe-relay interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.

Global Configuration

interface mlppp ERX Edge Routers

165

interface mlppp
Description: Syntax: Creates an MLPPP network interface, also known as the MLPPP bundle. The no version deletes the MLPPP bundle. [ no ] interface mlppp interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.

Interface Configuration, Subinterface Configuration

interface null
Description: Syntax: Mode(s): Defines a null interface, which does not forward traffic. The no version removes the null interface. [ no ] interface null 0 Global Configuration

interface pos
Description: Syntax: Configures a Packet over SONET interface. The no version removes the interface. [ no ] interface pos interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.

Global Configuration

interface serial
Description: Syntax: Specifies the location of the serial interface on CE1/CT1, CT3, E3/T3 FRAME, cOCx/STMx, and X.21/V.35 modules. The no version disables the interface. [ no ] interface serial interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.

Global Configuration

166

interface tunnel

interface tunnel
Description: Creates a tunnel interface for use by DVMRP, GRE, MPLS, or IPSec. You can specify that the tunnel be established in the routing space of a virtual router other than the current VR. If you specify another VR, all tunnel commands apply to the tunnel in that VR. If you do not specify another VR, tunnel commands apply to the current VR. The no version removes the tunnel interface. [ no ] interface tunnel interfaceSpecifier [ transport-virtual-router vrName ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. vrName name of virtual router in which the tunnel will be established

Syntax:

Global Configuration

invert data
Description: Enables data stream inversion. Data stream inversion must be turned on by network personnel at the other end of the line. The no version disables data stream inversion. [ no ] invert data Interface Configuration

Syntax: Mode(s):

invert txclock
Description: Enables inversion of the transmit clock signal, to compensate for differences between the clock and data rate when data is travelling at fast speeds over long cables. Data stream inversion must be turned on by network personnel at the other end of the line. The no version disables inversion of the transmit clock signal. [ no ] invert txclock Interface Configuration

Syntax: Mode(s):

ip access-routes
Description: Enables the ability to create host access routes on a PPP interface, which is useful for the B-RAS application. It also enables an access route in a profile. The no version disables the feature. [ no ] ip access-routes Interface Configuration, Subinterface Configuration, Profile Configuration

Syntax: Mode(s):

ip address ERX Edge Routers

167

ip address
Description: Sets a primary or secondary IP address for an interface or subinterface. The no version removes an IP address or disables IP processing. You must specify the layer 2 encapsulation before you can set the IP address. ip address ipAddress ipMask [ secondary ] no ip address [ ipAddress ipMask [ secondary ] ] Mode(s): ipAddress IP address in 32-bit dotted decimal format (for example, 192.56.32.2) ipMask mask for associated IP subnet secondary specifies that the configured address is a secondary IP address; if omitted, the configured address is the primary IP address

Syntax:

Interface Configuration, Subinterface Configuration, Profile Configuration

ip address-pool
Description: Syntax: Specifies to the system where to get an IP address for the remote user. The no version uses the default value, local. ip address pool { dhcp | local | none } no ip address pool Mode(s): dhcp enable the use of a DHCP server for address allocations local enable the use of local address pool for address allocations none do not enable an IP address pool

Global Configuration

ip alwaysup
Description: Forces the interface to appear as if it is up, regardless of the state of the lower layers. Use this command to reduce route topology changes when the network attached to this link is single-homed. The no version makes the interface appear in its current state. [ no ] ip alwaysup Interface Configuration, Subinterface Configuration

Syntax: Mode(s):

168

ip as-path access-list

ip as-path access-list
Description: Defines a BGP-related access list. You can specify an access list filter on both inbound and outbound BGP routes. Each filter is an access list based on regular expressions. If the regular expression matches the representation of the AS path of the route as an ASCII string, then the permit or deny condition applies. The AS path does not contain the local AS number. The no version removes a single access list entry if permit or deny and a pathExpression are specified. Otherwise, the entire access list is removed. ip as-path access-list accessListName { permit | deny } pathExpression no ip as-path access-list accessListName accessListName name of the access list; a string of up to 32 characters permit permits access for matching conditions deny denies access to matching conditions pathExpression the regular expression describing the AS paths to be matched Use a sequence of one or more elements, each of which is either an AS number or one of the following punctuation characters: ^ $ { } ( ) start of the path end of the path start of an AS_SET end of an AS_SET start of an AS_CONFED_SET or AS_CONFED_SEQ end of an AS_CONFED_SET or AS_CONFED_SEQ

Syntax:

Use the following regular expression metacharacters to match individual elements: . * + [] ^ _ matches any single element matches zero or more occurrences of any element matches one or more occurrences of any element matches any elements enclosed between brackets ([ ]) hyphen; used within brackets to specify a range of AS numbers matches any AS number except the ones specified when used as a first item within brackets underscore; used in non-ERX implementations on either side of a path to specify a literal and disallow substring matching. Allowed but not required in our CLI.

Mode(s):

Global Configuration

ip atm-vc ERX Edge Routers

169

ip atm-vc
Description: Syntax: Associates a protocol and address to a specific virtual circuit. ip ipAddress atm-vc vcd broadcast no ip ipAddress atm-vc vcd Mode(s): ipAddress ip address to be associated with the virtual circuit vcd number in the range 14294967295; virtual circuit descriptor; an identifier for the VC in other commands broadcast specifies that the circuit should participate in broadcast operations

Map List Configuration

ip bgp-community new-format
Description: Specifies that communities must be displayed in AA:NN format, where AA is a number that identifies the autonomous system and NN is a number that identifies the community within the autonomous system. The no version restores the default display. [ no ] ip bgp-community new-format Global Configuration

Syntax: Mode(s):

ip bgp-confed-as-set new-format
Description: Specifies that AS-confed-sets must be displayed within square brackets, [ ], with the ASs delimited by commas. The no version restores the default, displaying AS-confed-sets within parentheses, ( ), with the ASs delimited by spaces. [ no ] ip bgp-confed-as-set new-format Global Configuration

Syntax: Mode(s):

ip broadcast-address
Description: Syntax: Defines a broadcast address for an interface. The no version restores the default IP broadcast address. [ no ] ip broadcast-address [ ipAddress ] Mode(s): ipAddress broadcast IP address

Interface Configuration, Subinterface Configuration

170

ip community-list

ip community-list
Description: Syntax: Creates a community list for BGP and controls access to it. The no version removes the community list, including all list entries. ip community-list communityLisName { permit | deny } { communityNumber | asCommunityNumber | no-export | no-advertise | local-as | internet } [ communityNumber | asCommunityNumber | no-export | no-advertise | local-as | internet ]* ip community-list communityLisName { permit | deny } communityExpression no ip community-list communityLisName communityLisName name of a community list; a string of up to 32 characters; identifies one or more permit or deny groups of communities; used for standard community lists permit permits access for a matching condition deny denies access for a matching condition communityNumber community number in the range 14294967295 asCommunityNumber community number in the format AA:NN, where AA is a number that identifies the autonomous system and NN is a number that identifies the community within the autonomous system. no-export specifies that BGP does not advertise this route outside a BGP confederation boundary no-advertise specifies that BGP does not advertise this route to any peer (internal or external) local-as specifies that BGP does not advertise this route to external peers; sometimes known as the no-export-subconfed community internet specifies the Internet community * indicates that one or more parameters can be repeated multiple times in a list in the command line communityExpression a regular expression that matches the community

Mode(s):

Global Configuration

ip debounce-time ERX Edge Routers

171

ip debounce-time
Description: Defines the minimum time an IP interface must be in a given statefor example, up or downbefore being reported. The no version removes the debounce time. ip debounce-time [ vrf vrfName ] period no ip debounce-time [ vrf vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters period interval in the range 060000 seconds

Syntax:

Global Configuration

ip demux-type da-prefix
Description: Specifies that a subscriber interface will demultiplex traffic using destination addresses. The no version restores the default situation, in which the subscriber interface demultiplexes traffic using source addresses. [ no ] ip demux-type da-prefix Interface Configuration

Syntax: Mode(s):

ip destination-prefix
Description: Configures a subscriber interface to demultiplex traffic with the specified destination address. The no version removes the association between the subscriber interface and the specified destination address. [ no ] ip destination-prefix ipAddress ipAddressMask Mode(s): ipAddress destination IP address that the system uses to identify packets for this subscriber interface ipAddressMask network mask for associated IP subnet

Syntax:

Interface Configuration

ip dhcp-local cable-modem
Description: Specifies the IP address of the external DHCP server to which the DHCP local server will relay DHCP messages from cable modems. The no version removes the cable modem configuration. [no] ip dhcp-local cable-modem dhcp-server ipAddress Mode(s): ipAddress IP address of the cable modem DHCP server

Syntax:

Global Configuration

172

ip dhcp-local excluded-address

ip dhcp-local excluded-address
Description: Specifies IP addresses that the DHCP local server should not supply from the default address pool because those addresses are already used by devices on the subnet. The no version allows the DHCP local server to supply the specified IP address. [ no ] ip dhcp-local excluded-address ipAddressStart ipAddressStop Mode(s): ipAddressStart single IP address or start of the range of IP addresses that the DHCP local server should not supply ipAddressStop end of the range of IP addresses that the DHCP local server should not supply

Syntax:

Global Configuration

ip dhcp-local limit
Description: Specifies the maximum number of IP addresses that the DHCP local server can supply to each VPI, VCI, VLAN, or Ethernet subnet. The no version restores the default situation, in which there is no limit on the number of token IP addresses that the DHCP local server can supply to each VPI, VCI, VLAN, or Ethernet subnet. ip dhcp-local limit { atm | ethernet | vlan | } leaseNumber no ip dhcp-local limit [ atm | ethernet | vlan ] Mode(s): atm specifies the limit for VPIs and VCIs ethernet specifies the limit for Ethernet subnets vlan specifies the limit for VLANs leaseNumber maximum number of leases in the range 032767

Syntax:

Global Configuration

ip dhcp-local pool
Description: Syntax: Accesses Pool Configuration mode. The no version prevents the DHCP local server from supplying IP addresses from the specified pool. [ no ] ip dhcp-local pool { poolName | default } Mode(s): poolName name of the address pool default specifies the default address pool

Global Configuration

ip dhcp-server ERX Edge Routers

173

ip dhcp-server
Description: Adds the IP address of a single DHCP server to the list of DHCP servers from which the system can request addresses to allocate to remote users. A maximum of five DHCP servers can be specified. The no version removes the specified DHCP server or removes all DHCP servers from the list. ip dhcp-server dhcpServerAddress [ adminStatus ] no ip dhcp-server [ dhcpServerAddress [ adminStatus ] ] Ipaddress IP address of the DHCP server that will allocate addresses for remote users adminStatus one of the following options:

Syntax:

disable disable the DHCP server drain drain the DHCP server
Mode(s): Global Configuration

ip directed-broadcast
Description: Syntax: Mode(s): Enables translation of directed broadcast to physical broadcasts. The no version disables the function. [ no ] ip directed-broadcast Interface Configuration, Subinterface Configuration, Profile Configuration

ip disable-forwarding
Description: Disables forwarding of packets on the SRP Ethernet interface to maintain system performance. The no version enables forwarding of packets on the SRP Ethernet interface. You see an error message if you try to set this command for interfaces other than the SRP Ethernet interface. [ no ] ip disable-forwarding Interface Configuration, Subinterface Configuration

Syntax: Mode(s):

174

ip domain-lookup

ip domain-lookup
Description: Without the transit-virtual-router option, enables the system to query the configured DNS name servers when it needs an IP hostnametoIP address translation. With the transit-virtual-router option, configures a virtual router to use the name servers you configured for another virtual router. The no version without the transit-virtual-router option restores the default situation, in which the system does not query the DNS server. The no version with the transit-virtual-router option stops a virtual router from using the same name servers you configured for another virtual router. [ no ] ip domain-lookup [ transit-virtual-router vrName ] vrName name of the virtual router that has the DNS configuration you want to use for a second virtual router Mode(s): Global Configuration

Syntax:

ip domain-name
Description: Defines a default domain name for the clients that a name resolver serves. The no version deletes the domain name; that is, the domain name will no longer be appended to hostnames in the static host table. [ no ] ip domain-name domainName Mode(s): domainName default domain name for your hosts

Syntax:

Global Configuration

ip dvmrp
Description: Syntax: Mode(s): Activates DVMRP on an interface.The no version removes DVMRP from an interface. [ no ] ip dvmrp Interface Configuration

ip dvmrp accept-filter ERX Edge Routers

175

ip dvmrp accept-filter
Description: Syntax: Filters incoming DVMRP reports in accordance with a standard IP access list. The no version disables the filter. [ no ] ip dvmrp accept-filter listName1 [ distance ] neighbor-list listName2 listName1 name of the IP access list. If the name is 0, the interface accepts all destinations. You can specify a simple or extended access list; with an extended access list you can specify an address and a subnet mask. distance distance associated with the DVMRP route when the router determines the RPF interface for the source of a multicast packet. The default is 0; the range is 0 to 255. listName2 name of an access list containing the neighbors from which the system will accept reports. If the name is 0, the interface accepts destinations from all its neighbors.

Mode(s):

Interface Configuration

ip dvmrp announce-filter
Description: Specifies a list of DVMRP routes that the system will advertise on an interface. The no version restores the default situation, in which the system advertises all known routes on the interface. ip dvmrp announce-filter listName no ip dvmrp announce-filter listName name of the IP access list that specifies the DVMRP routes that the system will advertise on the interface. You can specify a simple or extended access list; with an extended access list you can specify an address and a subnet mask.

Syntax:

Mode(s):

Interface Configuration

ip dvmrp auto-summary
Description: Syntax: Mode(s): Summarizes routes automatically on an interface. By default, automatic summarization is enabled. The no version disables automatic summarization. [ no ] ip dvmrp auto-summary Interface Configuration

176

ip dvmrp disable

ip dvmrp disable
Description: Syntax: Mode(s): Disables DVMRP on an interface without removing the DVMRP configuration. The no version reenables the DVMRP configuration on a disabled interface. [ no ] ip dvmrp disable Interface Configuration

ip dvmrp metric-offset
Description: Adjusts the number of hops associated with routes passing through an interface. This action indicates that the route is more efficient or less efficient than an alternative route. The no version restores the default values. [ no ] ip dvmrp metric-offset { in | out } [ increment ] in increments the number of hops for a DVMRP route advertised in incoming DVMRP reports. If you do not specify a key word, this option is the default. out increments the number of hops for a DVMRP route advertised in outgoing DVMRP reports increment number of hops associated with this interface. The default is 1 for incoming reports and 0 for outgoing reports.

Syntax:

Mode(s):

Interface Configuration

ip dvmrp route-hog-notification
Description: Sets the number of DVMRP routes that the system can record before it generates a syslog warning message.The no version restores the default setting, 10,000 routes. [ no ] ip dvmrp route-hog-notification [ limit ] Global Configuration

Syntax: Mode(s):

ip dvmrp route-limit
Description: Limits the number of routes that the system can advertise on each interface. The default value is 7000. The no version removes the limit for the number of routes that the system can advertise on each interface. [ no ] ip dvmrp route-limit [ limit ] Mode(s): limit number of routes that the system can advertise

Syntax:

Global Configuration

ip dvmrp summary-address ERX Edge Routers

177

ip dvmrp summary-address
Description: Syntax: Advertises a DVMRP summary address on the interface. The no version stops the advertising of a summary address on an interface. [ no ] ip dvmrp summary-address ipAddress mask [ metric cost ] Mode(s): ipAddress summary address mask subnet mask cost cost associated with this summary address

Interface Configuration

ip dvmrp unicast-routing
Description: Enables the exchange of DVMRP unicast routes on an interface not owned by DVMRP. The no version disables the exchange of DVMRP unicast routes on an interface not owned by DVMRP. [ no ] ip dvmrp unicast-routing Interface Configuration

Syntax: Mode(s):

ip dynamic-interface-prefix
Description: Syntax: Specifies the prefix for the names of dynamic shared IP interfaces created for overlapping BGP/MPLS VPNs.The no version restores the default prefix, dyn. ip dynamic-interface-prefix [ vrfName ] prefix no ip dynamic-interface-prefix [ vrfName ] Mode(s): vrfName name of the VRF in which the shared interface is created; a string of 132 alphanumeric characters prefix string of 110 alphanumeric characters

Global Configuration

178

ip explicit-path

ip explicit-path
Description: Defines an explicit path by name and also enables or disables explicit path routing in a non-ERX implementation. See the mpls explicit-path command for a complete description and syntax.

ip extcommunity-list
Description: Syntax: Defines an extended-community (extcommunity) list to be referenced in a route map. The no version deletes the extcommunity. ip extcommunity-list listName { permit | deny } extendedCommunity [ extendedCommunity ]* no ip extcommunity-list listName listName name of the extended-community list permit permits membership in the extended community for matching conditions deny denies membership in the extended community for matching conditions extendedCommunity extended community specified in the format: {rt | soo } { ASN:nn | ipAddress:nn }

rt specifies a route-target community; consists of one or more routers


that can receive a set of routes advertised by BGP that carry the extended-community attribute

soo specifies a Site-of-Origin community; consists of one or more


routers that injects a set of routes into BGP that carry the extended-community attribute

ASN:nn identifies the extended community by a 16-bit autonomous


system number followed by a 32-bit integer

ipAddress:nn identifies the extended community identified by an IP


address followed by a 32-bit integer Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line

Global Configuration

ip filter-options all
Description:

Enables filtering of packets with IP options on an interface. IP options filtering is disabled by default. The no version disables filtering of packets with IP options.
[ no ] ip filter-options all Interface Configuration

Syntax: Mode(s):

ip ftp source-address ERX Edge Routers

179

ip ftp source-address
Description: Specifies an operational interface by IP address as the source interface in FTP packets sent via the systems FTP client. The no version restores the source address in the FTP packets to that on which the FTP connection is made. ip ftp source-address sourceAddress no ip ftp source-address [ sourceAddress ] Mode(s): sourceAddress source IP address

Syntax:

Global Configuration

ip ftp source-interface
Description: Identifies an interface by type and location as the source interface in FTP packets sent via the systems FTP client. The no version restores the source address in the FTP packets to that on which the FTP connection is made. ip ftp source-interface interfaceType interfaceSpecifier no ip ftp source-interface [ interfaceType interfaceSpecifier ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Syntax:

Global Configuration

ip-hint
Description: When enabled, the ERX will preallocate an IP address for the remote (B-RAS) user before calling authentication.The address is then passed as a hint in the authentication request to the RADIUS server. The no version disables the feature. ip-hint { enable | disable } no ip-hint Mode(s): Domain Map Configuration

Syntax:

180

ip http access-class

ip http access-class
Description: Allows only subscribers on a standard IP access list to connect to the HTTP local server. The no version removes the association between the access list and the HTTP local server. ip http access-class listName no ip http access-class Mode(s): listName name of the access list

Syntax:

Global Configuration

ip http max-connection-time
Description: Syntax: Specifies the maximum time that the HTTP local server maintains an inactive connection. The no version restores the default time, 30 seconds. ip http max-connection-time seconds no ip http max-connection-time Mode(s): seconds time that the HTTP local server maintains a connection; either 0 (forever) or in the range 37200 seconds

Global Configuration

ip http not-found-url
Description: Specifies the Web page or message that appears if the subscriber requests a URL that is not available. The no version displays the standard HTTP message 404 not found. ip http not-found-url { url | root-url } no ip http not-found-url Mode(s): url URL of the Web page that appears on the subscribers computer if the DHCP local server is not configured or enabled root-url displays the root Web page

Syntax:

Global Configuration

ip http port ERX Edge Routers

181

ip http port
Description: Syntax: Specifies the port on which the HTTP local server receives connection attempts. The no version restores the default port number, 80. ip http port portNumber no ip http port Mode(s): portNumber number of the port on which connection attempts are received, in the range 065535

Global Configuration

ip http realm
Description: Specifies the name the Web browser displays to subscribers when the HTTP client requests the user information. The no version restores the default value, the name of the virtual router. ip http realm connectionName no ip http realm Mode(s): connectionName connection name that subscribers see when the HTTP client requests user information

Syntax:

Global Configuration

ip http root-refresh
Description: Syntax: Specifies how often the browser updates the default internal starting (root) Web page. The no version restores the default time interval, 0 seconds. ip http root-refresh seconds no ip http root-refresh Mode(s): seconds time interval, in the range 065535 seconds, at which the default internal starting Web page is refreshed

Global Configuration

182

ip http root-url

ip http root-url
Description: Specifies a URL external to the system for the starting (root) Web page that appears on the subscribers computer when the subscriber logs in. The no version restores the default internal URL as the starting Web page. ip http root-url url no ip http root-url Mode(s): url external URL of the Web page that appears on the subscribers computer when the connection to the HTTP local server is established

Syntax:

Global Configuration

ip http same-host-limit
Description: Specifies the maximum number of connections that can exist between one IP address and the HTTP local server. The no version restores the default number of allowed connections, 3. ip http same-host-limit maxConnections no ip http same-host-limit Mode(s): maxConnections maximum number of connections allowed between one IP address and the HTTP local server, in the range 01000

Syntax:

Global Configuration

ip http server
Description: Syntax: Creates or enables the HTTP local server. The no version deletes or disables the HTTP local server. [ no ] ip http [ server ] server enables or disables the HTTP local server. If you do not specify the keyword server, the command creates the HTTP local server and the no version removes the server.

Mode(s):

Global Configuration

ip igmp
Description: Syntax: Mode(s): Enables IGMPv2 on an interface. The no version disables IGMPv2 on an interface. [ no ] ip igmp Interface Configuration, Profile Configuration

ip igmp access-group ERX Edge Routers

183

ip igmp access-group
Description: Restricts hosts on this subnet to joining multicast groups on the specified IP access list. The no version removes the association with the specified access list and allows hosts on the subnet to join any multicast group. ip igmp access-group accessListName no ip igmp access-group Mode(s): accessListName name of the access list; a string of up to 32 characters

Syntax:

Interface Configuration, Profile Configuration

ip igmp group limit


Description: Limits the number of IGMP groups that an interface can accept. The no version restores the default situation, in which there is no limit to the number of IGMP groups that the interface accepts. ip igmp group limit groupLimit no ip igmp group limit Mode(s): groupLimit maximum number of IGMP groups that an interface can accept in the range 064,000

Syntax:

Interface Configuration, Profile Configuration

ip igmp immediate-leave
Description: Removes an interface immediately when the router receives an leave group membership message from the host associated with this interface. The no version restores the default situation, in which the router issues query messages to multicast groups and removes an interface if the associated host does not return a group membership report within a certain length of time. Caution: Issue this command only on IGMPv2 interfaces to which one IGMP client is connected. Do not issue this command to interfaces to which more than one IGMP client is connected. Syntax: Mode(s): [ no ] ip igmp immediate-leave Interface Configuration, Profile Configuration

184

ip igmp last-member query-interval

ip igmp last-member query-interval


Description: Specifies in tenths of a second how long the system waits after receiving an IGMP leave message before it sends another query. The no version restores the default value, 10 tenths of a second (1 second). ip igmp last-member-query-interval tenthsOfaSecond no ip igmp last-member-query-interval tenthsOfaSecond time interval between receipt of an IGMP leave message and sending out of a query in the range 1254 tenths of a second. Using a lower value allows members to leave groups more quickly.

Syntax:

Mode(s):

Interface Configuration, Profile Configuration

ip igmp promiscuous
Description: Enables the specified interface to accept IGMP reports from hosts on any subnet. The no version specifies that an IGMP interface should use the Router Configuration mode setting (see the igmp promiscuous command) to determine from which subnets it can accept IGMP reports. ip igmp promiscuous { on | off } no ip igmp promiscuous Mode(s): on enables the interface to accept IGMP reports from hosts on any subnet off allows the interface to accept IGMP reports only from hosts on subnets associated with this interface

Syntax:

Interface Configuration, Profile Configuration

ip igmp-proxy
Description: Syntax: Mode(s): Enables IGMP proxy on an interface. The no version disables IGMP proxy for an interface. [ no ] ip igmp-proxy Interface Configuration

ip igmp-proxy unsolicited-report-interval ERX Edge Routers

185

ip igmp-proxy unsolicited-report-interval
Description: Specifies how often the upstream interface should transmit unsolicited reports. This command has no effect on interfaces other than the upstream value. The no version transmits unsolicited reports using the default value, 400 seconds. Note: Issue this command only on the upstream interface. Otherwise, this command will have no effect. Syntax: ip igmp-proxy unsolicited-report-interval seconds no ip igmp-proxy unsolicited-report-interval Mode(s): seconds time interval at which the interface transmits unsolicited reports

Interface Configuration

ip igmp-proxy V1-router-present-time
Description: Specifies how long the system assumes that there is an IGMPv1 querier router on the subnet after the system receives an IGMP V1 query on this interface. The no version restores the default value, 10 seconds. ip igmp-proxy V1-router-present-time seconds no ip igmp-proxy V1-router-present-time seconds time for which the system assumes that there is an IGMPv1 querier router on the subnet after the system receives an IGMP V1 query on this interface

Syntax:

Mode(s):

Interface Configuration

ip igmp querier
Description: Specifies that the interface will act as a querier when you configure IGMPv1 on an interface. The no version specifies that this interface will not issue query packets. Note: This command is invalid for interfaces on which you configured IGMPv2. Syntax: Mode(s): [ no ] ip igmp querier Interface Configuration, Profile Configuration

186

ip igmp querier-timeout

ip igmp querier-timeout
Description: Syntax: Sets the time that the interface waits before declaring itself as the querier. The no version restores the default value, twice the query interval. ip igmp querier-timeout seconds no ip igmp querier-timeout Mode(s): seconds time interval between the last query from the previous router and the first query from this interface

Interface Configuration, Profile Configuration

ip igmp query-interval
Description: Syntax: Sets how often the system sends IGMP host-query packets from this interface. The no version restores the default value, 125 seconds. ip igmp query-interval seconds no ip igmp query-interval Mode(s): seconds polling interval in the range 065535 seconds

Interface Configuration, Profile Configuration

ip igmp query-max-response-time
Description: Specifies the period in tenths of a second during which the host is expected to respond to an IGMP query. IGMP version 2 includes this value in IGMP query messages sent out on the interface. You cannot set this value on interfaces running IGMP version 1. The no version restores the default value of 10 tenths of a second (1 second). ip igmp query-max-response-time tenthsOfaSecond no ip igmp query-max-response-time Mode(s): tenthsOfaSecond time interval between receipt of an IGMP query and the response; the range is 1254 tenths of a second.

Syntax:

Interface Configuration, Profile Configuration

ip igmp robustness ERX Edge Routers

187

ip igmp robustness
Description: Specifies the number of times that the system sends IGMP group-specific queries before declaring a group to no longer have any members on an interface. The no version restores the default value, 3. ip igmp robustness numberOfMessages no ip igmp robustness Mode(s): numberOfMessages number of times that the system sends IGMP group-specific queries in the range 14

Syntax:

Interface Configuration, Profile Configuration

ip igmp static-group
Description: Assigns an interface to handle all multicast traffic for a group. The interface sets no timers for this group. The no version removes the group from the interface. [ no ] ip igmp static-group groupAddress Mode(s): groupAddress address of the group

Syntax:

Interface Configuration, Profile Configuration

ip igmp version
Description: Syntax: Sets the IGMP version for the interface. The no version restores the default value, IGMPv2. ip igmp version { 2 | 1 } no ip igmp version 2 IGMP version 2 1 IGMP version 1 Mode(s): Interface Configuration, Profile Configuration

ip ignore-df-bit
Description: Specifies that the system ignores the dont-fragment bit if present in the IP header of packets crossing the configured interface; the system then fragments packets even if the bit is present. The no version restores the default behavior, which is to consider the DF bit before fragmenting. [ no ] ip ignore-df-bit Interface Configuration

Syntax: Mode(s):

188

ip interface

ip interface
Description: This command has only a no version. See the no ip interfacecommand for a complete description and syntax.

ip irdp
Description: Syntax: Mode(s): Enables ICMP Router Discovery Protocol processing on an interface. The no version disables IRDP routing. [ no ] ip irdp Interface Configuration, Subinterface Configuration

ip local pool
Description: Specifies the pool name, the starting address, the ending address, group name, the utilization threshold, and the SNMP trap flag. The no version deletes a local pool. [ no ] ip local pool name [ startIpAddress [ endIpAddress ] [ warning highUtilization abatedUtilization ] [ snmpTrap ] ] name text string in the range 116 characters that defines the name of the local address pool startIpAddress starting IP address in the local address pool endIpAddress ending IP address in the local address pool warning specifies one of the following utilization warnings:

Syntax:

highUtilization high utilization value; a number in the range 1100;


default is 85

abatedUtilization abated utilization value; a number in the range


1100; default is 75 Mode(s): snmpTrap enables SNMP pool utilization traps

Global Configuration

ip local pool snmpTrap


Description: Syntax: Enables SNMP pool utilization traps. The no version disables SNMP pool utilization traps. [ no ] ip local pool name snmpTrap Mode(s): name text string in the range 116 characters that defines the name of the local address pool

Global Configuration

ip local pool warning ERX Edge Routers

189

ip local pool warning


Description: Syntax: Use to identify the warning threshold values. The no version resets the thresholds to their default values. ip local pool name warning highUtilization abatedUtilization [ snmpTrap ] no ip local pool name warning [ highUtilization abatedUtilization ] Mode(s): name text string in the range 116 characters that defines the name of the local address pool highUtilization high utilization value; a number in the range 1100; default is 85 abatedUtilization abated utilization value; a number in the range 1100; default is 75 snmpTrap enables snmp pool utilization traps

Global Configuration

ip mac-validate
Description: Syntax: Enables MAC address validation on a per interface basis. The no version disables the feature. ip mac-validate [ strict | loose ] no ip mac-validate strict prevents transmission of IP packets that do not reside in the validation table loose allows IP packets to pass through even though the packets do not have entries in the validation table; only packets that have matching IPMAC pair entries in the table are validated

Mode(s):

Interface Configuration

ip mask-reply
Description: Syntax: Mode(s): Enables ICMP netmask reply. The no version disables the feature. [ no ] ip mask-reply Interface Configuration, Subinterface Configuration

190

ip mpls forwarding-mode label-switched

ip mpls forwarding-mode label-switched


Description: Generates a label for each different FEC that a BGP route points to in a BGP/MPLS VPN. The no version restores the default, generating a single label for all BGP routes sent from a given VRF. Note: For some types of routes, the system always generates a per-VRF label, regardless of the status of this command. See ERX Routing Protocols Configuration Guide, Vol. 2, Chapter 3, Configuring BGP/MPLS VPNs, for details. Syntax: Mode(s): [ no ] ip mpls forwarding-mode label-switched VRF Configuration

ip mpls vpn-interface per-label


Description: Creates a VPN interface for each received stacked label in a BGP/MPLS VPN, enabling collection of statistics on a per-label basis. The no version restores the default, creating a VPN interface for each next-hop PE. Note: Operating in per-label mode limits the number of egress FECs supported to the order of thousands. Syntax: Mode(s): [ no ] ip mpls vpn-interface per-label VRF Configuration

ip mtu
Description: Syntax: Sets the maximum transmission unit size of IP packets sent on an interface. The no version restores the default value. [ no ] ip mtu [ mtuSize ] mtuSize maximum number of packet transmissions permitted on an interface. The range is 12810240. The default is 0, which means that the system takes the value from a lower protocol layer.

Mode(s):

Interface Configuration, Subinterface Configuration, Profile Configuration

ip multicast-routing
Description: Syntax: Mode(s): Enables IP multicast routing on the system. The no version disables IP multicast routing on the system. [ no ] ip multicast-routing Global Configuration

ip multipath round-robin ERX Edge Routers

191

ip multipath round-robin
Description: Syntax: Mode(s): Specifies round-robin as the mode for ECMP load sharing on an interface. The no version restores the default value, hashed. [ no ] ip multipath round-robin Subinterface Configuration

ip name-server
Description: Syntax: Specifies a DNS name server that the system can query for hostnametoIP address resolution. The no version deletes the name server. [ no ] ip name-server serverIpAddress [ serverIpAddress ]* Mode(s): serverIpAddress IP address of a DNS name server * indicates that one or more parameters can be repeated multiple times in a list in the command line

Global Configuration

ip nfs
Description: Specifies the ERX interface that the current virtual router uses to exchange NFS communications with an NFS server. The no version prevents this interface from sending or receiving NFS communications for the current virtual router. ip nfs { source-address ipAddress | source-interface interfaceType interfaceSpecifier } no ip nfs { source-address | source-interface } Mode(s): ipAddress IP address of an ERX interface that sends and receives NFS communications interfaceType ERX interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular ERX interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.

Syntax:

Global Configuration

192

ip nfs host

ip nfs host
Description: Syntax: Configures a remote host as an NFS server for the current virtual router. The no version disassociates the NFS server from the virtual router. ip nfs host hostName [ user userID [ group groupID ] ] no ip nfs host hostName Mode(s): hostName name of the remote host userID user identity in the range 04294967295 that a user must enter to connect to the remote host; default is 2001 groupID group identity in the range 04294967295 that the user must enter to connect to the remote host; default is 100

Global Configuration

ip ospf authentication-key
Description: Syntax: Assigns a password used by neighboring routers that are using OSPF simple password authentication. The no version deletes the password. ip ospf authentication-key authKey no ip ospf authentication-key Mode(s): authKey password; continuous string of characters up to 8 characters in length

Interface Configuration, Subinterface Configuration

ip ospf authentication message-digest


Description: Specifies that the authentication mode for the interface is MD5. The no version sets authentication for the interface to none, but leaves any configured MD5 key intact. [ no ] ip ospf authentication message-digest Interface Configuration, Subinterface Configuration

Syntax: Mode(s):

ip ospf authentication-none
Description: Syntax: Mode(s): Specifies that no authentication is to be used for the interface. The no version has no effect. ip ospf authentication-none Interface Configuration, Subinterface Configuration

ip ospf cost ERX Edge Routers

193

ip ospf cost
Description: Syntax: Specifies a cost metric for an interface. Used in the calculation of the SPF routing table. The no version resets the path cost to the default. [ no ] ip ospf cost intfCost Mode(s): intfCost link state metric cost; number in the range 065535; default value is 10

Interface Configuration, Subinterface Configuration

ip ospf dead-interval
Description: Sets the time period during which the routers neighbors do not see hello packets before they declare the router to be down. The no version resets the dead interval to its default. [ no ] ip ospf dead-interval deadInterval Mode(s): deadInterval number in the range 165535 seconds; default value is 40 seconds

Syntax:

Interface Configuration, Subinterface Configuration

ip ospf hello-interval
Description: Syntax: Specifies the interval between hello packets that the router sends on the interface. The no version resets the hello interval to its default. [ no ] ip ospf hello-interval helloInterval Mode(s): helloInterval number in the range 165535 seconds; default value is 10 seconds

Interface Configuration, Subinterface Configuration

194

ip ospf message-digest-key md5

ip ospf message-digest-key md5


Description: Syntax: Enables OSPF MD5 authentication and configures the MD5 key. The no version deletes an MD5 key. ip ospf message-digest-key keyID md5 [ 0 | 8 ] msgDigestKey no ip ospf message-digest-key keyID keyID key identifier in the range 1255 md5 specifies use of the MD5 algorithm 0 indicates the msgDigestKey is entered in unencrypted form (plaintext); this is the default option 8 indicates the msgDigestKey is entered in encrypted form (ciphertext) msgDigestKey OSPF password; a continuous string of up to 16 alphanumeric characters

Note: If all the MD5 keys have been deleted, the authentication type is still MD5, but you must configure MD5 keys. Note: To disable MD5 authentication for the interface, use the ip ospf authentication-none command. Note: To display the password only in encrypted text, use the service password-encryption command. Mode(s): Interface Configuration, Subinterface Configuration

ip ospf network
Description: Syntax: Configures the OSPF network type to something other than the default for the network medium. The no version restores the default value for the medium. ip ospf network { broadcast | non-broadcast | point-to-point } no ip ospf network Mode(s): broadcast sets the network type to broadcast non-broadcast sets the network type to NBMA point-to-point sets the network type to point-to-point

Interface Configuration, Subinterface Configuration

ip ospf priority ERX Edge Routers

195

ip ospf priority
Description: Sets the router priority. Used in determining the designated router for the particular network. This designation applies only to multiaccess networks. Every broadcast and nonbroadcast multiaccess network has a designated router. The no version restores the default value. [ no ] ip ospf priority intfPriority Mode(s): intfPriority priority value, an 8-bit number in the range 1255; default value is 1

Syntax:

Interface Configuration, Subinterface Configuration

ip ospf retransmit-interval
Description: Specifies the time between LSA retransmissions for the interface when an acknowledgment for the LSA is not received. The no version restores the default value. [ no ] ip ospf retransmit-interval retransInterval Mode(s): retransInterval number in the range 165535 seconds; default value is 5 seconds

Syntax:

Interface Configuration, Subinterface Configuration

ip ospf shutdown
Description: Syntax: Mode(s): Disables OSPF on an interface. The no version enables OSPF on the interface. [ no ] ip ospf shutdown Interface Configuration, Subinterface Configuration

ip ospf transmit-delay
Description: Syntax: Sets the estimated time it takes to transmit a link state update packet on the interface. The no version restores the default value. [ no ] ip ospf transmit-delay transmDelay Mode(s): transmDelay link state transmit delay, a number in the range 165535 seconds; default value is 1 second

Interface Configuration, Subinterface Configuration

196

ip pim

ip pim
Description: Syntax: Enables PIM on an interface. The no version disables PIM on an interface. [ no ] ip pim [ dense-mode | sparse-mode | sparse-dense-mode ] Mode(s): dense-mode enables PIM in dense mode sparse-mode enables PIM in sparse mode sparse-dense-mode enables PIM in sparse-dense mode

Interface Configuration

ip pim query-interval
Description: Syntax: Specifies how often the system sends PIM router query messages from this interface. The no version specifies the default time interval, 30 seconds. ip pim query-interval queryTime no ip pim query-interval Mode(s): queryTime interval in the range 0210 seconds at which the system sends PIM router query messages from this interface

Interface Configuration

ip pim rp-address
Description: Syntax: Specifies a static PIM grouptoRP mapping. The no version clears the mapping from this interface. [ no ] ip pim rp-address ipAddress [ ipAccessList ] [ override ] Mode(s): ipAddress IP address of the system you want to designate as an RP router ipAccessList name of the IP access list that specifies which multicast groups use this RP override specifies that this static RP mapping has priority over group-to-RP mappings learned by auto-RP

Configuration Mode

ip pim send-rp-announce ERX Edge Routers

197

ip pim send-rp-announce
Description: Syntax: Sends autoRP announcement messages from a system you configured as an RP. The no version clears the filter from this interface. ip pim send-rp-announce interfaceType interfaceSpecifier scope ttl [ group-list ipAccessList] [ interval seconds ] no ip pim send-rp-announce interfaceType interfaceSpecifier [ group-list ipAccessList ] interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. The autoRP announcement messages will contain the IP address for this interface. ttl time-to-live value; the number of hops for which the announcement is valid ipAccessList name of the IP access list that specifies which multicast groups use this RP seconds time interval at which the system sends the announcements; default interval is 60 seconds

Mode(s):

Configuration Mode

ip pim send-rp-discovery scope


Description: Configures the system as an RP mapping agent, which records RP-to-group mappings and notifies PIM DRs about the mappings. The no version stops the system from acting as an RP mapping agent. ip pim send-rp-discovery scope ttl [ interfaceType interfaceSpecifier ] no ip pim send-rp-discovery ttl time-to-live value; number of hops for which the RP discovery message is valid. Specify a value that covers the PIM domain. interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. If you specify an interface, the autoRP discovery messages will contain the IP address for this interface.

Syntax:

Mode(s):

Configuration Mode

198

ip pim spt-threshold

ip pim spt-threshold
Description: Syntax: Specifies the network configuration that PIM SM uses when a source starts sending multicast messages. The no version restores the default value, 0. [ no ] ip pim spt-threshold { 0 | nonzero_integer | infinity } [ group-list ipAccessList ] Mode(s): 0 configures PIM SM to switch to an SPT when a source begins to send multicast messages nonzero_integer integer in the range 14294967294; prevents PIM SM from switching from a shared tree to an SPT infinity prevents PIM SM from switching from a shared tree to an SPT ipAccessList name of the IP access list that specifies the groups to which the threshold applies

Global Configuration

ip policy
Description: Assign a policy list to the ingress or egress of an interface. If you execute a policy command and the policy list does not exist, the system creates a policy list with no rules, the default. When no rules are found in a policy list, the system performs a routing table lookup and forwards packets on the interface based on the routing table information. You must specify the input or output keyword to assign the policy list to the ingress or egress of the interface. The no version removes the association between a policy list and an interface. [ no ] ip policy { input | local-input | output} policyName [ statistics { enabled [ baseline { enabled | disabled } ] | disabled } ] input apply policy to data arriving at this interface local-input apply policy to data that arrives at this interface but is addressed to a local interface output apply policy to data leaving this interface policyName name of the policy; a maximum of 16 characters statistics enable or disable collection of policy routing statistics

Syntax:

enabled enable collection of policy routing statistics baseline enabled enables baselining of policy routing statistics baseline disabled disables baselining of policy routing statistics disabled disable collection of policy routing statistics
Mode(s): Interface Configuration

ip prefix-list ERX Edge Routers

199

ip prefix-list
Description: Creates a prefix list for route filtering; specifies a list entrya permit or deny clause for a network address. The no version removes the specified prefix list or the specified list entry. ip prefix-list listName { description desc | [ seq sequence ] { permit | deny } ipPrefix [ ge geNumber ] [ le leNumber ] } no ip prefix-list listName [ description | [ seq sequence ] [ { permit | deny } ipPrefix [ ge geNumber ] [ le leNumber ] ] ] listName name of the prefix list; a string of up to 32 characters desc description of the prefix list sequence number in the range 065535 that indicates the position the prefix list entry is to have in the list of entries already configured for the prefix list. If given with the no version of this command, it specifies the position of the list entry to be deleted. If sequence is not specified, the value of the last sequence number + 5 is used. permit if the prefix of the route being filtered matches the specified prefix and permit is specified, the route is redistributed as controlled by the set actions deny if the prefix of the route being filtered matches the specified prefix and deny is specified, the route is not redistributed ipPrefix network route to be filtered, in the format network/length, where

Syntax:

network base address of the network route to be filtered; for example,


192.168.32.0 or 10.10.0.0

length length of the network prefix; number of bits masking base


address to produce address to be matched geNumber route being filtered matches if its prefix is within the range specified: greater than or equal to geNumber and less than or equal to 32 leNumber route being filtered matches if its prefix is within the range specified: greater than or equal to length and less than or equal to leNumber

Mode(s):

Global Configuration

200

ip prefix-tree

ip prefix-tree
Description: Creates a prefix tree for best-match route filtering; specifies a tree entrya deny or permit clause for a network address. The no version removes the specified prefix tree or the specified tree entry. ip prefix-tree treeName { description desc | { permit | deny } ipPrefix } no ip prefix-tree treeName [ description | { permit | deny } ipPrefix ] treeName name of the prefix list; a string of up to 32 characters desc description of the prefix list deny if the prefix of the route being filtered matches the specified prefix and deny is specified, the route is not redistributed permit if the prefix of the route being filtered matches the specified prefix and permit is specified, the route is redistributed as controlled by the set actions ipPrefix network route to be filtered, in the format network/length, where

Syntax:

network base address of the network route to be filtered; for example,


192.168.32.0 or 10.10.0.0

length length of the network prefix; number of bits masking base


address to produce address to be matched Mode(s): Router Configuration

ip proxy-arp
Description: Enables proxy ARP on an Ethernet or bridge1483 interface. Proxy ARP is enabled by default. The no version disables proxy ARP on an Ethernet or bridge1483 interface. ip proxy-arp [ restricted | unrestricted ] no ip proxy-arp Mode(s): restricted restricts proxy-arp to hosts on the local interface unrestricted enables proxy-arp for all reachable hosts

Syntax:

Interface Configuration, Subinterface Configuration

ip redirects
Description: Enables the sending of redirect messages if the software is forced to resend a packet through the same interface on which it was received. The no version disables the sending of redirect messages. [ no ] ip redirects Interface Configuration, Subinterface Configuration, Profile Configuration

Syntax: Mode(s):

ip refresh-route ERX Edge Routers

201

ip refresh-route
Description: Syntax: Reinstalls routes removed from the IP routing table by the clear ip route command. There is no no version. ip refresh-route [ vrf vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters

Privileged Exec

ip rip
Description: Configures RIP to run on the network specified by the network command. Uses the default values: send version is RIP version 1, receive version is RIP version 1 and version 2, authentication is not enabled. The no version deletes the RIP interface. [ no ] ip rip Interface Configuration, Subinterface Configuration

Syntax: Mode(s):

ip rip authentication key


Description: Specifies the password for text authentication and the key for MD5 authentication. The no version clears the key for the interface. Supported only in RIP version 2. Authentication is disabled by default. ip rip authentication key [ 0 | 8 ] authkey no ip rip authentication key 0 the authKey is entered in unencrypted form (plaintext); this is the default option 8 the authKey is entered in encrypted form (ciphertext) authkey password sent with RIP messages or the key used to encrypt/decrypt RIP messages, depending on the authentication mode set for this interface

Syntax:

Mode(s):

Interface Configuration, Subinterface Configuration

202

ip rip authentication mode

ip rip authentication mode


Description: Specifies the type of authentication used on this interface. The no version removes authentication from the interface. Supported only in RIP version 2. Authentication is disabled by default. ip rip authentication mode { text | md5 keyID } no ip rip authentication mode Mode(s): text a simple text password is sent with each RIP message. If the password is not possessed by neighbors, the message is rejected. md5 MD5 message-digest algorithms are used to encrypt and compress the RIP message. keyID number identifying the MD5 key. Neighbors must share the MD5 key to decrypt the message and encrypt the response.

Syntax:

Interface Configuration, Subinterface Configuration

ip rip receive version


Description: Restricts the RIP version that the system can receive on an interface. The no version sets the interface back to the default value, receiving both RIP version 1 and version 2. ip rip receive version { 1 | 2 | 1 2 | 2 1 | off } no ip rip receive version Mode(s): 1 specifies RIP version 1 only 2 specifies RIP version 2 only 1 2 specifies RIP version 1 and version 2 2 1 specifies RIP version 2 and version 1 off turns reception off

Syntax:

Interface Configuration, Subinterface Configuration

ip rip send version ERX Edge Routers

203

ip rip send version


Description: Restricts the RIP version that the system can send on an interface. The no version sets the interface back to the default value, sending only RIP version 1. ip rip send version { 1 | 2 | 1 2 | 2 1 | off } no ip rip send version Mode(s): 1 specifies RIP version 1 only 2 specifies RIP version 2 only 1 2 specifies RIP version 1 and version 2 2 1 specifies RIP version 2 and version 1 off turns reception off

Syntax:

Interface Configuration, Subinterface Configuration

ip route
Description: Syntax: Establishes static routes. The no version removes static routes. ip route [ vrf vrfName ] ipAddress ipMask { ipNextHop [ InterfaceType interfaceSpecifier ] | interfaceType interfaceSpecifier } [ distance ] [ tag tagVal ] [ permanent ] no ip route [ vrf vrfName ] ipAddress ipMask [ ipNextHop | interfaceType interfaceSpecifier ] [ distance ] Mode(s): vrfName name of the VRF if the static route is being established within a VRF context ipAddress destination IP address ipMask IP mask for the destination ipNextHop IP address of the next hop that can be used to reach the destination network interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. distance administrative distance metric for this route in the range 0254 tagVal number in the range 0255 that identifies the tag for this route permanent specifies that the route will not be removed, even if the interface shuts down

Global Configuration

204

ip router-id

ip router-id
Description: Syntax: Establishes the IP address of a router. The no version removes the IP address assignment. [ no ] ip router-id [ vrfName ] ipAddress Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters ipAddress IP address of the router

Global Configuration

ip router isis
Description: Syntax: Configures an IS-IS routing process for IP on an interface. The no version disables IS-IS for IP on the interface. [ no ] ip router isis [ tag ] tag meaningful name for a routing process. If not specified, a null tag is assumed. The name must be unique among all IP router processes for a given router. Use the same text for the argument tag as specified in the router isis command.

Mode(s):

Interface Configuration, Subinterface Configuration

ip route-type
Description: Specifies whether BGP, IS-IS, OSPF, or RIP routes are available only for unicast forwarding, only for multicast reverse path forwarding checks, or for both. The no version restores the default value, unicast for BGP or both for IS-IS, OSPF, and RIP. For BGP: ip route-type [ unicast | | both ] no ip route-type For IS-IS, OSPF, and RIP: ip route-type [ unicast | multicast | both ] no ip route-type Mode(s): unicast specifies that routes for the protocol are available only for unicast forwarding multicast specifies that routes for the protocol are available only for multicast route path forwarding checks; this option is not available for BGP both specifies that routes for the protocol are available for both unicast forwarding and multicast route path forwarding checks

Syntax:

Router Configuration

ip rpf-route ERX Edge Routers

205

ip rpf-route
Description: Syntax: Customizes static routes that the system can use to verify source addresses in multicast packets. The no version removes the static route. ip rpf-route ipAddress addressMask { nextHopIpAddress | nextHopInterfaceType nextHopInterfaceSpecifier } [ distanceValue ] [ tag tagValue ] [ no ] rpf-route ipAddress address-mask Mode(s): ipAddress IP address of the destination network addressMask subnet mask for the destination network nextHopIpAddress IP address of the next hop nextHopInterfaceType interface type; see Interface Types and Specifiers in About This Guide nextHopInterfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide distanceValue number in the range 0255 that indicates the preference for this route tagValue number in the range 04294967295 that identifies the route in the routing table

Global Configuration

ip rsvp bandwidth
Description: Specifies the total bandwidth reservable on the interface in a non-ERX implementation. See the mpls bandwidth command for a complete description and syntax.

ip sa-validate
Description: Enables source address validation on an interface. This feature verifies that a packet has been sent from a valid source address. When a packet arrives on an interface, the system performs a route-table lookup using the source address. The result from the route-table lookup is an interface to which packets destined for that address are routed. This interface must match the interface that the packet arrived on. If it does not match, the system drops the packet.The no version disables source address validation. [ no ] ip sa-validate Interface Configuration

Syntax: Mode(s):

206

ip share-interface

ip share-interface
Description: Specifies the layer 2 interface used by a shared IP interface in the current virtual router. The no version removes the association between the layer 2 interface and the shared IP interface. ip share-interface interfaceType interfaceSpecifier no ip share-interface Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.

Syntax:

Interface Configuration

ip share-nexthop
Description: Syntax: Specifies that the shared IP interface dynamically tracks a next hop for the specified destination. The no version halts tracking of the next hop. ip share-nexthop ipAddress [ virtual-router vrName ] no ip share-nexthop Mode(s): ipAddress IP address of the destination for which the next hop is tracked vrName name of the virtual router for the next hop

Interface Configuration

ip shutdown
Description: Syntax: Mode(s): Shuts down an IP interface. The no version restarts the interface. [ no ] ip shutdown Interface Configuration, Subinterface Configuration

ip source-prefix
Description: Configures a subscriber interface to demultiplex traffic with the specified IP address and mask. The no version removes the association between the subscriber interface and the specified IP address and mask. [ no ] ip source-prefix ipAddress ipAddressMask Mode(s): ipAddress IP address of the physical interface that receives messages for this subscriber ipAddressMask network mask for associated IP subnet

Syntax:

Interface Configuration

ip source-route ERX Edge Routers

207

ip source-route
Description: Syntax: Enables the forwarding of source-routed packets. The no version disables forwarding. Forwarding is enabled by default. [ no ] ip source-route [ vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters

Interface Configuration

ip speed
Description: Syntax: Sets the speed of an IP interface in bits per second. The no version restores the default value, 0 bps. [ no ] ip speed adminSpeed Mode(s): adminSpeed speed of the interface in bps in the range 14294967295

Interface Configuration, Subinterface Configuration

ip split-horizon
Description: Enables split horizon, preventing the RIP router from advertising routes from the interface originating the route, reducing the possibility of routing loops; this is the default condition. The no version disables split horizon. [ no ] ip split-horizon Interface Configuration, Subinterface Configuration

Syntax: Mode(s):

ip ssh authentication-retries
Description: Sets the number of times that a user can retry a failed authentication (such as trying to correct a wrong password) before the server terminates the connection. The no version restores the default value of 20 retries. ip ssh authentication-retries retryLimit no ip ssh authentication-retries Mode(s): retryLimit number of times authentication can be retried after the initial failure within a given connection attempt

Syntax:

Global Configuration

208

ip ssh crypto

ip ssh crypto
Description: Adds an encryption algorithm to the specified list of supported algorithms. The no version removes or excludes an algorithm from the specified list. The default version restores the default algorithms for the specified list. ip ssh crypto [ client-to-server | server-to-client ] [ no | default ] cipherAlgorithm Mode(s): client-to-server adds the specified algorithm to the SSH servers list of supported inbound algorithms server-to-client adds the specified algorithm to the SSH servers list of supported outbound algorithms no removes or excludes the specified algorithm from the list default restores the specified list to the factory defaults, which includes 3des-cbc, twofish-cbc, and blowfish-cbc cipherAlgorithm algorithm to add to the list

Syntax:

Global Configuration

ip ssh disable-user-authentication
Description: Syntax: Mode(s): Disables RADIUS password authentication, resulting in the acceptance of all SSH clients that pass protocol negotiation. [ no ] ip ssh disable-user-authentication Global Configuration

ip ssh mac
Description: Adds a MAC algorithm to the specified list of supported algorithms. The no version removes or excludes an algorithm from the specified list. The default version restores the default algorithms for the specified list. ip ssh mac [ client-to-server | server-to-client ] [ no | default ] macAlgorithm Mode(s): client-to-server adds the specified algorithm to the SSH servers list of supported inbound algorithms server-to-client adds the specified algorithm to the SSH servers list of supported outbound algorithms no removes or excludes the specified algorithm from the list default restores the specified list to the factory defaults, which includes hmac-md5, hmac-sha1, and hmac-sha1-96 macAlgorithm algorithm to add to the list

Syntax:

Global Configuration

ip ssh sleep ERX Edge Routers

209

ip ssh sleep
Description: Sets a sleep period in seconds for users that have exceeded the authentication retry limit. Connection attempts from the user at the same host are denied until this period expires. The no version restores the default value of 600 seconds. ip ssh sleep sleepPeriod no ip ssh sleep Mode(s): sleepPeriod period in seconds

Syntax:

Global Configuration

ip ssh timeout
Description: Sets a timeout period in seconds. The SSH server terminates the connection if protocol negotiationincluding user authenticationis not complete within this timeout. The no version restores the default value of 600 seconds. ip ssh timeout timeout no ip ssh timeout Mode(s): timeout period in the range 10600 seconds

Syntax:

Global Configuration

ip summary-address
Description: Syntax: Summarizes specified addresses for RIP. The no version removes the summarization. ip summary-address [ rip ] ipAddress ipAddressMask [ metric ] no ip summary-address [ rip ] ipAddress ipAddressMask Mode(s): rip optional keyword for compatibility with non-ERX implementations ipAddress IP address identifying the route to be summarized ipAddressMask network mask identifying the route to be summarized metric specifies a metric for the summary address; the default is 1

Router Configuration

210

ip ttl

ip ttl
Description: Sets the hop count specified by the TTL field in the IP header used by IP for all operations unless overridden by another command. The no version restores the default value, 127. ip ttl [ vrfName ] ttlValue no ip ttl [ vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters ttlValue number in the range 1255

Syntax:

Global Configuration

ip tunnel reassembly
Description: Syntax: Mode(s): Enables the reassembly of fragmented IP tunnel packets that are received on the current virtual router. The no version restores the default of disabled. [ no ] ip tunnel reassembly Global Configuration

ip unnumbered
Description: Syntax: Enables IP processing on an interface without assigning an explicit IP address to the interface. The no version disables IP processing on the interface. [ no ] ip unnumbered interfaceType interfaceSpecifier Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.

Interface Configuration, Subinterface Configuration, Profile Configuration

ip unreachables
Description: Enables the generation of an ICMP unreachable message when a packet is received that cannot be delivered by the router. The no version disables this function. [ no ] ip unreachables Interface Configuration, Subinterface Configuration

Syntax: Mode(s):

ip virtual-router ERX Edge Routers

211

ip virtual-router
Description: Specifies a virtual router in an IP profile. Dynamic interfaces created with the profile are assigned to this VR. The no version removes the VR from the profile; if a VR is not specified via RADIUS, then any subsequent creation process for dynamic interfaces using the profile fails. [ no ] ip virtual-router vrName Mode(s): vrName name of the virtual router; a string of 115 alphanumeric characters

Syntax:

Profile Configuration

ip vpn-id
Description: Syntax: Associates a VPN ID with the virtual router. The no version removes the VPN ID from the virtual router. ip vpn-id [ vrfName ] oui ouiNumber index ipAddress no ip vpn-id [ vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters ouiNumber identifies the OUI portion of the VPN ID, ranges from 016777215 ipAddress IP address that identifies the index portion of the VPN ID

Global Configuration

ip vrf
Description: Creates a VRF or accesses VRF Configuration mode to configure a VRF. The no version deletes the VRF. Note: After creating the VRF, you must configure a route distinguisher for it via the rd command; otherwise, the VRF will not operate. Syntax: [ no ] ip vrf vrfName Mode(s): vrfName name of the VRF; a string of 132 alphanumeric characters

Global Configuration

212

ip vrf forwarding

ip vrf forwarding
Description: Syntax: Assigns a VRF to an interface or subinterface. The no version removes the assignment. [ no ] ip vrf forwarding vrfName Mode(s): vrfName name of the VRF; a string of 132 alphanumeric characters

Global Configuration

ip vrrp
Description: Syntax: Creates a VRRP instance ID. The no version removes a VRID. The default is disabled. [ no ] ip vrrp vrid Mode(s): vrid VRID identifier; a number in the range 1255

Interface Configuration

ip vrrp advertise-interval
Description: Configures the VRRP advertisement interval time. You must use seconds to comply with RFC 2338. Use milliseconds only if all VRRP instances peering for the given VRID are composed of ERX systems. The no version restores the default value of 1 second. ip vrrp vrid advertise-interval advertiseInterval [ seconds | milliseconds ] no ip vrrp vrid advertise-interval Mode(s): vrid VRID identifier; a number in the range 1255 advertiseInterval the advertisement period in seconds or milliseconds; 1255 seconds; 100255000 milliseconds seconds specify interval in seconds milliseconds specify interval in milliseconds

Syntax:

Interface Configuration

ip vrrp authentication-key ERX Edge Routers

213

ip vrrp authentication-key
Description: Specify the authentication key. This command is only valid if the text keyword was selected in the ip vrrp authentication-type command. The no version negates the command or restores the default. ip vrrp vrid authentication-key key no ip vrrp vrid authentication-key Mode(s): vrid VRID identifier; a number in the range 1255 key string of 18 characters

Syntax:

Interface Configuration

ip vrrp authentication-type
Description: Syntax: Specifies the VRRP authentication type. The no version restores the default value, none. ip vrrp vrid authentication-type { none | text } no ip vrrp vrid authentication-type Mode(s): vrid VRID identifier; a number in the range 1255 none authentication disabled text simple text password

Interface Configuration

ip vrrp enable
Description: Syntax: Enables a VRID. The no version disables a VRID. The default is disabled. [ no ] ip vrrp vrid [ enable ] Mode(s): vrid VRID identifier; a number in the range 1255

Interface Configuration

ip vrrp preempt
Description: Syntax: Enables VRRP preemption. The no version disables VRRP preemption. The default is enabled. [ no ] ip vrrp vrid preempt Mode(s): vrid VRID identifier; a number in the range 1255

Interface Configuration

214

ip vrrp priority

ip vrrp priority
Description: Syntax: Configures the priority of VRRP routers. The no version restores the default value, 100. ip vrrp vrid priority priorityValue no ip vrrp vrid priority Mode(s): vrid VRID identifier; a number in the range 1255 priorityValue priority value of the VRRP router; a number in the range 1255; default is 100

Interface Configuration

ip vrrp virtual-address
Description: Associates an IP address to a VRID. The no version removes a list of IP addresses associated with a VRID. The no version clears the auto flag, if auto addresses are being used. There is no default. ip vrrp vrid virtual-address { auto | ipAddress ipAddress [ ipAddress ipAddress ]* } no ip vrrp vrid virtual-address [ ipAddress ipAddress ]* Mode(s): vrid VRID identifier; a number in the range 1255 ipAddress the IP address that associates to the VRID

Syntax:

Interface Configuration

ipsec clear sa
Description: Syntax: Refreshes ISAKMP/IKE or IPSec SAs. There is no no version. ipsec clear sa { all [ state tunnelState ] | tunnel tunnelName } [ phase {1 | 2 } ] all reinitializes all SAs state reinitializes SAs on tunnels that are in a specific state tunnelState state of tunnel, up, down, not-present tunnel specifies that an SA on a specific tunnel is to be reinitialized tunnelName name of tunnel phase specifies one of the following types of tunnel to be reinitialized:

1 ISAKMP/IKE tunnels 2 IPSec tunnels


Mode(s): Global Configuration

ipsec isakmp-policy-rule ERX Edge Routers

215

ipsec isakmp-policy-rule
Description: Defines and prioritizes an ISAKMP/IKE policy. ISAKMP/IKE policies define parameters to be used during ISAKMP/IKE negotiation. You can have up to 10 ISAKMP/IKE policies per system. The no version removes a policy. If you do not include a priority number with the no version, the software removes all ISAKMP/IKE policies. ipsec isakmp-policy-rule priority no ipsec isakmp-policy-rule [ priority ] Mode(s): priority identifies and prioritizes the ISAKMP/IKE policy; the range is 110000, with 1 having the highest priority

Syntax:

Global Configuration

ipsec key manual


Description: Specifies that a peer use a manual key for authentication and displays the prompt from which you can enter manual keys. Manually configured keys are used during the tunnel establishment phase when the ISAKMP/IKE policy specifies either preshared key authentication or encrypted nonce authentication. The no version deletes a manually configured key. Note: You must enter this command in the virtual router context where the IP address of the peer is defined. Syntax: [ no ] ipsec key manual { pre-share } ipAddress Mode(s): pre-share specifies preshared manual keys as the authentication method ipAddress address of the peer for which the key can be used

Global Configuration

ipsec lifetime
Description: Specifies the default lifetime in volume of traffic and/or seconds. The default lifetime applies to secure tunnels that do not have a tunnel lifetime defined. When either the volume of traffic or number of seconds limit is reached, IPSec renegotiates the SA. The no version restores the default values. [ no ] ipsec lifetime { kilobytes kilobytes | seconds seconds } kilobytes volume of traffic in kilobytes that can pass between IPSec peers before the SA expires; the range is 1024004294967295; the default is 4294967295 kilobytes; a setting of zero turns off the kilobyte lifetime seconds number of seconds an SA lives before expiring; the range is 72004294967295; the default is 28800 seconds (8 hours)

Syntax:

Mode(s):

Global Configuration

216

ipsec local-endpoint

ipsec local-endpoint
Description: Defines a default local endpoint used for ISAKMP/IKE negotiations and all IPSec tunnels for a transport virtual router. The no version restores the default settings of the local endpoint. [ no ] ipsec local-endpoint ipAddress transport-virtual-router transportVRName Mode(s): ipAddress IP address to use as the local endpoint transportVRName name of transport virtual router in which the IP address is defined

Syntax:

Global Configuration

ipsec transform-set
Description: Creates a transform set. Transform sets used for manually configured tunnels can have only one transform. Transform sets used for signaled tunnels can have up to six transforms. Transforms are numbered in a priority sequence in the order in which you enter them. The no version deletes the transform set. Each transform provides a different combination of data authentication and confidentiality. Use the online Help to view available transforms. Syntax: ipsec transform-set transformSetName transform0 [ transform1 [ transform2 [ transform3 [ transform4 [ transform5 ] ] ] ] ] no ipsec transform-set transformSetName Mode(s): transformSetName name of the transform set transform0 through transform5 AH or ESP transform

Global Configuration

isis authentication-key
Description: Assigns a password for IS-IS level 1 and level 2 hellos used by neighboring routers that are using IS-IS password authentication. The no version deletes the password. isis authentication-key [ level-1 | level-2 ] authKey no isis authentication-key [ level-1 | level-2 ] Mode(s): level-1 inserts the password into level 1 hello packets level-2 inserts the password into level 2 hello packets authKey a password, a continuous string of characters up to 8 characters in length

Syntax:

Interface Configuration, Subinterface Configuration

isis circuit-type ERX Edge Routers

217

isis circuit-type
Description: Syntax: Use to configure the type of adjacency desired for the specified interface. The no version resets the circuit type to level 1 and level 2. isis circuit-type [ level-1 | level-1-2 | level-2-only ] no isis circuit-type level-1 establishes a level 1 adjacency if there is at least one area address in common between this system and its neighbors level-1-2 (default) establishes a level 1 and 2 adjacency if the neighbor is also configured as a level 1-2 router and there is at least one area in common. If there is no area in common, a level 2 adjacency is established. level-2-only establishes a level 2 adjacency on the circuit. If the neighboring router is a level 1 only router, no adjacency will be established.

Mode(s):

Interface Configuration, Subinterface Configuration

isis csnp-interval
Description: Syntax: Configures the IS-IS CSNP interval for the specified interface. The no version restores the default value. isis csnp-interval seconds [ level-1 | level-2 ] no isis csnp-interval [ seconds ] [ level-1 | level-2 ] seconds number in the range 065535; the interval of time in seconds between the transmission of CSNPs on multiaccess networks for the designated router; default is 10 seconds, except for WAN interfaces, where the default is 0 level-1 sets the interval of time between transmission of CSNPs for level 1 independently level-2 sets the interval of time between transmission of CSNPs for level 2 independently

Mode(s):

Interface Configuration, Subinterface Configuration

218

isis hello-interval

isis hello-interval
Description: Syntax: Specifies the length of time in seconds between hello packets that the router sends on the specified interface. The no version restores the default value. isis hello-interval seconds [ level-1 | level-2 ] no isis hello-interval [ seconds ] [ level-1 | level-2 ] seconds number in the range 065535; a value equal to the hello multiplier times the hello interval seconds is advertised as the holdtime in the hello packets transmitted; the default is 10 seconds. The value must be the same for all routers attached to a common network. With smaller hello intervals, topological changes are detected faster, but there is more routing traffic. level-1 sets the hello-interval for level 1 independently level-2 sets the hello-interval for level 2 independently

Mode(s):

Interface Configuration, Subinterface Configuration

isis hello-multiplier
Description: Specifies the number of IS-IS hello packets a neighbor must miss before the router should declare the adjacency to be down. The no version restores the multiplier default value of 3. isis hello-multiplier multiplier [ level-1 | level-2 ] no isis hello-multiplier [ multiplier | level-1 | level-2 ] multiplier number in the range 31000; the default is 3. The advertised hold time in IS-IS hellos will be set to the hello-multiplier times the hello-interval. Neighbors will declare an adjacency to this router to be down after not having received any IS-IS hellos during the advertised hold time. The hold time (and thus the hello-multiplier and the hello-interval) can be set on a per interface basis, and can be different between different routers in one area. Using a smaller hello-multiplier will give fast convergence, but can result in more routing instability. Increment the hello-multiplier to a larger value to help network stability when needed. Never configure a hello-multiplier lower than the default. level-1 sets the hello-multiplier independently for level 1 adjacencies level-2 sets the hello-multiplier independently for level 2 adjacencies

Syntax:

Mode(s):

Interface Configuration, Subinterface Configuration

isis lsp-interval ERX Edge Routers

219

isis lsp-interval
Description: Syntax: Configures the time delay between successive IS-IS link state packet transmissions. The no version restores the default value of 33 milliseconds. isis lsp-interval milliseconds no isis lsp-interval Mode(s): milliseconds number of milliseconds in the range 14294967295; an interval between successive link state packets

Interface Configuration, Subinterface Configuration

isis mesh-group
Description: Syntax: Configures an interface in the same mesh group to act as a virtual multiaccess network. The no version disables the feature. isis mesh-group { blocked | number } no isis mesh-group Mode(s): blocked blocks reserved LSPs from being flooded out on this defined configured interface number mesh group number in the range 14294967295

Interface Configuration, Subinterface Configuration

220

isis message-digest-key

isis message-digest-key
Description: Specifies an HMAC MD5 key that the system uses to create a secure, encrypted message digest of IS-IS level 1 or level 2 hello packets on the interface. Level 1 packets are the default. The digest is inserted into the packet from which it is created. Using this algorithm protects against intrusion by preventing unauthorized routers from forming adjacencies with your system. You can specify when the system will start (default is the current time) and stop (default is never) accepting packets that include a digest made with this key. You can specify when the system will start (default is the current time plus 2 minutes) and stop (default is never) generating packets that include a digest made with this key. The no version deletes the key specified by the key-id. isis message-digest-key keyId hmac-md5 key [ start-accept startAcceptTime [ { startAcceptMonth startAcceptDay | startAcceptDay startAcceptMonth } startAcceptYear ] ] [ start-generate startGenTime [ { startGenMonth startGenDay | startGenDay startGenMonth } startGenYear ] ] [stop-accept { never | stopAcceptTime [ { stopAcceptMonth stopAcceptDay | stopAcceptDay stopAcceptMonth } stopAcceptYear ] } ] [ stop-generate { never | stopGenTime [ { stopGenMonth stopGenDay | stopGenDay stopGenMonth } stopGenYear ] } ] [ level-1 | level-2 ] no isis message-digest-key keyId [ level 1 | level 2 ] keyId integer from 1 to 255 that is a unique identifier for the secret key, sent with the message digest in the packet. key string of up to 20 alphanumeric characters; secret key used by the HMAC MD5 algorithm to generate the message digest. startAcceptTime, startAcceptMonth, startAcceptDay, startAcceptYear time, month, day, year that the system will start accepting packets created with this password. Use military time format HH:MM[ :SS ]. startGenTime, startGenMonth, startGenDay, startGenYear time, month, day, year that the system will start inserting this password into packets. Use military time format HH:MM[ :SS ]. never the system never stops accepting or generating packets; overrides previously specified stop times. stopAcceptTime, stopAcceptMonth, stopAcceptDay, stopAcceptYear time, month, day, year that the system will stop accepting packets created with this password. Use military time format HH:MM[ :SS ]. stopGenTime, stopGenMonth, stopGenDay, stopGenYear time, month, day, year that the system will stop inserting this password into packets. Use military time format HH:MM[ :SS ]. level1 Inserts the password into level 1 hello packets level2 Inserts the password into level 2 hello packets

Syntax:

Mode(s):

Interface Configuration, Subinterface Configuration

isis metric ERX Edge Routers

221

isis metric
Description: Syntax: Configures the metric (cost) for the specified interface. The no version restores the default metric value. isis metric defaultMetric [ level-1 | level-2 ] no isis metric [ defaultMetric | level-1 | level-2 ] defaultMetric metric used for the redistributed route; a number in the range 063 if the system is configured with the metric-style narrow command; a number in the range 016777215 if the system is configured with the metric-style transition or metric-style wide command; the default value is 10 level-1 apply metric to level 1 links level-2 apply metric to level 2 links

Mode(s):

Interface Configuration, Subinterface Configuration

isis priority
Description: Syntax: Configures the priority of this system for designated router election. The no version resets priority to the default value, 64. isis priority value [ level-1 | level-2 ] no isis priority [ value | level-1 | level-2 ] Mode(s): value number in the range 0127; the priority of a router; the default value is 64 level-1 sets the priority of a router for level 1 independently level-2 sets priority of a router for level 2 independently

Interface Configuration, Subinterface Configuration

isis retransmit-interval
Description: Syntax: Configures the number of seconds between retransmission of LSPs with the same lsp-id for point-to-point links. The no version restores the default value. isis retransmit-interval seconds no isis retransmit-interval seconds number of seconds in the range 165535; the default value is 5. The number should be greater than the expected round-trip delay between any two routers on the attached network. The setting of this parameter should be conservative, or needless retransmission will result. The value should be larger for serial lines.

Mode(s):

Interface Configuration, Subinterface Configuration

222

isis retransmit-throttle-interval

isis retransmit-throttle-interval
Description: Configures the amount of time between retransmissions of any IS-IS LSPs on a point-to-point interface. The no version restores the default value, 33 milliseconds. isis retransmit-throttle-interval milliseconds no isis retransmit-throttle-interval Mode(s): milliseconds the number of milliseconds in the range 065535; the minimum delay between LSP retransmissions on the interface

Syntax:

Interface Configuration, Subinterface Configuration

is-type
Description: Syntax: Configures the IS-IS level at which the router is to operate. The no version resets the parameter to the default level-1-2. is-type { level-1 | level-1-2 | level-2-only } no is-type Mode(s): level-1 causes the router to act as a station router level-1-2 causes the router to act as both a station router and an area router; the default setting level-2-only causes the router to act as an area router

Router Configuration

j1 ERX Edge Routers

223

j1
Description: Syntax: Mode(s): Enables the J1 variant (Japan) of the T1 framing. The no version disables the feature (default). [ no ] j1 Controller Configuration

key
Description: From Radius Configuration mode, specifies the authentication or accounting server secret. The no version removes the secret. From Manual Key Configuration mode, configures a manual ISAKMP/IKE preshared key. There is no no version. To delete a key, use the no version of the ipsec key manual command. To assign a RADIUS key: key secret no key secret authentication or accounting server secret text string used by RADIUS to encrypt the client and server authenticator field during exchanges between the system and a RADIUS server. The system encrypts PPP PAP passwords using this text string.

Syntax:

To assign an ISAKMP/IKE key: key keyString Mode(s): keyString key value in ASCII format; up to 200 characters

Radius Configuration, Manual Key Configuration

l2f checksum
Description: Enables the generation of checksums for L2F data packets running over IP/UDP. The no version disables the generation of checksums for data packets running over IP/UDP. The default setting is disabled. [ no ] l2f checksum Global Configuration

Syntax: Mode(s):

224

l2f destruct-timeout

l2f destruct-timeout
Description: Specifies the maximum time for which the system maintains dynamic destinations, tunnels, and sessions that have terminated. If resources are low, the system will replace the terminated objects with new requests. The no version restores the default value, 600 seconds. l2f destruct-timeout seconds no l2f destruct-timeout Mode(s): seconds a time in the range 103600 seconds (1 hour)

Syntax:

Global Configuration

l2f drain
Description: Prevents the creation of new destinations, tunnels, and sessions for the system. This command works with the l2f shutdown command. Both commands affect the administrative state of L2F on the system. The l2f drain command sets the administrative state to drain, and the l2f shutdown command sets the administrative state to disabled. The no version allows the creation of new destinations, tunnels, and sessions for the system. [ no ] l2f drain Global Configuration

Syntax: Mode(s):

l2f drain destination


Description: Prevents the creation of new tunnels and sessions at a destination. This command works with the l2f shutdown destination command. Both commands affect the status of the administrative state of L2F for the destination. The l2f drain destination command sets the administrative state to drain, and the l2f shutdown destination command sets the administrative state to disabled. The no version allows the creation of new tunnels and sessions at a destination. [ no ] l2f drain destination { destinationName | [ virtual-router virtualRouterName ] ip ipAddress } Mode(s): destinationName name the system assigns to the home gateway virtualRouterName name of the virtual router on which the destination exists ipAddress IP address of the home gateway

Syntax:

Global Configuration

l2f drain tunnel ERX Edge Routers

225

l2f drain tunnel


Description: Prevents the assignment of new sessions to a tunnel. This command works with the l2f shutdown tunnel command. Both commands affect the status of the administrative state of L2F for the tunnel. The l2f drain tunnel command sets the administrative state to drain, and the l2f shutdown tunnel command sets the administrative state to disabled. The no version allows the assignment of new sessions to a tunnel. [ no ] l2f drain tunnel { destinationName | [ virtual-router vrName ] ip ipAddress tunnelName } Mode(s): destinationName name the system assigns to the home gateway vrName name of the virtual router on which the tunnel exists ipAddress IP address of the home gateway tunnelName name of the tunnel

Syntax:

Global Configuration

l2f ignore-receive-data-sequencing
Description: Suppresses sequence number checking for data packets received on all L2F tunnels in the system. This setting affects only packets received on a tunnel, not packets sent on a tunnel. The L2F NAS still inserts sequence numbers into data packets if the NAS receives packets from the home gateway that contain sequence numbers. The no version, which is the default, causes the system to check sequence numbers in data packets that it receives on L2F tunnels. Note: If you are using IP reassembly, we recommend that you set up the system to ignore sequence numbers in received data packets. Because IP reassembly may reorder L2F packets, out-of-order packets may be dropped if sequence numbers are being used on L2F data packets. Syntax: Mode(s): [ no ] l2f ignore-receive-data-sequencing Global Configuration

226

l2f shutdown

l2f shutdown
Description: Closes all destinations, tunnels, and sessions and prevents the creation of new destinations, tunnels, and sessions for the system. This command works with the l2f drain command. Both commands affect the administrative state of L2F on the system. The l2f shutdown command sets the administrative state to disabled, and the l2f drain command sets the administrative state to drain. The no version allows the creation of new destinations, tunnels, and sessions for the system. [ no ] l2f shutdown Global Configuration

Syntax: Mode(s):

l2f shutdown destination


Description: Closes all tunnels and sessions at a destination, and prevents the creation of new tunnels and sessions at that destination. This command works with the l2f drain destination command. Both commands affect the status of the administrative state of L2TP on the destination. The l2f shutdown destination command sets the administrative state to disabled, and the l2f drain destination command sets the administrative state to drain. The no version enables the creation of new tunnels and sessions at that destination. [ no ] l2f shutdown destination { destinationName | [ virtual-router vrName ] ip ipAddress } Mode(s): destinationName name the system assigns to the home gateway vrName name of the virtual router on which the destination exists ipAddress IP address of the home gateway

Syntax:

Global Configuration

l2f shutdown session


Description: Closes a specific session. The no version has no effect because all L2F sessions are dynamic and cannot be restarted after they have been shut down. [ no ] l2f shutdown session { destinationName | [ virtual-router vrName ] ip ipAddress sessionName } Mode(s): destinationName name that the system assigns to the LNS vrName name of the virtual router on which the destination exists ipAddress IP address of the home gateway sessionName name of the session

Syntax:

Global Configuration

l2f shutdown tunnel ERX Edge Routers

227

l2f shutdown tunnel


Description: Closes all sessions in a tunnel, and prevents the creation of new sessions in that tunnel. This command works with the l2f drain tunnel command. Both commands affect the status of the administrative state of L2F on the tunnel. The l2f shutdown tunnel command sets the administrative state to disabled, and the l2f drain tunnel command sets the administrative state to drain. The no version enables the creation of new sessions in that tunnel. [ no ] l2f shutdown tunnel { destinationName | [ virtual-router vrName ] ip ipAddress tunnelName } Mode(s): destinationName name the system assigns to the home gateway virtualRouterName name of the virtual router on which the tunnel exists ipAddress IP address of the home gateway tunnelName name of the tunnel

Syntax:

Global Configuration

l2tp checksum
Description: Enables the generation of checksums for data packets running over IP/UDP. The no version disables the generation of checksums for data packets running over IP/UDP. The default setting is disabled. [ no ] l2tp checksum Global Configuration

Syntax: Mode(s):

228

l2tp destination profile

l2tp destination profile


Description: Defines the location of the LAC(s) by virtual router and IP address. Accesses the L2TP Destination Profile Configuration mode. The no version removes the L2TP destination profile. l2tp destination profile { profileName [ [ virtual-router vrName ] ip address ipAddress ] | [ virtual-router vrName ] ip address ipAddress } no l2tp destination profile { profileName | [ virtual-router vrName ] ip address ipAddress } profileName name of the L2TP destination profile vrName name of the virtual router to be used to reach the destination (that is, the LAC). If you do not specify a virtual router, the current virtual router context is used. ipAddress IP address to be used to reach the destination

Syntax:

Note: To manage an existing destination profile, use this version of the command: l2tp destination profile profileName. This version assumes that the L2TP destination profile already exists. Mode(s): Global Configuration

l2tp destruct-timeout
Description: Specifies the maximum time for which the system maintains dynamic destinations, tunnels, and sessions that have terminated. If resources are low, the system will replace the terminated objects with new requests. The no version restores the default value, 600 seconds. l2tp destruct-timeout seconds no l2tp destruct-timeout Mode(s): seconds time in the range 103600 seconds (1 hour)

Syntax:

Global Configuration

l2tp drain
Description: Prevents the creation of new destinations, tunnels, and sessions for the system. This command works in conjunction with the l2tp shutdown command. Both commands affect the status of the administrative state of L2TP on the system; the l2tp drain command sets the administrative state to drain. The no version allows the creation of new destinations, tunnels, and sessions for the system. [ no ] l2tp drain Global Configuration

Syntax: Mode(s):

l2tp drain destination ERX Edge Routers

229

l2tp drain destination


Description: Prevents the creation of new tunnels and sessions at a destination. This command works in conjunction with the l2tp shutdown destination command. Both commands affect the status of the administrative state of L2TP for the destination; the l2tp drain destination command sets the administrative state to drain. The no version allows the creation of new tunnels and sessions at a destination. [ no ] l2tp drain destination { destinationName | [ virtual-router vrName ] ip ipAddress } Mode(s): destinationName name the system assigns to the LNS vrName name of the virtual router on which the destination exists ipAddress IP address of the LNS

Syntax:

Global Configuration

l2tp drain tunnel


Description: Prevents the assignment of new sessions to a tunnel. This command works in conjunction with the l2tp shutdown tunnel command. Both commands affect the status of the administrative state of L2TP for the tunnel; the l2tp drain tunnel command sets the administrative state to drain. The no version allows the assignment of new sessions to a tunnel. [ no ] l2tp drain tunnel { destinationName | [ virtual-router vrName ] ip ipAddress tunnelName } Mode(s): destinationName name the system assigns to the LNS vrName name of the virtual router on which the tunnel exists ipAddress IP address of the LNS tunnelName name of the tunnel

Syntax:

Global Configuration

l2tp fail-over-within-preference
Description: Enables tunnel selection within a preference level. The no version restores the default behavior. The default fail-over scheme is to drop down a preference level when a connection attempt has failed. Syntax: Mode(s): [ no ] l2tp fail-over-within-preference Global Configuration

230

l2tp ignore-receive-data-sequencing

l2tp ignore-receive-data-sequencing
Description: Suppresses sequence number checking for data packets received on all L2TP tunnels in the system. This setting affects only packets received on a tunnel, not packets sent on a tunnel. The L2TP LAC still inserts sequence numbers into data packets if the LAC receives packets from the LNS that contain sequence numbers. The no version, which is the default, causes the system to check the sequence numbers in data packets that it receives on L2TP tunnels. Note: If you are using IP reassembly, we recommend that you set up the system to ignore sequence numbers in received data packets. Because IP reassembly may reorder L2TP packets, out-of-order packets may be dropped if sequence numbers are being used on L2TP data packets. Syntax: Mode(s): [ no ] l2tp ignore-receive-data-sequencing Global Configuration

l2tp retransmission
Description: Syntax: Sets the number of retransmission retries. The no version resets the number of retransmissions to the default value, 5. l2tp retransmission retries no l2tp retransmission Mode(s): retries in the range 27

Global Configuration

l2tp shutdown
Description: Closes all destinations, tunnels, and sessions and prevents the creation of new destinations, tunnels, and sessions for the system. This command works in conjunction with the l2tp drain command. Both commands affect the status of the administrative state of L2TP on the system; the l2tp shutdown command sets the administrative state to disabled. The no version allows the creation of new destinations, tunnels, and sessions for the system. [ no ] l2tp shutdown Global Configuration

Syntax: Mode(s):

l2tp shutdown destination ERX Edge Routers

231

l2tp shutdown destination


Description: Closes all tunnels and sessions at a destination, and prevents the creation of new tunnels and sessions at that destination. This command works in conjunction with the l2tp drain destination command. Both commands affect the status of the administrative state of L2TP on the destination; the l2tp shutdown destination command sets the administrative state to disabled. The no version enables the creation of new tunnels and sessions at that destination. [ no ] l2tp shutdown destination { destinationName | [ virtual-router vrName ] ip ipAddress } Mode(s): destinationName name the system assigns to the LNS vrName name of the virtual router on which the destination exists ipAddress IP address of the LNS

Syntax:

Global Configuration

l2tp shutdown session


Description: Closes a specific session. The no version has no effect because all L2TP sessions are dynamic and cannot be restarted after they have been shut down. [ no ] l2tp shutdown session { destinationName | [ virtual-router vrName ] ip ipAddress sessionName } Mode(s): destinationName name that the system assigns to the LNS vrName name of the virtual router on which the destination exists ipAddress IP address of the LNS sessionName name of the session

Syntax:

Global Configuration

232

l2tp shutdown tunnel

l2tp shutdown tunnel


Description: Closes all sessions in a tunnel, and prevents the creation of new sessions in that tunnel. This command works in conjunction with the l2tp drain tunnel command. Both commands affect the status of the administrative state of L2TP on the tunnel; the l2tp shutdown tunnel command sets the administrative state to disabled. The no version enables the creation of new sessions in that tunnel. [ no ] l2tp shutdown tunnel { destinationName | [ virtual-router vrName ] ip ipAddress tunnelName } Mode(s): destinationName name the system assigns to the LNS vrName name of the virtual router on which the tunnel exists ipAddress IP address of the LNS tunnelName name of the tunnel

Syntax:

Global Configuration

l2tp tunnel idle-timeout


Description: Syntax: Configures the tunnel idle-timeout value and creates persistent tunnels by setting the value to 0. There is no no version. l2tp tunnel idle-timeout [ timerValue ] Mode(s): timerValue range is 086400 seconds

Global Configuration

l2tp tunnel-switching
Description: Syntax: Mode(s): Enables tunnel switching chassis-wide. The no version disables tunnel switching. Disabled is the default. [ no ] l2tp tunnel-switching Global Configuration

l2tp tunnel test ERX Edge Routers

233

l2tp tunnel test


Description: Syntax: Allows you to force the establishment of a tunnel in order to verify the tunnel configuration and to verify connectivity. l2tp tunnel test authenticateName [ tunnelName ] Mode(s): authenticateName authenticate name used to look up tunnel test parameters tunnelName name of the tunnel to be tested

Privileged Exec

l2tp weighted-load-balancing
Description: Allows you to use a weighted load balancing scheme for session distribution. The no version restores the default behavior, wherein the session load of a chassis is distributed evenly across all tunnels defined to be at the same preference level. [ no ] l2tp weighted-load-balancing Global Configuration

Syntax: Mode(s):

lease
Description: Syntax: Specifies the time period for which the supplied IP address is valid. The no version restores the default lease time, one day. lease { days [ hours [ minutes [ seconds ] ] ] | infinite } no lease Mode(s): days number of days for which the IP address is valid in the range 032768 hours number of hours for which the IP address is valid in the range 024 minutes number of minutes for which the IP address is valid in the range 060 seconds number of seconds for which the IP address is valid in the range 060 infinite assigns a lease that does not expire

Pool Configuration

234

license b-ras

license b-ras
Description: Specifies the B-RAS license provided by your sales representative or Juniper Networks Customer Service. Depending on the license purchased, the system supports up to 2,000, 4,000, 8,000, 16,000, or 20,000 authenticated PPP or SDX (formerly SSC) sessions. The no version disables the license. license b-ras licenseKey no license b-ras Mode(s): licenseKey unique string of alphanumeric characters up to 15 characters long that we provide to you

Syntax:

Global Configuration

license ipsec-tunnels
Description: Specifies the IPSec license key provided by your sales representative or Juniper Networks Customer Service. Depending on the license purchased, the system supports up to 5,000, 7,500, or 10,000 tunnels per chassis. The no version disables the license. license ipsec-tunnels licenseKey no license ipsec-tunnels Mode(s): licenseKey unique string of alphanumeric characters that we provide to you

Syntax:

Global Configuration

lifetime
Description: Syntax: Associates a lifetime with IKE SAs established using this IKE policy. The no version restores the lifetime to its default, 28800 seconds (8 hours). lifetime seconds no lifetime Mode(s): seconds number of seconds an SA lives before expiring; range is 7200 to 864000 (10 days)

ISAKMP Policy Configuration

limits ERX Edge Routers

235

limits
Description: Sets memory limits for BGP internal tables maintained by BGP software. If you set a particular memory limit to a value lower than the current value and the system uses the memory up to the previous limit, then memory allocations will start to fail when the new value takes effect. The no version restores the default values; entering an optional value in the no version has the same effect as entering no optional values. limits { { nlre | received-route } receivedRouteLimit | { nlri | destination } destinationLimit | path-attribute pathAttributeLimit | vrf vrfLimit | address-family addressFamilyLimit | peer peerLimit | peer-address-family peerAddressFamilyLimit | peer-group peer-groupLimit | peer-group-address-family peer-groupAddressFamilyLimit | dampening dampeningLimit | network-route networkRouteLimit | aggregated-route aggregatedRouteLimit | redistributed-route redistributedRouteLimit | auto-summary-route autoSummaryRouteLimit | next-hop nextHopLimit | route-flap-history routeFlapHistoryLimit | rib-out ribOutLimit | group-rib-out groupRibOutLimit | send-queue-entry sendQueueEntryLimit | route-target-entry routeTargetEntryLimit } no limits { { nlre | received-route } [ receivedRouteLimit ] | { nlri | destination } [ destinationLimit ] | path-attribute [ pathAttributeLimit ] | vrf [ vrfLimit ] | address-family [ address-family-Limit ] | peer [ peerLimit ] | peer-address-family [ peerAddressFamilyLimit ] | peer-group [ peer-groupLimit ] | peer-group-address-family [ peer-groupAddressFamilyLimit ] | dampening [ dampeningLimit ] | network-route [ networkRouteLimit ] | aggregated-route [ aggregatedRouteLimit ] | redistributed-route [ redistributedRouteLimit ] | auto-summary-route [ autoSummaryRouteLimit ] | next-hop [ nextHopLimit ] | route-flap-history [ routeFlapHistoryLimit ] | rib-out [ ribOutLimit ] | group-rib-out [ groupRibOutLimit ] | send-queue-entry [ sendQueueEntryLimit ] | route-target-entry [ routeTargetEntryLimit ] } Note: The nlre and received-route keywords have the same purpose in this command, to set a limit on the received routes table. Similarly, the nlri and destination keywords have the same purpose, to set a limit on the BGP destination table. The nlre and nlri keywords are maintained for compatibility with previous software releases. receivedRouteLimit maximum number of received routes stored by BGP in the range 02147483648; the default is 5,000,000 destinationLimit maximum number of BGP destinations stored by BGP in the range 02147483648; the default is 5,000,000 pathAttributeLimit maximum number of path attributes stored by BGP in the range 02147483648; the default is 5,000,000

Syntax:

236

limits

vrfLimit maximum number of VRFs stored by BGP in the range 02147483648; the default is 5,000,000 addressFamilyLimit maximum number of address families stored by BGP in the range 02147483648; the default is 5,000,000 peerLimit maximum number of peers stored by BGP in the range 02147483648; the default is 5,000,000 peerAddressFamilyLimit maximum number of peers per address family stored by BGP in the range 02147483648; the default is 5,000,000 peer-groupLimit maximum number of peer groups stored by BGP in the range 02147483648; the default is 5,000,000 peer-groupAddressFamilyLimit maximum number of peer-groups per address family stored by BGP in the range 02147483648; the default is 5,000,000 dampeningLimit maximum number of dampening parameter blocks stored by BGP in the range 02147483648; the default is 5,000,000. BGP creates a dampening parameter block for each unique set of dampening parameterssuch as suppress threshold, reuse threshold, and so onused by BGP. For example, if you have a route map that sets the dampening parameters to one set of values for some routes and to another set of values for the remaining routes, BGP uses and stores two dampening parameter blocks, one for each set. networkRouteLimit maximum number of network routes stored by BGP in the range 02147483648; the default is 5,000,000 aggregatedRouteLimit maximum number of aggregated routes stored by BGP in the range 02147483648; the default is 5,000,000 redistributedRouteLimit maximum number of redistributed routes stored by BGP in the range 02147483648; the default is 5,000,000 autoSummaryRouteLimit maximum number of automatically summarized routes stored by BGP in the range 02147483648; the default is 5,000,000 nextHopLimit maximum number of next hops stored by BGP in the range 02147483648; the default is 5,000,000 routeFlapHistoryLimit maximum number of route-flap histories stored by BGP in the range 02147483648; the default is 5,000,000 ribOutLimit maximum number of RIB-Out routes stored by BGP for individual peers in the range 02147483648; the default is 1,000,000 groupRibOutLimit maximum number of RIB-Out routes stored by BGP for peer groups in the range 02147483648; the default is 1,000,000 sendQueueEntryLimit maximum number of send queue entries stored by BGP in the range 02147483648; the default is 5,000,000 routeTargetEntryLimit maximum number of combined import and export route-target entries in the range 02147483648; the default is 5,000,000

Mode(s):

Router Configuration

line ERX Edge Routers

237

line
Description: Opens virtual terminal lines or the console line and allows you to configure the lines. By default five vty lines (04) are open. The no version removes a vty line or a range of lines from your configuration; users will not be able to run Telnet, SSH, or FTP to lines that you remove. When you remove a vty line, the system removes all lines above that line. For example, no line vty 6 causes the system to remove lines 6 through 19. You cannot remove lines 0 through 4. Note: Once lines are open, login is enabled by default. Before users can access the lines, you must configure a password, disable login using the no login command, or configure AAA authentication on the line. Syntax: line { console lineNumber | vty lineRangeStart [ lineRangeEnd ] } no line vty lineNumber Mode(s): console specifies the console line vty specifies vty lines lineNumber number of a single line; 0 for the console line lineRangeStart start of the vty line range; a number from 019; lineRangeEnd end of the vty line range; a number from 019

Global Configuration

lineCoding
Description: Specifies the type of line coding used by a CE1 or CT1 interface. The no version restores the defaulthdb3 for CE1 interfaces and b8zs for CT1 interfaces. lineCoding linecodingType no lineCoding linecodingType one of the following:

Syntax:

ami alternate mark inversion b8zs bipolar with eight-zero substitution; CT1 default hdb3 high-density bipolar 3; CE1 default
Mode(s): Controller Configuration

238

link

link
Description: Syntax: Links the pool currently being configured to another DHCP local address pool. The linked pool acts as a backup pool. The no version removes the link. link poolName no link Mode(s): poolName name of pool to which you want to link the pool currently being configured

Pool Configuration

list
Description: Syntax: Lists the currently configured MPLS explicit path (optionally starting at a particular index). There is no no version. list [ index ] Mode(s): index number of a node in an ordered set of abstract nodes, a value ranging from 1255; set with the index command

Explicit Path Configuration

load-interval
Description: Sets the time interval at which the system calculates bit rates and packet rates for an interface. The no version restores the default time interval, which is 300 seconds. This command is not available for the Ethernet interface on the SRP module. load-interval timeInterval no load-interval Mode(s): timeInterval a multiple of 30 seconds in the range 30300

Syntax:

Interface Configuration

local host
Description: Syntax: Configures an L2TP local hostname to be used with a remote host. The no version removes the local hostname from use with a remote host. local host hostname no local host Mode(s): hostname an L2TP local hostname; can be up to 64 characters in length (no spaces)

L2TP Destination Profile Host Configuration

local ip address ERX Edge Routers

239

local ip address
Description: Syntax: Configures a local IP address for use with a remote host. The no version removes the local IP address from use with a remote host. local ip address ipAddress no local ip address Mode(s): ipAddress an IP address

L2TP Destination Profile Host Configuration

log
Description: Syntax: Configures logging settings. The no version negates the command. The suspend version suspends the policy rule. [ no ] [ suspend ] log [ classifier-group claclName ] [ precedence precValue ] Mode(s): claclName classifier control list to be logged precValue precedence of rule in relation to be logged

Policy Configuration

240

log-adjacency-changes

log-adjacency-changes
Description: Generates a log message when a NLSP adjacency changes state (up or down). The no version disables this function. This command manipulates the same log as the Global Configuration log commands. log-adjacency-changes [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] no log-adjacency-changes severity minimum severity of the log messages for this category; described either by a descriptive termseverityValueor by a corresponding numberseverityNumberin the range 07. The lower the number, the higher the priority:

Syntax:

emergency or 0 system unusable alert or 1 immediate action needed critical or 2 critical condition exists error or 3 error condition warning or 4 warning condition notice or 5 normal but significant condition info or 6 informational message debug or 7 debug message
verbosity specifies the verbosity of this log categorys messages verbosityLevel specifies the verbosity of the log categorys messages; can be any of the following:

high verbose low terse medium moderate detail


Mode(s): Router Configuration

log destination ERX Edge Routers

241

log destination
Description: Configures the logging of system messages. You can direct messages to a destination, limit the messages logged based on severity level, or limit the event categories for which messages are logged. The no versions restore default settings or reverse the effect of previous commands that limited event categories. Note: You can display traffic logssuch as ipTraffic, icmpTraffic, tcpTraffic, and udpTrafficonly via the show log data command or from the SRP module console. You cannot redirect traffic logs elsewhere, such as to a syslog or nonvolatile storage file, or to a Telnet session. Syntax: To specify the destination and severity of messages logged: log destination { console | nv-file | syslog ipAddress [ facility facilityId ] } { severity { severityValue | severityNumber } | off } no log destination [ syslog [ ipAddress ] ] To specify which event categories are logged to syslog: log destination syslog ipAddress { include | exclude } category [ category ]* no log destination syslog ipAddress { include | exclude } [ category ]* console configure or modify logging to the local console nv-file configure or modify logging to the nonvolatile log file; the nv-file can accept only events at a severity level of critical or higher in importance syslog configure or modify logging to a syslog server ipAddress IP address of the syslog application on a remote host facility specifies the syslog facility on the host facilityId number in the range 07 that identifies the corresponding logging facility, local0local7 severity minimum severity of the log messages displayed; described either by a descriptive termseverityValueor by a corresponding numberseverityNumberin the range 07. The lower the number, the higher the priority:

emergency or 0 system unusable alert or 1 immediate action needed critical or 2 critical condition exists error or 3 error condition warning or 4 warning condition notice or 5 normal but significant condition info or 6 informational message

242

log destination syslog source

debug or 7 debug message


off disable logging to this destination include send only the specified event categories to the syslog server exclude send all event categories except those specified to the syslog server Issuing an include command after an exclude command (or vice versa) overrides the earlier command. You can issue successive include commands or successive exclude commands. Successive commands expand the list of included or excluded categories. Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line

Global Configuration

log destination syslog source


Description: Specifies a source interface type and location for events logged to a syslog server. Overrides the type and location of the actual source to enable server access behind firewalls. The no version restores the default state, which is to use the actual interface type and location of the source. log destination syslog ipAddress source interfaceType interfaceSpecifier no log destination syslog ipAddress source [ interfaceType interfaceSpecifier ] Mode(s): ipAddress IP address of the syslog application interfaceType type of interface; the source of the events logged; see Interface Types and Specifiers in About This Guide. interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.

Syntax:

Global Configuration

log engineering
Description: Syntax: Mode(s): Enables engineering logs. The no version disables engineering logs. [ no ] log engineering Global Configuration

log fields ERX Edge Routers

243

log fields
Description: Syntax: Selects optional fields to be added to all logs. The no version disables the optional log fields. log fields { timestamp | no-timestamp } { instance | no-instance } { calling-task | no-calling-task } no log fields Mode(s): timestamp include the timestamp in log messages no-timestamp do not include the timestamp in log messages instance include the event ID in log messages no-instance do not include the event ID in log messages calling-task include the logging task name in log messages no-calling-task do not include the logging task name in log messages

Global Configuration

log filters
Description: This command has only a no version. See the no log filterscommand for a complete description and syntax.

log here
Description: Syntax: Mode(s): Enables the current terminal as a log console. The no version disables logs destined for a console from being displayed on the current terminal. [ no ] log here User Exec, Privileged Exec, Global Configuration

244

log severity

log severity
Description: Sets the severity value for the selected category. The no version removes an override severity setting and returns a log to its default value or the system-wide setting. log severity { severityValue | off | severityNumber } [ eventCategory [ instanceTree ] | eventCategory instanceTree | eventCategory ] no log severity [ severityValue | off | severityNumber ] [ eventCategory [ filters | instanceTree ] | eventCategory { filters | instanceTree } | eventCategory | * ] severityValue and severityNumber minimum severity of the log messages displayed for the selected category; described either by a descriptive termseverityValueor by a corresponding numberseverityNumberin the range 07. The lower the number, the higher the priority:

Syntax:

emergency or 0 system unusable alert or 1 immediate action needed critical or 2 critical condition exists error or 3 error condition warning or 4 warning condition notice or 5 normal but significant condition info or 6 informational message debug or 7 debug message
Mode(s): off disables log messages for all event categories or for a specified event category eventCategory log category; refer to the CLI online Help for available options filters removes all log filters for the event category instanceTree log-specific filter parameters; refer to the CLI online Help for available options * resets all log severities, system wide and individual, to default settings

Global Configuration

log unlimit ERX Edge Routers

245

log unlimit
Description: Syntax: Removes the limit on the number of outstanding buffers for an event category. The no version returns the number of buffers to the default value. [ no ] log unlimit [ eventCategory ] Mode(s): eventCategory log category; refer to the CLI online Help for available options

User Exec, Privileged Exec, Global Configuration

log verbosity
Description: Syntax: Sets the verbosity level for a selected category. The no version returns the log verbosity to its default value, low. log verbosity verbosityLevel [ eventCategory ] no log verbosity [ verbosityLevel ] [ eventCategory ] verbosityLevel specifies the verbosity for the log category:

low terse (default) medium moderate detail high verbose


Mode(s): eventCategory log category; refer to the CLI online Help for available options

Global Configuration

login
Description: Syntax: Mode(s): Requires you to log in with a password. The no version removes the password requirement and allows connections without a password. [ no ] login Line Configuration Note: If this command has been configured and no password has been configured, access to Telnet is refused.

246

login authentication

login authentication
Description: Applies an AAA authentication list to the vty sessions that you specified for AAA authentication.The no version removes all authentication methods, which means the system accepts Telnet sessions without challenge. login authentication authListName no login authentication Mode(s): authListName specifies an authentication list name of up to 32 characters

Syntax:

Line Configuration

logout subscribers
Description: Syntax: Logs out the authenticated PPP users. If you do not specify a license, B-RAS configuration commands are disabled. There is no no version. logout subscribers { all | username userName | domain domainName | virtual-router vrName | port interfaceLocation } all all PPP sessions userName active PPP session whose names match the username domainName active PPP session whose usernames have that domain name vrName active PPP session whose interfaces are bound to a specific virtual router port active PPP subscribers for the port interfaceLocation location of the port in slot/port format; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Mode(s):

Privileged Exec

loopback ERX Edge Routers

247

loopback
Description: Specifies the loopback mode for a module controller or interface, or maps a loopback interface to a user domain name in Domain Map Configuration mode. The no version clears all loopback on the module or interface (the default), or deletes the mapping to the user domain name. Module controllers The options available vary depending on the module being configured. CE1 module: loopback { local | network { payload | line } } no loopback CT1 module: loopback { local | network { payload | line } | remote { line { fdl { ansi | bellcore } | inband } payload [ fdl ] [ ansi ] } } no loopback [ remote ] CT3, E3, or T3 module: loopback { local | network | payload } no loopback cOCx/STMx SONET controller (SONET/SDH section layer), OCx/STMx line modules: loopback { local | network } no loopback X.21/V.35 module: [ no ] loopback local loops the data back toward the router and sends an AIS out toward the network. network payload loops the data toward the network after the framer has processed the data. network line loops the data toward the network before the data reaches the framer. remote line fdl ansi sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 line, according to the ANSI T1.403 specification.

Syntax:

248

loopback

remote line fdl bellcore sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 line, according to the Bellcore TR-TSY-000312 specification. remote line inband sends a repeating 5-bit inband pattern (00001) to the remote end requesting that it enter into a network line loopback. remote payload [ fdl ] [ ansi ] sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 line. You can specify fdl and ansi, but it is not necessary. remote based on the last activate request sent to the remote end, sends the 16-bit ESF data link code word or inband pattern to deactivate the loopback at the remote end. network loops the data toward the network before the data reaches the framer. payload loops the data toward the network after the framer has processed the data.

Interfaces The options available vary depending on the interface being configured. ATM interface This command cannot be used on a subinterface: loopback { diagnostic | line } no loopback POS interface: [ no ] loopback internal | line diagnostic places the interface into internal loopback line ATM interface: places the interface into external loopback; POS interface: connects the received network signal directly to the transmit network signal. When configured in line loopback mode, the system never receives data from the network. internal connects the local transmitted signal to the local received signal

User Domain Name loopback interface-number no loopback Mode(s): interface-number interface number in the range 132000

Controller Configuration, Interface Configuration, Domain Map Configuration

lsp-gen-interval ERX Edge Routers

249

lsp-gen-interval
Description: Syntax: Sets the minimum interval at which originated IS-IS link state packets are generated on a per LSP basis. The no version restores the default interval. lsp-gen-interval [ level-1 | level-2 ] seconds no lsp-gen-interval [ level-1 | level-2 ] Mode(s): level-1 sets interval for level 1 only level-2 sets interval for level 2 only seconds number in the range 0120; the minimum interval in seconds; the default value is 5 seconds

Router Configuration

lsp-mtu
Description: Syntax: Sets the maximum size of an IS-IS link state packet generated by the software. The no version restores the default MTU size of 1497 bytes. lsp-mtu bytes no lsp-mtu Mode(s): bytes number in the range 1289180; the MTU size in bytes; the default value is 1497

Router Configuration

lsp-refresh-interval
Description: Sets the link state packet rate at which locally generated IS-IS link state packets are periodically transmitted.The no version restores the default refresh interval. lsp-refresh-interval seconds no lsp-refresh-interval Mode(s): seconds number in the range 165535; the refresh interval in seconds; the default value is 900

Syntax:

Router Configuration

250

macro

macro
Description: Executes a macro file, which can consist of one or more macros. If you do not use the macroName option to specify a macro, the command searches in the specified macro file for a macro named start, and returns an error if the start macro is not found. If you do not specify fileName.mac, you must specify name macroName; the command then searches only in local memory for a file called macroName.mac that contains the macroName macro. There is no no version. macro [ test | verbose ] { fileName.mac [ macroName [ arg ]* ] | name macroName [ arg ]* } test displays the output of the macro without issuing the commands to the system, and displays comments verbose echoes each command as the macro executes and displays comments fileName name of the file containing the macro; requires the .mac extension macroName name of a macro within the macro file arg zero or more arguments passed to the macro; if the argument contains a space or other special character, the argument must be enclosed within double quotation marks * indicates that one or more parameters can be repeated multiple times in a list in the command line

Syntax:

Mode(s): All

map-class frame-relay
Description: Creates a map class. Command is used when configuring Frame Relay end-to-end fragmentation and reassembly. The no version removes the map-class. [ no ] map-class frame-relay mapName Mode(s): mapName name of the map class; use up to 64 characters

Syntax:

Global Configuration

map-group ERX Edge Routers

251

map-group
Description: Associates a map list to an NBMA interface when configuring static mapping. The no version removes the association. Use in conjunction with the map-list command. [ no ] map-group name Mode(s): name name of the map group

Syntax:

Interface Configuration

map-list
Description: Creates a map list for an NBMA interface when configuring static mapping. The no version removes the map list. Use in conjunction with the map-group command. [ no ] map-list name Mode(s): name name of the map list

Syntax:

Map List Configuration

252

mark

mark
Description: Sets the precedence field of the ToS byte in the IP header to a specified value. Unlike the committed-mark-value, conformed-mark-value, and the exceeded-mark-value commands, the mark command is not tied to a rate limit profile, but marks packets based on a classifier control list. Use the suspend keyword to suspend a mark rule temporaily.The no version removes the mark rule from a policy list. [ no ] [ suspend ] mark { tosByteValue mask maskValue | tos-precedence tosPrecNum | dsfield dsFieldNum | tos tosNum } [ classifier-group claclName ] [ precedence precValue ] Mode(s): suspend suspend a policy rule tosByteValue ToS byte value to be assigned to packets; in the range 0255 maskValue mask to be used when applying ToS Byte values to packets; in the range 1255 tosPrecNum ToS precedence value to be assigned to packets; in the range 07 dsFieldNum DS field value to be assigned to packets; in the range 063 tosNum ToS value to be assigned to packets; in the range 0255 claclName classifier control list used to classify packets for this IP precedence policy precValue precedence of this rule in relation to other rules within this set in the range 032768

Syntax:

Policy Configuration

mask-val
Description: Sets the mask value. Use the mask-val command in conjunction with the committed-mark-value, conformed-mark-value, and exceeded-mark-value commands. The no version restores the default value, 255. [ no ] mask-val value value mask value in the range 0255. Use the following mask values to set the appropriate bits in the ToS field of the IP packet header:

Syntax:

IP Precedence 0xED (three most significant bits) DS Field 0xFC (six significant bits)
Mode(s): Rate Limit Profile Configuration

match as-path ERX Edge Routers

253

match as-path
Description: Matches a BGP AS path access list. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match as-path listName [ listName ]* no match as-path [ listName ] * Mode(s): listName name of an AS path access list; string of up to 32 characters * indicates that one or more parameters can be repeated multiple times in a list in the command line

Syntax:

Route Map Configuration

match community
Description: Matches a BGP community list. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match community listName [ listName ]* [ exact-match ] no match community [ listName ]* [ exact-match ] listName a string of up to 32 characters that designates a community list; you can optionally use a regular expression to specify the listName exact-match limits the match to a route that contains only the communities contained in the specified list; cannot be used with a community list specified by a regular expression * indicates that one or more parameters can be repeated multiple times in a list in the command line

Syntax:

Mode(s):

Route Map Configuration

254

match distance

match distance
Description: Use to match any routes that have the specified administrative distance. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. Note: Matching a distance is useful only when applied to a route being redistributed out of a routing table. Distance is used to determine the relative preference between routes to the same prefix in order to pick the best route to that prefix in the routing table. Distance has no meaning in any other circumstance and any attempt to match distance will fail. Syntax: match distance distance [ distance ]* no match distance [ distance ] Mode(s): distance administrative distance in the range 0255 * indicates that one or more parameters can be repeated multiple times in a list in the command line

Route Map Configuration

match extcommunity
Description: Matches a BGP extcommunity list. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match extcommunity listName [ listName ]* [ exact-match ] no match extcommunity [ listName ]* listName name of the extended-community list * indicates that one or more parameters can be repeated multiple times in a list in the command line exact-match limits the match to a route that contains only the extended communities contained in the specified list; cannot be used with an extended community list specified by a regular expression

Syntax:

Mode(s):

Route Map Configuration

match ip address ERX Edge Routers

255

match ip address
Description: Matches any routes that have a destination network number address that is permitted by a standard or extended access list, a prefix list, or a prefix tree, or performs policy routing on packets. You cannot mix references in the same match command; you can only specify either access list(s), prefix list(s), or prefix tree(s). The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match ip address { accessListName [ accessListName ]* | prefix-list listName [ listName ]* | prefix-tree treeName [ treeName ]* } no match ip address [ accessListName ]* | prefix-list [ listName ]* | prefix-tree [ treeName ]* Mode(s): accessListName string of up to 32 alphanumeric characters listName name of a single prefix list; string of up to 32 characters treeName name of a single prefix tree; string of up to 32 characters * indicates that one or more parameters can be repeated multiple times in a list in the command line

Syntax:

Route Map Configuration

match ip next-hop
Description: Matches any routes that have a next-hop router address passed by the specified access list, prefix list, or prefix tree. You cannot mix references in the same match command; you can only specify either access list(s), prefix list(s), or prefix tree(s). The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match ip next-hop { accessListName [ accessListName ]* | prefix-list listName [ listName ]* | prefix-tree treeName [ treeName ]* } no match ip next-hop [ accessListNumber ]* | prefix-list [ listName ]* | prefix-tree [ treeName ]* Mode(s): accessListName name of a single standard access list; string of up to 32 characters listName name of a single prefix list; string of up to 32 characters treeName name of a single prefix tree; string of up to 32 characters * indicates that one or more parameters can be repeated multiple times in a list in the command line

Syntax:

Route Map Configuration

256

match level

match level
Description: Matches import routes for the specified type. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match level { backbone | level-1 | level-1-2 | level-2 | stub-area } * no match level [ backbone | level-1 | level-1-2 | level-2 | stub-area ] Mode(s): backbone an OSPF backbone area level-1 a level 1 area level-1-2 a level 1 and a level 2 area level 2 a level 2 subdomain stub-area an OSPF NSSA area * indicates that one or more parameters can be repeated multiple times in a list in the command line

Syntax:

Route Map Configuration

match metric
Description: Matches a route for the specified metric value. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match metric metricValue [ metricValue ]* no match metric [ metricValue ] Mode(s): metricValue number in the range 04294967295, which indicates the preference value for a specific route in a route map * indicates that one or more parameters can be repeated multiple times in a list in the command line

Syntax:

Route Map Configuration

match metric-type
Description: Syntax: Matches routes having the specified metric type. The no version removes the match clause from a route map. match metric-type { external | internal } no match metric-type [ external | internal ] Mode(s): external IS-IS external metric type internal IS-IS internal metric type

Route Map Configuration

match route-type ERX Edge Routers

257

match route-type
Description: Matches routes of the specified type. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match route-type internal [ intra | inter ] [ level-1 | level-2 ] [ external [ type-1 | type-2 ] ] [ level-1 | level-2 ]* match route-type external [ type-1 | type-2 ] [ level-1 | level-2 ] [ internal [ intra | inter ] ] [ level-1 | level-2 ]* match route-type { level-1 | level-2 } [ internal [ intra | inter ] ] [level-1 | level-2 ] [ external [ type-1 | type-2 ] ] [ level-1 | level-2 ]* match route-type { level-1 | level-2 } [ external [ type-1 | type-2 ] ] [ level-1 | level-2 ] [ internal [ intra | inter ] ] [ level-1 | level-2 ]* no match route-type [ internal [ intra | inter ] | external [ type-1 | type-2 ] | level-1 | level-2 ] internal internal routes

Syntax:

intra OSPF intra-area routes inter OSPF interarea routes


external external routes

type-1 OSPF type 1 external routes type-2 OSPF type 2 external routes
Mode(s): level-1 IS-IS level 1 routes level-2 IS-IS level 2 routes * indicates that one or more parameters can be repeated multiple times in a list in the command line

Route Map Configuration

match-set summary prefix-tree


Description: Sets condition for a route map that matches routes based on the network base address set in the specified prefix tree and summarizes them by preserving only the bits set in the prefix tree. The no version disables the use of the prefix tree by the route map. match-set summary prefix-tree treeName no match-set summary prefix-tree Mode(s): treeName name of the prefix tree

Syntax:

Route Map Configuration

258

match tag

match tag
Description: Matches the tag value of the destination routing protocol. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match tag tagValue [ tagValue ]* no match tag [ tagValue ]* Mode(s): tagValue number in the range 04294967295 * indicates that one or more parameters can be repeated multiple times in a list in the command line

Syntax:

Route Map Configuration

maximum-paths
Description: Controls the maximum number of equal-cost paths to the same destination that BGP, IS-IS, OSPF, or RIP can install in the routing table to support ECMP. For BGP, issue the command from Router Configuration mode to apply to routes in the global RIB. In Address Family Configuration mode, issue the command only in the context of IPv4 unicast address families to apply the value only to routes in the global RIB or the specific VRF for the IPv4 unicast address family; VPNv4 address families are not supported. For IS-IS, OSPF, or RIP, issue from Router Configuration mode. The no version restores the default value, 1 path for BGP or 4 paths for IS-IS, OSPF, and RIP. Syntax: For BGP: maximum-paths [ ibgp ] maxPaths no maximum-paths [ ibgp ] [ maxPaths ] ibgp specifies that the maxPaths value applies only to routes received from internal (IBGP) peers; if this keyword is not specified, the maxPaths value applies only to routes received from external (EBGP) peers maxPaths maximum number of parallel paths (routes) in the range 16

For IS-IS and RIP: maximum-paths maxPaths no maximum-paths maxPaths maximum number of parallel paths (routes) in the range 116

For OSPF: [ no ] maximum-paths maxPaths Mode(s): maxPaths maximum number of parallel paths (routes) in the range 116

Address Family Configuration, Router Configuration, VRF Configuration

maximum routes ERX Edge Routers

259

maximum routes
Description: Sets a warning threshold and maximum limit for routes imported by a PE router into a VRF from associated CE routers. The no version removes the limit and warning threshold. maximum routes limit { warningThreshold | warning-only } no maximum routes limit number in the range 14294967295 that when exceeded prevents routes from being imported into the routing table; when first exceeded generates a limit-exceeded log entry; if the route count fluctuates below and up to this value, an interval of five minutes must pass before another limit-exceeded log entry can be generated warningThreshold percentage in the range 1100 that when first exceeded generates a warning-threshold-exceeded log entry; if the route count fluctuates around this value, an interval of five minutes must pass before another warning-threshold-exceeded log entry can be generated warning-only causes the limit to function as a warningThreshold; specifies that exceeding the limit generates a warning-threshold-exceeded log entry instead of a limit-exceeded log entry and permits routes exceeding the limit to be added to the routing table; if the route count fluctuates around the limit, an interval of five minutes must pass before another warning-threshold-exceeded log entry can be generated

Syntax:

Mode(s):

VRF Configuration

max-lsp-lifetime
Description: Syntax: Sets the maximum time that IS-IS link state packets persist without being refreshed. The no version restores the default time. max-lsp-lifetime seconds no max-lsp-lifetime Mode(s): seconds number in the range 165535; the lifetime of LSP in seconds; the default value is 1200 seconds

Router Configuration

260

max-response-failure

max-response-failure
Description: Terminates a test when the maxFailureValue is reached. That is, when there is no response to a designated number of operation requests, the test is terminated. This feature applies only to pathEcho entries. The no version restores the default value, five consecutive failures. max-response-failure maxFailureValue no max-response-failure Mode(s): maxFailureValue number of operation requests not responded to; 0 turns this feature off; the default is 5

Syntax:

RTR Configuration

max-sessions
Description: For RADIUS, specifies the number of outstanding requests to a server. The no version reverts to the default value. For tunnelss, sets the maximum sessions per tunnel. The no version disables the feature. The default version sets the value to zero. Syntax: For RADIUS: max-sessions sessionLimit no max-sessions sessionLimit maximum number of outstanding requests to a specific server in the range 104000; the default is 255

For tunnels: max-sessions maxSessionsPerTunnel default max-sessions no max-sessions Mode(s): maxSessionsPerTunnel maximum number of sessions that can be configure on a tunnel in the range 04294967295; the default is zero

Domain Map Tunnel Configuration, Radius Configuration

mdl carrier
Description: Specifies that a T3 interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment. [ no ] mdl carrier Controller Configuration

Syntax: Mode(s):

mdl string ERX Edge Routers

261

mdl string
Description: Allows you to specify an MDL message on a T3 interface as defined in the ANSI T1.107a-1990 specification. The no version restores the default value to the specified MDL message or to all MDL messages. mdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiCode | port portValue | generator genValue } no mdl string { eic | fic | lic | unit | pfi | port | generator } Mode(s): eicValue equipment identification code; 110 characters; default is the null value. ficValue frame identification code; 110 characters; default is the null value. licValue line identification code; 111 characters; default is the null value. unitValue unit identification code; 16 characters; default is the null value. pfiCode facility identification code to send in the MDL path message; 138 characters; default is the null value. portValue equipment port number to send in the MDL idle signal message; 138 characters; default is the null value. genValue generator number to send in the MDL test signal message; 138 characters; default is the null value.

Syntax:

Controller Configuration

mdl transmit
Description: Syntax: Transmits an MDL message from a T3 interface. The no version disables transmission of the specified MDL message or all MDL messages. [ no ] mdl transmit { path-id | idle-signal | test signal } no mdl transmit Mode(s): path-id MDL path message; default is disabled idle-signal MDL idle signal message; default is disabled test-signal MDL test signal message; default is disabled

Controller Configuration

262

medium ipv4

medium ipv4
Description: Syntax: Specifies the medium type of an L2TP or L2F tunnel to IPv4 (the only medium type currently supported). The no version restores the default value, ipv4. medium ipv4 no medium Mode(s): Domain Map Tunnel Configuration

member-interface
Description: Adds an MLPPP link interfacealso known as an MLPPP bundle memberto an MLPPP bundle or adds an MFR link interfacealso known as an MFR bundle member to an MFR bundle. The no version deletes the specified interface from the MLPPP or MFR bundle. [ no ] member-interface interfaceType interfaceSpecifier Mode(s): interfaceType interface type: serial or pos interfaceSpecifier particular interface; see Interface Types and Specifiers in About This Guide

Syntax:

Interface Configuration, Subinterface Configuration

memory
Description: Configures memory warning parameters. When the system reaches the high memory utilization value, it sends warning messages. When memory usage falls to the abated memory utilization value, the system stops sending warning messages. The no version returns the memory warning parameters to the default values. [ no ] memory warning highUtilization abatedUtilization Mode(s): highUtilization high memory utilization value; the range is 199, and the default is 85 abatedUtilization abated memory utilization value; the range is 199, and the default is 75

Syntax:

Global Configuration

message-digest-key md5 ERX Edge Routers

263

message-digest-key md5
Description: Syntax: Enables OSPF MD5 authentication for the remote-neighbor interface and configures the MD5 key. The no version deletes an MD5 key. message-digest-key keyID md5 [ 0 | 8 ] msgDigestKey no message-digest-key keyID keyID key identifier in the range 1255 md5 specifies use of the MD5 algorithm 0 indicates that the msgDigestKey is entered in unencrypted form (plaintext); this is the default option 8 indicates that the msgDigestKey is entered in encrypted form (ciphertext) msgDigestKey the OSPF password. The password can be a continuous string of up to 16 alphanumeric characters.

Note: If all the MD5 keys have been deleted, the authentication type is still MD5, but you need to configure MD5 keys. Note: To disable MD5 authentication for the remote-neighbor interface, use the authentication-none command. Mode(s): Remote Neighbor Configuration

metric-style narrow
Description: Configures the system to generate and accept only old-style IS-IS TLVs with narrow (six-bit) metric fields. If you issue this command, the value configured with the isis metric command can range only from 063. The no version restores the default value, which is to generate and accept only old-style TLVs with narrow (six-bit) metric fields. [ no ] metric-style narrow [ transition ] [ level-1 | level-2 | level-1-2 ] Mode(s): transition configures the system to additionally accept new-style TLVs with wider metric fields level-1 configuration applies only to level 1 routing level-2 configuration applies only to level 2 routing level-1-2 configuration applies to both level 1 and level 2 routing

Syntax:

Router Configuration

264

metric-style transition

metric-style transition
Description: Configures the system to generate and accept both old-style IS-IS TLVs with narrow (six-bit) metric fields and new-style IS-IS TLVs with wider metric fields. If you issue this command, the value configured with the isis metric command can range from 016777215. The no version restores the default value, which is to generate and accept only old-style TLVs with narrow (six-bit) metric fields. [ no ] metric-style transition [ level-1 | level-2 | level-1-2 ] Mode(s): level-1 configuration applies only to level 1 routing level-2 configuration applies only to level 2 routing level-1-2 configuration applies to both level 1 and level 2 routing

Syntax:

Router Configuration

metric-style wide
Description: Configures the system to generate and accept only new-style IS-IS TLVs with wider metric fields. If you issue this command, the value configured with the isis metric command can range from 016777215. The no version restores the default value, which is to generate and accept only old-style TLVs with narrow (six-bit) metric fields. [ no ] metric-style wide [ transition ] [ level-1 | level-2 | level-1-2 ] Mode(s): transition configures the system to additionally accept old-style TLVs with narrow (six-bit) metric fields level-1 configuration applies only to level 1 routing level-2 configuration applies only to level 2 routing level-1-2 configuration applies to both level 1 and level 2 routing

Syntax:

Router Configuration

motd-banner
Description: Controls display of a message-of-the-day banner (configured with the banner command) on a particular line when a connection is initiated. The no version disables the banner. [ no ] motd-banner Line Configuration

Syntax: Mode(s):

mpls ERX Edge Routers

265

mpls
Description: Enables, disables, or deletes MPLS on either a virtual router or on an interface. MPLS does not exist by default and must be created explicitly or implicitly. If it is created implicitly, MPLS remains disabled until explicitly enabled. The no mpls version halts MPLS on the virtual router or interface and deletes the MPLS configuration. The no mpls disable version enables MPLS that was previously disabled or implicitly created on the virtual router or interface. [ no ] mpls [ traffic-eng tunnels ] [ disable ] Mode(s): traffic-eng tunnels optional keyword for compatibility with non-ERX implementations disable stops MPLS on the virtual router, but leaves the MPLS global configuration intact

Syntax:

Global Configuration, Interface Configuration

mpls atm vci range


Description: Specifies the range for virtual circuit identifiers used for MPLS on ATM major interfaces. An interface can support LDP, RSVP-TE, or both as the label distribution protocol. You can set VCI ranges independently for each protocol. If you do not specify a keyword, the range applies to both protocols. The no version deletes the range. mpls atm vci range [ ldp | rsvp ] minVCI maxVCI no mpls atm vci range [ ldp | rsvp ] Mode(s): ldp specifies the range when LDP is used as the label distribution protocol rsvp specifies the range when RSVP is used as the label distribution protocol minVCI lowest virtual circuit identifier acceptable for a label, a value from 3365535 maxVCI highest virtual circuit identifier acceptable for a label, a value from 3365535

Syntax:

Interface Configuration

266

mpls atm vpi range

mpls atm vpi range


Description: Specifies the range for virtual path identifiers used for MPLS on ATM major interfaces. An interface can support LDP, RSVP-TE, or both as the label distribution protocol. You can set VPI ranges independently for each protocol. If you do not specify a keyword, the range applies to both protocols. The no version deletes the range. mpls atm vpi range [ ldp | rsvp ] minVPI maxVPI no mpls atm vpi range [ ldp | rsvp ] Mode(s): ldp specifies the range when LDP is used as the label distribution protocol rsvp specifies the range when RSVP-TE is used as the label distribution protocol minVPI lowest virtual path identifier acceptable for a label, a value in the range 0255 maxVPI highest virtual path identifier acceptable for a label, a value in the range 0255

Syntax:

Interface Configuration

mpls bandwidth
Description: Syntax: Specifies the total bandwidth reservable for MPLS on the interface. The no version restores the default value of 0. { ip rsvp | mpls} bandwidth bandwidth no { ip rsvp | mpls} bandwidth Mode(s): ip rsvp keyword for compatibility with non-ERX implementations of MPLS mpls specify this keyword for our MPLS implementation bandwidth reservable bandwidth in kilobits per second, a value in the range 110000000

Interface Configuration

mpls disable
Description: Disables the specified label distribution protocol on the interface. The no version reenables the label distribution protocol when it was previously disabled on the interface. [ no ] mpls { ldp | rsvp } disable Interface Configuration

Syntax: Mode(s):

mpls explicit-path ERX Edge Routers

267

mpls explicit-path
Description: Syntax: Defines an explicit path by name or ID number and also enables or disables the explicit path. The no version deletes the explicit path. { ip | mpls } explicit-path { name name | identifier number } [ enable | disable ] no { ip | mpls } explicit-path { name name | identifier number } ip keyword for compatibility with non-ERX implementations mpls specify this keyword for our MPLS implementation name name for the explicit path; string of up to 20 characters number number identifying the explicit path in the range 165535 enable reenables the explicit path that was previously disabled on the virtual router; to prevent a partially configured explicit path from being used, do not enable it until you have finished configuring or modifying the path disable disables the explicit path that was previously enabled on the virtual router

Mode(s):

Global Configuration

mpls ip propagate-ttl
Description: Controls the value for the TTL field in the MPLS header when a label is assigned to an IP packet. Enabled by default, this command sets the TTL to the TTL value from the IP packet header. The no version sets the value to 255 and controls how the network structure is hidden from the traceroute command. The default version reverts to the global default, causing the TTL field to be copied from the IP packet header and enabling the traceroute command to show all the hops in the network., and propagating the label TTL into the IP header at the tunnel egress. mpls ip propagate-ttl [ forwarded | local ] { no | default } mpls ip propagate-ttl [ forwarded | local ] Mode(s): forwarded hides the network structure from traceroute only for forwarded packets local hides the network structure from traceroute only for local packets

Syntax:

Global Configuration

268

mpls label-range

mpls label-range
Description: Syntax: Specifies the range for the platform label space; all configured virtual routers can share this range. The no version restores the default values, 161048575. mpls label-range minLabel maxLabel no mpls label-range Mode(s): minLabel lowest number acceptable for a label, a value in the range 161048575 maxLabel highest number acceptable for a label, a value in the range 161048575

Global Configuration

mpls ldp advertise-labels


Description: Syntax: Controls the distribution of incoming labels distributed by LDP. The no version halts advertisement of all incoming labels or the specified labels. mpls ldp advertise-labels { host-only | for routeAccessList [ to neighborAccessList ] } no mpls ldp advertise-labels { policy-list | host-only | for routeAccessList [ to neighborAccessList ] } Mode(s): host-only advertises only labels for host routes (routes with a 32-bit mask) routeAccessList name of access list identifying routes for which label advertisement is permitted or denied neighborAccessList name of access list identifying neighbors to which the LSR advertises labels policy-list deletes all lists configured with the for routeAccessList option

Global Configuration

mpls ldp discovery transport-address


Description: Syntax: Specifies the transport address of the local peer advertised in LDP discovery hello messages. The no version halts advertisement of the address. mpls ldp discovery transport-address { interface | ipAddress } no mpls ldp discovery transport-address Mode(s): interface specifies that the interface IP address is advertised as the transport address ipAddress IP address advertised as the transport address

Interface Configuration

mpls ldp no-route retries ERX Edge Routers

269

mpls ldp no-route retries


Description: Specifies the number of attempts that will be made to set up an LSP for topology-driven LDP after a failure due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful. mpls ldp no-route retries retryNum no mpls ldp no-route retries Mode(s): retryNum number of retry attempts in the range 065535

Syntax:

Global Configuration

mpls ldp no-route retry-time


Description: Specifies the interval in seconds between attempts to set up an LSP for topology-driven LDP after a failure due to no available route. The no version restores the default value of 30 seconds. mpls ldp no-route retry-time retryTime no mpls ldp no-route retry-time Mode(s): retryTime interval in the range 160

Syntax:

Global Configuration

mpls ldp retries


Description: Specifies the number of attempts that will be made to set up an LSP for topology-driven LDP after a failure other than one due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful. mpls ldp retries retryNum no mpls ldp retries Mode(s): retryNum number of retry attempts in the range 065535

Syntax:

Global Configuration

270

mpls ldp retry-time

mpls ldp retry-time


Description: Specifies the interval in seconds between attempts to set up an LSP for topology-driven LDP after a failure other than one due to no available route. The no version restores the default value of 30 seconds. mpls ldp [ no-route ] retry-time retryTime no mpls ldp retry-time Mode(s): retryTime interval in the range 160

Syntax:

Global Configuration

mpls ldp session retries


Description: Specifies the number of attempts that will be made to set up an LDP session. The default value of 0 means the attempts will be made until successful. The no version restores the default value. mpls ldp session retries retryNum no mpls ldp session retries Mode(s): retryNum number of attempts in the range 065535

Syntax:

Global Configuration

mpls ldp session retry-time


Description: Syntax: Use to specify the interval in seconds between attempts to set up an LDP session. The no version restores the default value of 30 seconds. mpls ldp session retry-time retryTime no mpls ldp session retry-time Mode(s): retryTime interval in the range 060

Global Configuration

mpls ldp targeted-hello receive list ERX Edge Routers

271

mpls ldp targeted-hello receive list


Description: Syntax: Configures the list of peer addresses from which MPLS accepts targeted hello messages. The no version removes the list of peer addresses. [ no ] mpls ldp targeted-hello receive list { access-list accessListName | ipAddress [ ipAddress ]* } Mode(s): accessListName string of up to 32 alphanumeric characters that identifies an access list ipAddress IP address of a peer * indicates that one or more parameters can be repeated multiple times in a list in the command line

Global Configuration

mpls ldp targeted-hello send list


Description: Syntax: Configures the list of peer addresses to which MPLS sends targeted hello messages. The no version removes the list of peer addresses. [ no ] mpls ldp targeted-hello send list { access-list accessListName | ipAddress [ ipAddress ]* } Mode(s): accessListName string of up to 32 alphanumeric characters that identifies an access list ipAddress IP address of a peer * indicates that one or more parameters can be repeated multiple times in a list in the command line

Global Configuration

mpls lsp no-route retries


Description: Specifies the number of attempts that will be made to set up an LSP for CR-LDP and RSVP-TE after a failure due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful. mpls lsp no-route retries retryNum no mpls lsp no-route retries Mode(s): retryNum number of retry attempts in the range 065535

Syntax:

Global Configuration

272

mpls lsp no-route retry-time

mpls lsp no-route retry-time


Description: Specifies the interval in seconds between attempts to set up an LSP for CR-LDP and RSVP-TE after a failure due to no available route. The no version restores the default value of 5 seconds. mpls lsp no-route retry-time retryTime no mpls lsp no-route retry-time Mode(s): retryTime interval in the range 160

Syntax:

Global Configuration

mpls lsp retries


Description: Specifies the number of attempts that will be made to set up an LSP for CR-LDP and RSVP-TE after a failure other than one due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful. mpls lsp retries retryNum no mpls lsp retries Mode(s): retryNum number of retry attempts in the range 065535

Syntax:

Global Configuration

mpls lsp retry-time


Description: Specifies the interval in seconds between attempts to set up an LSP for CR-LDP and RSVP-TE after a failure other than one due to no available route. The no version restores the default value of 5 seconds. mpls lsp [ no-route ] retry-time retryTime no mpls lsp retry-time Mode(s): retryTime interval in the range 160

Syntax:

Global Configuration

mpls match exp-bits ERX Edge Routers

273

mpls match exp-bits


Description: Sets the traffic class and color for incoming traffic matching the specified EXP bits value in the MPLS shim header. The no version reverts to the default behavior for traffic matching the specified EXP bits value, setting neither traffic class nor color. mpls match exp-bits bitValue set traffic-class className color { green | yellow | red } no mpls match exp-bits bitValue Mode(s): bitValue value in the range 07 that matches the corresponding binary value (000111) for the three EXP bits className name of a traffic class; the system supports up to eight traffic classes green sets packet color to green, indicating a low drop preference yellow sets packet color to yellow, indicating a medium drop preference red sets packet color to red, indicating a high drop preference

Syntax:

Global Configuration

mpls match traffic-class


Description: Sets the EXP bits in the MPLS shim header of outgoing traffic matching the specified combination of traffic class and color. The no version reverts to the default behavior for traffic matching the specified traffic class and color combination. The default behavior sets the EXP bits to 000 for traffic entering an LSP and has no effect on the EXP bits for transit traffic. mpls match traffic-class className color { green | yellow | red } set exp-bits bitValue no mpls match traffic-class className color { green | yellow | red } Mode(s): className name of a traffic class; the system supports up to eight traffic classes green sets packet color to green, indicating a low drop preference yellow sets packet color to yellow, indicating a medium drop preference red sets packet color to red, indicating a high drop preference bitValue value in the range 07 that sets the corresponding binary value (000111) for the three EXP bits

Syntax:

Global Configuration

274

mpls profile

mpls profile
Description: In Global Configuration mode, creates or modifies a configuration profile for the specified label distribution protocoleither LDP or RSVP-TE. Places the CLI in either LDP Configuration mode or RSVP Configuration mode. You can specify the name of a previously created profile to modify its parameters. If you specify a profile that was not previously configured, the command creates the new profile with the factory default settings. If you do not specify a profile name, the factory default profile is assumed. The no version deletes the specified profile. In Interface Configuration mode, enables either LDP or RSVP-TE on the interface. You can specify the name of a profile configured in Global Configuration mode to set the parameters for the protocol. If you specify a profile that was not previously configured, the command creates the new profile with the factory default settings. If you do not specify a profile name, the factory default profile values are applied. The no mpls version deletes the protocol on the interface. The no mpls profile version reverts to the default profile on the interface. In Global Configuration mode: mpls { ldp | rsvp } [ interface ] profile [ profileName ] no mpls { ldp | rsvp } interface profile profileName In Interface Configuration mode: mpls { ldp | rsvp } [ profile profileName ] no mpls { ldp | rsvp } [ profile ] ldp specifies LDP as the label distribution protocol rsvp specifies RSVP-TE as the label distribution protocol interface keyword for compatibility with non-ERX implementations profileName name of a profile to be created or modified (Global Configuration mode), applied to an interface (Interface Configuration mode), or deleted (both modes); the profile sets the values for the protocol parameters; until you modify the profile settings, the values match those of the implicit default profile

Syntax:

Mode(s):

Global Configuration, Interface Configuration

mpls-relay ERX Edge Routers

275

mpls-relay
Description: Syntax: Route traffic on the specified interface over an MPLS LSP. { mpls-relay remoteAddress | route interface interfaceType interfaceSpecifier } [ vc-id ] vcidValue [ group ID groupIdValue ] no { mpls-relay | route } [ group ID groupIdValue ] Mode(s): mpls-relay routes the traffic on this interface over an MPLS LSP remoteAddress destination ip address route interface routes the traffic on this interface over another one interfaceType interface type: serial or pos interfaceSpecifier particular interface; see Interface Types and Specifiers in About This Guide vcidValue virtual connection ID; can be any 32-bit value. The two ends across the MPLS core must match inside each VC type. groupIdValue group of virtual connections ID; can be any 32-bit value

Interface Configuration

mpls reoptimize
Description: Syntax: Performs an immediate check for better paths for all existing LSPs. There is no no version. mpls [ traffic-eng ] reoptimize Mode(s): traffic-eng optional keyword for compatibility with non-ERX implementations

User Exec, Privileged Exec

mpls reoptimize timers frequency


Description: Syntax: Specifies the frequency at which existing LSPS are checked for better paths. The no version restores the default value of 3600 seconds. mpls [ traffic-eng ] reoptimize timers frequency seconds no mpls [ traffic-eng ] reoptimize timers frequency Mode(s): traffic-eng optional keyword for compatibility with non-ERX implementations seconds number of seconds in the range 0604800; a value of zero means that no reoptimization is performed

Global Configuration

276

mpls rsvp message-bundling

mpls rsvp message-bundling


Description: Enables RSVP-TE to send bundle messages, each of which includes multiple standard RSVP-TE messages, to reduce the overall message processing overhead. The no version disables RSVP-TE message bundling. [ no ] mpls rsvp message-bundling RSVP Configuration

Syntax: Mode(s):

mpls rsvp refresh-reduction


Description: Enables RSVP-TE summary refresh and reliability features, including the message ID object, the message ack object, and summary refresh messages. The no version disables summary refresh and reliability. [ no ] mpls rsvp refresh-reduction RSVP Configuration

Syntax: Mode(s):

mpls spf-use-any-best-path
Description: Enables the SPF calculations to consider both the best IGP (IS-IS) paths and the MPLS tunnel to reach the tunnel endpoint. The no version restores the default value, which is to always use the MPLS tunnel to reach the tunnel endpointthe IGP best paths are not considered. [ no ] mpls spf-use-any-best-path Router Configuration

Syntax: Mode(s):

mpls topology-driven-lsp
Description: Enables topology-driven LSP creation on the virtual router or in an IP profile. The no version disables topology-driven LSPs on the virtual router or in IP profiles. mpls topology-driven-lsp [ ip-profile ipProfileName ] no mpls topology-driven-lsp [ ip-profile ] Mode(s): ipProfileName name of an IP profile used for creating IP interfaces over topology-driven LSPs

Syntax:

Global Configuration

mpls topology-driven-lsp ip-interfaces ERX Edge Routers

277

mpls topology-driven-lsp ip-interfaces


Description: Syntax: Enables the creation of IP interfaces over topology-driven LSPs. The no version prevents creation of IP interfaces over topology-driven LSPs. mpls topology-driven-lsp ip-interfaces [ egress | ingress ] [ { access-list | prefix-list } listName ] [ host-only ] no mpls topology-driven-lsp ip-interfaces [ egress | ingress ] [ host-only ] [ policy-list ] Mode(s): egress specifies that IP interfaces are created only over the LSP egress ingress specifies that IP interfaces are created only over the LSP ingress access-list specifies listName is an access list prefix-list specifies that listName is a prefix list listName name of access list or prefix list that specifies LSPs over which IP interfaces are created host-only specifies that IP interfaces are created only over LSPs to host addresses policy-list removes previously applied access lists or prefix lists

Global Configuration

mpls traffic-eng
Description: Syntax: Enables flooding of MPLS traffic-engineering link information into the specified IS-IS level. Flooding is disabled by default. The no version disables flooding. mpls traffic-eng { level-1 | level-2 } no mpls traffic-eng { level-1 | level-2 | router-id } Mode(s): level-1 floods IS-IS level 1 level-2 floods IS-IS level 2

Router Configuration

mpls traffic-eng administrative-weight


Description: Syntax: Specifies the administrative weight for the interface. The no version restores the default value, which matches the IGP-determined weight (cost). mpls traffic-eng administrative-weight weight no mpls traffic-eng administrative-weight Mode(s): weight administrative weight, a value in the range04294967295

Interface Configuration, Subinterface Configuration

278

mpls traffic-eng area

mpls traffic-eng area


Description: Syntax: Enables flooding of MPLS traffic-engineering link information into the specified OSPF area. Flooding is disabled by default. The no version disables flooding. [ no ] mpls traffic-eng area { areaId | areaIdInt } Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295

Router Configuration

mpls traffic-eng attribute-flags


Description: Specifies attributes for the interface for traffic engineering. The attributes are compared with tunnel affinity bits to determine links eligibility for the tunnel. The no version restores the default value, 0x0. mpls traffic-eng attribute-flags bitmask no mpls traffic-eng attribute-flags Mode(s): bitmask mask that sets the attributes, a value in the range 0x00xFFFFFFFF

Syntax:

Interface Configuration, Subinterface Configuration

mpls traffic-eng flood thresholds ERX Edge Routers

279

mpls traffic-eng flood thresholds


Description: Specifies thresholds for the flooding of the current reservable bandwidth throughout the network. You can configure a set of thresholds for increases or decreases in bandwidth. Flooding is triggered when the reservable bandwidth increases past any up threshold or decreases past any down threshold. The no version restores the following default values: Syntax: For increases in bandwidth (up changes) 15, 30, 45, 60, 75, 80, 85, 90, 95, 97, 98, 99, 100 For decreases in bandwidth (down changes) 100, 99, 98, 97, 96, 95, 90, 85, 80, 75, 60, 45, 30, 15

mpls traffic-eng flood thresholds { up | down } percentage [ percentage ]* no mpls traffic-eng flood thresholds { up | down } up specifies that an increase in bandwidth past the threshold triggers flooding down specifies that a decrease in bandwidth past the threshold triggers flooding percentage percentage of reservable bandwidth, a value from 1 to 100 percent for increasing bandwidth and from 0 to 99 percent for decreasing bandwidth * indicates that the percentage can be repeated multiple times in a list in the command line

Mode(s):

Interface Configuration, Subinterface Configuration

mpls traffic-eng link-management timers periodic-flooding


Description: Specifies the interval at which bandwidth values are flooded to the entire network. Configuring a value of 0 turns off flooding.The no version restores the default value, 180. mpls traffic-eng link-management timers periodic-flooding frequency no mpls traffic-eng link-management timers periodic-flooding Mode(s): frequency interval in seconds, a value from 0 to 3600

Syntax:

Global Configuration

280

mpls traffic-eng router-id

mpls traffic-eng router-id


Description: Specifies a stable interface to be used as a router ID for MPLS traffic engineering with IS-IS, typically a loopback interface. The interface acts as the destination node for tunnels originating at other nodes. The no version removes the interface as a router ID. [ no ] mpls traffic-eng router-id interfaceType interfaceSpecifier Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Syntax:

Router Configuration

mpls tunnels profile


Description: Creates or disables a tunnel profile for MPLS. The no mpls tunnels profile version deletes the tunnel profile. The no mpls tunnels profile disable version reenables tunnels previously disabled. [ no ] mpls tunnels profile profileName [ disable ] Mode(s): profileName name of a tunnel configuration profile used for MPLS tunnels disable disables all tunnels associated with the profile

Syntax:

Global Configuration

mru
Description: Sets the maximum allowable size in bytes of the maximum receive unit for CE1, cOCx/STMx, CT1, CT3, E3-FRAME, HSSI, POS, T3-FRAME, or X.21/V.35 interfaces. The no version restores the default value, which varies according to interface type. mru mruSize no mru mruSize maximum allowable size of the MRU CE1, CT1, cOCx/STMx, CT3, E3-FRAME, T3-FRAME, and X.21/V.35 interfaces default is 1600; range is 432765 HSSI interfaces default is 4770; range is 432768 POS interfaces default is 4470; range is 165529 Mode(s): Interface Configuration

Syntax:

mtrace ERX Edge Routers

281

mtrace
Description: Syntax: Discovers the routes that multicast packets follow when travelling to their destinations. There is no no version. mtrace sourceAddress [ destinationAddress [ groupAddress [ responseAddress ] ] ] [ maxHops ] [ detailed ] sourceAddress DNS name or unicast IP address of the multicast-capable device at the beginning of the path. destinationAddress DNS name or unicast address of the device at the end of the path. The default destination is the system from which you type the command. groupAddress DNS name or multicast address of the group for which you want to trace routes. The default address is 224.2.0.1 (the group used for MBONE Audio). responseAddress IP address that receives the results of the trace maxHops maximum number of hops allowed for the trace. The default is 64. detailed provides a detailed description of the trace, rather than a summary

Mode(s):

User Exec, Privileged Exec

mtu
Description: Sets the maximum allowable size in bytes of the maximum transmission unit for CE1, cOCx/STMx, CT1, CT3, E3-FRAME, Ethernet, HSSI, POS, T3-FRAME, or X.21/V.35 interfaces. The no version restores the default value, which varies according to interface type. This command is not available for the Ethernet interface on the SRP module. mtu mtuSize no mtu mtuSize maximum allowable size of the MTU CE1, CT1, cOCx/STMx, CT3, E3-FRAME, T3-FRAME, and X.21/V.35 interfaces default is 1600; range is 432765 HSSI interfaces default is 4770; range is 432768 Ethernet interfaces default is 1518; range is 649188, except on the FE-2 and FE-8 I.O modules, where the range is 649042; you cannot configure MTU on Ethernet interfaces on the SRP module POS interfaces default is 4470; range is 165529 Mode(s): Interface Configuration

Syntax:

282

multicast group port limit

multicast group port limit


Description: Limits the number of IGMP groups that a port can accept. The no version restores the default situation, in which there is no limit to the number of IGMP groups the port can accept. multicast group port slot/port limit groupLimit no multicast group port slot/port limit Mode(s): slot number of slot in which the line module resides port number of port groupLimit maximum number of IGMP groups that an interface can accept in the range 064,000

Syntax:

Global Configuration

neighbor ERX Edge Routers

283

neighbor
Description: For OSPF, configures OSPF neighbors on an NBMA network. For RIP, specifies a RIP neighbor to which the router sends unicast messages. The no version removes the neighbor (OSPF and RIP) or restores the default values (OSPF). For OSPF: neighbor ipAddress [ pollinterval seconds | priority number ] no neighbor ipAddress [ pollinterval | priority ] ipAddress IP address of the neighbors interface; this interface must itself be configured for the NBMA network type number router priority value of the neighbor in the range 14294967295; the default is 0 seconds interval in seconds at which the neighbor is polled; should be much larger than the hello interval (per RFC 1247); ranges from 0255, the default is 120 seconds

Syntax:

For RIP: [ no ] neighbor ipAddress Mode(s): ipAddress IP address of the neighbors interface; this interface must be defined as a passive interface with the passive-interface command

Router Configuration

neighbor activate
Description: Specifies a peer or peer group with which routes of the current address family are exchanged. A peer or peer group can be activated in more than one address family. By default, a peer or peer group is activated only for the IPv4 unicast address family. The address families that are actively exchanged over a BGP session are negotiated when the session is established. The no version indicates that routes of the current address family should not be exchanged with the peer or peer group. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } activate ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.

Syntax:

Mode(s):

Address Family Configuration, Router Configuration

284

neighbor advertisement-interval

neighbor advertisement-interval
Description: Syntax: Sets the minimum interval between the sending of BGP updates for a given prefix. The no version restores the default interval. neighbor { ipAddress | peerGroupName } advertisement-interval seconds no neighbor { ipAddress | peerGroupName } advertisement-interval [ seconds ] ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. seconds interval in seconds between update messages; range is from 0600; default is 30 seconds for external peers and 5 seconds for internal peers

Mode(s):

Address Family Configuration, Router Configuration

neighbor allowas-in
Description: Specifies the number of times that the AS path of a received route may contain the recipient BGP speakers AS number and still be accepted. The no version restores the default state, which is to reject as a loop any route whose path contains the speakers AS number. [ no ] neighbor { ipAddress | peerGroupName } allowas-in number ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. number number in the range 110

Syntax:

Mode(s):

Router Configuration

neighbor as-override ERX Edge Routers

285

neighbor as-override
Description: Prevents routing loops between routers within a VPN by substituting the current routers AS number in routing tables for that of the neighboring router. The no version halts this substitution. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } as-override ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.

Syntax:

Mode(s):

Router Configuration

286

neighbor capability

neighbor capability
Description: Controls advertisement of BGP capabilities to peers. Capability negotiation and advertisement of all capabilities, except the ORF capability, is enabled by default. The no version disables capability negotiation or prevents advertisement of the specified capability. The default version restores the default condition, advertising the capability. For all capabilities except ORF: [ no | default ] neighbor { ipAddress | peerGroupName } capability { negotiation | dynamic-capability-renegotiation | four-octet-as-numbers | route-refresh | route-refresh-cisco } For the ORF capability: neighbor { ipAddress | peerGroupName } capability orf { prefix-list | prefix-list-cisco } { send | receive | both } { no | default } neighbor { ipAddress | peerGroupName } orf { prefix-list | prefix-list-cisco } [ send | receive | both ] ipAddress neighbors IP address peerGroupName name of BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. negotiation determines whether the capabilities option is sent in the open message while establishing a session; if it is not sent, no capability negotiation is conducted with that peer dynamic-capability-renegotiation indicates support of renegotiation of capabilities (sending new capabilities or removing previously negotiated capabilities) without performing a hard clear of the BGP session four-octet-as-numbers indicates support of AS numbers and sub-AS numbers that are four octets in length, a range from 04294967295 route-refresh indicates support of route-refresh messages that request the peer to resend its routes to the system, enabling the BGP speaker to apply modified or new policies to the routes when it receives them again route-refresh-cisco indicates support of Cisco-proprietary (pre-standard) route-refresh messages for interoperability with older Cisco devices orf indicates support of cooperative route filtering to install a BGP speakers inbound route filter as an outbound route filter on the peer prefix-list installs the filterany inbound prefix list or distribute listas an outbound prefix list prefix-list-cisco installs the filterany inbound prefix list or distribute listas an outbound Cisco proprietary prefix list send sends inbound route filter to peer to install as outbound route filter

Syntax:

neighbor default-originate ERX Edge Routers

287

receive accepts inbound route filter from peer and installs it as outbound route filter; cannot be configured for a peer group or a peer that is a member of a peer groups both sends and accepts inbound route filters with peer for installation as outbound route filter

Mode(s):

Address Family Configuration, Router Configuration

neighbor default-originate
Description: Allows a BGP speaker (the local router) to send the default route 0.0.0.0/0 to a neighbor for use as a default route. The no version halts sending a default route to the neighbor. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } default-originate ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.

Syntax:

Mode(s):

Address Family Configuration, Router Configuration

neighbor description
Description: Syntax: Associates a textual description with a BGP neighbor. The no version removes the description. neighbor { ipAddress | peerGroupName } description text no neighbor { ipAddress | peerGroupName } description ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. text up to 80 characters of text that describes the neighbor

Mode(s):

Address Family Configuration, Router Configuration

288

neighbor distribute-list

neighbor distribute-list
Description: Distributes BGP neighbor information as specified in an access list. The no version removes an entry. Using distribute lists is one of several ways to filter BGP advertisements. You can also use route maps or use AS-path filters, as with the ip as-path access-list Global Configuration command and the neighbor filter-list command. neighbor { ipAddress | peerGroupName } distribute-list accessListName { in | out } no neighbor { ipAddress | peerGroupName } distribute-list [ accessListName ] { in | out } ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. accessListName string of up to 32 alphanumeric characters identifying an access list in applies list to incoming routes (inbound policy) out applies list to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy

Syntax:

Mode(s):

Address Family Configuration, Router Configuration

neighbor ebgp-multihop
Description: Allows BGP to accept route updates from external peers residing on networks that are not directly connected. The no version halts accepting such routers. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } ebgp-multihop [ ttl ] ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. ttl maximum number of hops to the peer; the value ranges from 1 to 255, with a default of 255

Syntax:

Mode(s):

Address Family Configuration, Router Configuration

neighbor filter-list ERX Edge Routers

289

neighbor filter-list
Description: Applies an AS path access list to advertisements inbound from or outbound to the specified neighbor, or assigns a weight to incoming routes that match the AS path access list. The no version stops the application of the list or assignment of the weight. To apply an access list: neighbor { ipAddress | peerGroupName } filter-list accessListName { in | out } no neighbor { ipAddress | peerGroupName } filter-list [ accessListName ] { in | out } To assign a weight: neighbor { ipAddress | peerGroupName } filter-list accessListName weight value no neighbor { ipAddress | peerGroupName } filter-list [ accessListName ] weight [ value ] ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. accessListName name of a single AS path access list; string of up to 32 characters in applies access list to incoming routes (inbound policy) out applies access list to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy value number in the range 065535; assigns relative importance to incoming routes matching AS paths

Syntax:

Mode(s):

Address Family Configuration, Router Configuration

290

neighbor local-as

neighbor local-as
Description: Assigns a local AS number for the specified BGP peer or peer group. The no version restores the default value set globally for the BGP instance with the router bgp command. neighbor { ipAddress | peerGroupName } local-as number no neighbor { ipAddress | peerGroupName } local-as [ number ] ipAddress neighbor IP address peerGroupName name of the BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. number number in the range 14294967295; the local AS to assign to the peer

Syntax:

Mode(s):

Address Family Configuration, Router Configuration

neighbor maximum-orf-entries
Description: Sets the maximum number of ORF entries of a particular type that are accepted from the specified neighbor. The no version restores the default value of no limits. neighbor ipAddress maximum-orf-entries maximum no neighbor ipAddress maximum-orf-entries [ maximum ] Mode(s): ipAddress neighbor IP address maximum maximum number of ORF entries in the range 04294967295; the default is no limit

Syntax:

Address Family Configuration, Router Configuration

neighbor maximum-prefix ERX Edge Routers

291

neighbor maximum-prefix
Description: Syntax: Sets the number of prefixes that can be received from a neighbor. The no version removes the maximum prefix limitation. neighbor { ipAddress | peerGroupName } maximum-prefix maximum [ threshold ] [ strict ] [ warning-only ] no neighbor { ipAddress | peerGroupName } maximum-prefix [ maximum ] [ threshold ] [ strict ] [ warning-only ] ipAddress neighbor IP address peerGroupName name of the BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. maximum maximum number of prefixes; the default is no limit threshold percent of maximum at which to log a warning in the range 0100; the default is 75 strict checks the maximum prefix limit against all received routes rather than the default behavior of checking it only against accepted routes warning-only causes BGP software to log a warning, rather than reset the connection if the maximum or threshold value is exceeded

Mode(s):

Address Family Configuration, Router Configuration

neighbor maximum-update-size
Description: Syntax: Sets the maximum size of update messages transmitted to a BGP peer. The no version removes the maximum update size limitation. neighbor { ipAddress | peerGroupName } maximum-update-size value no neighbor { ipAddress | peerGroupName } maximum-update-size [ value ] ipAddress neighbor IP address peerGroupName name of the BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. value maximum update size in octets in the range 2564096; he default is 1024

Mode(s):

Address Family Configuration, Router Configuration

292

neighbor next-hop-self

neighbor next-hop-self
Description: Forces the BGP speaker to report itself as the next hop for an advertised route it advertised to a neighbor. Typically you use this command to prevent third-party next hops from being used on NBMA media such as Frame Relay. The no version disables the feature. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } next-hop-self ipAddress IP address of BGP-speaking neighbor peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.

Syntax:

Mode(s):

Address Family Configuration, Router Configuration

neighbor password
Description: Syntax: Enables MD5 authentication on a TCP connection between two BGP peers. The no version disables MD5 authentication. neighbor { ipAddress | peerGroupName } password [ 0 | 8 ] string no neighbor { ipAddress | peerGroupName } password ipAddress IP address of the BGP neighbor that belongs to the peer group specified by the name peerGroupName name of the BGP peer group to which this neighbor belongs. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. 0 indicates the MD5 password is entered in unencrypted form (plaintext) 8 indicates the MD5 password is entered in encrypted form (ciphertext) string MD5 password, an alphanumeric text string of up to 80 characters

Mode(s):

Address Family Configuration, Router Configuration

neighbor peer-group ERX Edge Routers

293

neighbor peer-group
Description: When used from Router Configuration mode without specifying an IP address, creates a BGP peer group. The no version removes a peer group. When used from Router Configuration mode with an IP address or from Address Family Configuration mode, configures a BGP neighbor to be a member of a peer group. The no version removes a neighbor from a peer group. Creating a peer group: neighbor peerGroupName peer-group no neighbor peerGroupName [ peer-group ] peerGroupName name of BGP peer group

Syntax:

Assigning members to a peer group: neighbor ipAddress peer-group peerGroupName no neighbor ipAddress peer-group [ peerGroupName ] Mode(s): ipAddress IP address of the BGP neighbor that belongs to the peer group specified by the name peerGroupName name of the BGP peer group to which this neighbor belongs

Address Family Configuration, Router Configuration

neighbor prefix-list
Description: Syntax: Assigns an inbound or outbound prefix list. The no version removes the prefix list. neighbor { ipAddress | peerGroupName } prefix-list prefix-list-name { in | out } no neighbor { ipAddress | peerGroupName } prefix-list [ prefixListName ] { in | out } ipAddress IP address of BGP-speaking neighbor peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. prefixListName name of a BGP prefix list in assigns prefix list to incoming routes (inbound policy) out assigns prefix list to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy

Mode(s):

Address Family Configuration, Router Configuration

294

neighbor prefix-tree

neighbor prefix-tree
Description: Syntax: Assigns an inbound or outbound prefix tree. The no version removes the prefix tree. neighbor { ipAddress | peerGroupName } prefix-tree prefixTreeName { in | out } no neighbor { ipAddress | peerGroupName } prefix-tree [ prefixTreeName ] { in | out } ipAddress IP address of BGP-speaking neighbor peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. prefixTreeName name of a BGP prefix tree in assigns prefix tree to incoming routes (inbound policy) out assigns prefix tree to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy

Mode(s):

Address Family Configuration, Router Configuration

neighbor remote-as
Description: Adds an entry to the BGP neighbor table. The no version removes an entry from the table. Specifying a neighbor with an AS number that matches the AS number specified in the router bgp Global Configuration command identifies the neighbor as internal to the local AS. Otherwise, the neighbor is considered external. neighbor { ipAddress | peerGroupName } remote-as number no neighbor { ipAddress | peerGroupName } [ remote-as [ number ] ] ipAddress IP address peerGroupName the name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. number number in the range 14294967295; the AS to which the neighbor belongs

Syntax:

Mode(s):

Address Family Configuration, Router Configuration

neighbor remove-private-as ERX Edge Routers

295

neighbor remove-private-as
Description: Removes private AS numbers in updates sent to external peers. The no version halts removing private AS numbers. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } remove-private-as ipAddress neighbor's IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.

Syntax:

Mode(s):

Address Family Configuration, Router Configuration

neighbor rib-out disable


Description: Disables storage of routes to the Adj-RIBs-Out table (disables rib-out) for the neighbor or peer group. Storage is disabled by default. The no version enables the route storage. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } rib-out disable ipAddress neighbors IP address; you can independently enable or disable the Adj-RIBs-Out table for a peer, regardless of whether it is a member of a peer group peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, a single Adj-RIBs-Out table is established for the peer group; BGP does not enable individual Adj-RIBs-Out tables for each peer group member.

Syntax:

Note: If you enable or disable rib-out for a peer or peer group and this action changes the current configuration, the peer session or all peer group sessions are automatically bounced. Mode(s): Address Family Configuration, Router Configuration

296

neighbor route-map

neighbor route-map
Description: Applies a route map to incoming or outgoing routes. If an outbound route map is specified, BGP advertises only routes that match at least one section of the route map. The no version removes a route map. neighbor { ipAddress | peerGroupName } route-map mapTag { in | out } no neighbor { ipAddress | peerGroupName } route-map [ mapTag ] { in | out } ipAddress neighbors IP address peerGroupName name of BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. mapTag name of the route map; a string of up to 32 alphanumeric characters in apply to incoming routes out apply to outgoing routes; you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy

Syntax:

Mode(s):

Address Family Configuration, Router Configuration

neighbor route-reflector-client
Description: Configures a system as a BGP route reflector and configures the specified neighbor as its client. The no version indicates that the neighbor is not a client. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } route-reflector-client ipAddress IP address of BGP neighbor being identified as a client peerGroupName name of BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.

Syntax:

Mode(s):

Address Family Configuration, Router Configuration

neighbor send-community ERX Edge Routers

297

neighbor send-community
Description: Enables a BGP speaker to send a community attribute to the peer. The no version causes the speaker to send only standard communities to the peer. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } send-community [ standard | extended | both ] ipAddress neighbor's IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group. standard sends only standard communities extended sends only extended communities both sends both standard and extended communities

Syntax:

Mode(s):

Address Family Configuration, Router Configuration

neighbor shutdown
Description: Shuts down the specified neighbor or peer group without removing the neighbor or peer group configuration. The no version reenables a neighbor or peer group that was previously shut down. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } shutdown ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.

Syntax:

Mode(s):

Address Family Configuration, Router Configuration

298

neighbor soft-reconfiguration inbound

neighbor soft-reconfiguration inbound


Description: Initiates storage of unmodified copies of routes from the specified neighbor or all members of the specified peer group. The no version halts this storage. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } soft-reconfiguration inbound ipAddress neighbor's IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.

Syntax:

Mode(s):

Address Family Configuration, Router Configuration

neighbor timers
Description: Sets keepalive and hold-time timers for the specified neighbor or peer group. Overrides values set for the router via the timers bgp command. The no version restores the default values. neighbor { ipAddress | peerGroupName } timers keepaliveTime holdTime no neighbor { ipAddress | peerGroupName } timers [ keepaliveTime ] [ holdTime ] ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. keepaliveTime interval in seconds between keepalive messages; range is from 065535 seconds, default is 30 seconds; a value of zero prevents BGP from sending keepalive messages holdTime period in seconds that BGP waits for keepalive messages before declaring the neighbor to be unavailable; range is from 065535 seconds; default is 90 seconds; a value of zero informs BGP not to expect any keepalive messages

Syntax:

Mode(s):

Address Family Configuration, Router Configuration

neighbor unsuppress-map ERX Edge Routers

299

neighbor unsuppress-map
Description: Syntax: Restores the advertisement of routes suppressed by policy-based route flap dampening. The no version restores the default values. neighbor { ipAddress | peerGroupName } unsuppress-map mapTag no neighbor { ipAddress | peerGroupName } unsuppress-map [ mapTag ] ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group. mapTag name of the route map; a string of up to 32 alphanumeric characters

Mode(s):

Address Family Configuration, Router Configuration

neighbor update-source
Description: Allows a BGP session to use the IP address of any operational interface as the source address of TCP connections used by BGP. The no version restores the interface assignment to the closest interface. neighbor { ipAddress | peerGroupName } update-source { interfaceType interfaceSpecifier | updateSourceAddress } no neighbor { ipAddress | peerGroupName } update-source [ interfaceType interfaceSpecifier | updateSourceAddress ] ipAddress IP address of BGP-speaking neighbor peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide updateSourceAddress the source IP address

Syntax:

Mode(s):

Address Family Configuration, Router Configuration

300

neighbor weight

neighbor weight
Description: Assigns a weight to a neighbor connection. The no version removes a weight assignment. All routes learned from this neighbor will have the assigned weight initially. The route with the highest weight will be chosen as the preferred route when multiple routes are available to a particular network. The weights assigned with the match as-path and set weight route-map commands override the weights assigned using the neighbor weight and neighbor filter-list commands. neighbor { ipAddress | peerGroupName } weight value no neighbor { ipAddress | peerGroupName } weight [ value ] ipAddress neighbor's IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. value number in the range 065535; the weight to assign

Syntax:

Mode(s):

Address Family Configuration, Router Configuration

net
Description: Configures an IS-IS network entity title for the specified routing process. The no version removes a specific NET. You must specify a NET. You can add multiple manual area IDs by adding multiple NETs with the same system ID. The last NET cannot be removed. [ no ] net networkEntityTitle networkEntityTitle NET that specifies the area ID and the system ID for an IS-IS routing process; can be either an address or a name; in the form of: areaID.systemID.nSelector For example: 47.0010.0000.0000.0001.0001.1111.1111.1111.00 area ID system ID N selector

Syntax:

areaID all bytes in front of the system ID; the number of bytes can vary
from 113 bytes

systemID always 6 bytes and cannot vary nSelector the last byte; always 0
Mode(s): Router Configuration

netbios-name-server ERX Edge Routers

301

netbios-name-server
Description: Syntax: Assigns a Net-Bios server to subscribers of an address pool. The no version removes the association between the address pool and the Net-Bios server. netbios-name-server ipAddressPrimary [ ipAddressSecondary ] no netbios-name-server Mode(s): ipAddressPrimary IP address of preferred Netbios server ipAddressSecondary IP address of secondary DNS server

Pool Configuration

netbios-node-type
Description: Syntax: Specifies a Net-Bios node type. The no version restores the default situation, in which the node type is unspecified. netbios-node-type nodeType no netbios-node-type nodeType one of the following types of Net-Bios servers:

b-node Net-Bios Broadcast node p-node Net-Bios Peer-to-Peer node m-node Net-Bios mixed node h-node Net-Bios hybrid node
Mode(s): Pool Configuration

302

network

network
Description: For BGP, configures a BGP speaker with a prefix originating within its AS that it advertises to its peers if a non-BGP route to the prefix exists in the IP forwarding table. The no version removes the prefix. For RIP, enables RIP on a specific network (not on a range of networks). If you do not associate a network with RIP, the system cannot advertise the network in any RIP update. The no version disables RIP on a specific network. If you do not specify a network mask, the system applies the natural mask. Use the ip rip commands to configure RIP attributes on the network. For DHCP local server, specifies the IP addresses that the DHCP local server can provide from an address pool. The no version removes the network address and mask. For BGP: [ no ] network networkNumber [ mask networkMask ] [ route-map mapTag ] [ weight weight ] [ backdoor ] networkNumber prefix that BGP will advertise networkMask subnet mask mapTag name of the route map; a string of up to 32 alphanumeric characters weight number in the range 065535; default is 32768; assigns an absolute weight to the network route that overrides a weight assigned by the redistribute command backdoor lowers the preference of an EBGP route to the specified prefix by setting the administrative distance to the value of an internal BGP route. Use this option to favor an IGP backdoor route over an EBGP route to a specific network. BGP does not advertise the prefix specified with this option.

Syntax:

For RIP: [ no ] network networkAddress [ networkMask ] networkAddress IP address of the network networkMask subnet mask; the command accepts either the standard mask (network 10.2.1.0 255.255.255.0) or the inverse mask (network 10.2.1.0 0.0.0.255)

network area ERX Edge Routers

303

For DHCP local server: network networkAddress { networkMask | prefix } no network [ force ] Mode(s): ipAddress IP address of the network networkMask subnet mask for the network prefix network prefix force deletes address pool even if the pool is in use

Address Family Configuration or Router Configuration for BGP; Router Configuration for RIP; Pool Configuration for DHCP local server

network area
Description: Syntax: Defines the interfaces on which OSPF runs and the area ID for those interfaces. The no version deletes OSPF interfaces, ranges, and areas. [ no ] network ipNet maskWildCard area { areaId | areaIdInt } ipNet network number maskWildCard wild-card mask for the network number areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value, in the range 04294967295

Note: Before you issue this command, you must first configure one or more interface with an IP address that is within the range specified by ipNet. Mode(s): Router Configuration

next-address
Description: Syntax: Configures an IPv4 hop at the end of the MPLS explicit path. There is no no version. next-address ipAddress [ mask ipMask ] [ loose ] ipAddress address of the node ipMask [not currently used] mask for the next adjacent address loose indicates the node is not necessarily directly connected (adjacent) to the previous node in the path. If loose is not configured, the configuration defaults to strict. Strict indicates that the node is directly connected to the previous node.

Mode(s):

Explicit Path Configuration

304

next-hop

next-hop
Description: Defines the IP address of the next hop for a policy list. The classifier-group keyword and claclName argument specify the classifier control list. If you do not specify a classifier group, the system selects all packets from the interface associated with this policy list for this rule. Use the suspend keyword to suspend a filter rule temporarily. The no version removes a next hop rule from a policy list. Note: The SRP module does not support the next-hop command. Syntax: [ no ] [ suspend ] next-hop address [ classifier-group claclName ] [ precedence precValue ] Mode(s): suspend suspend a policy rule address IP address for the next hop claclName classifier control list used to classify packets for this next-hop policy precValue precedence of this rule in relation to other rules within this set

Policy Configuration

next-interface
Description: Defines an output interface for a policy list. Use the classifier-group option to specify the classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with this policy list for this rule. Specify a next-hop command when the interfaceType is a broadcast medium. The no version removes a next-interface rule from a policy list. The suspend version suspends a filter rule temporarily. Note: The SRP module does not support the next-interface command. Syntax: [ no ] [ suspend ] next-interface interfaceType interfaceNumber [ next-hop nextHop ] [ classifier-group claclName ] [ precedence precValue ] Mode(s): suspend suspend a policy rule interfaceType type of interface to route packets to interfaceNumber number of the interface to route packets to nextHop next-hop IP address claclName classifier control list used to classify packets for this next-interface policy precValue precedence of this rule in relation to other rules within this set

Policy Configuration

no area ERX Edge Routers

305

no area
Description: Syntax: Removes the specified OSPF area if there are no OSPF interfaces configured in the area. no area { areaId | areaIdInt } Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value 04294967295

Router Configuration

no ip interface
Description: Syntax: Mode(s): Removes the IP configuration from the interface or subinterface and disables IP processing on the interface. no ip interface Interface Configuration, Subinterface Configuration

no log filters
Description: Syntax: Mode(s): Turns off all log filters. To turn off a specific filter, use the no version of the log severity command that you used to add the filter. no log filters Global Configuration

no radius client
Description: Syntax: Mode(s): Use to unconfigure all RADIUS servers for the virtual router context and to delete the RADIUS client for the virtual router context. no radius client Global Configuration

306

node

node
Description: Syntax: Specifies that a scheduler node be configured for each interface of the given interface type. The no version removes this rule from the QoS profile. [ no ] interfaceType node [ scheduler-profile schedulerProfileName ] [ group groupName ] interfaceType one of the following interface types for which scheduler nodes should be configured: atm-vc, cbf, fr-vc, ip, ip-tunnel, l2tp-tunnel, vlan schedulerProfileName name of the scheduler profile groupName name of the traffic class group

Mode(s):

QoS Profile Configuration

nrzi-encoding
Description: Syntax: Mode(s): Use to enable NRZI encoding. [ no ] nrzi-encoding Interface Configuration

ntp access-group
Description: Specifies the type of broadcasts that the system will accept and respond to, and specifies the servers from which the system will accept broadcasts. The no version enables the system to receive all NTP broadcasts on interfaces configured to receive broadcasts. ntp access-group { peer | serve-only | serve | query-only } accessListName no ntp access-group { peer | serve-only | serve | query-only } Note: The system can accept, but does not use, NTP control queries. peer enables the system to receive time requests, receive NTP control queries, and synchronize itself to the servers specified on the access-list serve-only enables the system to receive time requests and NTP control queries from servers specified on the access-list, but not to synchronize itself to the specified servers serve enables the system only to receive time requests from the servers specified on the access-list query-only enables the system only to receive NTP control queries from the servers specified on the access-list accessListName name of the access list

Syntax:

Mode(s):

Global Configuration

ntp broadcast-client ERX Edge Routers

307

ntp broadcast-client
Description: Syntax: Mode(s): Enables an interface to receive NTP broadcasts.The no version prevents an interface from receiving NTP broadcasts. [ no ] ntp broadcast-client Interface Configuration

ntp broadcast-delay
Description: Sets the estimated round-trip delay between the broadcast NTP server and the system. The no version restores the round-trip delay to the default value, 3000 microseconds. ntp broadcast-delay delayTime no ntp broadcast-delay Mode(s): delayTime a value in the range 0999999 microseconds

Syntax:

Global Configuration

ntp disable
Description: Syntax: Mode(s): Disables NTP on an interface. The no version enables NTP on an interface. The default setting is enable. [ no ] ntp disable Interface Configuration

ntp enable
Description: Enables NTP services on the system and attaches the NTP client to the current virtual router. The no version disables reception of NTP packets on the system and removes the association between NTP and the virtual router. The default setting is disable. [ no ] ntp enable Global Configuration

Syntax: Mode(s):

308

ntp master

ntp master
Description: Specifies the stratum number of a virtual router you configured as an NTP server. By default, if the system is configured as an NTP server, the stratum number is set to the stratum number of the master plus one. The no version restores the default stratum number. [ no ] ntp master [ stratumNumber ] Note: Although you can specify a stratum number of 1, the system does not support stratum 1 service. The system can synchronize only with an NTP server, and not directly with an atomic clock or radio clock. stratumNumber number in the range 115 that indicates how many hops the NTP server is from an accurate time source, such as a radio clock or atomic clock. Stratum n servers are n hops from an accurate time source. The default is 8.

Syntax:

Mode(s):

Global Configuration

ntp server
Description: Specifies an NTP server for time synchronization. The source option for this command overrides the ntp source command.The no version terminates NTP communications between this server and the interface. ntp server ipAddress [ version number ] [ prefer ] [ source interfaceType interfaceSpecifier ] no ntp server ipAddress Mode(s): ipAddress IP address of the NTP server number value from 1 to 4; indicates the version of the NTP software on the server prefer indicates that this server is the first choice for time synchronization source directs responses from the NTP server to a specific interface on the system; overrides the ntp source command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Syntax:

Global Configuration

ntp server enable ERX Edge Routers

309

ntp server enable


Description: Syntax: Mode(s): Enables a virtual router to act as an NTP server. The no version prevents a virtual router from acting as an NTP server. [ no ] ntp server enable Global Configuration

ntp source
Description: Directs responses from all NTP servers to a specific interface. Using the source option with the ntp server command overrides the ntp source command. The no version restores the default situation in which servers reply to the interface from which the NTP request was sent. ntp source interfaceType interfaceSpecifier no ntp source Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Syntax:

Global Configuration

310

operations-per-hop

operations-per-hop
Description: Configures the number of operations sent to a designated hop before the TTL value is increased. This option applies only to the pathEcho type. The no version restores the default value, 3. operations-per-hop operationsHopValue no operations-per-hop Mode(s): operationsHopValue number of operations per hop; the default is 3

Syntax:

RTR Configuration

ospf auto-cost reference-bandwidth


Description: Syntax: Controls how OSPF calculates default metrics for the interface. The no version assigns cost based only on the interface type. [ no ] ospf auto-cost reference-bandwidth refBw Mode(s): refBw bandwidth in megabits per second in the range 14294967; default is 100

Router Configuration

ospf enable
Description: Syntax: Mode(s): Enables OSPF on the router. The no version disables OSPF on the router. [ no ] ospf enable Router Configuration

ospf log-adjacency-changes ERX Edge Routers

311

ospf log-adjacency-changes
Description: Syntax: Configures the router to send a syslog message when the state of an OSPF neighbor changes. The no version turns off this feature. [ no ] ospf log-adjacency-changes [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] severity minimum severity of the log messages displayed for the selected category; described either by a descriptive termseverityValueor by a corresponding numberseverityNumberin the range 07; the lower the number, the higher the priority:

emergency or 0 system unusable alert or 1 immediate action needed critical or 2 critical condition exists error or 3 error condition warning or 4 warning condition notice or 5 normal but significant condition info or 6 informational message debug or 7 debug message
verbosityLevel specifies the verbosity of the log categorys messages; can be any of the following:

low terse medium moderate detail high verbose


Mode(s): Router Configuration

ospf shutdown
Description: Syntax: Mode(s): Administratively disables OSPF on the router. The no version reenables OSPF on the router. [ no ] ospf shutdown Router Configuration

overload shutdown
Description: Syntax: Mode(s): Causes BGP to shut down when it runs out of resources. The no version restores the default behavior, which is to continue running. [ no ] overload shutdown Router Configuration

312

override-user

override-user
Description: Syntax: Specifies a single username and single password for all users from a domain. The no version removes the username and reverts to the original username. override-user [ name newName ] password newPassword no override-user Mode(s): newName identifier that replaces the username newPassword password that replaces the users password

Domain Map Configuration

owner
Description: Syntax: Configures the owner of the RTR operation. The no version restores the default value. owner ownerValue no owner Mode(s): ownerValue specifies the owners identifier: 0255 ASCII characters; by default, no owner is configured

RTR Configuration

padn
Description: Syntax: Configures PADN parameters for a domain name. The no version deletes the PADN parameters from the domain name. padn ipAddress ipmask distance no padn ipAddress ipmask Mode(s): ipAddress destination IP address ipmask IP mask for the destination distance administrative distance metric for this route in the range 0255

Domain Map Configuration

passive-interface ERX Edge Routers

313

passive-interface
Description: Modifies the transmission of routing updates for IS-IS, OSPF, and RIP. For IS-IS, configures an IS-IS interface to only advertise its IP address in the link state PDUs; the interface does not send or receive IS-IS packets. Issue the complementary interface command to enable the interface to send and receive IS-IS packets. The no version disables the advertising of the IP address. For OSPF, halts the transmission of routing updates on an OSPF interface. OSPF neither sends nor receives routing information through the specified interface, which appears as a stub network in the OSPF network. The no version reenables the transmission of routing updates. For RIP, halts the transmission of multicast RIP messages. RIP messages are unicast to the interface (if it is the best path to a configured neighbor). The no version reenables the transmission of multicast messages on the interface. [ no ] passive-interface interfaceType interfaceSpecifier Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Syntax:

Router Configuration

314

password

password
Description: Configures a password to be used at login on the console, a line or a range of lines; or specifies the password for an L2TP of L2F tunnel. The no version removes the password. Login Password: password [ encryptionType ] passwordValue no password encryptionType one of the following types:

Syntax:

0 unencrypted (the default) 5 secret 7 hidden


passwordValue character string that specifies the line password. The first character cannot be a number. The string can contain any alphanumeric characters, including spaces, up to 50 characters. The password checking is case sensitive. For example, the password Secret is different from the password secret.

L2TP or L2F Tunnel Password: password tunnelPassword no password Mode(s): tunnelPassword up to 32-character password

Line Configuration for a login password; Domain Map Tunnel Configuration for a tunnel password

path ERX Edge Routers

315

path
Description: Syntax: Configures paths over channelized SONET and SDH interfaces. The no version deletes a path. path pathChannel [ pathSpeed [ pathHierarchy ] ] no path pathChannel pathChannel number in the range 12147483648 that identifies the STS-1 or STM-0 line pathSpeed speed of the path

oc1, oc3, or oc12 for SONET only oc1 or oc3 is available for
cOC3/STM1 interfaces

stm0, stm1, or stm4 for SDH only stm0 or stm1 is available for
cOC3/STM1 interfaces Note: Although the path speed appears to be optional in the software, you must specify a value. pathHierarchy identifier that defines the structure of the path

If you specify a path speed that matches the speed of the module (for
example, a path speed of oc3 for a cOC3/STM1 interface), do not specify an identifier.

If you specify a speed of oc1 or stm0 for a cOC3/STM1 interface, the


identifier is a number in the range 13 that represents either the STS-1 within the STS-3 or the STM-0 within the STM-1.

If you specify a speed of oc3 or stm1 for a cOC12/STM4 interface, the


identifier is a number in the range 14 that represents either the STS-3 within the STS-12 or the STM-1 within the STM-4.

If you specify a speed of oc1 or stm0 for a cOC12/STM4 interface, the


identifier is of the form X/Y. X is a number in the range 14 that represents either the STS-3 within the STS-12 or the STM-1 within the STM-4; Y is a number in the range 13 that represents either the STS-1 within the STS-3 or the STM-0 within the STM-1. Mode(s): Controller Configuration

316

path ds1|e1

path ds1|e1
Description: Syntax: Creates and configures SONET and SDH tributaries. The no version deletes a tributary. path pathChannel { ds1 | e1 } tributaryIdentifier [ tributary-type ] [ no ] pathChannel { ds1 | e1 } path tributaryIdentifier pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier specifier for the tributary in the format pathChannel { ds1 | e1 } pathPayload/tributaryGroup/tributaryNumber

pathPayload payload number for the path; value is 1 for SONET and in
the range 13 for SDH

tributaryGroup number in the range 17 that identifies the group within


the path

tributaryNumber number of the tributary within the tributary group; the


value is in the range 14 if the tributary type is vt15 or tu11 and in the range 13 if the tributary type is tu12 tributaryType virtual tributary type

vt15 default for SONET DS1 tributaries tu11 default for SDH DS1 tributaries tu12 default for SDH E1 tributaries
Mode(s): Controller Configuration

path ds1|e1 bert ERX Edge Routers

317

path ds1|e1 bert


Description: Enables bit error rate tests using the specified pattern at the T1/E1 over SONET/SDH VT layer on channelized SONET and SDH interfaces. The no version stops the test that is running. path pathChannel { ds1 | e1 } tributaryIdentifier bert pattern pattern interval time [ unframed ] no path pathChannel { ds1 | e1 } tributaryIdentifier bert

Syntax:

tributaryIdentifier identifier for the tributary. See description for the


path ds1|e1 command. pattern one of the following test patterns:

2^11 pseudorandom test pattern, 2048 bits in length 2^15 pseudorandom 0.151 test pattern, 32768 bits in length 2^20-O153 pseudorandom 0.153 test pattern, 1048575 bits in length
time interval between test patterns, ranging from 114400 minutes unframed test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern occupies only T1/E1 payload bits.

Mode(s):

Controller Configuration

path ds1|e1 channel-group shutdown


Description: Disables a DS1 or an E1 channel group for channelized SONET and SDH interfaces. DS1 and E1 channel groups are enabled by default. The no version restarts a disabled interface. [ no ] path pathChannel { ds1 | e1 } tributaryIdentifier channel-group channelGroupNumber shutdown Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command.

Syntax:

Controller Configuration

318

path ds1|e1 channel-group snmp trap link-status

path ds1|e1 channel-group snmp trap link-status


Description: Enables SNMP link status processing for a DS1 or an E1 channel group of channelized SONET and SDH interfaces. The no version disables SNMP link status processing for a DS1 or E1 channel group. [ no ] path pathChannel { ds1 | e1 } tributaryIdentifier channel-group channelGroupNumber snmp trap link-status Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command. channelGroupNumber either a fractional T1 interface in the range 124 or a fractional E1 interface in the range 131

Syntax:

Controller Configuration

path ds1|e1 channel-group timeslots


Description: Configures T1 or E1 line parameters for channelized SONET and SDH interfaces. To configure a line, you specify a DS1 or an E1 channel group number and assign a range of timeslots. To configure a whole T1 or E1 line, assign all the timeslots to the channel group. You can specify a line speed that applies to all DS0 timeslots assigned to a channel group. The no version removes the timeslots from the channel group. path pathChannel { ds1 | e1 } tributaryIdentifier channel-group channelGroupNumber timeslots range [ speed { 56 | 64 } ] no pathChannel { ds1 | e1 } tributaryIdentifier channel-group channelGroupNumber pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command. channelGroupNumber either a fractional T1 interface in the range 124 or a fractional E1 interface in the range 131 range specifies the timeslot assigned to the T1 or E1 channel in the range 131. A dash represents a range of timeslots, and a comma separates timeslots. For example, 1-10, 15-18 assigns timeslots 110 and 15 18. speed specifies the data rate for the T1 or E1 channel. Values are 56 Kbps or 64 Kbps. The default is 64 Kbps.

Syntax:

Mode(s):

Controller Configuration

path ds1|e1 clock source ERX Edge Routers

319

path ds1|e1 clock source


Description: Syntax: Configures the transmit clock source for channelized SONET and SDH interfaces. The no version restores the default value. path pathChannel { ds1 | e1 } tributaryIdentifier clock source { line | internal { module | chassis } } no path pathChannel { ds1 | e1 } tributaryIdentifier clock source pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command. line interface transmits data from a clock recovered from the lines receive data stream internal interface transmits data using its internal clock. You must specify one of the following for internal clocking:

module internal clock is from the line module itself chassis internal clock is from the configured system clock
Mode(s): Controller Configuration

path ds1|e1 framing


Description: Syntax: Configures the framing format for T1 or E1 over channelized SONET and SDH interfaces. The no version restores the default value. path pathChannel { ds1 | e1 } tributaryIdentifier framing framingType no path pathChannel { ds1 | e1 } tributaryIdentifier framing pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command. framingType one of the following types:

crc4 cyclic redundancy check (default for E1); not available for T1 no-crc4 no cyclic redundancy check; not available for T1 esf extended superframe (T1 default); not available for E1 sf superframe; not available for E1
Mode(s): Controller Configuration

320

path ds1|e1 loopback

path ds1|e1 loopback


Description: Configures a loopback at the T1/E1 over SONET/SDH VT layer on channelized SONET and SDH interfaces. The no version turns off the loopback. path pathChannel ds1|e1 tributaryIdentifier loopback { local | network { payload | line } | remote { line fdl { ansi | bellcore } | payload [fdl ] [ ansi ] } } no path pathChannel ds1 tributaryIdentifier loopback [ remote ] pathChannel a number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command. local loops the router output data back toward the router at the T1/E1 framer and sends an alarm indication signal out toward the network network { line | payload } specify the line keyword to loop the data back toward the network before the T1/E1 framer and automatically set a local loopback at the HDLC controllers. Specify the payload keyword to loop the payload data back toward the network at the T1/E1 framer and automatically set a local loopback at the HDLC controllers. remote line fdl ansi (T1 line only) sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 channel, per the ANSI T1.403 specification. remote line fdl bellcore (T1 line only) sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 channel, per the Bellcore TR-TSY-000312 specification. remote payload [ fdl ] [ ansi ] (T1 line only) sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 channel. You can optionally specify fdl and ansi, but it is not necessary.

Syntax:

Note: You cannot send an inband pattern to the remote end requesting that it enter into a network line loopback. Mode(s): Controller Configuration

path ds1|e1 shutdown ERX Edge Routers

321

path ds1|e1 shutdown


Description: Disables DS1 or E1 over channelized SONET and SDH interfaces. DS1 and E1 interfaces are enabled by default. The no version restarts a disabled interface. [ no ] path pathChannel { ds1 | e1 } tributaryIdentifier shutdown Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command.

Syntax:

Controller Configuration

path ds1|e1 snmp trap link-status


Description: Syntax: Enables SNMP link status processing for DS1 or E1 over channelized SONET and SDH interfaces. The no version disables SNMP link status processing. [ no ] path pathChannel { ds1 | e1 } tributaryIdentifier snmp trap link-status Mode(s): pathChannel a number in the range 12147483648 that identifies the path tributaryIdentifier the identifier for the tributary. See description for the path ds1|e1 command.

Controller Configuration

path ds1 fdl


Description: Syntax: Specifies the facility data link standard for a T1 over channelized SONET or SDH interface. The no version restores the default, none. path pathChannel ds1 tributaryIdentifier fdl { ansi | att | all | none } no path pathChannel ds1 tributaryIdentifier fdl [ ansi | att | all ] Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command. ansi specifies ANSI T1.403 Standard for extended superframe FDL exchange support att specifies AT&T Technical Reference 54016 for extended superframe FDL exchange support all specifies both the AT&T and ANSI mode for extended superframe FDL exchange support none removes the current FDL mode settings

Controller Configuration

322

path ds1 fdl carrier

path ds1 fdl carrier


Description: Specifies that a T1 over channelized SONET or SDH interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment. [ no ] path pathChannel ds1 tributaryIdentifier fdl carrier Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command.

Syntax:

Controller Configuration

path ds1 fdl string


Description: Defines an FDL message for a T1 over channelized SONET or SDH interface as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages. path pathChannel ds1 tributaryIdentifier fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue | generator generatorValue } no path pathChannel ds1 tributaryIdentifier fdl string { eic | fic | lic | unit | pfi | port | generator } Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command. eicValue equipment identification code; 110 characters; default is the null value licValue line identification code; 110 characters; default is the null value ficValue frame identification code; 110 characters; default is the null value unitValue unit identification code; 16 characters; default is the null value. pfiValue facility identification code to send in the FDL path message; 138 characters; default is the null value portValue equipment port number to send in the FDL idle signal message; 138 characters; default is the null value generatorValue generator number to send in the FDL test signal message; 138 characters; default is the null value

Syntax:

Controller Configuration

path ds1 fdl transmit ERX Edge Routers

323

path ds1 fdl transmit


Description: Configures the system to send the specified FDL message on a T1 over channelized SONET or SDH interface. The no version stops the system from sending the specified FDL message or all FDL messages. [ no ] path pathChannel ds1 tributaryIdentifier fdl transmit { path-id | idle-sIgnal | test-signal } no path pathChannel ds1 tributaryIdentifier fdl transmit Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command. path-id transmits a path identification message every second idle-sIgnal transmits an idle signal every 10 seconds test-signal transmits a test signal every 10 seconds

Syntax:

Controller Configuration

path ds1 remote-loopback


Description: Enables acceptance of remote loopback requests at the T1/E1 over SONET/SDH VT layer on channelized SONET and SDH interfaces. The no version restores the factory default value, which is to reject remote loopback requests. [ no ] path pathChannel ds1 tributaryIdentifier remote-loopback Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command.

Syntax:

Controller Configuration

path ds3
Description: Creates and configures a T3 over channelized SONET interface. If you do not specify whether or not the path should be channelized, the system creates a channelized path by default. The no version deletes a path. path pathChannel ds3 ds3Channel { [ channelized ] | unchannelized } no path pathChannel ds3 ds3Channel Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path

Syntax:

Controller Configuration

324

path ds3 clock source

path ds3 clock source


Description: Syntax: Configures the transmit clock source for a a T3 over channelized SONET interface. The no version restores the default value. path pathChannel ds3 ds3Channel clock source { line | internal { module | chassis } } no path pathChannel ds3 ds3Channel clock source pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path line interface transmits data from a clock recovered from the lines receive data stream internal interface transmits data using its internal clock. You must specify one of the following for internal clocking:

module internal clock is from the line module itself chassis internal clock is from the configured system clock
Mode(s): Controller Configuration

path ds3 framing


Description: Syntax: Configures the framing format for a T3 over channelized SONET interface. The no version restores the default value. path pathChannel ds3 ds3Channel framing framingType no path pathChannel ds3 ds3Channel framing pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path framingType choose one of the following:

c-bit default; specifies c-bit parity framing m23 specifies M23 multiplexer framing
Mode(s): Controller Configuration

path ds3 loopback ERX Edge Routers

325

path ds3 loopback


Description: Syntax: Configures a loopback at the DS3 layer for a T3 over channelized SONET interface. The no version turns off the loopback. path pathChannel ds3 ds3Channel loopback { local | network { payload | line } } no path pathChannel ds3 ds3Channel loopback Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path local loops the data back toward the router and sends an alarm indication signal out toward the network network payload loops the data toward the network after the framer has processed the data network line loops the data toward the network before the data reaches the framer

Controller Configuration

path ds3 mdl carrier


Description: Specifies that a T3 over channelized SONET interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment. [ no ] path pathChannel ds3 ds3Channel mdl carrier Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path

Syntax:

Controller Configuration

326

path ds3 mdl string

path ds3 mdl string


Description: Allows you to configure an MDL message on a T3 over channelized SONET interface as defined in the ANSI T1.107a-1990 specification. The no version restores the default value to the specified MDL message or to all MDL messages. path pathChannel ds3 ds3Channel mdl string { eic eicValue | fic ficValue | generator genValue | lic licValue | pfi pfiCode | port portValue | unit unitValue } no path pathChannel ds3 ds3Channel mdl string { eic | fic | generator | lic | pfi | port | unit } Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path eicValue equipment identification code; 110 characters; default is the null value ficValue frame identification code; 110 characters; default is the null value genValue generator number to send in the MDL test signal message; 138 characters; default is the null value licValue line identification code; 111 characters; default is the null value pfiCode facility identification code to send in the MDL path message; 138 characters; default is the null value portValue equipment port number to send in the MDL idle signal message; 138 characters; default is the null value unitValue unit identification code; 16 characters; default is the null value

Syntax:

Controller Configuration

path ds3 mdl transmit ERX Edge Routers

327

path ds3 mdl transmit


Description: Enables you to transmit an MDL message on a T3 over channelized SONET interface. The no version disables transmission of the specified message or all messages. [ no ] path pathChannel ds3 ds3Channel mdl transmit { path-id | idle-signal | test signal } no path ds3 mdl transmit Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path path-id MDL path message; factory default is disabled idle-signal MDL idle signal message; factory default is disabled test-signal MDL test signal message; factory default is disabled

Syntax:

Controller Configuration

path ds3 shutdown


Description: Syntax: Disables a T3 over channelized SONET interface. DS3 interfaces are enabled by default. The no version restarts a disabled interface. [ no ] path pathChannel ds3 ds3Channel shutdown Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path

Controller Configuration

path ds3 snmp trap link-status


Description: Enables SNMP link status processing for a T3 over channelized SONET interface. The no version disables SNMP link status processing on an interface. [ no ] path pathChannel ds3 ds3Channel snmp trap link-status Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path

Syntax:

Controller Configuration

328

path ds3 t1

path ds3 t1
Description: Syntax: Creates and configures a T1 channel on a T3 over channelized SONET interface. The no version deletes a path. [ no ] path pathChannel ds3 ds3Channel t1 t1Channel Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel

Controller Configuration

path ds3 t1 bert


Description: Enables bit error rate tests using the specified pattern for a T1 channel on a T3 over channelized SONET interface. The no version stops the test that is running. path pathChannel ds3 ds3Channel t1 t1Channel bert pattern pattern interval time [ unframed ] no path pathChannel ds3 ds3Channel t1 t1Channel bert pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel pattern one of the following test patterns:

Syntax:

2^11 pseudorandom test pattern, 2,048 bits in length 2^15 pseudorandom 0.151 test pattern, 32,768 bits in length 2^20-O153 pseudorandom 0.153 test pattern, 1,048,575 bits in length
time interval between test patterns, ranging from 114400 minutes unframed test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern occupies only T1/E1payload bits.

Mode(s):

Controller Configuration

path ds3 t1 clock source ERX Edge Routers

329

path ds3 t1 clock source


Description: Syntax: Configures the transmit clock source for a T1 channel on a T3 over channelized SONET interface.The no version restores the default value, line. path pathChannel ds3 ds3Channel t1 t1Channel clock source { line | internal { module | chassis } } no path pathChannel ds3 ds3Channel t1 t1Channel clock source pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel line interface transmits data from a clock recovered from the lines receive data stream internal interface transmits data using its internal clock. You must specify one of the following for internal clocking:

module internal clock is from the line module itself chassis internal clock is from the configured system clock
Mode(s): Controller Configuration

path ds3 t1 framing


Description: Syntax: Configures the framing format for a T1 channel on a T3 over channelized SONET interface. The no version restores the default value. path pathChannel ds3 ds3Channel t1 t1Channel framing framingType no path pathChannel ds3 ds3Channel t1 t1Channel framing pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel framingType one of the following types:

esf default; specifies extended superframe sf specifies superframe


Mode(s): Controller Configuration

330

path ds3 t1 fdl

path ds3 t1 fdl


Description: Syntax: Specifies the facility data link standard for a T1 channel on a T3 over channelized SONET interface. The no version restores the default, none. path pathChannel ds3 ds3Channel t1 t1Channel fdl { ansi | att | all | none } no path pathChannel ds3 ds3Channel t1 t1Channel fdl [ ansi | att | all ] Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel ansi specifies ANSI T1.403 Standard for extended superframe FDL exchange support att specifies AT&T Technical Reference 54016 for extended superframe FDL exchange support all specifies both the AT&T and ANSI mode for extended superframe FDL exchange support none removes the current FDL mode settings

Controller Configuration

path ds3 t1 fdl carrier


Description: Specifies that a T1 channel on a T3 over channelized SONET interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment. [ no ] path pathChannel ds3 ds3Channel t1 t1Channel fdl carrier Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel

Syntax:

Controller Configuration

path ds3 t1 fdl string ERX Edge Routers

331

path ds3 t1 fdl string


Description: Defines an FDL message for a T1 channel on a T3 over channelized SONET interface, as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages. path pathChannel ds3 ds3Channel t1 t1Channel fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue | generator generatorValue } no path pathChannel ds3 ds3Channel t1 t1Channel fdl string { eic | fic | lic | unit | pfi | port | generator } Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel eicValue equipment identification code; 110 characters; default is the null value licValue line identification code; 110 characters; default is the null value ficValue frame identification code; 110 characters; default is the null value unitValue unit identification code; 16 characters; default is the null value pfiValue facility identification code to send in the FDL path message; 138 characters; default is the null value portValue equipment port number to send in the FDL idle signal message; 138 characters; default is the null value generatorValue generator number to send in the FDL test signal message; 138 characters; default is the null value

Syntax:

Controller Configuration

332

path ds3 t1 fdl transmit

path ds3 t1 fdl transmit


Description: Configures the system to send the specified type of FDL message for a T1 channel on a T3 over channelized SONET interface. The no version stops the system from sending the specified type of FDL message or all FDL messages. [ no ] path pathChannel ds3 ds3Channel t1 t1Channel fdl transmit { path-id | idle-signal | test-signal } no path pathChannel ds3 ds3Channel t1 t1Channel fdl transmit Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel path-id transmits a path identification FDL message every 10 seconds idle-sIgnal transmits an idle signal FDL message every second test-signal transmits a test signal FDL message every second

Syntax:

Controller Configuration

path ds3 t1 loopback ERX Edge Routers

333

path ds3 t1 loopback


Description: Syntax: Configures a loopback for a T1 channel on a T3 over channelized SONET interface. The no version turns off the loopback. path pathChannel ds3 ds3Channel t1 t1Channel loopback { local | network { payload | line } | remote { line fdl { ansi | bellcore } | payload [fdl ] [ ansi ] } } no path pathChannel ds3 ds3Channel t1 t1Channel loopback [ remote ] pathChannel a number in the range 12147483648 that identifies the path ds3Channel a number in the range 13 that identifies the DS3 channel t1Channel a number in the range 128 that identifies the T1 channel local loops the router output data back toward the router at the T1 framer and sends an alarm indication signal out toward the network network { line | payload } Specify the line keyword to loop the data back toward the network before the T1 framer and automatically set a local loopback at the HDLC controllers. Specify the payload keyword to loop the payload data back toward the network at the T1 framer and automatically set a local loopback at the HDLC controllers. remote line fdl ansi sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 channel, according to the ANSI T1.403 specification. remote line fdl bellcore sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 channel, according to the Bellcore TR-TSY-000312 specification. remote payload [ fdl ] [ ansi ] sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 channel. You can optionally specify fdl and ansi, but it is not necessary.

Mode(s):

Controller Configuration

334

path ds3 t1 remote-loopback

path ds3 t1 remote-loopback


Description: Enables acceptance of remote loopback requests by a T1 channel on a T3 over channelized SONET interface. The no version restores the default value, which is to reject remote loopback requests. [ no ] path pathChannel ds3 ds3Channel t1 t1Channel remote-loopback Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel

Syntax:

Controller Configuration

path ds3 t1 shutdown


Description: Disables a T1 channel or subchannel on a T3 over channelized SONET interface. T1 channels are enabled by default. The no version restarts a disabled interface. [ no ] path pathChannel ds3 ds3Channel t1 t1Channel[/subchannel] shutdown Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel subchannel fractional T1 interface in the range 124

Syntax:

Controller Configuration

path ds3 t1 snmp trap link-status


Description: Enables SNMP link status processing for a T1 channel group or subchannel for a T3 over channelized SONET interface. The no version disables SNMP link status processing for a T1 channel. [ no ] path pathChannel ds3 ds3Channel t1 t1Channel[ /subchannel ] snmp trap link-status Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel subchannel fractional T1 interface in the range 124

Syntax:

Controller Configuration

path ds3 t1 timeslots ERX Edge Routers

335

path ds3 t1 timeslots


Description: Assigns a range of DS0 timeslots to a subchannel as a single data stream for a T1 channel on a T3 over channelized SONET interface. You can optionally specify a line speed that applies to all DS0 timeslots assigned to a subchannel. The no version deletes the fractional T1 circuit. path pathChannel ds3 ds3Channel t1 t1Channel/subchannel timeslots range [ speed { 56 | 64 } ] no path pathChannel ds3 ds3Channel t1 t1Channel/subchannel pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel subchannel fractional T1 interface in the range 124 range timeslots assigned to the T1 channel in the range 124; a dash represents a range of timeslots, and a comma separates timeslots. For example, 1-10, 15-18 assigns timeslots 110 and 1518. speed specifies the data rate for the T1 channel. Values are 56 Kbps or 64 Kbps. The default is 64 Kbps.

Syntax:

Mode(s):

Controller Configuration

path e1 unframed
Description: Syntax: Configures unframed E1 for channelized SONET and SDH interfaces. The no version deletes an unframed E1 interface from the path. [ no ] path pathChannel e1 tributaryIdentifier unframed Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command.

Controller Configuration

336

path overhead j1

path overhead j1
Description: Specifies trace messages to check for connectivity between the system and the SONET/SDH device at the other end of the line. The no version restores the default situation, in which all characters of the trace message are zeros. [ no ] path pathChannel overhead j1 { msg | exp-msg } [ message ] pathChannel identifier for the path

Syntax:

For OC3 (dual port) or OCx/STMx interfaces, there is no identifier For cOCx/STMx interfaces, a number in the range 12147483648 that
identifies the path Mode(s): msg send the specified transmit message exp-msg expect the specified trace message message text of the message. The maximum is 15 characters for SDH mode and 62 characters for SONET mode.

Controller Configuration

path snmp trap link-status


Description: Syntax: Enables SNMP link status processing for the path layer of SONET and SDH interfaces. The no version disables SNMP link status processing. [ no ] path [ pathChannel ] snmp trap link-status Mode(s): pathChannel number in the range 12147483648 that identifies the path on a channelized interface

Controller Configuration

peak-burst
Description: Syntax: Sets the peak burst for a rate limit profile. The no version restores the default value, 8192. [ no ] peak-burst size Mode(s): size size in bytes in the range 81924294967295

Rate Limit Profile Configuration

peak-rate ERX Edge Routers

337

peak-rate
Description: Syntax: Sets the peak rate for a rate limit profile. The no version restores the default value, 0. [ no ] peak-rate rate Mode(s): rate rate in bits per second in the range 04294967295

Rate Limit Profile Configuration

pim disable
Description: Syntax: Mode(s): Disables PIM on a virtual router. The no version reenables PIM on a virtual router. [ no ] pim disable Router Configuration

338

ping

ping
Description: Syntax: Sends an ICMP echo request packet to the IP address that you specify. There is no no version. ping [ vrf vrfName ] [ ip ] destination [ packetCount ] [ timeout timeOutVal ] [ transmit-delay delayVal ] [ ttl ttlValue ] [ data-size dataSize ] [ data-pattern { ones | zeros | random | hex-data hexData } ] [ source { interface interfaceType interfaceSpecifier | address sourceAddr } ] [ sweep-sizes sweepMin sweepMax [ sweep-interval sweepInt ] ] [ extended [ tos tosVal ] [ set-dont-fragment-bit ] [ set-router-alert ] [ { loose-source-route | strict-source-route } [ srtAddrs ]* ] [ record-route numRoutes ] [ timestamp numTstamps ] [ interface interfaceType InterfaceSpecifier ] ] vrfName name of the VRF context ip optional keyword for compatibility with non-ERX implementations destination IP address or domain name of the host to ping packetCount number of packets to send to the destination IP address in the range 04294967295; the default is 5; 0 means ping forever timeOutVal number of seconds in the range 120 to wait for an ICMP echo reply packet before the connection attempt times out delayVal number of milliseconds in the range 150 between transmission of each ICMP request; default is 10 ms ttlValue specifies a hop count by setting the time-to-live field in the IP header in the range 1255; default is 32 dataSize number of bytes comprising the IP packet and reflected in the IP header in the range 064000; the default is 100 bytes data-pattern type of bits contained in the packet. You can set the bits to all ones, all zeros, a random mixture of ones and zeros, or a specific hexadecimal data pattern that can range from 0x0 0xFFFFFFFF. The default data pattern is all zeros. source interface specifies an interface as the source of the packets

interfaceType interface type; see Interface Types and Specifiers in


About This Guide

interfaceSpecifier particular interface; format varies according to


interface type; see Interface Types and Specifiers in About This Guide source address specifies an IP address as the source of the packets

sourceAddr IP address or domain name used as the source address


sweep-sizes configures payload sizes, enabling you to vary the sizes of the echo packets being sent. This capability is useful for determining the minimum sizes of the MTUs configured on the nodes along the path to the

ping ERX Edge Routers

339

destination address. This reduces packet fragmentation which contributes to performance problems. The default is not to sweep (all packets are the same size).

sweepMin minimum payload size in the range 064000 sweepMax maximum payload size in the range 064000 sweepInt number of bytes to add to the size of the packet; the change
in the size of subsequent ping packets while sweeping across a range of sizes. For example, you can configure the sweep interval to sweep across the range of packets from 100 bytes to 1000 bytes in increments of sweepInt. By default, send 100, 101, 102, 103...1000. If sweepInt is 5, send 100, 105, 110, 115...1000). When sweeping, the default interval is 1. extended enables you to configure extended header attributes

tosVal specifies the value set in the ToS byte in the range 0255 to
support QoS offerings

set-dont-fragment-bit sets the dont-fragment bit in the IP header to


prevent IP from fragmenting the packet if it is too long for the MTU of a link; if the nonfragmented packet cannot be delivered, it is discarded

loose-source-route specifies a set of hops through which the packet


must traverse; the hops do not have to be adjacent

strict-source-route specifies every hop through which the packet must


traverse and generates an ICMP error if the exact path cannot be followed

srtAddrs IP addresses or domain name of the intermediate hops on


the way to the destination that will be used in the loose-source or strict-source route

* indicates that one or more parameters can be repeated multiple times in


a list in the command line

numRoutes specifies how many routes are to be recorded as the


packet travels; ranges from 1 to 9

numTstamps specifies how many timestamps from routers are to be


recorded as the packet travels; ranges from 1 to 9

interfaceType interface type of a destination address on the system


that is configured for external loopback; see Interface Types and Specifiers in About This Guide

interfaceSpecifier particular interface of a destination address on the


system that is configured for external loopback; format varies according to interface type; see Interface Types and Specifiers in About This Guide Mode(s): User Exec, Privileged Exec

340

ping atm interface atm

ping atm interface atm


Description: Syntax: Sets up the ATM interface or circuit to send loopback cells. There is no no version. ping atm interface atm interfaceSpecifier vpi vci [ end-loopback [ destination ] | seg-loopback [ destination ] ] [ count cellCount ] [ timeout #OfSeconds ] interfaceSpecifier see Interface Types and Specifiers in About This Guide. vpi virtual path identifier vci virtual circuit identifier. By default F5 end-to-end loopback OAM cells are used for the ping operation.

To send F4 segment loopback cells, set the VCI to 3. To send F5 end-to-end loopback cells, set the VCI to 4.
end-loopback sends the ping to the connection endpoint seg-loopback sends the ping to the first segment endpoint destination value of the location ID included the loopback cell. The location ID is a 16-octet field, and the destination portion is 4 octets. You can set the destination to a specific location ID or to 0s (zeros) or 1s (ones). If the destination is set to:

0s loopback location ID in the loopback cell is initialized to all 0s, and


each segment endpoint in the network responds to the ping.

1s loopback location ID in the loopback cell is initialized to all 1s, and


only the connection endpoint responds to the ping. The default value is 0xFFFFFFFF, which causes the loopback location ID in the loopback cell to be initialized to all 1s. cellCount number of OAM echo cells to send to the destination. The default value is 5. The range is 132. timeout amount of time to wait for a response to the sent OAM cell. If no response is received when this time expires, the system sends the next cell. This process is repeated for the number of cells specified in the cellCount parameter. #OfSeconds number of seconds in the timeout period. The default value is 5 seconds. The range is 15 seconds.

Mode(s):

Privileged Exec

policy-list ERX Edge Routers

341

policy-list
Description: Creates or modifies a policy list. If you execute a policy-list command and type exit, the system creates a policy list with no rules, the default. When no rules are found in a policy list, the system automatically inserts a default filter rule. Attaching this policy list to an interface will filter all packets on that interface. The no version removes a policy list. [ no ] policy-list policyName Mode(s): policyName name associated with the policy list

Syntax:

Global Configuration

pos framing
Description: Syntax: Sets the type of framing for a POS interface. There is no no version. pos framing { sdh | sonet } Mode(s): sdh uses SDH framing format sonet uses SONET framing format (the default)

Interface Configuration

pos scramble-atm
Description: Enables payload scrambling on a POS interface. When enabled, both sides of the connection must be using the scrambling algorithm. The system uses a 43rd-order synchronous scrambler to scramble the output data. The no version disables scrambling on the POS interface. [ no ] pos scramble-atm Interface Configuration

Syntax: Mode(s):

342

ppp authentication

ppp authentication
Description: Syntax: Requests authentication from a PPP peer system. The no version removes the authentication requirement. ppp authentication [ virtual-router vrName ] chap [ pap ] | pap [ chap ] no ppp authentication vrName name of a virtual router to be used as the authentication virtual router chap specifies CHAP authentication protocol. If the peer system refuses to use CHAP and you additionally specified PAP on the command line, the system requests the PAP protocol. If the peer system refuses to negotiate authentication, the system terminates the session. pap specifies PAP authentication protocol. If the peer system refuses to use PAP and you additionally specified CHAP on the command line, the system requests the PAP protocol.

Mode(s):

Interface Configuration, Subinterface Configuration, Profile Configuration

ppp aaa-profile
Description: Maps an AAA profile to static and dynamic, multilink and nonmultilink PPP interfaces. The no version removes the AAA profile assignment to the PPP interface. ppp aaa-profile profileName no ppp aaa-profile Mode(s): profileName name of the AAA profile; 32 characters maximum

Syntax:

Interface Configuration, Subinterface Configuration, Profile Configuration

ppp chap-challenge-length ERX Edge Routers

343

ppp chap-challenge-length
Description: Modifies the length of the CHAP challenge by specifying the minimum and maximum allowable length. The no version restores the defaults. Caution: We recommend that you do NOT use the ppp chap-challenge-length command; increasing the minimum length (from the default 16 bytes) or decreasing the maximum length (from the default 32 bytes) reduces the security of your system. Syntax: ppp chap-challenge-length minLength maxLength no ppp chap-challenge-length minLength minimum length of the CHAP challenge in bytes in the range 863; default value is 16 bytes maxLength maximum length of the CHAP challenge in bytes in the range 863; value must be equal to or greater than the minimum length; default value is 32 bytes

Mode(s):

Interface Configuration, Subinterface Configuration, Profile Configuration

ppp description
Description: Syntax: Assigns a text description or alias to a static PPP interface. The no version removes the text description or alias. ppp description name no ppp description Mode(s): name text description or alias for the ppp interface; up to 64 characters

Interface Configuration, Subinterface Configuration

ppp ipcp netmask


Description: Explicitly enables the IPCP option 0x90 on a per-PPP interface basis, either in a profile or on a static interface. By default, the IPCP option 0x90 is disabled on the interface. The no version disables the IPCP option 0x90. [ no ] ppp ipcp netmask Interface Configuration, Subinterface Configuration, Profile Configuration

Syntax: Mode(s):

344

ppp keepalive

ppp keepalive
Description: Specifies a keepalive value. The keepalive mechanism tracks the status of the connection. The no version disables keepalive. High-density mode is automatically selected when PPP is layered over ATM, Tunnel, or PPPoE. Low-density mode is selected when PPP is layered over HDLC. ppp keepalive [ seconds ] no ppp keepalive seconds keepalive timeout period in the range 30300 seconds for high-density mode or 10300 seconds for low-density mode. The default is 30.

Syntax:

Mode(s):

Interface Configuration, Subinterface Configuration, Profile Configuration

ppp log
Description: Syntax: Enables PPP packet or state machine logging on any dynamic interface that uses the profile being configured. The no version disables the logging. [ no ] ppp log logCategory logCategory one of the following categories

pppPacket enables PPP packet logging pppStateMachine enables PPP state machine logging
Mode(s): Profile Configuration

ppp magic-number disable


Description: Disables negotiation of the local magic number. Issuing this command prevents the system from detecting loopback configurations. The no version enables negotiation. [ no ] ppp magic-number disable Interface Configuration, Subinterface Configuration, Profile Configuration

Syntax: Mode(s):

ppp max-bad-auth ERX Edge Routers

345

ppp max-bad-auth
Description: Specifies the maximum number of authentication retries the system accepts before terminating a PPP session. The no version returns the value to the default. ppp max-bad-auth maxBadAuth no ppp max-bad-auth maxBadAuth number of authentication retries after which the interface resets itself in the range: 07. The default is 0, which indicates that no retries are allowed.

Syntax:

Mode(s):

Interface Configuration, Subinterface Configuration

ppp mru
Description: Sets the maximum allowable size in bytes of the maximum receive unit for PPP or MLPPP serial interfaces. If the command is executed from an encapsulated PPP or MLPPP serial interface, it affects only that interface. If executed from an MLPPP bundle, it affects all serial member links within that bundle. The no version restores the default value, which varies according to module type. ppp mru mruSize no ppp mru Mode(s): mruSize the maximum allowable size of the MRU; the range is from 6465535

Syntax:

Interface Configuration, Subinterface Configuration, Profile Configuration

ppp multilink enable


Description: Enables creation of dynamic MLPPP interfaces when used in a profile. The no version causes the LNS to reject any incoming requests to establish dynamic MLPPP interfaces. [ no ] ppp multilink enable Profile Configuration

Syntax: Mode(s):

346

ppp passive-mode

ppp passive-mode
Description: Forces dynamic and static PPP interfaces into passive mode before LCP negotiation begins for a period of one second, enabling slow clients time to start up and to initiate LCP negotiation. The no version disables passive mode. [ no ] ppp passive-mode Interface Configuration, Subinterface Configuration, Profile Configuration

Syntax: Mode(s):

ppp peer
Description: Resolves conflicts when the system and the PPP peer system have the primary and secondary DNS and WINS name server addresses configured with different values. If the PPP peer system has the address and the system does not, the peer always supplies the address regardless of how you have configured the PPP peer. The no version configures the system to take precedence during setup negotiations between the system and the remote personal computer client. [ no ] ppp peer { dns | wins } Mode(s): dns sets the peer to take precedence over the system for resolving conflicts in the DNS primary and secondary addresses wins sets the peer to take precedence over the system for resolving conflicts in the WINS primary and secondary addresses

Syntax:

Interface Configuration, Subinterface Configuration, Profile Configuration

ppp shutdown
Description: Stops a PPP session. For MLPPP, issue only in the context of a network interface; the command disables the service for the MLPPP network interface (MLPPP bundle). The no version restarts a PPP session. [ no ] ppp shutdown [ ip | mpls | osi ] Mode(s): ip disables the IPCP service mpls disables MPLS service osi disables the OSINLCP service

Syntax:

Interface Configuration, Subinterface Configuration

pppoe ERX Edge Routers

347

pppoe
Description: Syntax: Mode(s): Creates a PPPoE major interface. The no version removes the interface. [ no ] pppoe Interface Configuration, Subinterface Configuration

pppoe acName
Description: Allows you to configure an access concentrator name for a PPPoE interface or profile. If no AC name is configured, the system name is used. The no version removes the access concentrator name. pppoe acName string no pppoe acName Mode(s): string AC name; 64 characters maximum

Syntax:

Interface Configuration, Profile Configuration

pppoe auto-configure
Description: Syntax: Mode(s): Sets up the system to dynamically create PPPoE subinterfaces on the PPPoE major interfaces. The no version removes this configuration. [ no ] pppoe auto-configure Subinterface Configuration

pppoe always-offer
Description: Sets up the system to offer to set up a session, even if the system has insufficient resources to establish a session. The no version disables this feature, and is the default setting. [ no ] pppoe always-offer Subinterface Configuration, Profile Configuration

Syntax: Mode(s):

pppoe duplicate-protection
Description: Sets up the system to prevent a client from establishing more than one session using the same MAC address. The no version disables this feature, and is the default setting. [ no ] pppoe duplicate-protection Subinterface Configuration, Profile Configuration

Syntax: Mode(s):

348

pppoe log pppoeControlPacket

pppoe log pppoeControlPacket


Description: Enables packet trace logging on PPPoE dynamic interfaces created using the profile being configured. Packet trace information is logged to the pppoeControlPacket log. The no version disables the logging. [ no ] pppoe log pppoeControlPacket Profile Configuration

Syntax: Mode(s):

pppoe motm
Description: Causes the PPPoE application to send a PADM message of the minute message. The no version disables the message. The recipient of the message is determined by the mode from which the command is issued. From Privileged Exec mode the message is sent to all PPPoE clients connected to the system; from Interface Configuration mode the PADM message is sent to the client as it is configured (if connected); and from Profile Configuration mode the message is sent to the new client created when the profile is dynamically attached to an IP interface. The MOTM string is passed with no changes. pppoe motm string no pppoe motm Mode(s): string message sent

Syntax:

Privileged Exec, Interface Configuration, Profile Configuration

pppoe sessions
Description: Specifies the number of subinterfaces permitted on a PPPoE interface. The command affects only subinterfaces that are created after the command is entered. Previously created interfaces remain, even if their number exceeds the new value of the sessions parameter. The no version restores the default value, 4094. pppoe sessions sessions no pppoe sessions Mode(s): sessions number of subinterfaces permitted on the interface in the range 14094; the default is 4094

Syntax:

Interface Configuration, Subinterface Configuration

pppoe subinterface ERX Edge Routers

349

pppoe subinterface
Description: Syntax: Creates a PPPoE subinterface on an FE, GE, or ATM interface. [ no ] pppoe subinterface interfaceType interfaceSpecifier Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Global Configuration

pppoe url
Description: Causes the PPPoE application to send string to the new client. The no version disables the message. The recipient of the message is determined by the mode from which the command is issued. From Interface Configuration mode the PADM message is sent to the client as it is configured (if connected). From Profile Configuration mode the message is sent to the new client created when the profile is dynamically attached to an IP interface. pppoe url url no pppoe url Mode(s): url URL string sent

Syntax:

Interface Configuration, Profile Configuration

preference
Description: Syntax: Specifies the preference value for an L2TP or L2F tunnel in Domain Map Configuration mode. The no version restores the default value, 0. preference tunnelPreference no preference Mode(s): tunnelPreference tunnel preference in the range 02000; 0 is the highest preference

Domain Map Tunnel Configuration

350

profile

profile
Description: When used from Global Configuration mode, the command creates a profile. Use profiles to configure interfaces dynamically, allowing you to manage a large number of interfaces effectively. The no version removes the profile. When used from Subinterface Configuration mode, the command assigns a profile to an interface. Use profiles to configure interfaces dynamically, allowing you to manage a large number of interfaces effectively. The no version removes the profile assigned to the interface. When used from L2TP Destination Profile Host Configuration mode, sets an attribute of the current remote host. The no version removes the attribute from the remote host. To assign a profile name for a remote host: [ no ] profile profileName To create a profile or assign a profile to a subinterface: profile [ bridgedEthernet | ip | ppp | pppoe | any ] profileName no profile [ bridgedEthernet | ip | ppp | pppoe | any ] Mode(s): bridgedEthernet specifies a bridged Ethernet encapsulation type to which the profile applies ip specifies an IP encapsulation type to which the profile applies ppp specifies a PPP encapsulation type to which the profile applies pppoe specifies a PPPoE encapsulation type to which the profile applies any specifies any auto-configured encapsulation that does not have a specific profile assignment profileName profile name of up to 80 characters

Syntax:

Global Configuration, Subinterface Configuration, L2TP Destination Profile Host Configuration

qos-mode-port
Description: Syntax: Mode(s): Configures an ATM port for per-port queuing. The no version removes per-port queuing on the ATM port. [ no ] qos-mode-port Interface Configuration

qos-port-type-profile ERX Edge Routers

351

qos-port-type-profile
Description: Syntax: Associates a QoS profile with all the ports of a given interface type. There is no no version for this command. [ no ] qos-port-type-profile interfaceType qos-profile qosProfileName Mode(s): interfaceType one of the following interface types to be associated with the QoS port-type profile: atm, ethernet, serial, server-port qosProfileName name of the QoS profile

Global Configuration

qos-profile
Description: In Global Configuration mode, creates a QoS profile on your system. The no version deletes the QoS profile in Global Configuration mode. In Interface Configuration mode, attaches a QoS profile to a given interface. The no version detaches the QoS profile from the interface in Interface Configuration mode. [ no ] qos-profile qosProfileName Mode(s): qosProfileName name of the QoS profile

Syntax:

Global Configuration, Interface Configuration

query-interval
Description: Syntax: Specifies how often the system sends PIM router query messages to remote neighbors. The no version specifies the default time interval, 30 seconds. query-interval queryTime no query-interval Mode(s): queryTime interval in the range 0210 seconds at which the system sends PIM router query messages from this interface

Interface Configuration

352

queue

queue
Description: Syntax: Specifies that a queue traffic class be configured for the selected interface type. The no version removes this rule from the QoS profile. [ no ] interfaceType queue traffic-class trafficClassName [ queue-profile queueProfileName ] [ scheduler-profile schedProfileName ] | [ scheduler-profile schedProfileName ] [ queue-profile queueProfileName ] ] interfaceType one of the following interface types for which queue traffic classes should be configured: atm, atm-vc, cbf, ethernet, fr-vc, ip, ip-tunnel, l2tp-tunnel, serial, server-port, vlan trafficClassName name of the traffic class queueProfileName name of the queue profile schedProfileName name of the scheduler profile

Mode(s):

QoS Profile Configuration

queue-profile
Description: Syntax: Configures a queue profile. The no version removes the named queue profile. [ no ] queue-profile queueProfileName Mode(s): queueProfileName name of the queue profile

Global Configuration

radius acct-session-id-format
Description: Syntax: Configures the RADIUS clients use of a specific format for RADIUS attribute 44, Acct-Session-Id. The no version negates the Acct-Session-Id format. radius acct-session-id-format { decimal | description } no radius acct-session-id-format Mode(s): Global Configuration

radius algorithm ERX Edge Routers

353

radius algorithm
Description: Syntax: Specifies the algorithm that the RADIUS client uses to contact the RADIUS server. The no version restores the default value, direct. radius algorithm direct | round-robin no radius algorithm Mode(s): direct contacts the first AAA server on the list for each user, and the second if the first one fails, and so on. round-robin contacts the first AAA server for the first user, and the second for the second user, and so on.

Global Configuration

radius calling-station-delimiter
Description: Syntax: Specifies the delimiter for DSL PPP users for RADIUS attribute, Calling-Station-Id. The no version removes the delimiter. radius calling-station-delimiter delimiter no radius calling-station-delimiter Mode(s): delimiter special character to set off items in the Calling-Station-Ids definition (for example, # or %)

Global Configuration

354

radius calling-station-format

radius calling-station-format
Description: On a virtual router, specifies the format of RADIUS attribute 31, Calling-Station-Id, when the PPP user is terminated at the non-LNS ERX system. The no version returns the Calling-Station-Id format to delimited. radius calling-station-format delimited | fixed-format no radius calling-station-format delimited specifies that the RADIUS client uses the delimited format: delimiter systemName delimiter interfaceDescription delimiter vpi delimiter vci In the case of Ethernet vpi delimiter vci is replaced with vlan. fixed-format specifies that the RADIUS client uses the fixed format: systemName (up to four bytes) slot (two bytes) port (one byte) VPI (three bytes) VCI (five bytes)

Syntax:

All fields are in ASCII, making the format up to 15 characters in length. In the case of Ethernet, the VPI and VCI bytes are replaced by an 8-byte
VLAN.

In the case of PPP terminated from LNS, the Calling-Station-Id attribute


is the value passed as the calling-station AVP. Mode(s): Global Configuration

radius client
Description: This command has only a no version. See the no radius clientcommand for a complete description and syntax.

radius dsl-port-type ERX Edge Routers

355

radius dsl-port-type
Description: Sets RADIUS attribute 61, NAS-Port-Type, in RADIUS access request packets and accounting start and stop packets for ATM interfaces. The no version restores the default setting of xdsl. radius dsl-port-type { sdsl | adsl-cap | adsl-dmt | idsl | xdsl | virtual } no radius dsl-port-type Mode(s): sdsl symmetric DSL adsl-cap asymmetric DSL, carrierless amplitude phase modulation adsl-dmt asymmetric DSL, discrete multitone idsl ISDN DSL xdsl DSL of unspecified type (default) virtual virtual

Syntax:

Global Configuration

radius ethernet-port-type
Description: Syntax: Indicates to RADIUS which Ethernet port type to use in RADIUS attribute 61, NAS-Port-Type, for all Ethernet users on the ERX. radius ethernet-port-type [ virtual | ethernet ] no radius ethernet-port type Mode(s): virtual sets RADIUS NAS-Port-Type to virtual ethernet sets RADIUS NAS-Port-Type to Ethernet

Global Configuration

radius ignore framed-ip-netmask


Description: Ignores the Framed-Ip-Netmask attribute 9, returned by RADIUS in the access-accept packet. The default is enable. The no version restores the default. radius ignore framed-ip-netmask enable | disable no radius ignore framed-ip-netmask Mode(s): Global Configuration

Syntax:

356

radius include

radius include
Description: Configures the inclusion of RADIUS attributes in RADIUS messages. Not all attributes are available in all message types. All attributes are included by default except for tunnel-server-attributes. The no version restores the default. radius include attributeName { access-request | acct-start | acct-stop } { enable | disable } no radius include attributeName { access-request | acct-start | acct-stop } attributeName one of the following RADIUS attributes; not all attributes are available in all message types: Attributes available for Access-Request, Acct-Start, and Acct-Stop messages:

Syntax:

acct-tunnel-connection includes RADIUS attribute 68,


Acct-Tunnel-Connection

called-station-id includes RADIUS attribute 30, Called-Station-Id calling-station-id includes RADIUS attribute 31, Calling-Station-Id connect-info includes RADIUS attribute 77, Connect-Info nas-identifier includes RADIUS attribute 32, NAS-Identifier nas-port includes RADIUS attribute 5, NAS-Port, nas-port-id includes RADIUS attribute 87, NAS-Port-Id nas-port-type includes RADIUS attribute 61, NAS-Port-Type pppoe-description includes RADIUS attribute 26-24,
Pppoe-Description

tunnel-client-auth-id includes RADIUS attribute 90,


Tunnel-Client-Auth-Id

tunnel-client-endpoint includes RADIUS attribute 66,


Tunnel-Client-Endpoint

tunnel-medium-type includes RADIUS attribute 65,


Tunnel-Medium-Type

tunnel-server-attributes includes all supported tunnel server attributes,


that is, the attributes of the tunnel client when PPP is terminated at the LNS on the system

tunnel-server-auth-id includes RADIUS attribute 91,


Tunnel-Server-Auth-Id

tunnel-server-endpoint includes RADIUS attribute 67,


Tunnel-Server-Endpoint

tunnel-type includes RADIUS attribute 64, Tunnel-Type

radius include ERX Edge Routers

357

Attributes available for Access-Request messages only:

acct-session-id includes RADIUS attribute 44, Acct-Session-Id


Attributes available for Acct-Start messages only:

framed-ip-addr includes RADIUS attribute 8, Framed-IP-Address


Attributes available for Acct-Start and Acct-Stop messages only:

acct-link-count includes RADIUS attribute 51, Acct-Link-Count acct-multi-session-id includes RADIUS attribute 50,
Acct-Multi-Session-ID

class includes RADIUS attribute 25, Class egress-policy-name includes RADIUS attribute 26-11,
Egress-Policy-Name

event-timestamp includes RADIUS attribute 55, Event-Timestamp framed-compression includes RADIUS attribute 13,
Framed-Compression

framed-ip-netmask includes RADIUS attribute 9, Framed-IP-Netmask ingress-policy-name includes RADIUS attribute 26-10,
Ingress-Policy-Name

tunnel-assignment-id includes RADIUS attribute 82,


Tunnel-Assignment-Id

tunnel-preference includes RADIUS attribute 83, Tunnel-Preference


Attributes available for Acct-Stop messages only:

input-gigapkts includes RADIUS attribute 26-35,


Acct-Input-Gigapackets

input-gigawords includes RADIUS attribute 52, Acct-Input-Gigawords output-gigapkts includes RADIUS attribute 26-36,
Acct-Output-Gigapackets

output-gigawords includes RADIUS attribute 53,


Acct-Output-Gigawords Mode(s): access-request specifies RADIUS Access-Request messages acct-start specifies RADIUS Acct-Start messages acct-stop specifies RADIUS Acct-Stop messages enable enables attribute inclusion disables disables attribute inclusion; the attribute is excluded

Global Configuration

358

radius nas-identifier

radius nas-identifier
Description: Syntax: Configures the RADIUS clients value for RADIUS attribute 32, NAS-Identifier. The no version deletes the NAS-Identifier. radius nas-identifier identifierValue no radius nas-identifier Mode(s): identifierValue value in the range is 1 64 characters; this value is used in the NAS-Identifier attribute for authentication and accounting requests

Global Configuration

radius nas-port-format
Description: Syntax: Configures the RADIUS clients use of a specific format for RADIUS attribute 5, NAS-Port. The no version removes the format. radius nas-port-format { 0ssssppp | ssss0ppp } no radius nas-port-format Mode(s): 0ssssppp sets the RADIUS client to use the 0ssssppp format where s is slot and p is port ssss0ppp sets the RADIUS client to use the ssss0ppp format where s is slot and p is port

Global Configuration

radius override nas-ip-addr tunnel-client-endpoint


Description: Configures the RADIUS client (LNS) to use the tunnel-client-endpoint (LAC) IP address for RADIUS attribute 4, NAS-IP-Address. The no version restores the default address. radius override nas-ip-addr tunnel-client-endpoint no radius override nas-ip-addr Mode(s): radius configures the RADIUS server override configures the RADIUS client to override the standard use for an attribute nas-ip-addr configures the RADIUS client value for the nas-ip-addr attribute tunnel-client-endpoint configures the RADIUS client to use the tunnel-client-endpoint in an attribute

Syntax:

Global Configuration

radius rollover-on-reject ERX Edge Routers

359

radius rollover-on-reject
Description: On a virtual router, specifies whether the system should roll over to the next RADIUS server when the system receives an access-reject message for the user it is authenticating. The no version restores the default value, disable. radius rollover-on-reject { enable | disable } no radius rollover-on-reject Mode(s): Global Configuration

Syntax:

radius server
Description: Syntax: Specifies the IP address of a RADIUS authentication and accounting servers. The no version deletes the instance of the RADIUS server. radius { authentication | accounting } server ipAddress no radius { authentication | accounting } server ipAddress Mode(s): authentication configure the RADIUS authentication server accounting configure the RADIUS accounting server ipAddress IP address of the server

Global Configuration

radius trap acct-server-not-responding


Description: Enables or disables SNMP traps when a particular RADIUS accounting server fails to respond to a RADIUS accounting request. The no version restores the default value, disable. [ no ] radius trap acct-server-not-responding { enable | disable } Global Configuration

Syntax: Mode(s):

radius trap auth-server-not-responding


Description: Enables or disables SNMP traps when a particular RADIUS authentication server fails to respond to a RADIUS Access-Request message. The no version restores the default value, disable. [ no ] radius trap auth-server-not-responding { enable | disable } Global Configuration

Syntax: Mode(s):

360

radius trap no-acct-server-responding

radius trap no-acct-server-responding


Description: Enables or disables SNMP traps when all of the configured RADIUS accounting servers per VR fail to respond to a RADIUS accounting request. The no version restores the default value, disable. [ no ] radius trap no-acct-server-responding { enable | disable } Global Configuration

Syntax: Mode(s):

radius trap no-auth-server-responding


Description: Enables or disables SNMP traps when all of the configured RADIUS authentication servers per VR fail to respond to a RADIUS Access-Request message. The no version restores the default value, disable. [ no ] radius trap no-auth-server-responding { enable | disable } Global Configuration

Syntax: Mode(s):

radius tunnel-accounting
Description: Syntax: Enables or disables tunnel accounting. The no version restores the default value, disable. radius tunnel-accounting { enable | disable } no radius tunnel-accounting Mode(s): Global Configuration

radius udp-checksum
Description: Syntax: Enables or disables UDP checksum for RADIUS packets on virtual routers you configure for B-RAS. The no version restores the default value, enable. radius udp-checksum { enable | disable } no radius udp-checksum Mode(s): Global Configuration

radius update-source-addr ERX Edge Routers

361

radius update-source-addr
Description: Specifies an alternate source IP address for the system to use rather than the default router ID. The no version deletes the alternate address, and the system uses the router ID. radius update-source-addr sourceAddr no radius update-source-addr Mode(s): sourceAddr source address of the RADIUS client

Syntax:

Global Configuration

rate-limit-profile
Description: From Global Configuration mode, creates a rate limit profile and accesses Rate Limit Profile Configuration mode. The no version removes the rate limit profile. From Policy Configuration mode, specifies a rate limit profile as a rule in a policy list. The no version removes a rate limit profile from a policy list. The suspend version suspends the rule temporarily. To create a rate limit profile: [ no ] rate-limit-profile profileName [ rateLimitProfileType profileName name of the rate limit profile rateLimitProfileType one-rate or two-rate

Syntax:

To specify a rate limit profile in a policy: [ no ] [ suspend ] rate-limit-profile profileName [ classifier-group claclName ] [ precedence precValue ] Mode(s): profileName name of the rate limit profile to be created or to be used in a policy claclName classifier control list used to classify packets for this rate limit profile precValue precedence of this rule in relation to other rules within this set

Global Configuration, Policy Configuration

362

rd

rd
Description: Syntax: Specifies the unique two-part route distinguisher for a VRF. There is no no version. rd distinguisher distinguisher unique two-part identifier of the format number1:number2 where:

number1 AS number or an IP address number2 unique integer; 32 bits if number1 is an AS number; 16 bits if
number1 is an IP address Mode(s): VRF Configuration

receive version
Description: Restricts the RIP version that the system can receive on a RIP remote-neighbor interface. The no version sets the remote-neighbor interface back to the default value, receiving both RIP version 1 and version 2. receive version [ 1 ] [ 2 ] [ off ] no address receive version Mode(s): 1 specifies RIP version 1 only 2 specifies RIP version 2 only off turns reception off

Syntax:

Remote Neighbor Configuration

redistribute ERX Edge Routers

363

redistribute
Description: Redistributes routes from one routing domain into another routing domain. For DVMRP, only routes that appear in the RPF table can be redistributed. The no version ends redistribution of information. The options available vary depending on your routing protocol context; that is, on whether you are configuring BGP, DVMRP, IS-IS, OSPF, or RIP. BGP: redistribute { fromProtocol | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ metric absoluteValue | route-map mapTag | weight wtValue ]* no redistribute { fromProtocol | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ metric [ absoluteValue ] | route-map [ mapTag ] | weight [ wtValue ] ]* DVMRP: [ no ] redistribute fromProtocol [ route-map mapTag ]

Syntax:

IS-IS: redistribute { fromProtocol | static [ ip ] | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ level-1 | level-1-2 | level-2 | metric absoluteValue | metric-type { external | internal } | route-map mapTag ]* no redistribute { fromProtocol | static [ ip ] | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ level-1 | level-1-2 | level-2 | metric [ absoluteValue ] | metric-type { external | internal } | route-map [ mapTag ] ]* OSPF: redistribute { fromProtocol | ospf match internal } [ metric-type [ 1 | 2 ] | metric absoluteValue | tag tagValue | route-map mapTag ]* no redistribute { fromProtocol | ospf match internal } [ metric-type [ 1 | 2 ] | metric [ absoluteValue ] | tag [ tagValue ] | route-map [ mapTag ] ]* redistribute { ospf match internal external [ 1 | 2 ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric absoluteValue | route-map mapTag | tag tagValue ]* no redistribute { ospf match internal external [ 1 | 2 ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric [ absoluteValue ] | route-map [ mapTag ] | tag [ tagValue ] ]*

364

redistribute

RIP: redistribute { fromProtocol | ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric absoluteValue | route-map mapTag ]* no redistribute { fromProtocol | ospf match internal } [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric [ absoluteValue ] | route-map [ mapTag ] ]* fromProtocol source protocol from which routes are being redistributed; the default is no source protocol defined

access redistributes access-server routes (BGP) access-internal redistributes internal routes to directly connected
clients (BGP)

bgp routes sourced from BGP protocol connected routes that are established automatically when IP is
enabled on an interface (non-multicast routing protocols). For routing protocols such as OSPF and IS-IS, these routes are redistributed as external to the AS. When redistributing from connected, only those connected networks that are configured on an interface that is not configured to run IS-IS will be redistributed. For DVMRP, this keyword redistributes routes that are established automatically in the RPF table because another multicast routing protocol, such as PIM, is enabled on an interface.

dvmrp routes sourced from DVMRP isis routes sourced from IS-IS ospf routes sourced from OSPF rip routes sourced from RIP static redistributes static routes; for IS-IS, you can specify static or
static ip ospf match determines what type(s) of routes to redistribute from OSPF; all OSPF routes are redistributed if you do not specify a type

internal redistributes OSPF internal routes external 1 redistributes OSPF external routes of metric-type 1 external 2 redistributes OSPF external routes of metric-type 2
absoluteValue a metric that is applied to all routes from the source protocol; ranges from 0429496729; in BGP this value is the MED, which defaults to the IGP metric of the redistributed route mapTag a string of up to 32 alphanumeric characters that specifies a route map applied to all routes from the source protocol; all routes are redistributed if you do not specify a route map wtValue administrative weight (relative importance) for routes redistributed into the protocol; a number in the range 065535

redistribute isis ip ERX Edge Routers

365

level-1 specifies the redistribution of only IS-IS level 1 routes level-1-2 specifies the redistribution of both IS-IS level 1 and level 2 routes level-2 specifies the redistribution of only IS-IS level 2 routes metric-type specifies the OSPF or IS-IS metric type for all routes from the source protocol For routes redistributed into IS-IS:

metric-type external only the metric of the route itself is considered for
comparison

metric-type internal both the metric of the route and the cost to the
router that advertised the route are considered for comparison; this is the IS-IS default For routes redistributed into OSPF:

metric-type 1 cost of the external routes is equal to the sum of all


internal costs and the external cost

metric-type 2 cost of the external routes is equal to the external cost


alone; this is the OSPF default Mode(s): tagValue a tag that is applied to all routes from the source protocol; ranges from 0429496729 * indicates that one or more parameters can be repeated multiple times in a list in the command line

Address Family Configuration, Router Configuration

redistribute isis ip
Description: Syntax: Redistributes routes from one IS-IS routing level into the other. The no version ends the redistribution. [ no ] redistribute isis ip { level-1 into level-2 | level-2 into level-1 } distribute-list accessListName Mode(s): level-1 specifies the redistribution of routes from or into IS-IS level 1 level-2 specifies the redistribution of routes from or into IS-IS level 2 accessListName string of up to 32 alphanumeric characters specifying the IP access list used to filter routes between levels

Router Configuration

366

redundancy force-failover

redundancy force-failover
Description: Forces the system to switch from the primary line module in the specified slot or the primary SRP module to the spare line module or SRP module. This command overrides the redundancy lockout command. With the srp option, the command is equivalent to the srp switch command. There is no no version. redundancy force-failover { slotNumber | srp } Mode(s): slotNumber number of the slot in which the primary line module resides srp indicates that the system should switch from the active to the standby SRP module

Syntax:

Privileged Exec

redundancy lockout
Description: Prevents the system from switching automatically to a spare line module if the primary module fails on a slot. The no version reverts to the default situation, in which the system switches automatically to a spare line module if the primary module fails on a slot. The redundancy force-failover command overrides this command. There is no no version. [ no ] redundancy lockout slotNumber Mode(s): slotNumber number of the slot in which the primary line module resides

Syntax:

Global Configuration

redundancy revert ERX Edge Routers

367

redundancy revert
Description: Forces the system to revert to the primary line module in the specified slot. If you specify a time or time and date, reversion occurs when the primary line module becomes available after that time. Otherwise, reversion occurs immediately. Issuing this command causes reversion once; after reboot, the system returns to the settings configured in the software. The no version has no effect. [ no ] redundancy revert slotNumber [ startTime [ [ startMonth startDay | startDay startMonth ] startYear ] ] Mode(s): slotNumber number of the slot in which the primary line module resides startTime time, in 24-hour format (00:00:00), at which the system reverts to this line module startMonth name of the month in which the system reverts to this line module startDay day of the month on which the system reverts to this line module startYear four-digit year in which the system reverts to this line module

Syntax:

Privileged Exec

redundancy revertive
Description: Enables the system to revert from spare line modules to available primary line modules automatically. The no version reverts to the default situation, in which there is no automatic reversion from spare to primary line modules. [ no ] redundancy revertive [ timeOfDay ] Mode(s): timeOfDay time, in 24-hour format (00:00:00), at which the system reverts to the available primary line modules every day

Syntax:

Global Configuration

refresh-period
Description: Specifies the timeout period in milliseconds between generation of RSVP refresh messages. The no version restores the default value of 30000 milliseconds. refresh-period period no refresh-period Mode(s): period interval from 04294967295

Syntax:

RSVP Profile Configuration

368

reload

reload
Description: Syntax: Reloads the operating system in the designated interval or at the designated time. There is no no version. reload [ force [ reason ] | in inTime [ reason ] | at atTime [ month day | day month ] [ reason ] | cancel ] force prompts for confirmation to reboot if the system is in certain states, such as during the synchronization of SRP modules, that could lead to a loss of configuration data or an NVS corruption. reason reason for the reload (1255 characters long) inTime schedules a reload of the software to take place in the specified minutes or hours and minutes ([ hh: ] mm). If the system is in a state that could lead to a loss of configuration data or an NVS corruption, it will delay the reboot for one minute, up to five times. If the system cannot reboot on its sixth attempt, the scheduled reboot fails. atTime schedules a reload of the software to take place at the specified time (hh:mm) (using a 24-hour clock). If you specify the month and day, the reload takes place at the specified time and date. If you do not specify the month and day, the reload takes place at the specified time on the current day (if the specified time is later than the current time) or on the next day (if the specified time is earlier than the current time). Specifying 00:00 schedules the reload for midnight. If the system is in a state that could lead to a loss of configuration data or an NVS corruption, it will delay the reboot for one minute, up to five times. If the system cannot reboot on its sixth attempt, the scheduled reboot fails. month name of the month (any number of characters in a unique string) day number of the day of the month, in the range 131 cancel cancels a scheduled reload

Mode(s):

Privileged Exec

reload slot
Description: Syntax: Reboots the module in the selected slot. There is no no version. reload slot slotNumber [ force ] reason reason for the reload (1255 characters long) slotNumber number of a selected slot in the router force prompts for confirmation to reboot if the system is in certain states, such as during the synchronization of SRP modules, that could lead to a loss of configuration data or an NVS corruption.

Mode(s):

Privileged Exec

remote host ERX Edge Routers

369

remote host
Description: Syntax: Defines an L2TP host profile. Accesses the L2TP Destination Profile Host Configuration mode. The no version removes an L2TP host profile. remote host { hostname | default } no remote host { hostname | default } Mode(s): hostname name the LAC must supply in the hostname AVP of the receive SCCRQ; can be up to 64 characters in length (no spaces) default allows the LAC to use any hostname in the hostname AVP

L2TP Destination Profile Configuration

remote-loopback
Description: Enables the acceptance of remote loopback requests on a T1 line on a CT1 line module. The no version restores the default value, which is to reject remote loopback requests. [ no ] remote-loopback Controller Configuration

Syntax: Mode(s):

remote-neighbor
Description: Syntax: Configures an OSPF, PIM, or RIP remote neighbor. The no version removes the remote neighbor and any attributes configured for the neighbor. For OSPF: [ no ] remote-neighbor ipAddress area { areaId | areaIdInt } For PIM [ no ] remote-neighbor ipAddress sparse-mode For RIP: [ no ] remote-neighbor ipAddress Mode(s): ipAddress IP address identifying the remote neighbor areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value 04294967295

Router Configuration

370

rename

rename
Description: Renames a local file. There is no no version. Note: You cannot change the extension of a file, for example, .scr. Syntax: rename oldFileName newFileName Mode(s): oldFileName file to rename newFileName new filename

Privileged Exec

request-data-size
Description: Syntax: Sets the request payload data size. The no version restores the default value. request-data-size requestSizeValue no request-data-size Mode(s): requestSizeValue size of the data in bytes in the request packets payload; the default is 1 byte

RTR Configuration

reserve
Description: Syntax: For DHCP local server clients, reserves an IP address for a specific MAC address. The no version removes the reservation. reserve ipAddress macAddress no reserve ipAddress ipAddress IP address to reserve macAddress MAC address for which the IP address is reserved. Mode(s): Pool Configuration

retransmit
Description: Specifies maximum number of times the system retransmits a RADIUS packet to an authentication or accounting server. The no version restores the default value. retransmit retries no retransmit Mode(s): retries number of retries in the range 010. The default is 3.

Syntax:

Radius Configuration

retransmit-interval ERX Edge Routers

371

retransmit-interval
Description: Specifies the time between LSA retransmissions for the OSPF remote-neighbor interface when an acknowledgment for the LSA is not received. The no version restores the default value. retransmit-interval retransInterval no retransmit-interval Mode(s): retransInterval a number in the range 03600 seconds; default value is 5 seconds

Syntax:

Remote Neighbor Configuration

rib-out disable
Description: Disables storage of routes to the Adj-RIBs-Out tables (disables rib-out) for all BGP peers. Storage is disabled by default. The no version enables the route storage. The default version removes the explicit global configuration for all peers and reestablishes inheritance of the feature configuration. Note: If you enable or disable rib-out globally and this action changes the current configuration, all sessions are automatically bounced. Syntax: Mode(s): [ no | default ] rib-out disable Router Configuration

372

route-map

route-map
Description: Specifies a route map for DVMRP or RIP, or defines the conditions for applying routing policies to filter or modify routes redistributed into or propagated by a routing protocol. The no version deletes the route map. Specifying for DVMRP or RIP: [ no ] route-map mapTag [ interfaceType interfaceSpecifier ] mapTag a string of up to 32 alphanumeric characters. interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Syntax:

Defining a route map: [ no ] route-map mapTag [ permit | deny ] [ sequence ] mapTag string of up to 32 alphanumeric characters. The redistribute Router Configuration command uses this string to reference this route map. Multiple route maps may share the same map tag. permit if the match criteria are met for this route map and permit is specified, the route is redistributed as controlled by the set actions. deny if the match criteria are met for the route map and deny is specified, the route is not redistributed, and no further route maps sharing the same map tag are examined. sequence number in the range 065535 that indicates the position a new route map is to have in the list of route maps already configured with the same map tag. If given with the no version of this command, it specifies the position of the route map that should be deleted.

Mode(s):

Global Configuration

router bgp
Description: Configures the BGP routing process. Allows you to set up a distributed routing core that automatically guarantees the loop-free exchange of routing information between ASs. The no version removes a routing process. [ no ] router bgp autonomousSystem Mode(s): autonomousSystem number in the range 14294967295; the AS number that identifies the router to other BGP routers

Syntax:

Global Configuration

router dvmrp ERX Edge Routers

373

router dvmrp
Description: Syntax: Mode(s): Creates and enables DVMRP on a virtual router; accesses DVMRP router configuration mode. The no version deletes DVMRP from a virtual router. [ no ] router dvmrp Global Configuration

router igmp
Description: Syntax: Description: Creates and enables IGMP on a virtual router; accesses IGMP router configuration mode. The no version disables IGMP on a virtual router. [ no ] router igmp Global Configuration

router isis
Description: Syntax: Enables the IS-IS routing protocol and specifies an IS-IS process for IP. The no version disables IS-IS routing. [ no ] router isis [ tag ] tag meaningful name for a routing process; name must be unique among all IP router processes for a given router; if not specified, a null tag is assumed, and the process is referenced with a null tag

Mode(s):

Global Configuration

router ospf
Description: Syntax: Configures an OSPF routing process. The no version disables an OSPF routing process. [ no ] router ospf processId [ vrf vrfName ] Mode(s): processId number in the range 165535 that identifies the OSPF process vrfName name of the VRF; string of 132 alphanumeric characters; available only in virtual router context, not VRF context

Global Configuration

374

router pim

router pim
Description: Syntax: Mode(s): Creates and enables PIM on a virtual router; accesses PIM router configuration mode. The no version deletes PIM from a virtual router. [ no ] router pim Global Configuration

router rip
Description: Syntax: Mode(s): Enables RIP routing protocol configuration. The no version deletes the RIP process and removes the configuration from the system. [ no ] router rip Global Configuration

route-target
Description: Creates or adds to a list of VPN extended communities used to determine which routes are imported by a VRF. If at least one route target in the route-target export list contained in the update message advertising a route matches a route target in the route-target import list associated with a VRF, that route is installed in the VRFs forwarding table. The no version removes a route target from the specified list. [ no ] route-target { import | export | both } extendedCommunity import adds the route target to the current VRFs import list; the VRF accepts only routes that have at least one route target that matches a route target in the import list export adds the route target to the current VRFs export list; all routes advertised from this VRF are associated with the export list; at least one route target in the export list must match a route target in the import list of a VRF receiving the route for the route to be installed in the VRFs forwarding table both adds the route target to both the import list and export list of the current VRF extendedCommunity two-part number of the format number1:number2 that identifies an extended community of VPNs where:

Syntax:

number1 an AS number or an IP address number2 a unique integer; 32 bits if number1 is an AS number; 16 bits
if number1 is an IP address Mode(s): VRF Configuration

rtr ERX Edge Routers

375

rtr
Description: Sets the number of the RTR operation to be configured and accesses the RTR Configuration mode. The no version removes all configuration information for a given RTR operation. [ no ] rtr rtrIndex no rtr Mode(s): rtrIndex number of the operation to be configured; there is no default

Syntax:

Global Configuration

rtr reaction-configuration
Description: Syntax: This command has only a no version. The no version clears all traps for all the rtr reaction-configuration command options. no rtr reaction-configuration rtrIndex Mode(s): rtrIndex number of the operation configured

Global Configuration

rtr reaction-configuration action-type


Description: Sets certain actions to occur based on events under control of the RTR. The default is that traps of enabled events are taken. See the rtr reaction-configuration command. There is no no version. rtr reaction-configuration rtrIndex [ action-type actionType ] rtrIndex number of the operation to be configured actionType one of the following types:

Syntax:

none no action; selecting this option clears all traps for the given
operation

trapOnly trap only action; this is the default; enabled events trigger the
trap Mode(s): Global Configuration

376

rtr reaction-configuration operation-failure

rtr reaction-configuration operation-failure


Description: Enables operation-failure reaction. When the type of RTR entry is echo, you can also configure a value that triggers the operation-failure trap. When the type of RTR entry is pathEcho, you cannot configure the operation-failure trap. See the rtr reaction-configuration command. There is no no version. rtr reaction-configuration rtrIndex operation-failure [ operationFailureValue ] Mode(s): rtrIndex number of the operation to be configured operationFailureValue number in the range 015; default is 1

Syntax:

Global Configuration

rtr reaction-configuration path-change


Description: Enables path change reaction. When the type of RTR entry is echo, you cannot configure the path-change trap. See the rtr reaction-configuration command. There is no no version. rtr reaction-configuration rtrIndex path-change Mode(s): rtrIndex number of the operation to be configured; no default

Syntax:

Global Configuration

rtr reaction-configuration test-completion


Description: Syntax: Enables test completion reaction. See the rtr reaction-configuration command. There is no no version. rtr reaction-configuration rtrIndex test-completion Mode(s): rtrIndex number of the operation to be configured

Global Configuration

rtr reaction-configuration test-failure


Description: Enables test failure reaction to occur. When the type of RTR entry is echo, you can also configure a value that triggers the test-failure trap. See the rtr reaction-configuration command. There is no no version. rtr reaction-configuration rtrIndex test-failure [ testFailureValue ] Mode(s): rtrIndex number of the operation to be configured testFailureValue number in the range 015; default is 1

Syntax:

Global Configuration

rtr reset ERX Edge Routers

377

rtr reset
Description: Syntax: Mode(s): Shuts down all RTR operations and clears the RTR configuration for the given virtual router. The no version negates the reset operation. [ no ] rtr reset Global Configuration

rtr schedule
Description: Configures the RTR time parameters for an RTR operation. The no version stops the operation by putting it in the pending state. The no version also resets the restart-time attribute and the life attribute. [ no ] rtr schedule rtrIndex Mode(s): rtrIndex number of the operation to be configured

Syntax:

Global Configuration

rtr schedule life


Description: Syntax: Specifies the length of the test. There is no no version. rtr schedule rtrIndex life lifeValue rtrIndex number of the operation to be configured life value that depends on the type of the RTR entry; not a length of time:

If the type is echo, life relates to the number of operations sent until a
test finishes. The default is 90. If you use 60 operations * 60 seconds, the frequency between each operation that a test completes is 3,600 seconds (one hour).

If the type is pathEcho, life relates to the maximum number of hops used
by the traceRoute trap. The default is 30. If you use 30 (as the maximum hops) * 3 (operations per hop) * 60 seconds frequency between each operation, a test is completed within 3,600 seconds. If a destination is reached in fewer than 30 hops, the test is completed earlier. Mode(s): lifeValue number of operations or maximum TTL in the range 12147483647

Global Configuration

378

rtr schedule restart-time

rtr schedule restart-time


Description: Syntax: Specifies the tests restart in seconds. There is no no version. rtr schedule rtrIndex restart-time restartValue Mode(s): rtrIndex number of the operation to be configured restartValue default is 0; 0 calls for no restart after the test finishes

Global Configuration

rtr schedule start-time


Description: Syntax: Configures an entrys start. There is no no version. rtr schedule rtrIndex start-time { now | pending } Mode(s): rtrIndex number of the operation to be configured now RTR immediately begins to collect information. pending RTR does not begin to collect information. This is the default.

Global Configuration

run
Description: Syntax: Allows you to issue a command that operates in User Exec mode from any CLI mode. There is no no version. run userExecCommand userExecCommand a CLI command that you can issue from User Exec mode Mode(s): All modes

samples-of-history-kept ERX Edge Routers

379

samples-of-history-kept
Description: Syntax: Sets the number of entries kept in the history table for each RTR operation. The no version restores the default value. samples-of-history-kept samples no samples-of-history-kept Mode(s): samples number of entries for each RTR index in the history table. The default is 16 for a pathEcho type and 1 for an echo type.

RTR Configuration

scheduler-profile
Description: Syntax: Configures a scheduler profile. The no version deletes the scheduler profile. [ no ] scheduler-profile schedulerProfileName Mode(s): schedulerProfileName name for the scheduler profile

Global Configuration

scramble
Description: Enables cell scrambling on a T3 Frame interface. The no version disables cell scrambling on the interface. If you issue this command, be sure to issue the dsu mode and dsu bandwidth commands. Otherwise, the interface may drop packets unexpectedly. [ no ] scramble Controller Configuration

Syntax: Mode(s):

sdh
Description: Syntax: Mode(s): Specifies that the interface supports SDH. The no version restores SONET operation on this interface. [ no ] sdh Controller Configuration

380

send

send
Description: Sends a message to one or more terminals. If you begin the message on the same line as the command, the first character is a delimiter; you must end the message with the same delimiter. If you begin the message on another line, you must enter <Ctrl+Z> to end the message. There is no no version. send { * | absoluteLineNumber | console consoleLineNumber | vty vtyLineNumber } [ message ] Mode(s): * sends the message to all terminals absoluteLineNumber line number of a terminal to which the message is sent consoleLineNumber line number of a console to which the message is sent vtyLineNumber line number of a vty to which the message is sent message text of message to send; a string of up to 1023 alphanumeric characters

Syntax:

Privileged Exec

send-more-specific-routes-disable
Description: Specifies that RIP does not send a more-specific route if it has a less-specific route with any metric. The no version restores the default condition, wherein RIP always sends a more-specific route even if a less-specific route with a metric is available. [ no ] send-more-specific-routes-disable Router Configuration

Syntax: Mode(s):

send version
Description: Restricts the RIP version that the system can send on a remote-neighbor interface. The no version sets the remote-neighbor interface back to the default value, sending only RIP version 1. send version [ 1 | 2 | off ] no send version [ 1 | 2 | off ] Mode(s): 1 specifies RIP version 1 only 2 specifies RIP version 2 only off turns reception off

Syntax:

Remote Neighbor Configuration

server-address ERX Edge Routers

381

server-address
Description: Syntax: Sets the DHCP server address that is sent to DHCP clients. The no version removes server address. server-address address no server-address [ address ] address DHCP server address Mode(s): Pool Configuration

server-name
Description: Syntax: Specifies the hostname expected from the L2TP LNS or the L2F home gateway when you set up a tunnel. The no version removes the server name. server-name serverName no server-name Mode(s): serverName hostname; can be up to 64 characters in length (no spaces)

Domain Map Tunnel Configuration

service ctrl-x-reboot
Description: Enables the <Ctrl+X> key combination to reboot the system at all times, except that the key combination has no effect if you are accessing the system via a Telnet session. The no version restores the default condition, disabled. [ no ] service ctrl-x-reboot Global Configuration

Syntax: Mode(s):

service dhcp-local
Enables the DHCP local server. The no version disables the DHCP local server, and does not save the previous settings. [ no ] service dhcp-local [ equal-access | standalone ] equal-access enables the DHCP local server to work with the SDX (formerly SSC) or HTTP local server for non-PPP equal access, the default option. standalone configures the system as a DHCP local server

Syntax:

Mode(s):

Global Configuration

382

service manual-commit

service manual-commit
Description: Stops the system from automatically saving configuration changes to nonvolatile storage. Places the system into Manual Commit mode; this mode has no effect on the CLI prompt. Causes an immediate save of configuration data not yet committed to nonvolatile storage. The no version returns the ERX system to Automatic Commit mode (with no effect on the CLI prompt). [ no ] service manual-commit Global Configuration

Syntax: Mode(s):

service password-encryption
Description: Directs the system to encrypt passwords that are saved in the configuration file. The command should be used as a simple cipher to prevent unauthorized users from viewing passwords. [ no ] service password-encryption Global Configuration

Syntax: Mode(s):

service timestamps
Description: Syntax: Formats timestamps associated with log messages. The no version removes timestamps from log messages. service timestamps log datetime [ show-timezone [ localtime ] ] no service timestamps [ log ] Mode(s): log indicates that a timestamp will appear on log messages datetime displays the date and time show-timezone displays the time zone localtime displays the timestamp in local time

Global Configuration

service unattended password-recovery


Description: Allows you to delete all passwords and secrets from the console without being physically present at the router. When executed, this command changes the behavior of the erase secrets command, which will not take any parameters and will not be available through a vty session. The no version reverts erase secrets to factory default settings. [ no ] service unattended-password-recovery Global Configuration

Syntax: Mode(s):

set as-path prepend ERX Edge Routers

383

set as-path prepend


Description: Syntax: Prepends one or more AS numbers or a list of AS numbers to the AS path for BGP routes. The no version removes the set clause from a route map. set as-path prepend { list listName | asPathNumber [ asPathNumber ] * } no set as-path prepend listName name of a list of AS path numbers; string of up to 32 characters asPathNumber a number in the range 165535 that appends the string following the keyword prepend to the as-path of the route that is matched by the route map. Applies to outbound BGP route maps. * indicates that one or more parameters can be repeated multiple times in a list in the command line

Mode(s):

Route Map Configuration

set automatic-tag
Description: Syntax: Mode(s): Automatically computes the tag value. The no version removes the set clause from a route map. [ no ] set automatic-tag Route Map Configuration

set comm-list delete


Description: Removes communities specified by the community list from the community attribute of routes matching the route map. The no version removes the set clause from a route map. set comm-list { communityList | regularExpression } delete no set comm-list Mode(s): communityList community list identifier; a string of up to 32 characters regularExpression the regular expression that matches the community

Syntax:

Route Map Configuration

384

set community

set community
Description: Sets the BGP community attribute to one or more community numbers or a list of community numbers. The no version removes the set clause from a route map. set community { list communityListName [ additive ] | none } set community { communityNumber | knownCommunity | asCommunityNumber } [ communityNumber | knownCommunity | asCommunityNumber ]* [ additive ] no set community communityListName name of a community; a string of up to 32 characters additive adds the community number to the community list none removes the community attribute communityNumber a number in the range 1 4294967295 that specifies the community number knownCommunity any of the following well-known communities; the internet community is not an option:

Syntax:

local-as prevents advertisement outside of the local AS no-advertise prevents advertisement to any peer no export prevents advertisement beyond the BGP confederation
boundary asCommunityNumber AS community number in the format AA:NN:

AA number in the range 165535 that identifies an AS NN number in the range 165535 that uniquely identifies a community
within an AS Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line

Route Map Configuration

set dampening ERX Edge Routers

385

set dampening
Description: Enables route flap dampening and optionally specifies dampening parameters for routes passing through the route map. The no version removes the set clause from a route map. set dampening halfLife reuse suppress maxSuppressTime [ halfLifeUnreachable ] no set dampening halfLife half-life period in minutes in the range 145. The default is 10. When a BGP route has been assigned a penalty, the penalty is decreased by half after each half-life period. Each time a route flaps, the router configured for route flap dampening assigns the route a penalty. Penalties are cumulative. BGP stores the penalty for all reachable and unreachable routes that have experienced recent flaps. reuse reuse limit in the range 120000. The default is 750. As the penalty for a flapping route decreases and falls below this reuse limit, the route is unsuppressed. That is, the route is added back to the BGP table and used for forwarding. suppress suppress limit in the range 120000. A route is suppressed when its penalty exceeds this limit. The default value is 2000. maxSuppressTime maximum suppression time in minutes in the range 1255. This value is the maximum amount of time a route can be suppressed. The default value is 60. halfLifeUnreachable the alternate half-life period in minutes for unreachable routes; a number in the range 145. The default value is 20. If you do not specify this value, the system uses the same half-life period for both reachable and unreachable routes.

Syntax:

Mode(s):

Route Map Configuration

386

set dhcp relay

set dhcp relay


Description: Adds a new DHCP/BOOTP server. The no version disables the specified server or disables the addition of the relay agent information. If you specify the no version, all DHCP servers are deleted from the list. set dhcp relay { dhcpServerAddress | agent [ circuit-ID-only | remote-ID-only ] | discard-access-routes { interface interfaceType interfaceSpecifier | all } no set dhcp relay { [ dhcpServerAddress | agent } Mode(s): dhcpServerAddress IP address of the DHCP server agent adds the agent information suboptions (circuit-ID and remote-ID) to every packet the system relays from a DHCP client to a DHCP server circuit-ID-only specifies circuit ID suboption only remote-ID-only specifies remote-ID suboption only discard-access-routes removes existing access routes for an interface from the routing table and from NVS interfaceType interface type whose access routes should be discarded; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Syntax:

Global Configuration

set distance
Description: Configures an administrative distance to apply to routes that match the route map. The no version removes the set clause from a route map.
Note: Setting a distance in a route map is useful only when it is set on a route being installed into the routing table. Distance is used to establish preference between routes to the same prefix to identify the best route to that prefix. Setting distance is any other circumstance has no effect.

Syntax:

set distance distance no set distance distance administrative distance, ranging from 0255

Mode(s):

Route Map Configuration

set extcommunity ERX Edge Routers

387

set extcommunity
Description: Syntax: Sets the BGP extended communities attribute. The no version removes the set clause from a route map. set extcommunity { rt | soo } extCommValue [ extCommValue ]* [ additive ] no set extcommunity rt specifies a route-target extended community, which consists of one or more routers that can receive a set of routes advertised by BGP that carry the extended-community attribute soo specifies a site-of-origin extended community, which consists of one or more routers that inject into BGP a set of routes that carry the extended-community attribute extCommValue number identifying the extended community in one of the following formats:

AS:nn 16-bit autonomous system number followed by a 32-bit integer AS:nn 32-bit autonomous system number followed by a 16-bit integer ipAddress:nn IP address followed by a 16-bit integer
extCommValue number identifying the extended community; in the format AA:NN, where any of the following is true:

AA is an AS number in the range 165535 and NN is an integer in the


range 14294967295; for example, 320:72358

AA is an AS number in the range 14294967295 and NN is an integer in


the range 165535; for example, 84511:45

AA is a dotted decimal IP address and NN is an integer in the range


165535; for example, 10.10.21.5:1256 * indicates that one or more parameters can be repeated multiple times in a list in the command line additive adds the specified extended communities to any previously configured for the attribute; if omitted, the specified extended communities replace any previously configured for the attribute

Mode(s):

Route Map Configuration

388

set ip next-hop

set ip next-hop
Description: Syntax: Indicates where to send packets that pass a match clause of a route map for policy routing. The no version removes the set clause from a route map. set ip next-hop { ipAddress | interface interfaceType interfaceSpecifier | peerAddress } no set ip next-hop [ ipAddress | peerAddress] ipAddress IP address of next hop to which packets are sent; does not need to be an adjacent router interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide peerAddress on outbound route maps, disables the next hop calculation by setting the next hop to the IP address of the BGP speaker; on inbound route maps, overrides any third-party next hop configuration by setting the next hop to the IP address of the peer

Mode(s):

Route Map Configuration

set level
Description: Syntax: Specifies where to import routes when all of a route maps match criteria are met. The no version removes the set clause from a route map. set level atLevel no set level atLevel specifies one of the following levels:

level-1 imports routes into a level 1 area level-1-2 imports routes into a level 1 and a level 2 area level-2 imports routes into a level 2 subdomain stub-area imports routes into an OSPF NSSA area backbone imports routes into an OSPF backbone area
Mode(s): Route Map Configuration

set local-preference ERX Edge Routers

389

set local-preference
Description: Syntax: Specifies a preference value for the AS path. The no version removes the set clause from a route map. set local-preference value no set local-preference Mode(s): value preference number in the range 04294967295

Route Map Configuration

set metric
Description: Modifies the metric value (for BGP, the MED) for a route that matches the route map by applying a relative or absolute metric. The no version removes the set clause from a route map. Note: You cannot have an absolute and relative metric within the same route map sequence. Issuing either command overrides any previously configured metric in the route map. Syntax: set metric [ signrelValue absValue ] no set metric sign one of the following values:

+ specifies that the value is added to the metric for routes matching the
route map; immediately precedes the metric value with no intervening space

- specifies that the value is subtracted from the metric for routes
matching the route map; immediately precedes the metric value with no intervening space Mode(s): relValue number of a single standard access list; string up to 32 characters (a number in the range 04294967295) absValue number in the range 0294967295

Route Map Configuration

390

set metric-type

set metric-type
Description: Syntax: Sets the metric type for the destination routing protocol. The no version removes the set clause from a route map. set metric-type atMetric no set metric-type atMetric specifies the metric type from the following choices: For BGP:

external reverts to the normal BGP rules for propagating the MED; this
is the BGP default

internal sets the MED of a received route that is being propagated to


an external peer equal to the IGP cost of the indirect next hop For IS-IS:

external only the metric of the route itself is considered for comparison internal both the metric of the route and the cost to the router that
advertised the route are considered for comparison; this is the IS-IS default For OSPF:

1 cost of the external routes is equal to the sum of all internal costs
and the external cost

2 cost of the external routes is equal to the external cost alone; this is
the OSPF default Mode(s): Route Map Configuration

set origin
Description: Syntax: Sets the BGP origin of an advertised route. The no version removes the set clause from a route map. set origin atOrigin no set origin atOrigin specifies the origin from the following choices:

egp remote exterior gateway protocol igp local interior gateway protocol incomplete origin unknown
Mode(s): Route Map Configuration

set-overload-bit ERX Edge Routers

391

set-overload-bit
Description: Configures the system in IS-IS to signal other routers not to use it as an intermediate hop in their SPF calculations. The no version removes the designation. By default, the overload bit is not set. set-overload-bit [ on-startup period ] no set-overload-bit on-startup specifies that the overload bit is set for a period of time after system reboot. Use to prevent other routers from routing through the system before it is fully operational. The overload bit is cleared when the period expires. period duration in seconds of period after system reboot that overload bit is set; ranges from 586400 seconds

Syntax:

Mode(s):

Router Configuration

set route-type
Description: Syntax: Sets routes of the specified type. The no version removes the set clause from a route map. set route-type { internal | internal-intra | internal-inter | external } no set route-type Mode(s): internal internal route (including OSPF intra-area and interarea) internal-intra intra-area route internal-inter interarea route external external route (BGP and OSPF type 1/2)

Route Map Configuration

set tag
Description: Syntax: Sets the tag value of the destination routing protocol. The no version removes the set clause from a route map. set tag tagValue no set tag Mode(s): tagValue preference number in the range 04294967295

Route Map Configuration

392

set weight

set weight
Description: Specifies the BGP weight for the routing table. Overrides the weights assigned using the neighbor weight and neighbor filter-list commands. The no version removes the set clause from a route map. [ no ] set weight value no set weight Mode(s): value weight value in the range 04294967295

Syntax:

Route Map Configuration

shaping-rate
Description: Syntax: Sets the shaping rate in bits per second. The no version deletes the shaping rate. shaping-rate shapingRate [ burst burstSize ] no shaping-rate Mode(s): shapingRate range 640001,000,000,000 burstSize range 819232767

Scheduler Profile Configuration

show aaa
Description: Syntax: Displays accounting or authentication information regarding PPP. show aaa { accounting | authentication } ppp default [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show aaa accounting


Description: Syntax: Displays the name of the virtual router for which duplication accounting records are sent to the accounting server. show aaa accounting [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show aaa accounting interval ERX Edge Routers

393

show aaa accounting interval


Description: Syntax: Displays information on the accounting interval. show aaa accounting interval [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show aaa delimiters


Description: Syntax: Displays the domain name and realm name delimiters configured on the system. show aaa delimiters [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show aaa domain-map


Description: Syntax: Displays the mapping between user domains and virtual routers. show aaa domain-map [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show aaa duplicate-address-check


Description: Syntax: Configures AAA to query the routing table for duplicate address assignment before granting access. show aaa duplicate-address-check [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show aaa model


Description: Syntax: Displays AAA model. show aaa model [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

394

show aaa name-servers

show aaa name-servers


Description: Syntax: Displays the IP addresses of the primary and secondary DNS and WINS name servers. show aaa name-servers [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show aaa profile


Description: Syntax: Displays AAA profile names and the actions associated with each specified AAA profile name. show aaa profile [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show aaa statistics


Description: Syntax: Displays the authentication and authorization statistics. show aaa statistics [ delta ] [ filter ] Mode(s): delta displays baselined statistics filter see Filtering show Commands in About This Guide

Privileged Exec

show aaa subscriber per-port-limit


Description: Syntax: Displays the number of active subscribers on each interface. show aaa subscriber per-port-limit [ filter ] filter see Filtering show Commands in About This Guide Mode(s): Privileged Exec

show aaa subscriber per-vr-limit


Description: Syntax: Displays the number of active subscribers on each virtual router. show aaa subscriber per-vr-limit [ filter ] filter see Filtering show Commands in About This Guide Mode(s): Privileged Exec

show aaa timeout ERX Edge Routers

395

show aaa timeout


Description: Syntax: Displays information on the idle or session timeout. show aaa timeout [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show aaa tunnel-parameters


Description: Syntax: Displays default tunnel parameters that are configured for tunnel definitions. show aaa tunnel-parameters [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show access-list
Description: Syntax: Displays access list information about the access list specified. show [ ip ] access-list [ accessListName ] [ detail ] [ filter ] Mode(s): accessListName string of up to 32 alphanumeric characters detail displays detailed information about the access list filter see Filtering show Commands in About This Guide

Privileged Exec

show aps
Description: Syntax: Displays information about APS/MSP interfaces or groups. show aps [ group [ groupNumber ] ] groupNumber number of the APS/MSP group Mode(s): Privileged Exec

396

show arp

show arp
Description: Syntax: Displays information about the Address Resolution Protocol cache. show [ ip ] arp [ vrfName ] [ ipAddress ] [ interfaceType interfaceSpecifier ] [ all ] [ filter ] Mode(s): vrfName name of the VRF ipAddress ARP entries matching this IP address are displayed interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide all displays all ARP entries filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show atm aal5 interface


Description: Syntax: Displays configuration information about an ATM AAL interface. show atm aal interface atm interfaceSpecifier [ filter ] Mode(s): atm specify an ATM interface interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

Privileged Exec, User Exec

show atm interface ERX Edge Routers

397

show atm interface


Description: Syntax: Displays configuration information about an ATM interface or a brief description of all ATM (major) interfaces configured in the system. show atm interface {atm interfaceSpecifier [ signalling-stats ] | brief } [ delta ] [ filter ] atm specifies an ATM interface interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide; subinterfaces are not supported by the syntax signalling-stats displays signalling statistics for the ATM interface delta displays baselined statistics brief displays the status and number of configured VCs for all ATM interfaces configured in the system filter see Filtering show Commands in About This Guide

Mode(s):

Privileged Exec, User Exec

show atm map


Description: Syntax: Displays the list of all configured ATM static maps to remote hosts on an ATM network. show atm map [ mapName ] [ brief ] [ filter ] Mode(s): mapName name of the map list to display information for brief display information in a condensed format filter see Filtering show Commands in About This Guide

Privileged Exec, User Exec

show atm oam


Description: Syntax: Displays F4 OAM statistics. show atm oam interfaceSpecifier [ vpi ] [ segment | end-to-end ] [ filter ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vpi virtual path identifier segment displays information on segment F4 OAM circuits end-to-end displays information on end-to-end F4 OAM circuits filter see Filtering show Commands in About This Guide

Privileged Exec, User Exec

398

show atm ping

show atm ping


Description: Displays a summary of the results (number of ping cells sent, number of ping cells received, success rate) of the ping operation. These results are overwritten when a new ATM ping is invoked for the circuit. If you do not specify any of the options, the command shows ping entries for the entire system. show atm ping [atm interfaceSpecifier [ vpi vci ] ] [ filter ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vpi shows details of the last ping atm command on this VPI vci shows details of the last ping atm command on this VCI filter see Filtering show Commands in About This Guide

Syntax:

Privileged Exec, User Exec

show atm subinterface


Description: Syntax: Displays current state of all ATM subinterfaces you specify. show atm subinterface [ atm interfaceSpecifier ] [ summary interfaceType interfaceSpecifier ] [ filter ] Mode(s): atm specifies an ATM interface interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide summary specifies that summary information is displayed filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show atm vc ERX Edge Routers

399

show atm vc
Description: Syntax: Displays a summary of all configured ATM virtual circuits. show atm vc [ interfaceType interfaceSpecifier ] [ vpi vpi ] [ category categoryType ] [ status statusType ] [ delta ] [ filter ] interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vpi displays VCs on a specific VPI category displays VCs that have a specific service category categoryType one of the following:

cbr nrt-vbr rt-vbr ubr ubr-pc


Mode(s): status displays VCs with a certain status statusType specify up or down delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show atm vc atm


Description: Syntax: Displays OAM statistics on a VC. You can specify the circuit to display by entering the VCD or the VPI and VCI. show atm vc atm interfaceSpecifier { vcd | vpi-vci vpi vci } [ delta ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vcd specify the circuit by entering the VCD vpi-vci specify the circuit by entering the VPI and VCI delta displays baselined statistics

User Exec, Privileged Exec

400

show atm vp-tunnel

show atm vp-tunnel


Description: Syntax: Displays a summary of all configured ATM virtual path tunnels. show atm vp-tunnel [ interfaceSpecifier ] [ filter ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show bandwidth oversubscription


Description: Syntax: Displays the bandwidth oversubscription status. show bandwidth oversubscription [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec, User Exec

show boot
Description: Syntax: Displays the configuration and system settings that are used at startup. show boot [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show bulkstats
Description: Syntax: Displays bulkstats statistical information. show bulkstats [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show bulkstats collector description


Description: Syntax: Displays the collectors file description. show bulkstats collector description [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show bulkstats collector interval ERX Edge Routers

401

show bulkstats collector interval


Description: Syntax: Displays the time for which the system transfers data to the receivers. show bulkstats collector interval [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show bulkstats collector max-size


Description: Syntax: Displays the maximum size of the bulkstats file. show bulkstats collector max-size [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show bulkstats collector transfer-mode


Description: Syntax: Displays the way in which the system transfers data to the receivers. show bulkstats collector transfer-mode [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show bulkstats interface-type


Description: Syntax: Displays information on the collection of statistical data for the particular interface type (for example, ATM). show bulkstats interface-type [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show bulkstats receiver


Description: Syntax: Displays the configuration of the receivers remote files. show bulkstats receiver [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

402

show bulkstats schema

show bulkstats schema


Description: Syntax: Use to display data on the selected schema. show bulkstats schema [ filter ] Mode(s): filter if-stack or if-stats; see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show bulkstats statistics


Description: Syntax: Displays information on statistics counters. show bulkstats statistics [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show bulkstats traps


Description: Syntax: Displays information on bulkstats traps. show bulkstats traps [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show cac
Description: Syntax: Displays global call admission control configuration. show cac [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show cac interface ERX Edge Routers

403

show cac interface


Description: Syntax: Displays all interfaces on which TE accounting is configured, or information only for the specified interface. show cac interface [ brief | interfaceType interfaceSpecifier ] [ filter ] Mode(s): brief displays summary information about the interface interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show cbf connection


Description: Syntax: Displays all configured CBF connections. show cbf connection [ all ] [ filter ] Mode(s): all does not combine parallel unidirectional connections filter see Filtering show Commands in About This Guide

Privileged Exec

show cbf interface


Description: Syntax: Displays status information and statistics about CBF interfaces. show cbf interface [ brief | full ] [ interfaceType [ interfaceSpecifier ] ] [ delta ] [ filter ] Mode(s): brief displays only an interfaces name and up/down status full displays an interfaces name, full status information, and statistics If you do not specify the brief or full keyword, the software displays an interfaces name and full status. interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide delta displays baselined statistics filter see Filtering show Commands in About This Guide

Privileged Exec

404

show classifier-list

show classifier-list
Description: Syntax: Displays information about classifier control lists. show classifier-list [ classifierName [ classifierNumber ] ] [ brief | detailed ] [ filter ] Mode(s): classifierName classifier list name classifierNumber classifier list number brief display information in a condensed format detailed display detailed information filter specify a CLI output filter. See Filtering show Commands in About This Guide.

Privileged Exec

show clns
Description: Syntax: Displays information about the CLNS network show clns [ es-neighbors | is-neighbors ] [ interfaceType interfaceSpecifier ] [ detail ] [ filter ] es-neighbors displays IS-IS related information for IS-IS end-system adjacencies. Neighbor entries are sorted according to the area in which they are located. is-neighbors displays IS-IS related information for IS-IS intermediate-system adjacencies. Neighbor entries are sorted according to the area in which they are located. interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide detail displays area addresses and IP addresses; if not specified, a summary display is provided filter see Filtering show Commands in About This Guide

Mode(s):

User Exec, Privileged Exec

show clns interface ERX Edge Routers

405

show clns interface


Description: Syntax: Lists the Connectionless Network Service information about each interface. show clns interface [ interfaceType interfaceSpecifier ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show clns neighbors


Description: Syntax: Displays both ES and IS neighbors. show clns neighbors [ interfaceType interfaceSpecifier ] [ detail ] [ filter ] interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide detail when specified, the area addresses advertised by the neighbor in the hello messages are displayed; otherwise, a summary display is provided filter see Filtering show Commands in About This Guide

Mode(s):

User Exec, Privileged Exec

show clns protocol


Description: Syntax: Lists the protocol-specific information for each IS-IS routing process in the router. show clns protocol [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

406

show clns traffic

show clns traffic


Description: Syntax: Lists the IS-IS protocol statistics seen by the specified system. show clns traffic [ detail | interfaceType interfaceSpecifier ] [ delta ] [ filter ] Mode(s): detail when specified, interface statistics are displayed; otherwise, only global statistics are displayed interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show clock
Description: Syntax: Displays the systems clock source. show clock [ detail ] [ filter ] Mode(s): detail provides expanded information about the clock settings, rather than a summary filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show columns
Description: Displays configuration information of bridged Ethernet over ATM, IP over ATM, PPP, or PPPoE static and dynamic interface columns. It is designed to categorize interface subscribers into PPP, PPPoE, bridged, or routed. show columns User Exec, Privileged Exec

Syntax: Mode(s):

show configuration ERX Edge Routers

407

show configuration
Description: Displays the current (running) configuration of the system, a specified virtual router, or a specified interface within the current VR context. You can create a configuration script from this output by saving it as a file with the .scr extension. This command was formerly documented as show config; that abbreviation is still supported. show configuration [ [ interface interfaceType interfaceSpecifier ] | [ virtual-router routerName ] [ exclude-category interfaceType ]* ] [ include-defaults ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide routerName name of the virtual router exclude-category excludes information associated with a particular type of interface include-defaults includes commands that set default values for various parameters filter see Filtering show Commands in About This Guide

Syntax:

Privileged Exec

show controllers e3
Description: Syntax: Displays information about E3 controller interfaces. show controllers e3 { interfaceSpecifier [ brief | all | summary ] | serial [ interfaceSpecifier ] } [ filter ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief abbreviated display of E3 controller information all detailed display of all available E3 controller information summary displays link status summary serial displays information about serial interfaces filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

408

show controllers sonet

show controllers sonet


Description: Syntax: Displays the statistics or the configuration for the different layers of channelized SONET and SDH interfaces. show controllers sonet { [ brief ] | slot/port [ :controllerSpecifier ] { [ configuration ] | layerType [ interval | total [ delta ] ] | controllerType [ interval ] | all [ total [ delta ] ] } } [ filter ] brief displays a summary of information about all controllers slot number of the chassis slot of the line module in the range 013 (ERX-1400 series) and 06 (ERX-700 series) port port number on the I/O module There is no controllerSpecifier for a section or line. For a path, controllerSpecifier is the number of the path. For a tributary, controllerSpecifier has the format pathChannel [ /pathPayload ] [ /tributaryGroup ] [ /tributaryNumber ] For an E1 or a DS1 controller, controllerSpecifier has the format pathChannel [ /pathPayload ] [ /tributaryGroup ] [ /tributaryNumber ] [ /channelGroup ] For a DS3 controller, controllerSpecifier has the format pathChannel ds3-channel-number [ ds1-channel-number ] [ subchannelNumber ]

pathChannel number of the path pathPayload number of the payload within the path. In SONET mode,
pathPayload is always 1. In SDH mode, pathPayload is the number of the TUG-3 group.

tributaryGroup number of the tributary group within the path. In


SONET mode, tributary group is the number of the VT group. In SDH mode, tributary group is the number of the TUG-2 group.

tributaryNumber number of the tributary within the group. In SONET


mode, tributaryNumber is the number of the VT. In SDH mode, tributaryNumber is the number of the TUG-1 group or tributary unit.

channelGroup number of the channel group ds3-channel-number number of the ds3 channel ds1-channel-number number of the ds1 channel in the range 128 subchannelNumber number of the subchannel in the range 124
configuration displays the configuration of each controller at the specified level and above layerType type of SONET/SDH layer

section section layer of an interface line line layer of an interface

show controllers sonet ERX Edge Routers

409

path SONET or SDH path


interval number of 15-minute intervals over which the system monitors information; a value between 1 and 96. The default is the current interval, number 1. controllerType type of interface or channel

tributary SONET or SDH virtual tributary e1 E1 channel over SDH virtual tributary ds1 T1 channel over SONET/SDH virtual tributary ds3 T3 over channelized SONET interface t1 T1 channel on T3 over channelized SONET interface
Mode(s): total displays the MIB statistics for all intervals delta displays baselined statistics for all intervals all shows statistics for all time intervals, rather than statistics for selected time intervals filter see Filtering show Commands in About This Guide

Privileged Exec, User Exec

410

show controllers sonet remote

show controllers sonet remote


Description: Displays information about the statistics on the remote device when MDL is configured on a T3 over channelized SONET interface or FDL is configured on either a T1 channel on a T3 over channelized SONET interface or a T1 over SONET/SDH interface. show controllers sonet { slot/port [ :controllerSpecifier ] remote [ all ] } [ filter ] slot number of the chassis slot of the line module in the range 013 (ERX-1400 series) and 06 (ERX-700 series) port port number on the I/O module There is no controllerSpecifier for a section or line. For a T3 over channelized SONET interface, controllerSpecifier has the format pathChannel ds3-channel-number [ ds1-channel-number ] [ subchannelNumber ] For a T1 over SONET/SDH interface., controllerSpecifier has the format pathChannel [ /pathPayload ] [ /tributaryGroup ] [ /tributaryNumber ] [ /channelGroup ]

Syntax:

pathChannel number of the path pathPayload number of the payload within the path. In SONET mode,
pathPayload is always 1. In SDH mode, pathPayload is the number of the TUG-3 group.

tributaryGroup number of the tributary group within the path. In


SONET mode, tributary group is the number of the VT group. In SDH mode, tributary group is the number of the TUG-2 group.

tributaryNumber number of the tributary within the group. In SONET


mode, tributaryNumber is the number of the VT. In SDH mode, tributaryNumber is the number of the TUG-1 group or tributary unit.

channelGroup number of the channel group ds3-channel-number number of the ds3 channel ds1-channel-number number of the ds1 channel in the range 128 subchannelNumber number of the subchannel in the range 124
Mode(s): all shows statistics for all time intervals, rather than statistics for selected time intervals filter see Filtering show Commands in About This Guide

Privileged Exec, User Exec

show controllers t1 | e1 ERX Edge Routers

411

show controllers t1 | e1
Description: Syntax: Displays information about the CT1 or CE1 controller interfaces. show controllers { t1 | e1 } { { fractional | serial } [ interfaceSpecifier ] | interfaceSpecifier [ brief | all | summary ] } [ filter ] Mode(s): fractional displays information about T1 or E1 fractional interfaces serial displays information about T1 or E1 serial interfaces interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief abbreviated display of CT1 or CE1 controller information all shows statistics for all time intervals, rather than statistics for selected time intervals summary displays link status summary filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show controllers t1 remote


Description: Syntax: Displays information about the T1 statistics at the remote end when you configure FDL on an interface. show controllers t1 interfaceSpecifier remote [ all ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide all shows statistics for all time intervals, rather than statistics for selected time intervals

User Exec, Privileged Exec

412

show controllers t3

show controllers t3
Description: Syntax: Displays information about the T3 controller interfaces. show controllers t3 { interfaceSpecifier [ brief | all | summary ] | { ft1 | serial } [ interfaceSpecifier ] } [ filter ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief abbreviated display of T3 controller information all shows statistics for all time intervals, rather than statistics for selected time intervals summary displays link status summary ft1 displays information about fractional T1 subchannels serial displays information about serial interfaces filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show controllers t3 remote


Description: Syntax: Displays information about the statistics on the remote device when MDL is configured on a T3 interface or FDL is configured on a T1 channel. show controllers t3 interfaceSpecifier remote [ all ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide all shows statistics for all time intervals, rather than statistics for selected time intervals

User Exec, Privileged Exec

show cops info


Description: Syntax: Displays information about SDX (formerly SSC) sessions and about the COPS layer created for SDX sessions. show cops info [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show dhcp ERX Edge Routers

413

show dhcp
Description: Syntax: Displays the IP address(es) and statistics of the configured DHCP server or relay agent. show dhcp { server | relay } [ statistics [ delta ] ] [ filter ] Mode(s): server DHCP Proxy Client configuration relay DHCP Relay configuration statistics displays statistics for the DHCP server or relay agent delta displays baselined statistics filter see Filtering show Commands in About This Guide

Privileged Exec

show dvmrp tunnel


Description: Syntax: Displays information about DVMRP tunnels. show dvmrp tunnel [ detail ] [ state tunnelStatus ] [ tunnelName | [ virtual-router vrName ] ip ipAddress [ tunnelName ] ] [ filter ] detail shows detailed tunnel information about DVMRP tunnels state shows information about tunnels in the specified state tunnelStatus state of the tunnel, as follows:

disabled tunnel is disabled down tunnel is not operational enabled tunnel is enabled lower-down an interface layer below the tunnel is not operational not-present TSM is not in slot up tunnel is operational
Mode(s): tunnelName name of a tunnel for which you want to display information virtual-router displays information about tunnels on the specified virtual router vrName name of a virtual router ip displays information about tunnels associated with the specified IP address ipAddress IP address tunnelName name of a tunnel for which you want to display information filter see Filtering show Commands in About This Guide

Privileged Exec

414

show dvmrp tunnel summary

show dvmrp tunnel summary


Description: Syntax: Displays a summary of information about DVMRP tunnels. show dvmrp tunnel summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show environment
Description: Syntax: Displays information on the systems physical environment, such as power and temperature. show environment [ all ] [ table ] [ filter ] Mode(s): all displays system environment information and temperature status table table displays temperature status table only filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show exception dump


Description: Syntax: Displays the parameters for transferring core dump files. show exception dump [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show fabric-queue
Description: Syntax: Displays forwarded and dropped statistics for the queues in the fabric. show fabric-queue [ traffic-class trafficClassName [ detail ] | [ egress-slot egressSlotNumber | detail | traffic-class trafficClassName egress-slot egressSlotNumber ] [ filter ] Mode(s): trafficClassName name of the traffic class detail provides detailed information about the queues in the fabric egressSlotNumber number of the egress slot filter see Filtering show Commands in About This Guide

Privileged Exec, User Exec

show flash ERX Edge Routers

415

show flash
Description: Syntax: Mode(s): Displays information about the NVS card. show flash Privileged Exec, User Exec

show frame-relay interface


Description: Syntax: Displays Frame Relay statistics for interfaces. show frame-relay interface [ interfaceType interfaceSpecifier ] [ members ] [ brief ] [ delta ] [ filter ] interfaceType one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide

hssi serial pos mlframe-relay tunnel GRE tunnel


interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide members displays the status of MFR links

displays the status of all MFR links if you specify the interface type
mlframe-relay without a specifier for an MFR bundle

displays the status of MFR links in an MFR bundle if you specify that
bundle Mode(s): brief displays a summary of interface information delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

416

show frame-relay lip

show frame-relay lip


Description: Syntax: Displays Link Integrity Protocol state and statistics for a link in an MFR bundle. show frame-relay lip [ interface interfaceType interfaceSpecifier ] [ brief ] [ delta ] [ filter ] interfaceType one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide

serial pos
interfaceSpecifier specifies the location of the interface in the format slot/port:link

slot number of the chassis slot of the line module in the range 013
(ERX-1400 series) and 06 (ERX-700 series)

port port number in the range 02 link number of a link in the range 18
Mode(s): brief summarized format delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show frame-relay lmi ERX Edge Routers

417

show frame-relay lmi


Description: Syntax: Displays state and statistics for the local management interface. show frame-relay lmi [ interface interfaceType interfaceSpecifier ] [ brief ] [ delta ] [ filter ] interfaceType one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide

hssi serial pos mlframe-relay tunnel GRE tunnel


Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief summarized format delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show frame-relay map


Description: Syntax: Displays the current Frame Relay map entries and information about the Frame Relay connections. show frame-relay map [ filter ] Mode(s): filter specifies a CLI output filter. See Filtering Show Commands in About This Guide.

User Exec, Privileged Exec

418

show frame-relay multilinkInterface

show frame-relay multilinkInterface


Description: Syntax: Displays statistics about all MFR interfaces or the specified MFR interfaces. show frame-relay multilinkInterface [ interfaceType interfaceSpecifier ] [ brief ] [ delta ] [ filter ] interfaceType one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide

serial pos
Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief displays a summary of interface information delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show frame-relay pvc


Description: Syntax: Displays permanent virtual circuit statistics for Frame Relay or MFR interfaces. show frame-relay pvc [ dlci | interface interfaceType interfaceSpecifier ] [ brief ] [ delta ] [ filter ] dlci DLCI number to be used on the specified subinterface to identify a virtual circuit in the range 161007 interfaceType one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide

hssi serial pos mlframe-relay tunnel GRE tunnel


Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief displays the abbreviated version of the command output delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show frame-relay subinterface ERX Edge Routers

419

show frame-relay subinterface


Description: Syntax: Displays statistics about Frame Relay subinterfaces. show frame-relay subinterface [ interfaceType interfaceSpecifier ] [ brief ] [ delta ] [ filter ] interfaceType one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide

serial pos mlframe-relay


Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief displays a summary of subinterface information delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show frame-relay summary


Description: Syntax: Scans all defined Frame Relay interfaces and circuits and reports aggregate status counts. show frame-relay summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ftp-server
Description: Syntax: Mode(s): Use to display information about the FTP server. show ftp-server Privileged Exec

420

show gre tunnel

show gre tunnel


Description: Syntax: Displays information about GRE tunnels. show gre tunnel [ detail ] [ state tunnelStatus ] [ tunnelName | [ virtual-router vrName ] ip ipAddress ] [ filter ] detail shows detailed tunnel information about GRE tunnels state shows information about tunnels in the specified state tunnelStatus state of the tunnel, as follows:

disabled tunnel is disabled down tunnel is not operational enabled tunnel is enabled lower-down an interface layer lower below the tunnel is not operational not-present TSM is not in slot up tunnel is operational
Mode(s): tunnelName name of a tunnel for which you want to display information virtual-router displays information about tunnels on the specified virtual router vrName name of a virtual router ip displays information about tunnels associated with the specified IP address ipAddress IP address filter see Filtering show Commands in About This Guide

Privileged Exec

show gre tunnel summary


Description: Syntax: Displays a summary of information about GRE tunnels. show gre tunnel summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show hardware ERX Edge Routers

421

show hardware
Description: Syntax: Displays information about the modules installed in the system. show hardware [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

422

show hdlc interface

show hdlc interface


Description: Syntax: Displays statistics about specified Cisco HDLC interfaces. show hdlc interface [ { dataRestriction }* | full ] [ delta ] [ stateRestriction ] [ { interfaceType } interfaceSpecifier ] [ filter ] dataRestriction specify one or more of the following keywords:

config displays information on the HLDC interface configuration status displays information on the HLDC interface operational status statistics displays information on the HLDC interface statistics
* indicates that one or more parameters can be repeated multiple times in a list in the command line full displays configuration, status, and statistics information; equivalent to specifying config status statistics delta displays baselined statistics stateRestriction specify only one of the following keywords:

open displays an interface that is administratively enabled, which


means that the no ppp shutdown command is operational

closed displays an interface that is administratively disabled, which


means that the ppp shutdown command is operational

up displays an interface that is up, which means that the LCP has
been negotiated

down displays an interface that is down, which means that the LCP
has not been negotiated, the negotiations have failed, or the connection has been terminated

lower-layer-down displays an interface that is not up and is waiting for


the lower layer to come up to initiate negotiations for LCP

not present displays an interface on which traffic cannot flow because


hardware is unavailable Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show host ERX Edge Routers

423

show host
Description: Syntax: Mode(s): Displays the IS-IS name-to-NSAP mappings defined with the clns host command. show host User Exec, Privileged Exec

show hosts
Description: Syntax: Displays a list of configured network servers. show hosts [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show ike policy-rule


Description: Syntax: Mode(s): Displays configuration of IKE phase 1 policy rules. show ike policy-rule Privileged Exec

show ike sa
Description: Syntax: Mode(s): Displays IKE phase 1 SAs running on the system. show ike sa Privileged Exec

424

show interfaces

show interfaces
Description: Syntax: Displays current state of all interfaces or the interface you specify. show interfaces interfaceType interfaceSpecifier [ delta ] [ brief ] [ filter ] interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide; for ATM, subinterfaces are not supported by the syntax delta displays baselined statistics brief displays a brief summary of the interface filter see Filtering show Commands in About This Guide

Mode(s):

User Exec, Privileged Exec

show ip
Description: Syntax: Mode(s): Displays general information for IP. show ip User Exec, Privileged Exec

show ip address
Description: Syntax: Displays interface information for the specified IP address. show ip address [ vrfName ] [ brief | detail ] localAddress Mode(s): vrfName name of the VRF brief displays summary information about the interface detail displays detailed information about the interface localAddress IP address of the specific interface

User Exec, Privileged Exec

show ip as-path-access-list ERX Edge Routers

425

show ip as-path-access-list
Description: Syntax: Displays information about AS-path access lists. show ip as-path-access-list [ accessListName ] [ filter ]

accessListName name of an AS-path access list; string of up to 32


characters

filter see Filtering show Commands in About This Guide


Mode(s): User Exec, Privileged Exec

426

show ip bgp

show ip bgp
Description: Displays filtered information about a specified network, or all networks, in the BGP routing table associated with a specified address family. Only those fields that you specify are displayed, except that the Prefix field is always displayed. Default fields can be set with the default-fields route command. show ip bgp [ addressFamilyIdentifier ] [ network [ networkMask [ longer-prefixes ] ] ] [ fields { fieldOptions } ] [ filter ] addressFamilyIdentifier type of address family, which determines the routing table for which information is displayed, in the format [ ipv4 { unicast | multicast } | vpnv4 { all | vrf vrfName } ]

Syntax:

ipv4 unicast the IPv4 unicast routing table; the default option ipv4 multicast the IPv4 multicast routing table vpnv4 all all IPv4 VPN routing and forwarding instances vpn4 vrf vrfname the IPv4 VPN routing and forwarding instance with
the name vrfname network displays the route that best matches this IP address; if no network is specified, displays the fields for all networks networkMask address mask to be applied to the network address longer-prefixes displays all routes with a prefix that is equal to or more specific than the specified prefix fields displays only the specified fields; the display order of the fields is hard-coded and not affected by the order in which you enter them fieldOptions field(s) to be displayed, in the format all | [ afi | aggregator | as-path | atomic-aggregate | best | clusters | communities | extended-communities | imported | intro | in-label | loc-pref | med | next-hop | next-hop-cost | origin | originator-id | out-label | peer | peer-type | rd | safi | unknown-types | weight ]*

all all available information; not recommended, as this information for


each network does not fit on a single line and is difficult to read

afi address family identifier aggregator AS number and IP address of aggregator as-path AS path through which this route bas been advertised atomic-aggregate whether the atomic aggregate attribute is present best whether this is the best route for the prefix clusters list of cluster IDs through which the route has been advertised communities community number associated with the route extended-communities extended community imported whether the route was imported

show ip bgp ERX Edge Routers

427

intro introductory information about the state of various BGP attributes;


this information is displayed only if you specify this keyword

in-label MPLS label for the route; the label received with incoming
MPLS frames; typically, but not always, this is the label advertised to MP-BGP peers

loc-pref local preference for the route med multiexit discriminator for the route next-hop IP address of the next router that is used when forwarding a
packet to the destination network

next-hop-cost whether the indirect next hop of the route is


unreachable, if not, displays IGP cost to the indirect next hop

origin origin of the route originator-id router ID of the router in the local AS that originated the
route

out-label MPLS label for the route; the label sent with outgoing MPLS
frames; also the label received from MP-BGP peer; typically, but not always, this is the label received from MP-BGP peers

peer IP address of BGP peer from which route was learned peer-type type of BGP peer: internal, external, or confederation rd route distinguisher safi subsequent address family identifier unknown-types attribute codes for unknown path attributes weight weight of the route * indicates that one or more parameters can be repeated multiple
times in a list in the command line Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

428

show ip bgp advertised-routes

show ip bgp advertised-routes


Description: Displays the routes in the Adj-RIBs-Out table of the specified peer or peer group. For peers, displays routes that have been previously advertised to the peer and the attributes for the routes prior to the application of outbound policy. For peer groups, displays routes that will be advertised to the peer group, but includes the full set of route attributes associated with the routes after the application of outbound policy. This command returns an error message unless you first enable rib-out via the no neighbor rib-out disable command or the no rib-out disable command. show ip bgp [ addressFamilyIdentifier ] { neighbors ipAddress | peer-group peerGroupName } advertised-routes [ network [ networkMask [ longer-prefixes ] ] ] [ fields { fieldOptions } ] [ delta ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress address of a neighbor whose routes the system has learned peerGroupName name of a BGP peer group network displays the route that best matches this IP address; if no network is specified, displays the fields for all networks networkMask address mask to be applied to the network address longer-prefixes displays all routes with a prefix that is equal to or more specific than the specified prefix fieldOptions field(s) to be displayed. See the show ip bgp command. delta displays baselined statistics filter see Filtering show Commands in About This Guide

Syntax:

User Exec, Privileged Exec

show ip bgp aggregate-address


Description: Syntax: Displays information about aggregate addresses. show ip bgp [ addressFamilyIdentifier ] aggregate-address [ ipAddress mask ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress aggregate address mask aggregate address mask filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip bgp cidr-only ERX Edge Routers

429

show ip bgp cidr-only


Description: Syntax: Displays information only about routes having nonnatural network masks. show ip bgp [ addressFamilyIdentifier ] cidr-only [ fields { fieldOptions } ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip bgp community


Description: Syntax: Displays routes that belong to the specified BGP community. show ip bgp [ addressFamilyIdentifier ] community { communityNumber | local-as | no-advertise | no-export } [ communityNumber | local-as | no-advertise | no-export ] * [ exact-match ] [ fields { fieldOptions } ] [ filter ] addressFamilyIdentifier type of BGP address family. See the show ip bgp command. communityNumber filters routes according to this community number, specified either as a number in the range 14294967295 or in AA:NN format (autonomous system number:community number); displays only routes that are members of the specified community local-as displays only routes belonging to the local-AS community no-advertise displays only routes belonging to the no-advertise community no-export displays only routes belonging to the no-export community * indicates that one or more parameters can be repeated multiple times in a list in the command line exact-match displays only routes that have exactly the specified communities fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide

Mode(s):

User Exec, Privileged Exec

430

show ip bgp community-list

show ip bgp community-list


Description: Syntax: Displays routes that belong to the BGP community specified by the community list. show ip bgp [ addressFamilyIdentifier ] community-list communityListName [ exact-match ] [ fields { fieldOptions } ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. communityListName filters routes according to community list; displays only routes that are members of a community on the specified list exact-match displays only routes that have exactly the specified communities fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip bgp dampened-paths


Description: Syntax: Displays information on dampened BGP routes. show ip bgp [ addressFamilyIdentifier ] dampened-paths [ fields { fieldOptions } ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip bgp filter-list


Description: Syntax: Displays all routes whose AS path matches the specified AS path access list. show ip bgp [ addressFamilyIdentifier ] filter-list asPathAccessListName [ fields { fieldOptions } ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. asPathAccessListName name of AS path access list to filter routes; displays only routes that have AS paths matching the specified list fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip bgp flap-statistics ERX Edge Routers

431

show ip bgp flap-statistics


Description: Syntax: Displays information about routes that are dampened. show ip bgp [ addressFamilyIdentifier ] flap-statistics [ network [ networkMask ] ] [ filter ] addressFamilyIdentifier type of BGP address family. See the show ip bgp command. network IP address of the network for which you want information displayed; if no network is specified, the fields are displayed for all networks networkMask address mask to be applied to the network address filter see Filtering show Commands in About This Guide

Mode(s):

User Exec, Privileged Exec

show ip bgp inconsistent-as


Description: Syntax: Displays information only about routes with inconsistent AS paths. show ip bgp [ addressFamilyIdentifier ] inconsistent-as [ fields { fieldOptions } ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip bgp neighbors


Description: Syntax: Displays information about the BGP neighbors. show ip bgp [ addressFamilyIdentifier ] neighbors [ ipAddress ] [ delta ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress address of a neighbor whose routes the system has learned delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

432

show ip bgp neighbors dampened-routes

show ip bgp neighbors dampened-routes


Description: Syntax: Displays information about routes with a dampening history for the specified BGP neighbor. show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress dampened-routes [ fields { fieldOptions } ] [ delta ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress address of a neighbor whose routes the system has learned fieldOptions field(s) to be displayed. See the show ip bgp command. delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip bgp neighbors paths


Description: Syntax: Displays path information for the specified BGP neighbor. show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress paths [ regularExpression ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress address of a neighbor whose routes the system has learned regularExpression regular expression to match the AS path. See show ip bgp regexp for information on regular expressions. filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip bgp neighbors received prefix-filter


Description: Syntax: Displays prefix-list outbound route filters received from the neighbor. show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress received prefix-filter [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress address of a neighbor whose routes the system has learned filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip bgp neighbors received-routes ERX Edge Routers

433

show ip bgp neighbors received-routes


Description: Syntax: Displays routes originating from the specified BGP neighbor before inbound policy is applied. show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress received routes [ fields { fieldOptions } ] [ delta ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress address of a neighbor whose routes the system has learned fieldOptions field(s) to be displayed. See the show ip bgp command. delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip bgp neighbors routes


Description: Syntax: Displays routes originating from the specified BGP neighbor after inbound policy is applied. show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress routes [ fields { fieldOptions } ] [ delta ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress address of a neighbor whose routes the system has learned fieldOptions field(s) to be displayed. See the show ip bgp command. delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

434

show ip bgp network

show ip bgp network


Description: Syntax: Displays information about a potentially originated prefix that was configured with the network command. show ip bgp [ addressFamilyIdentifier ] network [ networkNumber [ mask networkMask ] ] [ filter ] addressFamilyIdentifier type of BGP address family. See the show ip bgp command. networkNumber IP address of the network for which you want information displayed; if no network is specified, the fields are displayed for all networks networkMask address mask to be applied to the network address filter see Filtering show Commands in About This Guide

Mode(s):

User Exec, Privileged Exec

show ip bgp next-hops


Description: Syntax: Displays information about BGP next hops. show ip bgp [ addressFamilyIdentifier ] next-hops [ ipAddress ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress displays information only for this indirect next hop filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip bgp paths


Description: Syntax: Displays information about BGP AS paths. show ip bgp paths [ regularExpression ] [ filter ] regularExpression regular expression to match that specifies the desired AS paths. See show ip bgp regexp for information on regular expressions. filter see Filtering show Commands in About This Guide

Mode(s):

User Exec, Privileged Exec

show ip bgp peer-group ERX Edge Routers

435

show ip bgp peer-group


Description: Syntax: Displays information about BGP peer groups. show ip bgp [ addressFamilyIdentifier ] peer-group [ peerGroupName ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. peerGroupName name of the BGP peer group filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

436

show ip bgp quote-regexp

show ip bgp quote-regexp


Description: Displays information about BGP routes whose AS path matches the specified regular expression. Regular expressions match numbers for which the specified path is a substringfor example, if you specify 20, 200 matches because 20 is a substring of 200. You can disallow substring matching by using the underscore (_) metacharacter to constrain matching to the specified pattern; for example, _20_. You can use output filtering on the display. show ip bgp [ addressFamilyIdentifier ] quote-regexp pathExpression [ fields { fieldOptions } ] [ filter ] addressFamilyIdentifier type of BGP address family. See the show ip bgp command. quote-regexp indicates that only a single element is matched pathExpression regular expression string describing the AS path or community to be matched. You must enclose elements containing a space within double quotes (one element). Each element is either an AS number, a metacharacter, or a combination: ^ Matches the beginning of the path unless appearing as the first character within brackets; see below

Syntax:

[^ ] Matches any AS number except the ones specified within the brackets $ { } ( ) . * + ? Matches the end of the path Matches the beginning of an AS_SET Matches the end of an AS_SET Matches the start of an AS_CONFED_SET or AS_CONFED_SEQ Matches the end of an AS_CONFED_SET or AS_CONFED_SEQ Matches any single character Matches zero or more occurrences of the preceding character Matches one or more occurrences of the preceding character Matches zero or one occurrence of the preceding character. To use the ? metacharacter in a regular expression, you must enter the following key sequence: <Ctrl-v-?>. Otherwise, the CLI considers this to be a request for assistance in completing the command, rather than understanding it as a metacharacter.

show ip bgp quote-regexp ERX Edge Routers

437

()

Used with a multiplier metacharacter (*, +, ?) to specify patterns for multiple use. You can specify that a parenthesis be construed as a literal token instead of a metacharacter by immediately preceding it with a backslash: matches the beginning of an AS_CONFED_SET or AS_CONFED_SEQ matches the end of an AS_CONFED_SET or AS_CONFED_SEQ. Matches any enclosed character; specifies a range of single characters Used within brackets to specify a range of AS numbers Matches a ^, a $, a comma, a space, a {, or a }. Placed on either side of a string to specify a literal and disallow substring matching. Numerals enclosed by underscores can be preceded or followed by any of the characters listed above. Matches characters on either side of the metacharacter; logical OR

\( \) [] _

| Mode(s):

fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

438

show ip bgp regexp

show ip bgp regexp


Description: Displays information about BGP routes whose AS path matches the specified regular expression. Regular expressions match numbers for which the specified path is a substringfor example, if you specify 20, 200 matches because 20 is a substring of 200. You can disallow substring matching by using the underscore (_) metacharacter to constrain matching to the specified pattern; for example, _20_. You can use output filtering on the display. show ip bgp [ addressFamilyIdentifier ] regexp pathExpression [ fields { fieldOptions } ] [ filter ] addressFamilyIdentifier type of BGP address family. See the show ip bgp command. regexp indicates that multiple elements can be matched pathExpression regular expression string describing the AS paths to be matched. You do not have to enclose elements containing a space within quotation marks (one element). Each element is either an AS number, a metacharacter, or a combination: ^ Matches the beginning of the path unless appearing as the first character within brackets; see below

Syntax:

[^ ] Matches any AS number except the ones specified within the brackets $ { } ( ) . * + ? Matches the end of the path Matches the beginning of an AS_SET Matches the end of an AS_SET Matches the start of an AS_CONFED_SET or AS_CONFED_SEQ Matches the end of an AS_CONFED_SET or AS_CONFED_SEQ Matches any single character Matches zero or more occurrences of the preceding character Matches one or more occurrences of the preceding character Matches zero or one occurrence of the preceding character. To use the ? metacharacter in a regular expression, you must enter the following key sequence: <Ctrl-v-?>. Otherwise, the CLI considers this to be a request for assistance in completing the command, rather than understanding it as a metacharacter.

show ip bgp regexp ERX Edge Routers

439

()

Used with a multiplier metacharacter (*, +, ?) to specify patterns for multiple use. You can specify that a parenthesis be construed as a literal token instead of a metacharacter by immediately preceding it with a backslash: matches the beginning of an AS_CONFED_SET or AS_CONFED_SEQ matches the end of an AS_CONFED_SET or AS_CONFED_SEQ. Matches any enclosed character; specifies a range of single characters Used within brackets to specify a range of AS numbers Matches a ^, a $, a comma, a space, a {, or a }. Placed on either side of a string to specify a literal and disallow substring matching. Numerals enclosed by underscores can be preceded or followed by any of the characters listed above. Matches characters on either side of the metacharacter; logical OR

\( \) [] _

| Mode(s):

fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

440

show ip bgp summary

show ip bgp summary


Description: Displays filtered information about the status of all BGP connections. Only those fields that you specify are displayed, except that the Prefix field is always displayed. Default fields can be set with the default-fields peer command. show ip bgp [ addressFamilyIdentifier ] summary [ fields { fieldOptions } ] [ delta ] [ filter ] addressFamilyIdentifier type of BGP address family. See the show ip bgp command. fields displays only the specified fields; the display order of the fields is hard-coded and not affected by the order in which you enter them fieldOptions field(s) to be displayed, in the format all | [ intro | last-reset-reason | messages-received | messages-sent | peer-type | prefixes-received | remote-as | state | times-up | up-down-time | updates-received | updates-sent ]

Syntax:

intro introductory information about the state of various BGP attributes;


this information is displayed only if you specify this keyword

last-reset-reason reason for most recent reset messages-received total number of messages received from the peer messages-sent total number of messages sent to the peer peer-type type of BGP peer: internal, external, or confederation prefixes-received number of unique prefixes received from the peer remote-as the remote AS number of the peer state state of the BGP session times-up number of times the session has been established up-down-time how long the session has been up or down updates-received number of update messages received from the peer updates-sent number of update messages sent to the peer
Mode(s): delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip community-list ERX Edge Routers

441

show ip community-list
Description: Syntax: Displays community list information. show ip community list [ listName ] [ filter ] Mode(s): listName name of a community list filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip demux interface


Description: Syntax: Displays information about a subscriber interface. show ip demux interface interfaceType interfaceSpecifier [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

Privileged Exec

show ip dhcp-local binding


Description: Syntax: Displays the mapping between the token or enduring IP address and the MAC address of the non-equal PPP subscribers computer. show ip dhcp-local binding ipAddress [ filter ] Mode(s): ipAddress IP address of the subscribers personal computer filter see Filtering show Commands in About This Guide

Privileged Exec

show ip dhcp-local cable-modem


Description: Syntax: Displays the configuration and statistics for cable modem DHCP servers configured on the system. show ip dhcp-local cable-modem { dhcp-servers | statistics } [ delta ] [ filter ] Mode(s): dhcp-servers displays a list of cable modem DHCP servers configured on the system statistics displays statistics on responses and requests received from external DHCP servers and cable modems

Privileged Exec

442

show ip dhcp-local excluded

show ip dhcp-local excluded


Description: Displays IP addresses that have been excluded. These are addresses that the DHCP local server does not allocate because they are already used by devices on the subnet. show ip dhcp-local excluded [ filter ] Privileged Exec

Syntax: Mode(s):

show ip dhcp-local limits


Description: Syntax: Displays the maximum number of leases available for each VPI, VCI, VLAN, and Ethernet Subnet from the DHCP local server. show ip dhcp-local limits [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show ip dhcp-local pool


Description: Syntax: Displays the configuration of DHCP local pools. show ip dhcp-local pool [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show ip dhcp-local reserved


Description: Displays the static IP address/MAC address pairs that the DHCP local

server supplies in standalone mode. This command does not display address pairs that the DHCP local server supplies in non-PPP equal access mode.
Syntax: show ip dhcp-local reserved [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show ip dhcp-local statistics ERX Edge Routers

443

show ip dhcp-local statistics


Description: Syntax: Displays statistics for the DHCP local server. show ip dhcp-local statistics [ delta ] [ filter ] Mode(s): ipAddress IP address delta displays baselined statistics filter see Filtering show Commands in About This Guide

Privileged Exec

show ip domain-lookup
Description: Syntax: Displays the name servers that you have specified on the system with the ip name-server command. show ip domain-lookup [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show ip dvmrp
Description: Syntax: Displays DVMRP information for a virtual router. show ip dvmrp [ delta ] [ filter ] Mode(s): delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

444

show ip dvmrp interface

show ip dvmrp interface


Description: Syntax: Displays dvmrp parameters for the specified interfaces. show ip dvmrp interface [ brief ] [ delta ] [ interfaceType interfaceSpecifier ] [ filter ] Mode(s): brief specifies that a summary rather than detailed information is displayed delta displays baselined statistics interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip dvmrp mroute


Description: Syntax: Displays information about DVMRP routes to multicast groups. show ip dvmrp mroute [ group [ sourceAddress [ sourceMask ] ] ] [ filter ] Mode(s): group IP address of a specific multicast group sourceAddress IP address of the network on which the source resides sourceMask subnet mask filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip dvmrp neighbor ERX Edge Routers

445

show ip dvmrp neighbor


Description: Syntax: Displays information about DVMRP neighbors. show ip dvmrp neighbor [ interfaceType interfaceSpecifier [ ipAddress ] ] [ brief ] [ delta ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide ipAddress displays information about the neighbor at this IP address brief specifies that a summary rather than detailed information is displayed delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip dvmrp route


Description: Syntax: Displays information about DVMRP routes. show ip dvmrp route [ ipAddress [ addressMask ] | interfaceType interfaceSpecifier ] [ brief ] [ filter ] Mode(s): ipAddress displays the best route for this IP address addressMask displays the route that exactly matches this IP address and subnet mask interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief displays a summary rather than detailed information filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

446

show ip dvmrp routeNextHop

show ip dvmrp routeNextHop


Description: Syntax: Displays information about the next hop. show ip dvmrp routeNextHop [ ipAddress [ addressMask [ interfaceType interfaceSpecifier ] ] ] [ filter ] Mode(s): ipAddress IP address of the network for which you want to display information addressMask mask for the subnet for which you want display information interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip dynamic-interface-prefix
Description: Syntax: Displays the prefix for the names of dynamic IP shared interfaces. show ip dynamic-interface-prefix [ vrfName ] Mode(s): vrfName name of the VRF

User Exec, Privileged Exec

show ip explicit-paths
Description: Displays all explicit paths or a particular explicit path in a non-ERX implementation. See the show mpls explicit-paths command for a complete description and syntax.

show ip extcommunity-list
Description: Syntax: Displays all extended-community lists or a specific extended-community list. show ip extcommunity-list [ listName ] [ filter ] Mode(s): listName name of the extended-community list filter see Filtering show Commands in About This Guide

Privileged Exec

show ip forwarding-table slot ERX Edge Routers

447

show ip forwarding-table slot


Description: Syntax: Displays information on routing table memory, load errors, and status for the forwarding table of a specific line module. show ip forwarding-table slot slotNumber Mode(s): slotNumber number of the slot containing the line module for which the table is displayed

User Exec, Privileged Exec

show ip http
Description: Displays information about HTTP local servers, information about the parameters configured for the HTTP local server, and statistics about the connections to the HTTP local server. show ip http [ scalar | server | statistics [ delta ] ] [ filter ] Mode(s): scalar display only information about the connections to the HTTP local server server display only information about the parameters configured for the HTTP local server statistics display only statistics about the connections to the HTTP local server delta displays baselined statistics filter see Filtering show Commands in About This Guide

Syntax:

Privileged Exec

show ip igmp
Description: Syntax: Displays IGMP information for a virtual router. show ip igmp [ delta ] [ filter ] Mode(s): delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

448

show ip igmp groups

show ip igmp groups


Description: Syntax: Displays information about statically joined and directly connected groups learned via IGMP. show ip igmp groups [ count ] [ groupAddress [ interfaceType interfaceSpecifier ] ] [ filter ] Mode(s): count displays the total number of groups learned groupAddress IP address of a group for which you want to display information interfaceType type of interface associated with the group address; for interface types, see Interface Types and Specifiers in About This Guide interfaceSpecifier specifier for the interface associated with the group address; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip igmp interface


Description: Syntax: Displays IGMP information for interfaces on which you enabled IGMP. show ip igmp interface [ brief | count ] [ delta ] [ interfaceType interfaceSpecifier ] [ filter ] Mode(s): brief displays a summary of the information count displays the total number of interfaces on which you enabled IGMP delta displays baselined statistics interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip igmp-proxy
Description: Syntax: Use to display IGMP proxy parameters on a virtual router. show ip igmp-proxy [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip igmp-proxy groups ERX Edge Routers

449

show ip igmp-proxy groups


Description: Syntax: Displays information about multicast groups that IGMP proxy interfaces reported. show ip igmp-proxy groups [ groupAddress | count ] [ filter ] Mode(s): groupAddress IP address of a group for which you want to display information count displays the number of groups that IGMP proxy reported filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip igmp-proxy interface


Description: Syntax: Display information about the interface on which you configured IGMP proxy. show ip igmp-proxy interface [ brief ] [ delta ] [ interfaceType interfaceSpecifier ] [ filter ] Mode(s): brief displays summarized information delta displays baselined statistics interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

450

show ip interface

show ip interface
Description: Syntax: Displays current state of all IP interfaces or the IP interfaces you specify. The default is all interface types and all interfaces. show ip interface [ vrf vrfName ] { { [ brief | detail ] { other | [ interfaceType interfaceSpecifier ] } } | summary } [ delta ] [ filter ] Mode(s): vrfName name of the VRF brief displays a brief summary of IP status and configuration information detail shows a detailed display of IP status and configuration information interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide summary shows a detailed summary of IP status and configuration delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip interface shares


Description: Syntax: Displays information about shared IP interfaces for all IP interfaces or for the IP interfaces you specify. The default is all interface types and all interfaces. show ip interface shares [ vrf vrfName ] [ brief | detail ] [ interfaceType interfaceSpecifier ] [ delta ] [ filter ] Mode(s): vrfName name of the VRF brief displays a brief summary of IP status and configuration information detail shows a detailed display of IP status and configuration information interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip interface vrf ERX Edge Routers

451

show ip interface vrf


Description: Syntax: Displays current state of all interfaces on the specified VRF. show ip interface vrf vrfName [ filter ] Mode(s): vrfName name of the VRF filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip local pool


Description: Syntax: Displays information about the local address pools configured on your system. show ip local pool [ [ name ] | [ statistics | group [ delta ] ] ] [ filter ] Mode(s): name name of a specific local address pool (default is all pools) statistics specifies that local pool statistics are to be shown group specifies that local pool groups are to be shown delta displays baselined statistics filter see Filtering show Commands in About This Guide

Privileged Exec

show ip mac-validate interface


Description: Syntax: Displays the status of MAC address validation on the physical interface that you specify. show ip mac-validate interface interfaceType interfaceSpecifier ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers filter see Filtering show Commands in About This Guide

Privilege Exec

452

show ip mroute

show ip mroute
Description: Syntax: Displays information about all or specified multicast routes. show ip mroute [ groupIpAddress [ sourceIpAddress ] ] [ summary | count | statistics ] [ filter ] groupIpAddress IP address of a multicast group sourceIpAddress IP address of a multicast source summary displays brief information about the multicast routes count displays the number of groups and sources statistics displays statistics for packets received through multicast routes that the system has added to the multicast routing table and established on the appropriate line modules filter see Filtering show Commands in About This Guide

Mode(s):

User Exec, Privileged Exec

show ip multicast routing


Description: Syntax: Displays information about the status of multicast routing on the system. show ip multicast routing Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip multicast protocols


Description: Syntax: Displays information about the multicast protocols enabled on the system. show ip multicast protocols [ brief ] [ filter ] Mode(s): brief displays a summary rather than detailed information filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip nfs
Description: Syntax: Displays information about the interface that the current virtual router uses to exchange messages with the NFS server. show ip nfs [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip ospf ERX Edge Routers

453

show ip ospf
Description: Syntax: Displays general information about OSPF routing processes. show ip ospf [ vrf vrfName ] [ delta ] [ filter ] Mode(s): vrfName name of the VRF delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip ospf border-routers


Description: Syntax: Displays routing table entries for area border and AS boundary routers. show ip ospf border-routers [ vrf vrfName ] [ filter ] Mode(s): vrfName name of the VRF filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip ospf database


Description: Syntax: Displays either the full IP OSPF database or a summary of the database. show ip ospf database [ vrf vrfName ] [ database-summary | { asbr-summary | external | network | nssa-external | router | summary | opaqueArea } [ ipAddress | internal ] ] [ filter ] Mode(s): vrfName name of the VRF database-summary a summary of the database asbr-summary ASBR summary link states external external link states network network link states nssa-external NSSA External link states router router link states summary network summary link states opaqueArea traffic-engineering opaque LSA states ipAddress a link state IP address internal internal LSA information filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

454

show ip ospf interface

show ip ospf interface


Description: Syntax: Displays a list of OSPF interfaces. show ip ospf interface [ vrf vrfName ] [ interfaceType interfaceSpecifier ] [ filter ] Mode(s): vrfName name of the VRF interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip ospf internal-statistics


Description: Syntax: Displays internal OSPF statistics. show ip ospf internal-statistics [ vrf vrfName ] [ filter ] Mode(s): vrfName name of the VRF filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip ospf neighbors


Description: Syntax: Displays a list of OSPF neighbors. show ip ospf neighbors [ vrf vrfName ] [ neighborAddress ] [ interfaceType interfaceSpecifier ] [ filter ] Mode(s): vrfName name of the VRF neighborAddress router ID of a specified neighbor interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip ospf remote-neighbor interface ERX Edge Routers

455

show ip ospf remote-neighbor interface


Description: Syntax: Displays interfaces associated with OSPF remote neighbors. show ip ospf remote-neighbor [ ipAddress ] interface [ vrf vrfName ] [ filter ] Mode(s): ipAddress source IP address of a remote neighbor vrfName name of the VRF filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip ospf spf-log


Description: Syntax: Displays how often and why the router has run a full SPF calculation. show ip ospf spf-log [ vrf vrfName ] [ filter ] Mode(s): vrfName name of the VRF filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip ospf virtual-links


Description: Displays the parameters and the current state of OSPF virtual links. A virtual link is a logical connection between two systems. To establish or maintain connectivity to the backbone, you can configure virtual links through nonbackbone areas. Virtual links serve to connect physically separate components of the backbone. The two endpoints of a virtual link are area border routers. show ip ospf virtual-links [ vrf vrfName ] [ filter ] Mode(s): vrfName name of the VRF filter see Filtering show Commands in About This Guide

Syntax:

User Exec, Privileged Exec

show ip pim auto-rp


Description: Syntax: Displays information about rendezvous point routers and the RP mapping agent in a PIM-SM environment. show ip pim auto-rp [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

456

show ip pim dense-mode sg-state

show ip pim dense-mode sg-state


Description: Syntax: Displays information for each SG entry that PIM-DM knows about. show ip pim dense-mode sg-state [ group groupAddress [ source sourceAddress ] ] [ filter ] Mode(s): groupAddress IP address of a multicast group sourceAddress IP address of a multicast source filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip pim interface


Description: Syntax: Displays information about each PIM-DM interface. show ip pim interface [ interfaceType interfaceSpecifier ] [ count ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide count displays the number of incoming and outgoing PIM control packets filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip pim neighbor


Description: Syntax: Displays information about each PIM neighbor that the system has discovered. show ip pim neighbor [ interfaceType interfaceSpecifier ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip pim remote-neighbor ERX Edge Routers

457

show ip pim remote-neighbor


Description: Syntax: Displays information about all PIM remote neighbors or the specified remote neighbor. show ip pim remote-neighbor [ ipAddress ] [ count ] [ filter ] Mode(s): ipAddress ipAddress of a remote neighbor count display the number of remote neighbors filter see Filtering show Commands in About This Guide

Privileged Exec

show ip pim rp
Description: Syntax: Displays information about PIM group-to-RP mappings. show ip pim rp { groupAddress | mapping } [ filter ] Mode(s): groupAddress address of a group for which you want to view group-to-RP mappings mapping displays all RP-to-group mappings that the system has recorded filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip pim rp-hash


Description: Syntax: Shows which RP a multicast group is using. show ip pim rp-hash groupAddress [ filter ] Mode(s): group IP address of multicast group for which you want to view the RP filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

458

show ip pim sparse-mode sg-state

show ip pim sparse-mode sg-state


Description: Syntax: Displays information for each SG entry that PIM-SM knows about. show ip pim sparse-mode sg-state [ group groupAddress [ source sourceAddress ] | rp rpAddress ] [ count ] [ filter ] Mode(s): groupAddress IP address of a multicast group sourceAddress IP address of a multicast source rpAddress IP address of an RP router count displays the number of SG entries filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip pim sparse-mode unicast-route


Description: Syntax: Displays the unicast routes that PIM-SM is using. show ip pim sparse-mode unicast-route [ routeAddress routeMask ] [ count ] [ filter ] Mode(s): routeAddress IP address associated with a unicast route routeMask network mask associated with a unicast route count shows the number of unicast routes that PIM-SM is using. filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip pim spt-threshold


Description: Syntax: Displays the threshold for switching to the shortest-path-tree at a PIM DR. show ip pim spt-threshold [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip prefix-list ERX Edge Routers

459

show ip prefix-list
Description: Syntax: Displays information about prefix lists. show ip prefix-list [ listName [ seq seqNum | ipPrefix [ longer | first-match ] ] ] [ filter ] Mode(s): listName displays information for the prefix list having this name seqNum displays the information for the prefix list entry having this sequence number ipPrefix displays the information for the prefix list entry having this prefix, in the format IPbaseaddress/length; for example, 10.10.10.0/24 longer displays all entries for a prefix that are equal to or more specific than the specified prefix first-match displays only an entry that matches the specified prefix filter see Filtering show Commands in About This Guide

Privileged Exec

show ip prefix-list summary | detail


Description: Syntax: Displays detailed or summary information about one or all prefix lists. show ip prefix-list { summary | detail } [ listName ] [ filter ] Mode(s): summary displays summary information detail displays detailed information listName name of the prefix list filter see Filtering show Commands in About This Guide

Privileged Exec

show ip prefix-tree
Description: Syntax: Displays information about prefix trees. show ip prefix-tree [ treeName [ ipPrefix [ longer ] ] ] [ filter ] Mode(s): treeName name of the prefix tree ipPrefix displays the information for the prefix list entry having this prefix, in the format IPbaseaddress/length; for example, 10.10.10.0/24 longer displays all entries for a prefix that are equal to or more specific than the specified prefix filter see Filtering show Commands in About This Guide

Privileged Exec

460

show ip prefix-tree summary | detail

show ip prefix-tree summary | detail


Description: Syntax: Displays detailed or summary information about one or all prefix trees. show ip prefix-tree {summary | detail } [ treeName ] [ filter ] Mode(s): summary displays summary information detail displays detailed information treeName name of the prefix tree filter see Filtering show Commands in About This Guide

Privileged Exec

show ip profile
Description: Syntax: Displays information on a specific IP profile. show ip profile profileName [ filter ] Mode(s): profileName name of the profile you want to display filter see Filtering show Commands in About This Guide

User Exec, Privilege Exec

show ip protocols
Description: Syntax: Displays detailed information on IP protocols currently configured on the router. show ip protocols [ vrf vrfName ] [ summary ] [ filter ] Mode(s): vrfName displays information on protocols only for the specified VRF summary displays only a list of currently configured protocols filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip redistribute
Description: Syntax: Displays configured route redistribution policy. show ip redistribute [ vrfName ] [ filter ] Mode(s): vrfName name of the VRF filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip rip ERX Edge Routers

461

show ip rip
Description: Syntax: Displays limited RIP general status information. show ip rip [ vrf vrfName ] [ brief ] [ ifconfig ] [ ipAddress ] [ filter ] Mode(s): vrfName name of the VRF brief displays limited information ifconfig displays address and interface configuration information instead of the default operational data ipAddress displays information only for specific RIP network filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip rip database


Description: Syntax: Displays route entries in the RIP routing table (RIP database). show ip rip database [ vrf vrfName ] [ all ] [ inactive ] [ filter ] Mode(s): vrfName name of the VRF all displays active and inactive routes learned via RIP updates inactive displays routes the system will discard in the immediate future filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip rip network


Description: Syntax: Displays the networks associated with the RIP routing process. show ip rip network [ vrf vrfName ] [ filter ] Mode(s): vrfName name of the VRF filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

462

show ip rip peer

show ip rip peer


Description: Syntax: Displays all RIP neighbors with limited information about each peer. show ip rip peer [ vrf vrfName ] [ filter ] Mode(s): vrfName name of the VRF filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip rip statistics


Description: Syntax: Displays global statistics associated with the RIP routing process. If you specify an IP address, additionally displays statistics for that interface. show ip rip statistics [ vrf vrfName ] [ ipAddress ] [ delta ] [ filter ] Mode(s): vrfName name of the VRF ipAddress address of IP interface where RIP is running; identifies RIP network delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip rip summary-address


Description: Syntax: Displays RIP summary addresses. show ip rip summary-address [ vrf vrfName ] [ ipAddress [ ipMask ] ] [ filter ] Mode(s): vrfName name of the VRF ipAddress address of IP interface where RIP is running ipMask IP mask of the specific address filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip route ERX Edge Routers

463

show ip route
Description: Syntax: Displays current state of the routing table. show ip route [ vrf vrfName ] [ ipAddress [ ipMask ] [ detail ] ] [ all ] [ bgp | isis | local | ospf | other | rip | static ] [ filter ] show ip route summary [ vrf vrfName ] [ filter ] Mode(s): vrfName displays the contents of the IP routing table associated with a VRF name displays the best route to the IP address resolved from this domain name ipAddress specifies the IP address or domain name to show domainName displays information for the IP address resolved from the specified domain name ipMask IP mask of the specific address to show detail displays detailed information about the specific prefix; currently shows the tag added via the ip route command all displays all routes in the routing table inserted from all protocols (not just the best routes that are used for forwarding) bgp displays the best BGP routes in the routing table isis displays the best IS-IS routes in the routing table local displays the best locally connected routes in the routing table ospf displays the best OSPF routes owned by in the routing table other displays the best internal control routes in the routing table rip displays the best RIP routes in the routing table static displays the best static routes added by network management to the routing table summary displays summary counters for all routes in the IP routing table filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

464

show ip route slot

show ip route slot


Description: Syntax: Displays the interface and next hop for an IP address in the routing table of a line module. show ip route slot slotNumber [ vrf vrfName ] ipAddress Mode(s): slotNumber number of slot containing the line module for which the information is displayed vrf specifies a VRF context vrfName name of the VRF ipAddress IP address to look up in the routing table

User Exec, Privileged Exec

show ip rpf-route
Description: Syntax: Displays routes that the system can use to verify source addresses in multicast packets. show ip rpf-route [ ipAddress [ ipMask ] ] [ protocol ] [ filter ] ipAddress specific IP address to show ipMask IP mask of the specific address to show protocol one of the following options

access displays access-server routes (BGP) access-internal displays internal routes to directly connected clients
(BGP)

bgp displays routes owned by BGP isis displays routes owned by IS-IS local displays locally connected routes ospf displays routes owned by OSPF other displays internal control routes rip displays routes owned by RIP static displays static routes added by network management
Mode(s): filter see Filtering show Commands in About This Guide User Exec, Privileged Exec

show ip ssh ERX Edge Routers

465

show ip ssh
Description: Syntax: Displays the current state of the SSH server. show ip ssh [ detail ] [ filter ] Mode(s): detail displays detailed information filter see Filtering show Commands in About This Guide

Privileged Exec

show ip static
Description: Syntax: Displays general status information for static routes added by network management to the routing table. show ip static [ vrfName ] [ ipAddress ipMask [ all ] ] [ filter ] Mode(s): vrfName name of the VRF ipAddress an IP address to show ipMask an IP mask of the specific address to show all displays all routes starting at the specified prefix filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip tcp statistics


Description: Syntax: Displays TCP statistics. show ip tcp statistics [ vrf vrfName ] [ brief | detailed ] [ delta ] [ localAddress [ localPort [ remoteAddress [ remotePort ] ] ] ] [ filter ] Mode(s): vrfName name of the VRF brief displays a brief summary of each TCP connection detailed displays detailed statistics for each TCP connection delta displays baselined statistics localAddress displays TCP connections to and from the IP address on this system localPort displays TCP connections to/from the port on this router remoteAddress displays TCP connections to and from the remote IP address remotePort displays TCP connections to and from the remote port filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

466

show ip traffic

show ip traffic
Description: Syntax: Displays statistics about IP traffic. show ip traffic [ vrfName ] [ delta ] [ filter ] Mode(s): vrfName name of the VRF delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip tunnel reassembly statistics


Description: Syntax: Displays statistics on the reassembly of fragmented tunnel packets within the current virtual router context. show ip tunnel reassembly statistics [ detail ] [ all ] [ filter ] Mode(s): detail displays detailed reassembly statistics that include packets reassembled or discarded per protocol all displays reassembly statistics for all virtual routers on the system filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip udp statistics


Description: Syntax: Displays UDP statistics. show ip udp statistics [ vrfName ] [ delta ] [ filter ] Mode(s): vrfName name of the VRF delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ip vrf ERX Edge Routers

467

show ip vrf
Description: Syntax: Displays information for a specified VRF and its associated interfaces or all VRFs and their associated interfaces for the current virtual router context. show ip vrf [ [ detail ] [ vrfName ] [ filter ] | interfaces [ detail ] ] Mode(s): vrfName - name of the VRF for which information is displayed detail - displays detailed information filter see Filtering show Commands in About This Guide interfaces - displays all VRFs in the virtual router and their associated interfaces

User Exec, Privileged Exec

show ip vrrp
Description: Displays detailed summary of VRID configured on interface identified. If the VRID is not identified, a detailed summary of all VRIDs configured on interface identified is provided. show ip vrrp [ interface interfaceType interfaceSpecifier [ vrid ] ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vrid virtual router ID; a number in the range 1255 filter see Filtering show Commands in About This Guide

Syntax:

Privileged Exec

show ip vrrp brief


Description: Syntax: Displays brief summary of VRIDs configured on the interface identified. show ip vrrp brief [ interface interfaceType interfaceSpecifier [ vrid ] ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vrid virtual router ID; a number in the range 1255 filter see Filtering show Commands in About This Guide

Privileged Exec

468

show ip vrrp neighbor

show ip vrrp neighbor


Description: Syntax: Displays summary of all neighbors known to the VRRP router configured on the interface identified. show ip vrrp neighbor [ interface interfaceType interfaceSpecifier [ vrid ] ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vrid virtual router ID; a number in the range 1255 filter see Filtering show Commands in About This Guide

Privileged Exec

show ip vrrp statistics


Description: Syntax: Displays either global statistics and/or per interface and VRID pair statistics. show ip vrrp statistics [ global | [ interface interfaceType interfaceSpecifier [ vrid ] ] [ delta ] [ filter ] Mode(s): global specify for global counters interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vrid virtual router ID; a number in the range 1255 delta displays baselined statistics filter see Filtering show Commands in About This Guide

Privileged Exec

show ip vrrp summary


Description: Syntax: Mode(s): Displays a summary count on all VRIDs configured. show ip vrrp summary Privileged Exec

show ipsec lifetime ERX Edge Routers

469

show ipsec lifetime


Description: Syntax: Mode(s): Displays the configured default lifetime of phase II SAs. show ipsec lifetime Privileged Exec

show ipsec local-endpoint


Description: Syntax: Displays the address and transport virtual router of local endpoints. show ipsec local-endpoint [ transport-virtual-router transportVirtualRouter ] Mode(s): transportVirtualRouter name of virtual router that includes source and/or destination addresses assigned to tunnel interfaces

Privileged Exec

show ipsec transform-set


Description: Syntax: Displays transform sets configured on the system. show ipsec transform-set [ transformSetName ] Mode(s): transformSetName displays information on a specific transform set

Privileged Exec

470

show ipsec tunnel

show ipsec tunnel


Description: Syntax: Displays information on tunnels that are configured on a specific virtual router. show ipsec tunnel [ tunnelName | [ virtual-router vrName ] ip ipAddress ] [ state { adminState | operStatus } ] [ filter ] [ detail ] [ delta ] Mode(s): tunnelName displays information for the specified tunnel vrName name of virtual router on which tunnels are configured ip display tunnels that are using a particular IP address state restricts display to tunnels in a particular state adminState displays tunnels in an administrative state of enabled or disabled operStatus displays tunnels in an operational state of up, down, lower-down, or not-present detail displays configuration and statistics of tunnels delta displays baselined statistics filter see Filtering show Commands in About This Guide

Privileged Exec

show ipsec tunnel summary


Description: Syntax: Displays a summary of all tunnels configured on the system. show ipsec tunnel summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show isis database ERX Edge Routers

471

show isis database


Description: Syntax: Displays the IS-IS link state database. show isis database [ level-1 | level-2 | l1 | l2 | lspid | detail | verbose ]* [ filter ] Mode(s): level-1 displays the IS-IS link state database for level 1 level-2 displays the IS-IS link state database for level 2 l1 displays the IS-IS link state database for level 1 l2 displays the IS-IS link state database for level 2 lspid link state PDU identifier in the form xxxx.xxxx.xxxx.yy.zz; when specified, displays the contents of a single link state PDU by its ID number detail additionally displays contents of each link state PDU; if not specified, a summary display is provided verbose additionally displays MPLS traffic engineering information * indicates that one or more parameters can be repeated multiple times in a list in the command line filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show isis mpls adjacency-log


Description: Syntax: Displays a log of the last 20 IS-IS adjacency changes. show isis mpls [ traffic-eng ] adjacency-log [ filter ] Mode(s): traffic-eng optional keyword for compatibility with non-ERX implementations filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show isis mpls advertisements


Description: Syntax: Displays the last record flooded from MPLS. show isis mpls [ traffic-eng ] advertisements [ filter ] Mode(s): traffic-eng optional keyword for compatibility with non-ERX implementations filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

472

show isis mpls tunnel

show isis mpls tunnel


Description: Syntax: Displays information about tunnels used in the calculation of IS-IS next hops. show isis mpls [ traffic-eng ] tunnel [ filter ] Mode(s): traffic-eng optional keyword for compatibility with non-ERX implementations filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show isis spf-log


Description: Syntax: Displays how often and why the router has run a full SPF calculation. show isis spf-log [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show isis summary-addresses


Description: Syntax: Displays aggregate address information for IS-IS. show isis summary-addresses [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show isis topology


Description: Syntax: Displays the paths to all intermediate systems. show isis topology [ [ level-1 | level-2 | l1 | l2 ]* [ nsap ] | [ nsap ] [ level-1 | level-2 | l1 | l2 ]* ] [ filter ] Mode(s): level-1 displays paths to all level 1 routers in the area level-2 displays paths to all level 2 routers in the domain l1 displays paths to all level 1 routers in the area l2 displays paths to all level 2 routers in the domain * indicates that one or more parameters can be repeated multiple times in a list in the command line nsap the NSAP address filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show l2f ERX Edge Routers

473

show l2f
Description: Syntax: Displays global configuration and status information for L2F on the system. show l2f [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show l2f destination


Description: Syntax: Displays information about selected L2F destinations. show l2f destination [ detail ] [ destinationName | | virtual-router vrName | ip ipAddress ] [ filter ] Mode(s): detail provides complete information about the specified destinations destinationName name the system assigns to the peer at the other end of the tunnel vrName name of the virtual router on which the destination exists ipAddress IP address of the peer at the other end of the tunnel filter see Filtering show Commands in About This Guide

Privileged Exec

show l2f destination summary


Description: Syntax: Displays the configured and operational status of all L2F destinations. show l2f destination summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

474

show l2f session

show l2f session


Description: Syntax: Displays detailed information about selected L2F sessions. show l2f session [ detail ] [ state { adminState | operStatus } ] [ sessionName | [ virtual-router vrName ] ip ipAddress [ sessionName ] ] [ filter ] Mode(s): detail provides complete information about the specified sessions state displays information on sessions that are in a particular administrative state or operational status adminState use the online Help to see a list of possible administrative states operStatus use the online Help to see a list of possible selections for operational status sessionName a session name vrName name of the virtual router on which the session exists ipAddress IP address of the peer at the other end of the session filter see Filtering show Commands in About This Guide

Privileged Exec

show l2f session summary


Description: Syntax: Displays the configured and operational status of all L2F sessions. show l2f session summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show l2f tunnel ERX Edge Routers

475

show l2f tunnel


Description: Syntax: Displays detailed information on the configured and operational status of selected L2F tunnels. show l2f tunnel [ detail ] [ state { adminState | operStatus } ] [ tunnelName | [ virtual-router vrName ] ip ipAddress [ tunnelName ] ] [ filter ] Mode(s): detail provides complete information about the specified tunnels state displays information on tunnels that are in a particular administrative state or operational status adminState use the online Help to see a list of possible administrative states operStatus use the online Help to see a list of possible selections for operational status tunnelName name of an L2F tunnel vrName name of the virtual router on which the tunnel exists ipAddress IP address of the peer at the other end of the tunnel filter see Filtering show Commands in About This Guide

Privileged Exec

show l2f tunnel summary


Description: Syntax: Displays the configured and operational status of all L2F tunnels. show l2f tunnel summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show l2tp
Description: Syntax: Displays information about the L2TP configuration on the system. show l2tp [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

476

show l2tp destination

show l2tp destination


Description: Syntax: Displays information about selected L2TP destinations. show l2tp destination [ detail ] [ destinationName | [ virtual-router vrName ] ip ipAddress ] [ filter ] Mode(s): detail provides complete information about the specified destinations, including destination profiles destinationName name the system assigns to the peer at the other end of the tunnel vrName name of the virtual router on which the destination exists ipAddress IP address of the peer at the other end of the tunnel filter see Filtering show Commands in About This Guide

Privileged Exec

show l2tp destination profile


Description: Syntax: Displays destination profile configuration. show l2tp destination profile [ profileName ] Mode(s): profilename provides detailed information on a designated profile

Privileged Exec

show l2tp destination summary


Description: Syntax: Displays the configured and operational status of all L2TP destinations. show l2tp destination summary [ filter ] Mode(s): filter see Filtering show Commands in About This GuideEdinburgh5.0

Privileged Exec

show l2tp session ERX Edge Routers

477

show l2tp session


Description: Syntax: Displays detailed information about selected L2TP sessions. show l2tp session [ detail ] [ state { adminState | ifOperStatus } ] [ l2tpName | [ virtual-router vrName ] ip ipAddress [ l2tpNameNoDest ] ] [ filter ] Mode(s): detail provides complete information about the specified sessions state restricts display to sessions in a specific state adminState effective administrative state ifOperStatus operational state l2tpName session name vrName name of the virtual router on which the session exists ipAddress IP address l2tpNameNoDest name of the session filter see Filtering show Commands in About This Guide

Privileged Exec

show l2tp session summary


Description: Syntax: Displays the configured and operational status of all L2TP sessions. show l2tp session summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

478

show l2tp tunnel

show l2tp tunnel


Description: Syntax: Displays detailed information on the configured and operational status of selected L2TP tunnels. show l2tp tunnel [ detail ] [ state { adminState | ifOperStatus } ] [ l2tpName | [ virtual-router vrName ] ip ipAddress [ l2tpNameNoDest ] ] [ filter ] detail provides complete information about the specified sessions, including the L2TP host profile name state restricts display to tunnels in one of the following specific states:

adminState effective administrative state ifOperStatus operational state


Mode(s): l2tpName tunnel name vrName the name of the virtual router on which the tunnel exists ipAddress IP address l2tpNameNoDest tunnel name filter see Filtering show Commands in About This Guide

Privileged Exec

show l2tp tunnel summary


Description: Syntax: Displays the configured and operational status of all L2TP tunnels. show l2tp tunnel summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show last-reset
Description: Syntax: Displays information describing the reason for the systems last reload, whether specified by the user or resulting from a system problem. show last-reset [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show license b-ras ERX Edge Routers

479

show license b-ras


Description: Syntax: Displays the b-ras license string. show license b-ras [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show license ipsec-tunnels


Description: Syntax: Displays the IPSec tunnel license string. show license ipsec-tunnel [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show line console 0


Description: Syntax: Displays the speed configured for all future console sessions and the current console session. show line console 0 [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show line vty


Description: Syntax: Displays the configuration of vty lines. show line vty lineNumber [ filter ] Mode(s): lineNumber number of the vty line; only line numbers that you have configured are available for display filter see Filtering show Commands in About This Guide

Privileged Exec

480

show log configuration

show log configuration


Description: Syntax: Displays information on the logging configuration settings for a selected category. show log configuration [ category eventCategory ] [ filter ] Mode(s): category limits the display to a specific log category eventCategory the log category to be displayed; refer to the CLI online help for available options filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show log data


Description: Syntax: Displays the system log. show log data [ nv-file | category eventCategory ] [ severity { severityValue | severityNumber } ] [ delta ] [ filter ] nv-file displays the nv-file log category limits the display to a specific log category eventCategory log category to display; refer to the CLI online help for available options severity minimum severity of the log messages displayed; described either by a descriptive termseverityValueor by a corresponding numberseverityNumberin the range 07; the lower the number, the higher the priority:

emergency or 0 system unusable alert or 1 immediate action needed critical or 2 critical condition exists error or 3 error condition warning or 4 warning condition notice or 5 normal but significant condition info or 6 informational message debug or 7 debug message
Mode(s): delta limits the display to events that occurred after the baseline filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show mpls ERX Edge Routers

481

show mpls
Description: Syntax: Displays status and configuration information about MPLS on the router or on specific interfaces. show mpls [ interface [ shim ] [ state not-up ] [ brief | interfaceType interfaceSpecifier ] ] [ filter ] Mode(s): interface displays information only for the MPLS interfaces; if not specified, only global information is displayed shim displays information about shim interfaces state not-up displays information only about interfaces that are not up brief displays limited interface information interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

482

show mpls binding

show mpls binding


Description: Syntax: Displays label bindings for routes that are used for forwarding; from the MPLS label information base. show mpls [ ip ] binding [ ldp | cr-ldp | layer2-vc ] [ destAddr [ maskLength | maskAddress ] [ longer-prefixes ] ] [ interface interfaceType interfaceSpecifier ] [ neighbor ipAddress ] [ generic | atm ] [ local | remote ] [ label { atm vpi vci | implicit-null-label | labelNumber [ labelRangeEnd ] } ] [ brief ] [ filter ] ip optional keyword for compatibility with non-ERX implementations ldp displays binding information for routes learned via LDP cr-ldp displays binding information for routes learned via CR-LDP layer2-vc displays binding information for routes learned via layer 2 over MPLS destAddr destination address for which you want information displayed; if not specified, displays all fields maskLength prefix length for the destination address maskAddress address mask to be applied to the destination address longer-prefixes displays information for prefixes that are equal to or more specific than the specified prefix interface displays information for the specified interface

interfaceType interface type; see Interface Types and Specifiers in


About This Guide

interfaceSpecifier particular interface; format varies according to


interface type; see Interface Types and Specifiers in About This Guide ipAddress displays information for neighbor with this IP address generic displays information only for generic labels atm displays information only for ATM VPI/VCI labels local displays information only for local labels remote displays information only for remote labels atm displays information for the specified ATM VPI/VCI labels

vpi specifies ATM VPI that partially designates a label vci specifies ATM VCI that partially designates a label
implicit-null-label displays binding information for the implicit null label

show mpls explicit-paths ERX Edge Routers

483

Mode(s):

labelNumber displays information for this label only; a number in the range 161048575 labelRangeEnd when specified, displays information for labels ranging from labelNumber to labelRangeEnd; a number in the range 161048575 brief displays limited information filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show mpls explicit-paths


Description: Syntax: Displays all explicit paths or a particular explicit path. show { mpls | ip } explicit-paths [ detail | { name pathName | identifier pathNum } ] [ filter ] Mode(s): ip keyword for compatibility with non-ERX implementations mpls specify this keyword for our MPLS implementation detail specifies a verbose display [not currently supported] pathName name that identifies an explicit path pathNum number that identifies an explicit path filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

484

show mpls forwarding

show mpls forwarding


Description: Syntax: Displays statistics and configuration forwarding information for LSPs created on the LSR. show mpls forwarding [ ldp | cr-ldp | rsvp-te | layer2-vc ] [ label { atm vpi vci | implicit-null-label | labelNumber [ labelRangeEnd ] } ] [ destination destAddr [ { maskLength | maskAddress } [ longer-prefixes ] ] ] [ interface interfaceType interfaceSpecifier ] [ nexthop ipAddress ] [ brief | count-only ] [ filter ] ldp displays LDP-specific forwarding information cr-ldp displays CR-LDPspecific forwarding information rsvp-te displays RSVP-TEspecific forwarding information layer2-vc displays layer-2-over-MPLSspecific forwarding information atm displays information for the specified ATM VPI/VCI labels

vpi specifies ATM VPI that partially designates a label vci specifies ATM VCI that partially designates a label
implicit-null-label displays forwarding information for the implicit null label labelNumber displays information for this label only; a number in the range 161048575 labelRangeEnd displays information for labels ranging from labelNumber to labelRangeEnd; a number in the range 161048575 destAddress destination address of tunnels to be displayed maskLength prefix length for the destination address maskAddress address mask to be applied to the destination address longer-prefixes displays information for prefixes that are equal to or more specific than the specified prefix interface displays information for the specified interface

interfaceType interface type; see Interface Types and Specifiers in


About This Guide

interfaceSpecifier particular interface; format varies according to


interface type; see Interface Types and Specifiers in About This Guide Mode(s): ipAddress displays information for next hop with this IP address brief displays only brief or summary information about the tunnels count-only displays a count of entries that match the specified conditions delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show mpls ldp targeted session ERX Edge Routers

485

show mpls ldp targeted session


Description: Syntax: Displays information about the LDP targeted sessions. show mpls ldp targeted session [ all | receive | send ] Mode(s): all displays all targeted sessions receive displays only targeted receive sessions send displays only targeted send sessions

User Exec, Privileged Exec

486

show mpls minor-interface

show mpls minor-interface


Description: Syntax: Displays status and configuration for all minor interfaces or a specific minor interface in the current router context. show mpls [ traffic-eng ] minor-interface [ name interfaceName ] [ role { all | head | tail | middle | remote | lower } | up | down ] [ source-id sourceAddress [ srcId ] ] [ destination destAddr [ { maskLength | maskAddress } [ longer-prefixes ] ] ] [ interface interfaceType interfaceSpecifier ] [ nexthop ipAddress ] [ brief | count-only ] [ filter ] interfaceName name of minor interface to be displayed role displays tunnels in which the system has a specified role:

all displays all tunnels of which the system is a part head displays tunnels where the system is the ingress router, or tunnel
head end

tail displays tunnels where system is the egress router, or tunnel tail
end (endpoint or destination of the tunnel)

middle displays tunnels where system is a transit router on the tunnel remote displays tunnels where system is a transit router or egress
router (tail end)

lower displays tunnels with stacked upper tunnels


up displays tunnels that are up down displays tunnels that are down sourceAddress source address of tunnels to be displayed srcId local ID associated with source address of tunnels to be displayed, an integer from 0 to 65535 destAddress destination address of tunnels to be displayed maskLength prefix length for the destination address maskAddress address mask to be applied to the destination address longer-prefixes displays information for prefixes that are equal to or more specific than the specified prefix interface displays information for the specified interface

interfaceType interface type; see Interface Types and Specifiers in


About This Guide

show mpls profile ERX Edge Routers

487

interfaceSpecifier particular interface; format varies according to


interface type; see Interface Types and Specifiers in About This Guide Mode(s): ipAddress displays information for next hop with this IP address brief displays only brief or summary information about the tunnels count-only displays a count for entries that match the specified conditions delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show mpls profile


Description: Syntax: Displays a specific LDP, RSVP-TE, or tunnel profile, or all LDP, RSVP-TE, or tunnel profiles. show mpls { ldp | rsvp | tunnels } profile [ profileName ] [ filter ] Mode(s): ldp specifies LDP profile rsvp specifies RSVP-TE profile tunnels specifies the tunnel profile profileName name of the profile to be displayed filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show mpls rsvp


Description: Syntax: Displays RSVP path control blocks, reservation state control blocks, or complete RSVP session information for the virtual router. show mpls rsvp { psb | rsb | sessions } Mode(s): psb displays path state control blocks rsb displays reservation state control blocks sessions displays RSVP session information

User Exec, Privileged Exec

488

show mpls tunnels

show mpls tunnels


Description: Syntax: Displays status and configuration for all tunnels or for a specific tunnel in the current router context. show mpls [ traffic-eng ] tunnels [ name tunnelName ] [ role { all | head | tail | middle | remote | lower } | up | down ] [ source-id sourceAddress [ srcId ] ] [ destination destAddr [ { maskLength | maskAddress } [ longer-prefixes ] ] ] [ interface interfaceType interfaceSpecifier ] [ nexthop ipAddress ] [ brief | count-only ] [ filter ] traffic-eng optional keyword for compatibility with non-ERX implementations tunnelName name of tunnel or minor interface to be displayed role displays tunnels in which the system has a specified role:

all displays all tunnels of which the system is a part head displays tunnels where the system is the ingress router, or tunnel
head end

tail displays tunnels where system is the egress router, or tunnel tail
end (endpoint or destination of the tunnel)

middle displays tunnels where system is a transit router on the tunnel remote displays tunnels where system is a transit router or egress
router (tail end)

lower displays tunnels with stacked upper tunnels


up displays tunnels that are up down displays tunnels that are down sourceAddress source address of tunnels to be displayed srcId local ID associated with source address of tunnels to be displayed, an integer from 0 to 65535 destAddress destination address of tunnels to be displayed maskLength prefix length for the destination address maskAddress address mask to be applied to the destination address longer-prefixes displays information for prefixes that are equal to or more specific than the specified prefix interface displays information for the specified interface

interfaceType interface type; see Interface Types and Specifiers in


About This Guide

show multicast group limit ERX Edge Routers

489

interfaceSpecifier particular interface; format varies according to


interface type; see Interface Types and Specifiers in About This Guide Mode(s): ipAddress displays information for next hop with this IP address brief displays only brief or summary information about the tunnels count-only displays a count for entries that match the specified conditions delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show multicast group limit


Description: Syntax: Displays the number of IGMP groups associated with a port, and if configured, the maximum number of groups that a port can accept. show multicast group limit [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show nbma arp


Description: Syntax: Displays ARP table entries for NBMA interfaces. show nbma arp [ interfaceType interfaceSpecifier ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

User Exec, Privileged Exec

show ntp associations


Description: Syntax: Displays information about NTP servers. show ntp associations [ detail ] [ filter ] Mode(s): detail provides expanded information about the ntp servers, rather than a summary filter see Filtering show Commands in About This Guide

Privileged Exec, User Exec

490

show ntp status

show ntp status


Description: Syntax: Displays the NTP configuration and status for the system. show ntp status [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec, User Exec

show nvs
Description: Syntax: Displays information about NVS. show nvs summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec, User Exec

show policy-list
Description: Syntax: Displays information on policy lists. show policy-list [ policyName [ precedence precValue [ rule ruleNumber ] ] ] [ brief ] [ filter ] Mode(s): policyName policy name to be displayed precValue policy rule precedence to be displayed ruleNumber policy rule to be displayed brief display information in a condensed format filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show ppp interface


Description: Syntax: Displays information about the PPP interface type that you specify. show ppp interface [ interfaceType interfaceSpecifier ] [ full | { dataRestriction }* [ protocolRestriction ]* ] [ state stateRestriction ] [ delta ] [ filter ] For multilinked PPP interfaces, the following options are additionally available: show ppp interface mlppp [ interfaceSpecifier ] members [ filter ] show ppp interface mlppp links [ filter ]

show ppp interface ERX Edge Routers

491

interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide full displays configuration, status, and statistics information for the interface, including information specific to LCP, IPCP, OSINLCP, MPLSNLCP, PAP, and CHAP; equivalent to specifying config status statistics dataRestriction one or more of the following keywords; you can repeat a keyword without effect

config displays information on the PPP interface configuration status displays information on the PPP interface operational status statistics displays information on the PPP interface statistics
* indicates that one or more parameters can be repeated multiple times in a list in the command line protocolRestriction one or more of the following keywords

lcp displays LCP-specific information ip displays IPCP-specific information osi displays OSINLCP-specific information mpls displays MPLSNLCP-specific information pap displays PAP-specific information chap displays CHAP-specific information
stateRestriction information is displayed only for interfaces in one of the following specified states:

open interface is administratively enabled, meaning that the no ppp


shutdown command is operational

closed interface is administratively disabled, meaning that the ppp


shutdown command is operational

up interface on which the LCP has been negotiated down interface on which the LCP has not been negotiated, the
negotiations have failed, or the connection has been ended

lower-layer-down interface that is not up and is waiting for the lower


layer to come up to initiate negotiations for LCP

not-present interface that is not present because the hardware is not


available. When the interface is in this state, no detailed information is available.

passive interface with the operational status passive tunneled tunneled PPP interfaces

492

show ppp interface

no-ip interface on which IPCP is not configured ip-open interface on which IPCP is administratively enabled, meaning
that the no ppp shutdown ip command is operational

ip-closed interface on which IPCP is administratively disabled,


meaning that the ppp shutdown ip command is operational

ip-up interface on which the IPCP has been negotiated ip-down interface on which the IPCP has not been negotiated, the
negotiations failed, or the connection has been ended

no-osi interface on which OSINLCP is not configured osi-open interface on which OSINLCP is administratively enabled,
meaning that the no ppp shutdown osi command is operational

osi-closed interface on which OSINLCP is administratively disabled,


meaning that the ppp shutdown osi command is operational

osi-up interface on which the OSINLCP has been negotiated osi-down interface on which the OSINLCP has not been negotiated,
the negotiations failed, or the connection has been ended

no-mpls interface on which MPLSNLCP is not configured mpls-open interface on which MPLSNLCP is administratively enabled,
meaning that the no ppp shutdown mpls command is operational

mpls-closed interface on which MPLSNLCP is administratively


disabled, meaning that the ppp shutdown mpls command is operational

mpls-up interface on which the MPLSNLCP has been negotiated mpls-down interface on which the MPLSNLCP has not been
negotiated, the negotiations failed, or the connection has been ended Mode(s): delta displays baselined statistics filter see Filtering show Commands in About This Guide members lists all MLPPP member links, or only those for a specified MLPPP bundle links lists the MLPPP bundles and the PPP interfaces contained within them.

User Exec, Privileged Exec

show ppp interface summary ERX Edge Routers

493

show ppp interface summary


Description: Syntax: Displays a summary of all nonmultilinked and multilinked PPP interfaces configured on the system. show ppp interface summary [ config | admin | oper ] [ filter ] Mode(s): config displays summary information about PPP configuration status admin displays summary information about PPP administration status oper displays summary information about PPP operational status filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show pppoe interface


Description: Syntax: Displays information on the PPPoE interface you specify. Use the summary keyword to display information for all configured PPPoE interfaces. show pppoe interface [ { fastEthernet | gigabitEthernet | serial | atm } interfaceSpecifier ] [ delta ] [ filter ] show pppoe interface [ summary ] [ full ] Mode(s): fastEthernet specifies an FE interface gigabitEthernet specifies a GE interface serial specifies a serial interface; however, PPPoE is not currently supported on serial interfaces atm specifies an ATM interface interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide delta displays baselined statistics filter see Filtering show Commands in About This Guide summary displays administrative and operational status of all configured PPPoE interfaces full displays configuration, status, and statistics information

User Exec, Privileged Exec

494

show pppoe subinterface

show pppoe subinterface


Description: Displays all available data for a specific PPPoE subinterface. Use the summary keyword to display information for all configured PPPoE subinterfaces. show pppoe subinterface [ { fastEthernet | gigabitEthernet | serial | atm } interfaceSpecifier ] [ delta ] [ filter ] show pppoe subinterface [ summary ] [ full ] Mode(s): fastEthernet specifies an FE interface gigabitEthernet specifies a GE interface serial specifies a serial interface; however, PPPoE is not currently supported on serial interfaces atm specifies an ATM interface interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide delta displays baselined statistics filter see Filtering show Commands in About This Guide summary displays administrative and operational status of all configured PPPoE subinterfaces full displays configuration, status, and statistics information

Syntax:

User Exec, Privileged Exec

show processes
Description: Syntax: Use to show memory or CPU resources used by system processes and to force the system to release available memory on the SRP module. show processes [ cpu | memory ] [ filter ] cpu displays CPU utilization; default display if you omit any keyword memory displays system memory used and forces the system to release available memory Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show profile ERX Edge Routers

495

show profile
Description: Displays information about a specific IP profile, such as the available PPPoE profile information: PPPoE URL string, PPPoE MOTM string, or both. If neither exists, the fields do not appear in the display. show profile profileName [ filter ] Mode(s): profileName name of the profile you want to display filter see Filtering show Commands in About This Guide

Syntax:

User Exec, Privilege Exec

show profile brief


Description: Syntax: Lists the names of all IP profiles. show profile brief [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show qos interface-hierarchy


Description: Syntax: Displays information on the systems QoS interface hierarchy. show qos-interface-hierarchy interfaceType interfaceSpecifier [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

Privileged Exec, User Exec

show qos-port-type-profile
Description: Syntax: Displays information on the QoS port-type profile for particular interface type. show qos-port-type-profile [ interfaceType ] [ filter ] interfaceType specifies one of the following interface types to be associated with the QoS port-type profile: atm, ethernet, serial, server-port filter see Filtering show Commands in About This Guide

Mode(s):

Privileged Exec, User Exec

496

show qos-profile

show qos-profile
Description: Syntax: Displays information on QoS profile(s) configured on the ERX system. show qos-profile [ qosProfileName ] [ brief | references ] [ filter ] Mode(s): qosProfileName name of the QoS profile brief display information in a condensed format references display interface profiles which reference this profile filter see Filtering show Commands in About This Guide

Privileged Exec, User Exec

show qos queue-thresholds


Description: Displays the color-based thresholds for queues on each egress slot. Displaying queue thresholds by queue-profile shows buffer memory information by queue-profile, and, within that profile, shows the thresholds for each region. Displaying queue thresholds by region organizes the buffer memory information by queue region, and, within each region, shows the buffer allocations for each queue-profile. Syntax: show qos queue-thresholds egress-slot egressSlot [ queue-profile [ queueProfileName ] | region [ regionNumber ] ] [ filter ] Mode(s): queue-thresholds displays color-based thresholds for queues on an egress-slot egress-slot displays color-based thresholds for an egress-slot queue-profile displays thresholds for each region of the queue profile queueProfileName name of the queue profile region displays egress memory or buffer region oversubscription regionNumber number identifying the egress memory or buffer region on the line card; range 0 7

Privileged Exec, User Exec

show queue-profile ERX Edge Routers

497

show queue-profile
Description: Syntax: Displays information on queue profile(s) configured on the ERX system. show queue-profile [ queueProfileName ] [ brief | references ] [ filter ] Mode(s): queueProfileName name of the queue profile brief display information in a condensed format references display QoS profiles that reference this profile filter see Filtering show Commands in About This Guide

Privileged Exec, User Exec

show radius
Description: Syntax: Displays information on RADIUS authentication and accounting servers. show radius [ authentication | accounting ] { servers | statistics [ delta ] } [ filter ] Mode(s): authentication displays authentication information only accounting displays accounting information only servers displays a list of authentication and/or accounting servers statistics displays authentication and/or accounting statistics delta displays baselined statistics filter see Filtering show Commands in About This Guide

Privileged Exec

show radius acct-session-id-format


Description: Syntax: Displays RADIUS Acct-Session-Id format used for RADIUS attribute 44, Acct-Session-Id. show radius acct-session-id-format [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show radius algorithm


Description: Syntax: Displays the RADIUS algorithm that the RADIUS servers use. show radius algorithm [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

498

show radius attributes-ignored

show radius attributes-ignored


Description: Displays whether RADIUS attribute 9, framed-ip-netmask, is accepted or ignored by the RADIUS server. See radius ignore framed-ip-netmask command. show radius attributes-ignored [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Syntax:

Privileged Exec

show radius attributes-included


Description: Display the RADIUS attributes that are included in and excluded from Access-Request, Acct-Start, and Acct-Stop messages. You configure attribute inclusion using the radius include commands. show radius attributes-included [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Syntax:

Privileged Exec

show radius calling-station-delimiter


Description: Syntax: Displays the delimiter used in RADIUS attribute 30, Calling-Station-Id, for the authenticated ATM PPP users. show radius calling-station-delimiter [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show radius calling-station-format


Description: Syntax: Displays the format of RADIUS attribute 31, Calling-Station-Id. show radius calling-station-format [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show radius dsl-port-type ERX Edge Routers

499

show radius dsl-port-type


Description: Syntax: Displays the DSL port type used in RADIUS attribute 61, NAS-Port-Type, for ATM users. show radius dsl-port-type [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show radius ethernet-port-type


Description: Syntax: Display RADIUS attribute 61, NAS-Port-Type, for Ethernet interfaces. show radius ethernet-port-type [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show radius nas-identifier


Description: Syntax: Displays the RADIUS clients value for RADIUS attribute 32, NAS-Identifier. show radius nas-identifier [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show radius nas-port-format


Description: Syntax: Displays the format used for RADIUS attribute 5, NAS-Port. show radius nas-port-format [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show radius override


Description: Displays whether the RADIUS client (LNS) uses RADIUS attribute 66, Tunnel-Client-Endpoint (LAC) IP address for RADIUS attribute 4, NAS-IP-Address. show radius override [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Syntax:

Privileged Exec

500

show radius rollover-on-reject

show radius rollover-on-reject


Description: Syntax: Displays the configuration of the rollover on reject feature. show radius rollover-on-reject [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show radius tunnel-accounting


Description: Syntax: Displays information on RADIUS accounting for L2TP tunnels. show radius tunnel-accounting [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show radius udp-checksum


Description: Syntax: Displays information on UDP checksums. show radius udp-checksum [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show radius update-source-addr


Description: Syntax: Displays the IP source address of the RADIUS client. show radius update-source-addr [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show rate-limit-profile
Description: Syntax: Displays information on rate-limit-profiles. show rate-limit-profile [ rateLimitProfileName ] [ filter ] Mode(s): rateLimitProfileName name of a rate limit profile filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show reboot-history ERX Edge Routers

501

show reboot-history
Description: Syntax: Displays information about the reboot history of the system. show reboot-history [ fileName.hty ] [ filter ] Mode(s): fileName name of a history file to display; if not specified, displays the current reboot.hty file filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show redundancy
Description: Syntax: Displays the way you configured the system for line module redundancy. show redundancy [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show reload
Description: Syntax: Displays the reload status on the router. show reload [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show route-map
Description: Syntax: Displays all the route maps or the route map you specify. The default is all route maps. show route-map [ listName ] [ filter ] Mode(s): listName specifies the route map name filter see Filtering show Commands in About This Guide

Privileged Exec

502

show rtr application

show rtr application


Description: Syntax: Displays RTR application information. show rtr application [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show rtr collection-statistics


Description: Syntax: Displays RTR collection information. show rtr collection-statistics [ rtrIndex ] [ filter ] Mode(s): rtrIndex number of the operation filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show rtr configuration


Description: Syntax: Displays the configuration for all RTR entries or for a specified entry. show rtr configuration [ rtrIndex ] [ filter ] Mode(s): rtrIndex number of the operation filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show rtr history


Description: Syntax: Displays the history collected for all RTR entries or for a specified entry. show rtr history [ rtrIndex ] [ filter ] Mode(s): rtrIndex number of the operation filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show rtr hops ERX Edge Routers

503

show rtr hops


Description: Syntax: Displays information discovered on each of the hops. show rtr hops [ rtrIndex ] [ filter ] Mode(s): rtrIndex number of the operation filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show rtr operational-state


Description: Syntax: Displays the operational state for all RTR entries or for a specified entry. show rtr operational-state [ rtrIndex ] [ filter ] Mode(s): rtrIndex number of the operation filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show running-configuration
Description: Syntax: Displays the configuration currently running on the system. Available only if the system is in Manual Commit mode. show running-configuration [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show scheduler-profile
Description: Syntax: Displays information on scheduler profile(s) configured on the ERX system. show scheduler-profile [ schedulerProfileName ] [ brief | references ] [ filter ] Mode(s): schedulerProfileName name of the scheduler profile brief displays information in a condensed format references displays QoS profiles that reference this profile filter see Filtering show Commands in About This Guide

Privileged Exec, User Exec

504

show secrets

show secrets
Description: Syntax: Displays passwords and secrets. show secrets [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show smds interface


Description: Syntax: Displays the status and statistical information of SMDS interfaces. show smds interface [ dataRestriction ] [ delta ] [ interfaceType interfaceSpecifier ] [ filter ] dataRestriction specify one of the following keywords:

full displays full status information and statistics statistics displays statistics information
Mode(s): delta displays baselined statistics interfaceType displays statistics for SMDS interface configured on the interface type, hssi or tunnel interfaceSpecifier location of the interface in the appropriate format; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

Privileged Exec

show snmp
Description: Syntax: Displays information on the status of communications between the SNMP agent and the SNMP manager. show snmp [ delta ] [ filter ] Mode(s): delta displays baselined statistics filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show snmp access ERX Edge Routers

505

show snmp access


Description: Syntax: Displays information about the groups you configured. show snmp access [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show snmp community


Description: Syntax: Displays information on configured communities. show snmp community [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show snmp interfaces


Description: Syntax: Displays the configuration of your SNMP interface tables. show snmp interfaces [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show snmp trap


Description: Syntax: Displays information on configured traps and trap destinations. show snmp trap [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show snmp user


Description: Syntax: Displays information about users. show snmp user [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

506

show snmp view

show snmp view


Description: Syntax: Displays information about the views you created. show snmp view [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show sscc info


Description: Syntax: Displays information about SDX (formerly SSC) servers and SDX client (formerly SSCC) statistics. show sscc info [ brief ] [ filter ] Mode(s): brief abbreviated display of SDX client and server information filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show sscc version


Description: Syntax: Displays the SDX client (formerly SSCC) version number. show sscc version [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show statistics tacacs


Description: Syntax: Displays TACACS+ server or TACACS+ statistics information. show statistics tacacs [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show subscribers ERX Edge Routers

507

show subscribers
Description: Syntax: Displays the authenticated PPP users. Use the summary keyword to display all PPP subscribers for each virtual router, port, or domain. show subscribers [ username userName | domain domainName | virtual-router vrName | port interfaceLocation ] [ filter ] show subscribers summary [ domain | port | virtual-router ] [ filter ] summary active PPP subscribers per virtual router userName active PPP subscriber whose names match the username; 64 character string maximum domainName active PPP subscribers whose usernames have that domain name; 64 character string maximum vrName active PPP subscribers whose interfaces are bound to a specific virtual router; 513 character string maximum port displays active PPP subscribers for the port interfaceLocation location of the port in slot/port format; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

Mode(s):

Privileged Exec

show subsystems
Description: Syntax: Displays the names of subsystem files in the current software release or in a specified release file. show subsystems [ file fileName.rel ] [ filter ] fileName name of the software release file; you can specify a file on a remote server by including the path as part of the filename; absence of a path indicates a local file filter see Filtering show Commands in About This Guide

Mode(s):

Privileged Exec

508

show tacacs

show tacacs
Description: Syntax: Displays general or detailed TACACS+ information. show tacacs [ statistics | delta ] [ filter ] Mode(s): statistics specifies TACACS+ server statistics delta displays baselined statistics filter see Filtering show Commands in About This Guide

Privileged Exec

show telnet
Description: Syntax: Mode(s): Displays telnet daemons. show telnet Privileged Exec

show terminal
Description: Syntax: Displays information about terminal configuration settings for the current terminal line. show terminal [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show timing
Description: Syntax: Displays system timing settings and operational status. show timing [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show traffic-class ERX Edge Routers

509

show traffic-class
Description: Syntax: Displays information on traffic class(es) configured on the ERX system. show traffic-class [ trafficClassName ] [ brief | references ] [ filter ] Mode(s): trafficClassName name of the traffic class brief displays information in a condensed format references displays QoS profiles that reference this profile filter see Filtering show Commands in About This Guide

Privileged Exec, User Exec

show traffic-class-group
Description: Syntax: Displays information on a traffic class group configured on the ERX system. show traffic-class-group [ trafficClassGroupName ] [ filter ] Mode(s): trafficClassGroupName name of the traffic class group filter see Filtering show Commands in About This Guide

Privileged Exec, User Exec

show tunnel-server
Description: Syntax: Displays information about the tunnels that a specific Tunnel Service module or all Tunnel Service modules support. show traffic-server slot/port [ filter ] Mode(s): slot slot in which the Tunnel Service module resides port internal port on the module to which the tunnels are assigned filter see Filtering show Commands in About This Guide

Privileged Exec

show users
Description: Syntax: Displays information about users of the vty lines. show users [ detail ] [ all ] [ filter ] Mode(s): detail displays detailed information all displays information about all lines filter see Filtering show Commands in About This Guide

Privileged Exec

510

show utilization

show utilization
Description: Displays information about the resources that the installed modules consume and forces the system to release available memory on the SRP module. Note: When you issue this command, the system releases available memory on the SRP module immediately; however, the display appears a few seconds later. Syntax: show utilization [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

Privileged Exec

show version
Description: Syntax: Displays armed and running releases for every slot in the system and also displays each modules operational status. show version [ filter ] Mode(s): filter see Filtering show Commands in About This Guide

User Exec, Privileged Exec

show virtual-router
Description: Syntax: Displays virtual routers configured on your system. show virtual-router [ routerName ] [ detail ] [ filter ] Mode(s): routerName name of the virtual router filter see Filtering show Commands in About This Guide detail displays detailed information about the virtual router

Privileged Exec

show vlan subinterfaces ERX Edge Routers

511

show vlan subinterfaces


Description: Syntax: Displays status of VLAN subinterfaces on FE and GE modules. show vlan subinterface [ { fastEthernet | gigabitEthernet } interfaceSpecifier ] [ filter ] Mode(s): fastEthernet specifies an FE interface gigabitEthernet specifies a GE interface interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide

Privileged Exec

shutdown
Description: In Controller Configuration Mode, disables CE1, CT1, CT3, E3, SONET, and T3 controllers. These controllers are disabled by default. In Interface Configuration mode, disables Ethernet interfaces, HSSI interfaces, X.21/V.35 interfaces, the HDLC layer of serial interfaces, and the SONET layer of ATM or POS interfaces. These interfaces are enabled by default. In Subinterface Configuration mode, disables ATM 1483, Ethernet, Frame Relay, PPPoE, and VLAN subinterfaces. These subinterfaces are enabled by default. The no version restarts disabled controllers, interfaces, and subinterfaces. [ no ] shutdown Controller Configuration, Interface Configuration, Subinterface Configuration

Syntax: Mode(s):

sleep
Description: Syntax: Causes the CLI to pause for a specified period of time. There is no no version. sleep sleepFor Mode(s): sleepFor number of seconds in the range 04294967295

All modes

512

slot accept

slot accept
Description: Erases from NVS the type and configuration of the previous line module in the specified slot, allows you to configure a new module. Issue this command after you have installed a different type of line module in a slot. There is no no version. slot accept slotNum Mode(s): slotNum for an ERX-700 series system, a number in the range 06; for an ERX-1400 series system, a number in the range 013

Syntax:

Global Configuration

slot disable
Description: Syntax: Disables the module installed in the specified slot. There is no no version. slot disable slotNum Mode(s): slotNum for an ERX-700 series system, a number in the range 26; for an ERX-1400 series system, a number in the range 05 or 813

Global Configuration

slot enable
Description: Syntax: Enables the module installed in the specified slot. There is no no version. slot enable slotNum Mode(s): slotNum for an ERX-700 series system, a number in the range 26; for an ERX-1400 series system, a number in the range 05 or 813

Global Configuration

slot erase
Description: Erases from NVS the type and configuration of the previous line module in the specified slot, allows you to configure a new module. Issue this command before you install a different type of line module in a slot. There is no no version. slot erase slotNum Mode(s): slotNum for an ERX-700 series system, a number in the range 06; for an ERX-1400 series system, a number in the range 013

Syntax:

Global Configuration

snmp trap ip link-status ERX Edge Routers

513

snmp trap ip link-status


Description: Syntax: Enables link status traps on an IP interface. The no version disables link status traps on an IP interface. snmp trap ip link-status no snmp trap ip Mode(s): Interface Configuration

snmp trap link-status


Description: Syntax: Mode(s): Enables processing of SNMP link status information on an interface. The no version disables the processing of SNMP link status information. [ no ] snmp trap link-status Controller Configuration, Interface Configuration

snmp-server
Description: Syntax: Mode(s): Enables the SNMP agent operation. The no version disables this operation. [ no ] snmp-server Global Configuration

514

snmp-server community

snmp-server community
Description: Configures an authorized SNMP community and associates SNMPv1/v2c communities with SNMPv3 views. The no version removes an authorized community from the list of communities. snmp-server community commString [ view viewName ] [ priv ] [ accessListName ] no snmp-server community commString Mode(s): commString name of the SNMPv1/v2c community viewName name of the SNMPv3 view priv Privileged Exec level ro (read-only); rw (read-write); admin (administrator) accessListName IP access list name to filter SNMP clients

Syntax:

Global Configuration

snmp-server contact
Description: Syntax: Sets the systems contact information. The no version clears the systems contact information. snmp-server contact text no snmp-server contact Mode(s): text string of text that describes the systems contact person

Global Configuration

snmp-server enable traps


Description: Syntax: Enables and configures global SNMP trap generation. The no version disables SNMP trap generation. [ no ] snmp-server enable traps [ trapCategory | snmp authentication ] [ trapfilters trapFilter ] trapCategory the SNMP trap category

addrPool local address pool traps atmPing ERX system proprietary ATM ping traps bgp BGP state change traps bulkstats bulkstats file full and nearly full traps cliSecurityAlert security alerts traps dvmrp DVMRP traps

snmp-server enable traps ERX Edge Routers

515

dvmrpUni ERX system proprietary DVMRP traps environment power/temperature/fan traps fileXfer file transfer status change traps inventory system inventory/status traps link SNMP linkUp/linkDown traps log system log capacity traps ntp ERX system proprietary traps ospf OSPF traps ping ping operation traps (in disman remops MIB) snmp SNMP coldstart, warmstart, link, authenticationFailure traps traceroute traceroute operation traps (in disman remops MIB)
snmp specifies the SNMP coldStart, warmStart, and authenticationFailure traps authentication specifies the SNMP authenticationFailure trap trapfilters filters traps according to severity level trapFilter minimum severity level of traps generated

alert severity level 1 critical severity level 2 debug severity level 7 emergency severity level 0 error severity level 3 informational severity level 6 notice severity level 5 warning severity level 4
Mode(s): Global Configuration

516

snmp-server host

snmp-server host
Description: Syntax: Configures the host(s) that should receive an SNMP trap. The no version removes the specified host from the list of recipients. snmp-server host ipAddress [ version ver ] securityString [ udp-port port ] [ trapCategory ]* [ trapFilters trapFilter ] no snmp-server host ipAddress ipAddress IP address of the SNMP trap recipient ver SNMP protocol version for traps sent to host: v1, v2c, or v3 securityString SNMP community string port UDP port number of SNMP trap recipient trapCategory SNMP trap category

addrPool local address pool traps atmPing ERX system proprietary ATM ping traps bgp BGP state change traps bulkstats bulkstats file full and nearly full traps cliSecurityAlert security alerts traps dvmrp DVMRP traps dvmrpUni ERX system proprietary DVMRP traps environment power/temperature/fan traps fileXfer file transfer status change traps inventory system inventory/status traps link SNMP linkUp/linkDown traps log system log capacity traps ospf OSPF traps ping ping operation traps (in disman remops MIB) radius RADIUS traps snmp SNMP coldstart, warmstart, link, authenticationFailure traps traceroute traceroute operation traps (in disman remops MIB)
trapfilters filters traps according to severity level trapFilter minimum severity level of traps sent to this host

alert severity level 1 critical severity level 2 debug severity level 7 emergency severity level 0

snmp-server interfaces compress ERX Edge Routers

517

error severity level 3 informational severity level 6 notice severity level 5 warning severity level 4
Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line

Global Configuration

snmp-server interfaces compress


Description: Removes a set of sublayers from the ifTable and the ifStackTable. You can enter this command multiple times to remove multiple interfaces. The no version negates the compression. [ no ] snmp-server interfaces compress [ interfaceLayer ]* interfaceLayer specifies the interface layer you want to remove from the ifTable and the ifStackTable. If you do not specify an interface layer, the following interface layers are removed:

Syntax:

ip ppp ethernetSubinterface hdlc pppoeInterface ipLoopback ipVirtual pppLinkInterface slepInterface/ciscoHdlc


Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line

Global Configuration

snmp-server interfaces compress-restriction


Description: Syntax: Mode(s): Excludes interfaces from the ifTable and the ifStackTable if the ifAdminStatus of the interfaces is down. The no version negates the restriction. [ no ] snmp-server interfaces compress-restriction ifAdminStatusDown Global Configuration

518

snmp-server interfaces description-format common

snmp-server interfaces description-format common


Description: Enables the conventional industry method of encoding the SNMP ifDescr and ifName objects. The no version returns the encoding method to a proprietary encoding scheme. [ no ] snmp interfaces description-format common Global Configuration

Syntax: Mode(s):

snmp-server interfaces rfc1213


Description: Specifies that the system bases numbering in the IfTable on RFC 1213. The no version restores the default value, which is to use RFC 1573 style numbering in interface tables. Caution: Reducing the value of the maxIfIndex, the maxIfNumber, or both, causes the system to automatically reboot to factory default settings. The system does not reboot to factory defaults if you: Syntax: Increase the values of maxIfIndex and/or maxIfNumber. Issue a no version of the snmp-server interfaces rfc1213 command when the system is already set up for RFC 1573 style numbering. Enter the snmp-server interfaces rfc1213 command with the same options multiple times.

snmp interfaces rfc1213 [ maxIfIndex ] [ maxIfNumber ] [ no ] snmp interfaces rfc1213 maxIfIndex maximum value of index numbers in the interface tables; range is 100524800; default is 65535 maxIfNumber maximum number of interfaces in each interface table; range is 100524800; default is 65535

Mode(s):

Global Configuration

snmp-server location
Description: Syntax: Sets information on the systems location. The no version clears this information. snmp-server location text no snmp-server location Mode(s): text string of text that describes the systems location

Global Configuration

snmp-server packetsize ERX Edge Routers

519

snmp-server packetsize
Description: Syntax: Specifies the maximum SNMP packet size in bytes. The no version restores the default value. snmp-server packetsize byteCount no snmp-server packetsize Mode(s): byteCount size of an SNMP packet (in bytes)

Global Configuration

snmp-server trap-proxy
Description: Syntax: Use to enable or disable the SNMP trap proxy. [ no ] snmp-server trap-proxy state Mode(s): trap-proxy specifies this agent as the SNMP trap proxy state enable or disable

Global Configuration

snmp-server trap-source
Description: Syntax: Specifies the interface whose IP address is the source address for SNMP traps. The no version disables this feature. snmp-server trap-source interfaceType interfaceSpecifier no snmp-server trap-source Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide

Global Configuration

520

snmp-server user

snmp-server user
Description: Syntax: Use to create and modify SNMPv3 users. The no version removes the user. snmp-server user userName group groupName [ authentication authType authKey ] [ privacy privType privKey ] no snmp-server user userName userName name of the SNMPv3 user groupName name of the group to which the user belongs

one of the three predefined groups (admin, public, or private) or a


custom group created via SNMPv3 commands authType authorization protocol required for this user

md5 HMAC-MD5-96 authorization protocol sha HMAC-SHA-96 authorization protocol


authKey SNMP user authentication key

authPassword password for the authentication procedure; use a


16-character password for HMAC-MD5-96 and a 20-character password for HMAC-SHA-96 privType privacy protocol required for this user

des CBC-DES encryption algorithm for privacy


privKey users privacy key

privPassword password for the privacy verification; use a16-character


password for CBC-DES Mode(s): Global Configuration

source-address
Description: For L2TP, specifies a source IP address for the LAC tunnel endpoint. For L2F, specifies a source IP address for the home gateway tunnel endpoint. The no version removes the source address. source-address sourceAddress no source-address Mode(s): sourceAddress address of the local tunnel endpoint (the LAC)

Syntax:

Domain Map Tunnel Configuration

speed ERX Edge Routers

521

speed
Description: When used from Line Configuration mode, sets the speed for the current and all new console sessions immediately. The no version reverts to the default value of 9600 bps. When used from Interface Configuration mode, specifies the line speed for an Ethernet interface. The no version specifies the default, automatically negotiate. This command works in conjunction with the duplex command; if you set or accept the automatically negotiate setting for either duplex mode or speed, the system negotiates both parameters with the remote device. This command is not available for the Ethernet interface on the SRP module. For console sessions: speed baudRate no speed baudRate terminal speed for the current console session. Possible values are: 2400, 4800, 9600, 14400, 19200, 28800, 38400, 57600, 115200 For Ethernet interfaces on line modules: speed speedValue no speed speedValue value of the line speed

Syntax:

automatically negotiate specifies that the system negotiates the line


speed with the remote device

10 specifies that the system uses a line speed of 10 Mbps on a


Fast Ethernet interface (not valid for GE interfaces)

100 specifies that the system uses a line speed of 100 Mbps on a
Fast Ethernet interface (not valid for GE interfaces)

1000 specifies that the system uses a line speed of 1000 Mbps on a
Gigabit Ethernet interface (not valid for FE interfaces) Mode(s): Line Configuration, Interface Configuration

522

spf-interval

spf-interval
Description: Controls the minimum interval between the shortest path first calculation for IS-IS. The no version restores the default interval of 5 seconds. If you do not specify a level, the interval applies to both level 1 and level 2. spf-interval [ level-1 | level-2 ] seconds no spf-interval [ level-1 | level-2 ] Mode(s): seconds number in the range 0120; the minimum time between SPF calculations in seconds; the default value is 5 level1 level 1 SPF level2 level 2 SPF

Syntax:

Router Configuration

split-horizon
Description: Controls the split horizon and poison reverse features for RIP remote neighbors. Split horizon is enabled by default; poison reverse routing updates are disabled by default. The no version disables the split horizon and enables poison reverse routing updates which set the metric for routes originating on the interface to infinity to explicitly advertise that the network is unreachable, reducing the possibility of routing loops. [ no ] split-horizon Remote Neighbor Configuration

Syntax: Mode(s):

srp switch
Description: Switches from the primary SRP module to the standby. This command is equivalent to the redundancy force-failover command with the srp option. There is no no version. srp switch [ [ force ] [ reason ] ] force prompts the user to confirm that the system should switch from the primary SRP module to the standby if the SRP modules are in certain states, such as writing configuration data to NVS, that could lead to loss of configuration data or corruption of NVS. reason reason for the change

Syntax:

Mode(s):

Privileged Exec

sscc address ERX Edge Routers

523

sscc address
Description: Configures the SDX client (formerly SSCC) with the IP addresses of the SDX servers and the ports on which the servers listen for activity. The no version removes the specified server (primary, secondary, or tertiary) from the list of SDX servers. [ no ] sscc { primary | secondary | tertiary } address ipAddress port portNumber Mode(s): primary primary SDX server secondary secondary SDX server tertiary tertiary SDX server ipAddress IP address of an SDX server portNumber SDX server port number on which the server listens for activity

Syntax:

Global Configuration

sscc enable
Description: Syntax: Mode(s): Enables the SDX (formerly SSC). The no version disables the feature. [ no ] sscc enable Global Configuration

sscc retryTimer
Description: Configures the delay period during which the SDX client (formerly SSCC) waits for a response from an SDX (formerly SSC) server. When the timer expires, the client submits the request to the next server and waits again for the timer to expire. The request is sent to each timer in rotation until there is a response. The no version restores the default delay period of 90 seconds. [ no ] sscc retryTimer timer Mode(s): timer time in seconds from 5 to 300

Syntax:

Global Configuration

sscc sourceAddress
Description: Syntax: Specifies a fixed source address for the TCP/COPS connection. [ no ] sscc sourceAddress ipAddress Mode(s): ipAddress the source (or local) IP address of the TCP/COPS connection

Global Configuration

524

sscc transportRouter

sscc transportRouter
Description: Syntax: Configures the router on which the TCP/COPS connection is to be established. [ no ] sscc transportRouter name Mode(s): name the transport routers name

Global Configuration

strict-priority
Description: Syntax: Mode(s): Sets strict-priority scheduling for the scheduler node. The no version deletes the strict priority setting. [ no ] strict-priority Scheduler Profile Configuration

strip-domain
Description: Use to strip the domain name from the username before sending an access-request message to the RADIUS server. The domain name is the text after the last @ character. For example, xyz.com is the domain name of the following: fred@abc.com@xyz.com. To stop stripping the domain name, use the disable keyword. The no version resets the default, disable. strip-domain { enable | disable } no strip domain Mode(s): Domain Map Configuration

Syntax:

subscriber ERX Edge Routers

525

subscriber
Description: Configures a local subscriber (when one cannot be obtained externally, as in PPP) on the ERX to support authentication and configuration from the RADIUS server. The no version negates the command. subscriber upperInterfaceType userNameUsage userName domain domainName [ passwordUsage password ] no subscriber upperInterfaceType upperInterfaceType upper interface type, bridged Ethernet or IP userNameUsage specifies how the supplied username is used for authentication purposes: as specified or postpended with the interface physical location userName RADIUS username domainName domain name passwordUsage specifies how the supplied password is used for authentication purposes: as specified or postpended with the interface physical location; password usage is optional password RADIUS password; password usage is optional

Syntax:

Mode(s):

Interface Configuration, Subinterface Configuration

526

summary-address

summary-address
Description: Syntax: Creates aggregate addresses for IS-IS or aggregates external routes at the border of the OSPF domain. The no version restores the default. ISIS: summary-address address mask [ level-1 | level-1-2 | level-2 ] [ metric ] no summary-address address mask [ level-1 | level-1-2 | level-2 ] address summary IP address designated for a range of addresses mask IP subnet mask used for the summary route level-1 redistributed routes into level 1 are summarized; when distributing routes domain wide, routes leaked from level 2 into level 1 are summarized level 1-2 summary route is applied both when redistributing routes into level 1 and level 2 IS-IS, and when routes are leaked between levels level-2 routes learned by level 1 routing are summarized into the level 2 backbone with the configured address/mask value; redistributed routes into level 2 IS-IS are also summarized metric number in the range 116777215; the default metric value; the summary uses this value when advertising the summary address. When no metric is supplied, uses the value of the lowest-cost route that this is summarizing (default)

OSPF: [ no ] summary-address address mask Mode(s): address summary address designated for a range of addresses mask IP subnet mask used for the summary route

Router Configuration

suppress-default
Description: Suppresses an IS-IS level 1-2 router from indicating that it can reach destinations outside the area, thus preventing level 1 routers from installing a default route to the level 1-2 router. The no version disables suppression of default routes. [ no ] suppress-default Router Configuration

Syntax: Mode(s):

svlan id ERX Edge Routers

527

svlan id
Description: Syntax: Specifies an S-VLAN. There is no no version. svlan id S-VlanIdValue VlanIdValue Mode(s): S-VlanIdValue S-VLAN ID number in the range of 04095, which is unique within the Ethernet interface VlanIdValue VLAN ID number in the range of 04095, which is unique within the Ethernet interface

Interface Configuration

svlan ethertype
Description: Syntax: Specifies the Ethertype of an S-VLAN. The no version removes the Ethertype. [ no ] svlan ethertype { 9100 | 9200 } Mode(s): 9100 specifies Ethertype value 0x9100 9200 specifies Ethertype value 0x9200

Interface Configuration

synchronization
Description: Syntax: Mode(s): Enables synchronization between BGP and your IGP. The no version advertises a network route without waiting for the IGP. [ no ] synchronization Address Family Configuration, Router Configuration

synchronize
Description: Syntax: Mode(s): Forces the NVS file system of the redundant SRP module to synchronize with the NVS file system of the primary SRP module. There is no no version. synchronize Privileged Exec

528

t1 bert

t1 bert
Description: Syntax: Enables bit error rate tests using the specified pattern on a T1 line on a CT3 module. The no version stops the test that is running. t1 channel bert pattern pattern interval time [ unframed ] no t1 channel bert channel T1 channel number in the range 128 pattern one of the following test patterns

0s repetitive test pattern of all zeros, 00000... 1s repetitive test pattern of all ones, 11111... 2^11 pseudorandom test pattern, 2048 bits in length 2^15 pseudorandom 0.151 test pattern, 32768 bits in length 2^20-O153 pseudorandom 0.153 test pattern, 1048575 bits in length 2^20-QRSS pseudorandom QRSS 0.151 test pattern, 1048575 bits in
length

2^23- pseudorandom 0.151 test pattern, 8388607 bits in length alt-0-1 repetitive alternating test pattern of zeros and ones,
01010101...

time interval between test patterns, ranging from 114,400 minutes


unframed the test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern only occupies T1 payload bits.

Mode(s):

Controller Configuration

t1 clock source ERX Edge Routers

529

t1 clock source
Description: Syntax: Determines which end of the T1 interface provides clocking. The no version uses the default value, line. t1 channel clock source { line | internal { module | chassis } } no t1 channel clock source channel T1 channel number in the range 128 line interface transmits data from a clock recovered from the lines receive data stream internal interface transmits data using its internal clock. You must specify one of the following for internal clocking:

module internal clock is from the line module itself chassis internal clock is from the configured system clock
Mode(s): Controller Configuration

t1 fdl
Description: Syntax: Specifies the FDL standard used by a specific T1 channel on the CT3 interface. The no version restores the default, none. t1 channel fdl { ansi | att | all | none } no t1 channel fdl [ ansi | att | all ] Mode(s): channel T1 channel number in the range 128 ansi specifies ANSI T1.403 Standard for extended superframe FDL exchange support att specifies AT&T Technical Reference 54016 for extended superframe FDL exchange support all specifies both the AT&T and ANSI mode for extended superframe FDL exchange support none removes the current FDL mode settings

Controller Configuration

530

t1 fdl carrier

t1 fdl carrier
Description: Specifies that an interface is used in the carrier environment of a T1 channel on a CT3 interface. The no version restores the default situation, in which an interface does not operate in the carrier environment. [ no ] t1 channel fdl carrier Mode(s): channel T1 channel number in the range 128

Syntax:

Controller Configuration

t1 fdl string
Description: Defines an FDL message on a T1 channel on a CT3 interface as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages. t1 channel fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue | generator generatorValue } no t1 channel fdl string { eic | fic | lic | unit | pfi | port | generator } Mode(s): channel T1 channel number in the range 128 eicValue equipment identification code; 110 characters; default is the null value licValue line identification code; 110 characters; default is the null value ficValue frame identification code; 110 characters; default is the null value unitValue unit identification code; 16 characters; default is the null value. pfiValue facility identification code to send in the FDL path message; 138 characters; default is the null value. portValue equipment port number to send in the FDL idle signal message; 138 characters; default is the null value. generatorValue generator number to send in the FDL test signal message; 138 characters; default is the null value.

Syntax:

Controller Configuration

t1 fdl transmit ERX Edge Routers

531

t1 fdl transmit
Description: Configures the system to send the specified FDL message on a T1 channel on a CT3 interface. The no version stops the system from sending the specified FDL message or all FDL messages. [ no ] t1 channel fdl transmit { path-id | idle-sIgnal | test-signal } no t1 channel fdl transmit Mode(s): channel T1 channel number in the range 128 path-id transmits a path identification message every second idle-sIgnal transmits an idle signal every 10 seconds test-signal transmits a test signal every 10 seconds

Syntax:

Controller Configuration

t1 framing
Description: Syntax: Specifies the type of framing used by a specific T1 channel on the CT3 interface. The no version uses the default value, esf. t1 channel framing { esf | sf } no t1 channel framing Mode(s): channel T1 channel number in the range 128 esf specifies extended superframe sf specifies superframe

Controller Configuration

t1 lineCoding
Description: Syntax: Specifies the type of line coding used by a specific T1 channel on the CT3. The no version uses the default value, b8zs. t1 channel lineCoding { ami | b8zs } no t1 channel lineCoding Mode(s): channel T1 channel number in the range 128 ami specifies alternate mark inversion b8zs specifies bipolar with eight-zero substitution

Controller Configuration

532

t1 loopback

t1 loopback
Description: Configures a loopback test for a T1 line on a CT3 module. The no version deactivates the loopback test; if you specify the remote keyword, the no version sends the 16-bit ESF data link code word or inband pattern to deactivate the loopback at the remote end based on the last activate request sent to the remote end. If you do not specify the remote keyword, the no version clears the local loopback configuration. t1 channel loopback [ local | network { line | payload } | remote { line { fdl { ansi | bellcore } | inband } payload [ fdl ] [ansi ] } ] no t1 channel loopback [ remote ] channel T1 channel number in the range 128 local loops the router output data back toward the router at the T1 framer and sends an alarm indication signal out toward the network. This is the default setting if you specify no optional keywords. network { line | payload } Specify the line keyword to loop the data back toward the network before the T1 framer and automatically set a local loopback at the HDLC controllers. Specify the payload keyword to loop the payload data back toward the network at the T1 framer and automatically set a local loopback at the HDLC controllers. remote line fdl ansi sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 channel, according to the ANSI T1.403 specification. remote line fdl bellcore sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 channel, according to the Bellcore TR-TSY-000312 specification. remote line inband sends a repeating 5-bit inband pattern (00001) to the remote end requesting that it enter into a network line loopback remote payload [ fdl ] [ ansi ] sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 channel. You can optionally specify fdl and ansi, but it is not necessary.

Syntax:

Mode(s):

Controller Configuration

t1 remote-loopback ERX Edge Routers

533

t1 remote-loopback
Description: Syntax: Enables the acceptance of remote loopback requests. The no version restores the default value, which is to reject remote